last executing test programs:

2m34.327729546s ago: executing program 2 (id=3):
r0 = fanotify_init(0x8, 0x8000)
write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x40) (fail_nth: 2)

2m34.160797417s ago: executing program 2 (id=5):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f363b68090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa30d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63eb939e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783ea87b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async)
r3 = epoll_create1(0x80000)
r4 = fcntl$dupfd(r0, 0x0, r3)
file_getattr(r4, 0x0, &(0x7f0000000100), 0x18, 0x1000) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xc, <r5=>0x0, 0x3636e5cd56d0e1e8})
ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000040)={r5, 0xfffffffffffffffd}) (async)
syz_usb_connect$midi(0x5, 0x68, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0xf, 0x50, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x7, 0x3, 0x400, 0x7, 0x1, 0x5, {0x5, 0x25, 0x1, 0x1, "1c"}}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x11, 0x4, 0x2a, {0x5, 0x25, 0x1, 0x1, '|'}}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x5, 0xd, 0x4, {0x5, 0x25, 0x1, 0x1, '$'}}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3, 0x0, 0xf1, {0x4}}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x7f, 0x4, {0x4}}}]}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})

2m32.545126017s ago: executing program 2 (id=7):
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0xc008aec1, &(0x7f00000000c0)=0xa)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r6, &(0x7f0000000100)=[{{&(0x7f0000000480)=@phonet={0x23, 0x64, 0x1, 0x6}, 0x80, 0x0}}], 0x400000000000183, 0x44841)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s'], 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a00000099"], 0x184}}, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d8"], 0x0, 0x0, 0x0})
getdents64(r5, 0x0, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x11)
ioctl$TIOCSSOFTCAR(r9, 0x8910, &(0x7f0000000080)=0x59b)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x9, 0x5, &(0x7f0000000040)={0xfd, "fd5a44512b7e1b0020ed2abb4321002700"}})

2m32.080510709s ago: executing program 2 (id=8):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0)
r2 = mmap$binder(&(0x7f000011b000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xdc, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0x3c}, @fda={0x66646185, 0x4, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/36, 0x24, 0x1, 0x2a}}, &(0x7f0000000140)={0x0, 0x20, 0x40}}}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x6, 0x1, 0x1a}, @fda={0x66646185, 0x6, 0x1, 0x33}, @flat=@weak_binder={0x77622a85, 0x100b}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}, 0x1000}, @free_buffer, @release={0x40046306, 0x1}, @increfs_done, @free_buffer={0x40086303, r2}, @clear_death={0x400c630f, 0x3}], 0x7a, 0x0, &(0x7f00000004c0)="5b195be90b07baf99eaa2b9ee40839e62e4e568b10d97d6fa7b7e43b9030d06bcc000ae0561d920521583f7087cc253a60d6b6f5c2d9de343d01cc69c17a5062362a21a33294da740589372577119e9e952df417fbcd1ded8e973ff347fde5cf1d5e04f923c1d003bba5c9a83aac7d4c331ec4b5aebf55b02fb9"})
read(r0, &(0x7f0000000300)=""/172, 0xdc)
r3 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r3)
sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r5, 0x280, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdb0}}]}, 0x8c}}, 0x20000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000e97000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000})

2m16.909509801s ago: executing program 32 (id=8):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0)
r2 = mmap$binder(&(0x7f000011b000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xdc, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0x3c}, @fda={0x66646185, 0x4, 0x0, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/36, 0x24, 0x1, 0x2a}}, &(0x7f0000000140)={0x0, 0x20, 0x40}}}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x6, 0x1, 0x1a}, @fda={0x66646185, 0x6, 0x1, 0x33}, @flat=@weak_binder={0x77622a85, 0x100b}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}, 0x1000}, @free_buffer, @release={0x40046306, 0x1}, @increfs_done, @free_buffer={0x40086303, r2}, @clear_death={0x400c630f, 0x3}], 0x7a, 0x0, &(0x7f00000004c0)="5b195be90b07baf99eaa2b9ee40839e62e4e568b10d97d6fa7b7e43b9030d06bcc000ae0561d920521583f7087cc253a60d6b6f5c2d9de343d01cc69c17a5062362a21a33294da740589372577119e9e952df417fbcd1ded8e973ff347fde5cf1d5e04f923c1d003bba5c9a83aac7d4c331ec4b5aebf55b02fb9"})
read(r0, &(0x7f0000000300)=""/172, 0xdc)
r3 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r3)
sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r5, 0x280, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdb0}}]}, 0x8c}}, 0x20000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000e97000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000})

6.089366385s ago: executing program 4 (id=805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSETELEM={0xd30, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xd1c, 0x3, 0x0, 0x1, [{0x430, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa5}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "9b57f33d4cb0ff9cee4e57454d776b7b526f28a21fc4f59cc9b1d232bd12d8e3473703f4fa0ad11f5886e9b85b36e326f7a55c1187015a050e9480048c202a985814ce161fdedbc434af49a45250325dafcbe1cf64881ac7ff17bc7b614942f1c5ee6a59150783c5453af4ccbf9b703e06d2b46db5ff5db54c28f8f207ddd3348ea04ae60a39f77beb97c43d3e41c0021a2d679f4842127f54037a4f2ab3a13222453c3643a0e33a409636ae42a32e89f0a7cde3e97f31da96"}]}, @NFTA_SET_ELEM_KEY={0x254, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "33f7e728bd69e8180c2e53431c8d2596762cf3dfa1c08019a827e11718dd9d852d119e5d820ce80ecc4f457ad45cfef9823b488ff3651c98a78ad14b98ed6ac8fbf96824c0468ea4860750dea196529d6415824410877b5e9ba5510de202f74b29417e91a76c5d390daea28896d48253757b7baf8d28f813674d4cc7fd2daaf86025bb2383809902b6a3ac0d0982bcfc552f84de525b1ec2919515dba9038099ac032c29091bc3bbc5cfebee47aefdfad91f7a491ea147084eac15fc8aba"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xec, 0x1, "2812113b6f53e7c11aeb2cabd1ae1160ca49c46abec807f79049d265c8e47149f3491eb14334120409986081939677d4eafc2667b161a0770668a36feda7ae44f83547ea3a2c09b6cf9fbd45ee4e420ca1ad8a6b4fad2309b7557d2172157afeaba35e7b887b79b78361ddabf183a8d7c1331d174d7b4cb9a33a316f37bcd0fa2da943ec65ed3f7a97fd8ffe9dea88407f1966b05d4764fdbf09ac55cb732ca9a16c3afc11684ad2a5a05ea2a0f6dbdc4d81cd9eb232264aa3f705ab3fd3d0075aa23e31d20ca2e6cca0418f6b6d78c1b3b23e24a87ffb8d0313331db0e4d3f614fbb139d78735d5"}, @NFTA_DATA_VALUE={0x44, 0x1, "ab37e1b4637d354f40b22a28adcc2627a09f713d61129e9ffa0ead1784bcc7d52fa3da2fefe56ffef332a825252327bd45d69d088b856cd8f56e96d98ce4e41c"}]}, @NFTA_SET_ELEM_USERDATA={0xc, 0x6, 0x1, 0x0, "3b4d3844bcd32dae"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x3c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "6dacb72a24aedcddaf6c3a499f2e81700013d5fb1854ca3f93a159173cb0727b08739091e58e83629122d74ab2257579fe2b22ec92d4331537fedbaa4292f6f8235d3016e40520b68efeddb69a241f2f99"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x294, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "1ac2ef8bf9d0394cdf2cc6fdb2efed11c36956ea31b101b88a5942b8fb0240f1b8a591c714818ab66fc8415ac05f5b6ff3a6844f6c7cfe3dac0448281644c9e7a7bfe9760f2859134ee27ce3a0088355c1d43f17cc2eebe888ea11d547d32cee37a48363f06024cf131267cd795f833a05d46187112b378df584ae1baa6779ab74258c397d49e26af3b90271dcf56c77b2597948dfc2b63be9a1ad68527f0c8274e9189aa6b763cb9371944a55715cc94436050e74a6a563af9d3206127f487a8e0cf534c33299deb3"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x8b, 0x1, "46a51a0ff3fb15a64b3b609be79e15778347f06e05b2f095039fc4beb6d0584886d55f185afda573e65354e38c6241664ec1185114734be1a7b1104d49e6e16649ea28cfb51e6f7eac959aa172ff39a99f29b3d450041f316c80883b64baa8330b55f7b066e57871eb8bbcfeef527a8e23d73e298ea05de92b98988046493f7402c4fa0b82e67b"}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5414f975}]}}}, @NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x514, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "cc58805982e6b46b1830519dd66c0556921ff460a54d6a10b9d65f66eea85ab0aa6d1a0c2fe9e1a35ad8dad0a8f15ed94f24fad5772f43fbbec4545ec46157a46cf8b57bbbabaa812828ecf9ffce443c7351fd5c76d6c00d02668616ab154b66d425da274025e1e87068ec2c59fb4d608061d2010986c4e173"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x264}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x103, 0x1, "3991306e8e1a490b06e71dac8ffd3a0fae70d13f1a14f8ca961fea980ae6c1743366c0f6c9315a102a748dfd24d62e710e3844a4da81fdd3369c5575176833ac0c307fb8ab45ba69b6d00598e455616ae7e87218c56db9ca30c32144e6cc272759e5fd53faeb4e8a32187a3ce19d3a03777cc829d04e771ec8387a213f0762ef89c4cc9e8daf1a1fa09a61c22c0f8f4024e34138c9fa26fad8f435b379f2a3a56d1c125a9ed9a819a57cbd2ac18b3f326c7022dbbfffcc163305871a8cf752abbbc507beea582da2c6434066e8541b6bf7ae52f99a32f579eb261d46c662c0dfc7151de56689fa5ada83dbf378e97f742f581f4c53070be8a5c570b272e52d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "449154bcb75a6add421c4018f9c2820ea67ae1b08fb592ff08552644572b4a3201f0c4ded94fe37bc3c0c52a1ba8c1e3cb54de1325aa17acf8756e01e264e861315771b0768410466833e5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5e}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}]}]}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004814)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc884}, 0x20000080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$inet_sctp(0x2, 0x5, 0x84)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
socket$netlink(0x10, 0x3, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r5], 0x7)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x6, 0x6, "277f15c3a9a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0})

5.953698082s ago: executing program 1 (id=806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000a28000000000a0101000000005e1affd503030000090001001f1acd8add7f8b4ad2539d6862d2e873797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r0)

5.890001394s ago: executing program 1 (id=807):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@assoc={0x18, 0x117, 0x4, 0x64d3c56c}, @iv={0xc0, 0x117, 0x2, 0xa5, "84baf5aa529a4e20122e68b8a54d084eb0ecb6f48aa04f929c6b2628961518a0397a18ffea227147b1c65807dac99f5bc0518bcdf8ace2aabe97d814dc53acc9c51b6dfb329ab9740a9e867c0dd7f2cb3cfb8f724527b68349a2c955f0a8d83734761f233a57425a1af3eb7417f269e3a2cac686a9ee081af7d645d52e5e4250ab79d2ee620daaa2dd4cfe11519ef15400fcfe302e81c977975adb8b077dc98a83d5b0bafd"}, @iv={0x58, 0x117, 0x2, 0x3e, "d5509745b590a86e39642847c0c42d6ff3a8f0c601d92fb54e852f1670dfd85d694afe50f0e449419461a3ec6de5fe5c80f61007f5c67cfd0612c3f8e827"}, @op={0x18, 0x117, 0x3, 0x1}], 0x148, 0x40c0}], 0x1, 0x48804)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"])

4.120692752s ago: executing program 4 (id=812):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x2, @empty}}, 0x4, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c)
sendto$inet6(r0, &(0x7f0000000000)="e8", 0x1, 0x65055, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c)

4.041242692s ago: executing program 4 (id=813):
socket$inet6_tcp(0xa, 0x1, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0xffffffffffffffff}], 0x1, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb000000000020", 0xd9}], 0x1}, 0x4000)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x1114, 0x2719, 0x0, &(0x7f0000000000)=0xfffffffffffffdbd)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xea040)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, <r6=>0x0], 0x2})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r8, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x48}}, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000280), 0x40000000000000a7, r6})
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c840081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0})
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="ab5e097de10002d994f4fa7c12f74fb57ee6c725f34f327e0c429261ba184fa1dc3361d58d4de9caa376bf81d04e353d83fe167d57062c62c9b86845c9118638b40cda0d17f0c2abe07bf4ce04a978bd2fd09779", 0x54}, {&(0x7f0000000480)="5fd641811fa3c58cf4e1d33197f4101e0193987d63df2e354cbb32687e0de843edf8f06a340dd05901bb4af8ca810605598a85a26cefe8c51feca305827286f26b3efd34c703c2780b37baf650395dc40b877a44304a4985138a3a5cb12701c7ec91caa200e6e009857ab56627f44b17927e3be906559357cab56e4bcf0479eab4e9a4dafa7ce5e9951af8d0d132883a76a2159d8186aeb264", 0x99}, {&(0x7f00000001c0)="745398f92721ef52d00e532cd8a1", 0xe}, {&(0x7f0000000300)="0adc87a2842e7d6a56fc947dd2c3c7abd4e476f196ec63831ba5e555c21ba4996a1ed49cee199d9b9d2399b572f528f21c137493841e90ab51c550d9c6754bab3fcf9bcaff57e3b9c75d80", 0x4b}], 0x4}}], 0x1, 0x20040840)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)

3.705783507s ago: executing program 4 (id=814):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4212, r0, 0x200, &(0x7f00000001c0)={&(0x7f00000000c0)=""/102, 0x66})
socket$nl_netfilter(0x10, 0x3, 0xc)

3.691363217s ago: executing program 4 (id=815):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'syz_tun\x00'}}, 0x1e)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0)
preadv(r1, &(0x7f000001fb80)=[{&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000001dc0), 0x40000a6, 0x48850)
syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x3, [], [{{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x0, 0x35, {0x4}}}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

3.417926107s ago: executing program 3 (id=818):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000140)="6d66b86d008ee80f080fc730b8010000000f01d9c4c1797f23b91e0900000f32b8010000000f01d90f06f30fc7b110300000", 0x32}], 0x1, 0x4b, &(0x7f00000001c0), 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x4})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2a000200010078", 0x7)

3.274860856s ago: executing program 3 (id=819):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2d8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x8, 0x0, "70e0e7044a13eb8b94ee344913ac289ce6b38181be66679c5877bf8e59d69d60"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x1b0, 0x0, 0x3, [{{0x3, 0x2, 0x6, 0x5, 0x7, 0x6ac, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0xfffffffffffff134, 0x9, 0x7, 0x7, 0x1000, 0x8, r3, r4, 0x5, 0xffffffff}}, {0x0, 0x3, 0x103, 0x7, '&{&%\xb2\xd9w\xedO=\x96e\xf9\xabZ\xb20\x83\x1f\xdd\xe9\x190\xa7B\x00\x17U\xdf\x0e\x97\xc1=\x94\xf2]r\xfes\x147\xfcf,\x8c\x04&\x97\xa2\x0e\x90b\xfa\xdf\x93bV\x8b\xc7\x87\xeb\xdcf\x19\xac\x14\xc8\xd89\x88\xae[\x9a\xb2\x87H\x81\xf0t\xc0$\\\x05jJ\xe4\xc7\x8dw\xfc|\n\x0e\xd4\x80\xb1\xfe\x16\t\xc8\xe8\xd6\xec\"P\xab\xd6\xa5\xe2\x1e-\xad\r\xc6\xf6!\xd5\xb7x)\xa9y\xa41\xea\x9c\xda\xc9f\xb0dy\x8b\xff\xe7\x90]=\t\x91O\xb4kZ\xf6\x8d\xdd1\xb2G\xe7\xc0k\xb9 \x03\xd2\xe5\xcd\xac\x9f\\\x04@gbK\x9f\xf0\x13\x8b\x00{\x97\v\x11\xa4\x06\xa5Y\xe7\xf2\xe2U\xf1\xef4\xed\xf3n8\xf9\x83JVb[\xbf7\xc4eM:/\xde\x91T\xe5?<\xd9\xc9\xf4\xcai.\x01G\xa3d`?\x85\xdaC\x106\xb0\xfc\xcbv\xae\xd7\xd8\xc1|\xd3\x7fo\x9c\xa4~]\xf6\xd6\xf6\xfdT\x1c\v\x02\xf3\x96\x1f\xbc\xb6\xf2k\xec'}}]}, 0x0, 0x0, 0x0})
getdents64(r5, 0x0, 0x0)

3.032437659s ago: executing program 3 (id=820):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed3", 0xc}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cece3aeed4bf8daf0394e72f5775c4916db", 0xc0}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b947238", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x10e}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3a", 0x8f}], 0x4}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x80a2, 0x3}, 0x18, 0x3)
landlock_restrict_self(r3, 0x9)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, 0x8)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.901332654s ago: executing program 0 (id=821):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r1, 0x209, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004084) (fail_nth: 5)

2.80924149s ago: executing program 1 (id=822):
r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101800, 0x187)
getdents64(r2, &(0x7f0000000740)=""/4110, 0x100e)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace', 0x11f880, 0x190)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x400, 0x1}}, './file0\x00'})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9d"], 0x4c}}, 0x4000015)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x21, r9, 0x80000001, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000100)={@remote, @multicast1, 0x1}, 0x10)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000180)=0x60000)

2.557892906s ago: executing program 0 (id=823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000))
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r1, 0x209, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004084)

2.3311518s ago: executing program 4 (id=824):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8010)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x3}, 0x10)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1301"], 0x16)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04080401c90001f6309753a7221c88c0a0f3d5212fa0290eb49eeebf0474759ef8c8753b6df0e866dda6b3341845f5058d7c5453d90ccf0c854a21d4292f734f8558dec5049e"], 0x7)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0)
sync()
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="20096300050700000045cf638d18ced9310aca1cd46501004ef78cebd83476f95c24ca5ac6f2a67c83c31d036ffa8abfec5d3fd2723005ae19ebec1a2e8045bcbd371d72be7580579e7de96c92d8765600bc76bffa78ad30bcd9603c479881a7907249517000000000"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5b}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000800)={0x20, 0x1, 0x31, "28c7678562662a5062821f2beb294a7212c94cd749cd6d20c93e66983045d5e7646dc1af82b9b40725dfdcce95eca7aadf"}, 0x0})
syz_emit_vhci(0x0, 0x9)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x7, 0x3}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff8, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x7ffffffd, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x106, 0x4, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x0, 0xa, 0x202, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0xfffffffd, 0x40, 0x2, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x1, 0x6, 0x8, 0x0, 0xffffffff, 0x1, 0x6, 0x9, 0x1000ac, 0x2, 0x54, 0x6], [0x40006, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x100069d, 0x8, 0xffff, 0x0, 0x0, 0xb, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0xa, 0xdd31, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0x9, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0xfffffff8, 0x3, 0x10], [0x2000, 0x892, 0x37, 0x246d, 0x6, 0x101, 0xfffff412, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0xd, 0x3000000, 0x7, 0x4000006, 0x7, 0x1, 0xa38, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0x701a7e2b]}, 0x45c)

2.245478994s ago: executing program 1 (id=825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0x6, 0x8, 0x7f, 0x7}})
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000240)={0x2, 0x3})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

2.177619248s ago: executing program 0 (id=826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x400, 0x1, 0x6, 0x0, 0x8e3], 0xffff1001, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xfffffffb)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8000000000000001, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x7, 0x8, 0x803, 0x0, 0x978b], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0xa}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xffff1000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeef0000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0xc, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5)

2.019129728s ago: executing program 3 (id=827):
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000200), 0xd73d, 0x141002)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r1, @ANYRESHEX=r1], 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x47b2b2d24b56ff48}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000081)

1.640817028s ago: executing program 3 (id=828):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x4000}, 0x0)

1.165556241s ago: executing program 1 (id=829):
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x5, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x58000, 0x240046})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
ftruncate(r3, 0xf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.165293257s ago: executing program 3 (id=830):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@assoc={0x18, 0x117, 0x4, 0x64d3c56c}, @iv={0xc0, 0x117, 0x2, 0xa5, "84baf5aa529a4e20122e68b8a54d084eb0ecb6f48aa04f929c6b2628961518a0397a18ffea227147b1c65807dac99f5bc0518bcdf8ace2aabe97d814dc53acc9c51b6dfb329ab9740a9e867c0dd7f2cb3cfb8f724527b68349a2c955f0a8d83734761f233a57425a1af3eb7417f269e3a2cac686a9ee081af7d645d52e5e4250ab79d2ee620daaa2dd4cfe11519ef15400fcfe302e81c977975adb8b077dc98a83d5b0bafd"}, @iv={0x58, 0x117, 0x2, 0x3e, "d5509745b590a86e39642847c0c42d6ff3a8f0c601d92fb54e852f1670dfd85d694afe50f0e449419461a3ec6de5fe5c80f61007f5c67cfd0612c3f8e827"}, @op={0x18, 0x117, 0x3, 0x1}], 0x148, 0x40c0}], 0x1, 0x48804)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"])

495.306529ms ago: executing program 0 (id=831):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b6, 0x0, 0x40000000800000}]})
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="1401000036000100000000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0)

263.643787ms ago: executing program 1 (id=832):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b00000000000002000000001800000000000000290000003900000000000000000000003800"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e376e", 0x6a}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="28001f4f", @ANYRES16=r7, @ANYBLOB="00002cbd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}}, 0x4802)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r8 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
timerfd_create(0x0, 0x0)
close(0x3)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat(r10, &(0x7f0000000940)='./file0\x00', 0x0, 0x19)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)

173.669928ms ago: executing program 0 (id=833):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="1401000036000100000000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) (fail_nth: 5)

0s ago: executing program 0 (id=834):
r0 = socket$alg(0x26, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64)
sendmsg$nfc_llcp(r1, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x20000844) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x7, 0x9, 0x19, 0x6, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x5, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x7, 0x5, 0x4, 0x8, 0x9, 0xfc, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x3ff, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0xb, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x4, 0x10001, 0x8, 0x3ff, 0x1, 0x4, 0x8f, 0x1, 0x5, 0x1ff, 0x1fd, 0x6f8, 0x7, 0xd, 0x7, 0x4788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x40000005, 0x101, 0x800, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0xffffffff, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe87, 0x1, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0xc7b8, 0x45a6c325, 0x8, 0x10000, 0xffe, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0xa22f, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x1, 0x8, 0x3, 0x9, 0x5, 0xe, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0x6, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) (async)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, <r4=>0x0}, 0x2020) (async, rerun: 32)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0) (async, rerun: 32)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000040)=0xc)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000400), 0x2208842, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r7}}]}) (async)
write$FUSE_STATX(r3, &(0x7f0000002840)={0x130, 0x0, r4, {0xffff, 0x100, 0x0, '\x00', {0x100, 0x8, 0x4, 0x3, r5, r7, 0x6000, '\x00', 0x2, 0x8ea, 0x8, 0xb, {0x5, 0x1}, {0x7fff, 0x133}, {0x8, 0x2fe}, {0x9, 0x2}, 0xc, 0x4, 0x6, 0x80000001}}}, 0x130) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

kernel console output (not intermixed with test programs):

  vhost_task_create+0x1f9/0x380
[  200.705932][ T8704]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  200.705952][ T8704]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  200.705972][ T8704]  ? __pfx_vhost_task_create+0x10/0x10
[  200.706000][ T8704]  ? __pfx_vhost_task_fn+0x10/0x10
[  200.706029][ T8704]  ? __lock_acquire+0x6b5/0x2cf0
[  200.706059][ T8704]  kvm_mmu_post_init_vm+0x14c/0x300
[  200.706083][ T8704]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  200.706113][ T8704]  ? __mutex_trylock_common+0x158/0x260
[  200.706135][ T8704]  ? __pfx___mutex_trylock_common+0x10/0x10
[  200.706155][ T8704]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  200.706176][ T8704]  ? register_lock_class+0x31/0x2e0
[  200.706205][ T8704]  ? __lock_acquire+0x6b5/0x2cf0
[  200.706237][ T8704]  ? kasan_quarantine_put+0xbb/0x1f0
[  200.706263][ T8704]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  200.706290][ T8704]  ? do_raw_write_lock+0x11d/0x260
[  200.706326][ T8704]  kvm_vcpu_ioctl+0xa62/0xfd0
[  200.706351][ T8704]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  200.706368][ T8704]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  200.706404][ T8704]  ? __fget_files+0x2a/0x420
[  200.706429][ T8704]  ? __fget_files+0x2a/0x420
[  200.706450][ T8704]  ? __fget_files+0x3a0/0x420
[  200.706471][ T8704]  ? __fget_files+0x2a/0x420
[  200.706496][ T8704]  ? bpf_lsm_file_ioctl+0x9/0x20
[  200.706514][ T8704]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  200.706533][ T8704]  __se_sys_ioctl+0xfc/0x170
[  200.706553][ T8704]  do_syscall_64+0x14d/0xf80
[  200.706568][ T8704]  ? trace_irq_disable+0x3b/0x150
[  200.706588][ T8704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.706606][ T8704]  ? clear_bhb_loop+0x40/0x90
[  200.706627][ T8704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.706649][ T8704] RIP: 0033:0x7f857299c799
[  200.706666][ T8704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.706681][ T8704] RSP: 002b:00007f8573895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  200.706700][ T8704] RAX: ffffffffffffffda RBX: 00007f8572c15fa0 RCX: 00007f857299c799
[  200.706713][ T8704] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  200.706723][ T8704] RBP: 00007f8573895090 R08: 0000000000000000 R09: 0000000000000000
[  200.706734][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.706744][ T8704] R13: 00007f8572c16038 R14: 00007f8572c15fa0 R15: 00007fff3a898ed8
[  200.706772][ T8704]  </TASK>
[  200.707106][ T8704] syz.1.664: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  200.867340][ T8704] ,cpuset=
[  200.916143][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  201.083065][ T5848] Bluetooth: hci1: command 0x2016 tx timeout
[  201.116932][ T8704] /,mems_allowed=0-1
[  201.126713][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.1.664 Not tainted syzkaller #0 PREEMPT(full) 
[  201.126739][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  201.126751][ T8704] Call Trace:
[  201.126761][ T8704]  <TASK>
[  201.126768][ T8704]  dump_stack_lvl+0xe8/0x150
[  201.126799][ T8704]  warn_alloc+0x249/0x340
[  201.126823][ T8704]  ? __pfx_warn_alloc+0x10/0x10
[  201.126841][ T8704]  ? __get_vm_area_node+0x13f/0x300
[  201.126871][ T8704]  ? __get_vm_area_node+0x2b5/0x300
[  201.126900][ T8704]  __vmalloc_node_range_noprof+0x38f/0x1750
[  201.126946][ T8704]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  201.126979][ T8704]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  201.127007][ T8704]  ? rcu_is_watching+0x15/0xb0
[  201.127023][ T8704]  ? memcpy_and_pad+0x48/0x80
[  201.127052][ T8704]  __vmalloc_node_noprof+0xc2/0x100
[  201.127085][ T8704]  ? copy_process+0x89b/0x4430
[  201.127110][ T8704]  ? copy_process+0x89b/0x4430
[  201.127138][ T8704]  dup_task_struct+0x298/0x840
[  201.127169][ T8704]  copy_process+0x89b/0x4430
[  201.127225][ T8704]  ? __pfx_copy_process+0x10/0x10
[  201.127258][ T8704]  ? mutex_init_lockdep+0xdf/0x110
[  201.127281][ T8704]  vhost_task_create+0x1f9/0x380
[  201.127303][ T8704]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  201.127323][ T8704]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  201.127345][ T8704]  ? __pfx_vhost_task_create+0x10/0x10
[  201.127375][ T8704]  ? __pfx_vhost_task_fn+0x10/0x10
[  201.127401][ T8704]  ? __lock_acquire+0x6b5/0x2cf0
[  201.127431][ T8704]  kvm_mmu_post_init_vm+0x14c/0x300
[  201.127454][ T8704]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  201.127485][ T8704]  ? __mutex_trylock_common+0x158/0x260
[  201.127507][ T8704]  ? __pfx___mutex_trylock_common+0x10/0x10
[  201.127525][ T8704]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  201.127545][ T8704]  ? register_lock_class+0x31/0x2e0
[  201.127572][ T8704]  ? __lock_acquire+0x6b5/0x2cf0
[  201.127602][ T8704]  ? kasan_quarantine_put+0xbb/0x1f0
[  201.127630][ T8704]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  201.127653][ T8704]  ? do_raw_write_lock+0x11d/0x260
[  201.127686][ T8704]  kvm_vcpu_ioctl+0xa62/0xfd0
[  201.127711][ T8704]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  201.127728][ T8704]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  201.127766][ T8704]  ? __fget_files+0x2a/0x420
[  201.127790][ T8704]  ? __fget_files+0x2a/0x420
[  201.127812][ T8704]  ? __fget_files+0x3a0/0x420
[  201.127833][ T8704]  ? __fget_files+0x2a/0x420
[  201.127859][ T8704]  ? bpf_lsm_file_ioctl+0x9/0x20
[  201.127877][ T8704]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  201.127896][ T8704]  __se_sys_ioctl+0xfc/0x170
[  201.127917][ T8704]  do_syscall_64+0x14d/0xf80
[  201.127933][ T8704]  ? trace_irq_disable+0x3b/0x150
[  201.127953][ T8704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.127971][ T8704]  ? clear_bhb_loop+0x40/0x90
[  201.127993][ T8704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.128010][ T8704] RIP: 0033:0x7f857299c799
[  201.128027][ T8704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.128041][ T8704] RSP: 002b:00007f8573895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.128061][ T8704] RAX: ffffffffffffffda RBX: 00007f8572c15fa0 RCX: 00007f857299c799
[  201.128074][ T8704] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  201.128101][ T8704] RBP: 00007f8573895090 R08: 0000000000000000 R09: 0000000000000000
[  201.128111][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.128121][ T8704] R13: 00007f8572c16038 R14: 00007f8572c15fa0 R15: 00007fff3a898ed8
[  201.128150][ T8704]  </TASK>
[  201.132246][ T8704] Mem-Info:
[  201.389217][   T24] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  201.394121][ T8704] active_anon:25913 inactive_anon:0 isolated_anon:0
[  201.394121][ T8704]  active_file:14422 inactive_file:40044 isolated_file:0
[  201.394121][ T8704]  unevictable:768 dirty:29 writeback:1
[  201.394121][ T8704]  slab_reclaimable:10602 slab_unreclaimable:95231
[  201.394121][ T8704]  mapped:33707 shmem:20569 pagetables:1432
[  201.394121][ T8704]  sec_pagetables:0 bounce:0
[  201.394121][ T8704]  kernel_misc_reclaimable:0
[  201.394121][ T8704]  free:1296254 free_pcp:9140 free_cma:0
[  201.410095][   T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached
[  201.420364][ T8704] Node 0 active_anon:103652kB inactive_anon:0kB active_file:57688kB inactive_file:159972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134828kB dirty:116kB writeback:4kB shmem:80740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12436kB pagetables:5596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  201.523512][   T24] usb 5-1: USB disconnect, device number 48
[  201.596622][ T8704] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  201.638220][ T8704] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  201.643495][  T963] usb 4-1: USB disconnect, device number 60
[  201.710913][ T8704] lowmem_reserve[]: 0 2480 2482 2482 2482
[  201.723512][ T8704] Node 0 DMA32 free:1224564kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103552kB inactive_anon:0kB active_file:57688kB inactive_file:159972kB unevictable:1536kB writepending:120kB zspages:0kB present:3129332kB managed:2540160kB mlocked:0kB bounce:0kB free_pcp:37816kB local_pcp:18676kB free_cma:0kB
[  201.769518][ T8704] lowmem_reserve[]: 0 0 1 1 1
[  201.774314][ T8704] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1436kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:4kB free_cma:0kB
[  201.815129][ T8704] lowmem_reserve[]: 0 0 0 0 0
[  201.823731][ T8704] Node 1 Normal free:3945060kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  201.864241][ T8718] FAULT_INJECTION: forcing a failure.
[  201.864241][ T8718] name failslab, interval 1, probability 0, space 0, times 0
[  201.878074][  T963] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected
[  201.878730][ T8718] CPU: 0 UID: 0 PID: 8718 Comm: syz.4.666 Not tainted syzkaller #0 PREEMPT(full) 
[  201.878752][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  201.878763][ T8718] Call Trace:
[  201.878771][ T8718]  <TASK>
[  201.878778][ T8718]  dump_stack_lvl+0xe8/0x150
[  201.878809][ T8718]  should_fail_ex+0x412/0x560
[  201.878833][ T8718]  should_failslab+0xa8/0x100
[  201.878855][ T8718]  __kmalloc_noprof+0xe8/0x760
[  201.878881][ T8718]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  201.878912][ T8718]  tomoyo_realpath_from_path+0xe3/0x5d0
[  201.878946][ T8718]  ? tomoyo_path_number_perm+0x219/0x630
[  201.878968][ T8718]  tomoyo_path_number_perm+0x246/0x630
[  201.878992][ T8718]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  201.879024][ T8718]  ? __lock_acquire+0x6b5/0x2cf0
[  201.879059][ T8718]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  201.879092][ T8718]  ? __fget_files+0x2a/0x420
[  201.879117][ T8718]  ? __fget_files+0x2a/0x420
[  201.879138][ T8718]  ? __fget_files+0x3a0/0x420
[  201.879158][ T8718]  ? __fget_files+0x2a/0x420
[  201.879183][ T8718]  security_file_ioctl+0xc3/0x2a0
[  201.879206][ T8718]  __se_sys_ioctl+0x47/0x170
[  201.879226][ T8718]  do_syscall_64+0x14d/0xf80
[  201.879242][ T8718]  ? trace_irq_disable+0x3b/0x150
[  201.879262][ T8718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.879279][ T8718]  ? clear_bhb_loop+0x40/0x90
[  201.879300][ T8718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.879317][ T8718] RIP: 0033:0x7fd5eef9c799
[  201.879337][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.879352][ T8718] RSP: 002b:00007fd5ed1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.879370][ T8718] RAX: ffffffffffffffda RBX: 00007fd5ef216090 RCX: 00007fd5eef9c799
[  201.879383][ T8718] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  201.879393][ T8718] RBP: 00007fd5ed1f6090 R08: 0000000000000000 R09: 0000000000000000
[  201.879404][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.879414][ T8718] R13: 00007fd5ef216128 R14: 00007fd5ef216090 R15: 00007ffe045ff588
[  201.879441][ T8718]  </TASK>
[  201.879889][ T8718] ERROR: Out of memory at tomoyo_realpath_from_path.
[  201.937802][ T8704] lowmem_reserve[]: 0 0 0 0 0
[  202.126557][ T8704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  202.139473][ T8704] Node 0 DMA32: 1811*4kB (UE) 1129*8kB (UME) 450*16kB (UM) 235*32kB (UME) 122*64kB (UME) 82*128kB (UME) 41*256kB (UME) 9*512kB (UME) 7*1024kB (ME) 2*2048kB (ME) 280*4096kB (UM) = 1222548kB
[  202.166025][ T8704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  202.177822][ T8704] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3945060kB
[  202.214923][ T8704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  202.224622][ T8704] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  202.264782][ T8704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  202.303007][ T8704] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  202.338916][ T8704] 75035 total pagecache pages
[  202.360996][ T8704] 0 pages in swap cache
[  202.372719][ T8704] Free swap  = 124996kB
[  202.381983][ T8731] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.382977][ T8704] Total swap = 124996kB
[  202.403471][ T8704] 2097051 pages RAM
[  202.413628][ T8704] 0 pages HighMem/MovableOnly
[  202.419285][ T8704] 430037 pages reserved
[  202.436778][ T8731] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  202.443309][ T8704] 0 pages cma reserved
[  202.489165][ T8731] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  202.575031][ T8719] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  202.583083][ T8719] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  202.794884][ T5891] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  202.924650][ T5848] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  202.965792][ T5891] usb 5-1: Using ep0 maxpacket: 8
[  202.989662][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short
[  203.003251][ T5843] Bluetooth: hci4: command 0x2016 tx timeout
[  203.016854][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -71
[  203.032552][ T5891] usb 5-1: can't read configurations, error -71
[  203.155364][   T51] Bluetooth: hci2: command 0x2016 tx timeout
[  203.155614][ T5848] Bluetooth: hci1: command 0x2016 tx timeout
[  203.180212][ T8758] kvm: kvm [8757]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006e) = 0x8004
[  203.296016][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.321385][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.451181][ T5906] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  203.625096][ T5906] usb 2-1: Using ep0 maxpacket: 32
[  203.634270][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  203.647255][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  203.659381][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  203.670753][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  203.684597][ T5906] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  203.705657][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.714301][ T5906] usb 2-1: Product: syz
[  203.719180][ T5906] usb 2-1: Manufacturer: syz
[  203.723815][ T5906] usb 2-1: SerialNumber: syz
[  203.730574][ T5906] usb 2-1: config 0 descriptor??
[  203.741029][ T5906] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input88
[  203.865518][ T5945] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  203.941244][ T5906] usb 2-1: USB disconnect, device number 47
[  204.024873][ T5945] usb 4-1: Using ep0 maxpacket: 32
[  204.031726][ T5945] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  204.042545][ T5945] usb 4-1: config 0 has no interface number 0
[  204.050871][ T5945] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  204.071318][ T5945] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  204.071822][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.087798][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.098698][ T5891] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  204.107974][ T5945] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  204.119005][ T5945] usb 4-1: config 0 interface 196 has no altsetting 0
[  204.128928][ T5945] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  204.139268][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.147365][ T5945] usb 4-1: Product: syz
[  204.151634][ T5945] usb 4-1: Manufacturer: syz
[  204.156670][ T5945] usb 4-1: SerialNumber: syz
[  204.172839][ T5945] usb 4-1: config 0 descriptor??
[  204.180213][ T8771] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  204.197867][   T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  204.212583][   T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  204.212614][   T51] Tainted: [L]=SOFTLOCKUP
[  204.212622][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  204.212635][   T51] Workqueue: hci1 hci_rx_work
[  204.212670][   T51] Call Trace:
[  204.212677][   T51]  <TASK>
[  204.212686][   T51]  dump_stack_lvl+0xe8/0x150
[  204.212720][   T51]  sysfs_create_dir_ns+0x271/0x2a0
[  204.212750][   T51]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  204.212777][   T51]  ? do_raw_spin_unlock+0xf5/0x210
[  204.212802][   T51]  kobject_add_internal+0x62b/0xd00
[  204.212833][   T51]  kobject_add+0x163/0x240
[  204.212860][   T51]  ? __pfx_kobject_add+0x10/0x10
[  204.212882][   T51]  ? _raw_spin_unlock+0x28/0x50
[  204.212914][   T51]  ? get_device_parent+0x366/0x3a0
[  204.212957][   T51]  device_add+0x408/0xb70
[  204.212994][   T51]  hci_conn_add_sysfs+0xd5/0x210
[  204.213026][   T51]  le_conn_complete_evt+0xf1d/0x1430
[  204.213061][   T51]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  204.213084][   T51]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  204.213104][   T51]  ? __pfx___mutex_lock+0x10/0x10
[  204.213123][   T51]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  204.213142][   T51]  ? skb_pull_data+0xfb/0x200
[  204.213170][   T51]  hci_le_conn_complete_evt+0x187/0x470
[  204.213201][   T51]  hci_event_packet+0x7af/0x12c0
[  204.213239][   T51]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  204.213262][   T51]  ? __pfx_hci_event_packet+0x10/0x10
[  204.213299][   T51]  ? kcov_remote_start+0x49a/0x7a0
[  204.213328][   T51]  ? hci_send_to_monitor+0xe2/0x590
[  204.213355][   T51]  hci_rx_work+0x3ee/0x1040
[  204.213396][   T51]  ? process_one_work+0x8bb/0x1780
[  204.213426][   T51]  process_one_work+0x9ab/0x1780
[  204.213478][   T51]  ? __pfx_process_one_work+0x10/0x10
[  204.213505][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  204.213545][   T51]  worker_thread+0xba8/0x11e0
[  204.213590][   T51]  kthread+0x388/0x470
[  204.213615][   T51]  ? __pfx_worker_thread+0x10/0x10
[  204.213646][   T51]  ? __pfx_kthread+0x10/0x10
[  204.213672][   T51]  ret_from_fork+0x51e/0xb90
[  204.213703][   T51]  ? __pfx_ret_from_fork+0x10/0x10
[  204.213730][   T51]  ? __switch_to+0xc7d/0x1450
[  204.213760][   T51]  ? __pfx_kthread+0x10/0x10
[  204.213784][   T51]  ret_from_fork_asm+0x1a/0x30
[  204.213822][   T51]  </TASK>
[  204.213874][   T51] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  204.262125][   T51] Bluetooth: hci1: failed to register connection device
[  204.479836][ T5891] usb 5-1: Using ep0 maxpacket: 32
[  204.488750][ T5891] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  204.497039][ T5891] usb 5-1: config 0 has no interface number 0
[  204.503387][ T5891] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  204.518088][ T5891] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  204.528157][ T5891] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  204.538178][ T5891] usb 5-1: config 0 interface 196 has no altsetting 0
[  204.554916][ T5891] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  204.572328][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.581121][ T5891] usb 5-1: Product: syz
[  204.588330][ T5891] usb 5-1: Manufacturer: syz
[  204.593052][ T5891] usb 5-1: SerialNumber: syz
[  204.593469][ T8785] FAULT_INJECTION: forcing a failure.
[  204.593469][ T8785] name failslab, interval 1, probability 0, space 0, times 0
[  204.602080][ T5891] usb 5-1: config 0 descriptor??
[  204.619525][ T8773] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  204.620212][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.1.681 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  204.620237][ T8785] Tainted: [L]=SOFTLOCKUP
[  204.620243][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  204.620253][ T8785] Call Trace:
[  204.620261][ T8785]  <TASK>
[  204.620268][ T8785]  dump_stack_lvl+0xe8/0x150
[  204.620298][ T8785]  should_fail_ex+0x412/0x560
[  204.620324][ T8785]  should_failslab+0xa8/0x100
[  204.620343][ T8785]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  204.620372][ T8785]  ? ip6_setup_cork+0x930/0xf30
[  204.620395][ T8785]  ? __kmalloc_cache_noprof+0x31c/0x660
[  204.620424][ T8785]  kmemdup_noprof+0x2b/0x70
[  204.620444][ T8785]  ip6_setup_cork+0x930/0xf30
[  204.620476][ T8785]  ip6_append_data+0x196/0x2a0
[  204.620501][ T8785]  ? __pfx_raw6_getfrag+0x10/0x10
[  204.620529][ T8785]  rawv6_sendmsg+0x12d3/0x18e0
[  204.620566][ T8785]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  204.620619][ T8785]  ? __pfx_aa_sk_perm+0x10/0x10
[  204.620641][ T8785]  ? sock_rps_record_flow+0x19/0x350
[  204.620661][ T8785]  ? inet_sendmsg+0x2f4/0x370
[  204.620680][ T8785]  ? __pfx_inet_sendmsg+0x10/0x10
[  204.620696][ T8785]  sock_sendmsg_nosec+0xf9/0x150
[  204.620722][ T8785]  sock_write_iter+0x302/0x410
[  204.620746][ T8785]  ? __pfx_sock_write_iter+0x10/0x10
[  204.620777][ T8785]  ? bpf_lsm_file_permission+0x9/0x20
[  204.620794][ T8785]  ? security_file_permission+0x75/0x260
[  204.620822][ T8785]  vfs_write+0x61d/0xb90
[  204.620846][ T8785]  ? __pfx_vfs_write+0x10/0x10
[  204.620881][ T8785]  ? __fget_files+0x2a/0x420
[  204.620912][ T8785]  ksys_write+0x150/0x270
[  204.620938][ T8785]  ? __pfx_ksys_write+0x10/0x10
[  204.620965][ T8785]  do_syscall_64+0x14d/0xf80
[  204.620995][ T8785]  ? trace_irq_disable+0x3b/0x150
[  204.621015][ T8785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.621033][ T8785]  ? clear_bhb_loop+0x40/0x90
[  204.621053][ T8785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.621071][ T8785] RIP: 0033:0x7f857299c799
[  204.621088][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.621103][ T8785] RSP: 002b:00007f8573895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  204.621122][ T8785] RAX: ffffffffffffffda RBX: 00007f8572c15fa0 RCX: 00007f857299c799
[  204.621134][ T8785] RDX: 00000000000005ac RSI: 0000200000000140 RDI: 0000000000000003
[  204.621145][ T8785] RBP: 00007f8573895090 R08: 0000000000000000 R09: 0000000000000000
[  204.621156][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.621166][ T8785] R13: 00007f8572c16038 R14: 00007f8572c15fa0 R15: 00007fff3a898ed8
[  204.621195][ T8785]  </TASK>
[  204.687637][   T51] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  204.921704][   T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  204.931971][   T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  204.932005][   T51] Tainted: [L]=SOFTLOCKUP
[  204.932014][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  204.932028][   T51] Workqueue: hci2 hci_rx_work
[  204.932062][   T51] Call Trace:
[  204.932069][   T51]  <TASK>
[  204.932075][   T51]  dump_stack_lvl+0xe8/0x150
[  204.932102][   T51]  sysfs_create_dir_ns+0x271/0x2a0
[  204.932127][   T51]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  204.932149][   T51]  ? do_raw_spin_unlock+0xf5/0x210
[  204.932178][   T51]  kobject_add_internal+0x62b/0xd00
[  204.932206][   T51]  kobject_add+0x163/0x240
[  204.932228][   T51]  ? __pfx_kobject_add+0x10/0x10
[  204.932245][   T51]  ? _raw_spin_unlock+0x28/0x50
[  204.932270][   T51]  ? get_device_parent+0x366/0x3a0
[  204.932297][   T51]  device_add+0x408/0xb70
[  204.932329][   T51]  hci_conn_add_sysfs+0xd5/0x210
[  204.932355][   T51]  le_conn_complete_evt+0xf1d/0x1430
[  204.932382][   T51]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  204.932400][   T51]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  204.932418][   T51]  ? __pfx___mutex_lock+0x10/0x10
[  204.932433][   T51]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  204.932452][   T51]  ? skb_pull_data+0xfb/0x200
[  204.932477][   T51]  hci_le_conn_complete_evt+0x187/0x470
[  204.932501][   T51]  hci_event_packet+0x7af/0x12c0
[  204.932530][   T51]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  204.932547][   T51]  ? __pfx_hci_event_packet+0x10/0x10
[  204.932576][   T51]  ? kcov_remote_start+0x49a/0x7a0
[  204.932604][   T51]  ? hci_send_to_monitor+0xe2/0x590
[  204.932627][   T51]  hci_rx_work+0x3ee/0x1040
[  204.932658][   T51]  ? process_one_work+0x8bb/0x1780
[  204.932681][   T51]  process_one_work+0x9ab/0x1780
[  204.932736][   T51]  ? __pfx_process_one_work+0x10/0x10
[  204.932759][   T51]  ? do_raw_spin_lock+0x12b/0x2f0
[  204.932795][   T51]  worker_thread+0xba8/0x11e0
[  204.932830][   T51]  kthread+0x388/0x470
[  204.932850][   T51]  ? __pfx_worker_thread+0x10/0x10
[  204.932880][   T51]  ? __pfx_kthread+0x10/0x10
[  204.932903][   T51]  ret_from_fork+0x51e/0xb90
[  204.932928][   T51]  ? __pfx_ret_from_fork+0x10/0x10
[  204.932950][   T51]  ? __switch_to+0xc7d/0x1450
[  204.932973][   T51]  ? __pfx_kthread+0x10/0x10
[  204.932995][   T51]  ret_from_fork_asm+0x1a/0x30
[  204.933027][   T51]  </TASK>
[  204.933066][   T51] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  204.996363][ T5945] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  205.002521][   T51] Bluetooth: hci2: failed to register connection device
[  205.032602][ T5945] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached
[  205.093365][ T8790] FAULT_INJECTION: forcing a failure.
[  205.093365][ T8790] name failslab, interval 1, probability 0, space 0, times 0
[  205.217703][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.1.683 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  205.217732][ T8790] Tainted: [L]=SOFTLOCKUP
[  205.217740][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  205.217750][ T8790] Call Trace:
[  205.217758][ T8790]  <TASK>
[  205.217767][ T8790]  dump_stack_lvl+0xe8/0x150
[  205.217797][ T8790]  should_fail_ex+0x412/0x560
[  205.217824][ T8790]  should_failslab+0xa8/0x100
[  205.217844][ T8790]  ? dst_alloc+0x105/0x170
[  205.217866][ T8790]  kmem_cache_alloc_noprof+0x87/0x650
[  205.217895][ T8790]  ? __pfx_ip6_dst_gc+0x10/0x10
[  205.217917][ T8790]  dst_alloc+0x105/0x170
[  205.217942][ T8790]  ip6_pol_route+0xb08/0x13e0
[  205.217963][ T8790]  ? ip6_pol_route+0x160/0x13e0
[  205.217988][ T8790]  ? __pfx_ip6_pol_route+0x10/0x10
[  205.218025][ T8790]  fib6_rule_lookup+0x563/0x740
[  205.218048][ T8790]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  205.218070][ T8790]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  205.218088][ T8790]  ? nf_nat_ipv6_fn+0xf3/0x2f0
[  205.218116][ T8790]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  205.218142][ T8790]  ? ip6table_mangle_hook+0x2b3/0x740
[  205.218166][ T8790]  ? nf_nat_ipv6_in+0xed/0x2c0
[  205.218202][ T8790]  ip6_route_input+0x730/0xad0
[  205.218231][ T8790]  ? __pfx_ip6_route_input+0x10/0x10
[  205.218251][ T8790]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  205.218285][ T8790]  ? nf_hook_slow_list+0x2b8/0x3a0
[  205.218319][ T8790]  ? ip6_rcv_finish_core+0x222/0x420
[  205.218349][ T8790]  ip6_sublist_rcv+0x705/0xda0
[  205.218384][ T8790]  ? rcu_read_unlock+0x87/0xa0
[  205.218402][ T8790]  ? __pfx_ip6_sublist_rcv+0x10/0x10
[  205.218434][ T8790]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  205.218461][ T8790]  ? ip6_rcv_core+0xa2/0x1740
[  205.218495][ T8790]  ipv6_list_rcv+0x3f4/0x450
[  205.218531][ T8790]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  205.218559][ T8790]  ? __alloc_skb+0x27d/0x7d0
[  205.218586][ T8790]  ? napi_get_frags+0x69/0x140
[  205.218612][ T8790]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  205.218641][ T8790]  __netif_receive_skb_list_core+0x5ff/0x810
[  205.218689][ T8790]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  205.218727][ T8790]  netif_receive_skb_list_internal+0x995/0xcf0
[  205.218759][ T8790]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  205.218782][ T8790]  ? dev_gro_receive+0x1060/0x23c0
[  205.218807][ T8790]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  205.218832][ T8790]  ? dev_gro_receive+0x1773/0x23c0
[  205.218857][ T8790]  ? dev_gro_receive+0x1108/0x23c0
[  205.218897][ T8790]  napi_complete_done+0x299/0x730
[  205.218926][ T8790]  ? __pfx_napi_complete_done+0x10/0x10
[  205.218956][ T8790]  ? tun_get_user+0x2757/0x4300
[  205.218985][ T8790]  tun_get_user+0x29c8/0x4300
[  205.219016][ T8790]  ? tun_get_user+0x2757/0x4300
[  205.219061][ T8790]  ? __pfx_tun_get_user+0x10/0x10
[  205.219087][ T8790]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  205.219114][ T8790]  ? lockdep_hardirqs_on+0x7a/0x110
[  205.219141][ T8790]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  205.219165][ T8790]  ? save_netdev_trace_buffer+0x4e2/0x610
[  205.219199][ T8790]  ? ref_tracker_alloc+0x35c/0x4c0
[  205.219220][ T8790]  ? tun_chr_write_iter+0x60/0x210
[  205.219244][ T8790]  ? vfs_write+0x61d/0xb90
[  205.219259][ T8790]  ? ksys_write+0x150/0x270
[  205.219276][ T8790]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  205.219303][ T8790]  ? tun_get+0x1c/0x2f0
[  205.219335][ T8790]  ? tun_get+0x1c/0x2f0
[  205.219361][ T8790]  ? tun_get+0x1c/0x2f0
[  205.219390][ T8790]  tun_chr_write_iter+0x113/0x210
[  205.219420][ T8790]  vfs_write+0x61d/0xb90
[  205.219445][ T8790]  ? __pfx_vfs_write+0x10/0x10
[  205.219482][ T8790]  ? __fget_files+0x2a/0x420
[  205.219515][ T8790]  ksys_write+0x150/0x270
[  205.219535][ T8790]  ? __pfx_ksys_write+0x10/0x10
[  205.219565][ T8790]  do_syscall_64+0x14d/0xf80
[  205.219581][ T8790]  ? trace_irq_disable+0x3b/0x150
[  205.219602][ T8790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.219621][ T8790]  ? clear_bhb_loop+0x40/0x90
[  205.219652][ T8790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.219670][ T8790] RIP: 0033:0x7f857299c799
[  205.219688][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.219704][ T8790] RSP: 002b:00007f8573895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  205.219724][ T8790] RAX: ffffffffffffffda RBX: 00007f8572c15fa0 RCX: 00007f857299c799
[  205.219737][ T8790] RDX: 0000000000000042 RSI: 0000200000000200 RDI: 0000000000000003
[  205.219750][ T8790] RBP: 00007f8573895090 R08: 0000000000000000 R09: 0000000000000000
[  205.219761][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.219772][ T8790] R13: 00007f8572c16038 R14: 00007f8572c15fa0 R15: 00007fff3a898ed8
[  205.219805][ T8790]  </TASK>
[  205.715333][ T5891] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110
[  205.738118][   T51] Bluetooth: hci1: command 0x2016 tx timeout
[  205.744213][   T51] Bluetooth: hci2: command 0x2016 tx timeout
[  205.764953][   T24] usb 4-1: USB disconnect, device number 61
[  205.851426][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.870921][ T5891] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  205.918443][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.960682][   T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected
[  206.394420][ T5845] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  206.430611][ T8828] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  206.509514][ T8828] CIFS mount error: No usable UNC path provided in device string!
[  206.509514][ T8828] 
[  206.584183][ T5845] Bluetooth: hci0: unexpected event for opcode 0x1005
[  206.611752][ T8828] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  206.631532][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  206.924124][ T8855] netlink: 'syz.0.694': attribute type 27 has an invalid length.
[  206.932067][ T8855] netlink: 'syz.0.694': attribute type 4 has an invalid length.
[  206.940911][ T8855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.694'.
[  207.098711][ T5891] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  207.144656][ T5945] usb 5-1: USB disconnect, device number 50
[  207.228349][ T5945] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  207.278125][ T5891] usb 2-1: Using ep0 maxpacket: 32
[  207.297860][ T5891] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  207.315585][ T5891] usb 2-1: config 0 has no interface number 0
[  207.338174][ T5891] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  207.378634][ T5891] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.399016][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.411349][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.414005][ T5891] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  207.432276][ T5891] usb 2-1: config 0 interface 196 has no altsetting 0
[  207.447801][ T5891] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  207.457302][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.465599][ T5891] usb 2-1: Product: syz
[  207.469974][ T5891] usb 2-1: Manufacturer: syz
[  207.474616][ T5891] usb 2-1: SerialNumber: syz
[  207.479334][ T5845] Bluetooth: hci4: command 0x2016 tx timeout
[  207.494230][ T5891] usb 2-1: config 0 descriptor??
[  207.500946][ T8851] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  207.685017][ T5906] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  207.795230][ T5843] Bluetooth: hci1: command 0x2016 tx timeout
[  207.854819][ T5906] usb 4-1: Using ep0 maxpacket: 16
[  207.861630][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.872178][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  207.884075][ T5843] Bluetooth: hci2: command 0x2016 tx timeout
[  207.893932][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  207.910712][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.928745][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  207.944017][ T5906] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  207.967527][ T5906] usb 4-1: Manufacturer: syz
[  208.005926][ T5906] usb 4-1: config 0 descriptor??
[  208.253882][ T5891] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  208.306477][ T5891] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached
[  208.312773][ T8907] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.331977][ T8907] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  208.366374][ T8907] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  208.422394][ T8913] FAULT_INJECTION: forcing a failure.
[  208.422394][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.448515][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.458970][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: syz.4.707 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.459001][ T8913] Tainted: [L]=SOFTLOCKUP
[  208.459009][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.459020][ T8913] Call Trace:
[  208.459028][ T8913]  <TASK>
[  208.459036][ T8913]  dump_stack_lvl+0xe8/0x150
[  208.459067][ T8913]  should_fail_ex+0x412/0x560
[  208.459093][ T8913]  _copy_from_user+0x2d/0xb0
[  208.459116][ T8913]  __copy_msghdr+0x3c5/0x5b0
[  208.459141][ T8913]  ___sys_sendmsg+0x213/0x360
[  208.459166][ T8913]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.459218][ T8913]  ? __fget_files+0x2a/0x420
[  208.459241][ T8913]  ? __fget_files+0x3a0/0x420
[  208.459273][ T8913]  __x64_sys_sendmsg+0x1bd/0x2a0
[  208.459296][ T8913]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.459323][ T8913]  ? __pfx_ksys_write+0x10/0x10
[  208.459351][ T8913]  do_syscall_64+0x14d/0xf80
[  208.459368][ T8913]  ? trace_irq_disable+0x3b/0x150
[  208.459390][ T8913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.459408][ T8913]  ? clear_bhb_loop+0x40/0x90
[  208.459430][ T8913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.459449][ T8913] RIP: 0033:0x7fd5eef9c799
[  208.459467][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.459483][ T8913] RSP: 002b:00007fd5efd8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.459503][ T8913] RAX: ffffffffffffffda RBX: 00007fd5ef215fa0 RCX: 00007fd5eef9c799
[  208.459517][ T8913] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  208.459529][ T8913] RBP: 00007fd5efd8d090 R08: 0000000000000000 R09: 0000000000000000
[  208.459540][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.459552][ T8913] R13: 00007fd5ef216038 R14: 00007fd5ef215fa0 R15: 00007ffe045ff588
[  208.459580][ T8913]  </TASK>
[  208.542008][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.668653][ T5891] usb 2-1: USB disconnect, device number 48
[  208.788056][ T5891] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected
[  209.025115][  T963] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  209.199925][  T963] usb 5-1: Using ep0 maxpacket: 32
[  209.219235][  T963] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  209.245146][  T963] usb 5-1: config 0 has no interface number 0
[  209.255836][  T963] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  209.272506][  T963] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  209.286377][  T963] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  209.296690][  T963] usb 5-1: config 0 interface 196 has no altsetting 0
[  209.306309][  T963] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  209.330416][  T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.345265][  T963] usb 5-1: Product: syz
[  209.352886][  T963] usb 5-1: Manufacturer: syz
[  209.372095][  T963] usb 5-1: SerialNumber: syz
[  209.399434][  T963] usb 5-1: config 0 descriptor??
[  209.426226][ T8920] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  209.564747][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  209.707173][ T8956] netlink: 'syz.0.713': attribute type 33 has an invalid length.
[  209.715587][ T8956] netlink: 152 bytes leftover after parsing attributes in process `syz.0.713'.
[  209.733526][ T8956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.713'.
[  209.875253][ T5838] Bluetooth: hci1: command 0x2016 tx timeout
[  209.956082][ T5848] Bluetooth: hci2: command 0x2016 tx timeout
[  210.142400][  T963] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  210.156324][  T963] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  210.277921][ T5843] Bluetooth: hci0: command 0x2016 tx timeout
[  210.352757][  T963] usb 5-1: USB disconnect, device number 51
[  210.408591][  T963] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  210.461523][ T5906] usb 4-1: USB disconnect, device number 62
[  210.527073][ T8988] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  210.543406][ T8988] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  211.254904][   T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  211.396654][ T5906] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  211.424956][   T10] usb 5-1: Using ep0 maxpacket: 16
[  211.433129][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.456241][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  211.485305][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  211.495263][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  211.507734][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.522224][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  211.531894][   T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  211.540076][   T10] usb 5-1: Manufacturer: syz
[  211.547771][   T10] usb 5-1: config 0 descriptor??
[  211.574858][  T963] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  211.582496][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  211.596780][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  211.617039][ T5906] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  211.626372][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.634415][ T5906] usb 4-1: Product: syz
[  211.638642][ T5906] usb 4-1: Manufacturer: syz
[  211.644817][ T5906] usb 4-1: SerialNumber: syz
[  211.754848][  T963] usb 2-1: Using ep0 maxpacket: 8
[  211.765480][  T963] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  211.780196][  T963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.789495][  T963] usb 2-1: Product: syz
[  211.793736][  T963] usb 2-1: Manufacturer: syz
[  211.799480][  T963] usb 2-1: SerialNumber: syz
[  211.811185][  T963] usb 2-1: config 0 descriptor??
[  211.823933][  T963] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  211.832030][  T963] pctv452e: pctv452e_power_ctrl: 1
[  211.832030][  T963] 
[  211.839559][  T963] usb 2-1: selecting invalid altsetting 3
[  211.845919][  T963] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  211.845919][  T963] 
[  211.866008][  T963] dvb-usb: bulk message failed: -22 (5/0)
[  211.876097][ T5906] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  211.890242][ T5906] usb 4-1: MIDIStreaming interface descriptor not found
[  211.898547][  T963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  211.911395][  T963] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  211.922527][  T963] usb 2-1: media controller created
[  211.931777][  T963] dvb-usb: bulk message failed: -22 (8/0)
[  211.947617][  T963] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  211.953250][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.964552][ T5848] Bluetooth: hci1: command 0x2016 tx timeout
[  211.975528][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.998436][  T963] dvb-usb: MAC address reading failed.
[  212.048692][  T963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  212.057670][ T5906] usb 4-1: USB disconnect, device number 63
[  212.125565][ T5838] Bluetooth: hci4: command 0x2016 tx timeout
[  212.178078][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.209692][  T963] DVB: Unable to find symbol stb0899_attach()
[  212.220501][  T963] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  212.296503][  T963] rc_core: IR keymap rc-tt-1500 not found
[  212.302288][  T963] Registered IR keymap rc-empty
[  212.311951][  T963] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  212.324498][  T963] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input94
[  212.338113][  T963] dvb-usb: schedule remote query interval to 100 msecs.
[  212.345225][  T963] pctv452e: pctv452e_power_ctrl: 0
[  212.345225][  T963] 
[  212.352525][  T963] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  212.366604][ T5848] Bluetooth: hci0: command 0x2016 tx timeout
[  212.369263][  T963] usb 2-1: USB disconnect, device number 49
[  212.467859][  T963] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  212.591280][ T9044] netlink: 'syz.0.734': attribute type 29 has an invalid length.
[  212.613833][ T9044] syzkaller1: entered promiscuous mode
[  212.619876][ T9044] syzkaller1: entered allmulticast mode
[  212.644945][ T9042] FAULT_INJECTION: forcing a failure.
[  212.644945][ T9042] name failslab, interval 1, probability 0, space 0, times 0
[  212.659270][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.3.733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  212.659300][ T9042] Tainted: [L]=SOFTLOCKUP
[  212.659307][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  212.659318][ T9042] Call Trace:
[  212.659326][ T9042]  <TASK>
[  212.659334][ T9042]  dump_stack_lvl+0xe8/0x150
[  212.659364][ T9042]  should_fail_ex+0x412/0x560
[  212.659390][ T9042]  should_failslab+0xa8/0x100
[  212.659412][ T9042]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  212.659441][ T9042]  ? css_rstat_updated+0x23a/0x530
[  212.659472][ T9042]  ? __get_vm_area_node+0x13f/0x300
[  212.659502][ T9042]  __get_vm_area_node+0x13f/0x300
[  212.659519][ T9042]  ? dup_task_struct+0x52/0x840
[  212.659537][ T9042]  __vmalloc_node_range_noprof+0x36a/0x1750
[  212.659552][ T9042]  ? copy_process+0x89b/0x4430
[  212.659582][ T9042]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  212.659616][ T9042]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  212.659646][ T9042]  ? rcu_is_watching+0x15/0xb0
[  212.659665][ T9042]  ? memcpy_and_pad+0x48/0x80
[  212.659682][ T9042]  __vmalloc_node_noprof+0xc2/0x100
[  212.659696][ T9042]  ? copy_process+0x89b/0x4430
[  212.659709][ T9042]  ? copy_process+0x89b/0x4430
[  212.659726][ T9042]  dup_task_struct+0x298/0x840
[  212.659758][ T9042]  copy_process+0x89b/0x4430
[  212.659813][ T9042]  ? __pfx_copy_process+0x10/0x10
[  212.659832][ T9042]  ? mutex_init_lockdep+0xdf/0x110
[  212.659845][ T9042]  vhost_task_create+0x1f9/0x380
[  212.659857][ T9042]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  212.659869][ T9042]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  212.659890][ T9042]  ? __pfx_vhost_task_create+0x10/0x10
[  212.659921][ T9042]  ? __pfx_vhost_task_fn+0x10/0x10
[  212.659951][ T9042]  ? __lock_acquire+0x6b5/0x2cf0
[  212.659974][ T9042]  kvm_mmu_post_init_vm+0x14c/0x300
[  212.659989][ T9042]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  212.660006][ T9042]  ? __mutex_trylock_common+0x158/0x260
[  212.660019][ T9042]  ? __pfx___mutex_trylock_common+0x10/0x10
[  212.660039][ T9042]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  212.660062][ T9042]  ? register_lock_class+0x31/0x2e0
[  212.660092][ T9042]  ? __lock_acquire+0x6b5/0x2cf0
[  212.660119][ T9042]  ? kasan_quarantine_put+0xbb/0x1f0
[  212.660135][ T9042]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  212.660150][ T9042]  ? do_raw_write_lock+0x11d/0x260
[  212.660171][ T9042]  kvm_vcpu_ioctl+0xa62/0xfd0
[  212.660197][ T9042]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  212.660215][ T9042]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  212.660254][ T9042]  ? __fget_files+0x2a/0x420
[  212.660272][ T9042]  ? __fget_files+0x2a/0x420
[  212.660293][ T9042]  ? __fget_files+0x3a0/0x420
[  212.660313][ T9042]  ? __fget_files+0x2a/0x420
[  212.660337][ T9042]  ? bpf_lsm_file_ioctl+0x9/0x20
[  212.660356][ T9042]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  212.660377][ T9042]  __se_sys_ioctl+0xfc/0x170
[  212.660398][ T9042]  do_syscall_64+0x14d/0xf80
[  212.660415][ T9042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.660434][ T9042]  ? clear_bhb_loop+0x40/0x90
[  212.660464][ T9042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.660483][ T9042] RIP: 0033:0x7f191059c799
[  212.660502][ T9042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.660517][ T9042] RSP: 002b:00007f191136f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.660536][ T9042] RAX: ffffffffffffffda RBX: 00007f1910815fa0 RCX: 00007f191059c799
[  212.660549][ T9042] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  212.660555][ T9042] RBP: 00007f191136f090 R08: 0000000000000000 R09: 0000000000000000
[  212.660561][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.660568][ T9042] R13: 00007f1910816038 R14: 00007f1910815fa0 R15: 00007fff0f7f9d08
[  212.660584][ T9042]  </TASK>
[  212.660721][ T9042] syz.3.733: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  213.058949][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.3.733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.058977][ T9042] Tainted: [L]=SOFTLOCKUP
[  213.058985][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  213.058996][ T9042] Call Trace:
[  213.059003][ T9042]  <TASK>
[  213.059009][ T9042]  dump_stack_lvl+0xe8/0x150
[  213.059040][ T9042]  warn_alloc+0x249/0x340
[  213.059063][ T9042]  ? __pfx_warn_alloc+0x10/0x10
[  213.059081][ T9042]  ? __get_vm_area_node+0x13f/0x300
[  213.059111][ T9042]  ? __get_vm_area_node+0x2b5/0x300
[  213.059134][ T9042]  ? dup_task_struct+0x52/0x840
[  213.059167][ T9042]  __vmalloc_node_range_noprof+0x38f/0x1750
[  213.059214][ T9042]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  213.059247][ T9042]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  213.059277][ T9042]  ? rcu_is_watching+0x15/0xb0
[  213.059297][ T9042]  ? memcpy_and_pad+0x48/0x80
[  213.059325][ T9042]  __vmalloc_node_noprof+0xc2/0x100
[  213.059354][ T9042]  ? copy_process+0x89b/0x4430
[  213.059375][ T9042]  ? copy_process+0x89b/0x4430
[  213.059402][ T9042]  dup_task_struct+0x298/0x840
[  213.059432][ T9042]  copy_process+0x89b/0x4430
[  213.059478][ T9042]  ? __pfx_copy_process+0x10/0x10
[  213.059506][ T9042]  ? mutex_init_lockdep+0xdf/0x110
[  213.059524][ T9042]  vhost_task_create+0x1f9/0x380
[  213.059542][ T9042]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  213.059561][ T9042]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  213.059581][ T9042]  ? __pfx_vhost_task_create+0x10/0x10
[  213.059610][ T9042]  ? __pfx_vhost_task_fn+0x10/0x10
[  213.059638][ T9042]  ? __lock_acquire+0x6b5/0x2cf0
[  213.059667][ T9042]  kvm_mmu_post_init_vm+0x14c/0x300
[  213.059690][ T9042]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  213.059717][ T9042]  ? __mutex_trylock_common+0x158/0x260
[  213.059737][ T9042]  ? __pfx___mutex_trylock_common+0x10/0x10
[  213.059757][ T9042]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  213.059779][ T9042]  ? register_lock_class+0x31/0x2e0
[  213.059817][ T9042]  ? __lock_acquire+0x6b5/0x2cf0
[  213.059847][ T9042]  ? kasan_quarantine_put+0xbb/0x1f0
[  213.059866][ T9042]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  213.059881][ T9042]  ? do_raw_write_lock+0x11d/0x260
[  213.059907][ T9042]  kvm_vcpu_ioctl+0xa62/0xfd0
[  213.059932][ T9042]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  213.059951][ T9042]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  213.059990][ T9042]  ? __fget_files+0x2a/0x420
[  213.060008][ T9042]  ? __fget_files+0x2a/0x420
[  213.060020][ T9042]  ? __fget_files+0x3a0/0x420
[  213.060031][ T9042]  ? __fget_files+0x2a/0x420
[  213.060045][ T9042]  ? bpf_lsm_file_ioctl+0x9/0x20
[  213.060057][ T9042]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  213.060077][ T9042]  __se_sys_ioctl+0xfc/0x170
[  213.060100][ T9042]  do_syscall_64+0x14d/0xf80
[  213.060117][ T9042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.060136][ T9042]  ? clear_bhb_loop+0x40/0x90
[  213.060153][ T9042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.060163][ T9042] RIP: 0033:0x7f191059c799
[  213.060175][ T9042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.060184][ T9042] RSP: 002b:00007f191136f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  213.060195][ T9042] RAX: ffffffffffffffda RBX: 00007f1910815fa0 RCX: 00007f191059c799
[  213.060202][ T9042] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  213.060211][ T9042] RBP: 00007f191136f090 R08: 0000000000000000 R09: 0000000000000000
[  213.060222][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.060234][ T9042] R13: 00007f1910816038 R14: 00007f1910815fa0 R15: 00007fff0f7f9d08
[  213.060265][ T9042]  </TASK>
[  213.060671][ T9042] Mem-Info:
[  213.124929][ T5891] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  213.130454][ T9042] active_anon:25982 inactive_anon:0 isolated_anon:0
[  213.130454][ T9042]  active_file:14678 inactive_file:40059 isolated_file:0
[  213.130454][ T9042]  unevictable:768 dirty:7 writeback:0
[  213.130454][ T9042]  slab_reclaimable:10558 slab_unreclaimable:95066
[  213.130454][ T9042]  mapped:33787 shmem:20567 pagetables:1458
[  213.130454][ T9042]  sec_pagetables:3 bounce:0
[  213.130454][ T9042]  kernel_misc_reclaimable:0
[  213.130454][ T9042]  free:1296245 free_pcp:8792 free_cma:0
[  213.307302][ T5891] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  213.310582][ T9042] Node 0 active_anon:103928kB inactive_anon:0kB active_file:58712kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135148kB dirty:28kB writeback:0kB shmem:80732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12320kB pagetables:5600kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB
[  213.319084][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.320733][ T9042] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  213.327446][ T5891] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  213.329930][ T9042] Node 0 
[  213.351703][ T5891] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  213.351732][ T5891] usb 2-1: Manufacturer: syz
[  213.360774][ T5891] usb 2-1: config 0 descriptor??
[  213.376446][ T9042] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  213.502532][ T5891] rc_core: IR keymap rc-hauppauge not found
[  213.534797][ T9042] lowmem_reserve[]:
[  213.543963][ T5891] Registered IR keymap rc-empty
[  213.572167][ T9042]  0
[  213.581122][ T5891] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  213.589111][ T9042]  2480
[  213.614059][ T5891] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95
[  213.632079][ T9042]  2482
[  213.712891][ T5891] usb 2-1: USB disconnect, device number 50
[  213.751975][ T9042]  2482 2482
[  213.758389][ T9042] Node 0 DMA32 free:1224560kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103928kB inactive_anon:0kB active_file:58712kB inactive_file:160032kB unevictable:1536kB writepending:28kB zspages:12kB present:3129332kB managed:2540160kB mlocked:0kB bounce:0kB free_pcp:36128kB local_pcp:20976kB free_cma:0kB
[  213.813612][ T9042] lowmem_reserve[]: 0 0 1 1 1
[  213.819128][ T9042] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1436kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:4kB free_cma:0kB
[  213.851436][ T9042] lowmem_reserve[]: 0 0 0 0 0
[  213.873119][ T9042] Node 1 Normal free:3945060kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  213.919890][ T9042] lowmem_reserve[]: 0 0 0 0 0
[  213.924664][ T9042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  213.942145][ T9042] Node 0 DMA32: 2648*4kB (UME) 1452*8kB (UME) 559*16kB (UME) 211*32kB (UME) 149*64kB (UM) 86*128kB (UM) 41*256kB (UME) 9*512kB (UME) 8*1024kB (ME) 2*2048kB (ME) 278*4096kB (UM) = 1224528kB
[  213.961085][ T9042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  213.992185][ T9042] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3945060kB
[  214.018810][ T9042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  214.069069][ T9042] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  214.095585][ T9042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  214.111045][ T9042] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  214.134874][   T10] rc_core: IR keymap rc-hauppauge not found
[  214.147252][ T9042] 75305 total pagecache pages
[  214.151988][ T9042] 0 pages in swap cache
[  214.153437][   T10] Registered IR keymap rc-empty
[  214.156296][ T9042] Free swap  = 124996kB
[  214.165539][ T9042] Total swap = 124996kB
[  214.169806][ T9042] 2097051 pages RAM
[  214.173641][ T9042] 0 pages HighMem/MovableOnly
[  214.176877][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.178476][ T9042] 430037 pages reserved
[  214.189807][ T9042] 0 pages cma reserved
[  214.204849][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  214.215082][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.256086][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  214.275939][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input96
[  214.301754][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.328686][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.335668][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.346169][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.384884][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.425347][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.458918][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.495085][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.535041][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.577021][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.604948][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.645121][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  214.669139][   T10] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  214.697382][   T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  214.714282][   T10] usb 5-1: USB disconnect, device number 52
[  215.028988][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.047205][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.051914][ T9080] Set syz1 is full, maxelem 6117 reached
[  215.068645][ T9087] syzkaller1: entered promiscuous mode
[  215.080026][ T9087] syzkaller1: entered allmulticast mode
[  215.239148][ T9091] block nbd4: NBD_DISCONNECT
[  215.252424][ T9089] syzkaller1: entered promiscuous mode
[  215.259909][ T9089] syzkaller1: entered allmulticast mode
[  215.300116][ T9095] FAULT_INJECTION: forcing a failure.
[  215.300116][ T9095] name failslab, interval 1, probability 0, space 0, times 0
[  215.313043][ T9095] CPU: 0 UID: 0 PID: 9095 Comm: syz.3.751 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  215.313073][ T9095] Tainted: [L]=SOFTLOCKUP
[  215.313080][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.313092][ T9095] Call Trace:
[  215.313099][ T9095]  <TASK>
[  215.313107][ T9095]  dump_stack_lvl+0xe8/0x150
[  215.313140][ T9095]  should_fail_ex+0x412/0x560
[  215.313166][ T9095]  should_failslab+0xa8/0x100
[  215.313185][ T9095]  ? skb_clone+0x212/0x3a0
[  215.313205][ T9095]  kmem_cache_alloc_noprof+0x87/0x650
[  215.313240][ T9095]  skb_clone+0x212/0x3a0
[  215.313264][ T9095]  __netlink_deliver_tap+0x424/0x8b0
[  215.313303][ T9095]  ? netlink_deliver_tap+0x2e/0x1b0
[  215.313331][ T9095]  netlink_deliver_tap+0x19c/0x1b0
[  215.313358][ T9095]  netlink_unicast+0x7e3/0x9b0
[  215.313391][ T9095]  ? __pfx_netlink_unicast+0x10/0x10
[  215.313416][ T9095]  ? netlink_sendmsg+0x650/0xb40
[  215.313440][ T9095]  ? skb_put+0x11b/0x210
[  215.313462][ T9095]  netlink_sendmsg+0x813/0xb40
[  215.313496][ T9095]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.313525][ T9095]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  215.313568][ T9095]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.313593][ T9095]  sock_sendmsg_nosec+0x112/0x150
[  215.313619][ T9095]  ____sys_sendmsg+0x589/0x8c0
[  215.313647][ T9095]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.313676][ T9095]  ? import_iovec+0x73/0xa0
[  215.313701][ T9095]  ___sys_sendmsg+0x2a5/0x360
[  215.313727][ T9095]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.313780][ T9095]  ? __fget_files+0x2a/0x420
[  215.313803][ T9095]  ? __fget_files+0x3a0/0x420
[  215.313836][ T9095]  __x64_sys_sendmsg+0x1bd/0x2a0
[  215.313858][ T9095]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  215.313888][ T9095]  ? __pfx_ksys_write+0x10/0x10
[  215.313917][ T9095]  do_syscall_64+0x14d/0xf80
[  215.313934][ T9095]  ? trace_irq_disable+0x3b/0x150
[  215.313955][ T9095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.313974][ T9095]  ? clear_bhb_loop+0x40/0x90
[  215.313997][ T9095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.314015][ T9095] RIP: 0033:0x7f191059c799
[  215.314032][ T9095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.314044][ T9095] RSP: 002b:00007f191136f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.314061][ T9095] RAX: ffffffffffffffda RBX: 00007f1910815fa0 RCX: 00007f191059c799
[  215.314074][ T9095] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  215.314085][ T9095] RBP: 00007f191136f090 R08: 0000000000000000 R09: 0000000000000000
[  215.314097][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.314108][ T9095] R13: 00007f1910816038 R14: 00007f1910815fa0 R15: 00007fff0f7f9d08
[  215.314138][ T9095]  </TASK>
[  215.611669][ T9097] netlink: 1327 bytes leftover after parsing attributes in process `syz.4.750'.
[  215.734374][ T9100] bond0: (slave rose0): Enslaving as an active interface with an up link
[  215.747195][ T9102] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  215.900797][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.945588][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.451815][ T9136] netlink: 'syz.3.761': attribute type 10 has an invalid length.
[  216.476579][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.761'.
[  216.495016][ T9136] FAULT_INJECTION: forcing a failure.
[  216.495016][ T9136] name failslab, interval 1, probability 0, space 0, times 0
[  216.517247][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.3.761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.517266][ T9136] Tainted: [L]=SOFTLOCKUP
[  216.517270][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  216.517277][ T9136] Call Trace:
[  216.517282][ T9136]  <TASK>
[  216.517287][ T9136]  dump_stack_lvl+0xe8/0x150
[  216.517306][ T9136]  should_fail_ex+0x412/0x560
[  216.517321][ T9136]  should_failslab+0xa8/0x100
[  216.517334][ T9136]  __kmalloc_node_noprof+0xf0/0x7c0
[  216.517350][ T9136]  ? qdisc_alloc+0x92/0x9f0
[  216.517367][ T9136]  qdisc_alloc+0x92/0x9f0
[  216.517385][ T9136]  qdisc_create_dflt+0x8e/0x510
[  216.517398][ T9136]  ? dev_activate+0x1a9/0x1150
[  216.517413][ T9136]  dev_activate+0x1ce/0x1150
[  216.517436][ T9136]  __dev_open+0x67a/0x830
[  216.517453][ T9136]  ? __pfx___dev_open+0x10/0x10
[  216.517465][ T9136]  ? __dev_change_flags+0x1b0/0x690
[  216.517477][ T9136]  ? __local_bh_enable_ip+0xd0/0x130
[  216.517495][ T9136]  __dev_change_flags+0x1f7/0x690
[  216.517508][ T9136]  ? __pfx___dev_change_flags+0x10/0x10
[  216.517520][ T9136]  ? __pfx___irq_work_queue_local+0x10/0x10
[  216.517533][ T9136]  ? console_unlock+0x150/0x1c0
[  216.517544][ T9136]  ? preempt_schedule_thunk+0x16/0x30
[  216.517557][ T9136]  netif_change_flags+0x88/0x1a0
[  216.517572][ T9136]  do_setlink+0xf82/0x4590
[  216.517589][ T9136]  ? __wake_up_klogd+0xe6/0x120
[  216.517615][ T9136]  ? __pfx_vprintk_emit+0x10/0x10
[  216.517640][ T9136]  ? __pfx_do_setlink+0x10/0x10
[  216.517659][ T9136]  ? __lock_acquire+0x6b5/0x2cf0
[  216.517692][ T9136]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  216.517709][ T9136]  ? rcu_is_watching+0x15/0xb0
[  216.517721][ T9136]  ? __mutex_trylock_common+0x158/0x260
[  216.517734][ T9136]  ? __pfx___mutex_trylock_common+0x10/0x10
[  216.517746][ T9136]  ? rcu_is_watching+0x15/0xb0
[  216.517756][ T9136]  ? trace_contention_end+0x3d/0x150
[  216.517768][ T9136]  ? __mutex_lock+0x320/0x1420
[  216.517783][ T9136]  ? rtnl_setlink+0x55e/0x940
[  216.517800][ T9136]  ? __pfx___mutex_lock+0x10/0x10
[  216.517817][ T9136]  ? get_net+0x13d/0x1f0
[  216.517829][ T9136]  rtnl_setlink+0x635/0x940
[  216.517846][ T9136]  ? __pfx_rtnl_setlink+0x10/0x10
[  216.517861][ T9136]  ? sock_sendmsg_nosec+0x112/0x150
[  216.517875][ T9136]  ? pointer+0x6fa/0xe50
[  216.517890][ T9136]  ? __pfx_pointer+0x10/0x10
[  216.517945][ T9136]  ? __pfx_rtnl_setlink+0x10/0x10
[  216.517959][ T9136]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  216.517975][ T9136]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  216.517989][ T9136]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  216.518002][ T9136]  ? netlink_sendmsg+0x813/0xb40
[  216.518016][ T9136]  ? sock_sendmsg_nosec+0x112/0x150
[  216.518028][ T9136]  ? ____sys_sendmsg+0x589/0x8c0
[  216.518037][ T9136]  ? ___sys_sendmsg+0x2a5/0x360
[  216.518046][ T9136]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  216.518056][ T9136]  ? do_syscall_64+0x14d/0xf80
[  216.518065][ T9136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.518081][ T9136]  netlink_rcv_skb+0x232/0x4b0
[  216.518096][ T9136]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  216.518111][ T9136]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  216.518130][ T9136]  ? netlink_deliver_tap+0x2e/0x1b0
[  216.518148][ T9136]  netlink_unicast+0x80f/0x9b0
[  216.518165][ T9136]  ? __pfx_netlink_unicast+0x10/0x10
[  216.518178][ T9136]  ? netlink_sendmsg+0x650/0xb40
[  216.518191][ T9136]  ? skb_put+0x11b/0x210
[  216.518203][ T9136]  netlink_sendmsg+0x813/0xb40
[  216.518222][ T9136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.518237][ T9136]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  216.518257][ T9136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.518271][ T9136]  sock_sendmsg_nosec+0x112/0x150
[  216.518285][ T9136]  ____sys_sendmsg+0x589/0x8c0
[  216.518300][ T9136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.518315][ T9136]  ? import_iovec+0x73/0xa0
[  216.518329][ T9136]  ___sys_sendmsg+0x2a5/0x360
[  216.518343][ T9136]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.518370][ T9136]  ? __fget_files+0x2a/0x420
[  216.518382][ T9136]  ? __fget_files+0x3a0/0x420
[  216.518400][ T9136]  __x64_sys_sendmsg+0x1bd/0x2a0
[  216.518412][ T9136]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  216.518430][ T9136]  ? __pfx_ksys_write+0x10/0x10
[  216.518445][ T9136]  do_syscall_64+0x14d/0xf80
[  216.518454][ T9136]  ? trace_irq_disable+0x3b/0x150
[  216.518465][ T9136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.518475][ T9136]  ? clear_bhb_loop+0x40/0x90
[  216.518488][ T9136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.518498][ T9136] RIP: 0033:0x7f191059c799
[  216.518508][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.518517][ T9136] RSP: 002b:00007f191136f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.518529][ T9136] RAX: ffffffffffffffda RBX: 00007f1910815fa0 RCX: 00007f191059c799
[  216.518536][ T9136] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  216.518543][ T9136] RBP: 00007f191136f090 R08: 0000000000000000 R09: 0000000000000000
[  216.518549][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.518555][ T9136] R13: 00007f1910816038 R14: 00007f1910815fa0 R15: 00007fff0f7f9d08
[  216.518571][ T9136]  </TASK>
[  216.518581][ T9136] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  216.764921][ T5848] Bluetooth: hci4: command 0x2016 tx timeout
[  216.775969][ T9136] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  216.777697][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  216.864030][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.993684][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'.
[  217.061610][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.092960][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'.
[  217.123768][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.134489][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.144402][   T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  217.153567][   T10] usb 5-1: config 1 has no interface number 0
[  217.159863][   T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  217.172461][   T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  217.185743][   T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.197266][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'.
[  217.212228][   T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  217.221762][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.230803][   T10] usb 5-1: Product: syz
[  217.237699][   T10] usb 5-1: Manufacturer: syz
[  217.242801][   T10] usb 5-1: SerialNumber: syz
[  217.264031][ T9138] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  217.364993][ T5891] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  217.383933][ T9150] netlink: 'syz.1.767': attribute type 10 has an invalid length.
[  217.391822][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.767'.
[  217.403244][ T9150] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  217.476893][ T9138] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  217.494796][ T5891] usb 4-1: device descriptor read/64, error -71
[  217.654162][ T9155] netlink: 'syz.0.769': attribute type 10 has an invalid length.
[  217.662220][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.769'.
[  217.675230][ T9155] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  217.692191][   T10] usb 5-1: Incompatible driver and firmware versions
[  217.728411][   T10] usb 5-1: USB disconnect, device number 53
[  217.746381][ T5891] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  217.766689][ T5945] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  217.852105][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.861086][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.914851][ T5891] usb 4-1: device descriptor read/64, error -71
[  217.922022][ T5945] usb 2-1: device descriptor read/64, error -71
[  217.931778][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  217.941195][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.941216][ T5838] Tainted: [L]=SOFTLOCKUP
[  217.941220][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  217.941228][ T5838] Workqueue: hci1 hci_rx_work
[  217.941250][ T5838] Call Trace:
[  217.941255][ T5838]  <TASK>
[  217.941261][ T5838]  dump_stack_lvl+0xe8/0x150
[  217.941280][ T5838]  sysfs_create_dir_ns+0x271/0x2a0
[  217.941296][ T5838]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  217.941312][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[  217.941329][ T5838]  kobject_add_internal+0x62b/0xd00
[  217.941346][ T5838]  kobject_add+0x163/0x240
[  217.941361][ T5838]  ? __pfx_kobject_add+0x10/0x10
[  217.941386][ T5838]  ? _raw_spin_unlock+0x28/0x50
[  217.941403][ T5838]  ? get_device_parent+0x366/0x3a0
[  217.941423][ T5838]  device_add+0x408/0xb70
[  217.941440][ T5838]  hci_conn_add_sysfs+0xd5/0x210
[  217.941458][ T5838]  le_conn_complete_evt+0xf1d/0x1430
[  217.941477][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  217.941489][ T5838]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  217.941502][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[  217.941513][ T5838]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  217.941523][ T5838]  ? skb_pull_data+0xfb/0x200
[  217.941539][ T5838]  hci_le_conn_complete_evt+0x187/0x470
[  217.941555][ T5838]  hci_event_packet+0x7af/0x12c0
[  217.941574][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  217.941587][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[  217.941605][ T5838]  ? kcov_remote_start+0x49a/0x7a0
[  217.941620][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[  217.941635][ T5838]  hci_rx_work+0x3ee/0x1040
[  217.941656][ T5838]  ? process_one_work+0x8bb/0x1780
[  217.941672][ T5838]  process_one_work+0x9ab/0x1780
[  217.941699][ T5838]  ? __pfx_process_one_work+0x10/0x10
[  217.941714][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[  217.941735][ T5838]  worker_thread+0xba8/0x11e0
[  217.941750][ T5838]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  217.941766][ T5838]  ? __kthread_parkme+0x7a/0x1f0
[  217.941777][ T5838]  ? __kthread_parkme+0x19c/0x1f0
[  217.941791][ T5838]  kthread+0x388/0x470
[  217.941804][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  217.941819][ T5838]  ? __pfx_kthread+0x10/0x10
[  217.941832][ T5838]  ret_from_fork+0x51e/0xb90
[  217.941850][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[  217.941865][ T5838]  ? __switch_to+0xc7d/0x1450
[  217.941881][ T5838]  ? __pfx_kthread+0x10/0x10
[  217.941894][ T5838]  ret_from_fork_asm+0x1a/0x30
[  217.941913][ T5838]  </TASK>
[  217.941930][ T5838] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  217.989435][ T5838] Bluetooth: hci1: failed to register connection device
[  218.045322][ T5891] usb usb4-port1: attempt power cycle
[  218.052383][ T5843] Bluetooth: hci1: command 0x2016 tx timeout
[  218.194843][ T5945] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  218.264678][ T9167] block nbd0: not configured, cannot reconfigure
[  218.366447][ T5945] usb 2-1: device descriptor read/64, error -71
[  218.404863][ T5891] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  218.426381][ T5891] usb 4-1: device descriptor read/8, error -71
[  218.487098][ T5945] usb usb2-port1: attempt power cycle
[  218.686807][ T5891] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  218.716747][ T5891] usb 4-1: device descriptor read/8, error -71
[  218.836092][ T5891] usb usb4-port1: unable to enumerate USB device
[  218.844881][ T5945] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  218.866184][ T5945] usb 2-1: device descriptor read/8, error -71
[  218.924387][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.938094][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.134909][ T5945] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  219.156172][ T5945] usb 2-1: device descriptor read/8, error -71
[  219.204838][ T5891] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  219.265177][ T5945] usb usb2-port1: unable to enumerate USB device
[  219.355722][ T5891] usb 5-1: Using ep0 maxpacket: 16
[  219.362852][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.373216][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  219.384256][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  219.393957][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  219.403717][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.418642][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  219.427820][ T5891] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  219.435919][ T5891] usb 5-1: Manufacturer: syz
[  219.442341][ T5891] usb 5-1: config 0 descriptor??
[  219.526181][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.779'.
[  219.927927][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.938329][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.006907][ T5843] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  220.018933][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.018965][ T5843] Tainted: [L]=SOFTLOCKUP
[  220.018973][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  220.018987][ T5843] Workqueue: hci1 hci_rx_work
[  220.019023][ T5843] Call Trace:
[  220.019031][ T5843]  <TASK>
[  220.019040][ T5843]  dump_stack_lvl+0xe8/0x150
[  220.019074][ T5843]  sysfs_create_dir_ns+0x271/0x2a0
[  220.019105][ T5843]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  220.019133][ T5843]  ? do_raw_spin_unlock+0xf5/0x210
[  220.019163][ T5843]  kobject_add_internal+0x62b/0xd00
[  220.019196][ T5843]  kobject_add+0x163/0x240
[  220.019223][ T5843]  ? __pfx_kobject_add+0x10/0x10
[  220.019246][ T5843]  ? _raw_spin_unlock+0x28/0x50
[  220.019278][ T5843]  ? get_device_parent+0x366/0x3a0
[  220.019313][ T5843]  device_add+0x408/0xb70
[  220.019346][ T5843]  hci_conn_add_sysfs+0xd5/0x210
[  220.019378][ T5843]  le_conn_complete_evt+0xf1d/0x1430
[  220.019417][ T5843]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  220.019441][ T5843]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  220.019466][ T5843]  ? __pfx___mutex_lock+0x10/0x10
[  220.019486][ T5843]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  220.019515][ T5843]  ? skb_pull_data+0xfb/0x200
[  220.019544][ T5843]  hci_le_conn_complete_evt+0x187/0x470
[  220.019573][ T5843]  hci_event_packet+0x7af/0x12c0
[  220.019609][ T5843]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  220.019637][ T5843]  ? __pfx_hci_event_packet+0x10/0x10
[  220.019672][ T5843]  ? kcov_remote_start+0x49a/0x7a0
[  220.019698][ T5843]  ? hci_send_to_monitor+0xe2/0x590
[  220.019726][ T5843]  hci_rx_work+0x3ee/0x1040
[  220.019767][ T5843]  ? process_one_work+0x8bb/0x1780
[  220.019797][ T5843]  process_one_work+0x9ab/0x1780
[  220.019848][ T5843]  ? __pfx_process_one_work+0x10/0x10
[  220.019876][ T5843]  ? do_raw_spin_lock+0x12b/0x2f0
[  220.019918][ T5843]  worker_thread+0xba8/0x11e0
[  220.019961][ T5843]  kthread+0x388/0x470
[  220.019984][ T5843]  ? __pfx_worker_thread+0x10/0x10
[  220.020014][ T5843]  ? __pfx_kthread+0x10/0x10
[  220.020039][ T5843]  ret_from_fork+0x51e/0xb90
[  220.020074][ T5843]  ? __pfx_ret_from_fork+0x10/0x10
[  220.020099][ T5843]  ? __switch_to+0xc7d/0x1450
[  220.020127][ T5843]  ? __pfx_kthread+0x10/0x10
[  220.020152][ T5843]  ret_from_fork_asm+0x1a/0x30
[  220.020187][ T5843]  </TASK>
[  220.020604][ T5843] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  220.084440][ T5843] Bluetooth: hci1: failed to register connection device
[  220.290003][ T5843] Bluetooth: hci1: command 0x2016 tx timeout
[  220.622592][ T5945] IPVS: starting estimator thread 0...
[  220.714876][ T9208] IPVS: using max 29 ests per chain, 69600 per kthread
[  220.751709][ T9212] FAULT_INJECTION: forcing a failure.
[  220.751709][ T9212] name failslab, interval 1, probability 0, space 0, times 0
[  220.770052][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.1.788 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.770082][ T9212] Tainted: [L]=SOFTLOCKUP
[  220.770089][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  220.770100][ T9212] Call Trace:
[  220.770108][ T9212]  <TASK>
[  220.770117][ T9212]  dump_stack_lvl+0xe8/0x150
[  220.770151][ T9212]  should_fail_ex+0x412/0x560
[  220.770178][ T9212]  should_failslab+0xa8/0x100
[  220.770198][ T9212]  ? skb_clone+0x212/0x3a0
[  220.770219][ T9212]  kmem_cache_alloc_noprof+0x87/0x650
[  220.770253][ T9212]  skb_clone+0x212/0x3a0
[  220.770276][ T9212]  __netlink_deliver_tap+0x424/0x8b0
[  220.770313][ T9212]  ? netlink_deliver_tap+0x2e/0x1b0
[  220.770340][ T9212]  netlink_deliver_tap+0x19c/0x1b0
[  220.770367][ T9212]  netlink_unicast+0x7e3/0x9b0
[  220.770398][ T9212]  ? __pfx_netlink_unicast+0x10/0x10
[  220.770425][ T9212]  ? netlink_sendmsg+0x650/0xb40
[  220.770448][ T9212]  ? skb_put+0x11b/0x210
[  220.770469][ T9212]  netlink_sendmsg+0x813/0xb40
[  220.770503][ T9212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.770531][ T9212]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  220.770567][ T9212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.770593][ T9212]  sock_sendmsg_nosec+0x112/0x150
[  220.770620][ T9212]  ____sys_sendmsg+0x589/0x8c0
[  220.770649][ T9212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.770673][ T9212]  ? import_iovec+0x73/0xa0
[  220.770704][ T9212]  ___sys_sendmsg+0x2a5/0x360
[  220.770726][ T9212]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.770771][ T9212]  ? __fget_files+0x2a/0x420
[  220.770793][ T9212]  ? __fget_files+0x3a0/0x420
[  220.770824][ T9212]  __x64_sys_sendmsg+0x1bd/0x2a0
[  220.770846][ T9212]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  220.770875][ T9212]  ? __pfx_ksys_write+0x10/0x10
[  220.770902][ T9212]  do_syscall_64+0x14d/0xf80
[  220.770917][ T9212]  ? trace_irq_disable+0x3b/0x150
[  220.770944][ T9212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.770963][ T9212]  ? clear_bhb_loop+0x40/0x90
[  220.770985][ T9212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.771003][ T9212] RIP: 0033:0x7f857299c799
[  220.771020][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.771035][ T9212] RSP: 002b:00007f8573895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.771054][ T9212] RAX: ffffffffffffffda RBX: 00007f8572c15fa0 RCX: 00007f857299c799
[  220.771066][ T9212] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003
[  220.771077][ T9212] RBP: 00007f8573895090 R08: 0000000000000000 R09: 0000000000000000
[  220.771089][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.771099][ T9212] R13: 00007f8572c16038 R14: 00007f8572c15fa0 R15: 00007fff3a898ed8
[  220.771128][ T9212]  </TASK>
[  220.771313][ T9212] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  221.253032][ T9223] =======================================================
[  221.253032][ T9223] WARNING: The mand mount option has been deprecated and
[  221.253032][ T9223]          and is ignored by this kernel. Remove the mand
[  221.253032][ T9223]          option from the mount to silence this warning.
[  221.253032][ T9223] =======================================================
[  221.293155][ T9223] tmpfs: Unknown parameter 'in¿e32'
[  221.350229][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.360962][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.487866][ T9230] FAULT_INJECTION: forcing a failure.
[  221.487866][ T9230] name failslab, interval 1, probability 0, space 0, times 0
[  221.501377][ T9230] CPU: 0 UID: 0 PID: 9230 Comm: syz.3.796 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.501395][ T9230] Tainted: [L]=SOFTLOCKUP
[  221.501400][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  221.501406][ T9230] Call Trace:
[  221.501411][ T9230]  <TASK>
[  221.501416][ T9230]  dump_stack_lvl+0xe8/0x150
[  221.501436][ T9230]  should_fail_ex+0x412/0x560
[  221.501453][ T9230]  should_failslab+0xa8/0x100
[  221.501466][ T9230]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  221.501481][ T9230]  ? __alloc_skb+0x186/0x7d0
[  221.501497][ T9230]  ? __alloc_skb+0x1d0/0x7d0
[  221.501510][ T9230]  ? __local_bh_enable_ip+0xd0/0x130
[  221.501528][ T9230]  __alloc_skb+0x1d0/0x7d0
[  221.501544][ T9230]  netlink_sendmsg+0x5d4/0xb40
[  221.501563][ T9230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.501578][ T9230]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  221.501598][ T9230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.501611][ T9230]  sock_sendmsg_nosec+0x112/0x150
[  221.501626][ T9230]  ____sys_sendmsg+0x589/0x8c0
[  221.501641][ T9230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.501655][ T9230]  ? import_iovec+0x73/0xa0
[  221.501669][ T9230]  ___sys_sendmsg+0x2a5/0x360
[  221.501682][ T9230]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.501708][ T9230]  ? __fget_files+0x2a/0x420
[  221.501724][ T9230]  ? __fget_files+0x3a0/0x420
[  221.501754][ T9230]  __x64_sys_sendmsg+0x1bd/0x2a0
[  221.501776][ T9230]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.501805][ T9230]  ? __pfx_ksys_write+0x10/0x10
[  221.501824][ T9230]  do_syscall_64+0x14d/0xf80
[  221.501835][ T9230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.501845][ T9230]  ? clear_bhb_loop+0x40/0x90
[  221.501860][ T9230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.501870][ T9230] RIP: 0033:0x7f191059c799
[  221.501881][ T9230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.501890][ T9230] RSP: 002b:00007f191136f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.501902][ T9230] RAX: ffffffffffffffda RBX: 00007f1910815fa0 RCX: 00007f191059c799
[  221.501909][ T9230] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  221.501916][ T9230] RBP: 00007f191136f090 R08: 0000000000000000 R09: 0000000000000000
[  221.501922][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.501928][ T9230] R13: 00007f1910816038 R14: 00007f1910815fa0 R15: 00007fff0f7f9d08
[  221.501943][ T9230]  </TASK>
[  221.567635][ T5906] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  221.904961][ T5945] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  221.906973][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short
[  221.922200][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.932367][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  221.944457][ T5906] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  221.954080][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.963131][ T5906] usb 2-1: Product: syz
[  221.967654][ T5906] usb 2-1: Manufacturer: syz
[  221.972289][ T5906] usb 2-1: SerialNumber: syz
[  222.075468][ T5945] usb 4-1: Using ep0 maxpacket: 32
[  222.081167][ T5843] Bluetooth: hci4: connection err: -111
[  222.082768][ T5945] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  222.096644][ T5945] usb 4-1: config 0 has no interface number 0
[  222.104811][ T5891] rc_core: IR keymap rc-hauppauge not found
[  222.110857][ T5945] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  222.122678][ T5891] Registered IR keymap rc-empty
[  222.128036][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.137731][ T5945] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.151191][ T5945] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  222.161744][ T5945] usb 4-1: config 0 interface 196 has no altsetting 0
[  222.174885][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.188186][ T5945] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  222.198969][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.212341][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  222.218326][ T5906] usb 2-1: USB disconnect, device number 55
[  222.233128][ T5945] usb 4-1: Product: syz
[  222.239138][ T5945] usb 4-1: Manufacturer: syz
[  222.248120][ T5945] usb 4-1: SerialNumber: syz
[  222.262796][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100
[  222.280314][ T5945] usb 4-1: config 0 descriptor??
[  222.293956][ T9232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  222.309302][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.354886][ T5838] Bluetooth: hci1: command 0x2016 tx timeout
[  222.355333][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.407994][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.448831][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.475968][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.517783][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.565064][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.595487][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.647231][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.686586][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  222.730511][ T5891] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  222.753919][ T5891] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  222.771751][ T5945] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  222.776029][ T9264] FAULT_INJECTION: forcing a failure.
[  222.776029][ T9264] name failslab, interval 1, probability 0, space 0, times 0
[  222.790766][ T5891] usb 5-1: USB disconnect, device number 54
[  222.807552][ T5945] ipheth 4-1:0.196: probe with driver ipheth failed with error -71
[  222.810078][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.4.800 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  222.810107][ T9264] Tainted: [L]=SOFTLOCKUP
[  222.810115][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  222.810126][ T9264] Call Trace:
[  222.810133][ T9264]  <TASK>
[  222.810141][ T9264]  dump_stack_lvl+0xe8/0x150
[  222.810173][ T9264]  should_fail_ex+0x412/0x560
[  222.810208][ T9264]  should_failslab+0xa8/0x100
[  222.810229][ T9264]  __kmalloc_noprof+0xe8/0x760
[  222.810259][ T9264]  ? iter_file_splice_write+0x1da/0x10f0
[  222.810290][ T9264]  iter_file_splice_write+0x1da/0x10f0
[  222.810314][ T9264]  ? __vfs_getxattr+0x3f4/0x430
[  222.810341][ T9264]  ? __lock_acquire+0x6b5/0x2cf0
[  222.810369][ T9264]  ? cap_inode_need_killpriv+0x51/0x60
[  222.810390][ T9264]  ? bpf_lsm_inode_need_killpriv+0x9/0x20
[  222.810407][ T9264]  ? security_inode_need_killpriv+0x71/0x240
[  222.810428][ T9264]  ? file_remove_privs_flags+0x458/0x640
[  222.810462][ T9264]  ? __pfx_iter_file_splice_write+0x10/0x10
[  222.810486][ T9264]  ? __pfx_file_remove_privs_flags+0x10/0x10
[  222.810531][ T9264]  backing_file_splice_write+0x3c0/0x5d0
[  222.810564][ T9264]  ovl_splice_write+0x45b/0x5b0
[  222.810593][ T9264]  ? __pfx_ovl_splice_write+0x10/0x10
[  222.810615][ T9264]  ? __pfx_ovl_file_end_write+0x10/0x10
[  222.810654][ T9264]  ? __pfx_ovl_splice_write+0x10/0x10
[  222.810677][ T9264]  direct_splice_actor+0x101/0x160
[  222.810704][ T9264]  splice_direct_to_actor+0x53a/0xc70
[  222.810739][ T9264]  ? __pfx_direct_splice_actor+0x10/0x10
[  222.810771][ T9264]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  222.810795][ T9264]  ? get_pid_task+0x20/0x1f0
[  222.810823][ T9264]  do_splice_direct+0x195/0x290
[  222.810850][ T9264]  ? __pfx_do_splice_direct+0x10/0x10
[  222.810875][ T9264]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  222.810906][ T9264]  ? rw_verify_area+0x255/0x4d0
[  222.810936][ T9264]  do_sendfile+0x535/0x7d0
[  222.810966][ T9264]  ? __pfx_do_sendfile+0x10/0x10
[  222.811001][ T9264]  __se_sys_sendfile64+0xdf/0x1a0
[  222.811024][ T9264]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  222.811056][ T9264]  do_syscall_64+0x14d/0xf80
[  222.811073][ T9264]  ? trace_irq_disable+0x3b/0x150
[  222.811094][ T9264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.811111][ T9264]  ? clear_bhb_loop+0x40/0x90
[  222.811133][ T9264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.811151][ T9264] RIP: 0033:0x7fd5eef9c799
[  222.811169][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.811184][ T9264] RSP: 002b:00007fd5efd8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  222.811210][ T9264] RAX: ffffffffffffffda RBX: 00007fd5ef215fa0 RCX: 00007fd5eef9c799
[  222.811223][ T9264] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003
[  222.811235][ T9264] RBP: 00007fd5efd8d090 R08: 0000000000000000 R09: 0000000000000000
[  222.811245][ T9264] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001
[  222.811257][ T9264] R13: 00007fd5ef216038 R14: 00007fd5ef215fa0 R15: 00007ffe045ff588
[  222.811286][ T9264]  </TASK>
[  223.147428][ T5945] usb 4-1: USB disconnect, device number 68
[  223.273656][ T9277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.802'.
[  223.392460][ T9281] program syz.3.803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.485767][ T9287] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  223.704917][  T963] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  223.874892][  T963] usb 5-1: Using ep0 maxpacket: 16
[  223.881380][  T963] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  223.891585][  T963] usb 5-1: config 0 has no interface number 0
[  223.897760][ T5906] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  223.906706][  T963] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  223.917168][  T963] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  223.929682][  T963] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  223.938892][  T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.947592][  T963] usb 5-1: Product: syz
[  223.951775][  T963] usb 5-1: Manufacturer: syz
[  223.958385][  T963] usb 5-1: SerialNumber: syz
[  223.966510][  T963] usb 5-1: config 0 descriptor??
[  223.972338][ T9285] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  223.980642][ T9285] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  224.065392][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  224.072620][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.083041][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  224.094287][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  224.104095][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  224.114006][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.128611][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  224.144412][ T5906] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  224.155319][ T5906] usb 2-1: Manufacturer: syz
[  224.163264][ T5906] usb 2-1: config 0 descriptor??
[  224.199773][ T9285] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  224.207449][ T9285] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  224.434963][ T5848] Bluetooth: hci1: command 0x2016 tx timeout
[  224.618034][  T963] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  224.628897][  T963] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[  224.642572][  T963] asix 5-1:0.251: probe with driver asix failed with error -61
[  224.674970][ T5848] Bluetooth: hci2: command 0x2016 tx timeout
[  224.832780][ T5953] usb 5-1: USB disconnect, device number 55
[  224.934998][  T963] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  225.064504][   T29] audit: type=1326 audit(1773764704.421:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4719c799 code=0x7fc00000
[  225.116001][  T963] usb 4-1: Using ep0 maxpacket: 16
[  225.133498][  T963] usb 4-1: config 166 has an invalid interface number: 177 but max is 1
[  225.143193][  T963] usb 4-1: config 166 has an invalid interface number: 34 but max is 1
[  225.152951][  T963] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config
[  225.164984][  T963] usb 4-1: config 166 has no interface number 0
[  225.170943][ T9312] sctp: Trying to GSO but underlying device doesn't support it.
[  225.171303][  T963] usb 4-1: config 166 has no interface number 1
[  225.186201][  T963] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  225.198793][  T963] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  225.210474][  T963] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  225.221825][  T963] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  225.235430][  T963] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0
[  225.248586][  T963] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0
[  225.260651][  T963] usb 4-1: config 166 interface 177 has no altsetting 0
[  225.269385][  T963] usb 4-1: config 166 interface 34 has no altsetting 0
[  225.277475][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.280044][  T963] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  225.287817][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.297351][  T963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.313288][  T963] usb 4-1: Product: syz
[  225.318574][  T963] usb 4-1: Manufacturer: syz
[  225.323414][  T963] usb 4-1: SerialNumber: syz
[  225.504310][ T9322] netlink: 'syz.4.813': attribute type 11 has an invalid length.
[  225.536961][  T963] ums-realtek 4-1:166.177: USB Mass Storage device detected
[  225.568296][ T9322] syzkaller1: entered promiscuous mode
[  225.573811][ T9322] syzkaller1: entered allmulticast mode
[  225.591556][ T9322] netlink: 'syz.4.813': attribute type 10 has an invalid length.
[  225.618992][ T9322] team0: Device vxcan1 is of different type
[  225.620149][  T963] ums-realtek 4-1:166.34: USB Mass Storage device detected
[  225.682582][  T963] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[  225.690456][  T963] uvcvideo 4-1:166.34: No valid video chain found.
[  225.704998][  T963] usb 4-1: USB disconnect, device number 69
[  225.977380][ T9334] Bluetooth: MGMT ver 1.23
[  226.086792][  T963] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  226.264943][  T963] usb 5-1: Using ep0 maxpacket: 16
[  226.282141][  T963] usb 5-1: unable to get BOS descriptor or descriptor too short
[  226.291780][  T963] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  226.302085][  T963] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  226.314970][  T963] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40
[  226.325789][  T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.333967][  T963] usb 5-1: Product: syz
[  226.338827][  T963] usb 5-1: Manufacturer: syz
[  226.343605][  T963] usb 5-1: SerialNumber: syz
[  226.524810][ T5838] Bluetooth: hci1: command 0x2016 tx timeout
[  226.562061][  T963] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  226.755602][ T5843] Bluetooth: hci2: command 0x2016 tx timeout
[  226.805212][ T5906] rc_core: IR keymap rc-hauppauge not found
[  226.810163][ T9352] FAULT_INJECTION: forcing a failure.
[  226.810163][ T9352] name failslab, interval 1, probability 0, space 0, times 0
[  226.817639][  T963] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -12
[  226.834063][ T5906] Registered IR keymap rc-empty
[  226.840244][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  226.855032][  T963] usb 5-1: USB disconnect, device number 56
[  226.857827][ T9352] CPU: 0 UID: 0 PID: 9352 Comm: syz.0.821 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  226.857863][ T9352] Tainted: [L]=SOFTLOCKUP
[  226.857870][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  226.857881][ T9352] Call Trace:
[  226.857889][ T9352]  <TASK>
[  226.857897][ T9352]  dump_stack_lvl+0xe8/0x150
[  226.857926][ T9352]  should_fail_ex+0x412/0x560
[  226.857952][ T9352]  should_failslab+0xa8/0x100
[  226.857972][ T9352]  ? skb_clone+0x212/0x3a0
[  226.857991][ T9352]  kmem_cache_alloc_noprof+0x87/0x650
[  226.858024][ T9352]  skb_clone+0x212/0x3a0
[  226.858047][ T9352]  __netlink_deliver_tap+0x424/0x8b0
[  226.858084][ T9352]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.858109][ T9352]  netlink_deliver_tap+0x19c/0x1b0
[  226.858136][ T9352]  netlink_unicast+0x7e3/0x9b0
[  226.858167][ T9352]  ? __pfx_netlink_unicast+0x10/0x10
[  226.858191][ T9352]  ? netlink_sendmsg+0x650/0xb40
[  226.858215][ T9352]  ? skb_put+0x11b/0x210
[  226.858235][ T9352]  netlink_sendmsg+0x813/0xb40
[  226.858268][ T9352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.858295][ T9352]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  226.858330][ T9352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.858355][ T9352]  sock_sendmsg_nosec+0x112/0x150
[  226.858384][ T9352]  ____sys_sendmsg+0x589/0x8c0
[  226.858410][ T9352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.858438][ T9352]  ? import_iovec+0x73/0xa0
[  226.858463][ T9352]  ___sys_sendmsg+0x2a5/0x360
[  226.858487][ T9352]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.858537][ T9352]  ? __fget_files+0x2a/0x420
[  226.858559][ T9352]  ? __fget_files+0x3a0/0x420
[  226.858591][ T9352]  __x64_sys_sendmsg+0x1bd/0x2a0
[  226.858612][ T9352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.858640][ T9352]  ? __pfx_ksys_write+0x10/0x10
[  226.858668][ T9352]  do_syscall_64+0x14d/0xf80
[  226.858685][ T9352]  ? trace_irq_disable+0x3b/0x150
[  226.858705][ T9352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.858723][ T9352]  ? clear_bhb_loop+0x40/0x90
[  226.858745][ T9352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.858762][ T9352] RIP: 0033:0x7f8c4719c799
[  226.858780][ T9352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.858794][ T9352] RSP: 002b:00007f8c4810d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.858814][ T9352] RAX: ffffffffffffffda RBX: 00007f8c47415fa0 RCX: 00007f8c4719c799
[  226.858827][ T9352] RDX: 0000000020004084 RSI: 0000200000000540 RDI: 0000000000000003
[  226.858845][ T9352] RBP: 00007f8c4810d090 R08: 0000000000000000 R09: 0000000000000000
[  226.858856][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.858867][ T9352] R13: 00007f8c47416038 R14: 00007f8c47415fa0 R15: 00007fffa74be9e8
[  226.858896][ T9352]  </TASK>
[  226.999597][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.001181][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.196243][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  227.221275][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input104
[  227.299560][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.338859][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.384947][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.393947][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.825'.
[  227.408066][ T9364] FAULT_INJECTION: forcing a failure.
[  227.408066][ T9364] name failslab, interval 1, probability 0, space 0, times 0
[  227.420810][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.430517][ T9364] CPU: 0 UID: 0 PID: 9364 Comm: syz.0.826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.430547][ T9364] Tainted: [L]=SOFTLOCKUP
[  227.430554][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  227.430569][ T9364] Call Trace:
[  227.430577][ T9364]  <TASK>
[  227.430585][ T9364]  dump_stack_lvl+0xe8/0x150
[  227.430617][ T9364]  should_fail_ex+0x412/0x560
[  227.430643][ T9364]  should_failslab+0xa8/0x100
[  227.430665][ T9364]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  227.430694][ T9364]  ? css_rstat_updated+0x23a/0x530
[  227.430717][ T9364]  ? __get_vm_area_node+0x13f/0x300
[  227.430748][ T9364]  __get_vm_area_node+0x13f/0x300
[  227.430784][ T9364]  __vmalloc_node_range_noprof+0x36a/0x1750
[  227.430810][ T9364]  ? copy_process+0x89b/0x4430
[  227.430856][ T9364]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  227.430890][ T9364]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  227.430920][ T9364]  ? rcu_is_watching+0x15/0xb0
[  227.430941][ T9364]  ? memcpy_and_pad+0x48/0x80
[  227.430970][ T9364]  __vmalloc_node_noprof+0xc2/0x100
[  227.430995][ T9364]  ? copy_process+0x89b/0x4430
[  227.431018][ T9364]  ? copy_process+0x89b/0x4430
[  227.431045][ T9364]  dup_task_struct+0x298/0x840
[  227.431074][ T9364]  copy_process+0x89b/0x4430
[  227.431132][ T9364]  ? __pfx_copy_process+0x10/0x10
[  227.431166][ T9364]  ? mutex_init_lockdep+0xdf/0x110
[  227.431190][ T9364]  vhost_task_create+0x1f9/0x380
[  227.431213][ T9364]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  227.431233][ T9364]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  227.431255][ T9364]  ? __pfx_vhost_task_create+0x10/0x10
[  227.431286][ T9364]  ? __pfx_vhost_task_fn+0x10/0x10
[  227.431316][ T9364]  ? __lock_acquire+0x6b5/0x2cf0
[  227.431350][ T9364]  kvm_mmu_post_init_vm+0x14c/0x300
[  227.431376][ T9364]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  227.431408][ T9364]  ? __mutex_trylock_common+0x158/0x260
[  227.431432][ T9364]  ? __pfx___mutex_trylock_common+0x10/0x10
[  227.431453][ T9364]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  227.431476][ T9364]  ? register_lock_class+0x31/0x2e0
[  227.431507][ T9364]  ? __lock_acquire+0x6b5/0x2cf0
[  227.431541][ T9364]  ? kasan_quarantine_put+0xbb/0x1f0
[  227.431570][ T9364]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  227.431599][ T9364]  ? do_raw_write_lock+0x11d/0x260
[  227.431638][ T9364]  kvm_vcpu_ioctl+0xa62/0xfd0
[  227.431664][ T9364]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  227.431682][ T9364]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  227.431722][ T9364]  ? __fget_files+0x2a/0x420
[  227.431749][ T9364]  ? __fget_files+0x2a/0x420
[  227.431778][ T9364]  ? __fget_files+0x3a0/0x420
[  227.431800][ T9364]  ? __fget_files+0x2a/0x420
[  227.431827][ T9364]  ? bpf_lsm_file_ioctl+0x9/0x20
[  227.431846][ T9364]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  227.431867][ T9364]  __se_sys_ioctl+0xfc/0x170
[  227.431890][ T9364]  do_syscall_64+0x14d/0xf80
[  227.431907][ T9364]  ? trace_irq_disable+0x3b/0x150
[  227.431927][ T9364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.431946][ T9364]  ? clear_bhb_loop+0x40/0x90
[  227.431969][ T9364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.431988][ T9364] RIP: 0033:0x7f8c4719c799
[  227.432006][ T9364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.432022][ T9364] RSP: 002b:00007f8c4810d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.432041][ T9364] RAX: ffffffffffffffda RBX: 00007f8c47415fa0 RCX: 00007f8c4719c799
[  227.432055][ T9364] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  227.432066][ T9364] RBP: 00007f8c4810d090 R08: 0000000000000000 R09: 0000000000000000
[  227.432077][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.432088][ T9364] R13: 00007f8c47416038 R14: 00007f8c47415fa0 R15: 00007fffa74be9e8
[  227.432119][ T9364]  </TASK>
[  227.432267][ T9364] syz.0.826: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  227.444884][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.449919][ T9364] ,cpuset=
[  227.514903][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.518819][ T9364] /,mems_allowed=0-1
[  227.863312][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  227.873692][ T9364] CPU: 1 UID: 0 PID: 9364 Comm: syz.0.826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.873721][ T9364] Tainted: [L]=SOFTLOCKUP
[  227.873727][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  227.873737][ T9364] Call Trace:
[  227.873745][ T9364]  <TASK>
[  227.873752][ T9364]  dump_stack_lvl+0xe8/0x150
[  227.873786][ T9364]  warn_alloc+0x249/0x340
[  227.873809][ T9364]  ? __pfx_warn_alloc+0x10/0x10
[  227.873827][ T9364]  ? __get_vm_area_node+0x13f/0x300
[  227.873858][ T9364]  ? __get_vm_area_node+0x2b5/0x300
[  227.873889][ T9364]  __vmalloc_node_range_noprof+0x38f/0x1750
[  227.873932][ T9364]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  227.873965][ T9364]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  227.873994][ T9364]  ? rcu_is_watching+0x15/0xb0
[  227.874014][ T9364]  ? memcpy_and_pad+0x48/0x80
[  227.874044][ T9364]  __vmalloc_node_noprof+0xc2/0x100
[  227.874071][ T9364]  ? copy_process+0x89b/0x4430
[  227.874094][ T9364]  ? copy_process+0x89b/0x4430
[  227.874123][ T9364]  dup_task_struct+0x298/0x840
[  227.874154][ T9364]  copy_process+0x89b/0x4430
[  227.874217][ T9364]  ? __pfx_copy_process+0x10/0x10
[  227.874247][ T9364]  ? mutex_init_lockdep+0xdf/0x110
[  227.874269][ T9364]  vhost_task_create+0x1f9/0x380
[  227.874290][ T9364]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  227.874311][ T9364]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  227.874333][ T9364]  ? __pfx_vhost_task_create+0x10/0x10
[  227.874361][ T9364]  ? __pfx_vhost_task_fn+0x10/0x10
[  227.874390][ T9364]  ? __lock_acquire+0x6b5/0x2cf0
[  227.874422][ T9364]  kvm_mmu_post_init_vm+0x14c/0x300
[  227.874448][ T9364]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  227.874480][ T9364]  ? __mutex_trylock_common+0x158/0x260
[  227.874504][ T9364]  ? __pfx___mutex_trylock_common+0x10/0x10
[  227.874525][ T9364]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  227.874548][ T9364]  ? register_lock_class+0x31/0x2e0
[  227.874578][ T9364]  ? __lock_acquire+0x6b5/0x2cf0
[  227.874610][ T9364]  ? kasan_quarantine_put+0xbb/0x1f0
[  227.874639][ T9364]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  227.874667][ T9364]  ? do_raw_write_lock+0x11d/0x260
[  227.874703][ T9364]  kvm_vcpu_ioctl+0xa62/0xfd0
[  227.874847][ T9364]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  227.874875][ T9364]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  227.874923][ T9364]  ? __fget_files+0x2a/0x420
[  227.874950][ T9364]  ? __fget_files+0x2a/0x420
[  227.874970][ T9364]  ? __fget_files+0x3a0/0x420
[  227.874992][ T9364]  ? __fget_files+0x2a/0x420
[  227.875016][ T9364]  ? bpf_lsm_file_ioctl+0x9/0x20
[  227.875033][ T9364]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  227.875071][ T9364]  __se_sys_ioctl+0xfc/0x170
[  227.875091][ T9364]  do_syscall_64+0x14d/0xf80
[  227.875108][ T9364]  ? trace_irq_disable+0x3b/0x150
[  227.875129][ T9364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.875148][ T9364]  ? clear_bhb_loop+0x40/0x90
[  227.875170][ T9364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.875188][ T9364] RIP: 0033:0x7f8c4719c799
[  227.875205][ T9364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.875220][ T9364] RSP: 002b:00007f8c4810d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.875248][ T9364] RAX: ffffffffffffffda RBX: 00007f8c47415fa0 RCX: 00007f8c4719c799
[  227.875262][ T9364] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  227.875273][ T9364] RBP: 00007f8c4810d090 R08: 0000000000000000 R09: 0000000000000000
[  227.875282][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.875293][ T9364] R13: 00007f8c47416038 R14: 00007f8c47415fa0 R15: 00007fffa74be9e8
[  227.875323][ T9364]  </TASK>
[  228.236099][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  228.245292][ T9364] Mem-Info:
[  228.248455][ T9364] active_anon:26017 inactive_anon:0 isolated_anon:0
[  228.248455][ T9364]  active_file:14678 inactive_file:40070 isolated_file:0
[  228.248455][ T9364]  unevictable:768 dirty:125 writeback:0
[  228.248455][ T9364]  slab_reclaimable:10856 slab_unreclaimable:95248
[  228.248455][ T9364]  mapped:33821 shmem:20567 pagetables:1500
[  228.248455][ T9364]  sec_pagetables:0 bounce:0
[  228.248455][ T9364]  kernel_misc_reclaimable:0
[  228.248455][ T9364]  free:1295773 free_pcp:8498 free_cma:0
[  228.296316][ T9364] Node 0 active_anon:103968kB inactive_anon:0kB active_file:58712kB inactive_file:160076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135284kB dirty:500kB writeback:0kB shmem:80732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12304kB pagetables:5868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  228.303341][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  228.332244][ T9364] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  228.375119][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  228.389021][ T9364] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  228.424938][  T963] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  228.425945][ T9364] lowmem_reserve[]:
[  228.434854][ T5906] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  228.447178][ T5906] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  228.451685][ T9364]  0 2480 2482 2482 2482
[  228.460412][ T5906] usb 2-1: USB disconnect, device number 56
[  228.466364][ T9364] Node 0 DMA32 free:1222288kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104068kB inactive_anon:0kB active_file:58712kB inactive_file:160076kB unevictable:1536kB writepending:500kB zspages:0kB present:3129332kB managed:2540160kB mlocked:0kB bounce:0kB free_pcp:34380kB local_pcp:21220kB free_cma:0kB
[  228.509646][ T9364] lowmem_reserve[]: 0 0 1 1 1
[  228.514490][ T9364] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1436kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:28kB free_cma:0kB
[  228.563279][ T9364] lowmem_reserve[]: 0 0 0 0 0
[  228.568521][ T9364] Node 1 Normal free:3945060kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  228.604916][ T5848] Bluetooth: hci1: command 0x2016 tx timeout
[  228.611313][ T9364] lowmem_reserve[]: 0 0 0 0 0
[  228.620172][ T9364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  228.633031][  T963] usb 5-1: Using ep0 maxpacket: 32
[  228.639438][ T9364] Node 0 DMA32: 2451*4kB (UME) 1667*8kB (UME) 509*16kB (UME) 132*32kB (UM) 117*64kB (UME) 86*128kB (UME) 42*256kB (UM) 8*512kB (UM) 10*1024kB (UME) 2*2048kB (ME) 278*4096kB (UM) = 1221876kB
[  228.658909][  T963] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  228.667602][  T963] usb 5-1: config 0 has no interface number 0
[  228.674695][  T963] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  228.675099][ T5891] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  228.685935][ T9364] Node 0 
[  228.692761][  T963] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  228.693232][ T9364] Normal: 
[  228.696119][  T963] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  228.716129][ T9364] 0*4kB 
[  228.719123][  T963] usb 5-1: config 0 interface 196 has no altsetting 0
[  228.722685][ T9364] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  228.745607][  T963] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  228.746064][ T9364] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3945060kB
[  228.764778][  T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.772900][ T9364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  228.784767][  T963] usb 5-1: Product: syz
[  228.793227][ T9364] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  228.803982][  T963] usb 5-1: Manufacturer: syz
[  228.804003][  T963] usb 5-1: SerialNumber: syz
[  228.813516][ T9364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  228.815277][  T963] usb 5-1: config 0 descriptor??
[  228.823244][ T9364] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  228.841908][ T9364] 77456 total pagecache pages
[  228.847736][ T9361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  228.855685][ T9364] 0 pages in swap cache
[  228.859933][ T9364] Free swap  = 124996kB
[  228.864187][ T9364] Total swap = 124996kB
[  228.868886][ T9364] 2097051 pages RAM
[  228.872788][ T9364] 0 pages HighMem/MovableOnly
[  228.879233][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  228.884611][ T9364] 430037 pages reserved
[  228.889170][ T9364] 0 pages cma reserved
[  228.900290][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.910761][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.937982][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  228.948219][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  228.960467][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  228.975051][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  228.986069][ T5891] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  228.994213][ T5891] usb 4-1: Manufacturer: syz
[  229.026248][ T5891] usb 4-1: config 0 descriptor??
[  229.098852][ T9379] netlink: 256 bytes leftover after parsing attributes in process `syz.0.831'.
[  229.204494][  T963] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  229.213287][  T963] ipheth 5-1:0.196: probe with driver ipheth failed with error -71
[  229.251447][  T963] usb 5-1: USB disconnect, device number 57
[  229.365496][ T9385] FAULT_INJECTION: forcing a failure.
[  229.365496][ T9385] name failslab, interval 1, probability 0, space 0, times 0
[  229.384920][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.0.833 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  229.384949][ T9385] Tainted: [L]=SOFTLOCKUP
[  229.384956][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  229.384968][ T9385] Call Trace:
[  229.384976][ T9385]  <TASK>
[  229.384987][ T9385]  dump_stack_lvl+0xe8/0x150
[  229.385019][ T9385]  should_fail_ex+0x412/0x560
[  229.385044][ T9385]  should_failslab+0xa8/0x100
[  229.385066][ T9385]  __kmalloc_noprof+0xe8/0x760
[  229.385094][ T9385]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  229.385123][ T9385]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  229.385144][ T9385]  ? is_bpf_text_address+0x26/0x2b0
[  229.385174][ T9385]  genl_family_rcv_msg_doit+0xd9/0x330
[  229.385196][ T9385]  ? __asan_memcpy+0x40/0x70
[  229.385223][ T9385]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  229.385253][ T9385]  ? apparmor_capable+0x126/0x170
[  229.385275][ T9385]  ? bpf_lsm_capable+0x9/0x20
[  229.385295][ T9385]  ? security_capable+0x7e/0x2c0
[  229.385325][ T9385]  genl_rcv_msg+0x61c/0x7a0
[  229.385353][ T9385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  229.385373][ T9385]  ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10
[  229.385396][ T9385]  ? __lock_acquire+0x6b5/0x2cf0
[  229.385434][ T9385]  netlink_rcv_skb+0x232/0x4b0
[  229.385462][ T9385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  229.385483][ T9385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  229.385519][ T9385]  ? down_read+0x62/0x2e0
[  229.385543][ T9385]  ? down_read+0x270/0x2e0
[  229.385560][ T9385]  ? genl_rcv+0xd/0x40
[  229.385581][ T9385]  genl_rcv+0x28/0x40
[  229.385600][ T9385]  netlink_unicast+0x80f/0x9b0
[  229.385632][ T9385]  ? __pfx_netlink_unicast+0x10/0x10
[  229.385664][ T9385]  ? netlink_sendmsg+0x650/0xb40
[  229.385692][ T9385]  ? skb_put+0x11b/0x210
[  229.385714][ T9385]  netlink_sendmsg+0x813/0xb40
[  229.385749][ T9385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.385778][ T9385]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  229.385814][ T9385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.385839][ T9385]  sock_sendmsg_nosec+0x112/0x150
[  229.385865][ T9385]  ____sys_sendmsg+0x589/0x8c0
[  229.385893][ T9385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.385921][ T9385]  ? import_iovec+0x73/0xa0
[  229.385948][ T9385]  ___sys_sendmsg+0x2a5/0x360
[  229.385974][ T9385]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.386028][ T9385]  ? __fget_files+0x2a/0x420
[  229.386051][ T9385]  ? __fget_files+0x3a0/0x420
[  229.386084][ T9385]  __x64_sys_sendmsg+0x1bd/0x2a0
[  229.386107][ T9385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.386136][ T9385]  ? __pfx_ksys_write+0x10/0x10
[  229.386165][ T9385]  do_syscall_64+0x14d/0xf80
[  229.386182][ T9385]  ? trace_irq_disable+0x3b/0x150
[  229.386203][ T9385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.386221][ T9385]  ? clear_bhb_loop+0x40/0x90
[  229.386244][ T9385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.386262][ T9385] RIP: 0033:0x7f8c4719c799
[  229.386281][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.386297][ T9385] RSP: 002b:00007f8c4810d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.386316][ T9385] RAX: ffffffffffffffda RBX: 00007f8c47415fa0 RCX: 00007f8c4719c799
[  229.386330][ T9385] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  229.386341][ T9385] RBP: 00007f8c4810d090 R08: 0000000000000000 R09: 0000000000000000
[  229.386353][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.386364][ T9385] R13: 00007f8c47416038 R14: 00007f8c47415fa0 R15: 00007fffa74be9e8
[  229.386395][ T9385]  </TASK>
[  229.395227][   T30] INFO: task syz.2.8:5969 blocked for more than 143 seconds.
[  229.693457][   T29] audit: type=1326 audit(1773764709.051:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.1.832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f857299c799 code=0x0
[  229.697883][   T30]       Tainted: G             L      syzkaller #0
[  229.805740][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  229.814537][   T30] task:syz.2.8         state:D stack:27712 pid:5969  tgid:5963  ppid:5846   task_flags:0x400040 flags:0x00080002
[  229.826838][   T30] Call Trace:
[  229.830216][   T30]  <TASK>
[  229.833245][   T30]  __schedule+0x1665/0x5590
[  229.845213][   T30]  ? kernel_text_address+0xa5/0xe0
[  229.852977][   T30]  ? __pfx___schedule+0x10/0x10
[  229.860732][   T30]  ? schedule+0x90/0x360
[  229.867858][   T30]  schedule+0x164/0x360
[  229.872116][   T30]  schedule_preempt_disabled+0x13/0x30
[  229.877645][   T30]  rwsem_down_read_slowpath+0x6d9/0x940
[  229.883202][   T30]  ? rwsem_down_read_slowpath+0x596/0x940
[  229.888976][   T30]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  229.895091][   T30]  ? lock_vma_under_rcu+0x3b2/0x500
[  229.900333][   T30]  down_read+0x99/0x2e0
[  229.905583][   T30]  ? uffd_lock_vma+0xa7/0x2d0
[  229.910308][   T30]  uffd_lock_vma+0xb6/0x2d0
[  229.914949][   T30]  mfill_get_vma+0xc1/0x660
[  229.919491][   T30]  mfill_atomic_copy+0x1a8/0x1580
[  229.924518][   T30]  ? __kernel_text_address+0xd/0x30
[  229.929771][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  229.935999][   T30]  ? __pfx_mfill_atomic_copy+0x10/0x10
[  229.941822][   T30]  userfaultfd_ioctl+0x2bbe/0x4c70
[  229.947018][   T30]  ? __kasan_slab_free+0x5c/0x80
[  229.951982][   T30]  ? kfree+0x1c5/0x650
[  229.962286][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  229.967862][   T30]  ? kasan_quarantine_put+0xbb/0x1f0
[  229.973177][   T30]  ? tomoyo_path_number_perm+0x219/0x630
[  229.978871][   T30]  ? tomoyo_path_number_perm+0x219/0x630
[  229.984535][   T30]  ? do_vfs_ioctl+0x1166/0x1530
[  229.989429][   T30]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  229.994483][   T30]  ? do_futex+0x333/0x420
[  229.998907][   T30]  ? __fget_files+0x2a/0x420
[  230.003516][   T30]  ? __fget_files+0x2a/0x420
[  230.009270][   T30]  ? __fget_files+0x3a0/0x420
[  230.014000][   T30]  ? __fget_files+0x2a/0x420
[  230.018662][   T30]  ? bpf_lsm_file_ioctl+0x9/0x20
[  230.023611][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  230.029392][   T30]  __se_sys_ioctl+0xfc/0x170
[  230.034016][   T30]  do_syscall_64+0x14d/0xf80
[  230.044837][   T30]  ? trace_irq_disable+0x3b/0x150
[  230.050148][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.056327][   T30]  ? clear_bhb_loop+0x40/0x90
[  230.061023][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.067391][   T30] RIP: 0033:0x7fa29a59c799
[  230.071856][   T30] RSP: 002b:00007fa29b48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.081228][   T30] RAX: ffffffffffffffda RBX: 00007fa29a816180 RCX: 00007fa29a59c799
[  230.089256][   T30] RDX: 0000200000000180 RSI: 00000000c028aa03 RDI: 0000000000000003
[  230.097282][   T30] RBP: 00007fa29a632c99 R08: 0000000000000000 R09: 0000000000000000
[  230.105297][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.114197][   T30] R13: 00007fa29a816218 R14: 00007fa29a816180 R15: 00007ffdbeea9468
[  230.122330][   T30]  </TASK>
[  230.125434][   T30] 
[  230.125434][   T30] Showing all locks held in the system:
[  230.133163][   T30] 1 lock held by khungtaskd/30:
[  230.138163][   T30]  #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  230.148105][   T30] 2 locks held by getty/5597:
[  230.152783][   T30]  #0: ffff88803778f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  230.162606][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  230.172759][   T30] 4 locks held by udevd/5836:
[  230.177527][   T30]  #0: ffff888050351e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  230.186392][   T30]  #1: ffff8880583ab080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  230.195955][   T30]  #2: ffff8880754df698 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  230.206665][   T30]  #3: ffff888021b30190 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  230.216959][   T30] 3 locks held by kworker/u9:5/5848:
[  230.222279][   T30]  #0: ffff88805794d940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  230.232564][   T30]  #1: ffffc90004417c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  230.244568][   T30]  #2: ffff88803455cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  230.254576][   T30] 5 locks held by kworker/0:5/5891:
[  230.259813][   T30]  #0: ffff888021ebf940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  230.270694][   T30]  #1: ffffc90004d87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  230.285082][   T30]  #2: ffff88802b1f3190 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  230.296056][   T30]  #3: ffff888021b30190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  230.305378][   T30]  #4: ffff888029570158 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  230.315763][   T30] 1 lock held by syz.2.8/5969:
[  230.320752][   T30]  #0: ffff88807af95ab8 (&mm->mmap_lock){++++}-{4:4}, at: uffd_lock_vma+0xb6/0x2d0
[  230.330378][   T30] 
[  230.332738][   T30] =============================================
[  230.332738][   T30] 
[  230.341502][   T30] NMI backtrace for cpu 1
[  230.341519][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.341543][   T30] Tainted: [L]=SOFTLOCKUP
[  230.341550][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  230.341561][   T30] Call Trace:
[  230.341568][   T30]  <TASK>
[  230.341582][   T30]  dump_stack_lvl+0xe8/0x150
[  230.341614][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  230.341637][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  230.341665][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  230.341689][   T30]  sys_info+0x135/0x170
[  230.341708][   T30]  watchdog+0x1002/0x1060
[  230.341736][   T30]  ? watchdog+0x1da/0x1060
[  230.341762][   T30]  kthread+0x388/0x470
[  230.341784][   T30]  ? __pfx_watchdog+0x10/0x10
[  230.341804][   T30]  ? __pfx_kthread+0x10/0x10
[  230.341826][   T30]  ret_from_fork+0x51e/0xb90
[  230.341853][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  230.341877][   T30]  ? __switch_to+0xc7d/0x1450
[  230.341902][   T30]  ? __pfx_kthread+0x10/0x10
[  230.341931][   T30]  ret_from_fork_asm+0x1a/0x30
[  230.341963][   T30]  </TASK>
[  230.341970][   T30] Sending NMI from CPU 1 to CPUs 0:
[  230.462893][    C0] NMI backtrace for cpu 0
[  230.462914][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.462936][    C0] Tainted: [L]=SOFTLOCKUP
[  230.462942][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  230.462952][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  230.462981][    C0] Code: fd 91 02 e9 d3 f1 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 12 2a 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  230.462995][    C0] RSP: 0018:ffffffff8e807dc0 EFLAGS: 00000242
[  230.463009][    C0] RAX: 00000000002ae719 RBX: ffffffff819bd2ea RCX: 0000000080000001
[  230.463021][    C0] RDX: 0000000000000001 RSI: ffffffff8e257836 RDI: ffffffff8c4a6280
[  230.463032][    C0] RBP: ffffffff8e807eb0 R08: ffff8880b843399b R09: 1ffff11017086733
[  230.463043][    C0] R10: dffffc0000000000 R11: ffffed1017086734 R12: ffffffff905441f0
[  230.463055][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1d125d8
[  230.463065][    C0] FS:  0000000000000000(0000) GS:ffff888124de2000(0000) knlGS:0000000000000000
[  230.463078][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.463090][    C0] CR2: 00007fd5ef1e92f8 CR3: 00000000751fc000 CR4: 00000000003526f0
[  230.463104][    C0] Call Trace:
[  230.463111][    C0]  <TASK>
[  230.463118][    C0]  default_idle+0x9/0x20
[  230.463134][    C0]  default_idle_call+0x72/0xb0
[  230.463151][    C0]  do_idle+0x1ba/0x5d0
[  230.463166][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.463189][    C0]  ? __pfx_do_idle+0x10/0x10
[  230.463208][    C0]  cpu_startup_entry+0x43/0x60
[  230.463223][    C0]  rest_init+0x2de/0x300
[  230.463241][    C0]  start_kernel+0x38f/0x3e0
[  230.463261][    C0]  x86_64_start_reservations+0x24/0x30
[  230.463282][    C0]  x86_64_start_kernel+0x143/0x1c0
[  230.463303][    C0]  common_startup_64+0x13e/0x147
[  230.463328][    C0]  </TASK>
[  230.652228][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  230.659089][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.669751][   T30] Tainted: [L]=SOFTLOCKUP
[  230.674150][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  230.684189][   T30] Call Trace:
[  230.687457][   T30]  <TASK>
[  230.690382][   T30]  vpanic+0x56c/0xa60
[  230.694351][   T30]  ? __pfx___schedule+0x10/0x10
[  230.699199][   T30]  ? __pfx_vpanic+0x10/0x10
[  230.703690][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  230.709833][   T30]  panic+0xc5/0xd0
[  230.713540][   T30]  ? __pfx_panic+0x10/0x10
[  230.717940][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  230.723310][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  230.729462][   T30]  watchdog+0x105b/0x1060
[  230.733785][   T30]  ? watchdog+0x1da/0x1060
[  230.738191][   T30]  kthread+0x388/0x470
[  230.742250][   T30]  ? __pfx_watchdog+0x10/0x10
[  230.746916][   T30]  ? __pfx_kthread+0x10/0x10
[  230.751503][   T30]  ret_from_fork+0x51e/0xb90
[  230.756083][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  230.761182][   T30]  ? __switch_to+0xc7d/0x1450
[  230.765855][   T30]  ? __pfx_kthread+0x10/0x10
[  230.770438][   T30]  ret_from_fork_asm+0x1a/0x30
[  230.775219][   T30]  </TASK>
[  230.778701][   T30] Kernel Offset: disabled
[  230.783019][   T30] Rebooting in 86400 seconds..