last executing test programs: 4m25.496114891s ago: executing program 3 (id=4): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$cgroup_pid(r2, &(0x7f0000000000), 0x1001) close(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x800, &(0x7f00000007c0)) 4m25.004359652s ago: executing program 2 (id=6): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c016}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000000)=0x600) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001080)={{0x0, 0x1000, 0x6, 0x6, 0x6, 0x3897afa300000, 0x3, 0x8, 0x0, 0x80, 0x7, 0x4fd, 0x100000001, 0x2, 0xfff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000002080)={{r7, 0x6, 0x5, 0xf, 0x5, 0x4, 0x9, 0x7fff, 0xac9, 0x6, 0x4, 0x9, 0x5, 0xb796, 0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000053418404706b28659862616371e2438b3f3f484033382711c86a997e1fff03b189ddda0aeb331a20adaab3215ca915d51915726e44840ad7dd85b4ee0c0f", @ANYRES32=r2, @ANYRES16=r6, @ANYRES8, @ANYBLOB="05003901"], 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e757fff9e855e5b33d6bc83239"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "28b1467bcc"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fd5f441711e74cedf8e660f810"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "c63bd2aca0b9b570c0"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 4m24.994894164s ago: executing program 3 (id=7): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xae, 0x3, 0x7, 0x0, 0xa, 0x7, 0xfe, 0x8, 0x10, 0x7, 0x3, 0x1, 0x0, 0x3, 0x19, 0x4, 0x81, 0x7, 0x7f, '\x00', 0x2, 0x8}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1, &(0x7f0000000900)=[{0x10, 0x11, 0x597}, {0x20, 0xff, 0x0, "38594622018f8406ec"}, {0x10, 0x102}], 0x40}}, {{&(0x7f0000000b40)=@ethernet={0x1}, 0x80, &(0x7f0000003300)=[{0x0}, {&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e4a7f086b994b09b899", 0x8b}, {&(0x7f0000000fc0)="d6385764205d32c000b4ed22e47544133441e31487e5734b9e4a0945fa03b8c27f6c3bdaf773db4793c3d31933b274c0b7b8c90b1d061f22a1e4c2ac9deab6311c09afe4f963417378b3aa1a177408bc55e62df4c50365", 0x57}, {&(0x7f0000002240)="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", 0x94e}, {&(0x7f0000003240)="603efd7a6fda12baed9c35801e33c991f17eb9aa70a72aa93fb16edbd2fbcf1c6a2a0372f4", 0x25}], 0x5}}], 0x2, 0x0) 4m24.535285761s ago: executing program 2 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xfe, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000a05000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) madvise(&(0x7f00008a0000/0x4000)=nil, 0x4000, 0x10) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$BLKFLSBUF(r8, 0x1261, 0x0) ftruncate(r0, 0x1000000) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x145) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/sockcreate\x00') r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$P9_RREAD(r10, 0x0, 0x0) 4m24.229532633s ago: executing program 3 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f0000010015000000000000000000000000000000060000", 0x44) 4m23.812386588s ago: executing program 32 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f0000010015000000000000000000000000000000060000", 0x44) 4m23.604991934s ago: executing program 2 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000ff0000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m23.312807413s ago: executing program 2 (id=15): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$cgroup_pid(r2, &(0x7f0000000000), 0x1001) close(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x800, &(0x7f00000007c0)) 4m22.676720075s ago: executing program 2 (id=19): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 4m22.013087395s ago: executing program 2 (id=20): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) writev(r0, &(0x7f0000000900)=[{&(0x7f00000005c0)="ae6ae3bf41", 0x5}], 0x1) 4m21.564773379s ago: executing program 33 (id=20): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) writev(r0, &(0x7f0000000900)=[{&(0x7f00000005c0)="ae6ae3bf41", 0x5}], 0x1) 4m10.198271152s ago: executing program 4 (id=48): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[@nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x4c72}}, @wr_crn={0x67, 0x20, {0x2, 0x479}}, @wr_crn={0x67, 0x20, {0x8, 0x5}}, @nested_load_code={0x12e, 0x76, {0x2, "41d1b501000000360f01cbf30faedc660f38818f0a590000b92c020000b8e6710000ba000000000f30c461356b0b430f019f55000000b90a030000b80b000000ba000000000f300f01f866baf80cb89025598bef66bafc0cb825000000ef"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5ff, 0x9}}, @wr_crn={0x67, 0x20, {0x3, 0xfffffffffffff000}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xbb8}}, @code={0xa, 0x5e, {"64f30f0966410f01f8c4635d18567658f3458a26430f0139f2450f013642dff00f20e035000040000f22e0660f388294670fda000048b806000000000000000f23d00f21f8353000000a0f23f8"}}, @nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x60, {"0fc77ec2b9e00100000f32b919030000b8ba0b0000ba000000000f3048b8addafa3c000000000f23d80f21f835c00000600f23f8420f0867460f01c23edfe0660f7c67068fe878a201d5470fc7702d"}}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_syzos={0x136, 0x100, {0x1, 0x7fff, [@in_dx={0x69, 0x20, {0x11bf, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4c3, 0x5, 0x2, 0x7}}, @wr_drn={0x68, 0x20, {0x7, 0xfffffffffffffff0}}, @uexit={0x0, 0x18, 0xb6}, @nested_vmresume={0x130, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x911, 0xd0, 0x8}}]}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4a4, 0x2, 0x7fff, 0x9}}, @out_dx={0x6a, 0x28, {0xe967, 0x0, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x55}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x2, 0x7a, 0xa, 0x72}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0x5aa3}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0x94aa, 0x4, 0x9}}, @nested_load_syzos={0x136, 0x175, {0x3, 0x0, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6402, 0x81, 0x0, 0x7}}, @nested_load_code={0x12e, 0x7c, {0x2, "b9341001c0b800000000ba008000000f30660f71d30066b812000f00d8c4a2a9061507000000f3450f3266f040838700000000000f01c2b9800000c00f3235000800000f30c744240000000000c74424020b970000c7442406000000000f011c240f01d1"}}, @code={0xa, 0x5a, {"c4e21903ae00000000d8cd662e660f3a0b497a0048b800000000000000000f23d80f21f835800000d00f23f88f2978e30a470f01c4660f380bc74222e0b9770800000f323e440fc719"}}, @code={0xa, 0x47, {"0f21e0c4c15f2ac40f01c846f466440f38822636660f20a2b9800000c00f3235004000000f3066400f383da0060000000f01f80f01c9"}}]}}, @set_irq_handler={0xc8, 0x20, {0xa1}}, @code={0xa, 0x71, {"c744240075000000c744240201000000ff2c2443dd1f0f20e035100000000f22e066baf80cb878a86180ef66bafc0ced430f23ab66ba6100b834ffffffef430f01cff20f79e8c423f5498c63008000000066baf80cb820bbee8eef66bafc0ced"}}], 0x6ea}) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000780)=@riscv64_sbi_fwft={0x803000000a010003, &(0x7f0000000740)=0x10}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20400820}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x200, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008001}, 0x4040) splice(r1, &(0x7f00000008c0)=0x7fffffff, r1, &(0x7f0000000900)=0x2, 0x100000001, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000940), 0x7, 0x404080) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000980)={0xb55, 0x5}) r3 = syz_open_dev$rtc(&(0x7f00000009c0), 0xe, 0x8000) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000a00)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000a40)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x28}, @void, @val={0xc, 0x99, {0x0, 0x54}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x88, r5, 0x810, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x4000085) fsetxattr$security_ima(r1, &(0x7f0000000d40), &(0x7f0000000d80)=@v1={0x2, "2a5c710d038f0d0f66b862609864a357b7a93e"}, 0x14, 0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000dc0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000e00)={0x9, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, &(0x7f0000000e40)={0x0, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x120, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f00000010c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r8) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) fsopen(&(0x7f0000001240)='proc\x00', 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r8) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000001840)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f0000001300)={0x4c4, r12, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff13}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "5f870110ccf279794510ba65abaec4ea1c4fd977a534ed16d3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_ID={0x91, 0x3, "ad998b6900d442f6317f1fd6ddead9203c7a1124d22c39cf3c8a177a13c97a3c9671050a9e301d6cda6d25039bb97d939b99ce83515db09e789959a76d56963c227b3cf3e5d0f5b292ba2fdd2bdfaf70a6e483bbd0a2082b020cc6b2566ba856a09e8398c96bd1cd49bf8c74d36ca2cea324891a5151985f7e23c48def842db3ef738e4211a6b974c468fa75a2"}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x104, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe2d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3077ed42}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc50}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9d7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "c1087485258d3c9bec532a307bf60c9a3da5069549"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2a94243e}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ea177aa38d23f95de55809a6770bce9b72e7dc2d6eb4e66b4196306ff3"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x882}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x25, 0x3, "e7a6763d9613c0de337b6812c0448aadf5ccc1c9d40d2be37e7ecca436f060c2be"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x40000}, 0xac6b93daf854ef1d) r13 = accept$inet6(0xffffffffffffffff, &(0x7f0000001880)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f00000018c0)=0x1c) setsockopt$inet6_buf(r13, 0x29, 0x1c, &(0x7f0000001900)="1434bd568793d6ff0740077eddec6cb0637cac9acb759a8bd2bce9f4a6cdb720a50fb8ab0eb947d59856b8a287503b49e7a5d8bbda0c75ff694ce1b5b521271ee7632c333609", 0x46) 4m10.066515223s ago: executing program 4 (id=49): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000b8"]) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={r4, 0x0, 0x0}) 4m9.852434343s ago: executing program 4 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00000c0004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 4m9.677105512s ago: executing program 4 (id=53): timer_create(0x2, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x79}) r13 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x22a802, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r17, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r18, 0x0, r17, 0x0, 0x10000008ebc, 0xa) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000d00)={0x0, 0x664b, 0x8, 0x3, 0x3ae, 0x0, r6}, &(0x7f0000000d80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab9e, 0x800, 0x0, 0x2ca, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc46, 0x40, 0x1, 0x152, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x466b, 0x40, 0x3, 0x56, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffb4, 0x40000, 0x1, 0x3cc}}], 0x4, &(0x7f0000002000)={0x2e, 0xebaaf8801d3a4369, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2de}, 0x0, 0x0, '\x00', {0x4, 0xd4c, 0x0, &(0x7f0000001000)=@buf_max_buf="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"}}, &(0x7f0000002080)) syz_ublk_setup_queues(r9, r4, &(0x7f00000003c0)={0x0, 0x447c, 0x1, 0x2, 0x8f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40e4, 0x2, 0x1, 0x213, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x34b2, 0x88, 0x1, 0x30e, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5821, 0x80000, 0x0, 0x129, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd24e, 0x1000, 0x1, 0x25f, 0x0, r17}}], 0x4, &(0x7f00000030c0)={0x2e, 0x5c, 0x0, r19, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, r11, '\x00', {0x1, 0x9b4, 0x0, &(0x7f00000020c0)=@buf_4k="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"}}, &(0x7f0000003140)) r20 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40941) writev(r20, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_REGISTER(r12, 0x4010aa0a, &(0x7f0000000040)={{&(0x7f0000389000/0x4000)=nil, 0x4000}, 0x1}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 4m8.949242193s ago: executing program 4 (id=55): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfeff, r1, &(0x7f00000000c0)="01", 0x24}]) 4m8.644269376s ago: executing program 4 (id=57): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x2200000000000000) 4m8.01662268s ago: executing program 34 (id=57): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x2200000000000000) 3m7.570331879s ago: executing program 5 (id=280): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x2, 0x0, 0x7, 0x1, 0x8, 0x4, 0x4, 0xc8b, 0xfffffffc, 0x3, 0xfffffff8, 0x3, 0x9, 0x4, 0x2, 0x0, 0x7, 0x4, 0xc, 0x6, 0x4, 0x6}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000012340005800c0001000000796c6f6164002400028008000340000000900800024004000000080004400000000008000140000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000001020304050607fa090a0b0c0d0e0f1011121c1d1e1f202122232425262b2c2d2e2f30313233aaed105c38493a3b3c3d3e3f4000000000"], 0x48, 0xfffffffffffffffb) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'geneve1\x00', &(0x7f0000000140)=@ethtool_cmd={0x23, 0xfff, 0x80000001, 0x0, 0x1, 0xfb, 0xf5, 0x4, 0x3d, 0x4, 0x330, 0x8, 0x1011, 0x2, 0x9, 0x7, [0xc0000000, 0x7]}}) 3m4.749816804s ago: executing program 5 (id=286): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 3m3.740853889s ago: executing program 0 (id=290): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000940)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000c00000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x2, 0x2, 0x0, 0xb, 0xfffffffe, 0x40}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d04, 0x0, 0x100001}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x400) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x8, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x40da36, 0x10, 0x2, 0x177}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000880)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x7fff, 0x1, &(0x7f0000000900), 0xfffffc01, 0x0, 0x1, {0x3}}) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r14, 0x113, 0x1, &(0x7f0000000280), &(0x7f0000000900)=0x46) r15 = syz_ublk_setup_io_uring(0x204b, &(0x7f0000000280)={0x0, 0xda3c, 0x10, 0x2, 0x32e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r16, r17, r18, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64}) syz_ublk_add_dev(r15, r16, r17, r18, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r19, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r20, @ANYBLOB="100027bd7000fcdbdf252100000009001f0070687932000000000a0001007770616e3000000005002000000000000c0005000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x24040804) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f00000003c0)={0x2e, 0x5f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3m2.932933329s ago: executing program 6 (id=294): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) waitid(0x0, r0, &(0x7f0000000200), 0x8, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x4003, 0xff, 0xc, 0x4, 0x0, 0x7f, 0x1}, 0xc) listen(r2, 0xb) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x40303, 0x41) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r4, 0x4b65, 0x1) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x405a53bd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}}) ioctl$BLKRRPART(r1, 0x125f, 0x0) 3m2.383472383s ago: executing program 0 (id=295): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc3, 0x111000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000640)=""/4096) ptrace$poke(0x4, r0, &(0x7f0000000000), 0xcf) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) capset(&(0x7f0000000040)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 3m1.473341577s ago: executing program 6 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x299}]}) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r3, 0x2000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000aa40), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f000000ab40)={0x0, 0x0, &(0x7f000000ab00)={&(0x7f0000000080)={0x3c, r5, 0x928d46e1eee28e63, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc014}, 0x4000) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)) 3m1.078812921s ago: executing program 5 (id=298): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2142, 0xc0) acct(&(0x7f0000000100)='./file1\x00') acct(&(0x7f0000000040)='./file1\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) fallocate(r1, 0x1, 0x3, 0x8) write(r0, &(0x7f00000000c0)="8f2a", 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/1, 0x1, 0x4) 2m59.937087315s ago: executing program 6 (id=299): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x3, 0x16bf691d, 0x1, 0x0}, &(0x7f0000000040)=0x10) close(r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac2(r3, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xde, {0xde, 0x9, "db8034e3c4ba155f09c6493f770987a855cdf3b28552b0303a61ba31d209f066473918840fe7f1b154153d4020bbd8ad628aa5cc692756792d8fac38c1f9e3e327b37e0f3caa366f2d2b178131dbee3a3c824f8c4e8f28a824c8a0295f3de1970f54540e84fa3bd2b70f318864c87569184bac52b3eb9912627ec1213a196e156842f6ad7ab9ac02c6aebed0d0bab2fa33a5e7fc689b23a6c8f6d58ac1fe48cbdcdf3a8f1e131bfa5bca428290155dd6a625c20c7e397207b34af0858fd06d5e1a1d45faf678d32107c3f5753dc3a9f1b2c7c89d1e2716ded204a243"}}, &(0x7f00000002c0)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "000cf5e5ab1717a31b8850d96f1b2c58530230654d30f627cc9f21e7acaae6e7d573cf3dd71935d6387c7da031f8588c5026f0c1c13bff6129cc1a17c2041ad7378af254484d868afd4db81b59c0224920031dcf8dbaee11aba20ab0c2a0c9f9e22b3cb443fc2e68661e1cb5c0f5870fa8282edf95e2b7be1cb7c6156e90e254c2f18157b0530083da38c23d048a361d912e2f7dfec12ded4cdf391f204f"}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x0, 0x3, 0xc9, "3dbe54e666d0a218b89e9b6f7636e7c585e57d1c3f932ec458dd4b7aae6c3b636ededd6bbe2cb13de584e6e6556ff13a588a9f200f095a97dc1b44831089bb085b96967897a44ae0f10c2917dbc586d691f4b1ac90ed50313877d7ab065d00fa2b5050223313b18d74e48023a74b17548b92a498fc243398d47cf73ee415791e12553fca4b45be89dcb66b4e4b4c2cf938830c8b710d1964371529501c25270714820f5d9567ebbbc5760687bb301cf2cf339166a6f2beed8705b0a781c0246da5ccb96ce3c153748a"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x81, 0x1, "ed"}, &(0x7f0000000580)={0x20, 0x82, 0x3, '~\a\\'}, &(0x7f00000005c0)={0x20, 0x83, 0x1, "e6"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "d408e0"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "0bcc2d"}}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0x8072, 0x4, 0x3ff, 0x8, 0x7f}, &(0x7f00000000c0)=0x14) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2m59.63842962s ago: executing program 0 (id=301): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224000100001010090459e102ff063d000906960765f0da4301000000cbbf40000000000000000000000000b00222be45545b99054614219032d08b8beb0e29b2224a5bec80afdfcc7f5902b4b9597d32c52ee7324bafa73b76f3638608a5011483d095bd492c411c114a705f769b0882249c6e0fa7bfdcbc70cb027659b6bb6704d9ce961d7f398f17b636301974435053d843c7dd9406a8a4f04eafc079b29c6017"], 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={0x0, 0x6}) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000a98000/0x400000)=nil) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xb, 0x0, 0x7, 0x1, 0x11, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x80a0000, 0xeeeb8000, 0xa, 0x7, 0x0, 0x9, 0x4, 0x14, 0x0, 0x38, 0xa, 0x3}, {0x70000, 0x2000, 0xb, 0xc, 0x26, 0x8, 0x81, 0x3, 0x80, 0x9, 0x1, 0x70}, {0xdddd0000, 0x5000, 0xc, 0xfe, 0x6, 0x5, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0x80a0000, 0x10, 0xff, 0xf, 0x8, 0x9, 0x8, 0x6, 0x6, 0x28, 0xfc}, {0x4, 0x10000, 0xa, 0xb9, 0x3, 0x6, 0x42, 0x7, 0xb0, 0x1, 0xfa, 0x10}, {0x100000, 0xfec00000, 0xe, 0x5, 0xc, 0x8, 0x2, 0x0, 0xe4, 0x1, 0x17, 0x5}, {0x1, 0x4000, 0x0, 0x2, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x54000, 0x5}, {0xeeee0000, 0x4}, 0x60000000, 0x0, 0xf000, 0x200, 0x2, 0x901, 0xeeee0c00, [0x1, 0x1003, 0xd, 0x9]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[@wrmsr={0x65, 0x20, {0x40000023, 0xda71}}], 0x20}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x48, 0x0, 0xe2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x1, 0x5, 0x1, 0xff, 0x5}, 0x3c, &(0x7f0000000480)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x2, 0xf00f, 0x7, [0x3f00, 0x0, 0x30, 0xf, 0xc0, 0x3f30]}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0xd9, 0x780, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x3, 0x40}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x411}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b17000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r7, 0x800454e0, 0x110c27007a) syz_kvm_add_vcpu$x86(r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000280)={0x9}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(r9, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x8000, 0xf7, 0x1, 0x1, 0xfb, 0x7, 0x7, 0x1, 0xa6, 0x9, 0x1, 0x7fffffffffffffff}, {0xa, 0x3, 0x2, 0x9, 0x4, 0x2, 0xe, 0x5, 0x5, 0x4, 0x8, 0x2}, {0xffffffff, 0x9, 0x6, 0x5, 0x0, 0x0, 0x6, 0x4, 0x8, 0x2, 0x2, 0xf, 0xfffffffeffffffff}], 0x7b}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) 2m59.525466417s ago: executing program 5 (id=302): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='stack\x00') pread64(r2, &(0x7f0000000440)=""/59, 0x3b, 0x40000000009) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x46}, 0x6}], 0x1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000e0000000000000008000000200002801c000380180001800a000200766c616e300000000800010006000000180001801400020073797a5f74756e000000000000000400"], 0x4c}}, 0x10004000) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000140)={0x7, "21a50716ca6fceb02dcf9d18052be51e251cf0421a583745d048023943b5c2e0", 0x1, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x244, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x355, 0xe1, 0x6, 0xfc000004, 0x40403, 0xbbf, 0x3, 0x0, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x4, 0x2, 0x2, 0x7, 0x489, 0x20, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x80000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x92cee5b, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x4, 0xf1, 0x7, 0xbc74, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x8, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x2, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0x99, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x8, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10003, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001005, 0x10000001, 0xa, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8f6, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0xd]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 2m58.079782992s ago: executing program 5 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, 0x2}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005"], 0xfce) 2m57.864799717s ago: executing program 6 (id=309): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x104) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x83, {{0xa, 0x4e20, 0xd28e, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfdfffdff}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000092c000480280001800b0001006f626a7265660000180002800900020073797a3000000000080001400000000f0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x502c4c30}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff433b}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d91}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x522}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x717}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1400000}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4050080}, 0x20000040) 2m57.588025766s ago: executing program 6 (id=311): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x1001) close(r0) 2m57.120995235s ago: executing program 1 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0xffffffff, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m57.005026501s ago: executing program 0 (id=313): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000003e1b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be2507000000fdfd0000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 2m56.885169288s ago: executing program 1 (id=314): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x7fffffff, 0x8, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffd, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x8007fff, 0x8, 0x3, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x3e, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) (async) getdents64(r3, 0x0, 0x0) 2m56.664434599s ago: executing program 0 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0xf, 0x9a05, 0x21, @remote, @empty, 0x10, 0x7800, 0xff, 0xfffffffd}}) r5 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="01154e00010000112233445588fb00010001160c8cc047e1e94b530d1d7f21601ff6", 0x22, 0x0, &(0x7f0000000040)={0x11, 0x4, r6, 0x0, 0xff, 0x0}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x18, r9, 0x1, 0x81}, 0x14) r10 = socket(0x11, 0x3, 0x0) setsockopt(r10, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg(r10, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r11, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f000000088fb", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0xca3, 0x7, {{0xe, 0x4, 0x1, 0x2a, 0x38, 0x67, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x76, [@remote, @local, @private=0xa010101, @local, @local, @rand_addr=0x64010100, @loopback]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r14, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r16, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000d40)={&(0x7f0000000040), 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x234, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x1}, 0xc0104) sendmsg$inet(r14, &(0x7f0000002000)={&(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000840)="6046de525961e09190b516fef70e0e0e852a44ff299cd586fd9b5a8ca1ca127d986f6de5c8a5e8f1fb79b7caf196e31e2af3adb68b41295e0a9630d827c67aab397ec0e8c47287870c82ad1166a9029e817ce2f7100837f752636090a43edb6f0963eb10044750137fc0b85d80871e80ee93e19cc7ec675142961f60220e3d68d44d9cfb773a5f045b68efda5be272b6eef5da62d766850a48ee97c2e902bbdd78b771da3456dea9269db0a4727c850368f2999aae2697cb35a7f093fed18e290e9366b5a605a3e716791dde3c9947bed155a34124353263e1ccdd3b57d971743398abd0", 0xe4}, {&(0x7f0000000940)="beb234bfbeecee0edead253b7c37547f8b397c713d747938153ad0c8813bd5b954e5b7658dc6ef9db1706b83aef4e05e76d0f059c040cd12cfcbb219a4695341f62095226eac463fde17ae6f7ca5db083e55ef9884d425d9998c517558b5e7ff171ea999f14e0206291ef202edbded888e1a8a6e9668404d50dde452ad52973b7adbd7ed2579ef48823e73a434367af4ae2460a0bf83054be7744143a9b2d50a7895ce4e3781832f92ae89e68af336a24ecd578f5e69aaa440fef06e05484e4480769f237270bb388bcb00f9d6db57ef24f878547c2755b8662802230f2e858919490c0ff35ede77", 0xe8}, {&(0x7f0000000d80)="0108a4e95f38681e300cb08374c7954cedfb2a4a4b605b5d5169f4a87918e21eb5c78e6cde8f850701a05cfe0d1ddd9d5c515f43a6be82e5fe21b2096ec225c23fa601d1c278b65094c4c32da62b6de6243dff91fa094685f0a9a8103198654612ef1582a91894edc5a5bef05df89aac1d28fcb66ebaa130f9a73eeed63a5e16fc1370c1fc26b320feaa264de66670", 0x8f}, {&(0x7f0000000e40)="4e9e7e1844318866a5774ed27b21e47c4a271d381536638eef8c6de0f1ab596cda1e6cef27db2b9156672375db22f8ceebdc33140ec5a675fdfb2f69116e72aafd7abdafd17b68f5086b4926bde0e87f0e7f4696e3d72fc8b14b2a", 0x5b}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="3047d836c997c6ed58c835c13a602f610ed6e9d52f35f8dfed4b4f4bebe69b002b7fb985869f3b559449582b321e8468b72b584ce873aad14fb7d3593f9015f69e6b40ce3b1afd1981d9b7d88edab77e7d2b72f696989019b88ab9ac", 0x5c}], 0x6, &(0x7f0000001fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x20000845) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, r1, 0x4, 0x50bd25, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x201f}]}, 0x4c}}, 0x0) 2m56.619613254s ago: executing program 1 (id=316): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390006001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m56.534319948s ago: executing program 6 (id=317): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000140)=0x10, 0x180000) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @multicast2, @broadcast}, &(0x7f00000000c0)=0xc) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x5, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m56.433319933s ago: executing program 1 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0xfffffff5}}, 0x64}}, 0x0) 2m56.086754038s ago: executing program 1 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb393) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0}, 0xd4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) landlock_restrict_self(r1, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(r3, 0x1) connect$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r8, 0x4068aea3, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r9 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r9, &(0x7f0000000380), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230a26bd7000fbdbdf253100000008000300", @ANYRES32=r7, @ANYBLOB="0ec6a900", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 2m55.937199271s ago: executing program 0 (id=320): clock_settime(0x17, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m55.873949101s ago: executing program 5 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x10b, 0x0, 0x0, {0x4, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44440}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0, 0x84}, 0x1, 0x41020000, 0x0, 0x40091}, 0x40) 2m40.12323531s ago: executing program 1 (id=322): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="81bbd3ebd936010000000000000000001b0000000700310061610000"], 0x1c}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x3, 0x6, {0xffffffffffffffff}, {0x0}, 0x100, 0x8}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private2, 0x4e24, 0x0, 0x4e20, 0xff, 0xa, 0x80, 0x80, 0x3b, r5, r6}, {0x40, 0x2, 0x6, 0xfffffffffffffffb, 0x1, 0x3, 0x8, 0x5}, {0x3d8, 0x100000001, 0x7e, 0x8}, 0x400, 0x6e6bbf, 0x1, 0x1, 0x3, 0x2}, {{@in=@remote, 0x4d4, 0x2b}, 0x2, @in=@broadcast, 0x3500, 0x1, 0x0, 0xc7, 0x51f, 0x0, 0x5}}, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04000000000000000020d706000000080003dba87149a2c5e7d4ae81979c30d88daf50bd92fa8f1e5f85050e2919f384036fdb85e8b2c7a3c20fc229a6869488dd60931069f52922400cd21382ccc00e144ac05d8357fbb4c634c6fb8a7f1de201686c7e02d458e6a0536295dc56502f3a96ae730ba90cebc93cfffae8d70b", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="28000e0080000000ffffffffffff000000000000080211000000000000000000000000006400010006000f00d4000000080026006c09000008002201f40100000a003400020202020202000008000d000200000008000c0064000000"], 0x78}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf251100000008000300", @ANYRES32=r7, @ANYBLOB="06001201ff0300000a00060008021100000000000500e4000000000006001000570200000410ac00563ed055341bf2bcded68500c388ab7f03bc32e96c0f5d897b307b927055b0fee71d43bcadb80decfce41f826475b3571c52052a72f26302ebb58880386f599aa9d6fe1c653e17e6791718c220d3551dc36cc1f4c9c112e0e334e00955ba1d1ff89c34f0dee648a3312170ceb339801dc896525995d6bf443001d441bb673f5691aa32bbee602cfbbf938dae610a51052690a4ca0b710ff6abc201b3a925e17262e5da46d7027a0dd71537109e88746b148b2e7ecbe790d40871129f481da83205917aec774b24dff554921d9d260aaefc1d5a10555b4a6aa7221f8bb13a9d82e2b72effea10b8fdba3df7d26525d28c7ff4e8085db967438f1b797f19beb70cbc49640ff2fa872266120ec9d01a88a8165efd25031d5946ea1df8ca06c0ae358a24eba5c19d1442ca2365fda79df31a57e3ca757515d4ba60d167b643b0824828e0bad0451c74b6d186f76700db6f6e72c82fa3eb0a9d8575f74699bb8dee89577d8f9507f87ba35cb437bbb3f0002c298c238fdbf08088cb2329db895d22e82ddf764996d32eedc895bbe7078326259728127f9b1c11447c2c7f780e405d76a92699503a1b7690af9789fb1d1c0915d036e2e947bebbbab88b7153e211a8a7c1a15e132848d4391aeae622baefd37f1216d8ca287241b53181cdb7749d9cb5affdfb3c66ab90608947a5e728d446376d7c83b1b320f253981382245d9710f7128b1328dc8b9d4eca1ea49d5319596a3dff56daa26d7310b5701d270c9a9117784e1d72599766d805c39d783cbe55c0207f4a49873f6935e650162088f3c9af4595efe001f93338094e2dccfc734def4994fd93235d81345eba7b10e6466dc6ac421d64bfdec77b5cfbf70a21670df1458967fca46481f6d4d746a81163efe84a6c48d048e9dc7c6deaa68e513db53e3b3209e93bf9d619a35115f456601ecffc964478bdb2028b5c94ef9f4c645e20e36b1a63114dfc5ac490a1dfb53b3c01b10427c0d09061eddc285a248c622e713e14faf3eae88c053bee2ba18af945642a45d1c72a556d0048be2f2ec2c5a2c34654c707ae76a23c238bfa4f0d0947a81d47c35ab42e2ec969cf2421add10324834009de106d5fa5c0dcbeecbbfc4b5ffbb7eccd26c64c6965478ebb4e17488d35d35f72cda4020efa254f4fb3d94138774e7f345a3f3d2472de237c465b7f48a42d9e4d9a683dc35383ce478ab4800a38ada4f08dab80e7466d834b2b6eef8325aa6820821924b19954c5fdcbcf9c9815302f2999b9a64c1a39d5ee46047e46cc14e2bee61da43c4ed5a1e93ed485dd1ff6034f06b0afa7a09bb916cfc6cf90972c3a30825a387882a32dab2d3aedb59e7300215b8df0580efc4c54cfb668658ed49402b150192d110504e482ae4b5b51b55d91c718d5559af7d63324b01fdd8d3cc46de33c9ae92dc8373e6e1f3c4ce9dfa40222250652d4ac86186b161e17df00310a196fe8e755da2206325679c4c6e1543227e5a77a90a6ff79dc8e7b5e75d482153f687c7eea32ff0258ebcdf78a3110c61e5e048b55a00d7724fa11aeb4fb0032554c93d538f5028013565292d4b7557bd837b708e2f8202160e41fbd098f88465d01bc3658649590e5bc8667d2421cc2b7e8f22a7537cd02bc208fbc17607ab66803ee8c9d305a5ee10fb4c3dcbbf5e3b81955ad8b7ca19e5d8bc3cf721c8927ad87e40e621bab9f5c3d8c7cd3b590fa0e4ad6947479ae4e123a2c333f066fa585dd83c53055a55db7be9eb2d1d6a5ddec8dcd8718b794562137ed868e5b9e988a9e3279a7b0eb2c9443801c74d2b58220e6c7f77d1c6883a2cd4020b70342b64f1f7fcbe2758c3b53a718d01c06c1019b7b5dc510afffaf6861c7b7d8c1d53f1ab4eae269bb47897321f3a5a3479bad6bac69c53c1a60c2c8fbae134b5138be3cc09a281650ef1a806ba22ff57755b4618416fca55c17b051167bd6d3dd9666e838dd77e5a0e5dc1eac441b75f65daf0caa6b217de61fe3a82e4abb3b31b5e966baf6ec50c48780dbfd58070b9795d5f6a627616ac1aca0b9615858f07a09904cf5dda93159c32c52dd95fc7d160d17d22d6f2a7ce566d70e4cc0b1263cd5121333fb70e83a77791eafd241646f2f095e2b2a9efe0543eb6235056ac7b3958cfa90ca1c5cb9a0d22aa7150c7d91aaa4493a45d21460c6bbf263d31848af0237dc585f4a9babc895be9083df93b8249e433f778dc72fc95cf1bb0ca6a5b1087252b4a96ecb1493825eb3bc186d36529d58f00985d93fef6c3a93ff80e267b47fe90596978d7458cfe1054797f3f0545ae443126ed59d685a319f83822f26826f244a6b6bd7c7624a06cbda41b8280fbd4b90b36d1ee419c16a990ab9eff70c9c17892856537de978ce7526d5ec4bf8d3486b454b8c5d3bab7aedab0c020ccaea21897c5f576d42c0f70cf42c1046f6e2c703fdbfa1527b2411719b9f8b055c6b188e63c88f11764c9494b392f443fe8dfa055e70a8b63c3399ae6beaa2de25980c4db8c7ce596325fb17f9e126bd974da6503e5599fe58fe5dee76872906b8572c2d48a8eec00023f87fe0a7cdd8a91082b3ecd3c449fadad0eac3c2e5035eaa7cc705a7e26d8d811a906ede7d4b8ef400203bc1255f6ab5b94c3a4b730ccfdc3b8a69b135c46c84b0baaf735297e9d565b1fd14b3f5f8fb9c2225ff9a36a6a37a630ef5e461d8bc014970a088f1281dea810f7b1ad677caabce82b3028d672a7136721c29666e8ce35e3fad008aa47749814e6570b43fb1737c887127250a3493e2935c9c7b77bc171d1ca18458c12b6f378621bb6e1e94d672e2c709a6acde1aa57be25f872e99d0558c1096e9b5691684afe1aeaff51e7bde50efc4a92d6447f1f2ae342f371830f2b5778237b41c3e34af23887bf91d865370e95c304de34283fa6faf5c2aaadcf3eaf39d371e8a849b58c58e55970e6fb93107e3a2ebbd447d23d50e3bc31889a32c2831140cbdd5a66503ad2659efb720fb359212d78985ca3d987bc631955cce58b7dc1db01817815d7e12fc805ee883d2f72354cfc62dc4fb98bf7c8bb68b1f01b9b8bfd4eae2f1f1d625adbdca770eef155191637ad293efdb90ae58d57e68e6f0e9552bbf1a7bbb4c5c18d3a820e2de2114b5098e7de018dcd9c98421b6bb147b627b80ee77a65168f904d5a85c9ba04cc706c7e575daa25de81eb8245fb1b49bf01963f86fcd1299c779489933db0e7b08a285ccf23eda035f9827c394a1b33d3abc7c75d08d3d7f0b6fdbb206dcffb7844c22d5a6ba930690ca3bf12a7a7f802f521214e740429bc12b803b1c779376f9faa23719e863e8d604a22ba3234b254ae130e5c2a2eecb8b4a6f5dc6f58ece0757ad190a8e6d345c114b5407b00122f3295f7dd9c320d696d3c48f83d35682be9475dd4660294c3e121f78ddc82aa0d0cc6551791a98bfe2b9565ca04fe2e6bc166950b2e799d443b22fd85ae6ed6d61df86639b0e55143afb641221b8b35afcb832664a842cf111c89d8363cf5631b9fe8a6f3f7af4ccd2d1c42043dcbaaeb1081efa52869c35cad2c0d7f2cc3b283df024b2678556bd3460e963f2e164b7295744d52fe1ea3cff35062bf772880f06ad19cf4e41a44ab79e499b401d12da6244f1105763ead9fa832cf2cf227d830f4577910d2cdc4f74ae5e12640d428926dc312dba6223a222f0c55191a888295fae63b9bbc8ca1297cb231d0af31210cf774678d7b55122fbc2639f4f7b6d1005bb74ec4dbab1f6b0562fd2a7779a5e52400da201d332d032c17ea0836ec7f3b9dc1efa789e25b7a1d5208f320ecf0e43bb89aacf9defa6fba5d2e0ffcc7714fbc9d33ef717eb47fa9ca1e6f8561c7f7f38680b2dd8a6d0db6c90c1e17a6f8f78add049e8a8023eed9127850636c7798689c4b8343b12b4485e884f404495726d86f300ec435cc1e3879c38e6e2e28cb9a16bf6465760e66c8c3567ccd9d24d0c54175e50ea2e4655d3de260ed6949dc5103b96b0661e7e143bbf005655997455e23269b7a9cce3ded02c888d6f6f4589d62bec6baf8ac56d2dd3bdc318a832a38ad4a0faccfcea1c6b89f82c9f2490cbe57b56f795cc2aaabe8fb7bebd314dcc4cec160614345c92d674697c4e33f15c27901aa6e1c041c1ec47594c27f7c9b06455f4e2436ff4fbb3fd9a1716e4c1ed5c1337e3db86fbbc4301c3b37e3419ef73a14c4dbd697bf16a0399d58d9b7e6ca9e2decd644c485846f0a996fa780fa8dfb642ce4eae3da49ffc139437fc2d23ed8a17a912f440500d0a044d31d69745ecda3ed2ccfbf56e9fba289f232b5188d6d7a5e885189f731260f71ed34f436c3f0406049b6b9be1d09f57207f33ce063fbb61e27ddc3f0ff25641f665074d9c507f7a11a432f050d85c02dc10034b7d73dc84ef53de96b69ea81e54c998ad35ad899272c26dbe255791c69f28d0d18ae7600481e509fc202297816bb5af2b3ee5b5ca989ce084c8f459d0d5d1989391be5c447af0ed2fe0bec9448cfad24236d4b89d47833035f020feac678fb01ea6e1910f5606e692e4c1048e43a03f44705115cf00adee1ec7df610bb7c68e039136ec78019ee0643e550a5315439ea039e19530987e5bfd9f881898203058ca4fb581b716001ee1fe22407f815c2bb60a42e702b5ceca9616719c3c131d3f1952cf96aadbc273f69b407fbaf51638271b5c15cebdd4cd133c15f8594d3a52ce7cd44a32deab6c4708719180d1900fac7bd788a30ae4bccad036775c77bdde8dd66008b4b524587b4ed8289d47718371d17074c8c84b14c11e52d78f003656524ea1a4cfe9d2a8d94b5abe5d9f7176dd26a146b0efb02c5ecffe49a557ff52753c797c6530b61af4bf88f4b0256e46ed75c42714ed46d4cb000c4657b4fc3f5b1962c1244dd1489e63c4dec2c50fc254a97b818cdc53f002fe6eba312e68310b2aeba70d64cdd798dc56971fc9e9135b4f7e4cf28c36fb723bb3bf87a14834fac7cafb3c1159c01de9e7e165bf18fa082fa4aa64fb86f51a94fbbc5896661d18131d7acade3cca86d9173550ba48362f8cf41be367453e65619eda55489095a5d0fd3ae333091d26592cbe8f53c649fbae321718808de811e6048426b8cebd329a06ee32b6fe250dd7db3bc58e4d542479b19fdb80b119c61a0800c7c172c30c48a9165d4ee1ea87d37f4af5624f7ac29152a7a86b556d8aa9eab1deddd3407c1ce103282ecbef3b50253f3f0a5e4defc5bcf48d0a63a66acc1c8bd1c129b9c46152491667ccdd8a6aa82b9b204da97509a2f433e6bb906df5f48a7eea95e14c3b097f0372e54f102595ef26e6dd936ff0e0b53faa4451a08d36266cf1617ca419acc3c6e27a65db3104f84b81748a6bce806843bf428eb13ee89349f57037a1eac1b3006be118d9db998900f8d5aa8d6a29ed7b78cd5a91663b23ed16484bc865796c1c8247a97cbb6cf1ef98e630ce86652ed3618f07bcae72c4dec0ac9098b130ea2d199f6ee63327840682e385c8758108a40080943b7e74174fe2ce67a7f3105b7a9df4a7b40799c3f6def99ade685e77d3311bf4269cccd89830b51ef697dc858653d89c75fb3b6b836eec7fbb53a4850d0dea95c072c782b7fce9ec244fce70aab163def543f5bad242449a8b34d61a11617b8dfbdd41382cd2769ff716ad72de058f94dbc8b45129f0607207ee81ba6eb39e431e0f6e3a46253953d0e86c45e6f6c439102982e64cdb374ff26840c0b10db74565e8785bad47c0cfa3cd90a5b61407e0f1751dab5858b7c4e0"], 0x1044}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2m9.999732312s ago: executing program 35 (id=320): clock_settime(0x17, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 36 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x10b, 0x0, 0x0, {0x4, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44440}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0, 0x84}, 0x1, 0x41020000, 0x0, 0x40091}, 0x40) kernel console output (not intermixed with test programs): _node_range_noprof+0x340/0x1690 [ 105.477286][ T6106] __alloc_pages_noprof+0x10/0x100 [ 105.477323][ T6106] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 105.477367][ T6106] ? alloc_pages_noprof+0x140/0x2b0 [ 105.477398][ T6106] __kasan_populate_vmalloc+0xb7/0x1c0 [ 105.477439][ T6106] alloc_vmap_area+0xd10/0x1410 [ 105.477483][ T6106] ? __pfx_alloc_vmap_area+0x10/0x10 [ 105.477508][ T6106] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 105.477543][ T6106] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 105.477577][ T6106] ? __get_vm_area_node+0x155/0x2f0 [ 105.477611][ T6106] __get_vm_area_node+0x200/0x2f0 [ 105.477648][ T6106] __vmalloc_node_range_noprof+0x340/0x1690 [ 105.477681][ T6106] ? copy_process+0x81b/0x43e0 [ 105.477751][ T6106] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.477784][ T6106] ? dup_task_struct+0x52/0xa00 [ 105.477808][ T6106] ? trace_kmem_cache_alloc+0x29/0xe0 [ 105.477841][ T6106] ? memcpy_and_pad+0x48/0x80 [ 105.477881][ T6106] __vmalloc_node_noprof+0xc2/0x100 [ 105.477911][ T6106] ? copy_process+0x81b/0x43e0 [ 105.477934][ T6106] ? copy_process+0x81b/0x43e0 [ 105.477963][ T6106] dup_task_struct+0x2c6/0xa00 [ 105.477997][ T6106] copy_process+0x81b/0x43e0 [ 105.478032][ T6106] ? __pfx___futex_wait+0x10/0x10 [ 105.478075][ T6106] ? try_to_wake_up+0x8c5/0x14d0 [ 105.478100][ T6106] ? __pfx_copy_process+0x10/0x10 [ 105.478139][ T6106] kernel_clone+0x2d7/0x940 [ 105.478173][ T6106] ? __pfx_kernel_clone+0x10/0x10 [ 105.478210][ T6106] ? do_futex+0x3e7/0x4e0 [ 105.478240][ T6106] __x64_sys_clone+0x1b6/0x230 [ 105.478275][ T6106] ? __pfx___x64_sys_clone+0x10/0x10 [ 105.478317][ T6106] ? rcu_is_watching+0x16/0xb0 [ 105.478353][ T6106] do_syscall_64+0x166/0x520 [ 105.478376][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.478401][ T6106] ? clear_bhb_loop+0x70/0xc0 [ 105.478431][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.478454][ T6106] RIP: 0033:0x7f2aa319e159 [ 105.478475][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.478493][ T6106] RSP: 002b:00007f2aa4052fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 105.478518][ T6106] RAX: ffffffffffffffda RBX: 00007f2aa3425fa0 RCX: 00007f2aa319e159 [ 105.478536][ T6106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 105.478550][ T6106] RBP: 00007f2aa323503b R08: 0000000000000000 R09: 0000000000000000 [ 105.478565][ T6106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.478579][ T6106] R13: 00007f2aa3426038 R14: 00007f2aa3425fa0 R15: 00007ffc29e65508 [ 105.478613][ T6106] [ 105.557730][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 105.722645][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.785336][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 105.823352][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 105.920397][ T25] usb 6-1: New USB device found, idVendor=5bb7, idProduct=e26e, bcdDevice=24.f1 [ 105.920471][ T25] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 105.945511][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 105.945556][ T25] usb 6-1: can't read configurations, error -61 [ 106.003048][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 106.044964][ T5605] usb 2-1: USB disconnect, device number 10 [ 106.072230][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.135780][ T5605] appletouch 2-1:0.85: input: appletouch disconnected [ 106.244665][ T25] usb 6-1: New USB device found, idVendor=5bb7, idProduct=e26e, bcdDevice=24.f1 [ 106.244713][ T25] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 106.251875][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 106.251977][ T25] usb 6-1: can't read configurations, error -61 [ 106.258108][ T25] usb usb6-port1: attempt power cycle [ 106.422871][ T5700] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 106.506399][ T1050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.576231][ T5700] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.580486][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.580516][ T5700] usb 1-1: Product: syz [ 106.580532][ T5700] usb 1-1: Manufacturer: syz [ 106.580548][ T5700] usb 1-1: SerialNumber: syz [ 106.611919][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.624153][ T25] usb 6-1: New USB device found, idVendor=5bb7, idProduct=e26e, bcdDevice=24.f1 [ 106.624195][ T25] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 106.626209][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 106.626243][ T25] usb 6-1: can't read configurations, error -61 [ 106.630690][ T5700] usb 1-1: config 0 descriptor?? [ 106.745685][ T1050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.771956][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 106.796360][ T25] usb 6-1: New USB device found, idVendor=5bb7, idProduct=e26e, bcdDevice=24.f1 [ 106.796403][ T25] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 106.798582][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 106.798619][ T25] usb 6-1: can't read configurations, error -61 [ 106.799155][ T25] usb usb6-port1: unable to enumerate USB device [ 106.885225][ T1050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.909933][ T5700] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.034964][ T1050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.102857][ T6137] FAULT_INJECTION: forcing a failure. [ 107.102857][ T6137] name failslab, interval 1, probability 0, space 0, times 1 [ 107.102893][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT(full) [ 107.102919][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.102932][ T6137] Call Trace: [ 107.102941][ T6137] [ 107.102951][ T6137] dump_stack_lvl+0xe8/0x150 [ 107.102988][ T6137] should_fail_ex+0x3eb/0x540 [ 107.103020][ T6137] should_failslab+0xa8/0x100 [ 107.103049][ T6137] __kmalloc_noprof+0xf9/0x710 [ 107.103081][ T6137] ? rcu_is_watching+0x16/0xb0 [ 107.103105][ T6137] ? tomoyo_realpath_from_path+0xef/0x640 [ 107.103134][ T6137] ? tomoyo_realpath_from_path+0xef/0x640 [ 107.103172][ T6137] tomoyo_realpath_from_path+0xef/0x640 [ 107.103216][ T6137] tomoyo_check_open_permission+0x229/0x470 [ 107.103244][ T6137] ? tomoyo_check_open_permission+0x1d3/0x470 [ 107.103269][ T6137] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 107.103295][ T6137] ? __asan_memset+0x22/0x50 [ 107.103365][ T6137] ? tomoyo_file_open+0x163/0x220 [ 107.103396][ T6137] ? devcgroup_check_permission+0x31/0x8f0 [ 107.103434][ T6137] security_file_open+0xa9/0x240 [ 107.103458][ T6137] do_dentry_open+0x495/0x1360 [ 107.103495][ T6137] vfs_open_consume+0x4a/0x350 [ 107.103519][ T6137] ? path_openat+0x14bb/0x1e40 [ 107.103557][ T6137] path_openat+0x14d7/0x1e40 [ 107.103621][ T6137] do_file_open+0x23e/0x4a0 [ 107.103663][ T6137] ? __pfx_do_file_open+0x10/0x10 [ 107.103723][ T6137] ? _raw_spin_unlock+0x28/0x50 [ 107.103755][ T6137] ? alloc_fd+0x651/0x6c0 [ 107.103796][ T6137] do_sys_openat2+0x115/0x200 [ 107.103825][ T6137] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.103858][ T6137] ? do_user_addr_fault+0xd3f/0x1480 [ 107.103897][ T6137] __x64_sys_openat+0x138/0x170 [ 107.103931][ T6137] do_syscall_64+0x166/0x520 [ 107.103953][ T6137] ? trace_irq_disable+0x3b/0x140 [ 107.103985][ T6137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.104009][ T6137] ? clear_bhb_loop+0x70/0xc0 [ 107.104037][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.104065][ T6137] RIP: 0033:0x7f0bf175e98e [ 107.104086][ T6137] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.104105][ T6137] RSP: 002b:00007f0bf2752b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.104130][ T6137] RAX: ffffffffffffffda RBX: 00007f0bf27536c0 RCX: 00007f0bf175e98e [ 107.104147][ T6137] RDX: 0000000000000000 RSI: 00007f0bf2752c00 RDI: ffffffffffffff9c [ 107.104163][ T6137] RBP: 00007f0bf2752c00 R08: 0000000000000000 R09: 0000000000000000 [ 107.104177][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 107.104193][ T6137] R13: 00007f0bf1a26038 R14: 00007f0bf1a25fa0 R15: 00007ffd957d64d8 [ 107.104229][ T6137] [ 107.104384][ T6137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.221282][ T6137] FAULT_INJECTION: forcing a failure. [ 107.221282][ T6137] name fail_futex, interval 1, probability 0, space 0, times 1 [ 107.221837][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT(full) [ 107.221910][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.221950][ T6137] Call Trace: [ 107.221972][ T6137] [ 107.222001][ T6137] dump_stack_lvl+0xe8/0x150 [ 107.222106][ T6137] should_fail_ex+0x3eb/0x540 [ 107.222199][ T6137] get_futex_key+0x1b4/0x1580 [ 107.222327][ T6137] ? __pfx_get_futex_key+0x10/0x10 [ 107.222456][ T6137] futex_wake+0x119/0x5f0 [ 107.222492][ T6137] ? __pfx_futex_wake+0x10/0x10 [ 107.222524][ T6137] ? __might_fault+0xaf/0x130 [ 107.222553][ T6137] ? sctp_getsockopt+0x9b/0xb90 [ 107.222588][ T6137] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 107.222679][ T6137] do_futex+0x458/0x4e0 [ 107.222788][ T6137] ? __pfx_do_futex+0x10/0x10 [ 107.222881][ T6137] __se_sys_futex+0x3a8/0x450 [ 107.222971][ T6137] ? __pfx___se_sys_futex+0x10/0x10 [ 107.223037][ T6137] ? fput+0xa0/0xd0 [ 107.223126][ T6137] ? __x64_sys_futex+0x21/0xf0 [ 107.223198][ T6137] do_syscall_64+0x166/0x520 [ 107.223263][ T6137] ? trace_irq_disable+0x3b/0x140 [ 107.223346][ T6137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.223407][ T6137] ? clear_bhb_loop+0x70/0xc0 [ 107.223489][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.223551][ T6137] RIP: 0033:0x7f0bf179e159 [ 107.223597][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.223648][ T6137] RSP: 002b:00007f0bf27530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.223719][ T6137] RAX: ffffffffffffffda RBX: 00007f0bf1a25fa8 RCX: 00007f0bf179e159 [ 107.223763][ T6137] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bf1a25fac [ 107.223804][ T6137] RBP: 00007f0bf1a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 107.223846][ T6137] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 107.223887][ T6137] R13: 00007f0bf1a26038 R14: 00007ffd957d63f0 R15: 00007ffd957d64d8 [ 107.223975][ T6137] [ 107.403002][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 107.896550][ T1050] bridge_slave_1: left allmulticast mode [ 107.896578][ T1050] bridge_slave_1: left promiscuous mode [ 107.900477][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.928253][ T1050] bridge_slave_0: left allmulticast mode [ 107.928277][ T1050] bridge_slave_0: left promiscuous mode [ 107.928469][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.980833][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.993490][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.994244][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.995942][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.997640][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.364987][ T6120] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.365016][ T6120] overlayfs: failed to set xattr on upper [ 108.365025][ T6120] overlayfs: ...falling back to redirect_dir=nofollow. [ 108.365035][ T6120] overlayfs: ...falling back to uuid=null. [ 108.608017][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.626193][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.629343][ T1050] bond0 (unregistering): Released all slaves [ 108.658091][ T5700] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 108.676099][ T5700] usb 1-1: USB disconnect, device number 9 [ 109.058943][ T6165] netlink: 168 bytes leftover after parsing attributes in process `syz.5.62'. [ 109.115192][ T6165] FAULT_INJECTION: forcing a failure. [ 109.115192][ T6165] name failslab, interval 1, probability 0, space 0, times 0 [ 109.115227][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.5.62 Not tainted syzkaller #0 PREEMPT(full) [ 109.115253][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.115267][ T6165] Call Trace: [ 109.115276][ T6165] [ 109.115286][ T6165] dump_stack_lvl+0xe8/0x150 [ 109.115330][ T6165] should_fail_ex+0x3eb/0x540 [ 109.115365][ T6165] should_failslab+0xa8/0x100 [ 109.115392][ T6165] ? prepare_creds+0x30/0x820 [ 109.115429][ T6165] kmem_cache_alloc_noprof+0x9c/0x600 [ 109.115461][ T6165] ? alloc_task_exec_state+0x27/0x2e0 [ 109.115500][ T6165] ? prepare_creds+0x30/0x820 [ 109.115540][ T6165] ? kmem_cache_alloc_noprof+0x151/0x600 [ 109.115575][ T6165] prepare_creds+0x30/0x820 [ 109.115615][ T6165] copy_creds+0x109/0x9f0 [ 109.115655][ T6165] copy_process+0xd1a/0x43e0 [ 109.115690][ T6165] ? __pfx___futex_wait+0x10/0x10 [ 109.115733][ T6165] ? try_to_wake_up+0x8c5/0x14d0 [ 109.115758][ T6165] ? __pfx_copy_process+0x10/0x10 [ 109.115797][ T6165] kernel_clone+0x2d7/0x940 [ 109.115830][ T6165] ? __pfx_kernel_clone+0x10/0x10 [ 109.115868][ T6165] ? do_futex+0x3e7/0x4e0 [ 109.115908][ T6165] __x64_sys_clone+0x1b6/0x230 [ 109.115942][ T6165] ? __pfx___x64_sys_clone+0x10/0x10 [ 109.115985][ T6165] ? rcu_is_watching+0x16/0xb0 [ 109.116019][ T6165] do_syscall_64+0x166/0x520 [ 109.116040][ T6165] ? trace_irq_disable+0x3b/0x140 [ 109.116071][ T6165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.116094][ T6165] ? clear_bhb_loop+0x70/0xc0 [ 109.116123][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.116146][ T6165] RIP: 0033:0x7f373639e159 [ 109.116166][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.116185][ T6165] RSP: 002b:00007f3737251fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 109.116208][ T6165] RAX: ffffffffffffffda RBX: 00007f3736625fa0 RCX: 00007f373639e159 [ 109.116224][ T6165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 109.116236][ T6165] RBP: 00007f373643503b R08: 0000000000000000 R09: 0000000000000000 [ 109.116249][ T6165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.116261][ T6165] R13: 00007f3736626038 R14: 00007f3736625fa0 R15: 00007fffb616c038 [ 109.116294][ T6165] [ 109.666321][ T6180] gadgetfs: bound to dummy_udc driver [ 109.707804][ T1050] hsr_slave_0: left promiscuous mode [ 109.713296][ T1050] hsr_slave_1: left promiscuous mode [ 109.723570][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.723596][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.743770][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.743796][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.790501][ T1050] veth1_macvtap: left promiscuous mode [ 109.790542][ T1050] veth0_macvtap: left promiscuous mode [ 109.790647][ T1050] veth1_vlan: left promiscuous mode [ 109.790711][ T1050] veth0_vlan: left promiscuous mode [ 109.861679][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 109.901422][ T5350] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 110.011515][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 110.012963][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 110.014002][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.014027][ T9] usb 1-1: config 0 has no interface number 0 [ 110.047475][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.047560][ T9] usb 1-1: Product: syz [ 110.047603][ T9] usb 1-1: Manufacturer: syz [ 110.047645][ T9] usb 1-1: SerialNumber: syz [ 110.094166][ T9] usb 1-1: config 0 descriptor?? [ 110.110978][ T5605] hid-generic 0005:0008:00CC.0004: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 110.115877][ T6191] tmpfs: Bad value for 'mpol' [ 110.132373][ T5625] Bluetooth: hci3: command tx timeout [ 110.157572][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 110.171692][ T6193] udevd[6193]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 110.251845][ T5350] usb 6-1: device descriptor read/64, error -71 [ 110.373569][ T5605] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.449474][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 110.486821][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 110.522782][ T5605] usb 2-1: Using ep0 maxpacket: 32 [ 110.527332][ T5605] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 110.528503][ T5605] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 110.528529][ T5605] usb 2-1: config 0 has no interface number 0 [ 110.528572][ T5605] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.528610][ T5605] usb 2-1: config 0 interface 85 has no altsetting 0 [ 110.539341][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.539416][ T5605] usb 2-1: Product: syz [ 110.539458][ T5605] usb 2-1: Manufacturer: syz [ 110.539499][ T5605] usb 2-1: SerialNumber: syz [ 110.595806][ T5605] usb 2-1: config 0 descriptor?? [ 110.731497][ T5350] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 110.811223][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.882191][ T5350] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 110.883583][ T5350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.883633][ T5350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 110.883693][ T5350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.883737][ T5350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.889452][ T5350] usb 6-1: config 0 descriptor?? [ 111.159652][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.182173][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.189357][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.189961][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.224959][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.228574][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.392204][ T5605] appletouch 2-1:0.85: Geyser mode initialized. [ 111.396430][ T5605] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input10 [ 111.401032][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 111.571438][ T9] gspca_spca1528: reg_w err -71 [ 111.571552][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 111.608157][ T9] usb 1-1: USB disconnect, device number 10 [ 111.618492][ T5350] usb 2-1: USB disconnect, device number 11 [ 111.673876][ T5350] appletouch 2-1:0.85: input: appletouch disconnected [ 111.788992][ T1557] usb 6-1: USB disconnect, device number 7 [ 111.879870][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.880043][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.880196][ T6145] bridge_slave_0: entered allmulticast mode [ 111.883533][ T6145] bridge_slave_0: entered promiscuous mode [ 111.895841][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.898898][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.899061][ T6145] bridge_slave_1: entered allmulticast mode [ 111.906155][ T6145] bridge_slave_1: entered promiscuous mode [ 111.932355][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.67'. [ 111.967218][ T6222] netlink: 'syz.5.67': attribute type 3 has an invalid length. [ 111.967241][ T6222] netlink: 666 bytes leftover after parsing attributes in process `syz.5.67'. [ 112.030781][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.046938][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.112126][ T6145] team0: Port device team_slave_0 added [ 112.115290][ T6145] team0: Port device team_slave_1 added [ 112.173535][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.173565][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.173593][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.175657][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.175672][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.175699][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.241798][ T5625] Bluetooth: hci3: command tx timeout [ 112.549797][ T6145] hsr_slave_0: entered promiscuous mode [ 112.556837][ T6145] hsr_slave_1: entered promiscuous mode [ 112.567547][ T6145] debugfs: 'hsr0' already exists in 'hsr' [ 112.567571][ T6145] Cannot create hsr debugfs directory [ 112.586818][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 112.881674][ T6250] netlink: 'syz.5.75': attribute type 12 has an invalid length. [ 113.405415][ T6262] usb usb7: check_ctrlrecip: process 6262 (syz.5.78) requesting ep 01 but needs 81 [ 113.405969][ T6262] usb usb7: usbfs: process 6262 (syz.5.78) did not claim interface 0 before use [ 113.528209][ T6265] mmap: syz.0.79 (6265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.679282][ T6145] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.704667][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.705570][ T6145] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.740703][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.754993][ T6145] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.818195][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.820281][ T6145] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.873697][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.947880][ T6268] raw_sendmsg: syz.5.80 forgot to set AF_INET. Fix it! [ 114.281937][ T5625] Bluetooth: hci3: command tx timeout [ 114.396029][ T1557] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.506172][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 114.542865][ T1557] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 114.545450][ T1557] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 114.545480][ T1557] usb 2-1: config 1 has no interface number 0 [ 114.545522][ T1557] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 114.545550][ T1557] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 114.545577][ T1557] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 114.548074][ T1557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.548102][ T1557] usb 2-1: Product: syz [ 114.548119][ T1557] usb 2-1: Manufacturer: syz [ 114.548135][ T1557] usb 2-1: SerialNumber: syz [ 114.639832][ T6285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.654347][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.685224][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.691478][ T9] usb 6-1: device descriptor read/64, error -71 [ 114.715556][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.715677][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.750803][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.750910][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.767039][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.845467][ T6285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.851168][ T1557] usb 2-1: No status endpoint found [ 114.922407][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 114.923274][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 114.924315][ T10] usb 1-1: config index 0 descriptor too short (expected 36, got 19) [ 114.924343][ T10] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 114.924395][ T10] usb 1-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.924424][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.924460][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.930743][ T10] usb 1-1: config 0 descriptor?? [ 114.947712][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.021751][ T10] appletouch 1-1:0.0: Could not find int-in endpoint [ 115.021780][ T10] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 115.022916][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 115.096582][ T10] usb 2-1: USB disconnect, device number 12 [ 115.123486][ T9] usb 6-1: device descriptor read/64, error -71 [ 115.160798][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.171191][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.182826][ T43] usb 1-1: USB disconnect, device number 11 [ 115.231698][ T9] usb usb6-port1: attempt power cycle [ 115.378148][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 115.571885][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 115.592047][ T9] usb 6-1: device descriptor read/8, error -71 [ 115.618693][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.836135][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 115.853540][ T9] usb 6-1: device descriptor read/8, error -71 [ 115.963455][ T9] usb usb6-port1: unable to enumerate USB device [ 116.213488][ T6145] veth0_vlan: entered promiscuous mode [ 116.231203][ T6145] veth1_vlan: entered promiscuous mode [ 116.255681][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 116.271409][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.298396][ T6145] veth0_macvtap: entered promiscuous mode [ 116.310968][ T6145] veth1_macvtap: entered promiscuous mode [ 116.335576][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.356975][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.361774][ T5625] Bluetooth: hci3: command tx timeout [ 116.403352][ T9] usb 2-1: device descriptor read/64, error -71 [ 116.445941][ T1050] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.445996][ T1050] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.446045][ T1050] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.482685][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.548837][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.548994][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.607579][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.607603][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.641850][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 116.771501][ T9] usb 2-1: device descriptor read/64, error -71 [ 116.882347][ T9] usb usb2-port1: attempt power cycle [ 116.939083][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 116.968277][ T6356] Zero length message leads to an empty skb [ 117.125883][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 117.232639][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 117.254064][ T9] usb 2-1: device descriptor read/8, error -71 [ 117.493316][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 117.513562][ T9] usb 2-1: device descriptor read/8, error -71 [ 117.622865][ T9] usb usb2-port1: unable to enumerate USB device [ 118.468673][ T6396] loop0: detected capacity change from 0 to 32768 [ 118.483694][ T5605] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 118.643315][ T5605] usb 7-1: not running at top speed; connect to a high speed hub [ 118.643353][ T5605] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 118.645373][ T5605] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 118.645406][ T5605] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 118.649724][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.649751][ T5605] usb 7-1: Product: syz [ 118.649776][ T5605] usb 7-1: Manufacturer: syz [ 118.649793][ T5605] usb 7-1: SerialNumber: syz [ 118.722771][ T5605] oti6858 7-1:1.0: oti6858 converter detected [ 118.742880][ T5605] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 118.962888][ T5350] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 118.987863][ T6403] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 119.118759][ T5350] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 119.120546][ T5350] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.120609][ T5350] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 119.136149][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.136245][ T5350] usb 6-1: Product: syz [ 119.136289][ T5350] usb 6-1: Manufacturer: syz [ 119.136331][ T5350] usb 6-1: SerialNumber: syz [ 119.193657][ T5350] usb-storage 6-1:1.0: USB Mass Storage device detected [ 119.206252][ T5350] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 119.217870][ T5350] scsi host1: usb-storage 6-1:1.0 [ 119.417778][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.423607][ T5350] usb 7-1: USB disconnect, device number 2 [ 119.431222][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.465105][ T5350] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 119.465917][ T5350] oti6858 7-1:1.0: device disconnected [ 119.592547][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 119.717859][ T43] usb 6-1: USB disconnect, device number 12 [ 120.221516][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 120.357475][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.109'. [ 120.357511][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.109'. [ 120.392202][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 120.393506][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 120.399896][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.399922][ T25] usb 2-1: Product: syz [ 120.399936][ T25] usb 2-1: Manufacturer: syz [ 120.399951][ T25] usb 2-1: SerialNumber: syz [ 120.434461][ T25] usb 2-1: config 0 descriptor?? [ 120.447151][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 120.601968][ T43] usb 7-1: device descriptor read/64, error -71 [ 120.755273][ T6472] FAULT_INJECTION: forcing a failure. [ 120.755273][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 120.755314][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz.5.110 Not tainted syzkaller #0 PREEMPT(full) [ 120.755339][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.755352][ T6472] Call Trace: [ 120.755361][ T6472] [ 120.755370][ T6472] dump_stack_lvl+0xe8/0x150 [ 120.755420][ T6472] should_fail_ex+0x3eb/0x540 [ 120.755451][ T6472] should_failslab+0xa8/0x100 [ 120.755489][ T6472] __kmalloc_node_noprof+0xfb/0x720 [ 120.755514][ T6472] ? __pfx___up_read+0x10/0x10 [ 120.755563][ T6472] ? crypto_create_tfm_node+0x81/0x3c0 [ 120.755598][ T6472] ? crypto_create_tfm_node+0x81/0x3c0 [ 120.755644][ T6472] crypto_create_tfm_node+0x81/0x3c0 [ 120.755673][ T6472] crypto_spawn_tfm2+0x5c/0x90 [ 120.755714][ T6472] crypto_authenc_init_tfm+0x47/0x1c0 [ 120.755743][ T6472] crypto_create_tfm_node+0x143/0x3c0 [ 120.755781][ T6472] crypto_spawn_tfm2+0x5c/0x90 [ 120.755810][ T6472] aead_init_geniv+0xa1/0x170 [ 120.755837][ T6472] crypto_create_tfm_node+0x143/0x3c0 [ 120.755889][ T6472] crypto_alloc_tfm_node+0x169/0x3e0 [ 120.755921][ T6472] esp_init_state+0x615/0x1220 [ 120.755949][ T6472] ? ____sys_sendmsg+0x54e/0x850 [ 120.755968][ T6472] ? ___sys_sendmsg+0x2a5/0x360 [ 120.755985][ T6472] ? __x64_sys_sendmsg+0x1b1/0x290 [ 120.756027][ T6472] ? __pfx_esp_init_state+0x10/0x10 [ 120.756072][ T6472] ? lock_acquire+0x115/0x350 [ 120.756117][ T6472] ? __xfrm_init_state+0x745/0x1320 [ 120.756144][ T6472] __xfrm_init_state+0x9dd/0x1320 [ 120.756186][ T6472] ? __xfrm_init_state+0x745/0x1320 [ 120.756223][ T6472] xfrm_init_state+0x1e/0xa0 [ 120.756251][ T6472] pfkey_add+0x1d71/0x2e50 [ 120.756293][ T6472] ? __pfx_pfkey_add+0x10/0x10 [ 120.756336][ T6472] pfkey_sendmsg+0xceb/0x11d0 [ 120.756377][ T6472] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 120.756429][ T6472] ? aa_sock_msg_perm+0x144/0x210 [ 120.756452][ T6472] ? apparmor_socket_sendmsg+0x98/0x360 [ 120.756476][ T6472] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 120.756517][ T6472] sock_sendmsg_nosec+0x13a/0x180 [ 120.756551][ T6472] ____sys_sendmsg+0x54e/0x850 [ 120.756585][ T6472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.756611][ T6472] ? import_iovec+0x73/0xa0 [ 120.756634][ T6472] ___sys_sendmsg+0x2a5/0x360 [ 120.756672][ T6472] ? __lock_acquire+0x747/0x2de0 [ 120.756708][ T6472] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.756742][ T6472] ? futex_wait+0x2a2/0x390 [ 120.756785][ T6472] ? __fget_files+0x2a/0x420 [ 120.756825][ T6472] ? __fget_files+0x3a2/0x420 [ 120.756864][ T6472] __x64_sys_sendmsg+0x1b1/0x290 [ 120.756897][ T6472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.756931][ T6472] do_syscall_64+0x166/0x520 [ 120.756946][ T6472] ? trace_irq_disable+0x3b/0x140 [ 120.756992][ T6472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.757016][ T6472] ? clear_bhb_loop+0x70/0xc0 [ 120.757043][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.757069][ T6472] RIP: 0033:0x7f373639e159 [ 120.757091][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.757104][ T6472] RSP: 002b:00007f3737252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.757143][ T6472] RAX: ffffffffffffffda RBX: 00007f3736625fa0 RCX: 00007f373639e159 [ 120.757162][ T6472] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 120.757176][ T6472] RBP: 00007f373643503b R08: 0000000000000000 R09: 0000000000000000 [ 120.757189][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.757202][ T6472] R13: 00007f3736626038 R14: 00007f3736625fa0 R15: 00007fffb616c038 [ 120.757236][ T6472] [ 120.961937][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 121.135709][ T43] usb 7-1: device descriptor read/64, error -71 [ 121.252671][ T43] usb usb7-port1: attempt power cycle [ 121.594273][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 121.617186][ T43] usb 7-1: device descriptor read/8, error -71 [ 121.851515][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 121.874630][ T43] usb 7-1: device descriptor read/8, error -71 [ 121.890823][ T6493] loop0: detected capacity change from 0 to 32768 [ 121.981851][ T43] usb usb7-port1: unable to enumerate USB device [ 122.131531][ T5622] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 122.281515][ T5622] usb 6-1: Using ep0 maxpacket: 32 [ 122.282948][ T5622] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.283992][ T5622] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.284018][ T5622] usb 6-1: config 0 has no interface number 0 [ 122.284060][ T5622] usb 6-1: config 0 interface 184 has no altsetting 0 [ 122.286205][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.286223][ T5622] usb 6-1: Product: syz [ 122.286234][ T5622] usb 6-1: Manufacturer: syz [ 122.286245][ T5622] usb 6-1: SerialNumber: syz [ 122.288908][ T5622] usb 6-1: config 0 descriptor?? [ 122.306582][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 122.481500][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 122.482280][ T9] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 122.485575][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.485601][ T9] usb 1-1: Product: syz [ 122.485627][ T9] usb 1-1: Manufacturer: syz [ 122.485643][ T9] usb 1-1: SerialNumber: syz [ 122.488745][ T9] usb 1-1: config 0 descriptor?? [ 122.696156][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.696601][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.700123][ T9] usb 1-1: USB disconnect, device number 12 [ 122.925638][ T5622] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 122.925670][ T5622] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.530356][ T5622] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 123.530381][ T5622] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 123.530396][ T5622] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 123.563806][ T5622] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 123.610478][ T25] usb read operation failed. (-71) [ 123.610796][ T25] usb write operation failed. (-71) [ 123.611093][ T25] usb write operation failed. (-71) [ 123.628207][ T25] usb write operation failed. (-71) [ 123.628226][ T25] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 123.660174][ T25] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 123.660222][ T25] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:0: checksumming directory block 0 [ 123.694823][ T25] usb 2-1: loading /lib/firmware/updates/syzkaller/dvb-usb-terratec-h7-az6007.fw failed with error -74 [ 123.700737][ T25] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 123.700774][ T25] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:0: checksumming directory block 0 [ 123.701102][ T25] usb 2-1: loading /lib/firmware/updates/dvb-usb-terratec-h7-az6007.fw failed with error -74 [ 123.701272][ T25] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 123.767251][ T25] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:0: checksumming directory block 0 [ 123.781444][ T25] usb 2-1: loading /lib/firmware/syzkaller/dvb-usb-terratec-h7-az6007.fw failed with error -74 [ 123.781643][ T25] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 123.781679][ T25] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:0: checksumming directory block 0 [ 123.781987][ T25] usb 2-1: loading /lib/firmware/dvb-usb-terratec-h7-az6007.fw failed with error -74 [ 123.782037][ T25] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -74 [ 123.782059][ T25] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 123.878877][ T6514] loop4: detected capacity change from 0 to 2640 [ 123.888572][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888625][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888687][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888725][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888749][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888786][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888856][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888878][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888889][ T6514] ldm_validate_partition_table(): Disk read failed. [ 123.888909][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888930][ T6514] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.888962][ T6514] Dev loop4: unable to read RDB block 0 [ 123.889788][ T6514] loop4: unable to read partition table [ 123.889987][ T6514] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 124.103105][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 124.252570][ T9] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 124.253873][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.253915][ T9] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 124.255950][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.255967][ T9] usb 7-1: Product: syz [ 124.255978][ T9] usb 7-1: Manufacturer: syz [ 124.255988][ T9] usb 7-1: SerialNumber: syz [ 124.271629][ T9] usb-storage 7-1:1.0: USB Mass Storage device detected [ 124.304585][ T9] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 124.306581][ T9] scsi host1: usb-storage 7-1:1.0 [ 124.503151][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.503724][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.639122][ T6537] netlink: Failed to add helper -22 [ 124.639180][ T6537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.767847][ T9] usb 7-1: USB disconnect, device number 7 [ 125.429220][ T6552] kvm: user requested TSC rate below hardware speed [ 125.691288][ T5350] usb 6-1: USB disconnect, device number 13 [ 125.788694][ T6557] FAULT_INJECTION: forcing a failure. [ 125.788694][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 125.788726][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.5.122 Not tainted syzkaller #0 PREEMPT(full) [ 125.788750][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.788764][ T6557] Call Trace: [ 125.788772][ T6557] [ 125.788782][ T6557] dump_stack_lvl+0xe8/0x150 [ 125.788818][ T6557] should_fail_ex+0x3eb/0x540 [ 125.788848][ T6557] should_failslab+0xa8/0x100 [ 125.788875][ T6557] __kmalloc_noprof+0xf9/0x710 [ 125.788906][ T6557] ? rcu_is_watching+0x16/0xb0 [ 125.788928][ T6557] ? tomoyo_realpath_from_path+0xef/0x640 [ 125.788957][ T6557] ? tomoyo_realpath_from_path+0xef/0x640 [ 125.788994][ T6557] tomoyo_realpath_from_path+0xef/0x640 [ 125.789032][ T6557] ? tomoyo_path_number_perm+0x219/0x5f0 [ 125.789056][ T6557] tomoyo_path_number_perm+0x246/0x5f0 [ 125.789083][ T6557] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.789106][ T6557] ? __lock_acquire+0x747/0x2de0 [ 125.789154][ T6557] ? hook_file_ioctl+0x1f2/0x600 [ 125.789199][ T6557] ? __fget_files+0x2a/0x420 [ 125.789231][ T6557] ? __fget_files+0x2a/0x420 [ 125.789257][ T6557] ? __fget_files+0x3a2/0x420 [ 125.789284][ T6557] ? __fget_files+0x2a/0x420 [ 125.789316][ T6557] security_file_ioctl+0xc3/0x2a0 [ 125.789356][ T6557] __se_sys_ioctl+0x47/0x170 [ 125.789395][ T6557] do_syscall_64+0x166/0x520 [ 125.789415][ T6557] ? trace_irq_disable+0x3b/0x140 [ 125.789457][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.789481][ T6557] ? clear_bhb_loop+0x70/0xc0 [ 125.789510][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.789533][ T6557] RIP: 0033:0x7f373639e159 [ 125.789555][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.789580][ T6557] RSP: 002b:00007f3737252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.789606][ T6557] RAX: ffffffffffffffda RBX: 00007f3736625fa0 RCX: 00007f373639e159 [ 125.789623][ T6557] RDX: 0000000000000000 RSI: 00000000c0385868 RDI: 0000000000000003 [ 125.789638][ T6557] RBP: 00007f373643503b R08: 0000000000000000 R09: 0000000000000000 [ 125.789652][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.789666][ T6557] R13: 00007f3736626038 R14: 00007f3736625fa0 R15: 00007fffb616c038 [ 125.789701][ T6557] [ 125.789722][ T6557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.057474][ T6561] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 126.057516][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.359213][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.128'. [ 126.571596][ T5622] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 126.726132][ T5622] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 126.727061][ T5622] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 126.727079][ T5622] usb 6-1: config 1 has no interface number 0 [ 126.728745][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.728762][ T5622] usb 6-1: Product: syz [ 126.728773][ T5622] usb 6-1: Manufacturer: syz [ 126.728785][ T5622] usb 6-1: SerialNumber: syz [ 126.788573][ T5622] usb 6-1: 3:1 : does not exist [ 126.788592][ T5622] usb 6-1: 3:2 : does not exist [ 126.951577][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 126.993260][ T9] usb 6-1: USB disconnect, device number 14 [ 127.109468][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.109523][ T43] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 127.131398][ T43] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 127.131426][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.158296][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.158326][ T43] usb 7-1: Product: syz [ 127.158341][ T43] usb 7-1: Manufacturer: syz [ 127.158357][ T43] usb 7-1: SerialNumber: syz [ 127.220325][ T43] usb 7-1: selecting invalid altsetting 1 [ 127.221100][ T43] usb 7-1: unit 6 not found! [ 127.273193][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 127.427298][ T9] hid-generic 0005:0008:0009.0005: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 127.470793][ T6604] udevd[6604]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 127.704424][ T6610] loop0: detected capacity change from 0 to 32768 [ 127.706923][ T30] audit: type=1400 audit(1789523217.341:5): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6609 comm="syz.5.143" name="//o" offset=66 [ 127.755710][ T6610] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 127.889382][ T6618] device-mapper: ioctl: The device has no table. [ 128.113824][ T43] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 128.236187][ T43] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 128.264343][ T43] usb 7-1: USB disconnect, device number 8 [ 128.302660][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.963356][ T6648] kvm: user requested TSC rate below hardware speed [ 129.091409][ T5605] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 129.113967][ T6656] FAULT_INJECTION: forcing a failure. [ 129.113967][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.113998][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.0.151 Not tainted syzkaller #0 PREEMPT(full) [ 129.114023][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.114036][ T6656] Call Trace: [ 129.114045][ T6656] [ 129.114054][ T6656] dump_stack_lvl+0xe8/0x150 [ 129.114089][ T6656] should_fail_ex+0x3eb/0x540 [ 129.114119][ T6656] _copy_to_user+0x31/0xb0 [ 129.114150][ T6656] simple_read_from_buffer+0xe1/0x170 [ 129.114184][ T6656] proc_fail_nth_read+0x1bb/0x230 [ 129.114221][ T6656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.114253][ T6656] ? rw_verify_area+0x24a/0x4c0 [ 129.114285][ T6656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.114311][ T6656] vfs_read+0x213/0xa80 [ 129.114340][ T6656] ? __pfx___mutex_lock+0x10/0x10 [ 129.114358][ T6656] ? __pfx_vfs_read+0x10/0x10 [ 129.114384][ T6656] ? __fget_files+0x2a/0x420 [ 129.114410][ T6656] ? __fget_files+0x3a2/0x420 [ 129.114432][ T6656] ? __fget_files+0x2a/0x420 [ 129.114465][ T6656] ksys_read+0x150/0x270 [ 129.114498][ T6656] ? __pfx_ksys_read+0x10/0x10 [ 129.114540][ T6656] do_syscall_64+0x166/0x520 [ 129.114560][ T6656] ? trace_irq_disable+0x3b/0x140 [ 129.114593][ T6656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.114616][ T6656] ? clear_bhb_loop+0x70/0xc0 [ 129.114644][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.114672][ T6656] RIP: 0033:0x7f2aa315e98e [ 129.114702][ T6656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.114720][ T6656] RSP: 002b:00007f2aa4052fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.114744][ T6656] RAX: ffffffffffffffda RBX: 00007f2aa40536c0 RCX: 00007f2aa315e98e [ 129.114761][ T6656] RDX: 000000000000000f RSI: 00007f2aa40530a0 RDI: 0000000000000004 [ 129.114775][ T6656] RBP: 00007f2aa4053090 R08: 0000000000000000 R09: 0000000000000000 [ 129.114789][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.114802][ T6656] R13: 00007f2aa3426038 R14: 00007f2aa3425fa0 R15: 00007ffc29e65508 [ 129.114837][ T6656] [ 129.248129][ T5605] usb 7-1: device descriptor read/64, error -71 [ 129.481419][ T5605] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 129.614385][ T5605] usb 7-1: device descriptor read/64, error -71 [ 129.722964][ T5605] usb usb7-port1: attempt power cycle [ 129.784413][ T5622] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 129.931916][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 129.935751][ T5622] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.939687][ T5622] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.939736][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.939766][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.939789][ T5622] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.939813][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.940964][ T5622] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.940988][ T5622] usb 1-1: Manufacturer: syz [ 130.028981][ T5622] usb 1-1: config 0 descriptor?? [ 130.081432][ T5605] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 130.105909][ T5605] usb 7-1: device descriptor read/8, error -71 [ 130.319618][ T6690] syzkaller1: entered promiscuous mode [ 130.319645][ T6690] syzkaller1: entered allmulticast mode [ 130.343495][ T5605] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 130.362911][ T5622] rc_core: IR keymap rc-hauppauge not found [ 130.363174][ T5605] usb 7-1: device descriptor read/8, error -71 [ 130.363214][ T5622] Registered IR keymap rc-empty [ 130.363660][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.384159][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.411676][ T5622] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 130.414599][ T5622] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 130.420179][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.445793][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.447590][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.448828][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.457952][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.152'. [ 130.458015][ T6664] openvswitch: netlink: Flow key attr not present in new flow. [ 130.488953][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.489208][ T5605] usb usb7-port1: unable to enumerate USB device [ 130.512033][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.531507][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.551581][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.571725][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.591573][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.613763][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.631577][ T5622] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 130.659074][ T5622] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 130.659104][ T5622] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.854796][ T5622] usb 1-1: USB disconnect, device number 13 [ 131.629966][ T6728] Bluetooth: MGMT ver 1.23 [ 132.479005][ T6759] rust_binder: Write failure EFAULT in pid:51 [ 132.482330][ T6759] rust_binder: Write failure EFAULT in pid:51 [ 132.482806][ T6759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.754047][ T6771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.797266][ T6772] comedi comedi3: dt2815: I/O base address or length out of range [ 132.926407][ T5350] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 132.928093][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928175][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.071438][ T5350] usb 7-1: Using ep0 maxpacket: 8 [ 133.072263][ T5350] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.073511][ T5350] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 133.073562][ T5350] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.073585][ T5350] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.073611][ T5350] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 133.073641][ T5350] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 133.073666][ T5350] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.073708][ T5350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.144845][ T5350] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 133.283119][ T6765] program syz.6.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.286969][ T5350] usb 7-1: USB disconnect, device number 13 [ 133.643957][ T5625] Bluetooth: hci0: command tx timeout [ 133.731673][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 134.661396][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.814412][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.818529][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.818563][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.818587][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.818630][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.883930][ T43] usb 6-1: config 0 descriptor?? [ 135.408068][ T43] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 135.440481][ T6865] udevd[6865]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 135.615842][ T5350] usb 6-1: USB disconnect, device number 15 [ 136.328872][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.188'. [ 136.328930][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.188'. [ 136.530270][ T6906] fuse: Unknown parameter '}_ g ҁp' [ 136.637930][ T6876] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 136.788424][ T6913] netlink: 'syz.5.190': attribute type 2 has an invalid length. [ 136.797483][ T6913] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.855138][ T6913] PKCS7: Unsupported SignedData version [ 137.360110][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.370459][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.511451][ T5350] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 137.611461][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 137.662133][ T5350] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 137.664211][ T5350] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.664240][ T5350] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 137.666291][ T5350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.666316][ T5350] usb 7-1: Product: syz [ 137.666333][ T5350] usb 7-1: Manufacturer: syz [ 137.666350][ T5350] usb 7-1: SerialNumber: syz [ 137.801408][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 137.805792][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 137.827498][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.827555][ T9] usb 6-1: Product: syz [ 137.827571][ T9] usb 6-1: Manufacturer: syz [ 137.827587][ T9] usb 6-1: SerialNumber: syz [ 137.856247][ T9] usb 6-1: config 0 descriptor?? [ 137.860342][ T9] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 138.132156][ T5350] usb 7-1: Cannot retrieve CPort count: 0 [ 138.132235][ T5350] usb 7-1: Cannot retrieve CPort count: -5 [ 138.132262][ T5350] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 138.868065][ T9] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 138.888039][ T9] usb 6-1: USB disconnect, device number 16 [ 139.451116][ T6974] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #116: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 139.451155][ T6974] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #116: comm dhcpcd-run-hook: checksumming directory block 0 [ 139.605194][ T6993] autofs4:pid:6993:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 140.599226][ T7000] usb usb7: usbfs: process 7000 (syz.0.200) did not claim interface 4 before use [ 140.694310][ T5622] usb 7-1: USB disconnect, device number 14 [ 140.934021][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.112170][ T43] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 141.113202][ T43] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.113232][ T43] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 141.113272][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.168911][ T43] pl2303 1-1:1.0: required endpoints missing [ 141.197117][ T43] pl2303 1-1:1.1: pl2303 converter detected [ 141.271772][ T43] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 141.292182][ T5632] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 141.292217][ T5632] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 141.292484][ T5632] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 141.292511][ T5632] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 141.292741][ T5632] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 141.292767][ T5632] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 141.298284][ T5626] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 141.298316][ T5626] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 141.298709][ T5626] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 141.298737][ T5626] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 141.298948][ T5626] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 141.298975][ T5626] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 141.534898][ T6943] syz.1.196 (6943): drop_caches: 3 [ 141.549342][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.549880][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.040971][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 142.041007][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 142.041214][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 142.041241][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 142.041778][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 142.041806][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 142.613442][ T43] usb 1-1: USB disconnect, device number 14 [ 142.671709][ T43] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 142.678601][ T43] pl2303 1-1:1.1: device disconnected [ 142.885685][ T7024] FAULT_INJECTION: forcing a failure. [ 142.885685][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.885718][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.6.209 Not tainted syzkaller #0 PREEMPT(full) [ 142.885744][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.885757][ T7024] Call Trace: [ 142.885767][ T7024] [ 142.885776][ T7024] dump_stack_lvl+0xe8/0x150 [ 142.885813][ T7024] should_fail_ex+0x3eb/0x540 [ 142.885845][ T7024] _copy_to_user+0x31/0xb0 [ 142.885878][ T7024] simple_read_from_buffer+0xe1/0x170 [ 142.885914][ T7024] proc_fail_nth_read+0x1bb/0x230 [ 142.885952][ T7024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.886003][ T7024] ? rw_verify_area+0x24a/0x4c0 [ 142.886036][ T7024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.886070][ T7024] vfs_read+0x213/0xa80 [ 142.886106][ T7024] ? __pfx___mutex_lock+0x10/0x10 [ 142.886130][ T7024] ? __pfx_vfs_read+0x10/0x10 [ 142.886162][ T7024] ? __fget_files+0x2a/0x420 [ 142.886196][ T7024] ? __fget_files+0x3a2/0x420 [ 142.886223][ T7024] ? __fget_files+0x2a/0x420 [ 142.886262][ T7024] ksys_read+0x150/0x270 [ 142.886296][ T7024] ? __pfx_ksys_read+0x10/0x10 [ 142.886339][ T7024] do_syscall_64+0x166/0x520 [ 142.886361][ T7024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.886386][ T7024] ? clear_bhb_loop+0x70/0xc0 [ 142.886414][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.886438][ T7024] RIP: 0033:0x7f65a0f5e98e [ 142.886458][ T7024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.886478][ T7024] RSP: 002b:00007f65a1dc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.886503][ T7024] RAX: ffffffffffffffda RBX: 00007f65a1dc76c0 RCX: 00007f65a0f5e98e [ 142.886520][ T7024] RDX: 000000000000000f RSI: 00007f65a1dc70a0 RDI: 0000000000000004 [ 142.886535][ T7024] RBP: 00007f65a1dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.886550][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.886563][ T7024] R13: 00007f65a1226038 R14: 00007f65a1225fa0 R15: 00007ffc63218128 [ 142.886605][ T7024] [ 143.541446][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 143.671505][ T43] usb 7-1: device descriptor read/64, error -71 [ 143.911414][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 144.048829][ T43] usb 7-1: device descriptor read/64, error -71 [ 144.155096][ T43] usb usb7-port1: attempt power cycle [ 144.304431][ T7037] FAULT_INJECTION: forcing a failure. [ 144.304431][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 144.304466][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.5.215 Not tainted syzkaller #0 PREEMPT(full) [ 144.304493][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.304507][ T7037] Call Trace: [ 144.304515][ T7037] [ 144.304525][ T7037] dump_stack_lvl+0xe8/0x150 [ 144.304561][ T7037] should_fail_ex+0x3eb/0x540 [ 144.304592][ T7037] should_failslab+0xa8/0x100 [ 144.304620][ T7037] __kmalloc_cache_noprof+0x9e/0x600 [ 144.304654][ T7037] ? __kmalloc_cache_noprof+0x148/0x600 [ 144.304687][ T7037] ? sctp_add_bind_addr+0x8c/0x370 [ 144.304715][ T7037] ? sctp_add_bind_addr+0x8c/0x370 [ 144.304751][ T7037] sctp_add_bind_addr+0x8c/0x370 [ 144.304785][ T7037] sctp_copy_local_addr_list+0x31a/0x4e0 [ 144.304819][ T7037] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 144.304858][ T7037] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 144.304891][ T7037] ? sctp_v6_is_any+0x64/0x80 [ 144.304924][ T7037] ? sctp_copy_one_addr+0x93/0x360 [ 144.304958][ T7037] sctp_bind_addr_copy+0xb3/0x3c0 [ 144.304988][ T7037] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 144.305019][ T7037] sctp_connect_new_asoc+0x2ff/0x6b0 [ 144.305058][ T7037] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 144.305102][ T7037] ? __local_bh_enable_ip+0xd6/0x140 [ 144.305128][ T7037] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 144.305155][ T7037] ? security_sctp_bind_connect+0x7e/0x2c0 [ 144.305198][ T7037] sctp_sendmsg+0x159b/0x2d00 [ 144.305249][ T7037] ? __pfx_sctp_sendmsg+0x10/0x10 [ 144.305289][ T7037] ? __lock_acquire+0x747/0x2de0 [ 144.305338][ T7037] ? aa_sock_msg_perm+0xf5/0x210 [ 144.305364][ T7037] ? sock_rps_record_flow+0x19/0x350 [ 144.305398][ T7037] ? inet_sendmsg+0x298/0x320 [ 144.305431][ T7037] ? __pfx_inet_sendmsg+0x10/0x10 [ 144.305460][ T7037] sock_sendmsg_nosec+0x10e/0x180 [ 144.305496][ T7037] ____sys_sendmsg+0x54e/0x850 [ 144.305528][ T7037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.305565][ T7037] ? import_iovec+0x73/0xa0 [ 144.305598][ T7037] ___sys_sendmsg+0x2a5/0x360 [ 144.305623][ T7037] ? __lock_acquire+0x747/0x2de0 [ 144.305660][ T7037] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.305726][ T7037] ? __fget_files+0x2a/0x420 [ 144.305754][ T7037] ? __fget_files+0x3a2/0x420 [ 144.305795][ T7037] __x64_sys_sendmsg+0x1b1/0x290 [ 144.305843][ T7037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.305894][ T7037] do_syscall_64+0x166/0x520 [ 144.305916][ T7037] ? trace_irq_disable+0x3b/0x140 [ 144.305949][ T7037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.305973][ T7037] ? clear_bhb_loop+0x70/0xc0 [ 144.306001][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.306025][ T7037] RIP: 0033:0x7f373639e159 [ 144.306046][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.306065][ T7037] RSP: 002b:00007f3737252028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.306090][ T7037] RAX: ffffffffffffffda RBX: 00007f3736625fa0 RCX: 00007f373639e159 [ 144.306107][ T7037] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 144.306123][ T7037] RBP: 00007f3737252090 R08: 0000000000000000 R09: 0000000000000000 [ 144.306137][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.306151][ T7037] R13: 00007f3736626038 R14: 00007f3736625fa0 R15: 00007fffb616c038 [ 144.306187][ T7037] [ 144.565063][ T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 144.691551][ T43] usb 7-1: device descriptor read/8, error -71 [ 144.927933][ T7039] FAULT_INJECTION: forcing a failure. [ 144.927933][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 144.927968][ T7039] CPU: 1 UID: 0 PID: 7039 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) [ 144.927994][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.928015][ T7039] Call Trace: [ 144.928024][ T7039] [ 144.928034][ T7039] dump_stack_lvl+0xe8/0x150 [ 144.928070][ T7039] should_fail_ex+0x3eb/0x540 [ 144.928102][ T7039] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 144.928137][ T7039] should_failslab+0xa8/0x100 [ 144.928164][ T7039] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 144.928196][ T7039] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 144.928250][ T7039] ? kvm_gmem_alloc_inode+0x2c/0xe0 [ 144.928283][ T7039] ? kvm_gmem_alloc_inode+0x2c/0xe0 [ 144.928322][ T7039] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 144.928356][ T7039] kvm_gmem_alloc_inode+0x2c/0xe0 [ 144.928390][ T7039] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 144.928422][ T7039] alloc_inode+0x6a/0x1b0 [ 144.928452][ T7039] alloc_anon_inode+0x1e/0x330 [ 144.928486][ T7039] anon_inode_make_secure_inode+0x7b/0x180 [ 144.928515][ T7039] ? __kasan_kmalloc+0x93/0xb0 [ 144.928538][ T7039] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 144.928565][ T7039] ? __kmalloc_cache_noprof+0x31c/0x600 [ 144.928599][ T7039] ? __kmalloc_cache_noprof+0x148/0x600 [ 144.928632][ T7039] ? kvm_gmem_create+0x131/0x610 [ 144.928671][ T7039] kvm_gmem_create+0x17c/0x610 [ 144.928708][ T7039] kvm_vm_ioctl+0x99b/0xd30 [ 144.928744][ T7039] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 144.928805][ T7039] ? kasan_quarantine_put+0xbb/0x1f0 [ 144.928850][ T7039] ? tomoyo_path_number_perm+0x219/0x5f0 [ 144.928876][ T7039] ? tomoyo_path_number_perm+0x219/0x5f0 [ 144.928905][ T7039] ? do_vfs_ioctl+0x116f/0x1530 [ 144.928930][ T7039] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 144.928967][ T7039] ? hook_file_ioctl+0x1f2/0x600 [ 144.929012][ T7039] ? __fget_files+0x2a/0x420 [ 144.929049][ T7039] ? __fget_files+0x2a/0x420 [ 144.929082][ T7039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 144.929112][ T7039] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 144.929142][ T7039] __se_sys_ioctl+0xfc/0x170 [ 144.929180][ T7039] do_syscall_64+0x166/0x520 [ 144.929202][ T7039] ? trace_irq_disable+0x3b/0x140 [ 144.929236][ T7039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.929262][ T7039] ? clear_bhb_loop+0x70/0xc0 [ 144.929291][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.929314][ T7039] RIP: 0033:0x7f2aa319e159 [ 144.929336][ T7039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.929356][ T7039] RSP: 002b:00007f2aa4053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.929382][ T7039] RAX: ffffffffffffffda RBX: 00007f2aa3425fa0 RCX: 00007f2aa319e159 [ 144.929400][ T7039] RDX: 00002000000001c0 RSI: 00000000c040aed4 RDI: 0000000000000006 [ 144.929416][ T7039] RBP: 00007f2aa323503b R08: 0000000000000000 R09: 0000000000000000 [ 144.929431][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.929444][ T7039] R13: 00007f2aa3426038 R14: 00007f2aa3425fa0 R15: 00007ffc29e65508 [ 144.929479][ T7039] [ 144.945471][ T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 145.029144][ T43] usb 7-1: device descriptor read/8, error -71 [ 145.174208][ T43] usb usb7-port1: unable to enumerate USB device [ 145.192444][ T4982] EXT4-fs warning: 3 callbacks suppressed [ 145.192464][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 145.192490][ T4982] EXT4-fs error: 3 callbacks suppressed [ 145.192501][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 145.192703][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 145.192739][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 145.193015][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 145.193041][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 145.193178][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 145.193205][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 145.193349][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 145.193376][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 145.193556][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 145.193583][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 146.156440][ T7046] netlink: 30 bytes leftover after parsing attributes in process `syz.0.219'. [ 146.156490][ T7046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.219'. [ 146.202227][ T7049] program syz.1.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.210888][ T7049] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:21 [ 146.230999][ T12] IPVS: starting estimator thread 0... [ 146.325611][ T7050] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.503511][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 146.517057][ T7053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.341278][ T7062] FAULT_INJECTION: forcing a failure. [ 147.341278][ T7062] name failslab, interval 1, probability 0, space 0, times 0 [ 147.349052][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 147.349084][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.349098][ T7062] Call Trace: [ 147.349108][ T7062] [ 147.349119][ T7062] dump_stack_lvl+0xe8/0x150 [ 147.349155][ T7062] should_fail_ex+0x3eb/0x540 [ 147.349186][ T7062] should_failslab+0xa8/0x100 [ 147.349215][ T7062] __kmalloc_noprof+0xf9/0x710 [ 147.349249][ T7062] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 147.349284][ T7062] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 147.349327][ T7062] __memcg_list_lru_alloc+0x1d9/0x760 [ 147.349373][ T7062] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 147.349427][ T7062] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 147.349465][ T7062] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 147.349528][ T7062] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 147.349564][ T7062] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 147.349596][ T7062] ? __d_alloc+0x37/0x6f0 [ 147.349624][ T7062] ? __d_alloc+0x37/0x6f0 [ 147.349668][ T7062] __d_alloc+0x37/0x6f0 [ 147.349705][ T7062] d_alloc_parallel+0xde/0x16b0 [ 147.349742][ T7062] ? lock_acquire+0x115/0x350 [ 147.349785][ T7062] ? __d_lookup+0x66/0x790 [ 147.349820][ T7062] ? __d_lookup+0x66/0x790 [ 147.349853][ T7062] ? __pfx_d_alloc_parallel+0x10/0x10 [ 147.349888][ T7062] ? d_lookup+0x1f/0xa0 [ 147.349923][ T7062] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 147.349962][ T7062] lookup_open+0x26b/0x1380 [ 147.350008][ T7062] ? lookup_fast+0x1a8/0x5d0 [ 147.350047][ T7062] path_openat+0x696/0x1e40 [ 147.350108][ T7062] do_file_open+0x23e/0x4a0 [ 147.350148][ T7062] ? __pfx_do_file_open+0x10/0x10 [ 147.350207][ T7062] ? _raw_spin_unlock+0x28/0x50 [ 147.350238][ T7062] ? alloc_fd+0x651/0x6c0 [ 147.350276][ T7062] do_sys_openat2+0x115/0x200 [ 147.350307][ T7062] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.350340][ T7062] ? do_user_addr_fault+0xd3f/0x1480 [ 147.350379][ T7062] __x64_sys_openat+0x138/0x170 [ 147.350411][ T7062] do_syscall_64+0x166/0x520 [ 147.350433][ T7062] ? trace_irq_disable+0x3b/0x140 [ 147.350465][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.350496][ T7062] ? clear_bhb_loop+0x70/0xc0 [ 147.350524][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.350548][ T7062] RIP: 0033:0x7f2aa315e98e [ 147.350569][ T7062] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.350589][ T7062] RSP: 002b:00007f2aa4031b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.350615][ T7062] RAX: ffffffffffffffda RBX: 00007f2aa40326c0 RCX: 00007f2aa315e98e [ 147.350633][ T7062] RDX: 000000000014a002 RSI: 00007f2aa4031c00 RDI: ffffffffffffff9c [ 147.350648][ T7062] RBP: 00007f2aa4031c00 R08: 0000000000000000 R09: 0000000000000000 [ 147.350663][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 147.350678][ T7062] R13: 00007f2aa3426128 R14: 00007f2aa3426090 R15: 00007ffc29e65508 [ 147.350714][ T7062] [ 148.350412][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 148.350447][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 148.350646][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 148.399088][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 148.399462][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 148.399491][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 148.399630][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 148.399656][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 148.862165][ T5605] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 149.012286][ T5605] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 149.013513][ T5605] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.016080][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.016106][ T5605] usb 7-1: Product: syz [ 149.016122][ T5605] usb 7-1: Manufacturer: syz [ 149.016139][ T5605] usb 7-1: SerialNumber: syz [ 149.085194][ T5605] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 149.122226][ T5605] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 150.366368][ T7099] overlay: Unknown parameter 'fsuuid' [ 150.434349][ T5605] usb 7-1: USB disconnect, device number 19 [ 150.490707][ T5605] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 150.506189][ T5605] cyberjack 7-1:1.0: device disconnected [ 151.238505][ T63] IPVS: starting estimator thread 0... [ 151.324434][ T7112] IPVS: using max 25 ests per chain, 60000 per kthread [ 151.419817][ T4982] EXT4-fs warning: 5 callbacks suppressed [ 151.419839][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 151.419868][ T4982] EXT4-fs error: 5 callbacks suppressed [ 151.419880][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 151.420070][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 151.420097][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 151.420352][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 151.420379][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 151.420517][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 151.420544][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 151.420684][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 151.420710][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 151.485631][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 151.485667][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 151.719540][ T7115] sg_write: data in/out 441308/186 bytes for SCSI command 0x0-- guessing data in; [ 151.719540][ T7115] program syz.5.244 not setting count and/or reply_len properly [ 151.942393][ T7120] netlink: 'syz.6.246': attribute type 9 has an invalid length. [ 152.182239][ T7125] FAULT_INJECTION: forcing a failure. [ 152.182239][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 152.182273][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.5.247 Not tainted syzkaller #0 PREEMPT(full) [ 152.182299][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.182313][ T7125] Call Trace: [ 152.182322][ T7125] [ 152.182332][ T7125] dump_stack_lvl+0xe8/0x150 [ 152.182368][ T7125] should_fail_ex+0x3eb/0x540 [ 152.182399][ T7125] should_failslab+0xa8/0x100 [ 152.182437][ T7125] ? security_inode_alloc+0x39/0x310 [ 152.182466][ T7125] kmem_cache_alloc_noprof+0x9c/0x600 [ 152.182501][ T7125] ? __pfx_make_kgid+0x10/0x10 [ 152.182529][ T7125] ? security_inode_alloc+0x39/0x310 [ 152.182568][ T7125] security_inode_alloc+0x39/0x310 [ 152.182598][ T7125] inode_init_always_gfp+0x97e/0xd30 [ 152.182633][ T7125] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 152.182664][ T7125] alloc_inode+0x82/0x1b0 [ 152.182692][ T7125] new_inode+0x1f/0x170 [ 152.182718][ T7125] ? shmem_get_inode+0x29a/0x1030 [ 152.182752][ T7125] shmem_get_inode+0x3a4/0x1030 [ 152.182792][ T7125] ? __pfx_shmem_get_inode+0x10/0x10 [ 152.182826][ T7125] ? mas_preallocate+0x55e/0x840 [ 152.182866][ T7125] __shmem_file_setup+0x20b/0x370 [ 152.182894][ T7125] ? __pfx___shmem_file_setup+0x10/0x10 [ 152.182925][ T7125] ? vma_set_pgoff+0x163/0x2d0 [ 152.182954][ T7125] shmem_zero_setup+0x90/0x130 [ 152.182982][ T7125] mmap_region+0x18bb/0x2270 [ 152.183023][ T7125] ? __pfx_mmap_region+0x10/0x10 [ 152.183050][ T7125] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.183087][ T7125] ? rcu_is_watching+0x16/0xb0 [ 152.183111][ T7125] ? trace_hrtimer_start+0x82/0x200 [ 152.183206][ T7125] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 152.183278][ T7125] ? __pfx_shmem_get_unmapped_area+0x10/0x10 [ 152.183303][ T7125] ? cap_mmap_addr+0xb1/0xf0 [ 152.183325][ T7125] ? bpf_lsm_mmap_addr+0x9/0x50 [ 152.183352][ T7125] ? security_mmap_addr+0x71/0x240 [ 152.183398][ T7125] do_mmap+0xe0a/0x1300 [ 152.183441][ T7125] ? __pfx_do_mmap+0x10/0x10 [ 152.183480][ T7125] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 152.183501][ T7125] ? down_write_killable+0x179/0x230 [ 152.183530][ T7125] ? __pfx_down_write_killable+0x10/0x10 [ 152.183556][ T7125] ? apparmor_mmap_file+0x1cc/0x390 [ 152.183589][ T7125] ? security_mmap_file+0x4df/0xa20 [ 152.183629][ T7125] vm_mmap_pgoff+0x272/0x4e0 [ 152.183661][ T7125] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 152.183687][ T7125] ? rcu_is_watching+0x16/0xb0 [ 152.183713][ T7125] ? ksys_mmap_pgoff+0xf3/0x760 [ 152.183740][ T7125] ? __x64_sys_mmap+0x7f/0x140 [ 152.183777][ T7125] do_syscall_64+0x166/0x520 [ 152.183798][ T7125] ? trace_irq_disable+0x3b/0x140 [ 152.183830][ T7125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.183854][ T7125] ? clear_bhb_loop+0x70/0xc0 [ 152.183883][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.183906][ T7125] RIP: 0033:0x7f373639e159 [ 152.183927][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.183948][ T7125] RSP: 002b:00007f37371ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 152.183972][ T7125] RAX: ffffffffffffffda RBX: 00007f3736626360 RCX: 00007f373639e159 [ 152.183989][ T7125] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 152.184004][ T7125] RBP: 00007f373643503b R08: ffffffffffffffff R09: 0000000000000000 [ 152.184019][ T7125] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 152.184033][ T7125] R13: 00007f37366263f8 R14: 00007f3736626360 R15: 00007fffb616c038 [ 152.184069][ T7125] [ 153.573569][ T7145] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #265: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 153.573608][ T7145] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #265: comm dhcpcd: checksumming directory block 0 [ 153.801504][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 153.956385][ T43] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 153.957850][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 153.957901][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.994373][ T43] usb 7-1: config 0 descriptor?? [ 154.025204][ T5626] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 154.025242][ T5626] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 154.025830][ T5626] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 154.025889][ T5626] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 154.026350][ T5626] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 154.026378][ T5626] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 154.428436][ T43] input: HID 056e:011c as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056E:011C.0007/input/input13 [ 154.559940][ T43] elecom 0003:056E:011C.0007: input,hidraw0: USB HID v0.04 Joystick [HID 056e:011c] on usb-dummy_hcd.6-1/input0 [ 154.638219][ T7148] udevd[7148]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 156.129575][ T7151] FAULT_INJECTION: forcing a failure. [ 156.129575][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 156.129646][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 156.129673][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.129687][ T7151] Call Trace: [ 156.129697][ T7151] [ 156.129707][ T7151] dump_stack_lvl+0xe8/0x150 [ 156.129744][ T7151] should_fail_ex+0x3eb/0x540 [ 156.129779][ T7151] should_failslab+0xa8/0x100 [ 156.129807][ T7151] __kvmalloc_node_noprof+0x171/0x820 [ 156.129842][ T7151] ? nla_strdup+0x9d/0x140 [ 156.129872][ T7151] ? nla_strdup+0xb8/0x140 [ 156.129901][ T7151] ? nf_tables_newchain+0x1c9a/0x28b0 [ 156.129925][ T7151] ? nf_tables_newchain+0x1c9a/0x28b0 [ 156.129957][ T7151] nf_tables_newchain+0x1c9a/0x28b0 [ 156.129997][ T7151] ? __pfx_nf_tables_newchain+0x10/0x10 [ 156.130053][ T7151] ? lock_acquire+0x115/0x350 [ 156.130088][ T7151] ? nfnl_pernet+0x23/0x240 [ 156.130123][ T7151] ? __nla_parse+0x40/0x60 [ 156.130158][ T7151] nfnetlink_rcv+0x1288/0x28c0 [ 156.130221][ T7151] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 156.130265][ T7151] ? ref_tracker_free+0x689/0x830 [ 156.130319][ T7151] ? skb_clone+0x246/0x3a0 [ 156.130350][ T7151] ? __netlink_deliver_tap+0x811/0x860 [ 156.130389][ T7151] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.130418][ T7151] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.130453][ T7151] netlink_unicast+0x7bd/0x940 [ 156.130491][ T7151] netlink_sendmsg+0x7c3/0xae0 [ 156.130528][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.130567][ T7151] ? apparmor_socket_sendmsg+0x98/0x360 [ 156.130594][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.130630][ T7151] sock_sendmsg_nosec+0x13a/0x180 [ 156.130667][ T7151] ____sys_sendmsg+0x54e/0x850 [ 156.130699][ T7151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.130734][ T7151] ? import_iovec+0x73/0xa0 [ 156.130768][ T7151] ___sys_sendmsg+0x2a5/0x360 [ 156.130792][ T7151] ? __lock_acquire+0x747/0x2de0 [ 156.130830][ T7151] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.130894][ T7151] ? __fget_files+0x2a/0x420 [ 156.130923][ T7151] ? __fget_files+0x3a2/0x420 [ 156.130963][ T7151] __x64_sys_sendmsg+0x1b1/0x290 [ 156.130992][ T7151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.131042][ T7151] do_syscall_64+0x166/0x520 [ 156.131064][ T7151] ? trace_irq_disable+0x3b/0x140 [ 156.131096][ T7151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.131122][ T7151] ? clear_bhb_loop+0x70/0xc0 [ 156.131150][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.131173][ T7151] RIP: 0033:0x7f0bf179e159 [ 156.131194][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.131214][ T7151] RSP: 002b:00007f0bf2753028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.131239][ T7151] RAX: ffffffffffffffda RBX: 00007f0bf1a25fa0 RCX: 00007f0bf179e159 [ 156.131256][ T7151] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 156.131271][ T7151] RBP: 00007f0bf2753090 R08: 0000000000000000 R09: 0000000000000000 [ 156.131286][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.131299][ T7151] R13: 00007f0bf1a26038 R14: 00007f0bf1a25fa0 R15: 00007ffd957d64d8 [ 156.131333][ T7151] [ 157.505324][ T4982] EXT4-fs warning: 15 callbacks suppressed [ 157.505347][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.505374][ T4982] EXT4-fs error: 15 callbacks suppressed [ 157.505386][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 157.580579][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.580613][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 157.580924][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.580952][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 157.581091][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.581118][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 157.581258][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.581419][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 157.581566][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.581593][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 158.239691][ T7161] FAULT_INJECTION: forcing a failure. [ 158.239691][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.239732][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.5.253 Not tainted syzkaller #0 PREEMPT(full) [ 158.239758][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.239779][ T7161] Call Trace: [ 158.239791][ T7161] [ 158.239802][ T7161] dump_stack_lvl+0xe8/0x150 [ 158.239836][ T7161] should_fail_ex+0x3eb/0x540 [ 158.239868][ T7161] _copy_from_user+0x2d/0xb0 [ 158.239899][ T7161] ___sys_sendmsg+0x1c6/0x360 [ 158.239925][ T7161] ? __lock_acquire+0x747/0x2de0 [ 158.239963][ T7161] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.239986][ T7161] ? __lock_acquire+0x747/0x2de0 [ 158.240024][ T7161] ? kstrtouint+0x6e/0xe0 [ 158.240088][ T7161] __sys_sendmmsg+0x273/0x4d0 [ 158.240121][ T7161] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.240158][ T7161] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.240197][ T7161] ? ksys_write+0x242/0x270 [ 158.240233][ T7161] ? __pfx_ksys_write+0x10/0x10 [ 158.240271][ T7161] __x64_sys_sendmmsg+0xa0/0xc0 [ 158.240299][ T7161] do_syscall_64+0x166/0x520 [ 158.240321][ T7161] ? trace_irq_disable+0x3b/0x140 [ 158.240353][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.240377][ T7161] ? clear_bhb_loop+0x70/0xc0 [ 158.240405][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.240429][ T7161] RIP: 0033:0x7f373639e159 [ 158.240450][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.240470][ T7161] RSP: 002b:00007f3737252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.240495][ T7161] RAX: ffffffffffffffda RBX: 00007f3736625fa0 RCX: 00007f373639e159 [ 158.240512][ T7161] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 158.240528][ T7161] RBP: 00007f3737252090 R08: 0000000000000000 R09: 0000000000000000 [ 158.240543][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.240556][ T7161] R13: 00007f3736626038 R14: 00007f3736625fa0 R15: 00007fffb616c038 [ 158.240591][ T7161] [ 158.761339][ C0] sched: DL replenish lagged too much [ 158.981887][ T5605] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 159.111539][ T5605] usb 6-1: device descriptor read/64, error -71 [ 159.211471][ T6469] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.361478][ T5605] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 159.361655][ T6469] usb 1-1: Using ep0 maxpacket: 16 [ 159.362587][ T6469] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 4.00 [ 159.362657][ T6469] usb 1-1: no configurations [ 159.362672][ T6469] usb 1-1: can't read configurations, error -22 [ 159.491510][ T5605] usb 6-1: device descriptor read/64, error -71 [ 159.492616][ T6469] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.601811][ T5605] usb usb6-port1: attempt power cycle [ 159.641653][ T6469] usb 1-1: Using ep0 maxpacket: 16 [ 159.648642][ T6469] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 4.00 [ 159.648689][ T6469] usb 1-1: no configurations [ 159.648704][ T6469] usb 1-1: can't read configurations, error -22 [ 159.649190][ T6469] usb usb1-port1: attempt power cycle [ 159.951547][ T5605] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 159.974269][ T5605] usb 6-1: device descriptor read/8, error -71 [ 159.987798][ T6469] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 160.012362][ T6469] usb 1-1: Using ep0 maxpacket: 16 [ 160.013176][ T6469] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 4.00 [ 160.013218][ T6469] usb 1-1: no configurations [ 160.013232][ T6469] usb 1-1: can't read configurations, error -22 [ 160.141440][ T6469] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 160.162880][ T6469] usb 1-1: Using ep0 maxpacket: 16 [ 160.164440][ T6469] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 4.00 [ 160.164482][ T6469] usb 1-1: no configurations [ 160.164497][ T6469] usb 1-1: can't read configurations, error -22 [ 160.166058][ T6469] usb usb1-port1: unable to enumerate USB device [ 160.221461][ T5605] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 160.245143][ T5605] usb 6-1: device descriptor read/8, error -71 [ 160.351694][ T5605] usb usb6-port1: unable to enumerate USB device [ 162.020363][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.020402][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 162.020584][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.020612][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 162.020888][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.020924][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 162.021062][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.021089][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 162.551432][ T6469] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 162.691691][ T6469] usb 1-1: device descriptor read/64, error -71 [ 162.931658][ T6469] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 163.082602][ T6469] usb 1-1: device descriptor read/64, error -71 [ 163.198988][ T6469] usb usb1-port1: attempt power cycle [ 163.551443][ T6469] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 163.572222][ T6469] usb 1-1: device descriptor read/8, error -71 [ 163.785252][ T5605] usb 7-1: USB disconnect, device number 20 [ 163.814497][ T6469] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 163.846074][ T6469] usb 1-1: device descriptor read/8, error -71 [ 163.954893][ T6469] usb usb1-port1: unable to enumerate USB device [ 164.638159][ T7197] warning: `syz.6.270' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.681496][ T5622] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 164.821501][ T5622] usb 6-1: device descriptor read/64, error -71 [ 165.071428][ T5622] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 165.204831][ T5622] usb 6-1: device descriptor read/64, error -71 [ 165.256744][ T4982] EXT4-fs warning: 2 callbacks suppressed [ 165.256766][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 165.256793][ T4982] EXT4-fs error: 2 callbacks suppressed [ 165.256805][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 165.257771][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 165.257803][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 165.258869][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 165.258899][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 165.282683][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 165.282720][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 165.301857][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 165.301893][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 165.321905][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 165.321940][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 165.335557][ T5622] usb usb6-port1: attempt power cycle [ 165.811431][ T5622] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 165.836068][ T5622] usb 6-1: device descriptor read/8, error -71 [ 166.111430][ T5622] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 166.149468][ T5622] usb 6-1: device descriptor read/8, error -71 [ 166.188595][ T7215] netlink: 208 bytes leftover after parsing attributes in process `syz.6.274'. [ 166.252148][ T5622] usb usb6-port1: unable to enumerate USB device [ 166.798589][ T7227] capability: warning: `syz.6.278' uses deprecated v2 capabilities in a way that may be insecure [ 169.576809][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 169.576845][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 169.578710][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 169.578737][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 169.598100][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 169.598133][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 169.598308][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 169.598335][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 169.645037][ T7231] syz.0.279 (7231) used greatest stack depth: 18440 bytes left [ 170.108986][ T7240] netlink: 'syz.0.281': attribute type 9 has an invalid length. [ 170.929775][ T7255] FAULT_INJECTION: forcing a failure. [ 170.929775][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 170.929812][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: syz.0.289 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.929842][ T7255] Tainted: [L]=SOFTLOCKUP [ 170.929851][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.929866][ T7255] Call Trace: [ 170.929875][ T7255] [ 170.929885][ T7255] dump_stack_lvl+0xe8/0x150 [ 170.929921][ T7255] should_fail_ex+0x3eb/0x540 [ 170.929952][ T7255] should_failslab+0xa8/0x100 [ 170.929978][ T7255] ? alloc_empty_file+0x5b/0x1d0 [ 170.930003][ T7255] kmem_cache_alloc_noprof+0x9c/0x600 [ 170.930047][ T7255] ? alloc_empty_file+0x5b/0x1d0 [ 170.930079][ T7255] alloc_empty_file+0x5b/0x1d0 [ 170.930106][ T7255] alloc_file_pseudo+0x110/0x1e0 [ 170.930135][ T7255] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 170.930173][ T7255] anon_inode_getfile+0xc5/0x1a0 [ 170.930204][ T7255] media_request_alloc+0x276/0x5b0 [ 170.930237][ T7255] media_device_request_alloc+0x98/0xd0 [ 170.930274][ T7255] media_device_ioctl+0x281/0x490 [ 170.930311][ T7255] ? __pfx_media_device_ioctl+0x10/0x10 [ 170.930370][ T7255] ? __fget_files+0x3a2/0x420 [ 170.930398][ T7255] ? __fget_files+0x2a/0x420 [ 170.930426][ T7255] ? __pfx_media_device_ioctl+0x10/0x10 [ 170.930460][ T7255] ? media_ioctl+0xfe/0x120 [ 170.930498][ T7255] ? __pfx_media_ioctl+0x10/0x10 [ 170.930533][ T7255] __se_sys_ioctl+0xfc/0x170 [ 170.930571][ T7255] do_syscall_64+0x166/0x520 [ 170.930592][ T7255] ? trace_irq_disable+0x3b/0x140 [ 170.930625][ T7255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.930649][ T7255] ? clear_bhb_loop+0x70/0xc0 [ 170.930677][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.930701][ T7255] RIP: 0033:0x7f2aa319e159 [ 170.930722][ T7255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.930742][ T7255] RSP: 002b:00007f2aa4053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.930767][ T7255] RAX: ffffffffffffffda RBX: 00007f2aa3425fa0 RCX: 00007f2aa319e159 [ 170.930785][ T7255] RDX: 0000200000000080 RSI: 0000000080047c05 RDI: 0000000000000003 [ 170.930800][ T7255] RBP: 00007f2aa4053090 R08: 0000000000000000 R09: 0000000000000000 [ 170.930815][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.930829][ T7255] R13: 00007f2aa3426038 R14: 00007f2aa3425fa0 R15: 00007ffc29e65508 [ 170.930864][ T7255] [ 171.708773][ T7265] EXT4-fs warning: 2 callbacks suppressed [ 171.708794][ T7265] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1267: comm kworker/u8:1: No space for directory leaf checksum. Please run e2fsck -D. [ 171.708822][ T7265] EXT4-fs error: 2 callbacks suppressed [ 171.708835][ T7265] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1267: comm kworker/u8:1: checksumming directory block 0 [ 171.710137][ T7266] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1267: comm kworker/u8:1: No space for directory leaf checksum. Please run e2fsck -D. [ 171.710168][ T7266] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1267: comm kworker/u8:1: checksumming directory block 0 [ 171.959631][ T7271] veth1_macvtap: left promiscuous mode [ 171.959661][ T7271] macsec0: entered promiscuous mode [ 171.959677][ T7271] macsec0: entered allmulticast mode [ 171.987142][ T7271] veth1_macvtap: entered promiscuous mode [ 171.987166][ T7271] veth1_macvtap: entered allmulticast mode [ 171.988638][ T7271] macsec0: left promiscuous mode [ 171.988853][ T7271] macsec0: left allmulticast mode [ 171.988870][ T7271] veth1_macvtap: left allmulticast mode [ 172.038316][ T7272] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1267: comm kworker/u8:5: No space for directory leaf checksum. Please run e2fsck -D. [ 172.038439][ T7272] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1267: comm kworker/u8:5: checksumming directory block 0 [ 172.039624][ T7273] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1267: comm kworker/u8:5: No space for directory leaf checksum. Please run e2fsck -D. [ 172.039656][ T7273] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1267: comm kworker/u8:5: checksumming directory block 0 [ 172.289696][ T7275] loop6: detected capacity change from 0 to 8 [ 172.685838][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 172.685875][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 172.688455][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 172.688489][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 172.688784][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 172.688812][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 172.688950][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 172.688977][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 172.689154][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 172.689181][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 172.689318][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 172.689344][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 172.946757][ T7275] Dev loop6: unable to read RDB block 8 [ 172.946804][ T7275] loop6: unable to read partition table [ 172.947011][ T7275] loop6: partition table beyond EOD, truncated [ 172.948566][ T7275] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 173.456079][ T7276] Dev loop6: unable to read RDB block 8 [ 173.456125][ T7276] loop6: unable to read partition table [ 173.456370][ T7276] loop6: partition table beyond EOD, truncated [ 173.491441][ T5605] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 173.641491][ T5605] usb 1-1: Using ep0 maxpacket: 8 [ 173.644483][ T5605] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 173.646155][ T5605] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.646183][ T5605] usb 1-1: config 179 has no interface number 0 [ 173.646227][ T5605] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 173.646257][ T5605] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 173.646288][ T5605] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.646316][ T5605] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.646341][ T5605] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.646371][ T5605] usb 1-1: config 179 interface 65 has no altsetting 0 [ 173.646407][ T5605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.907118][ T5605] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 174.948565][ T5605] usb 1-1: USB disconnect, device number 23 [ 174.948641][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 175.234537][ T6469] Process accounting resumed [ 175.298773][ T30] audit: type=1800 audit(1789523264.931:6): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.298" name="syzkaller0" dev="sda1" ino=2051 res=0 errno=0 [ 175.529800][ T7298] Process accounting resumed [ 175.623045][ T5605] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 175.771398][ T5605] usb 7-1: Using ep0 maxpacket: 32 [ 175.772738][ T5605] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 175.810421][ T5605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.810454][ T5605] usb 7-1: Product: syz [ 175.810471][ T5605] usb 7-1: Manufacturer: syz [ 175.810488][ T5605] usb 7-1: SerialNumber: syz [ 175.848416][ T5605] usb 7-1: config 0 descriptor?? [ 175.891488][ T6469] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 176.061591][ T6469] usb 1-1: Using ep0 maxpacket: 32 [ 176.066996][ T6469] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 176.103710][ T6469] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 176.103743][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.103792][ T6469] usb 1-1: config 0 has no interface number 0 [ 176.103835][ T6469] usb 1-1: config 0 interface 89 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.103866][ T6469] usb 1-1: config 0 interface 89 has no altsetting 0 [ 176.152816][ T6469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.152845][ T6469] usb 1-1: Product: syz [ 176.152862][ T6469] usb 1-1: Manufacturer: syz [ 176.152906][ T6469] usb 1-1: SerialNumber: syz [ 176.213116][ T6469] usb 1-1: config 0 descriptor?? [ 176.218318][ T6469] hub 1-1:0.89: bad descriptor, ignoring hub [ 176.218951][ T6469] hub 1-1:0.89: probe with driver hub failed with error -5 [ 176.249021][ T6469] option 1-1:0.89: GSM modem (1-port) converter detected [ 176.297333][ T5605] airspy 7-1:0.0: Board ID: 00 [ 176.297359][ T5605] airspy 7-1:0.0: Firmware version: =TfТov6Ņ}?.XKzl;cnk,=Uo:X  ZD[xJ )ņ֑P18w׫] [ 176.514917][ T5605] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 176.579037][ T5605] airspy 7-1:0.0: Registered as swradio24 [ 176.579063][ T5605] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 176.607639][ T5605] usb 7-1: USB disconnect, device number 21 [ 176.686962][ T7315] udevd[7315]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/swradio24': Bad message [ 177.021099][ T7323] jffs2: notice: (7323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 177.348390][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.309'. [ 177.456877][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 177.511761][ T5605] usb 1-1: USB disconnect, device number 24 [ 177.530346][ T5605] option 1-1:0.89: device disconnected [ 178.713122][ T4982] EXT4-fs warning: 21 callbacks suppressed [ 178.713145][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 178.713173][ T4982] EXT4-fs error: 21 callbacks suppressed [ 178.713186][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 178.728459][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 178.728492][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 178.728777][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 178.728805][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 178.728943][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 178.728970][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 178.868795][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 178.868832][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 178.887497][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 178.900563][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 179.239743][ T7357] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 179.239770][ T7357] netlink: 'syz.1.319': attribute type 4 has an invalid length. [ 179.239785][ T7357] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.319'. [ 179.366352][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 185.667418][ T4982] udevd[4982]: worker [5631] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 185.765527][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 185.765565][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 185.767748][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 185.767778][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 186.585341][ T25] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 186.585445][ T25] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 186.641127][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 186.641163][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 186.658365][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 186.658403][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 186.658568][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 186.658596][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 186.658745][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 186.658773][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 190.648691][ T25] usb 2-1: USB disconnect, device number 17 [ 191.881701][ T5355] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #121: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 191.881741][ T5355] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #121: comm crond: checksumming directory block 0 [ 191.882833][ T5355] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #116: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 191.882863][ T5355] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #116: comm crond: checksumming directory block 0 [ 192.849559][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 192.849596][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #259: comm udevd: checksumming directory block 0 [ 192.849786][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 192.849814][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 192.850068][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 192.850095][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 192.850231][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 192.850258][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #264: comm udevd: checksumming directory block 0 [ 192.850405][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 192.850431][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1642: comm udevd: checksumming directory block 0 [ 192.850571][ T4982] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 192.850598][ T4982] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1480: comm udevd: checksumming directory block 0 [ 194.871709][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.879637][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.480542][ T4932] Bluetooth: hci1: command 0x0406 tx timeout [ 232.711921][ T4932] Bluetooth: hci2: command 0x0406 tx timeout [ 255.987733][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.996127][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.240215][ T5355] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #121: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 266.240254][ T5355] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #121: comm crond: checksumming directory block 0 [ 274.723074][ T5355] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #116: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 274.723112][ T5355] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #116: comm crond: checksumming directory block 0 [ 279.638411][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 317.352963][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.368622][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.681173][ T5355] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #121: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 348.400142][ T5355] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #121: comm crond: checksumming directory block 0 [ 355.453054][ T5355] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #116: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 355.453094][ T5355] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #116: comm crond: checksumming directory block 0 [ 371.049862][ T31] INFO: task kworker/0:1:10 blocked for more than 148 seconds. [ 371.049896][ T31] Tainted: G L syzkaller #0 [ 371.049910][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.049921][ T31] task:kworker/0:1 state:D stack:20728 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 371.049986][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 371.050041][ T31] Call Trace: [ 371.050054][ T31] [ 371.050070][ T31] __schedule+0x17dd/0x5940 [ 371.050127][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 371.050164][ T31] ? __pfx___schedule+0x10/0x10 [ 371.050215][ T31] ? schedule+0x90/0x2b0 [ 371.050253][ T31] schedule+0x164/0x2b0 [ 371.050289][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.050322][ T31] __mutex_lock+0x7c4/0x15a0 [ 371.050350][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 371.050378][ T31] ? reg_check_chans_work+0x1a1/0x1110 [ 371.050415][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.050449][ T31] ? add_lock_to_list+0xc7/0x100 [ 371.050481][ T31] reg_check_chans_work+0x1a1/0x1110 [ 371.050535][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 371.050574][ T31] ? lock_acquire+0x115/0x350 [ 371.050617][ T31] ? rcu_is_watching+0x16/0xb0 [ 371.050644][ T31] ? process_scheduled_works+0x97a/0x1630 [ 371.050672][ T31] process_scheduled_works+0xc3d/0x1630 [ 371.050732][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.050765][ T31] ? assign_work+0x3cf/0x5d0 [ 371.050797][ T31] worker_thread+0xa47/0xfb0 [ 371.050854][ T31] kthread+0x38b/0x480 [ 371.050888][ T31] ? __pfx_worker_thread+0x10/0x10 [ 371.050914][ T31] ? __pfx_kthread+0x10/0x10 [ 371.050948][ T31] ret_from_fork+0x514/0xb70 [ 371.050985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.051018][ T31] ? __switch_to+0xc89/0x1420 [ 371.051050][ T31] ? __pfx_kthread+0x10/0x10 [ 371.051084][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.051133][ T31] [ 371.067713][ T31] INFO: task kworker/R-ipv6_:3196 blocked for more than 148 seconds. [ 371.067747][ T31] Tainted: G L syzkaller #0 [ 371.067761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.067771][ T31] task:kworker/R-ipv6_ state:D stack:29320 pid:3196 tgid:3196 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 371.067847][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 371.067892][ T31] Call Trace: [ 371.067901][ T31] [ 371.067917][ T31] __schedule+0x17dd/0x5940 [ 371.067982][ T31] ? __pfx___schedule+0x10/0x10 [ 371.068026][ T31] ? schedule+0x90/0x2b0 [ 371.068064][ T31] schedule+0x164/0x2b0 [ 371.068099][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.068132][ T31] __mutex_lock+0x7c4/0x15a0 [ 371.068167][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 371.068195][ T31] ? addrconf_verify_work+0x19/0x30 [ 371.077124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.077174][ T31] ? rcu_is_watching+0x16/0xb0 [ 371.077201][ T31] ? process_scheduled_works+0x97a/0x1630 [ 371.077230][ T31] addrconf_verify_work+0x19/0x30 [ 371.077277][ T31] process_scheduled_works+0xc3d/0x1630 [ 371.077337][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.077363][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.077401][ T31] ? assign_work+0x3af/0x5d0 [ 371.077433][ T31] rescuer_thread+0x7c5/0x10e0 [ 371.077470][ T31] ? rescuer_thread+0xb8/0x10e0 [ 371.077519][ T31] kthread+0x38b/0x480 [ 371.077552][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 371.077580][ T31] ? __pfx_kthread+0x10/0x10 [ 371.077615][ T31] ret_from_fork+0x514/0xb70 [ 371.077651][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.077683][ T31] ? __switch_to+0xc89/0x1420 [ 371.077722][ T31] ? __pfx_kthread+0x10/0x10 [ 371.077756][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.077805][ T31] [ 371.077899][ T31] [ 371.077899][ T31] Showing all locks held in the system: [ 371.077910][ T31] locks held by kthreadd/2: 1, last CPU#1: [ 371.077927][ T31] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.078006][ T31] locks held by kworker/0:0/9: 4, on CPU#0: [ 371.078022][ T31] #0: ffff8880321b5d40 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078089][ T31] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078173][ T31] #2: ffff888036649440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 371.078246][ T31] #3: ffff8880776e5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 371.078313][ T31] locks held by kworker/0:1/10: 4, on CPU#0: [ 371.078329][ T31] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078395][ T31] #1: ffffc900000f7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078454][ T31] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 371.078522][ T31] #3: ffff888076b407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 [ 371.078602][ T31] locks held by kworker/u8:0/12: 3, last CPU#1: [ 371.078618][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078678][ T31] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078738][ T31] #2: ffff8880673e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 371.078803][ T31] locks held by kworker/u8:1/13: 3, last CPU#1: [ 371.078819][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078879][ T31] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.078940][ T31] #2: ffff888034fa07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 371.079003][ T31] locks held by kworker/R-mm_pe/14: 1, last CPU#0: [ 371.079020][ T31] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 371.079083][ T31] locks held by kworker/1:0/25: 3, last CPU#1: [ 371.079099][ T31] #0: ffff88807b07a140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.079165][ T31] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.079249][ T31] #2: ffff8880366b5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 371.079316][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 371.079333][ T31] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 371.079390][ T31] locks held by kworker/u8:2/37: 3, last CPU#1: [ 371.079407][ T31] #0: ffff88802bb2d940 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.079472][ T31] #1: ffffc90000ad7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.079533][ T31] #2: ffff888032390510 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 371.079596][ T31] locks held by kworker/1:1/43: 3, last CPU#1: [ 371.079612][ T31] #0: ffff888079129140 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630