last executing test programs:

6.808692748s ago: executing program 3 (id=6864):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)
getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.508964115s ago: executing program 3 (id=6869):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @none, 0xb}, 0xe)

5.48197282s ago: executing program 2 (id=6870):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x58, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.30874074s ago: executing program 4 (id=6872):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x7, 0x2}}, @common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x2, 0x1}, 0xfe}, 0x18)
readahead(r0, 0x8, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00'})
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
read$midi(r7, 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18)
ioctl$SNDCTL_SEQ_RESET(r9, 0x5100)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4180, 0x0)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0xff}, 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

5.305815309s ago: executing program 1 (id=6873):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @none, 0xb}, 0xe)

4.852651803s ago: executing program 2 (id=6875):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', <r1=>0x0, 0x1, 0x40, 0x5, 0x0, {{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101}}}})
sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="0a4165978936940b3a1a2aa00d3239c213e5b017bf0eadc3a9642f3b4a913df20eab80850a2d291aaea7a30d933b0561aee87d0f0fd18c0b32bd6fecb5d3fec1d48deee7c8706fdfcb38b3af1aef0ec002246147777fcec05bd06bb68ca87b66f5e9699b11a9b99211ff", 0x6a}], 0x1, &(0x7f0000000700)=[{0x10, 0x118, 0x83b2a18d}, {0xf8, 0x84, 0x101, "6b290300e4d628e72321bc25728b6d1a217f67602d9e9f1b16571036e46ebad17178c4a4b50afa26a05f2d3faab9523d16b450d80befad07a9746de7e0439ce89bb268d20a09864629018be6fb65ae579e02a876d0f98dd755e80520ebaafb0743c307c907644dc7f697b662f26e102c177e53a0f263cebc840ae8ae4c224f404459cb0801bceab05b02e8d33c4941388257778c43fcbe339150a3e4bd1b652d52d81e0f91ef9d4c3df206b4e472e60b09187e7498e04a6411afd5a2e152be4026ee9c000c99ae25db54c9f00f0e1492a0264989b308810b03987d7b5c4e557f3b"}, {0x70, 0x103, 0x8, "168147badec570a3c2ff8b4a4ce75945543ed1d42843a3976bf89b8f3fea0dcf82bf973d6360557fa666264aae0e91de5f607181f4842cc0cdf8b6d5342650723bd7f2a0f393845d74bb7419a8e94ac45c7bf54b8f2f2460d05e15"}, {0xf8, 0xff, 0x296a, "e219db13515bbefad3b038ac187290975e9969fcb72121b9cf069a0ac846e769117ee31b87516822197f168c930d67bc3b040d874e950949659882913789f22efb1928cc86badb658901d459789db2e8f0489ddc0defdd35a4a42d9079186604369999aefb4e8f63704e11928796661fc1fb45e1681727838b87821ead19e8568d61ffad756498a3ee9df4177519e542835abef825e768de4ffe0aa6a7eddcd3c47fccbc4622e514f6f766dda69c772efc9a2257147b68db10669e662e02f9f6fc30e0502fd8f93dba593cda9b4bc9165a9dac5b9355185855590e7499346ee3f9ef6c43bd03"}, {0x58, 0x11, 0x9, "bb6282a789cf52bb5266a0f795f3f008ce7fb81bf210fc0c0e1055ebcb4c4a7fbd0a00fe340e81308640cb592b80d3be35fdb48053c858052789d70b838ceb9d730ba4"}, {0xf8, 0x118, 0xffffffff, "72ace80bb7fbbb7de98d01801e43a05bfc37816051ce11a0d6ca3858725c201483e17e20f3c4130fc9e0a0ac715481e16d6883608f46b2b082d2807a2810db3658838fb7caeb50c674a6dac7c7777922ea1277115ab05e38d4ec2fd5776eeca6293f418d5048c9cb25f9b42b5c7ec6fc6ec361cc09ae4dd7c987dd026ff524100f0e47ff3407e91d492ecfa7c455cb020690aa56bca4f8c8084bcfecdc00e5d47d1fdca8b0f410d075a6aad849b3a57260f7881af373191995d1dfbc9850f3e665ce06af6a01ce24918c268ee49a2d5ee9a35ebea329c193bca34c74b5404bf3b1a507b80f"}, {0xe0, 0x114, 0x10000, "750a32dbd0c5032ff8c87d6a90e100a6128db48ecf40120d0826fbec52a1b44488cabf2d0f17cd725d0ca4ca69de863d151394b2ad8c0c738703e470e5edb7721c4b7ad714e6ccdfcf7baa74b73bebf3ec4b9fe8e0afd4c901e80d0d367898715d9017065ff49a2b0c286cff5069a71d033b4498148bc4c2d5c1894e1420d49672dc1d9b3f26ff6fca2645a575e5ca33075c10c7573db04718986f8a055b44d20b5428674c2e6da9d0b0ee54de3d2190678f58cc213c9bb7a640e661f6e62857d7ddd4ce975cee1f73b15180"}, {0x40, 0x88, 0xfffffffb, "108c37bc6335c721e3fff05ec3e569aa35f72b8dbce694235a1a84aeed7c23fe4d16df270f0009624d4e52634c64"}, {0xe0, 0x11, 0x3, "47bbe14defdee44f280dcba8cd8ff524bc0995343d5e22fb6473a81e90df42a983c341e6b13e0c23db82b2f76f17b35d44481612c8c02ebd93b3525c10f1b9abed70d1cbcea06cecf468a6862d01a2d95ffe90d01a9e71c1b035be164df11beb4459694813c1dcde272d8d47b09fac66df9f648d12aab5628ffa2e34e56f29a4b61592cfe2ae4fefe01077989927565232b768eb577908bf82c893c180653bb4c762c31e13b712a31384987866cd0127340879ea092b591187e67cb7544d9c106799652e1d986282e8d49f0ecf4634"}], 0x5c0}}, {{&(0x7f0000000d80)=@nl=@unspec, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)="b5ed8fa7b28845d7302afe2565ad03b3d8059ef0e287e99ab405714153e5442c4a1c", 0x22}], 0x1, &(0x7f0000000e80)=[{0x10, 0x115, 0x8872}, {0xa0, 0x10c, 0xee0, "b9bd3e2c4de181e41073d1c9c728f66838ba0a65034c0126a2dc2e105f9be8a2e2fc3f8520f7a2ac9c94a49ce4bce611170e0149ebecb31fa05ab07ecad731aa68efa560730f1896572a8f4f3c34d158b08e26ea7bf233163a9fb728e992de9e1ad3269bc0018f6ae4c87b2ebf5bbaeb4fd5124a3e7e5650cc064ed2c16bd5a1f7f8fdad125879c97e08513d"}, {0x28, 0x116, 0x1, "ff95f01ce7486fcbcc7522338243b6006d43"}], 0xd8}}, {{&(0x7f0000000f80)=@can={0x1d, r1}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001000)="4e5d19ac0ecc18e385536671941aac8489f3f2ce1fa97902435e3e629081fbd38a0363b30e1d2d5e5ffec599b34b5491c3be9531c0ec2e368b13", 0x3a}, {&(0x7f0000001040)="36070759c42d99c0e3595ae3217be59fb6b8aab319bd734de1", 0x19}], 0x2}}, {{&(0x7f00000011c0)=@pppoe={0x18, 0x0, {0x3, @multicast, 'wlan1\x00'}}, 0x83, &(0x7f0000001280)=[{&(0x7f0000001240)="332930d28edc65be27c7e35806e6d83becf5960076b5df97138459088729e8528fbd48a3fb455de8959fb812e454a660bb3ce26377", 0x35}], 0x1, &(0x7f00000012c0)=[{0x40, 0x6, 0xdf2d, "1d2d935618d6069a82fb05d474135d74176725810b8056fd0075dea1f300ae7fc9d7e60ba599063da72d"}, {0xc8, 0x10b, 0x101, "a7d80579bce6c5dfd1ebcf599f0bae3e69f2afed982b7d77f9f6ee3c9b5dfceeefcc9fbd92d5382ae912387456521f12f8b71aab24ae3b96342f5e5fb147f1a536ff74dce012f5b497286191dad9d87ff76129ebf2d39daff7887d2446c175be4f083bffb04ed36f08d67d95d5ecf36f226f6fc0e86b21b4ca293524724dcf8e2dfd5ad88951521b0ecdd382a0c87dc3fb5ff6cf824343745543edcdc4bf72587d36450d763b53b0ad8582f77a98d7bf7a1b4395d618b13b"}, {0x48, 0x11, 0x902, "463f461685196c27fd8070f1baf415f91e1cf63d08164c641e6a50c120d18a025e99a2ac1d5871c209a28766f5b3b92091bab0"}, {0x28, 0x0, 0x9, "fa3aaec60dbce2cfc0a618d27d44668043f221f6"}, {0xb8, 0x103, 0x3, "5140c9ead77c97479030190729ac8f1c7eed6cb222b5af06cbfab494ab62970b48e9e85c05857d13da7c06991bc991434cee7d9f5bbfb91d01e4446aa7759d6ca6368a4815988258b6859cea38ee6d1611e6ae8dd03a0730cff7021cb9bf9c508d80fb7e57e92b26efc2ec3f5f8aad014a2f4be1f4d9ee9fcea75603e6abcbb5dc1672b8926eb246eaf6e02f4b30ec32437345aa26280b454c313096481672203c"}, {0x110, 0x1, 0x3, "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"}, {0xa0, 0x108, 0x8, "5fae4dbe3cdee8a8e5343131d51a28f53562b90aa030d69f9564cae94567b0ae85fcc4bd726b819e46edbf708bfd86a0f4a77ca6d2f9d34a0c95da833005cddb8c45f4e41f5c28a4a7d1e5a7cfd000cb40f43e42cdb0423537dfe46b97b4d5988d271e18559a701d1550bc703b6a15043978acd6e93beaae080cfea23158d12202ca9d26489210537a76dce189490951"}, {0x68, 0x112, 0xc, "e14ee6453fe6e879dfe5a5fa027d886960e9d38c73fb00b6cdf55530e8b7a637b7efc95771b3d503fa69da3b0f4eb59e271c59a54be33d9aa68e71e3c3be0c1330551d8d24208a7f78f2edc898d0782d312d2c"}], 0x448}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)="8483e1863bd2d46a56829afb0794c26a974d6afbd35112e09db1c7c7494a5ad3e35f148aba4023405887f755e0295647a809ea536feda02654d31414612c67bfe1dc07d95044d61926f566528b9e41dedbd6599c7054b58dba470b65c1a8cdda6d58b23aa325f6eec19800"/119, 0x77}], 0x1, &(0x7f0000002cc0)=[{0x78, 0x12e, 0x38000000, "2acca790e218f26f6529f641c736313cc5566e982ff229a4e42b547ff983f0f19bbd2f35c495edfc7da1777a8d5c97ff3e24d43d5d97903e2a189ba41495cb18f2885951d4a6574e37758e68df0423686aefeacb916e449115b66131a330052fae022396"}, {0xe10, 0x101, 0xcb62, "f03e2114f5a9830a4c3803b020304f569660f755ab7962831fb8d1f0661aa62c704e969128eed82a1dfb5b3bae104034e2b0a8f1f3faaa0ca20611804e1e6da62c35c7db5f392731f134ccf107f16e944105af298c73e7074df4c324faad6168840bcf94976a86436d7fc03e3238133e4f81fc8efbe031816d26207975ec4d1ce567896d3cc52d175003fd5ea94208509d4740a0855f38050a75fc5d2bbeaa2f474a6ed30e43b171e280da2ee244b3f9f758cde1f3607d4a57c78a174b422975eacdb947346f3bef08f291d4b3168a58148c54571b1420b1546e797eec4db2ed90ed133e53a4b83248e07ac0a1d42f313935256552a4a6a071a254e4898c2703e24dec333f0c4fcdaad439a2ef2047b7921792f529090baf720b1ae0b8f981942cb086ecbbfe0500c4fe93a74a028afbe2fe09de9d8db080f7f868b3ee9b09f19026d2bf85e94bbb614a40b4a6450d2e3fd7ca888add116434eb8606eb2d9f17e55ef939c1b821ec033a6073efeb0e6148780ba1121c3c9d610e87420c835705d92d44a11b7a5e16076efc4cf95380b16b9395956894f645560de511d469f041487a110a84440e0b7b72bea279bd8b443d6e196ac86b24522be9c8b07375ff0f61ca74d7ae1c8b8c133d433764e932f8b4e154843185a0005d342c1a868c355c60c4b5f64f2638f6e00ce71fe3161a597e720505aeb9ceaf731017acfc672b9eca68274f0936d0fa1f6a2645d5254a5638a7e3da30bdaec6483830d1a12d451bf4efae23335422a75386a0e5f8aa82dae5016bdd3af2739468a302b60fb5f274c6746d4d6fb34412b19b296ee39c9d2d887cbdd5240023dcb39f6b5a3d7036fe6c60ecbf320de85d9c389ba6373a833577ddb3a5b3233b41a4d42ac68e96187fb0df0a3490ea465a98bd4935524cb73ab6821f389cc587001c18ef4b6b67f9ace7336ef5ce90c5e87a22feec0342fe3146f7a39d7e6c4b5bff3e96b84fdb250f4f0c03b1d44eae92d2ec27fae887b34e905d586fb7df9df9b233b6b923b206185f3d4f90495f9cf0045a92d65c8fdcd3a4a0653b56872c426cdc6a13de8d4662a4ed4614485f2ab02f4e3ef9f0b06122f698491ab0868127c2aa817287ff9b3423f2ef184a6badb6b9da0ce3e82c865aa84946ca3754057615cc058d32aa9812c8f83fbf82f325bc74e363a48b3fe72ca9ecd9bff21553b5b4067fb3fa0aa0807a75b0fde173cecdb0ec415b7a8428c815ff5516c93dbd5a69b61853a0b8cfafe5fec96fa3b923ff3f387b75c91891fa7db9bda8c2416b3e53017038d15c3e47608941a521e881e94b5ccd959078953884b1bcf9d2e0f4fad30029e919a25ae39040316456a0594e965fb186a45e3c6e885bae15cd11ec0fa0592e347d408c8d7bd5ff74ea16f6a568af80b00ca36372acf5d3b72440a5f3fde96c663f4dd0254db5abea7f6492a7b42a7fe3d069d183d0bd570f7f6db2569af8ffb26eefc0c2ec6b6ff8373c13946405e1e65bbaf74f167876219dea6c0aeae5f5936f1d89e61f5e3f95f16f4be682fcece8a34d041685cefdee7950a299cc8b8f600bb6deb194d13ce2f6c2107320db4b55d84561d8285d4fe0ba8f3a1606e0bde388c0a01db8c422896aebe510e00a9b10fe2393b4b151dc0462174d8ca342ee8b2abc8d586eeb072d5b06531cd97c6f54d56f89c6c41e5e65a545c43489b7b70a06c77702987071ee07ba3e90336fa761249cd8d2c144e6e48791e1fe23c125401cbddded4d928f3fff146b85cdea8f8181357b430f9b0e9b3a711713be57fbeb1706504ba51aeaa247ea291f15fcd56fa93d7f161cf1532a57cbc091e54ae3cebef5792190d36e2c5d2eff8442c1f2e839223e512045da27d7d535c5c81bbf049861d3578d6509c08139db71657dbb52234cf02d878599961c1db1b7c3ed10cb75e9afa803cbe2464da301d2e80a8580116cd9d549deecec6978ead21da24dd354747984cb1875994b6746f3f112c4a60f0f1a4966ff8e59dd7061fadde697cebb96355bacf1115ff887d4c26f06e67aca11e8374448aaf942afbc082358306a5e75f0033b741b40d973137521ca12318f2f908c02ee873a2bc414a7464bc3481af34cbdd08ab38a9eab9021369f36ef58aeb85ba60a3a51806a52be863e2260ddbf7ddbcc51402f83bb5b626f8ced8b64ad3ed4fd6114bd823ce5fc203fe6ef1204210f574d55a9cab01a56f197d0882dfb64017c3fe93c3d4a3d9fdd70f66f29c6b0ba271fb9c53dce7b9d7549cccba8fcd37f4d601d2d01272dd85ad1e4fb9ff3713ee3336f19faafc466e242d0e034476d80665adb62b3fff99bcae7bdf46fd12fc640b8d623287d0c4fd8fe89a98e4cc48ffd423a1384b87231d9e6a633c398f639a7a6947fc92856e4f7cace3a1bbfacbb29aadf8ab09b21a04eff67f231a9c27c09812ba1bc5322dde36fad08afbf4d18618a54d6cf138a1956dfad9bf2304c48512477f12510d5f5b2e25bc16bada7fe0fad8f15a1eb373463252a60abe6062646ae379658d3872c3bf692f7cf668541f92bb6e67548f0e4192796f453dbb0d7456e4f1b77c1cc186cc8a00a8cead6e2533d32dd3bacae3d1817d7ed450be8b1930c7ee950a8cf0b896cf177a5a40ac05535bbf33754e13af57034e4d1f848799a370365182a4643d530418e391f0a8d2f365dc7e4bb41aab1c5118fd6ad69fe54d4873890b2843b5dbdcff716ae234f0b1be0aef95d42d56a9703220b61a451f50602bb4c5f29d8ae9538c97fb4c57dbe413cb19d7bdf19d107954424cb68b0870cf02c2db16d09abd37f785e0a7e0c5bf56d9419a62640803142027d29441931d724a03e16067b2c1a85bdaa0c79b348df7e5562870bb2dc49b01758a10954ef200c889d75aea73a499ff572931e4b6ef1a87a4514dcab846c60f06cbf6ac0b5156b905988bd11af2b592623e468b2c6cca97bdf8c6913632f10bafed9a7a76d07c7d088cccde5dc4e06309bfd668fbcce5efe54a3675649accdce36227fd61196653eaf92b751c6e3fc999110cd45dbaef486a1fe276782bb1f53925b2e61db84e02777fe123241814e3e8a3aafe63d3e11c483ce5162ac542cf8bdc7684a6fc5e01d7c74fbb81e3763ab1fdfe1f1b2133404e27a3884aa9390d8bdf1f2a9b02e5a376161e1c25ca2e8ca8c924cce0b626fa42c274d38f068c7ef4a8ed0bec53219961126f5ff3e09dad14f41b9425b6beaa958b047e061d24d4955a046215adc5f477eb96b037daa84ccd6045c33ffceabbc23be16fda7a13cd09e351027cc9a9365ce68f1c01a327510b0bad8cb4b0aeb3ba3e3a113f15cc74b56702db9d73dbecf8cb4821bf6bff17b68a6d7b754fd1c69bcc000310a06afb117a224ad3ef464b6d2dccfa34ddba39c35bc637902c87cda879f77d1785dd74f7541e712b42bc96c476e17932f23c5ac3d693e829f0d621cd3263c2a4a196f944972ec43f2bb27626d53d9dbcf9ecbd29dc887bd7f2ab817725eaff028531b34a467587b29b5784d2f29bd0db4eb21caf7c77e21e00ef53ff2a20b92876d31be78f590a1a3929aff56b163abf5c05fde9d6ddedcd9a5e012f454fc6096412ce632f392ae485e2737088289f6759a9ccdfd1b1d0563968efcc35dd33d0a13efa8983fb5e33ff0fbd96e91c7c1d1261a9bdb1c416b1d3a2eac0bf5a871f15c35f239f5d309a370aa2951aa5fce2e771a7157d02475995593215698675e64a7d6491c71fac6d86185b9df6a683b7ba9fc214535ed939fe66faacaae87540fadcc105b9f7d198e6e58d66245b126fdd183fa34def4addf5da7a9f9b1827bc33fdec386e511ac8967ddebe8a10b1879504a0a91b002a91150ba7b05d4a923879c6c02f41d9e9954e46967a929af75d324edac4572ad342a1e3b1a4b56903fc9d43eb425262959a6c0356d3e05d54d14d6acbbf927dbcddfb4561ecda8130fff22b91da506b74da1b9c35d87ef0c1a97f9ed4bc514e545c17d6209b141063389067359beefc5ce33becef05ea4202fdff2de7b3be50dc045ae942700bcc9b82a99166429abdb079d36d040d301f4e77bcc2e8433f2372f758e1903da998ac1a17cc06f119ef27e52f89d11dac29be509e973ad4e78a5fa95831ea878f5680fddb77a9a57555dba2d324b3e13bc6ea18684be7dcb336ac9247aa9fcba0459a283c41cda6b6197cbeb9e2d335e7bcc783ab4bb46695d9c66a9a6d099ace8d2151f280261acb65e409e75078d58d578f6ff2b39a1bf5897a161d0bef10721fb27d2ab7462ee2d85615ff48a838862eabf638e807c1e64a9c86708dc09937a2f1f67836af52ee66ace890717c371a783e3adcbf456e52dc4377859d035bb36e0356eb32e92b31d900efa3aca91326f4ebb1fabd06a203d11a5dc29fdc1936937a79d10b15670cb86b052e0aeead86367bf798a78b4d20887b4ad7e49c495cf618a29a8b26177c6a1808d9cc52286638fff5c3d49bd8b2fa35515e1f5606faeffa5f8f8910cec035ce5ea905c8c3a40b73936f75255b798c17af45cdf5733bc2e60febb76f7729f3d0e39cea3fba619d2871a9d3574ab8fd631207fbf83ccc5da311f11fed7b8642474c72f60b00414234dbf1b4a47979a4afd270d20d23cdf2988a4cb3c94403c72250fbaa72136b847f8f956a5a940e2da64bf069d83340addaefe415206612f10323044f4c5aa9f92a870b18efba6318f7c1e44821c981aca0b7f1acde97484c6181ce2c17a5f6bacb45a5b6074046051ba2c365416e8c2ae178f5d60f6914a97b76512963bc668b74b7d49ccab7e4c996565a8fe7c92ec7366e133a81dba8a56296e70dcd0b4a2e9f98416f477755c0b63fdf0a577638c971906cf9608ad50fdd613e3d153058fddde98d673cdf1fac3a1937fb75d4803f9e1d24d5c7b0092a05fb1c59db25827a3aa2d2c40aaeaaaceb29c53d27e9430db7403da0d46129d0d292abe909a4667aae31a93be4c505d5fb9f8e5d7d8a56c24000439b6a19df554772f734b338eab80b00d634907c8ab0596a0b9b661268f5bcbbc1530100ad8adc6"}, {0x1f0, 0x111, 0x6, "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"}, {0x10, 0x10f}, {0x80, 0x29, 0xfffffff4, "1cb05217012be1b664e1ad88b5e0f70815230d9946cc1bd805ada00d80f6020b870ff4c78c268e6f92ec378b6a564785a7af524fcc56f455b63b6e1d10b58f8f3ab42206ad796f8c44274d4fba89e5b6adc09efb6aff2a519374581eeca6d18c4b004f63b680e9e1a8fb83bd3a"}], 0x1108}}], 0x5, 0xc0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r0, 0x10, 0x70bd30, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x0, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x0, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x0, 0x3, 'syz0\x00'}]}, 0xfffffdf4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000600)={[&(0x7f0000000240)='.$L[,+\x05!&%:&\x00', &(0x7f0000000500)='!//-},-@(%:+\\%.\x00']}, &(0x7f0000000cc0)={[&(0x7f0000000340)='syz1\x00', &(0x7f0000000480)='/de\xb5\xc73\xfcBE1\x92\xa9p\x8f\va\x18\xc7\xad\xcf\xc3\xe1\x91\xdb\x9a\xcc4\x00\x97\xf9\xed/3\x7f\xa5a\x8f\xfe\xb8H\xdc\xd0>Uo\xe14P\xc8+\x17\x92\xcf\xe1\x923=\x06\xa2=\x9c\xc3\x0eZ\xb0\xdd\xfa\x97l\x17>K\xccN\xd3\n\xa4h\x18N\xf3\x80\xbb\x89l\xfd\xf2\xff\xa4\x85\xe6\x87\xda\xf4\x84\xe6\xcf+c\x7f\xa9\x9e\xb2q\'\xed\xdc\x00', &(0x7f0000000640)='/de\xb5\xc73\xfcBE1\x92\xa9p\x8f\va\x18\xc7\xad\xcf\xc3\xe1\x91\xdb\x9a\xcc4\x00\x97\xf9\xed/3\x7f\xa5a\x8f\xfe\xb8H\xdc\xd0>Uo\xe14P\xc8+\x17\x92\xcf\xe1\x923=\x06\xa2=\x9c\xc3\x0eZ\xb0\xdd\xfa\x97l\x17>K\xccN\xd3\n\xa4h\x18N\xf3\x80\xbb\x89l\xfd\xf2\xff\xa4\x85\xe6\x87\xda\xf4\x84\xe6\xcf+c\x7f\xa9\x9e\xb2q\'\xed\xdc\x00', &(0x7f00000006c0)='SMC_PNETID\x00']}, 0x800)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8001, 0x9}, &(0x7f00000001c0)=0xc)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x10842, 0x6)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x42, 0x0)
ioctl$COMEDI_SUBDINFO(r7, 0x80486402, 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0)
close(r6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x1000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfd}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x141)

4.728551571s ago: executing program 4 (id=6877):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, 0x0)
getdents64(r2, &(0x7f0000000100)=""/134, 0x86)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getdents64(r2, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0})

4.606609494s ago: executing program 0 (id=6878):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xff00)
r1 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0xc00, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0xfffffffffffffd33, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.564112892s ago: executing program 0 (id=6879):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0)

4.539603805s ago: executing program 3 (id=6880):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='10', 0x2)

4.481219691s ago: executing program 3 (id=6881):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
rt_tgsigqueueinfo(r2, r2, 0x11, &(0x7f0000000000)={0x2c, 0xffffffab, 0x8aa})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

4.430458094s ago: executing program 0 (id=6882):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x80805, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7e1464f, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x6, 0x110, 0xffffffffffffffff, 0x823f4b75)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x6, 0x1e5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'})
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r10 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f0000000f00)={{0x80000000, 0x0, 0x3a6c5abe2e6686bc, [0x8, 0x16]}, {0x80000000, 0x0, 0x2, [0x0, 0x2]}, 0x2, [0x100, 0x3]})
r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})

4.232109451s ago: executing program 1 (id=6883):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

3.419414496s ago: executing program 1 (id=6884):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340))

3.386358742s ago: executing program 4 (id=6885):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x7, 0x2}}, @common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x2, 0x1}, 0xfe}, 0x18)
readahead(r0, 0x8, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket(0x200000000000011, 0x2, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0)

3.281332012s ago: executing program 0 (id=6886):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
rt_tgsigqueueinfo(r2, r2, 0x11, &(0x7f0000000000)={0x2c, 0xffffffab, 0x8aa})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

3.269393938s ago: executing program 2 (id=6887):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

3.158469769s ago: executing program 3 (id=6888):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabda", 0x47}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.842644577s ago: executing program 1 (id=6889):
r0 = syz_ublk_setup_io_uring(0x35f1, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x5a91, &(0x7f0000000500)={0x0, 0x4ccf, 0x40, 0x0, 0x25c, 0x0, r0})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x6, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1000000, 0x7, 0x4, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x210})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.788855606s ago: executing program 0 (id=6890):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r0, &(0x7f0000000180), 0x1000)

1.756724269s ago: executing program 2 (id=6891):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='10', 0x2)

1.673404479s ago: executing program 4 (id=6892):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0)

1.558187407s ago: executing program 0 (id=6893):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB])

1.557442604s ago: executing program 2 (id=6894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x80805, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7e1464f, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x6, 0x110, 0xffffffffffffffff, 0x823f4b75)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x6, 0x1e5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'})
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r10 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f0000000f00)={{0x80000000, 0x0, 0x3a6c5abe2e6686bc, [0x8, 0x16]}, {0x80000000, 0x0, 0x2, [0x0, 0x2]}, 0x2, [0x100, 0x3]})
r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r12, 0xc058565d, &(0x7f0000000200)=@mmap={0x0, 0x2, 0x4, 0x8, 0x7, {}, {0x2, 0x0, 0x3}, 0x0, 0x1, {}, 0xae})
socket$xdp(0x2c, 0x3, 0x0)

1.510926946s ago: executing program 1 (id=6895):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
rt_tgsigqueueinfo(r2, r2, 0x11, &(0x7f0000000000)={0x2c, 0xffffffab, 0x8aa})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000003c0)=""/247, &(0x7f00000004c0)=0xf7)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

1.474495602s ago: executing program 4 (id=6896):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

441.019348ms ago: executing program 3 (id=6897):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000600)="dd627047239effff84ae1bb11a0a70f6a172b032da0e9e3b2d5a4addfc1ad63ccbed607f2a90d1310536edc73e44003d40d7660bd84b7543ee53e8d4d456efae21e58591a612b8547183506c7a69a73d8e82386527b6c42cad4d1d99e27c141c725d6115e19737687eab05f60fa8c51b1b7c96800473a203602da33b97b536680d7526453827ee2150cd7871d61c8b485d2e3dde3a32d9b0d564ebd0f0829990238a111436d25078e98ef3411b5e9bb35d40ae1ec8cb06cba6ec9503c17f2c0a674b68dbe0bc116260450b6b15e86e6a93f64ecb0a711b8109c2", &(0x7f0000000700)="2098e107bd38803b091a41ade57c2a4cbf72611241ea16db481ef2ae10a31162e2be16c0868a4d3e4d71eff5d3068e97c3156774832fd3cf8435fa2aabbd43d059b2a06f2cac58851819cc44cd81118456c4d946b85b99d651501bafdb9e269fda2cfbd1a760fe9511c3820a58d24966a6c8fd6991e9973b84d4c16fdf4284fa8e736f3ad8005bfaef667bf86692963176b4d8185f834e60cd2520ea96cfbbbb8bcb40064a2a83f1a14c2d7fc1a2c3e16c9f93fa61d099e30496b4dbd0f0a6cd33dbb5561db72f4e5f5194883009ace2f0d7cd840cf5f2fd67cecf90e5d19b"}}, &(0x7f0000000300)=<r0=>0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r3, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000300)={r8, @in={{0x2, 0x4e22, @empty}}, 0x2}, 0x90)

252.749569ms ago: executing program 4 (id=6898):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
rt_tgsigqueueinfo(r2, r2, 0x11, &(0x7f0000000000)={0x2c, 0xffffffab, 0x8aa})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040)
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000003c0)=""/247, &(0x7f00000004c0)=0xf7)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)

221.195265ms ago: executing program 2 (id=6899):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340))

0s ago: executing program 1 (id=6900):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
rt_tgsigqueueinfo(r2, r2, 0x11, &(0x7f0000000000)={0x2c, 0xffffffab, 0x8aa})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000003c0)=""/247, &(0x7f00000004c0)=0xf7)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

kernel console output (not intermixed with test programs):

1, bcdDevice= 0.40
[ 1260.704045][T11711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.755828][T11711] usb 5-1: Product: syz
[ 1260.778899][T11711] usb 5-1: Manufacturer: syz
[ 1260.801948][T11711] usb 5-1: SerialNumber: syz
[ 1262.879667][T26459] kvm: pic: level sensitive irq not supported
[ 1263.195649][T26466] kvm: user requested TSC rate below hardware speed
[ 1264.228163][T26474] syzkaller0: entered promiscuous mode
[ 1264.244305][T26474] syzkaller0: entered allmulticast mode
[ 1264.600364][T26480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1264.793587][T26484] syzkaller0: entered promiscuous mode
[ 1264.814445][T26484] syzkaller0: entered allmulticast mode
[ 1265.367416][T19354] usb 5-1: USB disconnect, device number 39
[ 1265.423112][T17932] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1265.477990][ T5613] Bluetooth: hci4: unexpected event for opcode 0x3125
[ 1265.618973][T17932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.660337][T26507] nvme_fabrics: missing parameter 'transport=%s'
[ 1265.680689][T17932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1265.708686][T26507] nvme_fabrics: missing parameter 'nqn=%s'
[ 1265.754222][T17932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.784891][T17932] usb 3-1: Product: syz
[ 1265.811032][T17932] usb 3-1: Manufacturer: syz
[ 1265.825871][T17932] usb 3-1: SerialNumber: syz
[ 1266.175139][T26523] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5849'.
[ 1266.422241][ T5613] Bluetooth: hci1: command 0x0406 tx timeout
[ 1266.482726][T17932] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1266.652382][T17932] usb 5-1: Using ep0 maxpacket: 8
[ 1266.673014][T17932] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1266.702562][T17932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1266.736118][T19354] usb 3-1: USB disconnect, device number 30
[ 1266.748890][T17932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1266.780324][T17932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1266.800743][T17932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1266.830611][T17932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1266.852480][T17932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.984259][T26533] syzkaller0: entered promiscuous mode
[ 1266.990408][T26533] syzkaller0: entered allmulticast mode
[ 1267.104167][T17932] usb 5-1: usb_control_msg returned -32
[ 1267.123734][T17932] usbtmc 5-1:16.0: can't read capabilities
[ 1267.498447][T26550] usbtmc 5-1:16.0: usb_bulk_msg returned -71
[ 1267.556022][T26548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1267.597011][T26548] kvm: user requested TSC rate below hardware speed
[ 1267.608419][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5857'.
[ 1267.747443][T18466] usb 5-1: USB disconnect, device number 40
[ 1267.908634][T26560] picdev_read: 7 callbacks suppressed
[ 1267.908649][T26560] kvm: pic: non byte read
[ 1267.943293][T26560] kvm: pic: non byte read
[ 1267.956933][T26560] kvm: pic: level sensitive irq not supported
[ 1267.956982][T26560] kvm: pic: non byte read
[ 1267.981230][T26560] kvm: pic: level sensitive irq not supported
[ 1267.981275][T26560] kvm: pic: non byte read
[ 1268.009410][T26560] kvm: pic: level sensitive irq not supported
[ 1268.009457][T26560] kvm: pic: non byte read
[ 1268.038720][T26560] kvm: pic: level sensitive irq not supported
[ 1268.038766][T26560] kvm: pic: non byte read
[ 1268.066833][T26560] kvm: pic: level sensitive irq not supported
[ 1268.066881][T26560] kvm: pic: non byte read
[ 1268.093613][T26560] kvm: pic: level sensitive irq not supported
[ 1268.093657][T26560] kvm: pic: non byte read
[ 1268.119527][T26560] kvm: pic: level sensitive irq not supported
[ 1268.119576][T26560] kvm: pic: non byte read
[ 1268.144183][T26560] kvm: pic: level sensitive irq not supported
[ 1268.144231][T26560] kvm: pic: non byte read
[ 1268.172076][T26560] kvm: pic: level sensitive irq not supported
[ 1268.172950][T26560] kvm: pic: level sensitive irq not supported
[ 1268.727312][T26572] netlink: 'syz.2.5867': attribute type 16 has an invalid length.
[ 1268.818928][T26572] ipvlan2: entered promiscuous mode
[ 1268.838137][T26572] ipvlan2: entered allmulticast mode
[ 1268.881943][T26572] gretap0: entered allmulticast mode
[ 1269.113963][ T5832] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1269.304093][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1269.338095][ T5832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1269.363657][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1269.394740][ T5832] usb 5-1: Product: syz
[ 1269.409118][ T5832] usb 5-1: Manufacturer: syz
[ 1269.425030][ T5832] usb 5-1: SerialNumber: syz
[ 1269.448358][T26585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1269.520475][T26585] kvm: user requested TSC rate below hardware speed
[ 1269.866775][T26590] kvm: user requested TSC rate below hardware speed
[ 1270.135498][T26592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1270.644767][ T5832] usb 5-1: USB disconnect, device number 41
[ 1271.727078][T26625] random: crng reseeded on system resumption
[ 1272.462795][T26642] zero sized request
[ 1272.606797][T26647] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1272.653570][T26650] xt_HMARK: spi-set and port-set can't be combined
[ 1273.249014][T26666] kvm: user requested TSC rate below hardware speed
[ 1273.945236][T26689] syzkaller0: entered promiscuous mode
[ 1273.957841][T26689] syzkaller0: entered allmulticast mode
[ 1274.484254][T18466] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1274.654857][T18466] usb 1-1: Using ep0 maxpacket: 32
[ 1274.675784][T18466] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1274.699330][T18466] usb 1-1: config 14 has an invalid interface number: 57 but max is 0
[ 1274.723945][T18466] usb 1-1: config 14 has no interface number 0
[ 1274.743076][T18466] usb 1-1: config 14 interface 57 has no altsetting 0
[ 1274.759798][T18466] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1274.775954][T18466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.804362][T18466] usb 1-1: Product: syz
[ 1274.817503][T18466] usb 1-1: Manufacturer: syz
[ 1274.831574][T18466] usb 1-1: SerialNumber: syz
[ 1275.270595][T18466] legousbtower 1-1:14.57: interrupt endpoints not found
[ 1275.317891][T26725] syzkaller0: entered promiscuous mode
[ 1275.333940][T26725] syzkaller0: entered allmulticast mode
[ 1275.677572][T26741] binder: 26739:26741 ioctl 4018620d 0 returned -22
[ 1275.973355][T26761] syzkaller0: entered promiscuous mode
[ 1275.979039][T26761] syzkaller0: entered allmulticast mode
[ 1276.118743][T26763] kvm: kvm [26762]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[ 1276.127896][T26763] kvm: kvm [26762]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[ 1276.292041][T26763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1276.426129][T26780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5941'.
[ 1276.451916][T26780] ipvlan2: entered allmulticast mode
[ 1276.457965][T26780] syz_tun: entered allmulticast mode
[ 1276.726882][T26792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5943'.
[ 1276.746089][T26793] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1276.922201][T26800] xt_HMARK: spi-set and port-set can't be combined
[ 1277.333341][T26797] random: crng reseeded on system resumption
[ 1277.633074][ T5832] usb 1-1: USB disconnect, device number 60
[ 1277.959639][T26827] fuse: Bad value for 'user_id'
[ 1277.981115][T26827] fuse: Bad value for 'user_id'
[ 1279.122581][T18466] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1279.152103][T26858] fuse: Bad value for 'user_id'
[ 1279.167066][T26858] fuse: Bad value for 'user_id'
[ 1279.282830][T18466] usb 5-1: Using ep0 maxpacket: 32
[ 1279.301996][T18466] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1279.330629][T18466] usb 5-1: config 14 has an invalid interface number: 57 but max is 0
[ 1279.354503][T18466] usb 5-1: config 14 has no interface number 0
[ 1279.368714][T18466] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1279.395623][T18466] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1279.415385][T18466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.443890][T18466] usb 5-1: Product: syz
[ 1279.456185][T18466] usb 5-1: Manufacturer: syz
[ 1279.478853][T18466] usb 5-1: SerialNumber: syz
[ 1279.709867][T10365] bridge_slave_1: left allmulticast mode
[ 1279.728192][T10365] bridge_slave_1: left promiscuous mode
[ 1279.741963][T10365] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1279.772987][T10365] bridge_slave_0: left allmulticast mode
[ 1279.789632][T10365] bridge_slave_0: left promiscuous mode
[ 1279.809678][T10365] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1279.925702][T18466] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1281.247633][T10365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1281.488219][T10365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1281.553530][T10365] bond0 (unregistering): Released all slaves
[ 1281.598005][T10365] bond1 (unregistering): Released all slaves
[ 1282.369410][T19354] usb 5-1: USB disconnect, device number 42
[ 1282.820632][T10365] hsr_slave_0: left promiscuous mode
[ 1282.854223][T10365] hsr_slave_1: left promiscuous mode
[ 1282.887263][T10365] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1282.928371][T10365] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1283.353762][   T81] smbdirect: ib_dev[syz1] removed
[ 1283.396317][T26922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5985'.
[ 1283.721778][T10365] team0 (unregistering): Port device team_slave_1 removed
[ 1283.807004][T10365] team0 (unregistering): Port device team_slave_0 removed
[ 1285.537590][T26933] random: crng reseeded on system resumption
[ 1285.855468][T19354] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1286.043115][T19354] usb 4-1: Using ep0 maxpacket: 32
[ 1286.087446][T19354] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1286.108408][T19354] usb 4-1: config 14 has an invalid interface number: 57 but max is 0
[ 1286.132626][T19354] usb 4-1: config 14 has no interface number 0
[ 1286.157529][T19354] usb 4-1: config 14 interface 57 has no altsetting 0
[ 1286.188948][T19354] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1286.218545][T19354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.238193][T19354] usb 4-1: Product: syz
[ 1286.265629][T19354] usb 4-1: Manufacturer: syz
[ 1286.284638][T19354] usb 4-1: SerialNumber: syz
[ 1286.756696][T19354] legousbtower 4-1:14.57: interrupt endpoints not found
[ 1286.882646][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[ 1286.980583][T26959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5999'.
[ 1289.247208][T26993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6011'.
[ 1289.953600][T17932] usb 4-1: USB disconnect, device number 44
[ 1291.868037][T27030] FAULT_INJECTION: forcing a failure.
[ 1291.868037][T27030] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1291.906394][T27031] FAULT_INJECTION: forcing a failure.
[ 1291.906394][T27031] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1291.937730][T27030] CPU: 0 UID: 0 PID: 27030 Comm: syz.0.6022 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1291.937773][T27030] Tainted: [L]=SOFTLOCKUP
[ 1291.937783][T27030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1291.937798][T27030] Call Trace:
[ 1291.937807][T27030]  <TASK>
[ 1291.937817][T27030]  dump_stack_lvl+0x100/0x190
[ 1291.937853][T27030]  should_fail_ex.cold+0x5/0xa
[ 1291.937878][T27030]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1291.937913][T27030]  should_fail_alloc_page+0xeb/0x140
[ 1291.937946][T27030]  prepare_alloc_pages+0x1f0/0x5f0
[ 1291.937981][T27030]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1291.938011][T27030]  ? rcu_is_watching+0x12/0xc0
[ 1291.938058][T27030]  ? trace_mm_page_alloc+0x164/0x1c0
[ 1291.938093][T27030]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[ 1291.938125][T27030]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1291.938156][T27030]  ? stack_trace_save+0x8e/0xc0
[ 1291.938181][T27030]  ? __pfx_stack_trace_save+0x10/0x10
[ 1291.938206][T27030]  ? stack_depot_save_flags+0x27/0x9d0
[ 1291.938239][T27030]  ? is_bpf_text_address+0x94/0x1a0
[ 1291.938272][T27030]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1291.938303][T27030]  ? __kasan_slab_alloc+0x89/0x90
[ 1291.938330][T27030]  ? kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 1291.938358][T27030]  ? alloc_vmap_area+0x640/0x2bb0
[ 1291.938383][T27030]  ? __get_vm_area_node+0x1ca/0x330
[ 1291.938410][T27030]  ? __vmalloc_node_range_noprof+0x228/0x1630
[ 1291.938437][T27030]  ? __vmalloc_node_noprof+0xad/0xf0
[ 1291.938463][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1291.938490][T27030]  ? kvm_vm_ioctl+0x7d3/0x4180
[ 1291.938519][T27030]  ? __x64_sys_ioctl+0x18e/0x210
[ 1291.938546][T27030]  ? do_syscall_64+0x115/0x870
[ 1291.938570][T27030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.938606][T27030]  alloc_pages_bulk_noprof+0x5de/0x13c0
[ 1291.938638][T27030]  ? policy_nodemask+0xed/0x4f0
[ 1291.938671][T27030]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1291.938713][T27030]  __kasan_populate_vmalloc+0xf0/0x210
[ 1291.938745][T27030]  alloc_vmap_area+0x95d/0x2bb0
[ 1291.938780][T27030]  ? kasan_save_track+0x14/0x30
[ 1291.938804][T27030]  ? __kasan_kmalloc+0xaa/0xb0
[ 1291.938831][T27030]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1291.938858][T27030]  ? kvm_find_cpuid_entry2+0x1c7/0x290
[ 1291.938884][T27030]  ? __get_vm_area_node+0x101/0x330
[ 1291.938923][T27030]  __get_vm_area_node+0x1ca/0x330
[ 1291.938961][T27030]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1291.938997][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1291.939031][T27030]  ? kvm_vcpu_reset+0x6d3/0x1b00
[ 1291.939071][T27030]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1291.939103][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1291.939134][T27030]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1291.939162][T27030]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1291.939198][T27030]  ? vmx_vcpu_put+0xbf/0x860
[ 1291.939221][T27030]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1291.939252][T27030]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1291.939282][T27030]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1291.939319][T27030]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1291.939343][T27030]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1291.939381][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1291.939412][T27030]  __vmalloc_node_noprof+0xad/0xf0
[ 1291.939444][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1291.939477][T27030]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1291.939507][T27030]  kvm_vm_ioctl+0x7d3/0x4180
[ 1291.939540][T27030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.939572][T27030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1291.939621][T27030]  ? kasan_quarantine_put+0x104/0x240
[ 1291.939643][T27030]  ? lockdep_hardirqs_on+0x78/0x100
[ 1291.939668][T27030]  ? find_held_lock+0x2b/0x80
[ 1291.939701][T27030]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1291.939730][T27030]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1291.939766][T27030]  ? tomoyo_path_number_perm+0x188/0x580
[ 1291.939799][T27030]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1291.939840][T27030]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1291.939865][T27030]  ? do_vfs_ioctl+0x226/0x13e0
[ 1291.939894][T27030]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1291.939926][T27030]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1291.939971][T27030]  ? __fget_files+0x215/0x3d0
[ 1291.939993][T27030]  ? hook_file_ioctl_common+0x140/0x440
[ 1291.940028][T27030]  ? selinux_file_ioctl+0x13b/0x290
[ 1291.940079][T27030]  ? selinux_file_ioctl+0xb6/0x290
[ 1291.940115][T27030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1291.940150][T27030]  __x64_sys_ioctl+0x18e/0x210
[ 1291.940187][T27030]  do_syscall_64+0x115/0x870
[ 1291.940212][T27030]  ? clear_bhb_loop+0x40/0x90
[ 1291.940238][T27030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.940261][T27030] RIP: 0033:0x7fb368d9de99
[ 1291.940280][T27030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1291.940303][T27030] RSP: 002b:00007fb369bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1291.940328][T27030] RAX: ffffffffffffffda RBX: 00007fb369025fa0 RCX: 00007fb368d9de99
[ 1291.940343][T27030] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1291.940357][T27030] RBP: 00007fb368e33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1291.940370][T27030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1291.940383][T27030] R13: 00007fb369026038 R14: 00007fb369025fa0 R15: 00007ffc8382de78
[ 1291.940415][T27030]  </TASK>
[ 1291.948372][T27031] CPU: 1 UID: 0 PID: 27031 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1291.948412][T27031] Tainted: [L]=SOFTLOCKUP
[ 1291.948420][T27031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1291.948435][T27031] Call Trace:
[ 1291.948443][T27031]  <TASK>
[ 1291.948452][T27031]  dump_stack_lvl+0x100/0x190
[ 1291.948486][T27031]  should_fail_ex.cold+0x5/0xa
[ 1291.948511][T27031]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1291.948553][T27031]  should_fail_alloc_page+0xeb/0x140
[ 1291.948586][T27031]  prepare_alloc_pages+0x1f0/0x5f0
[ 1291.948620][T27031]  ? page_table_check_set+0x48f/0x930
[ 1291.948653][T27031]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1291.948681][T27031]  ? page_table_check_set+0x4f7/0x930
[ 1291.948715][T27031]  ? __page_table_check_ptes_set+0x1b5/0x4e0
[ 1291.948745][T27031]  ? find_held_lock+0x2b/0x80
[ 1291.948780][T27031]  ? rcu_read_unlock+0x2d/0xb0
[ 1291.948802][T27031]  ? rcu_read_unlock+0x2d/0xb0
[ 1291.948827][T27031]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1291.948853][T27031]  ? free_swap_cache+0x93/0x490
[ 1291.948877][T27031]  ? do_wp_page+0x173c/0x4350
[ 1291.948923][T27031]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1291.948959][T27031]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1291.948988][T27031]  ? policy_nodemask+0xed/0x4f0
[ 1291.949022][T27031]  alloc_pages_mpol+0x1fb/0x540
[ 1291.949053][T27031]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1291.949084][T27031]  ? __thp_vma_allowable_orders+0x1d9/0xf00
[ 1291.949126][T27031]  alloc_pages_noprof+0x1a/0x160
[ 1291.949161][T27031]  pte_alloc_one+0x1c/0x3d0
[ 1291.949186][T27031]  do_fault+0x86c/0x1750
[ 1291.949222][T27031]  __handle_mm_fault+0x187d/0x2a00
[ 1291.949263][T27031]  ? reacquire_held_locks+0xce/0x1e0
[ 1291.949292][T27031]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1291.949332][T27031]  ? lock_vma_under_rcu+0x17c/0x590
[ 1291.949385][T27031]  handle_mm_fault+0x37b/0xa30
[ 1291.949426][T27031]  do_user_addr_fault+0x5a3/0x12f0
[ 1291.949470][T27031]  exc_page_fault+0x6f/0xd0
[ 1291.949496][T27031]  asm_exc_page_fault+0x26/0x30
[ 1291.949519][T27031] RIP: 0033:0x7f8f1abc6912
[ 1291.949550][T27031] Code: Unable to access opcode bytes at 0x7f8f1abc68e8.
[ 1291.949560][T27031] RSP: 002b:00007ffd139750d0 EFLAGS: 00010246
[ 1291.949580][T27031] RAX: 0000000000000000 RBX: 00007ffd139750d0 RCX: 00007f8f1abc6912
[ 1291.949595][T27031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1291.949611][T27031] RBP: 00007ffd1397525c R08: 0000000000000000 R09: 0000000000000001
[ 1291.949625][T27031] R10: 000055557d3e97d0 R11: 0000000000000246 R12: 0000000000000001
[ 1291.949640][T27031] R13: 00000000000927c0 R14: 000000000013b508 R15: 00007ffd139752b0
[ 1291.949672][T27031]  </TASK>
[ 1291.951956][T27031] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1291.974764][T27030] syz.0.6022: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[ 1292.103268][T27036] xt_HMARK: spi-set and port-set can't be combined
[ 1292.932312][T27030] ,cpuset=/,mems_allowed=0-1
[ 1292.948523][T27030] CPU: 1 UID: 0 PID: 27030 Comm: syz.0.6022 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1292.948562][T27030] Tainted: [L]=SOFTLOCKUP
[ 1292.948571][T27030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1292.948586][T27030] Call Trace:
[ 1292.948595][T27030]  <TASK>
[ 1292.948604][T27030]  dump_stack_lvl+0x100/0x190
[ 1292.948630][T27030]  warn_alloc.cold+0x94/0xa8
[ 1292.948645][T27030]  ? __pfx_warn_alloc+0x10/0x10
[ 1292.948658][T27030]  ? lockdep_hardirqs_on+0x78/0x100
[ 1292.948675][T27030]  ? __get_vm_area_node+0x2cd/0x330
[ 1292.948695][T27030]  ? __get_vm_area_node+0x208/0x330
[ 1292.948715][T27030]  __vmalloc_node_range_noprof+0xccd/0x1630
[ 1292.948736][T27030]  ? kvm_vcpu_reset+0x6d3/0x1b00
[ 1292.948754][T27030]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1292.948772][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1292.948790][T27030]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1292.948806][T27030]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1292.948826][T27030]  ? vmx_vcpu_put+0xbf/0x860
[ 1292.948838][T27030]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1292.948856][T27030]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1292.948883][T27030]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1292.948919][T27030]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1292.948942][T27030]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1292.948984][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1292.949011][T27030]  __vmalloc_node_noprof+0xad/0xf0
[ 1292.949029][T27030]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1292.949047][T27030]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1292.949065][T27030]  kvm_vm_ioctl+0x7d3/0x4180
[ 1292.949084][T27030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.949104][T27030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1292.949133][T27030]  ? kasan_quarantine_put+0x104/0x240
[ 1292.949148][T27030]  ? lockdep_hardirqs_on+0x78/0x100
[ 1292.949162][T27030]  ? find_held_lock+0x2b/0x80
[ 1292.949182][T27030]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1292.949201][T27030]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1292.949221][T27030]  ? tomoyo_path_number_perm+0x188/0x580
[ 1292.949240][T27030]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1292.949263][T27030]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1292.949279][T27030]  ? do_vfs_ioctl+0x226/0x13e0
[ 1292.949298][T27030]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1292.949316][T27030]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1292.949342][T27030]  ? __fget_files+0x215/0x3d0
[ 1292.949355][T27030]  ? hook_file_ioctl_common+0x140/0x440
[ 1292.949376][T27030]  ? selinux_file_ioctl+0x13b/0x290
[ 1292.949395][T27030]  ? selinux_file_ioctl+0xb6/0x290
[ 1292.949414][T27030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1292.949433][T27030]  __x64_sys_ioctl+0x18e/0x210
[ 1292.949453][T27030]  do_syscall_64+0x115/0x870
[ 1292.949467][T27030]  ? clear_bhb_loop+0x40/0x90
[ 1292.949482][T27030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.949496][T27030] RIP: 0033:0x7fb368d9de99
[ 1292.949508][T27030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1292.949521][T27030] RSP: 002b:00007fb369bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1292.949535][T27030] RAX: ffffffffffffffda RBX: 00007fb369025fa0 RCX: 00007fb368d9de99
[ 1292.949543][T27030] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1292.949551][T27030] RBP: 00007fb368e33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1292.949559][T27030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1292.949566][T27030] R13: 00007fb369026038 R14: 00007fb369025fa0 R15: 00007ffc8382de78
[ 1292.949583][T27030]  </TASK>
[ 1292.949638][T27030] Mem-Info:
[ 1293.300940][T27030] active_anon:14286 inactive_anon:10 isolated_anon:0
[ 1293.300940][T27030]  active_file:168 inactive_file:62228 isolated_file:0
[ 1293.300940][T27030]  unevictable:768 dirty:235 writeback:0
[ 1293.300940][T27030]  slab_reclaimable:14651 slab_unreclaimable:96662
[ 1293.300940][T27030]  mapped:34101 shmem:6675 pagetables:1327
[ 1293.300940][T27030]  sec_pagetables:0 bounce:0
[ 1293.300940][T27030]  kernel_misc_reclaimable:0
[ 1293.300940][T27030]  free:1264526 free_pcp:19174 free_cma:0
[ 1293.595213][T27030] Node 0 active_anon:53244kB inactive_anon:40kB active_file:672kB inactive_file:248712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136404kB dirty:940kB writeback:0kB shmem:21364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11920kB pagetables:5188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1293.680198][T27030] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1293.754837][T27030] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1293.836585][T27030] lowmem_reserve[]: 0 2472 2473 2473 2473
[ 1294.006168][T27030] Node 0 DMA32 free:1118616kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58864kB inactive_anon:40kB active_file:672kB inactive_file:248712kB unevictable:1536kB writepending:944kB zspages:508kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:61544kB local_pcp:42832kB free_cma:0kB
[ 1294.950625][T27030] lowmem_reserve[]: 0 0 0 0 0
[ 1294.955970][T27030] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1295.171768][T27030] lowmem_reserve[]: 0 0 0 0 0
[ 1295.203802][T27030] Node 1 Normal free:3932928kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4892kB local_pcp:0kB free_cma:0kB
[ 1295.248399][T27030] lowmem_reserve[]: 0 0 0 0 0
[ 1295.255609][T27030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1295.270659][T27030] Node 0 DMA32: 1909*4kB (UME) 497*8kB (UME) 312*16kB (UME) 492*32kB (UME) 441*64kB (UME) 128*128kB (UME) 38*256kB (UME) 26*512kB (UME) 31*1024kB (UM) 6*2048kB (UME) 224*4096kB (UM) = 1061532kB
[ 1295.714343][T27030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1295.727122][T27030] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 9*16kB (UM) 7*32kB (UM) 5*64kB (UM) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3932928kB
[ 1295.754049][T27030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1295.771313][T27030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1295.791035][T27030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1295.812490][T27030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1295.844974][T27030] 84293 total pagecache pages
[ 1295.849722][T27030] 8 pages in swap cache
[ 1295.854414][T27030] Free swap  = 124800kB
[ 1295.858666][T27030] Total swap = 124996kB
[ 1295.882757][T27030] 2097051 pages RAM
[ 1295.886712][T27030] 0 pages HighMem/MovableOnly
[ 1295.891467][T27030] 432299 pages reserved
[ 1295.906111][T27030] 0 pages cma reserved
[ 1296.245559][T27069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6036'.
[ 1296.468254][T27074] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2614914533 (2614914533 ns) > initial count (338492871 ns). Using initial count to start timer.
[ 1296.658220][T27079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1296.808867][T27081] kvm: kvm [27080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[ 1296.840934][T27081] kvm: kvm [27080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[ 1297.064384][T27088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1297.430138][T27098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1297.992121][T27107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1298.088624][T27109] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1298.325766][T27116] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2614914533 (2614914533 ns) > initial count (338492871 ns). Using initial count to start timer.
[ 1298.395117][T27120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1298.470258][T27119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1298.882570][T27132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1299.125626][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6062'.
[ 1299.137087][T27150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1299.252368][T19354] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1299.269297][T27156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6065'.
[ 1299.285867][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'.
[ 1300.022295][T19354] usb 2-1: Using ep0 maxpacket: 32
[ 1300.029602][T19354] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1300.125641][T19354] usb 2-1: config 14 has an invalid interface number: 57 but max is 0
[ 1300.169209][T19354] usb 2-1: config 14 has no interface number 0
[ 1300.179121][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.188776][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.207194][T19354] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1300.227408][T19354] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1300.238521][T19354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1300.250023][T19354] usb 2-1: Product: syz
[ 1300.268638][T19354] usb 2-1: Manufacturer: syz
[ 1300.274623][T19354] usb 2-1: SerialNumber: syz
[ 1300.995151][T19354] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1302.045081][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6075'.
[ 1302.087371][T27192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1303.090850][T11711] usb 2-1: USB disconnect, device number 31
[ 1304.131369][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1304.147394][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1304.160707][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1304.171884][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1304.185381][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1304.548032][T27220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6084'.
[ 1304.582812][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6084'.
[ 1306.248470][ T5625] Bluetooth: hci5: command tx timeout
[ 1306.961452][ T5995] bridge_slave_1: left allmulticast mode
[ 1306.988815][ T5995] bridge_slave_1: left promiscuous mode
[ 1307.014067][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1307.077681][ T5995] bridge_slave_0: left allmulticast mode
[ 1307.103846][ T5995] bridge_slave_0: left promiscuous mode
[ 1307.113150][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1307.457337][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1307.479498][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1307.497975][ T5995] bond0 (unregistering): Released all slaves
[ 1307.531681][   T30] audit: type=1400 audit(1785192633.740:748): avc:  denied  { write } for  pid=27268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1307.572412][T27204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1307.580628][T27204] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1307.588502][T27204] bridge_slave_0: entered allmulticast mode
[ 1307.596566][T27204] bridge_slave_0: entered promiscuous mode
[ 1307.606255][T27204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1307.614310][T27204] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1307.621649][T27204] bridge_slave_1: entered allmulticast mode
[ 1307.636755][T27204] bridge_slave_1: entered promiscuous mode
[ 1307.798506][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'.
[ 1307.825195][T27204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1307.880035][T27204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1307.904432][   T30] audit: type=1400 audit(1785192634.110:749): avc:  denied  { write } for  pid=27298 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1308.127221][T27204] team0: Port device team_slave_0 added
[ 1308.170237][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1308.189713][T27204] team0: Port device team_slave_1 added
[ 1308.194001][T27312] sctp: [Deprecated]: syz.4.6107 (pid 27312) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1308.194001][T27312] Use struct sctp_sack_info instead
[ 1308.232402][ T5995] hsr_slave_0: left promiscuous mode
[ 1308.238615][ T5995] hsr_slave_1: left promiscuous mode
[ 1308.251951][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1308.266770][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1308.331264][ T5625] Bluetooth: hci5: command tx timeout
[ 1308.522702][ T5995] team0 (unregistering): Port device team_slave_1 removed
[ 1308.540354][ T5995] team0 (unregistering): Port device team_slave_0 removed
[ 1308.730563][T27204] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1308.739328][T27204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1308.766901][T27204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1308.791092][T27204] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1308.819760][T27204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1308.900966][T27204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1309.071035][T27332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6113'.
[ 1309.176805][T27204] hsr_slave_0: entered promiscuous mode
[ 1309.221898][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6116'.
[ 1309.237757][T27204] hsr_slave_1: entered promiscuous mode
[ 1309.260591][T27204] debugfs: 'hsr0' already exists in 'hsr'
[ 1309.268724][T27204] Cannot create hsr debugfs directory
[ 1310.398487][   T30] audit: type=1400 audit(1785192636.610:750): avc:  denied  { write } for  pid=27328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1310.409304][ T5625] Bluetooth: hci5: command tx timeout
[ 1310.707068][   T30] audit: type=1400 audit(1785192636.920:751): avc:  denied  { write } for  pid=27363 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1310.944124][ T5832] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1311.031995][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1311.142152][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1311.184752][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1311.206785][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.233511][ T5832] usb 2-1: Product: syz
[ 1311.237979][ T5832] usb 2-1: Manufacturer: syz
[ 1311.243396][ T5832] usb 2-1: SerialNumber: syz
[ 1312.039003][T27384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6125'.
[ 1312.385247][   T30] audit: type=1400 audit(1785192638.590:752): avc:  denied  { write } for  pid=27369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1312.482498][T27206] Bluetooth: hci5: command tx timeout
[ 1312.488106][T27206] Bluetooth: hci2: command 0x0406 tx timeout
[ 1312.525369][T18466] usb 2-1: USB disconnect, device number 32
[ 1312.591339][   T30] audit: type=1400 audit(1785192638.800:753): avc:  denied  { write } for  pid=27398 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1313.020872][T27204] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1313.034186][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1313.056856][T27204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1313.105550][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1313.131796][T27204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1313.146057][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1313.155584][T27204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1313.211118][T27204] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1313.460800][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6134'.
[ 1313.521212][T27204] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1313.589517][T27204] 8021q: adding VLAN 0 to HW filter on device team0
[ 1313.655445][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1313.662729][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1313.732673][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1313.739910][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1313.834671][   T30] audit: type=1400 audit(1785192640.050:754): avc:  denied  { write } for  pid=27412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1314.074925][   T30] audit: type=1400 audit(1785192640.290:755): avc:  denied  { write } for  pid=27454 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1314.992052][T27495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6142'.
[ 1315.042571][   T30] audit: type=1400 audit(1785192641.240:756): avc:  denied  { write } for  pid=27463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1315.071927][T27204] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1315.230551][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6145'.
[ 1315.288234][   T30] audit: type=1400 audit(1785192641.500:757): avc:  denied  { write } for  pid=27500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1315.782454][ T5612] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1315.809810][T27204] veth0_vlan: entered promiscuous mode
[ 1315.836805][T27204] veth1_vlan: entered promiscuous mode
[ 1315.913905][   T30] audit: type=1400 audit(1785192642.120:758): avc:  denied  { write } for  pid=27509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1315.961363][T27204] veth0_macvtap: entered promiscuous mode
[ 1315.967511][ T5612] usb 3-1: Using ep0 maxpacket: 32
[ 1315.977226][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1315.994943][ T5612] usb 3-1: config 14 has an invalid interface number: 57 but max is 0
[ 1316.022472][ T5612] usb 3-1: config 14 has no interface number 0
[ 1316.035412][T27204] veth1_macvtap: entered promiscuous mode
[ 1316.051558][ T5612] usb 3-1: config 14 interface 57 has no altsetting 0
[ 1316.075752][ T5612] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1316.106765][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1316.118653][ T5612] usb 3-1: Product: syz
[ 1316.124935][T27204] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1316.125225][ T5612] usb 3-1: Manufacturer: syz
[ 1316.162926][ T5612] usb 3-1: SerialNumber: syz
[ 1316.184385][T27204] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1316.220381][T13515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.231146][   T30] audit: type=1400 audit(1785192642.430:759): avc:  denied  { write } for  pid=27531 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1316.256988][T13515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.290712][T13515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.308340][T13515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1316.549726][T10365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1316.603467][T10365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1316.626989][ T5612] legousbtower 3-1:14.57: interrupt endpoints not found
[ 1316.666759][T13515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1316.694967][T13515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1316.913160][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6156'.
[ 1316.946564][   T30] audit: type=1400 audit(1785192643.150:760): avc:  denied  { write } for  pid=27539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1317.087957][   T30] audit: type=1400 audit(1785192643.300:761): avc:  denied  { write } for  pid=27568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1318.341197][T27594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6161'.
[ 1318.578457][T19354] usb 3-1: USB disconnect, device number 31
[ 1318.921019][T27610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6169'.
[ 1320.823149][T17060] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1320.904427][T27649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6180'.
[ 1321.270760][T17060] usb 4-1: Using ep0 maxpacket: 32
[ 1321.878657][T17060] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1321.892696][T17060] usb 4-1: config 14 has an invalid interface number: 57 but max is 0
[ 1321.900947][T17060] usb 4-1: config 14 has no interface number 0
[ 1321.911109][T17060] usb 4-1: config 14 interface 57 has no altsetting 0
[ 1321.926522][T17060] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1321.938142][T17060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.946290][T17060] usb 4-1: Product: syz
[ 1321.950482][T17060] usb 4-1: Manufacturer: syz
[ 1321.955201][T17060] usb 4-1: SerialNumber: syz
[ 1322.406994][T17060] legousbtower 4-1:14.57: interrupt endpoints not found
[ 1323.202497][T17060] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1323.990271][T17060] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1324.208528][T17932] usb 4-1: USB disconnect, device number 45
[ 1324.321536][T17060] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1324.330706][T17060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.338852][T17060] usb 5-1: Product: syz
[ 1324.343486][T17060] usb 5-1: Manufacturer: syz
[ 1324.348281][T17060] usb 5-1: SerialNumber: syz
[ 1324.623372][T17060] usb 5-1: USB disconnect, device number 43
[ 1325.390103][T27718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6199'.
[ 1325.451090][T27727] kvm: user requested TSC rate below hardware speed
[ 1325.945808][T27737] pic_ioport_write: 5 callbacks suppressed
[ 1325.945823][T27737] kvm: pic: level sensitive irq not supported
[ 1327.511009][T27781] kvm: pic: level sensitive irq not supported
[ 1327.602461][T19354] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1327.756635][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6227'.
[ 1327.833496][T19354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1327.884563][T19354] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1327.918005][T19354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.942460][T19354] usb 2-1: Product: syz
[ 1327.959115][T19354] usb 2-1: Manufacturer: syz
[ 1327.972724][T19354] usb 2-1: SerialNumber: syz
[ 1328.587023][T27813] xt_HMARK: spi-set and port-set can't be combined
[ 1329.528310][ T5343] usb 2-1: USB disconnect, device number 33
[ 1329.740861][T27833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6239'.
[ 1330.304751][T27862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6245'.
[ 1330.497729][T27868] xt_HMARK: spi-set and port-set can't be combined
[ 1330.509024][T27867] binder: BINDER_SET_CONTEXT_MGR already set
[ 1330.528350][T27867] binder: 27865:27867 ioctl 4018620d 200000004a80 returned -16
[ 1331.763883][T27898] kvm: pic: level sensitive irq not supported
[ 1332.134549][T27910] xt_HMARK: spi-set and port-set can't be combined
[ 1334.075876][T27942] nvme_fabrics: missing parameter 'transport=%s'
[ 1334.105370][T27942] nvme_fabrics: missing parameter 'nqn=%s'
[ 1335.482822][T27962] xt_HMARK: spi-set and port-set can't be combined
[ 1336.336545][T27975] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6283'.
[ 1336.406102][T27977] zero sized request
[ 1336.632371][  T121] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1336.802410][  T121] usb 4-1: Using ep0 maxpacket: 8
[ 1337.631705][  T121] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1337.640239][  T121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1337.650158][  T121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1337.660050][  T121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1337.670287][  T121] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1337.684508][  T121] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1337.693628][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.913149][  T121] usb 4-1: usb_control_msg returned -32
[ 1337.929161][  T121] usbtmc 4-1:16.0: can't read capabilities
[ 1338.884673][T28012] zero sized request
[ 1339.073991][T28021] xt_HMARK: spi-set and port-set can't be combined
[ 1340.617628][T17932] usb 4-1: USB disconnect, device number 46
[ 1341.251051][T28059] zero sized request
[ 1341.462576][T17932] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1341.647760][T17932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1341.687773][T17932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1341.716771][T17932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1341.742620][T17932] usb 5-1: Product: syz
[ 1341.756625][T17932] usb 5-1: Manufacturer: syz
[ 1341.774988][T17932] usb 5-1: SerialNumber: syz
[ 1343.860651][T17060] usb 5-1: USB disconnect, device number 44
[ 1343.945355][T28094] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary
[ 1344.941819][T28103] nvme_fabrics: missing parameter 'transport=%s'
[ 1345.027715][T28103] nvme_fabrics: missing parameter 'nqn=%s'
[ 1345.349401][T28113] xt_HMARK: spi-set and port-set can't be combined
[ 1347.360867][T28136] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary
[ 1348.324475][T27397] Bluetooth: hci3: command 0x0406 tx timeout
[ 1348.856272][ T5625] Bluetooth: hci3: unexpected event for opcode 0x0c25
[ 1349.982691][T25632] udevd[25632]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1350.182190][T28175] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary
[ 1350.223432][T28165] nvme_fabrics: missing parameter 'transport=%s'
[ 1350.259816][T28165] nvme_fabrics: missing parameter 'nqn=%s'
[ 1350.631885][T28193] xt_HMARK: spi-set and port-set can't be combined
[ 1351.762805][  T121] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1352.582307][  T121] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1352.670633][  T121] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1352.714668][  T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.744836][  T121] usb 1-1: Product: syz
[ 1352.772057][  T121] usb 1-1: Manufacturer: syz
[ 1352.782469][  T121] usb 1-1: SerialNumber: syz
[ 1353.114606][T28219] UDC core: g1: couldn't find an available UDC or it's busy
[ 1354.058611][T28222] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary
[ 1354.969242][T28237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1355.825998][T28254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1356.017890][T28262] UDC core: g1: couldn't find an available UDC or it's busy
[ 1357.264817][ T5612] usb 1-1: USB disconnect, device number 61
[ 1357.614156][T28273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1359.588639][T25637] udevd[25637]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1360.143022][T18466] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1360.355413][T18466] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1360.521958][T18466] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1360.556385][T18466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.614420][T18466] usb 4-1: Product: syz
[ 1360.644898][T18466] usb 4-1: Manufacturer: syz
[ 1360.675653][T18466] usb 4-1: SerialNumber: syz
[ 1361.605159][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.059385][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.493496][T25632] udevd[25632]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1363.048565][T28365] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6405'.
[ 1363.552632][T28371] kvm: pic: level sensitive irq not supported
[ 1363.799119][  T121] usb 4-1: USB disconnect, device number 47
[ 1364.149275][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6413'.
[ 1365.622145][T25632] udevd[25632]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1367.549309][T18466] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1367.882403][T18466] usb 1-1: Using ep0 maxpacket: 32
[ 1367.889929][T18466] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1367.901064][T18466] usb 1-1: config 14 has an invalid interface number: 57 but max is 0
[ 1367.912460][T18466] usb 1-1: config 14 has no interface number 0
[ 1368.452372][T18466] usb 1-1: config 14 interface 57 has no altsetting 0
[ 1368.461306][T18466] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1368.497111][T18466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.527744][T18466] usb 1-1: Product: syz
[ 1368.553874][T18466] usb 1-1: Manufacturer: syz
[ 1368.569134][T18466] usb 1-1: SerialNumber: syz
[ 1368.712135][T28452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6432'.
[ 1369.033028][T18466] legousbtower 1-1:14.57: interrupt endpoints not found
[ 1370.222388][T28485] fuse: Invalid rootmode
[ 1370.540501][T19354] usb 1-1: USB disconnect, device number 62
[ 1371.138947][T28515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer.
[ 1371.159798][T28513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6452'.
[ 1371.372462][T19354] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1371.570131][T19354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1371.638485][T19354] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1371.668695][T19354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.690911][T19354] usb 1-1: Product: syz
[ 1371.698667][T19354] usb 1-1: Manufacturer: syz
[ 1371.716310][T19354] usb 1-1: SerialNumber: syz
[ 1372.565558][T28532] fuse: Invalid rootmode
[ 1373.016193][  T121] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1373.628132][  T121] usb 2-1: Using ep0 maxpacket: 32
[ 1373.661477][  T121] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1373.696502][  T121] usb 2-1: config 14 has an invalid interface number: 57 but max is 0
[ 1373.710545][  T121] usb 2-1: config 14 has no interface number 0
[ 1373.732929][  T121] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1373.813649][  T121] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1373.852708][  T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.866554][  T121] usb 2-1: Product: syz
[ 1373.878906][  T121] usb 2-1: Manufacturer: syz
[ 1373.885142][  T121] usb 2-1: SerialNumber: syz
[ 1374.254549][T28560] FAULT_INJECTION: forcing a failure.
[ 1374.254549][T28560] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1374.270286][T28560] CPU: 1 UID: 0 PID: 28560 Comm: syz.2.6466 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1374.270331][T28560] Tainted: [L]=SOFTLOCKUP
[ 1374.270341][T28560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1374.270357][T28560] Call Trace:
[ 1374.270367][T28560]  <TASK>
[ 1374.270377][T28560]  dump_stack_lvl+0x100/0x190
[ 1374.270437][T28560]  should_fail_ex.cold+0x5/0xa
[ 1374.270466][T28560]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1374.270504][T28560]  should_fail_alloc_page+0xeb/0x140
[ 1374.270539][T28560]  prepare_alloc_pages+0x1f0/0x5f0
[ 1374.270577][T28560]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1374.270611][T28560]  ? rcu_is_watching+0x12/0xc0
[ 1374.270648][T28560]  ? trace_mm_page_alloc+0x164/0x1c0
[ 1374.270681][T28560]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[ 1374.270709][T28560]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1374.270738][T28560]  ? stack_trace_save+0x8e/0xc0
[ 1374.270763][T28560]  ? __pfx_stack_trace_save+0x10/0x10
[ 1374.270790][T28560]  ? stack_depot_save_flags+0x27/0x9d0
[ 1374.270824][T28560]  ? is_bpf_text_address+0x94/0x1a0
[ 1374.270858][T28560]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1374.270891][T28560]  ? __kasan_slab_alloc+0x89/0x90
[ 1374.270918][T28560]  ? kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 1374.270947][T28560]  ? alloc_vmap_area+0x640/0x2bb0
[ 1374.270974][T28560]  ? __get_vm_area_node+0x1ca/0x330
[ 1374.271005][T28560]  ? __vmalloc_node_range_noprof+0x228/0x1630
[ 1374.271036][T28560]  ? __vmalloc_node_noprof+0xad/0xf0
[ 1374.271063][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1374.271092][T28560]  ? kvm_vm_ioctl+0x7d3/0x4180
[ 1374.271121][T28560]  ? __x64_sys_ioctl+0x18e/0x210
[ 1374.271155][T28560]  ? do_syscall_64+0x115/0x870
[ 1374.271181][T28560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1374.271218][T28560]  alloc_pages_bulk_noprof+0x5de/0x13c0
[ 1374.271252][T28560]  ? policy_nodemask+0xed/0x4f0
[ 1374.271288][T28560]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1374.271333][T28560]  __kasan_populate_vmalloc+0xf0/0x210
[ 1374.271368][T28560]  alloc_vmap_area+0x95d/0x2bb0
[ 1374.271413][T28560]  ? kasan_save_track+0x14/0x30
[ 1374.271439][T28560]  ? __kasan_kmalloc+0xaa/0xb0
[ 1374.271464][T28560]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1374.271495][T28560]  ? kvm_find_cpuid_entry2+0x1c7/0x290
[ 1374.271520][T28560]  ? __get_vm_area_node+0x101/0x330
[ 1374.271552][T28560]  __get_vm_area_node+0x1ca/0x330
[ 1374.271586][T28560]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1374.271619][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1374.271652][T28560]  ? kvm_vcpu_reset+0x6d3/0x1b00
[ 1374.271682][T28560]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1374.271717][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1374.271748][T28560]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1374.271775][T28560]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1374.271810][T28560]  ? vmx_vcpu_put+0xbf/0x860
[ 1374.271833][T28560]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1374.271866][T28560]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1374.271896][T28560]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1374.271934][T28560]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1374.271958][T28560]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1374.271998][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1374.272027][T28560]  __vmalloc_node_noprof+0xad/0xf0
[ 1374.272061][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1374.272095][T28560]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1374.272128][T28560]  kvm_vm_ioctl+0x7d3/0x4180
[ 1374.272164][T28560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1374.272202][T28560]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1374.272250][T28560]  ? kasan_quarantine_put+0x104/0x240
[ 1374.272275][T28560]  ? lockdep_hardirqs_on+0x78/0x100
[ 1374.272303][T28560]  ? find_held_lock+0x2b/0x80
[ 1374.272341][T28560]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1374.272374][T28560]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1374.272428][T28560]  ? tomoyo_path_number_perm+0x188/0x580
[ 1374.272466][T28560]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1374.272511][T28560]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1374.272540][T28560]  ? do_vfs_ioctl+0x226/0x13e0
[ 1374.272574][T28560]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1374.272608][T28560]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1374.272656][T28560]  ? __fget_files+0x215/0x3d0
[ 1374.272679][T28560]  ? hook_file_ioctl_common+0x140/0x440
[ 1374.272715][T28560]  ? selinux_file_ioctl+0x13b/0x290
[ 1374.272750][T28560]  ? selinux_file_ioctl+0xb6/0x290
[ 1374.272787][T28560]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1374.272823][T28560]  __x64_sys_ioctl+0x18e/0x210
[ 1374.272860][T28560]  do_syscall_64+0x115/0x870
[ 1374.272885][T28560]  ? clear_bhb_loop+0x40/0x90
[ 1374.272914][T28560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1374.272954][T28560] RIP: 0033:0x7f8f1ab9de99
[ 1374.272978][T28560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1374.273000][T28560] RSP: 002b:00007f8f1bae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1374.273026][T28560] RAX: ffffffffffffffda RBX: 00007f8f1ae25fa0 RCX: 00007f8f1ab9de99
[ 1374.273043][T28560] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1374.273059][T28560] RBP: 00007f8f1ac33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1374.273076][T28560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1374.273091][T28560] R13: 00007f8f1ae26038 R14: 00007f8f1ae25fa0 R15: 00007ffd13974eb8
[ 1374.273124][T28560]  </TASK>
[ 1374.279741][T28562] FAULT_INJECTION: forcing a failure.
[ 1374.279741][T28562] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1374.284627][T28560] syz.2.6466: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[ 1374.321405][  T121] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1374.325679][T28560] ,cpuset=
[ 1374.341562][T28562] CPU: 0 UID: 0 PID: 28562 Comm: syz.3.6467 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1374.341600][T28562] Tainted: [L]=SOFTLOCKUP
[ 1374.341608][T28562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1374.341622][T28562] Call Trace:
[ 1374.341631][T28562]  <TASK>
[ 1374.341639][T28562]  dump_stack_lvl+0x100/0x190
[ 1374.341673][T28562]  should_fail_ex.cold+0x5/0xa
[ 1374.341698][T28562]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1374.341733][T28562]  should_fail_alloc_page+0xeb/0x140
[ 1374.341765][T28562]  prepare_alloc_pages+0x1f0/0x5f0
[ 1374.341801][T28562]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1374.341831][T28562]  ? stack_trace_save+0x8e/0xc0
[ 1374.341855][T28562]  ? __pfx_stack_trace_save+0x10/0x10
[ 1374.341880][T28562]  ? stack_depot_save_flags+0x27/0x9d0
[ 1374.341917][T28562]  ? lock_acquire+0x1b9/0x370
[ 1374.341946][T28562]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1374.341977][T28562]  ? __lock_acquire+0x49f/0x1a40
[ 1374.342006][T28562]  ? try_charge_memcg+0x365/0xdf0
[ 1374.342047][T28562]  ? mark_held_locks+0x40/0x70
[ 1374.342074][T28562]  ? irqentry_exit+0x24d/0xa00
[ 1374.342099][T28562]  ? lockdep_hardirqs_on+0x78/0x100
[ 1374.342125][T28562]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1374.342155][T28562]  ? policy_nodemask+0xed/0x4f0
[ 1374.342188][T28562]  alloc_pages_mpol+0x1fb/0x540
[ 1374.342229][T28562]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1374.342260][T28562]  ? find_held_lock+0x2b/0x80
[ 1374.342293][T28562]  ? __anon_vma_prepare+0x2db/0x5e0
[ 1374.342327][T28562]  ? __anon_vma_prepare+0x2db/0x5e0
[ 1374.342365][T28562]  folio_alloc_mpol_noprof+0x36/0x260
[ 1374.342403][T28562]  vma_alloc_folio_noprof+0xed/0x1d0
[ 1374.342437][T28562]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1374.342481][T28562]  do_anonymous_page+0xb2b/0x2080
[ 1374.342518][T28562]  ? rcu_read_unlock+0x2d/0xb0
[ 1374.342547][T28562]  __handle_mm_fault+0x1d2c/0x2a00
[ 1374.342589][T28562]  ? reacquire_held_locks+0xce/0x1e0
[ 1374.342618][T28562]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1374.342658][T28562]  ? lock_vma_under_rcu+0x17c/0x590
[ 1374.342711][T28562]  handle_mm_fault+0x37b/0xa30
[ 1374.342753][T28562]  do_user_addr_fault+0x5a3/0x12f0
[ 1374.342796][T28562]  exc_page_fault+0x6f/0xd0
[ 1374.342821][T28562]  asm_exc_page_fault+0x26/0x30
[ 1374.342845][T28562] RIP: 0033:0x7f33ae75b044
[ 1374.342865][T28562] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c
[ 1374.342887][T28562] RSP: 002b:00007ffdddca8b60 EFLAGS: 00010246
[ 1374.342906][T28562] RAX: 00007f33af716000 RBX: 00007f33af7366c0 RCX: 00007f33ae79dc97
[ 1374.342922][T28562] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f33af7366c0
[ 1374.342936][T28562] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[ 1374.342950][T28562] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdddca8cb0
[ 1374.342965][T28562] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[ 1374.342995][T28562]  </TASK>
[ 1374.348662][T28562] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1374.359445][T28560] /,mems_allowed=0-1
[ 1375.161001][T28560] CPU: 0 UID: 0 PID: 28560 Comm: syz.2.6466 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1375.161041][T28560] Tainted: [L]=SOFTLOCKUP
[ 1375.161050][T28560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1375.161066][T28560] Call Trace:
[ 1375.161074][T28560]  <TASK>
[ 1375.161084][T28560]  dump_stack_lvl+0x100/0x190
[ 1375.161122][T28560]  warn_alloc.cold+0x94/0xa8
[ 1375.161148][T28560]  ? __pfx_warn_alloc+0x10/0x10
[ 1375.161173][T28560]  ? lockdep_hardirqs_on+0x78/0x100
[ 1375.161205][T28560]  ? __get_vm_area_node+0x2cd/0x330
[ 1375.161251][T28560]  ? __get_vm_area_node+0x208/0x330
[ 1375.161301][T28560]  __vmalloc_node_range_noprof+0xccd/0x1630
[ 1375.161341][T28560]  ? kvm_vcpu_reset+0x6d3/0x1b00
[ 1375.161373][T28560]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1375.161407][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1375.161442][T28560]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1375.161470][T28560]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1375.161504][T28560]  ? vmx_vcpu_put+0xbf/0x860
[ 1375.161546][T28560]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1375.161576][T28560]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1375.161607][T28560]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1375.161644][T28560]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1375.161668][T28560]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1375.161709][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1375.161737][T28560]  __vmalloc_node_noprof+0xad/0xf0
[ 1375.161772][T28560]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1375.161802][T28560]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1375.161831][T28560]  kvm_vm_ioctl+0x7d3/0x4180
[ 1375.161867][T28560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1375.161902][T28560]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1375.161952][T28560]  ? kasan_quarantine_put+0x104/0x240
[ 1375.161978][T28560]  ? lockdep_hardirqs_on+0x78/0x100
[ 1375.162004][T28560]  ? find_held_lock+0x2b/0x80
[ 1375.162040][T28560]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1375.162073][T28560]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1375.162111][T28560]  ? tomoyo_path_number_perm+0x188/0x580
[ 1375.162147][T28560]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1375.162191][T28560]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1375.162225][T28560]  ? do_vfs_ioctl+0x226/0x13e0
[ 1375.162255][T28560]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1375.162289][T28560]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1375.162337][T28560]  ? __fget_files+0x215/0x3d0
[ 1375.162360][T28560]  ? hook_file_ioctl_common+0x140/0x440
[ 1375.162397][T28560]  ? selinux_file_ioctl+0x13b/0x290
[ 1375.162429][T28560]  ? selinux_file_ioctl+0xb6/0x290
[ 1375.162465][T28560]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1375.162501][T28560]  __x64_sys_ioctl+0x18e/0x210
[ 1375.162537][T28560]  do_syscall_64+0x115/0x870
[ 1375.162562][T28560]  ? clear_bhb_loop+0x40/0x90
[ 1375.162591][T28560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1375.162616][T28560] RIP: 0033:0x7f8f1ab9de99
[ 1375.162638][T28560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1375.162661][T28560] RSP: 002b:00007f8f1bae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1375.162683][T28560] RAX: ffffffffffffffda RBX: 00007f8f1ae25fa0 RCX: 00007f8f1ab9de99
[ 1375.162700][T28560] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1375.162715][T28560] RBP: 00007f8f1ac33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1375.162730][T28560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1375.162743][T28560] R13: 00007f8f1ae26038 R14: 00007f8f1ae25fa0 R15: 00007ffd13974eb8
[ 1375.162771][T28560]  </TASK>
[ 1375.524084][T28560] Mem-Info:
[ 1375.527287][T28560] active_anon:9032 inactive_anon:0 isolated_anon:0
[ 1375.527287][T28560]  active_file:168 inactive_file:62263 isolated_file:0
[ 1375.527287][T28560]  unevictable:768 dirty:323 writeback:0
[ 1375.527287][T28560]  slab_reclaimable:12799 slab_unreclaimable:99653
[ 1375.527287][T28560]  mapped:30249 shmem:1288 pagetables:1361
[ 1375.527287][T28560]  sec_pagetables:3 bounce:0
[ 1375.527287][T28560]  kernel_misc_reclaimable:0
[ 1375.527287][T28560]  free:1276416 free_pcp:11391 free_cma:0
[ 1375.577370][T28560] Node 0 active_anon:36168kB inactive_anon:0kB active_file:672kB inactive_file:248852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120952kB dirty:1292kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12192kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1375.612081][T28560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1375.645146][T28560] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1375.677778][T28560] lowmem_reserve[]: 0 2472 2473 2473 2473
[ 1375.685127][T28560] Node 0 DMA32 free:1157372kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36168kB inactive_anon:0kB active_file:672kB inactive_file:248852kB unevictable:1536kB writepending:1292kB zspages:0kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:40720kB local_pcp:21456kB free_cma:0kB
[ 1375.718678][T28560] lowmem_reserve[]: 0 0 0 0 0
[ 1375.724598][T28560] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1375.754168][T28560] lowmem_reserve[]: 0 0 0 0 0
[ 1375.759182][T28560] Node 1 Normal free:3932928kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4892kB local_pcp:0kB free_cma:0kB
[ 1375.792342][T28560] lowmem_reserve[]: 0 0 0 0 0
[ 1375.797187][T28560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1375.810182][T28560] Node 0 DMA32: 3693*4kB (UME) 2323*8kB (UME) 1221*16kB (UME) 720*32kB (UME) 406*64kB (UME) 315*128kB (UME) 93*256kB (UME) 72*512kB (UME) 34*1024kB (UM) 7*2048kB (UME) 221*4096kB (UM) = 1157276kB
[ 1375.829949][T28560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1375.841795][T28560] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 9*16kB (UM) 7*32kB (UM) 5*64kB (UM) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3932928kB
[ 1375.859020][T28560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1375.868742][T28560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1375.880016][T28560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1375.889709][T28560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1375.899222][T28560] 63716 total pagecache pages
[ 1375.903998][T28560] 0 pages in swap cache
[ 1375.908171][T28560] Free swap  = 124996kB
[ 1375.940968][T28560] Total swap = 124996kB
[ 1375.949516][T28560] 2097051 pages RAM
[ 1375.957505][T28560] 0 pages HighMem/MovableOnly
[ 1375.972418][T28560] 432299 pages reserved
[ 1375.984382][T28560] 0 pages cma reserved
[ 1376.320510][T28587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6470'.
[ 1376.413461][T19354] usb 1-1: USB disconnect, device number 63
[ 1377.318002][T19354] usb 2-1: USB disconnect, device number 34
[ 1379.011030][ T5343] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1379.333625][ T5343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1379.400457][ T5343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1379.428115][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.459570][ T5343] usb 5-1: Product: syz
[ 1379.488085][ T5343] usb 5-1: Manufacturer: syz
[ 1379.497672][ T5343] usb 5-1: SerialNumber: syz
[ 1380.906156][T15964] usb 5-1: USB disconnect, device number 45
[ 1383.813849][T28730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6519'.
[ 1384.092387][T17060] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1384.265886][T17060] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.309750][T17060] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1384.334738][T17060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.356129][T17060] usb 2-1: Product: syz
[ 1384.369277][T17060] usb 2-1: Manufacturer: syz
[ 1384.381462][T17060] usb 2-1: SerialNumber: syz
[ 1384.627036][T17060] usb 2-1: USB disconnect, device number 35
[ 1384.914487][T28750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1385.086574][T28756] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1387.803994][T28828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1388.343202][T28839] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1388.749486][T28855] md: loop0 has zero or unknown size, marking faulty!
[ 1388.766832][T28855] md: md_import_device returned -22
[ 1389.869050][T28895] FAULT_INJECTION: forcing a failure.
[ 1389.869050][T28895] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1389.869908][T28892] FAULT_INJECTION: forcing a failure.
[ 1389.869908][T28892] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1389.896075][T28895] CPU: 1 UID: 0 PID: 28895 Comm: syz.1.6576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1389.896120][T28895] Tainted: [L]=SOFTLOCKUP
[ 1389.896130][T28895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1389.896146][T28895] Call Trace:
[ 1389.896155][T28895]  <TASK>
[ 1389.896163][T28895]  dump_stack_lvl+0x100/0x190
[ 1389.896200][T28895]  should_fail_ex.cold+0x5/0xa
[ 1389.896226][T28895]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1389.896261][T28895]  should_fail_alloc_page+0xeb/0x140
[ 1389.896294][T28895]  prepare_alloc_pages+0x1f0/0x5f0
[ 1389.896330][T28895]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1389.896378][T28895]  ? stack_trace_save+0x8e/0xc0
[ 1389.896403][T28895]  ? __pfx_stack_trace_save+0x10/0x10
[ 1389.896427][T28895]  ? stack_depot_save_flags+0x27/0x9d0
[ 1389.896460][T28895]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1389.896488][T28895]  ? kasan_save_stack+0x3f/0x50
[ 1389.896513][T28895]  ? kasan_save_stack+0x30/0x50
[ 1389.896537][T28895]  ? kasan_save_track+0x14/0x30
[ 1389.896562][T28895]  ? __kasan_slab_alloc+0x89/0x90
[ 1389.896588][T28895]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[ 1389.896612][T28895]  ? security_inode_alloc+0x3b/0x2c0
[ 1389.896641][T28895]  ? inode_init_always_gfp+0xc77/0xfb0
[ 1389.896665][T28895]  ? alloc_inode+0x8e/0x250
[ 1389.896694][T28895]  ? new_inode+0x22/0x1c0
[ 1389.896738][T28895]  ? __debugfs_create_file+0x105/0x4f0
[ 1389.896773][T28895]  ? debugfs_create_file_full+0x41/0x60
[ 1389.896818][T28895]  ? kvm_dev_ioctl+0x1797/0x1b50
[ 1389.896857][T28895]  ? __x64_sys_ioctl+0x18e/0x210
[ 1389.896888][T28895]  ? do_syscall_64+0x115/0x870
[ 1389.896913][T28895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1389.896936][T28895]  ? look_up_lock_class+0x55/0x120
[ 1389.896973][T28895]  ? __lock_acquire+0x49f/0x1a40
[ 1389.897000][T28895]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1389.897030][T28895]  ? policy_nodemask+0xed/0x4f0
[ 1389.897062][T28895]  alloc_pages_mpol+0x1fb/0x540
[ 1389.897090][T28895]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1389.897114][T28895]  ? do_raw_spin_lock+0x128/0x260
[ 1389.897141][T28895]  ? find_held_lock+0x2b/0x80
[ 1389.897169][T28895]  ? inode_doinit_with_dentry+0x70b/0x1320
[ 1389.897203][T28895]  alloc_pages_noprof+0x1a/0x160
[ 1389.897237][T28895]  get_free_pages_noprof+0x10/0xb0
[ 1389.897265][T28895]  inode_doinit_with_dentry+0x788/0x1320
[ 1389.897299][T28895]  ? inode_set_ctime_current+0x283/0x850
[ 1389.897327][T28895]  ? __pfx_inode_doinit_with_dentry+0x10/0x10
[ 1389.897362][T28895]  ? __pfx_inode_set_ctime_current+0x10/0x10
[ 1389.897389][T28895]  ? new_inode+0x15a/0x1c0
[ 1389.897424][T28895]  selinux_d_instantiate+0x26/0x40
[ 1389.897457][T28895]  security_d_instantiate+0x14c/0x1b0
[ 1389.897485][T28895]  d_make_persistent+0x64/0x180
[ 1389.897516][T28895]  __debugfs_create_file+0x25e/0x4f0
[ 1389.897557][T28895]  debugfs_create_file_full+0x41/0x60
[ 1389.897596][T28895]  kvm_dev_ioctl+0x1797/0x1b50
[ 1389.897641][T28895]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1389.897680][T28895]  ? selinux_file_ioctl+0x13b/0x290
[ 1389.897713][T28895]  ? selinux_file_ioctl+0xb6/0x290
[ 1389.897749][T28895]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1389.897796][T28895]  __x64_sys_ioctl+0x18e/0x210
[ 1389.897835][T28895]  do_syscall_64+0x115/0x870
[ 1389.897860][T28895]  ? clear_bhb_loop+0x40/0x90
[ 1389.897888][T28895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1389.897911][T28895] RIP: 0033:0x7fb62f59de99
[ 1389.897932][T28895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1389.897954][T28895] RSP: 002b:00007fb6303de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1389.897978][T28895] RAX: ffffffffffffffda RBX: 00007fb62f825fa0 RCX: 00007fb62f59de99
[ 1389.897994][T28895] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[ 1389.898009][T28895] RBP: 00007fb62f633eaf R08: 0000000000000000 R09: 0000000000000000
[ 1389.898024][T28895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1389.898040][T28895] R13: 00007fb62f826038 R14: 00007fb62f825fa0 R15: 00007ffe05a55ee8
[ 1389.898073][T28895]  </TASK>
[ 1390.297798][T28892] CPU: 1 UID: 0 PID: 28892 Comm: syz.3.6574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1390.297832][T28892] Tainted: [L]=SOFTLOCKUP
[ 1390.297840][T28892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1390.297853][T28892] Call Trace:
[ 1390.297864][T28892]  <TASK>
[ 1390.297874][T28892]  dump_stack_lvl+0x100/0x190
[ 1390.297914][T28892]  should_fail_ex.cold+0x5/0xa
[ 1390.297936][T28892]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1390.297966][T28892]  should_fail_alloc_page+0xeb/0x140
[ 1390.297996][T28892]  prepare_alloc_pages+0x1f0/0x5f0
[ 1390.298031][T28892]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1390.298061][T28892]  ? rcu_is_watching+0x12/0xc0
[ 1390.298093][T28892]  ? trace_mm_page_alloc+0x164/0x1c0
[ 1390.298123][T28892]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[ 1390.298150][T28892]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1390.298176][T28892]  ? stack_trace_save+0x8e/0xc0
[ 1390.298197][T28892]  ? __pfx_stack_trace_save+0x10/0x10
[ 1390.298220][T28892]  ? stack_depot_save_flags+0x27/0x9d0
[ 1390.298252][T28892]  ? is_bpf_text_address+0x94/0x1a0
[ 1390.298281][T28892]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1390.298312][T28892]  ? __kasan_slab_alloc+0x89/0x90
[ 1390.298337][T28892]  ? kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 1390.298362][T28892]  ? alloc_vmap_area+0x640/0x2bb0
[ 1390.298387][T28892]  ? __get_vm_area_node+0x1ca/0x330
[ 1390.298415][T28892]  ? __vmalloc_node_range_noprof+0x228/0x1630
[ 1390.298448][T28892]  ? __vmalloc_node_noprof+0xad/0xf0
[ 1390.298480][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.298510][T28892]  ? kvm_vm_ioctl+0x7d3/0x4180
[ 1390.298540][T28892]  ? __x64_sys_ioctl+0x18e/0x210
[ 1390.298573][T28892]  ? do_syscall_64+0x115/0x870
[ 1390.298603][T28892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.298639][T28892]  alloc_pages_bulk_noprof+0x5de/0x13c0
[ 1390.298669][T28892]  ? policy_nodemask+0xed/0x4f0
[ 1390.298701][T28892]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1390.298742][T28892]  __kasan_populate_vmalloc+0xf0/0x210
[ 1390.298774][T28892]  alloc_vmap_area+0x95d/0x2bb0
[ 1390.298813][T28892]  ? kasan_save_track+0x14/0x30
[ 1390.298841][T28892]  ? __kasan_kmalloc+0xaa/0xb0
[ 1390.298867][T28892]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1390.298904][T28892]  ? __pfx___schedule+0x10/0x10
[ 1390.298928][T28892]  ? __get_vm_area_node+0x101/0x330
[ 1390.298963][T28892]  __get_vm_area_node+0x1ca/0x330
[ 1390.299001][T28892]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1390.299037][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.299072][T28892]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1390.299105][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.299138][T28892]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1390.299168][T28892]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1390.299205][T28892]  ? vmx_vcpu_put+0xbf/0x860
[ 1390.299230][T28892]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1390.299263][T28892]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1390.299295][T28892]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1390.299332][T28892]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1390.299355][T28892]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1390.299394][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.299424][T28892]  __vmalloc_node_noprof+0xad/0xf0
[ 1390.299459][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.299494][T28892]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.299528][T28892]  kvm_vm_ioctl+0x7d3/0x4180
[ 1390.299562][T28892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.299599][T28892]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1390.299656][T28892]  ? kasan_quarantine_put+0x104/0x240
[ 1390.299683][T28892]  ? lockdep_hardirqs_on+0x78/0x100
[ 1390.299711][T28892]  ? find_held_lock+0x2b/0x80
[ 1390.299748][T28892]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1390.299781][T28892]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1390.299820][T28892]  ? tomoyo_path_number_perm+0x188/0x580
[ 1390.299856][T28892]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1390.299906][T28892]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1390.299937][T28892]  ? do_vfs_ioctl+0x226/0x13e0
[ 1390.299971][T28892]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1390.300007][T28892]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1390.300054][T28892]  ? __fget_files+0x215/0x3d0
[ 1390.300077][T28892]  ? hook_file_ioctl_common+0x140/0x440
[ 1390.300113][T28892]  ? selinux_file_ioctl+0x13b/0x290
[ 1390.300148][T28892]  ? selinux_file_ioctl+0xb6/0x290
[ 1390.300186][T28892]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1390.300233][T28892]  __x64_sys_ioctl+0x18e/0x210
[ 1390.300273][T28892]  do_syscall_64+0x115/0x870
[ 1390.300299][T28892]  ? clear_bhb_loop+0x40/0x90
[ 1390.300331][T28892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.300358][T28892] RIP: 0033:0x7f33ae79de99
[ 1390.300381][T28892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1390.300404][T28892] RSP: 002b:00007f33af736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1390.300428][T28892] RAX: ffffffffffffffda RBX: 00007f33aea25fa0 RCX: 00007f33ae79de99
[ 1390.300445][T28892] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1390.300461][T28892] RBP: 00007f33ae833eaf R08: 0000000000000000 R09: 0000000000000000
[ 1390.300477][T28892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1390.300492][T28892] R13: 00007f33aea26038 R14: 00007f33aea25fa0 R15: 00007ffdddca8bb8
[ 1390.300526][T28892]  </TASK>
[ 1390.320204][T28892] syz.3.6574: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1390.848215][T28892] CPU: 0 UID: 0 PID: 28892 Comm: syz.3.6574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1390.848252][T28892] Tainted: [L]=SOFTLOCKUP
[ 1390.848260][T28892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1390.848273][T28892] Call Trace:
[ 1390.848281][T28892]  <TASK>
[ 1390.848290][T28892]  dump_stack_lvl+0x100/0x190
[ 1390.848324][T28892]  warn_alloc.cold+0x94/0xa8
[ 1390.848348][T28892]  ? __pfx_warn_alloc+0x10/0x10
[ 1390.848379][T28892]  ? lockdep_hardirqs_on+0x78/0x100
[ 1390.848407][T28892]  ? __get_vm_area_node+0x2cd/0x330
[ 1390.848443][T28892]  ? __get_vm_area_node+0x208/0x330
[ 1390.848481][T28892]  __vmalloc_node_range_noprof+0xccd/0x1630
[ 1390.848519][T28892]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1390.848553][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.848587][T28892]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1390.848616][T28892]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1390.848652][T28892]  ? vmx_vcpu_put+0xbf/0x860
[ 1390.848693][T28892]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1390.848727][T28892]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1390.848759][T28892]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1390.848795][T28892]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1390.848820][T28892]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1390.848858][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.848891][T28892]  __vmalloc_node_noprof+0xad/0xf0
[ 1390.848925][T28892]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.848958][T28892]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1390.848990][T28892]  kvm_vm_ioctl+0x7d3/0x4180
[ 1390.849024][T28892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.849061][T28892]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1390.849117][T28892]  ? kasan_quarantine_put+0x104/0x240
[ 1390.849142][T28892]  ? lockdep_hardirqs_on+0x78/0x100
[ 1390.849167][T28892]  ? find_held_lock+0x2b/0x80
[ 1390.849201][T28892]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1390.849235][T28892]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1390.849274][T28892]  ? tomoyo_path_number_perm+0x188/0x580
[ 1390.849309][T28892]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1390.849358][T28892]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1390.849389][T28892]  ? do_vfs_ioctl+0x226/0x13e0
[ 1390.849424][T28892]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1390.849458][T28892]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1390.849503][T28892]  ? __fget_files+0x215/0x3d0
[ 1390.849526][T28892]  ? hook_file_ioctl_common+0x140/0x440
[ 1390.849562][T28892]  ? selinux_file_ioctl+0x13b/0x290
[ 1390.849596][T28892]  ? selinux_file_ioctl+0xb6/0x290
[ 1390.849630][T28892]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1390.849666][T28892]  __x64_sys_ioctl+0x18e/0x210
[ 1390.849703][T28892]  do_syscall_64+0x115/0x870
[ 1390.849726][T28892]  ? clear_bhb_loop+0x40/0x90
[ 1390.849752][T28892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.849776][T28892] RIP: 0033:0x7f33ae79de99
[ 1390.849797][T28892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1390.849821][T28892] RSP: 002b:00007f33af736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1390.849845][T28892] RAX: ffffffffffffffda RBX: 00007f33aea25fa0 RCX: 00007f33ae79de99
[ 1390.849861][T28892] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1390.849877][T28892] RBP: 00007f33ae833eaf R08: 0000000000000000 R09: 0000000000000000
[ 1390.849892][T28892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1390.849906][T28892] R13: 00007f33aea26038 R14: 00007f33aea25fa0 R15: 00007ffdddca8bb8
[ 1390.849938][T28892]  </TASK>
[ 1390.851266][T28892] Mem-Info:
[ 1391.211382][T28892] active_anon:8998 inactive_anon:0 isolated_anon:0
[ 1391.211382][T28892]  active_file:168 inactive_file:62278 isolated_file:0
[ 1391.211382][T28892]  unevictable:768 dirty:253 writeback:0
[ 1391.211382][T28892]  slab_reclaimable:12954 slab_unreclaimable:99772
[ 1391.211382][T28892]  mapped:30216 shmem:1286 pagetables:1419
[ 1391.211382][T28892]  sec_pagetables:3 bounce:0
[ 1391.211382][T28892]  kernel_misc_reclaimable:0
[ 1391.211382][T28892]  free:1277606 free_pcp:9660 free_cma:0
[ 1391.311759][T28892] Node 0 active_anon:35892kB inactive_anon:0kB active_file:672kB inactive_file:248912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120864kB dirty:1012kB writeback:0kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12104kB pagetables:5356kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1391.349474][T28892] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1391.409309][T28892] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1391.439668][T28892] lowmem_reserve[]: 0 2472 2473 2473 2473
[ 1391.449327][T28892] Node 0 DMA32 free:1162236kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35892kB inactive_anon:0kB active_file:672kB inactive_file:248912kB unevictable:1536kB writepending:1012kB zspages:0kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:34956kB local_pcp:21828kB free_cma:0kB
[ 1391.492051][T28892] lowmem_reserve[]: 0 0 0 0 0
[ 1391.501405][T28892] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1391.531336][T28892] lowmem_reserve[]: 0 0 0 0 0
[ 1391.536482][T28892] Node 1 Normal free:3932928kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4892kB local_pcp:0kB free_cma:0kB
[ 1391.570035][T28892] lowmem_reserve[]: 0 0 0 0 0
[ 1391.575242][T28892] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1391.588377][T28892] Node 0 DMA32: 2394*4kB (UM) 2092*8kB (UME) 1295*16kB (UME) 959*32kB (UME) 409*64kB (UME) 319*128kB (UME) 89*256kB (UME) 75*512kB (UME) 34*1024kB (UM) 8*2048kB (UME) 221*4096kB (UM) = 1162328kB
[ 1391.610012][T28892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1391.621952][T28892] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 9*16kB (UM) 7*32kB (UM) 5*64kB (UM) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3932928kB
[ 1391.644594][T28892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1391.657151][T28892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1391.692346][T28892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1391.702738][T28892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1391.716176][T28892] 63728 total pagecache pages
[ 1391.720997][T28892] 0 pages in swap cache
[ 1391.725278][T28892] Free swap  = 124996kB
[ 1391.745548][T28892] Total swap = 124996kB
[ 1391.753682][T28892] 2097051 pages RAM
[ 1391.758049][T28892] 0 pages HighMem/MovableOnly
[ 1391.763219][T28892] 432299 pages reserved
[ 1391.767440][T28892] 0 pages cma reserved
[ 1391.903137][T28931] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1393.032368][ T5343] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1393.206596][ T5343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.246051][ T5343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1393.276828][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.306210][ T5343] usb 4-1: Product: syz
[ 1393.320823][ T5343] usb 4-1: Manufacturer: syz
[ 1393.336541][ T5343] usb 4-1: SerialNumber: syz
[ 1393.610707][T18466] usb 4-1: USB disconnect, device number 48
[ 1393.674741][T29001] FAULT_INJECTION: forcing a failure.
[ 1393.674741][T29001] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1393.690101][T29008] FAULT_INJECTION: forcing a failure.
[ 1393.690101][T29008] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1393.705097][T29001] CPU: 1 UID: 0 PID: 29001 Comm: syz.2.6614 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1393.705139][T29001] Tainted: [L]=SOFTLOCKUP
[ 1393.705148][T29001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1393.705163][T29001] Call Trace:
[ 1393.705171][T29001]  <TASK>
[ 1393.705180][T29001]  dump_stack_lvl+0x100/0x190
[ 1393.705216][T29001]  should_fail_ex.cold+0x5/0xa
[ 1393.705242][T29001]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1393.705279][T29001]  should_fail_alloc_page+0xeb/0x140
[ 1393.705315][T29001]  prepare_alloc_pages+0x1f0/0x5f0
[ 1393.705353][T29001]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1393.705398][T29001]  ? __lock_acquire+0x49f/0x1a40
[ 1393.705432][T29001]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1393.705461][T29001]  ? __css_rstat_updated+0x1ce/0x5a0
[ 1393.705497][T29001]  ? do_raw_spin_lock+0x128/0x260
[ 1393.705527][T29001]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1393.705566][T29001]  ? find_held_lock+0x2b/0x80
[ 1393.705613][T29001]  ? __lock_acquire+0x49f/0x1a40
[ 1393.705641][T29001]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1393.705672][T29001]  ? policy_nodemask+0xed/0x4f0
[ 1393.705706][T29001]  alloc_pages_mpol+0x1fb/0x540
[ 1393.705742][T29001]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1393.705778][T29001]  ? __folio_batch_add_and_move+0x5e5/0xc60
[ 1393.705821][T29001]  folio_alloc_mpol_noprof+0x36/0x260
[ 1393.705862][T29001]  shmem_alloc_folio+0x135/0x160
[ 1393.705898][T29001]  shmem_alloc_and_add_folio+0x371/0xd40
[ 1393.705932][T29001]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1393.705960][T29001]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 1393.705995][T29001]  shmem_get_folio_gfp+0x6ad/0x1910
[ 1393.706025][T29001]  ? filemap_map_pages+0x112d/0x1fe0
[ 1393.706062][T29001]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1393.706091][T29001]  ? filemap_map_pages+0x1137/0x1fe0
[ 1393.706133][T29001]  shmem_fault+0x1f9/0xa20
[ 1393.706161][T29001]  ? __pfx_shmem_fault+0x10/0x10
[ 1393.706190][T29001]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1393.706243][T29001]  ? find_held_lock+0x2b/0x80
[ 1393.706283][T29001]  __do_fault+0x10b/0x440
[ 1393.706313][T29001]  do_fault+0xa99/0x1750
[ 1393.706351][T29001]  __handle_mm_fault+0x187d/0x2a00
[ 1393.706393][T29001]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1393.706427][T29001]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1393.706466][T29001]  ? pte_offset_map_lock+0x174/0x320
[ 1393.706498][T29001]  ? find_held_lock+0x2b/0x80
[ 1393.706542][T29001]  ? follow_page_pte+0x4d0/0x13f0
[ 1393.706586][T29001]  handle_mm_fault+0x37b/0xa30
[ 1393.706629][T29001]  __get_user_pages+0x1178/0x32a0
[ 1393.706672][T29001]  ? __pfx___get_user_pages+0x10/0x10
[ 1393.706715][T29001]  populate_vma_page_range+0x267/0x3f0
[ 1393.706750][T29001]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1393.706780][T29001]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1393.706808][T29001]  ? do_mmap+0x93f/0x12f0
[ 1393.706839][T29001]  __mm_populate+0x107/0x3a0
[ 1393.706870][T29001]  ? __pfx___mm_populate+0x10/0x10
[ 1393.706902][T29001]  ? up_write+0x2e5/0x5c0
[ 1393.706929][T29001]  vm_mmap_pgoff+0x37f/0x470
[ 1393.706960][T29001]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1393.706993][T29001]  ? __pfx_do_futex+0x10/0x10
[ 1393.707031][T29001]  ksys_mmap_pgoff+0xe4/0x610
[ 1393.707061][T29001]  ? __x64_sys_futex+0x358/0x4d0
[ 1393.707097][T29001]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 1393.707129][T29001]  ? xfd_validate_state+0x129/0x190
[ 1393.707169][T29001]  __x64_sys_mmap+0x125/0x190
[ 1393.707209][T29001]  do_syscall_64+0x115/0x870
[ 1393.707238][T29001]  ? clear_bhb_loop+0x40/0x90
[ 1393.707269][T29001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.707296][T29001] RIP: 0033:0x7f8f1ab9de99
[ 1393.707318][T29001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1393.707342][T29001] RSP: 002b:00007f8f1bae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1393.707366][T29001] RAX: ffffffffffffffda RBX: 00007f8f1ae25fa0 RCX: 00007f8f1ab9de99
[ 1393.707384][T29001] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[ 1393.707401][T29001] RBP: 00007f8f1ac33eaf R08: ffffffffffffffff R09: 0000000000000000
[ 1393.707417][T29001] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1393.707430][T29001] R13: 00007f8f1ae26038 R14: 00007f8f1ae25fa0 R15: 00007ffd13974eb8
[ 1393.707460][T29001]  </TASK>
[ 1393.707634][T29008] CPU: 1 UID: 0 PID: 29008 Comm: syz.4.6617 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1393.707667][T29008] Tainted: [L]=SOFTLOCKUP
[ 1393.707677][T29008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1393.707691][T29008] Call Trace:
[ 1393.707698][T29008]  <TASK>
[ 1393.707706][T29008]  dump_stack_lvl+0x100/0x190
[ 1393.707739][T29008]  should_fail_ex.cold+0x5/0xa
[ 1393.707763][T29008]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1393.707801][T29008]  should_fail_alloc_page+0xeb/0x140
[ 1393.707836][T29008]  prepare_alloc_pages+0x1f0/0x5f0
[ 1393.707870][T29008]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1393.707897][T29008]  ? lapic_next_event+0x10/0x20
[ 1393.707926][T29008]  ? clockevents_program_event+0x1ef/0x820
[ 1393.707960][T29008]  ? sched_clock+0x38/0x60
[ 1393.707990][T29008]  ? __pfx_clockevents_program_event+0x10/0x10
[ 1393.708025][T29008]  ? find_held_lock+0x2b/0x80
[ 1393.708056][T29008]  ? __hrtimer_rearm_deferred+0x23c/0x720
[ 1393.708091][T29008]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1393.708118][T29008]  ? __schedule+0x31d8/0x6730
[ 1393.708160][T29008]  ? rcu_is_watching+0x12/0xc0
[ 1393.708196][T29008]  ? trace_sched_exit_tp+0x120/0x160
[ 1393.708233][T29008]  ? __schedule+0x126e/0x6730
[ 1393.708266][T29008]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1393.708296][T29008]  ? policy_nodemask+0xed/0x4f0
[ 1393.708329][T29008]  alloc_pages_mpol+0x1fb/0x540
[ 1393.708362][T29008]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1393.708394][T29008]  ? irqentry_exit+0x24d/0xa00
[ 1393.708423][T29008]  alloc_pages_noprof+0x1a/0x160
[ 1393.708459][T29008]  get_free_pages_noprof+0x10/0xb0
[ 1393.708506][T29008]  __kasan_populate_vmalloc+0xa0/0x210
[ 1393.708540][T29008]  alloc_vmap_area+0x95d/0x2bb0
[ 1393.708587][T29008]  ? kasan_save_track+0x14/0x30
[ 1393.708613][T29008]  ? __kasan_kmalloc+0xaa/0xb0
[ 1393.708642][T29008]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1393.708672][T29008]  ? kvm_find_cpuid_entry2+0x1c7/0x290
[ 1393.708700][T29008]  ? __get_vm_area_node+0x101/0x330
[ 1393.708734][T29008]  __get_vm_area_node+0x1ca/0x330
[ 1393.708770][T29008]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1393.708804][T29008]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1393.708838][T29008]  ? kvm_vcpu_reset+0x6d3/0x1b00
[ 1393.708869][T29008]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1393.708901][T29008]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1393.708933][T29008]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1393.708961][T29008]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1393.708996][T29008]  ? vmx_vcpu_put+0xbf/0x860
[ 1393.709019][T29008]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1393.709050][T29008]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1393.709077][T29008]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1393.709111][T29008]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1393.709134][T29008]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1393.709171][T29008]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1393.709200][T29008]  __vmalloc_node_noprof+0xad/0xf0
[ 1393.709232][T29008]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1393.709265][T29008]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1393.709298][T29008]  kvm_vm_ioctl+0x7d3/0x4180
[ 1393.709330][T29008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.709349][T29010] FAULT_INJECTION: forcing a failure.
[ 1393.709349][T29010] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1393.709365][T29008]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1393.709417][T29008]  ? kasan_quarantine_put+0x104/0x240
[ 1393.709441][T29008]  ? lockdep_hardirqs_on+0x78/0x100
[ 1393.709466][T29008]  ? find_held_lock+0x2b/0x80
[ 1393.709498][T29008]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1393.709528][T29008]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1393.709571][T29008]  ? tomoyo_path_number_perm+0x188/0x580
[ 1393.709603][T29008]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1393.709638][T29008]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1393.709661][T29008]  ? do_vfs_ioctl+0x226/0x13e0
[ 1393.709690][T29008]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1393.709717][T29008]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1393.709752][T29008]  ? __fget_files+0x215/0x3d0
[ 1393.709774][T29008]  ? hook_file_ioctl_common+0x140/0x440
[ 1393.709807][T29008]  ? selinux_file_ioctl+0x13b/0x290
[ 1393.709840][T29008]  ? selinux_file_ioctl+0xb6/0x290
[ 1393.709873][T29008]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1393.709909][T29008]  __x64_sys_ioctl+0x18e/0x210
[ 1393.709943][T29008]  do_syscall_64+0x115/0x870
[ 1393.709968][T29008]  ? clear_bhb_loop+0x40/0x90
[ 1393.709995][T29008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.710018][T29008] RIP: 0033:0x7f225b99de99
[ 1393.710038][T29008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1393.710062][T29008] RSP: 002b:00007f225c894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1393.710085][T29008] RAX: ffffffffffffffda RBX: 00007f225bc25fa0 RCX: 00007f225b99de99
[ 1393.710102][T29008] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1393.710117][T29008] RBP: 00007f225ba33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1393.710132][T29008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1393.710146][T29008] R13: 00007f225bc26038 R14: 00007f225bc25fa0 R15: 00007ffd14fc92f8
[ 1393.710177][T29008]  </TASK>
[ 1394.791817][T29018] fuse: Bad value for 'fd'
[ 1394.809643][T29010] CPU: 0 UID: 0 PID: 29010 Comm: syz.0.6618 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1394.809689][T29010] Tainted: [L]=SOFTLOCKUP
[ 1394.809698][T29010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1394.809714][T29010] Call Trace:
[ 1394.809723][T29010]  <TASK>
[ 1394.809733][T29010]  dump_stack_lvl+0x100/0x190
[ 1394.809770][T29010]  should_fail_ex.cold+0x5/0xa
[ 1394.809797][T29010]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1394.809835][T29010]  should_fail_alloc_page+0xeb/0x140
[ 1394.809870][T29010]  prepare_alloc_pages+0x1f0/0x5f0
[ 1394.809910][T29010]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1394.809945][T29010]  ? rcu_is_watching+0x12/0xc0
[ 1394.809983][T29010]  ? trace_mm_page_alloc+0x164/0x1c0
[ 1394.810018][T29010]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[ 1394.810050][T29010]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1394.810081][T29010]  ? is_bpf_text_address+0x8a/0x1a0
[ 1394.810114][T29010]  ? bpf_ksym_find+0x128/0x1c0
[ 1394.810151][T29010]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1394.810180][T29010]  ? is_bpf_text_address+0x94/0x1a0
[ 1394.810212][T29010]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1394.810239][T29010]  ? bpf_ksym_find+0x128/0x1c0
[ 1394.810274][T29010]  ? __kernel_text_address+0xd/0x30
[ 1394.810325][T29010]  alloc_pages_bulk_noprof+0x5de/0x13c0
[ 1394.810360][T29010]  ? policy_nodemask+0xed/0x4f0
[ 1394.810396][T29010]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1394.810442][T29010]  __kasan_populate_vmalloc+0xf0/0x210
[ 1394.810477][T29010]  alloc_vmap_area+0x95d/0x2bb0
[ 1394.810518][T29010]  ? kasan_save_track+0x14/0x30
[ 1394.810547][T29010]  ? __kasan_kmalloc+0xaa/0xb0
[ 1394.810575][T29010]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1394.810608][T29010]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[ 1394.810636][T29010]  ? __get_vm_area_node+0x101/0x330
[ 1394.810678][T29010]  __get_vm_area_node+0x1ca/0x330
[ 1394.810718][T29010]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1394.810755][T29010]  ? __vcalloc_noprof+0x4d/0x80
[ 1394.810794][T29010]  ? __vcalloc_noprof+0x4d/0x80
[ 1394.810835][T29010]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1394.810875][T29010]  ? lock_acquire+0x1b9/0x370
[ 1394.810926][T29010]  ? __vcalloc_noprof+0x4d/0x80
[ 1394.810952][T29010]  __vmalloc_node_noprof+0xad/0xf0
[ 1394.810986][T29010]  ? __vcalloc_noprof+0x4d/0x80
[ 1394.811016][T29010]  __vmalloc_noprof+0xa3/0x120
[ 1394.811050][T29010]  ? __pfx___vmalloc_noprof+0x10/0x10
[ 1394.811085][T29010]  ? __pfx___mutex_lock+0x10/0x10
[ 1394.811122][T29010]  __vcalloc_noprof+0x4d/0x80
[ 1394.811150][T29010]  kvm_arch_prepare_memory_region+0x35c/0x8d0
[ 1394.811194][T29010]  kvm_set_memslot+0x139/0x1740
[ 1394.811219][T29010]  ? kvm_set_memory_region+0xc43/0x15e0
[ 1394.811252][T29010]  kvm_set_memory_region+0xe78/0x15e0
[ 1394.811293][T29010]  kvm_vm_ioctl+0x1e00/0x4180
[ 1394.811328][T29010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.811367][T29010]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1394.811425][T29010]  ? kasan_quarantine_put+0x104/0x240
[ 1394.811451][T29010]  ? lockdep_hardirqs_on+0x78/0x100
[ 1394.811479][T29010]  ? find_held_lock+0x2b/0x80
[ 1394.811515][T29010]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1394.811549][T29010]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1394.811589][T29010]  ? tomoyo_path_number_perm+0x188/0x580
[ 1394.811625][T29010]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1394.811665][T29010]  ? __pfx_futex_wait+0x10/0x10
[ 1394.811697][T29010]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1394.811747][T29010]  ? __fget_files+0x215/0x3d0
[ 1394.811771][T29010]  ? hook_file_ioctl_common+0x140/0x440
[ 1394.811807][T29010]  ? selinux_file_ioctl+0x13b/0x290
[ 1394.811843][T29010]  ? selinux_file_ioctl+0xb6/0x290
[ 1394.811880][T29010]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1394.811918][T29010]  __x64_sys_ioctl+0x18e/0x210
[ 1394.811955][T29010]  do_syscall_64+0x115/0x870
[ 1394.811980][T29010]  ? clear_bhb_loop+0x40/0x90
[ 1394.812010][T29010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.812035][T29010] RIP: 0033:0x7f40d939db2b
[ 1394.812055][T29010] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1394.812079][T29010] RSP: 002b:00007f40da1d9450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1394.812103][T29010] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f40d939db2b
[ 1394.812120][T29010] RDX: 00007f40da1d9bd0 RSI: 000000004020ae46 RDI: 0000000000000004
[ 1394.812136][T29010] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000018
[ 1394.812150][T29010] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000
[ 1394.812165][T29010] R13: 00007f40da1d9bd0 R14: 0000200000007000 R15: 0000000000000007
[ 1394.812198][T29010]  </TASK>
[ 1394.902959][T29020] FAULT_INJECTION: forcing a failure.
[ 1394.902959][T29020] name fail_page_alloc, interval 25, probability 100, space 0, times 1
[ 1395.283419][T29020] CPU: 1 UID: 0 PID: 29020 Comm: syz.4.6621 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1395.283455][T29020] Tainted: [L]=SOFTLOCKUP
[ 1395.283468][T29020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1395.283482][T29020] Call Trace:
[ 1395.283490][T29020]  <TASK>
[ 1395.283499][T29020]  dump_stack_lvl+0x100/0x190
[ 1395.283530][T29020]  should_fail_ex.cold+0x5/0xa
[ 1395.283554][T29020]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1395.283589][T29020]  should_fail_alloc_page+0xeb/0x140
[ 1395.283619][T29020]  prepare_alloc_pages+0x1f0/0x5f0
[ 1395.283651][T29020]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1395.283679][T29020]  ? rcu_is_watching+0x12/0xc0
[ 1395.283712][T29020]  ? trace_mm_page_alloc+0x164/0x1c0
[ 1395.283743][T29020]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[ 1395.283769][T29020]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1395.283794][T29020]  ? stack_trace_save+0x8e/0xc0
[ 1395.283817][T29020]  ? __pfx_stack_trace_save+0x10/0x10
[ 1395.283838][T29020]  ? stack_depot_save_flags+0x27/0x9d0
[ 1395.283866][T29020]  ? is_bpf_text_address+0x94/0x1a0
[ 1395.283897][T29020]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1395.283926][T29020]  ? __kasan_slab_alloc+0x89/0x90
[ 1395.283954][T29020]  ? kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 1395.283981][T29020]  ? alloc_vmap_area+0x640/0x2bb0
[ 1395.284007][T29020]  ? __get_vm_area_node+0x1ca/0x330
[ 1395.284034][T29020]  ? __vmalloc_node_range_noprof+0x228/0x1630
[ 1395.284066][T29020]  ? __vmalloc_node_noprof+0xad/0xf0
[ 1395.284098][T29020]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1395.284130][T29020]  ? kvm_vm_ioctl+0x7d3/0x4180
[ 1395.284164][T29020]  ? __x64_sys_ioctl+0x18e/0x210
[ 1395.284197][T29020]  ? do_syscall_64+0x115/0x870
[ 1395.284224][T29020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.284260][T29020]  alloc_pages_bulk_noprof+0x5de/0x13c0
[ 1395.284294][T29020]  ? policy_nodemask+0xed/0x4f0
[ 1395.284330][T29020]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[ 1395.284375][T29020]  __kasan_populate_vmalloc+0xf0/0x210
[ 1395.284407][T29020]  alloc_vmap_area+0x95d/0x2bb0
[ 1395.284443][T29020]  ? kasan_save_track+0x14/0x30
[ 1395.284474][T29020]  ? __kasan_kmalloc+0xaa/0xb0
[ 1395.284499][T29020]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1395.284528][T29020]  ? kvm_find_cpuid_entry2+0x1c7/0x290
[ 1395.284555][T29020]  ? __get_vm_area_node+0x101/0x330
[ 1395.284590][T29020]  __get_vm_area_node+0x1ca/0x330
[ 1395.284628][T29020]  __vmalloc_node_range_noprof+0x228/0x1630
[ 1395.284667][T29020]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1395.284702][T29020]  ? kvm_vcpu_reset+0x6d3/0x1b00
[ 1395.284735][T29020]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1395.284768][T29020]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1395.284802][T29020]  ? vmx_update_fb_clear_dis+0xb1/0x1b0
[ 1395.284832][T29020]  ? vmx_vcpu_pi_put+0x20a/0x2c0
[ 1395.284868][T29020]  ? vmx_vcpu_put+0xbf/0x860
[ 1395.284893][T29020]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1395.284926][T29020]  ? kvm_find_user_return_msr+0xb5/0xf0
[ 1395.284957][T29020]  ? vmx_setup_uret_msrs+0x591/0x8b0
[ 1395.284992][T29020]  ? vmx_update_exception_bitmap+0x230/0x5c0
[ 1395.285016][T29020]  ? kvm_calc_cpu_role.isra.0+0x26c/0x330
[ 1395.285054][T29020]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1395.285083][T29020]  __vmalloc_node_noprof+0xad/0xf0
[ 1395.285116][T29020]  ? kvm_dirty_ring_alloc+0x25/0x1a0
[ 1395.285150][T29020]  kvm_dirty_ring_alloc+0x25/0x1a0
[ 1395.285184][T29020]  kvm_vm_ioctl+0x7d3/0x4180
[ 1395.285218][T29020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.285253][T29020]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1395.285311][T29020]  ? kasan_quarantine_put+0x104/0x240
[ 1395.285338][T29020]  ? lockdep_hardirqs_on+0x78/0x100
[ 1395.285367][T29020]  ? find_held_lock+0x2b/0x80
[ 1395.285404][T29020]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1395.285439][T29020]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1395.285483][T29020]  ? tomoyo_path_number_perm+0x188/0x580
[ 1395.285519][T29020]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1395.285553][T29020]  ? __pfx_futex_wait+0x10/0x10
[ 1395.285581][T29020]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1395.285624][T29020]  ? do_vfs_ioctl+0x226/0x13e0
[ 1395.285653][T29020]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1395.285679][T29020]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1395.285721][T29020]  ? __fget_files+0x215/0x3d0
[ 1395.285742][T29020]  ? hook_file_ioctl_common+0x140/0x440
[ 1395.285774][T29020]  ? selinux_file_ioctl+0x13b/0x290
[ 1395.285804][T29020]  ? selinux_file_ioctl+0xb6/0x290
[ 1395.285835][T29020]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1395.285866][T29020]  __x64_sys_ioctl+0x18e/0x210
[ 1395.285903][T29020]  do_syscall_64+0x115/0x870
[ 1395.285928][T29020]  ? clear_bhb_loop+0x40/0x90
[ 1395.285954][T29020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.285977][T29020] RIP: 0033:0x7f225b99de99
[ 1395.285996][T29020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1395.286018][T29020] RSP: 002b:00007f225c894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1395.286042][T29020] RAX: ffffffffffffffda RBX: 00007f225bc25fa0 RCX: 00007f225b99de99
[ 1395.286060][T29020] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[ 1395.286075][T29020] RBP: 00007f225ba33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1395.286090][T29020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1395.286103][T29020] R13: 00007f225bc26038 R14: 00007f225bc25fa0 R15: 00007ffd14fc92f8
[ 1395.286133][T29020]  </TASK>
[ 1395.882129][T29027] loop2: detected capacity change from 0 to 7
[ 1395.889914][T29027] Dev loop2: unable to read RDB block 7
[ 1395.895609][T29027]  loop2: unable to read partition table
[ 1395.901465][T29027] loop2: partition table beyond EOD, truncated
[ 1395.907684][T29027] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1396.251606][T29047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6625'.
[ 1396.982396][ T5612] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1397.144181][ T5612] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1397.177374][ T5612] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1397.197813][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.206514][ T5612] usb 2-1: Product: syz
[ 1397.210799][ T5612] usb 2-1: Manufacturer: syz
[ 1397.215731][ T5612] usb 2-1: SerialNumber: syz
[ 1397.509236][ T5612] usb 2-1: USB disconnect, device number 36
[ 1399.052381][ T5612] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1399.247190][ T5612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1399.305586][ T5612] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1399.321485][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.331761][ T5612] usb 1-1: Product: syz
[ 1399.336025][ T5612] usb 1-1: Manufacturer: syz
[ 1399.340655][ T5612] usb 1-1: SerialNumber: syz
[ 1399.590265][ T5612] usb 1-1: USB disconnect, device number 64
[ 1400.214901][T29172] fuse: Unknown parameter '0x0000000000000003'
[ 1400.766011][T29206] fuse: Unknown parameter '0x0000000000000003'
[ 1401.112356][T18466] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1401.284942][T18466] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1401.315742][T18466] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1401.332656][T18466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1401.344516][T18466] usb 4-1: Product: syz
[ 1401.348768][T18466] usb 4-1: Manufacturer: syz
[ 1401.362424][T18466] usb 4-1: SerialNumber: syz
[ 1401.689428][T29242] fuse: Unknown parameter '0x0000000000000003'
[ 1401.818789][T18466] usb 4-1: USB disconnect, device number 49
[ 1403.643239][T29273] fuse: Unknown parameter '0x0000000000000003'
[ 1405.306187][T29306] fuse: Unknown parameter '0x0000000000000003'
[ 1405.422827][T25637] udevd[25637]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1406.088031][T29339] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1406.260866][T29337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1407.477236][ T5625] Bluetooth: hci1: unexpected event for opcode 0x0c25
[ 1407.607812][T29361] nvme_fabrics: missing parameter 'transport=%s'
[ 1407.631822][T29361] nvme_fabrics: missing parameter 'nqn=%s'
[ 1407.804205][T17060] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1408.009946][T17060] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1408.053078][T17060] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1408.086726][T17060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.145750][T17060] usb 5-1: Product: syz
[ 1408.164058][T17060] usb 5-1: Manufacturer: syz
[ 1408.214946][T17060] usb 5-1: SerialNumber: syz
[ 1408.598785][T29383] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1408.872884][T17060] usb 5-1: USB disconnect, device number 46
[ 1409.082863][T29388] netlink: 'syz.3.6748': attribute type 3 has an invalid length.
[ 1409.899774][T29413] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1410.017817][T29406] random: crng reseeded on system resumption
[ 1410.376738][T29434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6764'.
[ 1410.752460][T19354] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1410.914860][T19354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1410.936713][T19354] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1410.959585][T19354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.982660][T19354] usb 2-1: Product: syz
[ 1410.992744][T19354] usb 2-1: Manufacturer: syz
[ 1411.008035][T19354] usb 2-1: SerialNumber: syz
[ 1411.257287][T19354] usb 2-1: USB disconnect, device number 37
[ 1411.807384][T29471] Bluetooth: hci0: unsupported parameter 255
[ 1411.807485][T29468] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1411.822373][T29471] Bluetooth: hci0: unsupported parameter 255
[ 1411.882452][T17060] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1412.036146][T17060] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1412.045833][T17060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.054512][T17060] usb 4-1: Product: syz
[ 1412.059090][T17060] usb 4-1: Manufacturer: syz
[ 1412.065117][T17060] usb 4-1: SerialNumber: syz
[ 1412.096135][T18466] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1412.532077][T19354] usb 4-1: USB disconnect, device number 50
[ 1412.942797][T29501] md: loop0 has zero or unknown size, marking faulty!
[ 1412.958950][T29501] md: md_import_device returned -22
[ 1413.122608][T18466] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1413.144612][T18466] ath9k_htc: Failed to initialize the device
[ 1413.163285][T19354] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1413.287439][T29507] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6790'.
[ 1414.596533][T29517] syzkaller0: entered promiscuous mode
[ 1414.615410][T29517] syzkaller0: entered allmulticast mode
[ 1415.503196][T11711] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1415.665733][T11711] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1415.675168][T11711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.692366][T11711] usb 2-1: Product: syz
[ 1415.696806][T11711] usb 2-1: Manufacturer: syz
[ 1415.701669][T11711] usb 2-1: SerialNumber: syz
[ 1415.767472][T19354] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1415.996468][T11711] usb 2-1: USB disconnect, device number 38
[ 1416.089093][T29548] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6804'.
[ 1416.366042][T29557] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[ 1416.899115][T19354] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1416.951545][T19354] ath9k_htc: Failed to initialize the device
[ 1417.002675][T11711] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1420.542364][T29568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'.
[ 1420.551986][T29568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1421.380468][T26057] udevd[26057]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1422.026361][T29616] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6825'.
[ 1422.627487][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.664812][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.686804][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.696544][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.710043][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.719628][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.738215][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.751475][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1422.761150][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6828'.
[ 1423.046347][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.054211][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.949219][T25632] udevd[25632]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1424.501798][T29665] xt_hashlimit: size too large, truncated to 1048576
[ 1425.404502][T29678] fuse: Unknown parameter 'use00000000000000000000'
[ 1425.492579][T15964] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1425.657246][T15964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1425.823947][T15964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1425.852058][T15964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.868830][T15964] usb 1-1: Product: syz
[ 1426.349119][T29690] xt_HMARK: spi-set and port-set can't be combined
[ 1426.357811][T15964] usb 1-1: Manufacturer: syz
[ 1426.382102][T15964] usb 1-1: SerialNumber: syz
[ 1426.430878][T29695] UDC core: g1: couldn't find an available UDC or it's busy
[ 1427.430419][T29692] __nla_validate_parse: 25 callbacks suppressed
[ 1427.430434][T29692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6849'.
[ 1427.520155][T29699] xt_HMARK: spi-set and port-set can't be combined
[ 1428.208209][T15964] usb 1-1: can't set config #1, error -71
[ 1428.228640][T15964] usb 1-1: USB disconnect, device number 65
[ 1430.493728][ T5625] Bluetooth: hci5: command 0x0406 tx timeout
[ 1430.814449][T24711] udevd[24711]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1432.210067][T29763] xt_HMARK: spi-set and port-set can't be combined
[ 1432.687127][T29771] sctp: [Deprecated]: syz.2.6875 (pid 29771) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1432.687127][T29771] Use struct sctp_sack_info instead
[ 1432.717261][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.739021][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.749236][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.760826][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.771871][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.784055][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.794121][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.805908][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.817406][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1432.828325][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1433.795200][T29789] xt_hashlimit: size too large, truncated to 1048576
[ 1434.335443][T29799] xt_HMARK: spi-set and port-set can't be combined
[ 1435.031895][T29811] xt_hashlimit: size too large, truncated to 1048576
[ 1436.480652][T29835] xt_hashlimit: size too large, truncated to 1048576
[ 1437.002890][T15964] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1437.166134][T15964] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1437.205117][T15964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1437.254967][T15964] usb 1-1: Product: syz
[ 1437.290025][T15964] usb 1-1: Manufacturer: syz
[ 1437.454244][T15964] usb 1-1: SerialNumber: syz
[ 1437.495688][T18466] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1437.541459][    C0] ==================================================================
[ 1437.549572][    C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[ 1437.557153][    C0] Read of size 1 at addr ffff8880359f2912 by task kworker/0:5/18466
[ 1437.565135][    C0] 
[ 1437.567461][    C0] CPU: 0 UID: 0 PID: 18466 Comm: kworker/0:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1437.567496][    C0] Tainted: [L]=SOFTLOCKUP
[ 1437.567505][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1437.567535][    C0] Workqueue: events request_firmware_work_func
[ 1437.567569][    C0] Call Trace:
[ 1437.567578][    C0]  <IRQ>
[ 1437.567588][    C0]  dump_stack_lvl+0x100/0x190
[ 1437.567617][    C0]  print_report+0x13d/0x4b0
[ 1437.567650][    C0]  ? __virt_addr_valid+0x239/0x430
[ 1437.567680][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 1437.567709][    C0]  kasan_report+0xdf/0x1c0
[ 1437.567740][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 1437.567772][    C0]  find_endpoint+0x2a3/0x2c0
[ 1437.567802][    C0]  dummy_timer+0x500/0x36f0
[ 1437.567837][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1437.567870][    C0]  ? find_held_lock+0x2b/0x80
[ 1437.567904][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1437.567934][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1437.567966][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1437.567989][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1437.568019][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1437.568051][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1437.568084][    C0]  ? mark_held_locks+0x40/0x70
[ 1437.568110][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1437.568133][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1437.568165][    C0]  __hrtimer_run_queues+0x462/0x9c0
[ 1437.568205][    C0]  hrtimer_run_softirq+0x17d/0x2c0
[ 1437.568240][    C0]  handle_softirqs+0x1ea/0x9b0
[ 1437.568275][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1437.568304][    C0]  ? _raw_spin_unlock+0x28/0x50
[ 1437.568337][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[ 1437.568360][    C0]  __irq_exit_rcu+0x162/0x210
[ 1437.568401][    C0]  irq_exit_rcu+0x9/0x30
[ 1437.568428][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1437.568455][    C0]  </IRQ>
[ 1437.568462][    C0]  <TASK>
[ 1437.568470][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1437.568498][    C0] RIP: 0010:__orc_find+0xae/0xf0
[ 1437.568520][    C0] Code: 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41 5c <41> 5d 41 5e 41 5f e9 87 f5 05 0a 48 83 c4 08 31 c0 5b 5d 41 5c 41
[ 1437.568544][    C0] RSP: 0018:ffffc900041ef628 EFLAGS: 00000292
[ 1437.568563][    C0] RAX: ffffffff92308310 RBX: 0000000000000001 RCX: dffffc0000000000
[ 1437.568579][    C0] RDX: 000000000000000f RSI: 0000000000000000 RDI: ffffffff91836d10
[ 1437.568594][    C0] RBP: ffffc900041ef700 R08: ffffffff92308340 R09: 0000000000000007
[ 1437.568609][    C0] R10: 0000000000000200 R11: 00000000000680ae R12: ffffc900041ef708
[ 1437.568625][    C0] R13: ffffffff8780ae85 R14: ffffffff91836d10 R15: 0000000000000005
[ 1437.568642][    C0]  ? usb_alloc_urb+0x65/0xa0
[ 1437.568684][    C0]  ? usb_alloc_urb+0x65/0xa0
[ 1437.568716][    C0]  unwind_next_frame+0x2ec/0x2090
[ 1437.568738][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1437.568773][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1437.568799][    C0]  arch_stack_walk+0x94/0xf0
[ 1437.568837][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1437.568873][    C0]  stack_trace_save+0x8e/0xc0
[ 1437.568895][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1437.568918][    C0]  ? stack_trace_save+0x8e/0xc0
[ 1437.568942][    C0]  ? stack_depot_save_flags+0x27/0x9d0
[ 1437.568976][    C0]  kasan_save_stack+0x30/0x50
[ 1437.569002][    C0]  ? kasan_save_stack+0x30/0x50
[ 1437.569028][    C0]  ? kasan_save_track+0x14/0x30
[ 1437.569053][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[ 1437.569078][    C0]  ? __kmalloc_noprof+0x322/0x820
[ 1437.569103][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1437.569155][    C0]  kasan_save_track+0x14/0x30
[ 1437.569181][    C0]  __kasan_kmalloc+0xaa/0xb0
[ 1437.569208][    C0]  __kmalloc_noprof+0x322/0x820
[ 1437.569233][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1437.569274][    C0]  usb_alloc_urb+0x66/0xa0
[ 1437.569307][    C0]  ath9k_hif_usb_alloc_urbs+0x5e4/0xfa0
[ 1437.569348][    C0]  ath9k_hif_usb_firmware_cb+0x146/0x530
[ 1437.569385][    C0]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[ 1437.569422][    C0]  request_firmware_work_func+0x13f/0x440
[ 1437.569450][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1437.569478][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1437.569514][    C0]  process_one_work+0xa23/0x1940
[ 1437.569545][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 1437.569575][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1437.569604][    C0]  worker_thread+0x5ef/0xe50
[ 1437.569632][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1437.569657][    C0]  ? kthread+0x13a/0x450
[ 1437.569678][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1437.569702][    C0]  kthread+0x370/0x450
[ 1437.569723][    C0]  ? __pfx_kthread+0x10/0x10
[ 1437.569745][    C0]  ret_from_fork+0x72b/0xd50
[ 1437.569778][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1437.569810][    C0]  ? __switch_to+0x800/0x10f0
[ 1437.569833][    C0]  ? __pfx_kthread+0x10/0x10
[ 1437.569855][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1437.569896][    C0]  </TASK>
[ 1437.569904][    C0] 
[ 1438.042807][    C0] Allocated by task 29727:
[ 1438.047219][    C0]  kasan_save_stack+0x30/0x50
[ 1438.051902][    C0]  kasan_save_track+0x14/0x30
[ 1438.056576][    C0]  __kasan_slab_alloc+0x89/0x90
[ 1438.061423][    C0]  kmem_cache_alloc_bulk_noprof+0x352/0x890
[ 1438.067319][    C0]  __io_alloc_req_refill+0x9e/0x330
[ 1438.072521][    C0]  io_submit_sqes.cold+0xf6/0x301
[ 1438.077547][    C0]  __do_sys_io_uring_enter+0xa88/0x1b10
[ 1438.083101][    C0]  do_syscall_64+0x115/0x870
[ 1438.087689][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1438.093577][    C0] 
[ 1438.095889][    C0] Freed by task 27397:
[ 1438.099941][    C0]  kasan_save_stack+0x30/0x50
[ 1438.104615][    C0]  kasan_save_track+0x14/0x30
[ 1438.109289][    C0]  kasan_save_free_info+0x3b/0x70
[ 1438.114325][    C0]  __kasan_slab_free+0x5f/0x80
[ 1438.119085][    C0]  slab_free_after_rcu_debug+0xdf/0x170
[ 1438.124633][    C0]  rcu_core+0x5a2/0x10d0
[ 1438.128877][    C0]  handle_softirqs+0x1ea/0x9b0
[ 1438.133638][    C0]  do_softirq+0xac/0xe0
[ 1438.137790][    C0]  __local_bh_enable_ip+0xf8/0x120
[ 1438.142900][    C0]  __alloc_skb+0x5db/0x710
[ 1438.147323][    C0]  alloc_uevent_skb+0x7d/0x210
[ 1438.152087][    C0]  kobject_uevent_env+0xd2d/0x18b0
[ 1438.157202][    C0]  device_del+0x605/0x9b0
[ 1438.161525][    C0]  device_unregister+0x1d/0xe0
[ 1438.166281][    C0]  hci_conn_del_sysfs+0xb9/0x1a0
[ 1438.171228][    C0]  hci_conn_del+0x506/0x1180
[ 1438.175815][    C0]  hci_abort_conn_sync+0x7d9/0xb20
[ 1438.180927][    C0]  abort_conn_sync+0x142/0x350
[ 1438.185685][    C0]  hci_cmd_sync_work+0x1c0/0x470
[ 1438.190631][    C0]  process_one_work+0xa23/0x1940
[ 1438.195565][    C0]  worker_thread+0x5ef/0xe50
[ 1438.200154][    C0]  kthread+0x370/0x450
[ 1438.204216][    C0]  ret_from_fork+0x72b/0xd50
[ 1438.208809][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1438.213576][    C0] 
[ 1438.215901][    C0] Last potentially related work creation:
[ 1438.221599][    C0]  kasan_save_stack+0x30/0x50
[ 1438.226279][    C0]  kasan_record_aux_stack+0xa7/0xc0
[ 1438.231489][    C0]  kmem_cache_free+0x427/0x6b0
[ 1438.236256][    C0]  __io_req_caches_free+0x1a6/0x220
[ 1438.241460][    C0]  io_ring_exit_work+0x42a/0xd7a
[ 1438.246403][    C0]  process_one_work+0xa23/0x1940
[ 1438.251376][    C0]  worker_thread+0x5ef/0xe50
[ 1438.255965][    C0]  kthread+0x370/0x450
[ 1438.260023][    C0]  ret_from_fork+0x72b/0xd50
[ 1438.264614][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1438.269379][    C0] 
[ 1438.271687][    C0] The buggy address belongs to the object at ffff8880359f28c0
[ 1438.271687][    C0]  which belongs to the cache io_kiocb of size 248
[ 1438.285473][    C0] The buggy address is located 82 bytes inside of
[ 1438.285473][    C0]  freed 248-byte region [ffff8880359f28c0, ffff8880359f29b8)
[ 1438.299182][    C0] 
[ 1438.301497][    C0] The buggy address belongs to the physical page:
[ 1438.307892][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x359f2
[ 1438.316650][    C0] memcg:ffff8880359f2f01
[ 1438.320873][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1438.327982][    C0] page_type: f5(slab)
[ 1438.331958][    C0] raw: 00fff00000000000 ffff888142ef6c80 dead000000000100 dead000000000122
[ 1438.340548][    C0] raw: 0000000000000000 00000008000c000c 00000000f5000000 ffff8880359f2f01
[ 1438.349126][    C0] page dumped because: kasan: bad access detected
[ 1438.355547][    C0] page_owner tracks the page as allocated
[ 1438.361250][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 29727, tgid 29719 (syz.0.6860), ts 1428916787567, free_ts 1428553365645
[ 1438.380882][    C0]  post_alloc_hook+0xfd/0x120
[ 1438.385570][    C0]  get_page_from_freelist+0xf48/0x3530
[ 1438.391026][    C0]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 1438.396915][    C0]  new_slab+0xa2/0x640
[ 1438.400974][    C0]  refill_objects+0xe3/0x410
[ 1438.405552][    C0]  __kmem_cache_alloc_bulk+0x3c/0x120
[ 1438.410920][    C0]  kmem_cache_alloc_bulk_noprof+0x48b/0x890
[ 1438.416812][    C0]  __io_alloc_req_refill+0x9e/0x330
[ 1438.422015][    C0]  io_submit_sqes.cold+0xf6/0x301
[ 1438.427042][    C0]  __do_sys_io_uring_enter+0xa88/0x1b10
[ 1438.432594][    C0]  do_syscall_64+0x115/0x870
[ 1438.437184][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1438.443122][    C0] page last free pid 29721 tgid 29719 stack trace:
[ 1438.449623][    C0]  __free_frozen_pages+0x79f/0x1090
[ 1438.454847][    C0]  tlb_remove_table_rcu+0x2cf/0x380
[ 1438.460062][    C0]  rcu_core+0x5a2/0x10d0
[ 1438.464305][    C0]  handle_softirqs+0x1ea/0x9b0
[ 1438.469075][    C0]  __irq_exit_rcu+0x162/0x210
[ 1438.473754][    C0]  irq_exit_rcu+0x9/0x30
[ 1438.477998][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1438.483627][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1438.489609][    C0] 
[ 1438.491919][    C0] Memory state around the buggy address:
[ 1438.497536][    C0]  ffff8880359f2800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[ 1438.505596][    C0]  ffff8880359f2880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1438.513649][    C0] >ffff8880359f2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1438.521699][    C0]                          ^
[ 1438.526280][    C0]  ffff8880359f2980: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc
[ 1438.534335][    C0]  ffff8880359f2a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1438.542383][    C0] ==================================================================
[ 1438.550452][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1438.557655][    C0] CPU: 0 UID: 0 PID: 18466 Comm: kworker/0:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1438.568678][    C0] Tainted: [L]=SOFTLOCKUP
[ 1438.572986][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1438.583033][    C0] Workqueue: events request_firmware_work_func
[ 1438.589196][    C0] Call Trace:
[ 1438.592465][    C0]  <IRQ>
[ 1438.595302][    C0]  dump_stack_lvl+0x100/0x190
[ 1438.599979][    C0]  vpanic+0x552/0x970
[ 1438.603955][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1438.608455][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[ 1438.613532][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 1438.618301][    C0]  panic+0xd1/0xe0
[ 1438.622017][    C0]  ? __pfx_panic+0x10/0x10
[ 1438.626430][    C0]  ? end_report.part.0+0x23/0x90
[ 1438.631371][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1438.636143][    C0]  ? end_report.part.0+0x23/0x90
[ 1438.641083][    C0]  ? check_panic_on_warn+0x1f/0x90
[ 1438.646191][    C0]  check_panic_on_warn.cold+0x19/0x34
[ 1438.651564][    C0]  end_report.part.0+0x3a/0x90
[ 1438.656337][    C0]  kasan_report.cold+0xe/0x18
[ 1438.661023][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 1438.665789][    C0]  find_endpoint+0x2a3/0x2c0
[ 1438.670381][    C0]  dummy_timer+0x500/0x36f0
[ 1438.674890][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1438.679920][    C0]  ? find_held_lock+0x2b/0x80
[ 1438.684600][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1438.690237][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1438.695881][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1438.701682][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1438.707317][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1438.713306][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1438.718250][    C0]  ? mark_held_locks+0x40/0x70
[ 1438.723019][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1438.728824][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1438.733769][    C0]  __hrtimer_run_queues+0x462/0x9c0
[ 1438.738981][    C0]  hrtimer_run_softirq+0x17d/0x2c0
[ 1438.744103][    C0]  handle_softirqs+0x1ea/0x9b0
[ 1438.748873][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1438.754160][    C0]  ? _raw_spin_unlock+0x28/0x50
[ 1438.759110][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[ 1438.764930][    C0]  __irq_exit_rcu+0x162/0x210
[ 1438.769634][    C0]  irq_exit_rcu+0x9/0x30
[ 1438.773879][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1438.779511][    C0]  </IRQ>
[ 1438.782428][    C0]  <TASK>
[ 1438.785347][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1438.791324][    C0] RIP: 0010:__orc_find+0xae/0xf0
[ 1438.796256][    C0] Code: 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41 5c <41> 5d 41 5e 41 5f e9 87 f5 05 0a 48 83 c4 08 31 c0 5b 5d 41 5c 41
[ 1438.815880][    C0] RSP: 0018:ffffc900041ef628 EFLAGS: 00000292
[ 1438.821944][    C0] RAX: ffffffff92308310 RBX: 0000000000000001 RCX: dffffc0000000000
[ 1438.829907][    C0] RDX: 000000000000000f RSI: 0000000000000000 RDI: ffffffff91836d10
[ 1438.837873][    C0] RBP: ffffc900041ef700 R08: ffffffff92308340 R09: 0000000000000007
[ 1438.845847][    C0] R10: 0000000000000200 R11: 00000000000680ae R12: ffffc900041ef708
[ 1438.853813][    C0] R13: ffffffff8780ae85 R14: ffffffff91836d10 R15: 0000000000000005
[ 1438.861780][    C0]  ? usb_alloc_urb+0x65/0xa0
[ 1438.866390][    C0]  ? usb_alloc_urb+0x65/0xa0
[ 1438.870989][    C0]  unwind_next_frame+0x2ec/0x2090
[ 1438.876005][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1438.880596][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1438.886749][    C0]  arch_stack_walk+0x94/0xf0
[ 1438.891348][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1438.895946][    C0]  stack_trace_save+0x8e/0xc0
[ 1438.900619][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1438.905983][    C0]  ? stack_trace_save+0x8e/0xc0
[ 1438.910830][    C0]  ? stack_depot_save_flags+0x27/0x9d0
[ 1438.916298][    C0]  kasan_save_stack+0x30/0x50
[ 1438.920972][    C0]  ? kasan_save_stack+0x30/0x50
[ 1438.925815][    C0]  ? kasan_save_track+0x14/0x30
[ 1438.930662][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[ 1438.935421][    C0]  ? __kmalloc_noprof+0x322/0x820
[ 1438.940440][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1438.945052][    C0]  kasan_save_track+0x14/0x30
[ 1438.949724][    C0]  __kasan_kmalloc+0xaa/0xb0
[ 1438.954311][    C0]  __kmalloc_noprof+0x322/0x820
[ 1438.959157][    C0]  ? usb_alloc_urb+0x66/0xa0
[ 1438.963751][    C0]  usb_alloc_urb+0x66/0xa0
[ 1438.968188][    C0]  ath9k_hif_usb_alloc_urbs+0x5e4/0xfa0
[ 1438.973760][    C0]  ath9k_hif_usb_firmware_cb+0x146/0x530
[ 1438.979404][    C0]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[ 1438.985563][    C0]  request_firmware_work_func+0x13f/0x440
[ 1438.991278][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1438.997515][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1439.002286][    C0]  process_one_work+0xa23/0x1940
[ 1439.007224][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 1439.012594][    C0]  ? __pfx_request_firmware_work_func+0x10/0x10
[ 1439.018838][    C0]  worker_thread+0x5ef/0xe50
[ 1439.023424][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1439.028529][    C0]  ? kthread+0x13a/0x450
[ 1439.032762][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1439.037869][    C0]  kthread+0x370/0x450
[ 1439.041932][    C0]  ? __pfx_kthread+0x10/0x10
[ 1439.046515][    C0]  ret_from_fork+0x72b/0xd50
[ 1439.051111][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1439.056226][    C0]  ? __switch_to+0x800/0x10f0
[ 1439.060899][    C0]  ? __pfx_kthread+0x10/0x10
[ 1439.065500][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1439.070281][    C0]  </TASK>
[ 1439.073551][    C0] Kernel Offset: disabled
[ 1439.077860][    C0] Rebooting in 86400 seconds..