last executing test programs: 7.837690072s ago: executing program 1 (id=5488): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed", 0x1}], 0x1}, 0x40000) 7.448107187s ago: executing program 1 (id=5490): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) creat(0x0, 0xecf86c37d53049cc) keyctl$read(0xb, 0x0, 0x0, 0x0) timer_delete(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 7.276591171s ago: executing program 1 (id=5492): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000076) syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a9200090502101000020407"], 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000400)={0xd834, 0x8bc, 0x80, 0x9, 0x8000, 0x8001}) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1b3, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.172514057s ago: executing program 0 (id=5496): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000d080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000027c0)="1e7173dd51d41d41db8f5c3dee3d27207152b081e334d067bbd4b8b13694b65c796993e3fda214a27630d802a2eccad040ed28bd85540e5a69d70bc6e083b026156158e63f9e1437c8b5de9190e85d165c52f176c992110c4ee32b0e39d08d3cacb0256b7463b9879b96b4dd4386be612b31e03a23a385482484df280a57588db7a88c665144d00fe08096e2849c79a895758e0753881cf2f67700aa90595fcec0e88601c6c292ca5186e702c78a756dbd3821e94c72b52bb26b9504a3167c9b1f4102e7fc0348528ce4d0347bbe3a2578e8ef27b0f7aa8512aaa7dc1cb297554d316c92090e105ccbfe36b37270c6b6d828a3c6f33cbeb773c3c07cd7d11b3f23708bd8fad05253bcd477e0239f1fa70916099bd261a69d66a6ce2fc3187f3275aebdb314fe22794a362bfaf9fec9a57d34219ac6cce15e2b72dc42404263dd929aabb22e519613ce56d058bb97a0816a2445b9066bf0a5f451df02b32d32327f478c88c867b4b4c8bc15ee3553e8c06869c02666347f391b7670096463be77d53147df2f4b7768724c479865f6ffd7eeb6f113e43f9ecab6900af1b18675750f6240440601170b3a94de9912d659ae60ae23b29bee5c2600e71cb4a2b695e062a39880105f4fe2d72807bc2bf7dec7d529cbe62484a90f330cd3612e381aa68bd8fb498f6e031dd218e027c4d60337494168d55a43960085fb53ddb83fe142425a4bf6914d872ebfae2c6327ecc4987442d46824c7fa37c70018a5221834ecf6c9a0fb3adef2be916717b026c27c1cb1b1b1fd9d5b20c2bcd4139ba29cf0f1e7e2fc567d5eebbcc14ac3386a8df5fcc4da7f335a99602c63f3466d454ff7bff2dd02968d24adcc35518fcd3fdb4da3852fc970bd98cf7088816e4c83ecb0612afb4dbdc87bd7f66af47812f52f34ff64feefcd343ea6e0407d12281b151c1539469c30b2f876667f94229ad90f9cd1c700d80ad6180d65ee65a31769a013055e861997165476f8bdb5c4603b6118c11243ddbb2495a87367b75012138385966f62901c2af5938990c9ee58fda7e1b01c19e04ed2ac60f995d2c2708124a5c320d0422e98ed0ee8866cfe1a672dad9e7a6343976847793a9954b3d079a387e4d9762ad06c6d19861b973494635c3dacd4e6f051f2e563056939433462bd18ca4d1d44ba0caeb8ebc1f388860b6853c81a8aa9f0933b165e7f81c69b0a85cd186c50b37903adec1d01dad46a0d64f701d5fc78d5f833c11472038152e6be0dc35243e3de6edf121aa7b47c674a4c922e964b96148aaad902684737b954590cc6990fb01d1fca51743710d6cdbfbc97873a7effa39ca39e6bb85f97d6c80b421c195489a0728bccd6220354d96b52607b6f1fac80cc958e926e2dbe29c4f9d8edf25a220d079bfe1abfae4fb608135b734c6176745cc9bf491a9abaa0de721df0125d5de650eab79b8e736bd547dad206714482dd1df5130ecfa320a0d0fd0e104113e453f7b72a5162a110dfc8586a5c0da45d4e54157d4d93eff863cd7d03c885cf2f7fbff603361d4a60080a65f4610bb6f39efea3ae3de614d040c5edaa962266813a3e1a69d50cace5ed87ce1e415b40b8d840fee4b31e1a80f7824151edcb76f7b3b3eaf2537b8ab3a71562dbbf750340803a8ea2ceefba501e043a3e791093a1137275669b4d2b7fa1474955d0a118430bb680f7b4687e7d1c1db77b8a653c158dc84a6fd3bd472dd7b115afc84be3c4463941fb5558904fd7c61cb38b77bcdd75fba38cf986e740b358f8f83debe127564bad7c3e98d2d76bcb252894bae991286cd3303ede3d3594b07a44e5f1eb6734ff5e50a501328bd5755ae0318c8bdb983294edd1c394035c02e8be20531ecf08e9a02b9108b3b324624deedabe9dc18743e89e0e168248f50bae2d20e2651e022b20f09808e0bae12db02915314de58b8c0c8b35aae42f386e738b25f966fee982b754032ac07c5e910eb3f7b8851124465a85004b53aee354c0ed26d3bbc7ea9817ef5c8cbfbe16642d2c28dcb9be4d2ef37963c277405c8758035903b984344f89d4e61d13c689271462c221559247b8a39df88f3de88b8115b95186de110ec1895ee2d63e991395bfd9010b2ec233254c5ca20ad5f79a24584a4ad60dd0671fd5a6f440bda0940d64bf914d9cff46219d22b34e6fa0972862ad6313ba8d2ecc0b3fe89e7613fda0f2975e3a7a8cd9bfcb3572a8550bf727d6d54f50390ba82ec1265bff81bec855dad6b17a762cd6a3e7bbeb40576abc37bec03b3b35121d510331b9a8d1222668299f407d3f4c6fece2bb7f0c74b501bc00b69a59b42b0280a01b5bd8cb85ff357c83cc39debaf6a1ac08b7a43a9f44b7fc6ac09c15d46539c3a818f043b67c61588872f5033b87e19b4d0da6edc8c87c598e38ded058bcf0dd31607892b8064931ee25bf84f4c24fb85ee19202014e584556bd03d92dd3459d57bb120f356bccd20284c77d91c5f8b3dcd96c8ae5ae76707e4e054caffcc2c81b4b5d5af3fbd463d15add772143dd8670f320c05fe8de623561aa90a7b6c718518b31cc8bbe4ea4ec13a0284755783cdefc2fcb4dc4134fbae241ffc0c51bbb218d02f82dd113db614c0b2daf074bbabaac433f3516c04e17c193a2cc77841f2553bd17c335e260527a25cd5d7ff1814210f6de66d2a1ad0f902be4744bce3d88bcb1974a2b5c9c314326354c5e966d71def0dc2787e8f49dd6eb08e7a396cc3e106b585f0291a5d6295e5e9d184ed8d1be9b3839c22a8f786bd8140666a8d13456ed61cff578a56fc086c35ce5c97b12db44a7cb2679d457e88cbe6e7679a4bc88a10f61925c0b3d0e4314fe732eca9ea20ec1f3892cbaf8d63f8f682adde81069992aa04adba2995b08c499deef3c2cddc39db67b53d8bcd51361ac70ccb16d8d07e74986fc402556b63dd760596410e0c81a570cd308f573f1b23608dfd71eb53ac8dee383ec51c5110432e612775d2b62fa93512a5d25375adb95cfdcf1affb6ae3d3427b80e0645e92e9ed14a6d374c35eaeeb988fc46534b2fb2a8a3069e08609db06c5380b490ab7be331703af3112bc8f710231eb827c32dd7a20bdc97060aea47c62bea5184d17df8b8b52b77e68d51597c052e1125e707cee1b80927a90be5ea2ecc9cff5aa2584f349645040cba3638bf52f40c874b2c6dc85e4d7eba6caa600a3fca190c646b41023825c60c34153188fc7ccda24177a3836d6e38ee6c53d54e2b52deeda7a1749c62bf6b75761f31da46adb782b618189bb209ca4707ba4ffad42fd7c5a0724fc292a9300900835a2cc52fe2830e3101cfeb02023f0fd8624dfd68cbdf083772fbcbcb18a3f20775454013b5711c000f4af2dc3ba8556f667b5fbb702af7b1e72554de5d0bbc9cbb1a5b1e18bf50648b006663104404e1cfd8f85a2648e7b087466682c98abd4ceef567f1b4d48cb7dd9ee3891b2293f8ea24d637ef6af2c392935db6a0cb096c565cb798038ba198f63abb1a675952b0bf7f713cc06dfbcef6d6f5d908858f690004ffb5afbda1e705230d12101d815cfbf27267266fdc0105d4af6c3c7c8cd518ef440d38c98adea4bdd6193c8b92343e5be65f02a38c130c81008957fc71f8868e45a200603e0e1bf1bfb81e41826566cc2132a613b88464a05cefce14b3ba21dd4042a8a3ac97e9ea0e5b3340ff29b92ad0a61413c2e573fe79c532fe4e387b2dfd8accc4d59ae5518cc254ab5e06b52f7ed5d441baa9ff031db0b86583cd24a4071d1cb645ceceb24c2dbecb70550c8f2ca0897c8cc66a2151647fa1f975bef0585f89416c584e74c841d67618ab751dca7452c517bb28f514c63f4adbc91b9ff729bd8d244fb161ae4d6d4f083d941e5abdedecaa407a4097e2569d34417a387bb7901b9dbe7799dd83e179234fd56385b4465b298528755e00233be6787d1f113a8ef99db3b311a146723766d4ab34c9a5920a47839759d95dffb9ecfba04389f774f9bb4b04b48a282253d26c27432b450ca2b87d32b246b3b4c877cb24c9b03db9f130264cb2fdcb9a3abf23b451a7594f0d0efd9a120fd467776630a2a597ae48559b6668e15cb2b39f5223869670cc7874764a274800e837caba9fd0fbcd26588a59c345a11cd7f7b02fc3c7f8c3dee2bd388581515b7c36bf4eda71d1af0f2387bd9e96452363937f8a5bb3bc69242e9188df540a3fd0f5d88d8df0c5317ff56ed527061bd1407e94ba32446b4b7754b54f1b7506300b4919ebc357ef3c736d4e413540e0a3b8365b7f042a6282a1f077dc1504de2ca71e9ec602453d553a98d312f7241c0e7932c734d09d435700a581bd204700c842117ba3cd2162dcdd2143a33dbe427430a7527a9c7b21704a5570c8a211fa9d92bdb1cce2612708caf2ae99bda03fd456d1462563cd9720e6ad95f245fafc2f2a38170fd813086ed022d9eba3ab602b3c5009ab949c8904aa41d47897f7796ab4af2597d8a1cc48713cb672824bd6f02f29ca30215c022e734a110ece739280dafcbb6a41a1083b6c829f45126f9fbc9ecd25d8f7f55277c312f67d218d101a5651e1a7f579a14735f8f42c6e30e0dc947c53ef32ad6fab05c1a018c42a13cc89b5f261ded64b88682d9a740dcdc133eec6c96ef842849fb5effa04bb56a245135a2fd13e0482c21bf36cd01a99cd20032d274a4b100fb1a80fa08e3bec38d23db40e905060946d048dd9d16e81f54e259119b937db8c10cab9db842d7e5634dacdeba3e4d4f6d90065e32f304bff8e7f1bd1019245f6db4f261c33c2330e3ff792c7ce9282eed1bfd03b59b557ac429161aefbbb1cecadf0ea6a5d830d84be2af63cf55be8168089a3fd2f7d5c71a19d087181bf2bdd014513e533b544829ab4e7a18554eb1c3fe8648a475b81616e2b05abdf2ea348617a79818cef246f64241623668bad9cf0c018be6ce602e9d2cdf5b4052e9bea7dbfaa6f4e53a631d9046f36e3b03e7a9603902b736e7536ebc439d5c629c79a2a7b155610056f294d7aae0593e0c9f183c34d9d88ab008a05e892d48b84ea6db6e0ad7c4c3424d99e25dbaaa53b00518fa716e4d78457bd7940d26e40e4cbbc0bb1c9cce54674b1f0974f7cdd012717ff8e090b10d50e220e6b264cefce576798d9883208241e78969d1dd1d346df9b316422390357de317762cec7a86bd5d9ef77419d5b90c62fee540d056c1d1df9b9df348d981bc581b5657d70d9607d6860e5fa6caf3167fa146f5ed553f2d62497f3f3bda2d3e518e97c0b1d1552fc1c02dd8e66c03257a08b96421583e237122884546535384f5fabc42dc1c7f314a23732949146545f6d9e71e38d9ca6fad46bba762cf19a3aa650f2ce9f684fc26cfdd024aee9e6f10611d87f94276731f306ad0a6a688f951bc80a90870d993341b4a6b9babf15cb1ae067ca3ad9f5362193afe4c9da7d14f17e1a89baed52aaab5741573fb8f19824472f43343d17305414295c3ddab317b8a0b750be652f95c6cdef881dc677775335689af77ae44119739c46685c91f14e7bb3c4581cf35681433114a074ff80b07f2b716f2808f042de6d4112fbed9604557f6db64d47a93ec463bac8bb1661fa5c83411155ae675668c6c929acfb30f67920305077a9e9b173ce10277fe5d225107c33c9af9831cddbd318d82c27deaa31fd453dd0a0ced50302eea1e842cd0d7a9201231da009952bdb3fb40ea2d6010aa6f3753cb883fc298f9fa9d2362cc56b48a453f4436c0245626a6bfa6b485f2127845eb2dabf937d703e97499cff094fde3df702ab363401dd5516a0b20f9de8e61bcf6975efb3e14e0f332d80beee05dd416d7b1bdd30aee76cca9e2e3883e87105096df4b16acf398f7c4339dc55234eccf4af3f11198a1b7d10c8c7018d3bc84d168c6541f80a1108829c717b8f64476e69831d44d6386a25ec34ccbd0a015199b243f3c50c04a83a3669709f96ab94fc4ac7645fa8ccdd7ecb9db938706582d030efbd05f03ff0f8d15dcb63c79386f213a757351b1595f7238f4e274997df43dc35756211451d606478e257ccfe4ef2b15afe9a88b4479086bdbdd48272f802da938b086a7b2647eef5769cea60598c576812ed2bf02d3d427db74f16317655c9b6e06f6eefc3c93a9e521bd3f5633d1840e9ecd827c1e573df98fc9acd7d9ff5fa174d6d76a66eab6b002f9e1fdc63a876545a4b6e676b00dd58370fe0d47cb9bd4d78cb10c38656a19f244a6c68053c709ff7c817d993f7fbd855946fc3c5ca9dd270d5c033c63c3683e1e1e4f603271bc296e5a7feeae2ffa172e9a9ee024bcc2dc8ac178f99deedcce0f4394485d6d97447d93550d604e97139404dfc53616a5d2b2d9854fb3533150c7de8f08a5b1530d6899c765945734f09ef8b57ef0f16fdd8885c3a466c231ffea675093e6be525c8408e86206c420ef6ad4c6c053ff9043d5eec6f105b9d2fa82105b4196878fae17121444fe4ea366d060aa0b9f3f141c460ea0044bd285fec6f82753ff551e8ae3b41f8abf5527cfc5dc14aa10db91fceffeb1673cdc69ca6673cde90bda5f3ac7948b66a7d5e41012a3503419060fa5073db0e013d36fa2d9258853860fd294fce2d7b2f80c1f9fe4561f0b6c817203365484670ed84eae195729dcad865c41682b3255a76fe3611dad800b56c9d0b868833a7220863ae9f88c6fb5b7d57996e7793845a37fd1650c9753e5de3cb8adf1712b4cd294ec5d66c8f1ae0f2a08b76a5390565b40c34a23846260716b06738e09a94f8e5c6eede6e26e9c1722c6bd410e272167b38d01a0ff80ecb825faa31cce8c8cc99dce195923248b6cca458ad0a3c6b2abe14c5a01da3e5f4f9258efb11622a159db05e0df09d0cc4514b365ce9f6e133d40b5fa9843ec651757ac409e348a26d14d7ba49fa9cc3fbfc0c439883378bad317b9b1f196f4fa93438be6e179f80a56fe3eb2b7183b16aa9b35e16409108408ef486005f08be4eef416c883f81f6a5cde2ddcdf3b8af08f7b1f4086b272dca40767185bf131293b4efb3318d2921d0c5771dc431a73bb92bc0e756f4ef9eb7ff609abe706d33a518cad0548f3b19db0bc71160cd318a7ade83c352f6e0a6acc901a46a462054d58ed5116136e90f419c47fe26873e495d22d9575cd0df8587f89749d8785c39358d9fe507eba08c40f43819d443447dd59506a783671dceddb60b1621e38e85aa1129df76355f27906dc32143890e2e310a3a0c088787bb7f98ecba3d89587c0bdb5f23ceb9143d4d56e3f9f61e8d7d32369b33148879791eaf13ce5786569203f4f039a284e247d73a5123bc24dd78b8222f1a2f9f6bef758f9650f136123db56bfb77bef050e5b578eee0e592d448b3a0d7ff97ca382dec084adf2b9f3e69bcb20780e3e371aaeb80ed1ce8b28da3c039b89c3c7a33939f2f0678480944e8dc1a26116b21f2f0dbfef98e3d170595a4a2321a9e81fa6aaaacf5c566d2bde84281fec7289b3d518431b3e349ecd3eb2d4b42eba4146c33763fd259c8fe97e3b5ea2e6fdf8088019deba726d29f73a7b68d170e5c9b7ffac43e1a98e35981a261a12fd5be961beae81c8be172b0fe7f884aac9074bf4ac4dbac92756989bf1544f17162fca32c80a14687cb28647319ee38472344b12b3ab886370e09ee1d58ff91e0dd000d414602fb90b96089cf0d6ea84dad33eee01cf5fc000131600ac271dda11a3b91c9718d25ed94518e32e69f00924851b5d184c9b0c88865246925be3e74d1e2e07c9542b3b294c9c8532a65b90590042b7f1edc671bfc36480226d808e816b3dbfad8f3831a31e9cbcaaf928f783c620c2a438fd07509ed45c54474f60eba4a2078a0388d7ac3b92f71b6e00485f7225fb907a20aa339a25cff77a00d0e7468dd363d08ed5d969b602a411f76d17554cf2f3000fe8655973fd318b0716d7b8d97b54af69b5f7b5614d40c70f56472cc9f4cc8a3f9b0e6279305d3fe5d6c0dd76dbe9c51139ac90c97c31c381e48ce33cc28a4793880504374ada8978e1d5f1ee53d6c2ee0901b514e6bf2edf63974341ddc2efc1e01b29cff1f792e8877c3e28306807ac91d439a4f9e3bccbbe9b9a1b35d390a79d01b2dba0a4ec1fe24510175f32edbbdbabe96f2a19b5c5961896a5c698b3456820a2b205a571f55f2b824f67346593d9ad81103c0ba59072317b61fbb705899e40b680bf9700b8e07273cc2f1efbc6eb16a9cb18e78f55ce59684725e64b8836ca652e7893e78f78569eaa3faa4888f279bfc2000bfa158a93aee9c60d55c0f6595afd059065b35984c9757c00b2efa7cb37c9cc587bae28bfbfd88026fe7fc50c64e040d168e6fbc9d0e09f0c0fa57dcfac30b8e232f4139102233a134cc237d53c7948b88f6568e285ebbddb690106f52efb72c5435be8c79fa8eeff1aa39898364e2f0dd940ddbf81a5008c43b780f74639b6e97c3db28fc733d47e22d1d4e76cd5954d33d4e1ed65cde33fe7f8234f88fa0c3e877091179022ca0aba512bbb4acb44b913d4d366196bb926c86d50fe293ea3db90f6d03269705037942693edc482bc642980a215ea97f813896463e45999ae29870add658ed1e47bba084f7169ef5d74cb76a2ed887010791186b18366eb611fee78e97999559b2d70ba47b5de3fe56e8b8997f5d16e965645866314f616a7feb85c3720a48c19b5fdba40459f931e14a7db9acc61c76283aed62b009f5cfcafd2b1466defcb71192dbad917f57b2732e302db591ed5860aa1229ca08c3f1d59b0fd7cbd2f78dfbdea51675f692c2cfecc5933a1a01afd9e68d09b4dfa838ef61c30880a8875728acbdfc5e2707796f6cf53fd8f06a31c9a905b7e64b1e90659cf1761c52a28582bd370fe2787d2d596b769458305e4f98cf9c452e1d0318b7399776b16a8f62da9e8a8887acd1b3636c417720e5b99d958e425fbcc91bd66792fe71b3d301f6a89ba276516bffa3e9a486a50ed7ded03d23696b338e09309133a618f38924e09c4be7aa753356c90d3144ea36bc8008a01c04a67c9c51a4a8afefdba1256cc269cdfe4c71a95b6aea8b698cfabecd3ab157be8d0e910b87bae697635021486adad0ce4a0912e18efe43e4a07e4172f76b9a21f3398daf58722486d968a43e5e2dccb977cf69e91cf830d09814632ac7891ac921d9f293584a8adf519f3792141fb1d2edcff2e3a55f7dd17fa58eb2882823049af7212295ac8ebe2e400b340b6685dc731baddf9a295be37fae7b0e704c12dd9662d22fa9718f29f30e42bf4e41330915c882fff3e65b47736edbca8837060689fcfb38405b27376a73a412f17fb2ab80d68a1260b994d11d5810a145f5282de77ee10cb38c50bd981e10f47f8be236252fe04254d1ce70dc8a9a34c75d1310f78d192d94720c9e5800ddc19381e2853372c4c817f740aa012a5a94fe0af0143c821b443df36b393fe5d7cd14f651dcb5a39d96e2d46240c63be7325ffbf34be67077c8f37de5c27c4a13ab35ce774e9d412d7bf6312abdf6367f9da3b28632eac720c468f88e0452925d24c61754bedd7bc33484a2c8448c17abadca5efd2492e7b5c2bea27a82485e9245c42af3c0960a4ee395c3ecbc73b02d53a4b588bfa68bef9fb5252933bf5295f90a4ef129539cf594ff864722541d1ff28924de4ccdf570bbef65a953c82bf622e334e50264a10464a7bd4057105adde5dcaa857a81cbe52a77fdab1afd6ffaa624033c28105ffc0e562ef2e505d87c508d4f1837543232f8f98e6945324719fd0f55d79ba8946edc9100b383cf4dba7b5721c442320c8e9b2fbaf5b26de43c513d89bd76659871bf2de27a003807b4b80a386fcd0043acde38167a8b444f60c7ce9be39dc119d730d634c2c00938ca2c4b51c31dcb3992d224a610f66f1b9331f771b0c2a494228bbef4521b0f016f97d61dd5d1cd6e874aef6b4a2b94bd6016889b1d473db5c944c0f2871b0099c189b16e4cf70a13b9a755ba4ac61517fe7b81616f007f0074fc87e605c148228d5d721518130346305def7a6598b18baf24024b07bc0cb0e9160b5d47290956de7e5b0649800995d3aa11266b6e971b9ed94c6286f8963fab7f43d3e12ab9687e6ae236d0d29ae28f958fe548f5f35897baa1c0583dffe73236df54c5eca40e01a234156c6198a3dcbf37b8382df77360bbfb09cd5518bc2eff54c49c031a7e85725655b794f55695354b7e90122e590c3433ec7e94fcf085f1a006975715de743824d1bcdb2aea477bb2e2c31ad0d6fa6dae3dd706808001bac965402220c9a0814cf785ed54cfd8607f1a2d91f0e6ce749e37ea8b756b057a2f51bc00678befb0027be6f3c7a58eccb2a6c503651435075828acea38279fafd8707840fc84b5923e179459c79fd4dde515fa5863a5474364c6c3e59ec67ab500a7cee1b06d3969730f6faa93c28397c875ef8f779baca2995ed6df9a5879796dfdd2df2ec47f339ec5122d8475cf50a46d07a07d5f5178b9d360347f90778f1bc707ad03035b20ef800d1623609311ac88b88e089a30e4e72927c112ad08746c781f5888c5594d6670845f110dd6a6fd0fdf89630524a985828dc7f4e164fb543e63a5eaaab999735c13d2c72fe98f80194bc99e3fdb839dfc7d657f99b6d87c766692588b52418f727009031f1b3175bf27be065d1aee1afa7dfb75c67ef642f92a6599b59ec8acfe04facf22393d9099ecf04fc843ae5bf619b81d9ee654f17576ce3c2f4080591b366823daf9c455f976e75c8fc6ad03eeea48edfa2b83c24720f959c33d2d614aa8915426116a104ac3539f1073b2049046ad606d07449a4f90e01949255e00e645d0f343ffcf33b8b3f7f71d400094fdc5913e09625746ba2e5fc30abcc38dc1e6637aaffe5709716fc938a2375d6bf73c19d71c869e7ee3a1b1d4d7188bfb20a92156e64719aac7e6b67417aea5bfed791a8ecc8d1a7aee2a98e1d17006e0565528aa8476e4d0ad3456fe72555b59db8a13ba0956b8d445f5efc79fd20fa8fa6e06095c48ee90b4945e05c9474d5b5cc788c5320e7ff601b2323c9bdf6143c29f63421b0bca74e30b48be95f9d2b52b82f1eb5523d94427e0f2cec400787018d14492551aa937c49047a5369ceebe2021c6e82585c339a62b97a10d0113a489dc3f08b65aaaadefd921d02837cb654bc62dfc599030cbcc5b2aef7ed0863dfb840e42ef39b9fb6f52f6045e407d76bdc07e0892f3d84fabf9a08cacbf7e1839579d3112d7576d311291f51a4e219a51b78539f554ff0ec8631026621bba6cdb91dfec5ab44f146e63294d8179a1dac2003379d06fb5178da7158ae34b3d6ad21b0d905e1d2187828ea7e8435a29da508ac4b9220392bbe84a476a599344eb66e1bd844d2b03418cd3fe8a0884c928c0cb70a311d0a566b00d1d236f06adbdefbbe8869bd90b7fd58b2547513554e3c19a9444a7065008d888f5f3783f7d2ed90e5a21d4d4a3e28ff18f32aa579e64ed7e50de593d872fae56f8d2f7882c612e2934d603570b82515431f4bbeb1c1e1275420587bcad93c85572e77ef0e4c96a46854", 0x2000, &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x90, 0x0, 0x3, {0x3, 0x3, 0xfffffffffffffffb, 0x7, 0xfffffff9, 0x3, {0x5, 0x0, 0x7ff, 0x4000000000000, 0x6, 0x4, 0xd, 0x4, 0x8, 0xaba9ee05c620a8d3, 0x1, r3, r5, 0x6, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, 0x0, 0xfeffffff) 6.080337601s ago: executing program 3 (id=5497): r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = msgget$private(0x0, 0x8d) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgsnd(r2, 0x0, 0x0, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000340)=""/4096) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 5.68454153s ago: executing program 1 (id=5498): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f0000000000)) 5.587984747s ago: executing program 4 (id=5500): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000200)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000007c0)={{r1}, "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"}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010231361d40ca070000a6f2010203012e310300ffff00"/36], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 5.525696709s ago: executing program 1 (id=5501): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x100541, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x80802, 0x1cc) sendfile(r4, r4, 0x0, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 4.90498954s ago: executing program 0 (id=5503): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x2, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x22240000, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0xa, 0xff, 0x81, 0x2}, {0x5000, 0x200000, 0x4, 0xf, 0x5, 0x3, 0x26, 0x6, 0x3, 0x6, 0x5}, {0x3000, 0x0, 0x3, 0x4, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x22, 0x1, 0x6}, {0x9000, 0x30000, 0x0, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0x9}, {0x3000, 0x12000, 0x19, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbb, 0x18, 0x9, 0xf}, {0xa000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x8, 0x80, 0x3, 0x8}, {0x30000, 0xffff, 0x10, 0x4, 0x6, 0x6, 0x4, 0xf9, 0x1, 0x8, 0x81, 0xfa}, {0x0, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x1000, 0x0, 0x100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000000000d, 0x7]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x20, 0x1e, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0xe, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x5d, 0x40}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0xe6, 0x4, 0x1, 0x8, 0x5}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000700)=@string={0x2}}, {0x0, 0x0}]}) syz_usb_control_io(r3, &(0x7f0000000b80)={0x18, &(0x7f00000010c0)=ANY=[@ANYBLOB], &(0x7f0000000940)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "eb1151866af9463e11ff75365a5eb0c95a4a4f2d577079b9b5564b71b522b624e61fada5865ceb7929771072c663a72f03e66f34fe192829aafc0c4724603ac12f2b236468b4e992e9cdbd29488c41a8429012c7d859f4105d254af39a9ddc4aa4a122f17925ea6bc69225d5afd6e0b286d9276d8153e4614e387fd625edcebaddbe4bb6ca3926959462f156d4993732af54e7da2b761cba9eb882e406a5dba2c25d7495de6370b73820721ff4cfb2972a0d81ed0fd0f66163c2d01654ad0c6cbc7f530a5ee3059a25a525787c6fcfda3e4e6bd672338ab56bc2e2aa61abf766682354"}}, &(0x7f0000000a40)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x6, [@generic={0x3, 0x10, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x0, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x3, 0x8000}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x3b, 0x9, "0e5ece8d", "d089bd17"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x2, 0x0, 0x4, 0xf42, 0x3}}}, &(0x7f0000001040)={0x44, &(0x7f0000000bc0)={0x0, 0x9, 0x8b, "f31b281ff907d7babf70cac8b2d4d9bf2e1d3b769e3dbc293012bdabfc6385e92dea7ce05cd61abff2b480dac527fb59d67446b7f150e07766be215ce7c15ccb56080efe79f0b970103b85acb08d8cddfbcc9e4f6dca0d4cfcbde47615f2edf75adbf4a9aacaa819069818961a5916f4624041f3faa32ffee01fd2ac45cd11b7ef290388f48b34d3da825f"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x100, 0x1, [0xff0f]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x61}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "d9ce"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000ec0)={0x40, 0x17, 0x6}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'M9'}, 0x0, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x2}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.508353958s ago: executing program 4 (id=5504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (fail_nth: 1) 4.244359057s ago: executing program 2 (id=5505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 3.656458628s ago: executing program 1 (id=5506): r0 = socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000300)) unshare(0x8000000) semget$private(0x0, 0x4, 0x4) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r1) r2 = syz_io_uring_setup(0xb54, &(0x7f0000000340)={0x0, 0x4e3b, 0x80, 0x2, 0x1de}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r3 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x599a, 0xedec3d9948aad926, 0x3, 0x200002, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x10, 0x1, 0x2) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 3.643913572s ago: executing program 0 (id=5507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x9, 0x8001, 0x0, 0x9, 0x8000000000, 0xffffffff, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="000001000000000008002800f936040008000a007c20d6500839751d2ea9f26b7003c01e8cadbf9a1b24a664c107008bab9d867b27b942780dfc622e39b5d97d966cd1a6a7e7fc200da51ecdd59e7f2e4747b6d105f4810df92d1eb8dd090000007942526e03b46eaa91abb389e6422a63f5b788b8cc432da8511725324858c16e4bf8edb8fe0b645e1ee59d56fb8f600ff5248d3c2d1892f7c30ad4be9729ce04e170f1418622b17694d4444a55b6cecf50ae4a5dc7d0aa884a1373db1e75715f79cf37402025013e1857aae6d739fbdc9deb68a6eb2edd4b0463cc7ce51cdf61ee283bc870bcaa4792711782be7537be34eb6be1cca8841d973b6021167de88e2cae5874c5ca9971349d3a8773b897689c2a118137369f7dffe4402c0dcea1819083866ca973d3edbe5f6b64f63b908813ba345e28e289761132a5bf80914187f13274a6b1936cffa7334c8c117a660e339da95e79246af599b22699ee625aa17998e2bb5ff046e01d4a497ff7cb7796069cb98b0b2e3139e359ec30000000", @ANYRES32=r2, @ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f0f4ffff0f000000008400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x5f0}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, 0x0, 0x1, 0x0, 0x0) statx(r6, 0x0, 0x6000, 0x20, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x24) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f00000003c0)={{0x8, 0x0, &(0x7f0000000340)}, 0xb9, 0x16, 0x9, 0x5, 0x0, 0x7, 0x2, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000200)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x2000000000000000, 0x0, 0x100000}) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000180)={{@host}, 0xfffffffffffffffc, 0x800000000000002, 0x1000000, 0x8}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 3.606721579s ago: executing program 3 (id=5508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000300)) unshare(0x8000000) semget$private(0x0, 0x4, 0x4) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r2) r3 = syz_io_uring_setup(0xb54, &(0x7f0000000340)={0x0, 0x4e3b, 0x80, 0x2, 0x1de}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r4 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x599a, 0xedec3d9948aad926, 0x3, 0x200002, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x1, 0x2) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 3.49622973s ago: executing program 4 (id=5509): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000076) syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a92000905021010000204070905"], 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000400)={0xd834, 0x8bc, 0x80, 0x9, 0x8000, 0x8001}) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1b3, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.469683898s ago: executing program 2 (id=5510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 3) 2.851983506s ago: executing program 2 (id=5511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f0000000000)) 2.794739528s ago: executing program 2 (id=5512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_vlan\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2.712935026s ago: executing program 2 (id=5513): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000d080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000027c0)="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", 0x2000, &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x90, 0x0, 0x3, {0x3, 0x3, 0xfffffffffffffffb, 0x7, 0xfffffff9, 0x3, {0x5, 0x0, 0x7ff, 0x4000000000000, 0x6, 0x4, 0xd, 0x4, 0x8, 0xaba9ee05c620a8d3, 0x1, r3, r5, 0x6, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, 0x0, 0xfeffffff) 2.705378515s ago: executing program 0 (id=5514): timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unlink(0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x389}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x0, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x48a10, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x7}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) 2.34156962s ago: executing program 4 (id=5515): timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unlink(0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x389}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x0, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x48a10, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x7}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) 1.844974748s ago: executing program 2 (id=5516): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000300)) unshare(0x8000000) semget$private(0x0, 0x4, 0x4) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r3) r4 = syz_io_uring_setup(0xb54, &(0x7f0000000340)={0x0, 0x4e3b, 0x80, 0x2, 0x1de}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r5 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x599a, 0xedec3d9948aad926, 0x3, 0x200002, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x10, 0x1, 0x2) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 1.532605599s ago: executing program 0 (id=5517): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x2, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x22240000, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0xa, 0xff, 0x81, 0x2}, {0x5000, 0x200000, 0x4, 0xf, 0x5, 0x3, 0x26, 0x6, 0x3, 0x6, 0x5}, {0x3000, 0x0, 0x3, 0x4, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x22, 0x1, 0x6}, {0x9000, 0x30000, 0x0, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0x9}, {0x3000, 0x12000, 0x19, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbb, 0x18, 0x9, 0xf}, {0xa000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x8, 0x80, 0x3, 0x8}, {0x30000, 0xffff, 0x10, 0x4, 0x6, 0x6, 0x4, 0xf9, 0x1, 0x8, 0x81, 0xfa}, {0x0, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x1000, 0x0, 0x100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000000000d, 0x7]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x20, 0x1e, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0xe, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x5d, 0x40}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0xe6, 0x4, 0x1, 0x8, 0x5}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000700)=@string={0x2}}, {0x0, 0x0}]}) syz_usb_control_io(r3, &(0x7f0000000b80)={0x18, &(0x7f00000010c0)=ANY=[@ANYBLOB], &(0x7f0000000940)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "eb1151866af9463e11ff75365a5eb0c95a4a4f2d577079b9b5564b71b522b624e61fada5865ceb7929771072c663a72f03e66f34fe192829aafc0c4724603ac12f2b236468b4e992e9cdbd29488c41a8429012c7d859f4105d254af39a9ddc4aa4a122f17925ea6bc69225d5afd6e0b286d9276d8153e4614e387fd625edcebaddbe4bb6ca3926959462f156d4993732af54e7da2b761cba9eb882e406a5dba2c25d7495de6370b73820721ff4cfb2972a0d81ed0fd0f66163c2d01654ad0c6cbc7f530a5ee3059a25a525787c6fcfda3e4e6bd672338ab56bc2e2aa61abf766682354"}}, &(0x7f0000000a40)={0x0, 0xf, 0x22, {0x5, 0xf, 0x22, 0x6, [@generic={0x3, 0x10, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x0, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x3, 0x8000}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x3b, 0x9, "0e5ece8d", "d089bd17"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x2, 0x0, 0x4, 0xf42, 0x3}}}, &(0x7f0000001040)={0x44, &(0x7f0000000bc0)={0x0, 0x9, 0x8b, "f31b281ff907d7babf70cac8b2d4d9bf2e1d3b769e3dbc293012bdabfc6385e92dea7ce05cd61abff2b480dac527fb59d67446b7f150e07766be215ce7c15ccb56080efe79f0b970103b85acb08d8cddfbcc9e4f6dca0d4cfcbde47615f2edf75adbf4a9aacaa819069818961a5916f4624041f3faa32ffee01fd2ac45cd11b7ef290388f48b34d3da825f"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x100, 0x1, [0xff0f]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x61}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "d9ce"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000ec0)={0x40, 0x17, 0x6}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'M9'}, 0x0, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x2}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.263295907s ago: executing program 4 (id=5518): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e61, @rand_addr=0x64010100}, 0xd1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffbfffbfe, 0x3, 0xbd70}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000000)=0x8004, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.169608789s ago: executing program 3 (id=5519): timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unlink(0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x389}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x0, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x48a10, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x2, 0x7}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) 558.426317ms ago: executing program 4 (id=5520): r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = msgget$private(0x0, 0x8d) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgsnd(r2, 0x0, 0x0, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000340)=""/4096) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 535.011146ms ago: executing program 0 (id=5521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x36, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r4, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="46513ae8f118ac7fa95223442419d9e0", 0x10}], 0x1, 0x0, 0x0, 0x24018000}], 0x1, 0x404c0d1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000037d000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fadbdf252600000008000300", @ANYRES32=r9, @ANYBLOB="cd15874baa73c63589562cd521c6a7c857b7eb24afd880ec861d7698b83c9b9dd6e6515102638ee60205136a4b29b63615e1c964a823be8a0130e1d4ae35b50bbebef208ffa3d8c3c5cc23b1996a9451bd55bacfa95625a0a9db513c2f7992d3d959172c0cdb7ee2cff7eab4bffd3c0f65736f86ec4f605ff2af930f69f511e9167ac5d51673b0b4f86fd1d4fd6c64f3e6c50ca7202665838263e50dd827c3587be3a3a23f607407e5488becbcb333e90b16340b17ed599f9578d1208c07977c55d6a2cc2333baa5f2242670dd794341ea3bfe9cb1434e8d2111831aae06cec2a61cea7eabe09eec60a3bede7e6a918af81077c8d2da7e10f34650f2025a39385882d0c41043d20bf0844b668834ab381538932bf6bc194b90396a2ab5368e171afa2b4ef9b3d143586154a53314fb4eec696ed544f3ffb4e3ffb72e0554c413642971ae48e4dcc3c3a9ed12d02b89a23a4107ad8e6341fd871a78e22b201115f1d337d32ccf889f9757468096fc27ee4ede15cc83e304345b96d508c7c453459f201aa3d75f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 384.068294ms ago: executing program 3 (id=5522): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, 0x0) 159.4975ms ago: executing program 3 (id=5523): r0 = openat$sysctl(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="80b051cd3c6c430f020584b91491bc2845451702dc35f6d28f268f781c6a308dab2f4355a02ee2daa74f3cf0cbc4c742fd94b51a7871407c1eca9770bdbb101b7a8e2b9e68bd66c4e57f5817ca58e98b74ff33f022662069139924bd134e0a7658377a31f6983091b2e31f195e9ef1c0bf9262c7643f04fbd31fa8621016360c056426afdaa08869e99132fd0838dd897054a9c210c56d423c4ea6aac5bfacb83ccefb43d047d0ae1a389fbf12ec72458ec20a4072ef13ec83ddd75585c02f5e38", 0xc1}, {&(0x7f0000000600)="afbce6b6bd5096420cde7c4b132eb945aaa795fb0a08f5b3dbd754fc8776cf1e4920391e7db437ebad45930c982de566d440c80b99d81a00d785c531a11c693ba20c5f5769d741a56829463de66ddebe03f8a5ff7ec43b03127b2d30c0ae03332dfc700c183b6e9785dcad61a6508f6941d1d8af6267b90c1e386fec7fd3bf81b188ca6735eb74ec56756be15fe8538f12a9359c9bb981b86ff13f", 0x9b}, {&(0x7f00000006c0)="172015f4d67dbe845adbfebe052bbd43ae181c8d15cebc02eb7f7a581072a70099", 0x21}], 0x3) (async) r1 = socket(0x1, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@local}}, {{@in=@initdev}}}, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f7ffe, 0x400, 0x2100, 0x10000003, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x80, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000180)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x1fd, 0x0, 0x7, 0x9, 0x0, 0x5, 0x9, 0x5, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) 0s ago: executing program 3 (id=5524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = syz_clone(0x40900500, &(0x7f0000000240)="a8ab863941eca3ce260eca1cd587f4e4e84119682e89ee26cf00c7f236b52e5510dca3cbdb0062bd683748e07af5182d2d836a034afad1c84f947d6793e947b7e172f550bd953046e775313689fd1742bcc712", 0x53, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="ef8b77ccc440173d28e248dfc5e89619b2add66f698cda6bc26a91") move_pages(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ce0000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x839e, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_pidfd_open(r2, 0x0) r5 = syz_open_procfs(r2, &(0x7f00000000c0)='net/udp\x00') r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r6) statx(r5, 0x0, 0x1000, 0x10, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000160a010300000000000000000a00000440000380080001400000000008000240000000022c000380140001006e657464657673696d300000000000001400010065727370616ec53ba34a7f704194639d98e5cc0dd89e300000000000000000000900010073797a310000000008000740000000030900020073797a3100000000140000001175309993"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): 7620][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.023093][T23077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.052213][T23077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.075561][T23077] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5056'. [ 1304.154604][T23075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1304.715040][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.723702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.771024][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5056'. [ 1304.918674][T23091] can: request_module (can-proto-3) failed. [ 1305.074588][T19024] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1305.100922][T23077] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1305.433923][T23103] sctp: [Deprecated]: syz.2.5063 (pid 23103) Use of int in max_burst socket option. [ 1305.433923][T23103] Use struct sctp_assoc_value instead [ 1305.441475][T19024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.457001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.992294][T15813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.692737][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.775665][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.814359][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.927537][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.952109][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.706829][T23128] FAULT_INJECTION: forcing a failure. [ 1309.706829][T23128] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.724822][T23128] CPU: 0 UID: 0 PID: 23128 Comm: syz.2.5071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1309.724851][T23128] Tainted: [L]=SOFTLOCKUP [ 1309.724858][T23128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1309.724869][T23128] Call Trace: [ 1309.724877][T23128] [ 1309.724886][T23128] dump_stack_lvl+0xe8/0x150 [ 1309.724914][T23128] should_fail_ex+0x40c/0x560 [ 1309.724937][T23128] should_failslab+0xa8/0x100 [ 1309.724961][T23128] __kmalloc_noprof+0xfe/0x720 [ 1309.724983][T23128] ? iter_file_splice_write+0x1ea/0x1240 [ 1309.725005][T23128] ? iter_file_splice_write+0x1ea/0x1240 [ 1309.725062][T23128] iter_file_splice_write+0x1ea/0x1240 [ 1309.725084][T23128] ? __lock_acquire+0x683/0x2cf0 [ 1309.725120][T23128] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1309.725141][T23128] ? direct_splice_actor+0x49/0x160 [ 1309.725163][T23128] ? direct_splice_actor+0x49/0x160 [ 1309.725194][T23128] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1309.725217][T23128] direct_splice_actor+0x101/0x160 [ 1309.725241][T23128] splice_direct_to_actor+0x57b/0xcb0 [ 1309.725277][T23128] ? __pfx_direct_splice_actor+0x10/0x10 [ 1309.725299][T23128] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1309.725333][T23128] do_splice_direct+0x195/0x290 [ 1309.725359][T23128] ? __pfx_do_splice_direct+0x10/0x10 [ 1309.725381][T23128] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1309.725408][T23128] ? rw_verify_area+0x203/0x4c0 [ 1309.725433][T23128] do_sendfile+0x52e/0x7c0 [ 1309.725458][T23128] ? __pfx_do_sendfile+0x10/0x10 [ 1309.725482][T23128] ? __might_fault+0xaf/0x130 [ 1309.725501][T23128] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 1309.725523][T23128] __do_fast_syscall_32+0x23e/0x6f0 [ 1309.725543][T23128] ? do_fast_syscall_32+0x33/0x70 [ 1309.725561][T23128] ? lockdep_hardirqs_on+0x7a/0x110 [ 1309.725578][T23128] ? asm_int80_emulation+0x1a/0x20 [ 1309.725592][T23128] ? do_int80_emulation+0x29f/0x550 [ 1309.725610][T23128] ? trace_irq_disable+0x3b/0x140 [ 1309.725630][T23128] do_fast_syscall_32+0x33/0x70 [ 1309.725650][T23128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1309.725668][T23128] RIP: 0023:0xf6fef0ec [ 1309.725683][T23128] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1309.725696][T23128] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1309.725712][T23128] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 1309.725723][T23128] RDX: 0000000080000080 RSI: 000000004d9b6eaf RDI: 0000000000000000 [ 1309.725733][T23128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1309.725742][T23128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1309.725751][T23128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1309.725772][T23128] [ 1309.726275][T23119] net_ratelimit: 171 callbacks suppressed [ 1309.726296][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.169960][T23130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.193396][T23130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.240649][T23130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5072'. [ 1310.553908][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.562207][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.570646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.579287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.608074][T23130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5072'. [ 1310.843430][ T9629] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1310.855269][T23132] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1311.057713][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.157729][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.167660][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.240671][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.307837][T23151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.317184][T23151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.332299][T23152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.344722][T23152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.367697][T23152] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5079'. [ 1311.549873][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.598916][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5079'. [ 1311.771726][T19024] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1311.791864][T23152] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1311.978521][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.988450][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.029992][T23160] ±ÿ: entered promiscuous mode [ 1312.039996][T23160] tunl0: entered promiscuous mode [ 1312.048732][T23160] gre0: entered promiscuous mode [ 1312.054690][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.091751][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.103739][T23160] gretap0: entered promiscuous mode [ 1312.129351][T23160] erspan0: entered promiscuous mode [ 1312.139349][T23160] ip_vti0: entered promiscuous mode [ 1312.148562][T23160] ip6_vti0: entered promiscuous mode [ 1312.158359][T23160] sit0: entered promiscuous mode [ 1312.170893][T23160] ip6tnl0: entered promiscuous mode [ 1312.185601][T23160] ip6gre0: entered promiscuous mode [ 1312.194150][T23160] syz_tun: entered promiscuous mode [ 1312.207805][T23160] ip6gretap0: entered promiscuous mode [ 1312.216562][T23160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.224321][T23160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.233066][T23160] bridge0: entered promiscuous mode [ 1312.240953][T23160] vcan0: entered promiscuous mode [ 1312.247649][T23160] team0: entered promiscuous mode [ 1312.290155][T23160] team_slave_0: entered promiscuous mode [ 1312.299768][T23160] team_slave_1: entered promiscuous mode [ 1312.308814][T23160] vlan3: entered promiscuous mode [ 1312.314978][T23160] dummy0: entered promiscuous mode [ 1312.326809][T23160] nlmon0: entered promiscuous mode [ 1312.334467][T23160] batadv0: entered promiscuous mode [ 1312.346492][T23160] vxcan0: entered promiscuous mode [ 1312.357196][T23160] vxcan1: entered promiscuous mode [ 1312.364865][T23160] veth0: entered promiscuous mode [ 1312.374693][T23160] veth1: entered promiscuous mode [ 1312.386646][T23160] wg0: entered promiscuous mode [ 1312.408172][T23160] wg2: entered promiscuous mode [ 1312.416115][T23160] veth0_to_bridge: entered promiscuous mode [ 1312.427984][T23160] veth1_to_bridge: entered promiscuous mode [ 1312.440213][T23160] veth0_to_bond: entered promiscuous mode [ 1312.450604][T23160] bond_slave_0: entered promiscuous mode [ 1312.458782][T23160] veth1_to_bond: entered promiscuous mode [ 1312.469130][T23160] bond_slave_1: entered promiscuous mode [ 1312.478167][T23160] veth0_to_team: entered promiscuous mode [ 1312.489525][T23160] veth1_to_team: entered promiscuous mode [ 1312.500158][T23160] veth0_to_batadv: entered promiscuous mode [ 1312.510010][T23160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.518628][T23160] batadv_slave_0: entered promiscuous mode [ 1312.530432][T23160] veth1_to_batadv: entered promiscuous mode [ 1312.539581][T23160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.549515][T23160] batadv_slave_1: entered promiscuous mode [ 1312.559121][T23160] xfrm0: entered promiscuous mode [ 1312.567914][T23160] veth0_to_hsr: entered promiscuous mode [ 1312.578936][T23160] veth1_to_hsr: entered promiscuous mode [ 1312.589821][T23160] hsr0: entered promiscuous mode [ 1312.597536][T23160] veth1_virt_wifi: entered promiscuous mode [ 1312.606522][T23160] veth0_virt_wifi: entered promiscuous mode [ 1312.620229][T23160] virt_wifi0: entered promiscuous mode [ 1312.642898][T23160] vlan0: entered promiscuous mode [ 1312.655104][T23160] vlan1: entered promiscuous mode [ 1312.675930][T23160] macvlan0: entered promiscuous mode [ 1312.704544][T23160] macvlan1: entered promiscuous mode [ 1312.737978][T23160] ipvlan0: entered promiscuous mode [ 1312.755863][T23160] ipvlan1: entered promiscuous mode [ 1312.778742][T23160] macvtap0: entered promiscuous mode [ 1312.788682][T23160] macsec0: entered promiscuous mode [ 1312.798534][T23160] geneve0: entered promiscuous mode [ 1312.808604][T23160] geneve1: entered promiscuous mode [ 1312.821872][T23160] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1312.837054][T23160] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1312.909129][T23160] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1312.999795][T23160] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1313.041030][T23160] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1313.054330][T23171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.063593][T23171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.077365][T23171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1313.230576][T23160] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 1313.245164][T23160] bridge1: entered promiscuous mode [ 1313.262717][T23160] bridge_slave_1.: entered promiscuous mode [ 1313.278789][T23160] vlan2: entered promiscuous mode [ 1313.297072][T23160] syztnl2: entered promiscuous mode [ 1313.312763][T23160] bond0: entered promiscuous mode [ 1313.324401][T23160] geneve2: entered promiscuous mode [ 1313.349819][T23160] bridge2: entered promiscuous mode [ 1313.365959][T23160] vxlan0: entered promiscuous mode [ 1313.382612][ T3353] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.405465][ T3353] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.429795][ T3353] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.470516][ T3353] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.885231][T23186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.919819][T23186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.956804][T23186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1314.459232][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1314.730049][ T9628] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1314.753630][T23188] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1315.112030][T15813] net_ratelimit: 47 callbacks suppressed [ 1315.112057][T15813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.649876][T23202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.670808][T23202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.682510][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.690943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.702883][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.711375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.739127][T23202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.776459][T23202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.468609][T23210] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1317.697597][T23232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.748970][T23232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.151877][T15813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.382416][T23242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.441056][T23242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.488261][T23242] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5107'. [ 1318.591184][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.610447][T23246] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5108'. [ 1318.626593][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.655956][T23242] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1318.668467][T23244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5107'. [ 1318.684291][T23248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.700386][T23248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.730532][T23248] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1318.763432][T23246] bond0: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1318.775111][T23244] bond2: option miimon: invalid value (18446744071782710027) [ 1318.784354][T23244] bond2: option miimon: allowed values 0 - 2147483647 [ 1318.879859][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.889207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.921598][T23254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.942529][T23254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.979828][T23254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.020782][T23254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.413259][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1319.570565][T14220] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1319.593102][T23252] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1319.795318][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.812109][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.927755][T23271] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1319.979549][T23271] PKCS7: Only support pkcs7_signedData type [ 1320.127912][T23275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.164690][T23275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.191010][T23275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1320.218896][T23264] net_ratelimit: 210 callbacks suppressed [ 1320.218913][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.236015][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.289849][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.304615][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.316526][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.325552][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.336758][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.355062][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.367463][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.381754][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.831310][T23280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1321.155888][T23288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.169256][T23288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.183415][T23288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.196168][T23288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.259522][T23284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.287096][T23284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.557332][T23294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.570691][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.577405][T23294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.582858][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.602429][T23294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.613240][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.619389][T23294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.624883][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.063787][T23308] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1322.085972][T23308] PKCS7: Only support pkcs7_signedData type [ 1322.454052][T23317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.490430][T23317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.546088][T23317] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1323.146852][T23317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1323.434324][ T9629] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1323.448818][T23322] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1324.582921][T23340] fuse: fd is not a fuse device [ 1324.739730][T23342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1324.851692][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.885318][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.915624][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.927354][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.259143][T23355] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1325.307603][T23355] PKCS7: Only support pkcs7_signedData type [ 1326.002449][T23370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.033043][T23370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.086353][T23370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1326.198716][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.223016][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.254275][T23373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1326.698936][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1326.894110][ T9628] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1326.908142][T23376] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1327.203280][T23382] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1327.255971][T23384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.265625][T23384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.280133][T23384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.291845][T23384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.585934][T23396] FAULT_INJECTION: forcing a failure. [ 1327.585934][T23396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.601200][T23396] CPU: 0 UID: 0 PID: 23396 Comm: syz.1.5151 Tainted: G L syzkaller #0 PREEMPT(full) [ 1327.601238][T23396] Tainted: [L]=SOFTLOCKUP [ 1327.601247][T23396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1327.601261][T23396] Call Trace: [ 1327.601270][T23396] [ 1327.601279][T23396] dump_stack_lvl+0xe8/0x150 [ 1327.601315][T23396] should_fail_ex+0x40c/0x560 [ 1327.601345][T23396] _copy_from_iter+0x1d3/0x1660 [ 1327.601375][T23396] ? rcu_is_watching+0x15/0xb0 [ 1327.601407][T23396] ? trace_kmalloc+0x2a/0xf0 [ 1327.601437][T23396] ? __pfx__copy_from_iter+0x10/0x10 [ 1327.601471][T23396] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 1327.601496][T23396] ? netlink_sendmsg+0x5d4/0xb40 [ 1327.601519][T23396] ? netlink_sendmsg+0x5d4/0xb40 [ 1327.601548][T23396] ? netlink_sendmsg+0x650/0xb40 [ 1327.601572][T23396] ? skb_put+0x112/0x210 [ 1327.601598][T23396] netlink_sendmsg+0x6c0/0xb40 [ 1327.601632][T23396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.601663][T23396] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1327.601690][T23396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.601715][T23396] sock_sendmsg_nosec+0x13a/0x180 [ 1327.601748][T23396] ____sys_sendmsg+0x54e/0x850 [ 1327.601778][T23396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1327.601819][T23396] ___sys_sendmsg+0x2a5/0x360 [ 1327.601843][T23396] ? __lock_acquire+0x683/0x2cf0 [ 1327.601876][T23396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.601900][T23396] ? get_pid_task+0x20/0x1f0 [ 1327.601927][T23396] ? get_pid_task+0x20/0x1f0 [ 1327.601953][T23396] ? get_pid_task+0x20/0x1f0 [ 1327.602011][T23396] ? __fget_files+0x2a/0x420 [ 1327.602038][T23396] ? __fget_files+0x3a2/0x420 [ 1327.602075][T23396] __sys_sendmsg+0x177/0x240 [ 1327.602102][T23396] ? __pfx___sys_sendmsg+0x10/0x10 [ 1327.602146][T23396] __do_fast_syscall_32+0x23e/0x6f0 [ 1327.602174][T23396] ? do_fast_syscall_32+0x33/0x70 [ 1327.602198][T23396] ? lockdep_hardirqs_on+0x7a/0x110 [ 1327.602222][T23396] ? asm_int80_emulation+0x1a/0x20 [ 1327.602242][T23396] ? do_int80_emulation+0x29f/0x550 [ 1327.602266][T23396] ? trace_irq_disable+0x3b/0x140 [ 1327.602295][T23396] do_fast_syscall_32+0x33/0x70 [ 1327.602321][T23396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.602347][T23396] RIP: 0023:0xf7f550ec [ 1327.602368][T23396] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1327.602386][T23396] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1327.602410][T23396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1327.602425][T23396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1327.602438][T23396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.602458][T23396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1327.602472][T23396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.602503][T23396] [ 1328.237084][T23405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.276725][T23405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.324672][T23405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.356753][T23407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.368735][T23405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.388398][T23407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.402783][T23405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.422447][T23407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.431246][T23405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.445846][T23407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.539372][T23409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.553588][T23409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.575121][T23409] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5155'. [ 1328.726890][T23411] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5156'. [ 1329.183863][T23409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5155'. [ 1329.381283][T23422] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1329.432663][T23422] PKCS7: Only support pkcs7_signedData type [ 1329.609599][ T9629] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1329.627802][T23416] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1329.994456][T23428] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5161'. [ 1330.279313][T23432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.307637][T23432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.331301][T23432] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1330.534413][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1330.633508][T14550] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1330.651769][T23432] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1331.221523][T23456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.231301][T23456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.247784][T23456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.257913][T23456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.268961][T23451] FAULT_INJECTION: forcing a failure. [ 1331.268961][T23451] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.284739][T23451] CPU: 0 UID: 0 PID: 23451 Comm: syz.1.5167 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.284775][T23451] Tainted: [L]=SOFTLOCKUP [ 1331.284783][T23451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1331.284797][T23451] Call Trace: [ 1331.284805][T23451] [ 1331.284815][T23451] dump_stack_lvl+0xe8/0x150 [ 1331.284851][T23451] should_fail_ex+0x40c/0x560 [ 1331.284883][T23451] should_failslab+0xa8/0x100 [ 1331.284916][T23451] __kmalloc_cache_noprof+0xa8/0x660 [ 1331.284945][T23451] ? fuse_dentry_revalidate+0x38e/0xaf0 [ 1331.285023][T23451] ? fuse_dentry_revalidate+0x38e/0xaf0 [ 1331.285058][T23451] fuse_dentry_revalidate+0x38e/0xaf0 [ 1331.285087][T23451] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 1331.285149][T23451] ? __d_lookup+0x66/0x790 [ 1331.285195][T23451] lookup_one_qstr_excl+0x26a/0x360 [ 1331.285231][T23451] filename_create+0x20e/0x370 [ 1331.285271][T23451] ? __pfx_filename_create+0x10/0x10 [ 1331.285301][T23451] ? __might_fault+0xaf/0x130 [ 1331.285335][T23451] filename_mkdirat+0xd2/0x510 [ 1331.285363][T23451] ? __pfx_filename_mkdirat+0x10/0x10 [ 1331.285382][T23451] ? strncpy_from_user+0x150/0x2c0 [ 1331.285410][T23451] ? do_getname+0x151/0x250 [ 1331.285439][T23451] __se_sys_mkdirat+0x35/0x150 [ 1331.285463][T23451] __do_fast_syscall_32+0x23e/0x6f0 [ 1331.285492][T23451] ? do_fast_syscall_32+0x33/0x70 [ 1331.285517][T23451] ? lockdep_hardirqs_on+0x7a/0x110 [ 1331.285540][T23451] ? asm_int80_emulation+0x1a/0x20 [ 1331.285561][T23451] ? do_int80_emulation+0x29f/0x550 [ 1331.285586][T23451] ? trace_irq_disable+0x3b/0x140 [ 1331.285616][T23451] do_fast_syscall_32+0x33/0x70 [ 1331.285644][T23451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1331.285669][T23451] RIP: 0023:0xf7f550ec [ 1331.285689][T23451] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1331.285708][T23451] RSP: 002b:00000000f5416378 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 1331.285730][T23451] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 1331.285747][T23451] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000001 [ 1331.285760][T23451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1331.285774][T23451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1331.285786][T23451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.285819][T23451] [ 1331.632851][T23459] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5171'. [ 1331.681032][T23462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.700035][T23462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.716614][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5170'. [ 1332.193784][T23472] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1332.204144][T23472] PKCS7: Only support pkcs7_signedData type [ 1332.389335][T23479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.445229][T23479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.669477][T23487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1332.805360][T23487] bond1: entered promiscuous mode [ 1332.822652][T23490] FAULT_INJECTION: forcing a failure. [ 1332.822652][T23490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.839742][T23490] CPU: 0 UID: 0 PID: 23490 Comm: syz.2.5179 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.839776][T23490] Tainted: [L]=SOFTLOCKUP [ 1332.839785][T23490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1332.839797][T23490] Call Trace: [ 1332.839806][T23490] [ 1332.839816][T23490] dump_stack_lvl+0xe8/0x150 [ 1332.839852][T23490] should_fail_ex+0x40c/0x560 [ 1332.839883][T23490] _copy_from_iter+0x1d3/0x1660 [ 1332.839911][T23490] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1332.839938][T23490] ? rcu_is_watching+0x15/0xb0 [ 1332.839970][T23490] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1332.839997][T23490] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1332.840023][T23490] ? __pfx__copy_from_iter+0x10/0x10 [ 1332.840050][T23490] ? __alloc_skb+0x276/0x7a0 [ 1332.840078][T23490] ? __alloc_skb+0x276/0x7a0 [ 1332.840105][T23490] ? netlink_sendmsg+0x650/0xb40 [ 1332.840131][T23490] ? skb_put+0x112/0x210 [ 1332.840156][T23490] netlink_sendmsg+0x6c0/0xb40 [ 1332.840191][T23490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.840222][T23490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1332.840249][T23490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.840275][T23490] sock_sendmsg_nosec+0x13a/0x180 [ 1332.840307][T23490] ____sys_sendmsg+0x54e/0x850 [ 1332.840337][T23490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1332.840377][T23490] ___sys_sendmsg+0x2a5/0x360 [ 1332.840402][T23490] ? __lock_acquire+0x683/0x2cf0 [ 1332.840435][T23490] ? __pfx____sys_sendmsg+0x10/0x10 [ 1332.840459][T23490] ? get_pid_task+0x20/0x1f0 [ 1332.840516][T23490] ? get_pid_task+0x20/0x1f0 [ 1332.840557][T23490] ? get_pid_task+0x20/0x1f0 [ 1332.840615][T23490] ? __fget_files+0x2a/0x420 [ 1332.840642][T23490] ? __fget_files+0x3a2/0x420 [ 1332.840679][T23490] __sys_sendmsg+0x177/0x240 [ 1332.840707][T23490] ? __pfx___sys_sendmsg+0x10/0x10 [ 1332.840751][T23490] __do_fast_syscall_32+0x23e/0x6f0 [ 1332.840780][T23490] ? do_fast_syscall_32+0x33/0x70 [ 1332.840805][T23490] ? lockdep_hardirqs_on+0x7a/0x110 [ 1332.840828][T23490] ? asm_int80_emulation+0x1a/0x20 [ 1332.840848][T23490] ? do_int80_emulation+0x29f/0x550 [ 1332.840874][T23490] ? trace_irq_disable+0x3b/0x140 [ 1332.840902][T23490] do_fast_syscall_32+0x33/0x70 [ 1332.840929][T23490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1332.840956][T23490] RIP: 0023:0xf6fef0ec [ 1332.840976][T23490] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1332.840995][T23490] RSP: 002b:00000000f53bc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1332.841018][T23490] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 1332.841033][T23490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.841046][T23490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.841059][T23490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1332.841079][T23490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.841110][T23490] [ 1333.138434][T23487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.199106][T23484] can: request_module (can-proto-3) failed. [ 1333.227964][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5180'. [ 1333.398527][T23498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.427661][T23498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.907312][T23504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.939747][T23504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.987085][T23504] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1334.399060][T23498] __nla_validate_parse: 1 callbacks suppressed [ 1334.399076][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5181'. [ 1334.573664][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1334.728785][T23509] bond2: entered promiscuous mode [ 1334.773265][T23509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1334.799881][T14220] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1334.852045][T23498] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1334.888394][T23513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1334.898494][T23513] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1334.911219][T23513] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 1334.927313][T23515] FAULT_INJECTION: forcing a failure. [ 1334.927313][T23515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.954617][T23515] CPU: 1 UID: 0 PID: 23515 Comm: syz.1.5185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1334.954653][T23515] Tainted: [L]=SOFTLOCKUP [ 1334.954661][T23515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1334.954674][T23515] Call Trace: [ 1334.954686][T23515] [ 1334.954695][T23515] dump_stack_lvl+0xe8/0x150 [ 1334.954731][T23515] should_fail_ex+0x40c/0x560 [ 1334.954762][T23515] _copy_from_iter+0x1d3/0x1660 [ 1334.954789][T23515] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1334.954816][T23515] ? rcu_is_watching+0x15/0xb0 [ 1334.954847][T23515] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1334.954874][T23515] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1334.954899][T23515] ? __pfx__copy_from_iter+0x10/0x10 [ 1334.954927][T23515] ? __alloc_skb+0x276/0x7a0 [ 1334.954947][T23515] ? __alloc_skb+0x276/0x7a0 [ 1334.954974][T23515] ? netlink_sendmsg+0x650/0xb40 [ 1334.955000][T23515] ? skb_put+0x112/0x210 [ 1334.955025][T23515] netlink_sendmsg+0x6c0/0xb40 [ 1334.955060][T23515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.955091][T23515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1334.955119][T23515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.955144][T23515] sock_sendmsg_nosec+0x13a/0x180 [ 1334.955177][T23515] ____sys_sendmsg+0x54e/0x850 [ 1334.955207][T23515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.955249][T23515] ___sys_sendmsg+0x2a5/0x360 [ 1334.955280][T23515] ? __lock_acquire+0x683/0x2cf0 [ 1334.955313][T23515] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.955337][T23515] ? get_pid_task+0x20/0x1f0 [ 1334.955365][T23515] ? get_pid_task+0x20/0x1f0 [ 1334.955391][T23515] ? get_pid_task+0x20/0x1f0 [ 1334.955449][T23515] ? __fget_files+0x2a/0x420 [ 1334.955475][T23515] ? __fget_files+0x3a2/0x420 [ 1334.955513][T23515] __sys_sendmsg+0x177/0x240 [ 1334.955540][T23515] ? __pfx___sys_sendmsg+0x10/0x10 [ 1334.955584][T23515] __do_fast_syscall_32+0x23e/0x6f0 [ 1334.955611][T23515] ? do_fast_syscall_32+0x33/0x70 [ 1334.955636][T23515] ? lockdep_hardirqs_on+0x7a/0x110 [ 1334.955660][T23515] ? asm_int80_emulation+0x1a/0x20 [ 1334.955681][T23515] ? do_int80_emulation+0x29f/0x550 [ 1334.955706][T23515] ? trace_irq_disable+0x3b/0x140 [ 1334.955735][T23515] do_fast_syscall_32+0x33/0x70 [ 1334.955761][T23515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1334.955786][T23515] RIP: 0023:0xf7f550ec [ 1334.955806][T23515] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1334.955825][T23515] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1334.955848][T23515] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c00 [ 1334.955863][T23515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1334.955876][T23515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1334.955888][T23515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1334.955901][T23515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1334.955932][T23515] [ 1335.457260][T23517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.493864][T23517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.528000][T23517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.550418][T23517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.712507][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.725333][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.764887][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.786251][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.568624][T23543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.615621][T23543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.653001][T23543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1338.175504][T23559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1338.684245][T23564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.704203][T23564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.214687][T23572] netlink: 'syz.4.5201': attribute type 1 has an invalid length. [ 1339.717772][T23580] syzkaller0: entered promiscuous mode [ 1340.156122][T23584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.208894][T23584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.226386][T23584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5205'. [ 1340.399703][T23587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.472082][T23587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.518738][T23587] FAULT_INJECTION: forcing a failure. [ 1340.518738][T23587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.557433][T23587] CPU: 0 UID: 0 PID: 23587 Comm: syz.1.5206 Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.557470][T23587] Tainted: [L]=SOFTLOCKUP [ 1340.557480][T23587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1340.557493][T23587] Call Trace: [ 1340.557503][T23587] [ 1340.557515][T23587] dump_stack_lvl+0xe8/0x150 [ 1340.557552][T23587] should_fail_ex+0x40c/0x560 [ 1340.557586][T23587] _copy_from_user+0x2d/0xb0 [ 1340.557621][T23587] do_sys_poll+0x258/0x1110 [ 1340.557666][T23587] ? __pfx_do_sys_poll+0x10/0x10 [ 1340.557691][T23587] ? __lock_acquire+0x683/0x2cf0 [ 1340.557792][T23587] ? get_pid_task+0x20/0x1f0 [ 1340.557822][T23587] ? get_pid_task+0x20/0x1f0 [ 1340.557883][T23587] ? __pfx_vfs_write+0x10/0x10 [ 1340.557915][T23587] ? set_compat_user_sigmask+0xc7/0x1c0 [ 1340.557942][T23587] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1340.557969][T23587] ? do_sys_openat2+0x14e/0x200 [ 1340.557995][T23587] ? kmem_cache_free+0x182/0x650 [ 1340.558031][T23587] __ia32_compat_sys_ppoll_time32+0x2aa/0x320 [ 1340.558066][T23587] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1340.558093][T23587] ? ksys_write+0x1fc/0x270 [ 1340.558141][T23587] __do_fast_syscall_32+0x23e/0x6f0 [ 1340.558173][T23587] ? do_fast_syscall_32+0x33/0x70 [ 1340.558199][T23587] ? lockdep_hardirqs_on+0x7a/0x110 [ 1340.558224][T23587] ? asm_int80_emulation+0x1a/0x20 [ 1340.558246][T23587] ? do_int80_emulation+0x29f/0x550 [ 1340.558271][T23587] ? trace_irq_disable+0x3b/0x140 [ 1340.558302][T23587] do_fast_syscall_32+0x33/0x70 [ 1340.558330][T23587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1340.558357][T23587] RIP: 0023:0xf7f550ec [ 1340.558379][T23587] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1340.558406][T23587] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 1340.558430][T23587] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 1340.558446][T23587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1340.558460][T23587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1340.558474][T23587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1340.558488][T23587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1340.558519][T23587] [ 1341.477323][T23599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.517973][T23599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.893642][T23607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.948945][T23607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.963006][T23595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1341.969561][T23595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1341.998561][T23595] vhci_hcd vhci_hcd.0: Device attached [ 1342.074959][T23607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.147877][T23607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.340874][T23611] vhci_hcd: connection closed [ 1342.341260][T14550] vhci_hcd vhci_hcd.3: stop threads [ 1342.409781][T14550] vhci_hcd vhci_hcd.3: release socket [ 1342.457618][T14550] vhci_hcd vhci_hcd.3: disconnect device [ 1343.687700][T23638] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1343.750052][T23638] PKCS7: Only support pkcs7_signedData type [ 1344.031464][T23645] netlink: 592 bytes leftover after parsing attributes in process `syz.3.5219'. [ 1344.998475][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.013013][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.040082][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.054123][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.083574][T23657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5222'. [ 1345.218254][T23663] netlink: 592 bytes leftover after parsing attributes in process `syz.3.5224'. [ 1345.436128][T23670] netlink: 592 bytes leftover after parsing attributes in process `syz.3.5226'. [ 1346.054656][T23674] FAULT_INJECTION: forcing a failure. [ 1346.054656][T23674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.087868][T23674] CPU: 0 UID: 0 PID: 23674 Comm: syz.3.5228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.087912][T23674] Tainted: [L]=SOFTLOCKUP [ 1346.087921][T23674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.087939][T23674] Call Trace: [ 1346.087947][T23674] [ 1346.087955][T23674] dump_stack_lvl+0xe8/0x150 [ 1346.087984][T23674] should_fail_ex+0x40c/0x560 [ 1346.088010][T23674] _copy_to_user+0x31/0xb0 [ 1346.088040][T23674] simple_read_from_buffer+0xe1/0x170 [ 1346.088068][T23674] proc_fail_nth_read+0x1bb/0x230 [ 1346.088101][T23674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.088128][T23674] ? rw_verify_area+0x24a/0x4c0 [ 1346.088168][T23674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.088192][T23674] vfs_read+0x213/0xa80 [ 1346.088221][T23674] ? __pfx___mutex_lock+0x10/0x10 [ 1346.088243][T23674] ? __pfx_vfs_read+0x10/0x10 [ 1346.088270][T23674] ? __fget_files+0x2a/0x420 [ 1346.088295][T23674] ? __fget_files+0x3a2/0x420 [ 1346.088335][T23674] ? __fget_files+0x2a/0x420 [ 1346.088377][T23674] ksys_read+0x150/0x270 [ 1346.088415][T23674] ? __pfx_ksys_read+0x10/0x10 [ 1346.088455][T23674] ? asm_int80_emulation+0x1a/0x20 [ 1346.088489][T23674] do_int80_emulation+0x19a/0x550 [ 1346.088511][T23674] ? asm_int80_emulation+0x1a/0x20 [ 1346.088527][T23674] ? clear_bhb_loop+0x70/0xc0 [ 1346.088543][T23674] ? clear_bhb_loop+0x70/0xc0 [ 1346.088564][T23674] asm_int80_emulation+0x1a/0x20 [ 1346.088580][T23674] RIP: 0023:0xf71e74eb [ 1346.088596][T23674] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1346.088611][T23674] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1346.088628][T23674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 1346.088640][T23674] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.088657][T23674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.088667][T23674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1346.088677][T23674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.088702][T23674] [ 1346.459908][T23676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5230'. [ 1346.472428][T23676] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5230'. [ 1346.484746][T23676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5230'. [ 1346.791061][ T4930] Bluetooth: hci6: unexpected event for opcode 0x2024 [ 1346.803950][T23695] netlink: 'syz.3.5235': attribute type 10 has an invalid length. [ 1346.813505][T23695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1346.825144][T23695] team0: Port device netdevsim1 added [ 1346.839602][T23695] netlink: 'syz.3.5235': attribute type 10 has an invalid length. [ 1346.948248][T23698] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5236'. [ 1347.592252][T23703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.614373][T23703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.643530][T23703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1347.713434][T23695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.725390][T23695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.960961][T23707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1347.984360][T23707] autofs4:pid:23707:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1348.009769][T23707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.035798][T23707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.523667][T23714] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1348.567873][T23714] PKCS7: Only support pkcs7_signedData type [ 1349.014884][T23723] FAULT_INJECTION: forcing a failure. [ 1349.014884][T23723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.030959][T23723] CPU: 0 UID: 0 PID: 23723 Comm: syz.3.5243 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.030994][T23723] Tainted: [L]=SOFTLOCKUP [ 1349.031003][T23723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1349.031016][T23723] Call Trace: [ 1349.031025][T23723] [ 1349.031034][T23723] dump_stack_lvl+0xe8/0x150 [ 1349.031079][T23723] should_fail_ex+0x40c/0x560 [ 1349.031112][T23723] _copy_to_user+0x31/0xb0 [ 1349.031146][T23723] simple_read_from_buffer+0xe1/0x170 [ 1349.031182][T23723] proc_fail_nth_read+0x1bb/0x230 [ 1349.031216][T23723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1349.031250][T23723] ? rw_verify_area+0x24a/0x4c0 [ 1349.031284][T23723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1349.031316][T23723] vfs_read+0x213/0xa80 [ 1349.031351][T23723] ? __pfx___mutex_lock+0x10/0x10 [ 1349.031378][T23723] ? __pfx_vfs_read+0x10/0x10 [ 1349.031409][T23723] ? __fget_files+0x2a/0x420 [ 1349.031441][T23723] ? __fget_files+0x3a2/0x420 [ 1349.031467][T23723] ? __fget_files+0x2a/0x420 [ 1349.031504][T23723] ksys_read+0x150/0x270 [ 1349.031537][T23723] ? __pfx_ksys_read+0x10/0x10 [ 1349.031568][T23723] ? asm_int80_emulation+0x1a/0x20 [ 1349.031592][T23723] do_int80_emulation+0x19a/0x550 [ 1349.031618][T23723] ? trace_irq_disable+0x3b/0x140 [ 1349.031644][T23723] ? asm_int80_emulation+0x1a/0x20 [ 1349.031664][T23723] ? clear_bhb_loop+0x70/0xc0 [ 1349.031685][T23723] ? clear_bhb_loop+0x70/0xc0 [ 1349.031711][T23723] asm_int80_emulation+0x1a/0x20 [ 1349.031731][T23723] RIP: 0023:0xf71e74eb [ 1349.031751][T23723] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1349.031770][T23723] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1349.031793][T23723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 1349.031808][T23723] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.031821][T23723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1349.031834][T23723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1349.031847][T23723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.031879][T23723] [ 1349.571285][T23736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.585020][T23736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.606614][T23736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.619749][T23736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.050574][T23746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.060613][T23746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.077176][T23746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.087284][T23746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.281247][T23748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.295355][T23748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.329697][T23748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1350.466581][T23751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.487001][T23751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.543588][ T4930] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 1350.548276][T23756] netlink: 'syz.0.5254': attribute type 10 has an invalid length. [ 1350.579921][T23756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.589701][T23756] team0: Port device netdevsim1 added [ 1350.604655][T23756] netlink: 'syz.0.5254': attribute type 10 has an invalid length. [ 1350.801623][ T4930] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1350.820131][ T4930] Bluetooth: hci6: Injecting HCI hardware error event [ 1350.835476][ T4930] Bluetooth: hci6: hardware error 0x00 [ 1351.180479][T23756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.191247][T23769] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1351.200468][T23756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.211220][T23769] PKCS7: Only support pkcs7_signedData type [ 1352.345155][T23786] can: request_module (can-proto-3) failed. [ 1352.954546][ T4930] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1353.726469][T23812] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5266'. [ 1353.876664][T23815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.898114][T23815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.933749][T23815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1353.967325][T23818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.979098][T23821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5268'. [ 1354.000369][T23821] autofs4:pid:23821:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1354.018572][T23818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.027651][T23821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.049505][T23821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.051623][T23818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.083929][T23818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.324783][T23826] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1354.333709][T23826] PKCS7: Only support pkcs7_signedData type [ 1354.555186][ T4930] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1354.570310][ T4930] Bluetooth: hci0: Injecting HCI hardware error event [ 1354.581579][ T4930] Bluetooth: hci0: hardware error 0x00 [ 1355.740939][T23848] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5275'. [ 1356.711638][ T4930] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1358.250842][T23878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.262082][T23878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.277204][T23878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1358.418233][T23881] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1358.443457][T23881] PKCS7: Only support pkcs7_signedData type [ 1358.904109][T23884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.916333][T23884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.934460][T23884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.945967][T23884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.240295][T23891] bridge_slave_0: left allmulticast mode [ 1359.246471][T23891] bridge_slave_0: left promiscuous mode [ 1359.253439][T23891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.268215][T23891] bridge_slave_1: left allmulticast mode [ 1359.275700][T23891] bridge_slave_1: left promiscuous mode [ 1359.283625][T23891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.315286][T23891] team0: Port device team_slave_0 removed [ 1359.337619][T23891] team0: Port device team_slave_1 removed [ 1359.357798][T23891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.368863][T23891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.380310][T23891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.389825][T23891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.400999][T23891] net_ratelimit: 468 callbacks suppressed [ 1359.401015][T23891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1361.757397][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.764469][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.976389][T23934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.992901][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1362.013904][T23934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.023866][T23935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1362.044416][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1362.062139][T23934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1362.079558][T23936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1362.930574][T23956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.971507][T23956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.027864][T23956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5306'. [ 1363.859052][T23956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5306'. [ 1363.949329][T23969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.968625][T23969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.988957][T23969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.010367][T23969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.200425][ T3353] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1364.225981][T23967] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1364.932609][T23986] FAULT_INJECTION: forcing a failure. [ 1364.932609][T23986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.948260][T23986] CPU: 0 UID: 0 PID: 23986 Comm: syz.1.5313 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.948293][T23986] Tainted: [L]=SOFTLOCKUP [ 1364.948300][T23986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1364.948312][T23986] Call Trace: [ 1364.948321][T23986] [ 1364.948330][T23986] dump_stack_lvl+0xe8/0x150 [ 1364.948366][T23986] should_fail_ex+0x40c/0x560 [ 1364.948397][T23986] _copy_from_user+0x2d/0xb0 [ 1364.948427][T23986] sctp_getsockopt_maxseg+0x17e/0x6c0 [ 1364.948453][T23986] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 1364.948471][T23986] ? sctp_getsockopt+0x12f/0xb90 [ 1364.948495][T23986] ? __local_bh_enable_ip+0xd0/0x130 [ 1364.948523][T23986] sctp_getsockopt+0x92d/0xb90 [ 1364.948547][T23986] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1364.948577][T23986] do_sock_getsockopt+0x51d/0x7e0 [ 1364.948613][T23986] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1364.948632][T23986] ? __fget_files+0x2a/0x420 [ 1364.948673][T23986] ? __fget_files+0x2a/0x420 [ 1364.948695][T23986] ? __fget_files+0x3a2/0x420 [ 1364.948719][T23986] ? __fget_files+0x2a/0x420 [ 1364.948749][T23986] __ia32_sys_getsockopt+0x1a4/0x240 [ 1364.948779][T23986] __do_fast_syscall_32+0x23e/0x6f0 [ 1364.948805][T23986] ? do_fast_syscall_32+0x33/0x70 [ 1364.948827][T23986] ? lockdep_hardirqs_on+0x7a/0x110 [ 1364.948848][T23986] ? asm_int80_emulation+0x1a/0x20 [ 1364.948866][T23986] ? do_int80_emulation+0x29f/0x550 [ 1364.948888][T23986] ? trace_irq_disable+0x3b/0x140 [ 1364.948916][T23986] do_fast_syscall_32+0x33/0x70 [ 1364.948939][T23986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1364.948962][T23986] RIP: 0023:0xf7f550ec [ 1364.948980][T23986] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1364.948997][T23986] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1364.949017][T23986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1364.949030][T23986] RDX: 000000000000000d RSI: 00000000800000c0 RDI: 0000000080000100 [ 1364.949043][T23986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1364.949054][T23986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1364.949065][T23986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.949094][T23986] [ 1365.465353][T23992] FAULT_INJECTION: forcing a failure. [ 1365.465353][T23992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.481867][T23992] CPU: 0 UID: 0 PID: 23992 Comm: syz.4.5316 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.481902][T23992] Tainted: [L]=SOFTLOCKUP [ 1365.481910][T23992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1365.481922][T23992] Call Trace: [ 1365.481931][T23992] [ 1365.481940][T23992] dump_stack_lvl+0xe8/0x150 [ 1365.481975][T23992] should_fail_ex+0x40c/0x560 [ 1365.482007][T23992] _copy_from_user+0x2d/0xb0 [ 1365.482041][T23992] sctp_getsockopt_peeloff+0xc4/0x230 [ 1365.482084][T23992] ? __pfx_sctp_getsockopt_peeloff+0x10/0x10 [ 1365.482114][T23992] ? sctp_getsockopt+0x12f/0xb90 [ 1365.482140][T23992] ? __local_bh_enable_ip+0xd0/0x130 [ 1365.482170][T23992] sctp_getsockopt+0x196/0xb90 [ 1365.482194][T23992] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1365.482228][T23992] do_sock_getsockopt+0x51d/0x7e0 [ 1365.482258][T23992] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1365.482279][T23992] ? __fget_files+0x2a/0x420 [ 1365.482318][T23992] ? __fget_files+0x2a/0x420 [ 1365.482340][T23992] ? __fget_files+0x3a2/0x420 [ 1365.482361][T23992] ? __fget_files+0x2a/0x420 [ 1365.482388][T23992] __ia32_sys_getsockopt+0x1a4/0x240 [ 1365.482415][T23992] __do_fast_syscall_32+0x23e/0x6f0 [ 1365.482438][T23992] ? do_fast_syscall_32+0x33/0x70 [ 1365.482458][T23992] ? lockdep_hardirqs_on+0x7a/0x110 [ 1365.482477][T23992] ? asm_int80_emulation+0x1a/0x20 [ 1365.482494][T23992] ? do_int80_emulation+0x29f/0x550 [ 1365.482514][T23992] ? trace_irq_disable+0x3b/0x140 [ 1365.482538][T23992] do_fast_syscall_32+0x33/0x70 [ 1365.482559][T23992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1365.482580][T23992] RIP: 0023:0xf6fff0ec [ 1365.482596][T23992] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1365.482610][T23992] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1365.482629][T23992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1365.482640][T23992] RDX: 0000000000000066 RSI: 0000000080000080 RDI: 0000000080000100 [ 1365.482652][T23992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1365.482662][T23992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1365.482672][T23992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.482695][T23992] [ 1365.739336][T23993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.749614][T23993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.203038][T24006] netlink: 'syz.0.5320': attribute type 10 has an invalid length. [ 1366.234039][T24006] netlink: 'syz.0.5320': attribute type 10 has an invalid length. [ 1367.184187][T24006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.233221][T24006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.357689][T24029] FAULT_INJECTION: forcing a failure. [ 1368.357689][T24029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.388900][T24029] CPU: 0 UID: 0 PID: 24029 Comm: syz.1.5328 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.388926][T24029] Tainted: [L]=SOFTLOCKUP [ 1368.388932][T24029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1368.388942][T24029] Call Trace: [ 1368.388948][T24029] [ 1368.388955][T24029] dump_stack_lvl+0xe8/0x150 [ 1368.388983][T24029] should_fail_ex+0x40c/0x560 [ 1368.389005][T24029] _copy_from_iter+0x1d3/0x1660 [ 1368.389024][T24029] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1368.389045][T24029] ? rcu_is_watching+0x15/0xb0 [ 1368.389069][T24029] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1368.389088][T24029] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1368.389105][T24029] ? __pfx__copy_from_iter+0x10/0x10 [ 1368.389124][T24029] ? __alloc_skb+0x276/0x7a0 [ 1368.389138][T24029] ? __alloc_skb+0x276/0x7a0 [ 1368.389156][T24029] ? netlink_sendmsg+0x650/0xb40 [ 1368.389175][T24029] ? skb_put+0x112/0x210 [ 1368.389195][T24029] netlink_sendmsg+0x6c0/0xb40 [ 1368.389225][T24029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.389248][T24029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1368.389269][T24029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.389288][T24029] sock_sendmsg_nosec+0x13a/0x180 [ 1368.389313][T24029] ____sys_sendmsg+0x54e/0x850 [ 1368.389334][T24029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1368.389362][T24029] ___sys_sendmsg+0x2a5/0x360 [ 1368.389378][T24029] ? __lock_acquire+0x683/0x2cf0 [ 1368.389402][T24029] ? __pfx____sys_sendmsg+0x10/0x10 [ 1368.389418][T24029] ? get_pid_task+0x20/0x1f0 [ 1368.389438][T24029] ? get_pid_task+0x20/0x1f0 [ 1368.389456][T24029] ? get_pid_task+0x20/0x1f0 [ 1368.389496][T24029] ? __fget_files+0x2a/0x420 [ 1368.389515][T24029] ? __fget_files+0x3a2/0x420 [ 1368.389541][T24029] __sys_sendmsg+0x177/0x240 [ 1368.389560][T24029] ? __pfx___sys_sendmsg+0x10/0x10 [ 1368.389590][T24029] __do_fast_syscall_32+0x23e/0x6f0 [ 1368.389611][T24029] ? do_fast_syscall_32+0x33/0x70 [ 1368.389628][T24029] ? lockdep_hardirqs_on+0x7a/0x110 [ 1368.389645][T24029] ? asm_int80_emulation+0x1a/0x20 [ 1368.389659][T24029] ? do_int80_emulation+0x29f/0x550 [ 1368.389677][T24029] ? trace_irq_disable+0x3b/0x140 [ 1368.389704][T24029] do_fast_syscall_32+0x33/0x70 [ 1368.389723][T24029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1368.389742][T24029] RIP: 0023:0xf7f550ec [ 1368.389756][T24029] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1368.389769][T24029] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1368.389786][T24029] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 1368.389796][T24029] RDX: 0000000004008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1368.389806][T24029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1368.389815][T24029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1368.389824][T24029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1368.389845][T24029] [ 1368.768054][ T30] audit: type=1400 audit(1786810993.791:867): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26262073 pid=24026 comm="syz.4.5327" [ 1368.906493][T24035] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1368.960671][T24035] PKCS7: Only support pkcs7_signedData type [ 1369.006775][T24038] random: crng reseeded on system resumption [ 1369.117943][T24043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.138115][T24043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.171176][T24041] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1369.251491][T24046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.270673][T24046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.305499][T24046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1369.467675][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1369.696267][T14220] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1369.712179][T24041] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1369.781818][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.792039][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.810729][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.824404][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.977429][T24058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.988825][T24058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.872497][T24075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.882581][T24075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.895523][T24075] tipc: Cannot configure node identity twice [ 1371.763702][T24089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.806276][T24089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.856027][T24089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1373.791080][T24111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.833017][T24111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.138318][T24118] FAULT_INJECTION: forcing a failure. [ 1374.138318][T24118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.209312][T24118] CPU: 0 UID: 0 PID: 24118 Comm: syz.0.5357 Tainted: G L syzkaller #0 PREEMPT(full) [ 1374.209349][T24118] Tainted: [L]=SOFTLOCKUP [ 1374.209357][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1374.209370][T24118] Call Trace: [ 1374.209379][T24118] [ 1374.209391][T24118] dump_stack_lvl+0xe8/0x150 [ 1374.209427][T24118] should_fail_ex+0x40c/0x560 [ 1374.209459][T24118] _copy_to_user+0x31/0xb0 [ 1374.209495][T24118] simple_read_from_buffer+0xe1/0x170 [ 1374.209528][T24118] proc_fail_nth_read+0x1bb/0x230 [ 1374.209560][T24118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1374.209592][T24118] ? rw_verify_area+0x24a/0x4c0 [ 1374.209629][T24118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1374.209654][T24118] vfs_read+0x213/0xa80 [ 1374.209690][T24118] ? __pfx___mutex_lock+0x10/0x10 [ 1374.209719][T24118] ? __pfx_vfs_read+0x10/0x10 [ 1374.209751][T24118] ? __fget_files+0x2a/0x420 [ 1374.209784][T24118] ? __fget_files+0x3a2/0x420 [ 1374.209809][T24118] ? __fget_files+0x2a/0x420 [ 1374.209844][T24118] ksys_read+0x150/0x270 [ 1374.209877][T24118] ? __pfx_ksys_read+0x10/0x10 [ 1374.209912][T24118] ? asm_int80_emulation+0x1a/0x20 [ 1374.209939][T24118] do_int80_emulation+0x19a/0x550 [ 1374.209965][T24118] ? trace_irq_disable+0x3b/0x140 [ 1374.209988][T24118] ? asm_int80_emulation+0x1a/0x20 [ 1374.210008][T24118] ? clear_bhb_loop+0x70/0xc0 [ 1374.210028][T24118] ? clear_bhb_loop+0x70/0xc0 [ 1374.210054][T24118] asm_int80_emulation+0x1a/0x20 [ 1374.210074][T24118] RIP: 0023:0xf71974eb [ 1374.210094][T24118] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1374.210112][T24118] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1374.210134][T24118] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 1374.210149][T24118] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.210162][T24118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1374.210174][T24118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1374.210187][T24118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1374.210216][T24118] [ 1374.875279][T24129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.898619][T24129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.923752][T24133] netlink: 'syz.3.5360': attribute type 10 has an invalid length. [ 1374.937559][T24129] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1374.987350][T24133] netlink: 'syz.3.5360': attribute type 10 has an invalid length. [ 1375.382219][T24139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.422666][T24139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.466569][T24139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.503966][T24139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.620487][T24133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.681067][T24133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.761674][T24154] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1376.834324][T24154] PKCS7: Only support pkcs7_signedData type [ 1376.953725][T24162] FAULT_INJECTION: forcing a failure. [ 1376.953725][T24162] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.028484][T24162] CPU: 0 UID: 0 PID: 24162 Comm: syz.4.5366 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.028526][T24162] Tainted: [L]=SOFTLOCKUP [ 1377.028536][T24162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.028551][T24162] Call Trace: [ 1377.028561][T24162] [ 1377.028572][T24162] dump_stack_lvl+0xe8/0x150 [ 1377.028614][T24162] should_fail_ex+0x40c/0x560 [ 1377.028652][T24162] should_failslab+0xa8/0x100 [ 1377.028692][T24162] __kmalloc_noprof+0xfe/0x720 [ 1377.028724][T24162] ? __kmalloc_cache_noprof+0x150/0x660 [ 1377.028754][T24162] ? alloc_pipe_info+0x1f9/0x4c0 [ 1377.028778][T24162] ? alloc_pipe_info+0x1f9/0x4c0 [ 1377.028808][T24162] alloc_pipe_info+0x1f9/0x4c0 [ 1377.028847][T24162] splice_direct_to_actor+0xa41/0xcb0 [ 1377.028894][T24162] ? get_pid_task+0x20/0x1f0 [ 1377.028929][T24162] ? get_pid_task+0x20/0x1f0 [ 1377.028963][T24162] ? __pfx_aa_file_perm+0x10/0x10 [ 1377.028993][T24162] ? __pfx_direct_splice_actor+0x10/0x10 [ 1377.029030][T24162] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1377.029078][T24162] do_splice_direct+0x195/0x290 [ 1377.029118][T24162] ? __pfx_do_splice_direct+0x10/0x10 [ 1377.029153][T24162] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1377.029193][T24162] ? bpf_lsm_file_permission+0x9/0x20 [ 1377.029222][T24162] ? security_file_permission+0x75/0x260 [ 1377.029258][T24162] ? rw_verify_area+0x203/0x4c0 [ 1377.029300][T24162] do_sendfile+0x52e/0x7c0 [ 1377.029340][T24162] ? __pfx_do_sendfile+0x10/0x10 [ 1377.029375][T24162] ? ksys_write+0x242/0x270 [ 1377.029417][T24162] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 1377.029452][T24162] __do_fast_syscall_32+0x23e/0x6f0 [ 1377.029486][T24162] ? do_fast_syscall_32+0x33/0x70 [ 1377.029516][T24162] ? lockdep_hardirqs_on+0x7a/0x110 [ 1377.029544][T24162] ? asm_int80_emulation+0x1a/0x20 [ 1377.029573][T24162] ? do_int80_emulation+0x29f/0x550 [ 1377.029602][T24162] ? trace_irq_disable+0x3b/0x140 [ 1377.029637][T24162] do_fast_syscall_32+0x33/0x70 [ 1377.029669][T24162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1377.029700][T24162] RIP: 0023:0xf6fff0ec [ 1377.029723][T24162] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1377.029745][T24162] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1377.029772][T24162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 1377.029789][T24162] RDX: 0000000000000000 RSI: 0000000000023896 RDI: 0000000000000000 [ 1377.029803][T24162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1377.029818][T24162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1377.029834][T24162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1377.029878][T24162] [ 1377.937603][T24172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.957352][T24172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.986426][T24172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5372'. [ 1379.361450][T24192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.370768][T24192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.417514][T24192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1379.929230][T24195] FAULT_INJECTION: forcing a failure. [ 1379.929230][T24195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.943971][T24195] CPU: 1 UID: 0 PID: 24195 Comm: syz.0.5377 Tainted: G L syzkaller #0 PREEMPT(full) [ 1379.944008][T24195] Tainted: [L]=SOFTLOCKUP [ 1379.944016][T24195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1379.944030][T24195] Call Trace: [ 1379.944038][T24195] [ 1379.944048][T24195] dump_stack_lvl+0xe8/0x150 [ 1379.944085][T24195] should_fail_ex+0x40c/0x560 [ 1379.944116][T24195] _copy_from_user+0x2d/0xb0 [ 1379.944149][T24195] snd_pcm_oss_write2+0x227/0x440 [ 1379.944208][T24195] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1379.944240][T24195] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 1379.944271][T24195] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 1379.944308][T24195] snd_pcm_oss_write+0x65e/0xb40 [ 1379.944351][T24195] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1379.944380][T24195] vfs_write+0x296/0xba0 [ 1379.944422][T24195] ? __pfx_vfs_write+0x10/0x10 [ 1379.944455][T24195] ? __fget_files+0x2a/0x420 [ 1379.944485][T24195] ? __fget_files+0x2a/0x420 [ 1379.944510][T24195] ? __fget_files+0x3a2/0x420 [ 1379.944536][T24195] ? __fget_files+0x2a/0x420 [ 1379.944573][T24195] ksys_write+0x150/0x270 [ 1379.944608][T24195] ? __pfx_ksys_write+0x10/0x10 [ 1379.944660][T24195] __do_fast_syscall_32+0x23e/0x6f0 [ 1379.944687][T24195] ? do_fast_syscall_32+0x33/0x70 [ 1379.944711][T24195] ? lockdep_hardirqs_on+0x7a/0x110 [ 1379.944734][T24195] ? asm_int80_emulation+0x1a/0x20 [ 1379.944754][T24195] ? do_int80_emulation+0x29f/0x550 [ 1379.944779][T24195] ? trace_irq_disable+0x3b/0x140 [ 1379.944809][T24195] do_fast_syscall_32+0x33/0x70 [ 1379.944836][T24195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1379.944862][T24195] RIP: 0023:0xf7f950ec [ 1379.944882][T24195] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1379.944898][T24195] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1379.944945][T24195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1379.944960][T24195] RDX: 000000000000ffaa RSI: 0000000000000000 RDI: 0000000000000000 [ 1379.944977][T24195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1379.944989][T24195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1379.945003][T24195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1379.945033][T24195] [ 1380.234838][T24197] netlink: 'syz.2.5378': attribute type 10 has an invalid length. [ 1380.244494][ T4930] Bluetooth: hci5: unexpected event for opcode 0x2024 [ 1380.251978][T24197] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1380.260804][T24197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1380.269725][T24197] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1380.282392][T24197] team0: Port device netdevsim1 added [ 1380.308684][T24198] netlink: 'syz.2.5378': attribute type 10 has an invalid length. [ 1380.388407][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.406525][T24200] netlink: 'syz.4.5379': attribute type 10 has an invalid length. [ 1380.416392][T24200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1380.426505][T24200] team0: Port device netdevsim1 added [ 1380.439575][T24200] netlink: 'syz.4.5379': attribute type 10 has an invalid length. [ 1380.448848][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.259263][T24200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.297526][T24200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.416264][T24208] sctp: [Deprecated]: syz.0.5382 (pid 24208) Use of int in maxseg socket option. [ 1381.416264][T24208] Use struct sctp_assoc_value instead [ 1382.092840][T24222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.152288][T24222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.571787][T24228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.587030][T24228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.608923][T24228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.620484][T24228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.312649][T24246] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1383.340537][T24246] PKCS7: Only support pkcs7_signedData type [ 1383.764852][ T4930] Bluetooth: hci5: unexpected event for opcode 0x2024 [ 1383.790190][T24261] netlink: 'syz.2.5399': attribute type 10 has an invalid length. [ 1383.820342][T24261] netlink: 'syz.2.5399': attribute type 10 has an invalid length. [ 1384.124313][T24261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.134134][T24261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.271261][T24264] FAULT_INJECTION: forcing a failure. [ 1384.271261][T24264] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.285675][T24264] CPU: 0 UID: 0 PID: 24264 Comm: syz.4.5400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.285701][T24264] Tainted: [L]=SOFTLOCKUP [ 1384.285707][T24264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.285735][T24264] Call Trace: [ 1384.285742][T24264] [ 1384.285750][T24264] dump_stack_lvl+0xe8/0x150 [ 1384.285778][T24264] should_fail_ex+0x40c/0x560 [ 1384.285800][T24264] should_failslab+0xa8/0x100 [ 1384.285824][T24264] __kmalloc_noprof+0xfe/0x720 [ 1384.285842][T24264] ? rcu_is_watching+0x15/0xb0 [ 1384.285866][T24264] ? tomoyo_realpath_from_path+0xef/0x640 [ 1384.285883][T24264] ? tomoyo_realpath_from_path+0xef/0x640 [ 1384.285904][T24264] tomoyo_realpath_from_path+0xef/0x640 [ 1384.285928][T24264] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1384.285951][T24264] tomoyo_path_number_perm+0x246/0x5f0 [ 1384.285981][T24264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1384.286003][T24264] ? __lock_acquire+0x683/0x2cf0 [ 1384.286033][T24264] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1384.286079][T24264] ? __fget_files+0x2a/0x420 [ 1384.286102][T24264] ? __fget_files+0x3a2/0x420 [ 1384.286120][T24264] ? __fget_files+0x2a/0x420 [ 1384.286142][T24264] security_file_ioctl_compat+0xc3/0x2a0 [ 1384.286170][T24264] __ia32_compat_sys_ioctl+0x139/0x950 [ 1384.286189][T24264] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1384.286205][T24264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1384.286227][T24264] ? __fget_files+0x3a2/0x420 [ 1384.286251][T24264] ? fput+0xa0/0xd0 [ 1384.286270][T24264] ? ksys_write+0x242/0x270 [ 1384.286301][T24264] __do_fast_syscall_32+0x23e/0x6f0 [ 1384.286320][T24264] ? do_fast_syscall_32+0x33/0x70 [ 1384.286338][T24264] ? lockdep_hardirqs_on+0x7a/0x110 [ 1384.286355][T24264] ? asm_int80_emulation+0x1a/0x20 [ 1384.286369][T24264] ? do_int80_emulation+0x29f/0x550 [ 1384.286412][T24264] ? trace_irq_disable+0x3b/0x140 [ 1384.286442][T24264] do_fast_syscall_32+0x33/0x70 [ 1384.286475][T24264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1384.286494][T24264] RIP: 0023:0xf6fff0ec [ 1384.286509][T24264] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1384.286522][T24264] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1384.286538][T24264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000bfffffff [ 1384.286549][T24264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1384.286558][T24264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1384.286567][T24264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1384.286576][T24264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.286597][T24264] [ 1384.286616][T24264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1384.327500][ T4930] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1384.587074][ T4930] Bluetooth: hci5: Injecting HCI hardware error event [ 1384.597476][ T4930] Bluetooth: hci5: hardware error 0x00 [ 1384.906142][T24273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.916574][T24273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.935174][T24273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.944378][T24273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.165162][T24295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.175694][T24295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.711588][ T4930] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1386.850082][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5411'. [ 1387.209605][ T9628] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1387.232397][T24305] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1387.579800][T24315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.615530][T24315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.025740][T24317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.054526][T24317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.099513][T24317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.133963][T24317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.212577][T24319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.222757][T24319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.468949][T24322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.503836][T24322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.538594][T24319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1388.800689][T24328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.816670][T19024] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1388.836228][T24328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.845917][T24320] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1390.015153][T24342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.036218][T24342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.112583][ T5612] IPVS: starting estimator thread 0... [ 1390.152425][T24345] syzkaller1: entered promiscuous mode [ 1390.170172][T24345] syzkaller1: entered allmulticast mode [ 1390.221454][T24346] IPVS: using max 33 ests per chain, 79200 per kthread [ 1390.401600][T24351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.428577][T24351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.457765][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5427'. [ 1390.472145][T24353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.489690][T24353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.130548][T24361] can: request_module (can-proto-3) failed. [ 1391.282231][T24365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.318564][T24365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.346767][T24365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.382159][T24365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.626194][T24376] can: request_module (can-proto-3) failed. [ 1391.739481][T24382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.748751][T24382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.806396][T24385] FAULT_INJECTION: forcing a failure. [ 1391.806396][T24385] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.820015][T24385] CPU: 1 UID: 0 PID: 24385 Comm: syz.4.5438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.820066][T24385] Tainted: [L]=SOFTLOCKUP [ 1391.820076][T24385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1391.820091][T24385] Call Trace: [ 1391.820100][T24385] [ 1391.820111][T24385] dump_stack_lvl+0xe8/0x150 [ 1391.820155][T24385] should_fail_ex+0x40c/0x560 [ 1391.820191][T24385] should_failslab+0xa8/0x100 [ 1391.820230][T24385] __kmalloc_noprof+0xfe/0x720 [ 1391.820260][T24385] ? rcu_is_watching+0x15/0xb0 [ 1391.820297][T24385] ? tomoyo_realpath_from_path+0xef/0x640 [ 1391.820325][T24385] ? tomoyo_realpath_from_path+0xef/0x640 [ 1391.820360][T24385] tomoyo_realpath_from_path+0xef/0x640 [ 1391.820399][T24385] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1391.820436][T24385] tomoyo_path_number_perm+0x246/0x5f0 [ 1391.820475][T24385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1391.820511][T24385] ? __lock_acquire+0x683/0x2cf0 [ 1391.820561][T24385] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1391.820624][T24385] ? __fget_files+0x2a/0x420 [ 1391.820661][T24385] ? __fget_files+0x3a2/0x420 [ 1391.820697][T24385] ? __fget_files+0x2a/0x420 [ 1391.820733][T24385] security_file_ioctl_compat+0xc3/0x2a0 [ 1391.820771][T24385] __ia32_compat_sys_ioctl+0x139/0x950 [ 1391.820801][T24385] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1391.820828][T24385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1391.820860][T24385] ? __fget_files+0x3a2/0x420 [ 1391.820899][T24385] ? fput+0xa0/0xd0 [ 1391.820930][T24385] ? ksys_write+0x242/0x270 [ 1391.820987][T24385] __do_fast_syscall_32+0x23e/0x6f0 [ 1391.821020][T24385] ? do_fast_syscall_32+0x33/0x70 [ 1391.821049][T24385] ? lockdep_hardirqs_on+0x7a/0x110 [ 1391.821077][T24385] ? asm_int80_emulation+0x1a/0x20 [ 1391.821100][T24385] ? do_int80_emulation+0x29f/0x550 [ 1391.821130][T24385] ? trace_irq_disable+0x3b/0x140 [ 1391.821163][T24385] do_fast_syscall_32+0x33/0x70 [ 1391.821194][T24385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1391.821225][T24385] RIP: 0023:0xf6fff0ec [ 1391.821248][T24385] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1391.821270][T24385] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1391.821295][T24385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5605 [ 1391.821312][T24385] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.821327][T24385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1391.821341][T24385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1391.821356][T24385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1391.821390][T24385] [ 1392.142464][T24385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1392.414841][T24395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.483953][T24395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.123597][T24398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.177443][T24398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.816648][T24402] can: request_module (can-proto-3) failed. [ 1394.249721][ T4930] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 1394.271851][T24416] netlink: 'syz.1.5447': attribute type 10 has an invalid length. [ 1394.333367][T24419] netlink: 'syz.1.5447': attribute type 10 has an invalid length. [ 1394.574342][T24416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1394.654242][T24416] team0: Port device netdevsim1 added [ 1396.044597][T24435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.082261][T24435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.095230][T24435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.106066][T24435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.127069][T24416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.149869][T24416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.206986][T24438] FAULT_INJECTION: forcing a failure. [ 1396.206986][T24438] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.220158][T24438] CPU: 1 UID: 0 PID: 24438 Comm: syz.2.5453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.220183][T24438] Tainted: [L]=SOFTLOCKUP [ 1396.220189][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.220199][T24438] Call Trace: [ 1396.220205][T24438] [ 1396.220212][T24438] dump_stack_lvl+0xe8/0x150 [ 1396.220239][T24438] should_fail_ex+0x40c/0x560 [ 1396.220261][T24438] should_failslab+0xa8/0x100 [ 1396.220285][T24438] __kmalloc_noprof+0xfe/0x720 [ 1396.220305][T24438] ? tomoyo_encode+0x2ad/0x570 [ 1396.220321][T24438] ? tomoyo_encode+0x2ad/0x570 [ 1396.220341][T24438] tomoyo_encode+0x2ad/0x570 [ 1396.220361][T24438] tomoyo_realpath_from_path+0x5fa/0x640 [ 1396.220385][T24438] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1396.220408][T24438] tomoyo_path_number_perm+0x246/0x5f0 [ 1396.220432][T24438] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1396.220453][T24438] ? __lock_acquire+0x683/0x2cf0 [ 1396.220484][T24438] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1396.220523][T24438] ? __fget_files+0x2a/0x420 [ 1396.220546][T24438] ? __fget_files+0x3a2/0x420 [ 1396.220564][T24438] ? __fget_files+0x2a/0x420 [ 1396.220587][T24438] security_file_ioctl_compat+0xc3/0x2a0 [ 1396.220610][T24438] __ia32_compat_sys_ioctl+0x139/0x950 [ 1396.220628][T24438] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1396.220645][T24438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1396.220665][T24438] ? __fget_files+0x3a2/0x420 [ 1396.220689][T24438] ? fput+0xa0/0xd0 [ 1396.220708][T24438] ? ksys_write+0x242/0x270 [ 1396.220739][T24438] __do_fast_syscall_32+0x23e/0x6f0 [ 1396.220758][T24438] ? do_fast_syscall_32+0x33/0x70 [ 1396.220776][T24438] ? lockdep_hardirqs_on+0x7a/0x110 [ 1396.220793][T24438] ? asm_int80_emulation+0x1a/0x20 [ 1396.220807][T24438] ? do_int80_emulation+0x29f/0x550 [ 1396.220826][T24438] ? trace_irq_disable+0x3b/0x140 [ 1396.220846][T24438] do_fast_syscall_32+0x33/0x70 [ 1396.220865][T24438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1396.220884][T24438] RIP: 0023:0xf6fef0ec [ 1396.220898][T24438] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1396.220911][T24438] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1396.220927][T24438] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000054a2 [ 1396.220937][T24438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1396.220947][T24438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1396.220956][T24438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1396.220965][T24438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.220987][T24438] [ 1396.221004][T24438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1396.352331][T24440] fuse: Bad value for 'fd' [ 1396.676696][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.702772][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.318511][ T4930] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1398.333819][ T4930] Bluetooth: hci1: Injecting HCI hardware error event [ 1398.352107][T23762] Bluetooth: hci1: hardware error 0x00 [ 1398.422552][T24462] can: request_module (can-proto-3) failed. [ 1398.665449][T24468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.701763][T24468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.001182][T24471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.036144][T24471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.075847][T24471] bridge0: port 3(syz_tun) entered blocking state [ 1399.101508][T24471] bridge0: port 3(syz_tun) entered disabled state [ 1399.118260][T24471] syz_tun: entered allmulticast mode [ 1399.140855][T24471] syz_tun: entered promiscuous mode [ 1399.148254][T24471] bridge0: port 3(syz_tun) entered blocking state [ 1399.154959][T24471] bridge0: port 3(syz_tun) entered forwarding state [ 1399.187722][T24474] netlink: 'syz.1.5462': attribute type 29 has an invalid length. [ 1399.201225][T24473] bridge0: port 4(ip6gretap0) entered blocking state [ 1399.228146][T24473] bridge0: port 4(ip6gretap0) entered disabled state [ 1399.263344][T24473] ip6gretap0: entered allmulticast mode [ 1399.294978][T24473] ip6gretap0: entered promiscuous mode [ 1399.300953][T24473] bridge0: port 4(ip6gretap0) entered blocking state [ 1399.308027][T24473] bridge0: port 4(ip6gretap0) entered forwarding state [ 1399.355219][T24476] netlink: 'syz.1.5462': attribute type 29 has an invalid length. [ 1399.400152][T24473] bridge0: port 5(team0) entered blocking state [ 1399.421533][T24473] bridge0: port 5(team0) entered disabled state [ 1399.442134][T24473] team0: entered allmulticast mode [ 1399.465230][T24473] team_slave_0: entered allmulticast mode [ 1399.490136][T24473] team_slave_1: entered allmulticast mode [ 1399.515977][T24473] vlan0: entered allmulticast mode [ 1399.533871][T24473] veth0_vlan: entered allmulticast mode [ 1399.562304][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5460'. [ 1399.582041][T24473] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1399.655805][T24473] team0: entered promiscuous mode [ 1399.693487][T24473] team_slave_0: entered promiscuous mode [ 1399.711625][T24473] team_slave_1: entered promiscuous mode [ 1399.727388][T24473] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1399.770722][T24473] bridge0: port 5(team0) entered blocking state [ 1399.777203][T24473] bridge0: port 5(team0) entered forwarding state [ 1399.847920][T24471] bridge0: port 6(dummy0) entered blocking state [ 1399.876855][T24471] bridge0: port 6(dummy0) entered disabled state [ 1399.908187][T24471] dummy0: entered allmulticast mode [ 1400.020223][T24471] dummy0: entered promiscuous mode [ 1400.045165][T24471] bridge0: port 6(dummy0) entered blocking state [ 1400.051768][T24471] bridge0: port 6(dummy0) entered forwarding state [ 1400.078737][ T78] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1400.141795][T24480] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1400.157176][T24479] bridge0: port 7(batadv0) entered blocking state [ 1400.181517][T24479] bridge0: port 7(batadv0) entered disabled state [ 1400.201616][T24479] batadv0: entered allmulticast mode [ 1400.232437][T24479] batadv0: entered promiscuous mode [ 1400.252580][T24479] bridge0: port 7(batadv0) entered blocking state [ 1400.259237][T24479] bridge0: port 7(batadv0) entered forwarding state [ 1400.291593][T14220] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1400.315442][T14220] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1400.424106][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.464156][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.551779][T23762] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1401.023871][T24496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.038678][T24496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.050146][T24496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.061905][T24496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.366282][T24502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.381114][T24502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.399452][T24502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.410089][T24502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.676254][T24511] FAULT_INJECTION: forcing a failure. [ 1401.676254][T24511] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.689146][T24511] CPU: 0 UID: 0 PID: 24511 Comm: syz.0.5470 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.689182][T24511] Tainted: [L]=SOFTLOCKUP [ 1401.689191][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1401.689205][T24511] Call Trace: [ 1401.689214][T24511] [ 1401.689225][T24511] dump_stack_lvl+0xe8/0x150 [ 1401.689262][T24511] should_fail_ex+0x40c/0x560 [ 1401.689298][T24511] should_failslab+0xa8/0x100 [ 1401.689332][T24511] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1401.689361][T24511] ? __d_alloc+0x37/0x6f0 [ 1401.689389][T24511] ? __d_alloc+0x37/0x6f0 [ 1401.689434][T24511] __d_alloc+0x37/0x6f0 [ 1401.689466][T24511] d_alloc_pseudo+0x21/0xc0 [ 1401.689497][T24511] alloc_path_pseudo+0x107/0x220 [ 1401.689527][T24511] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1401.689555][T24511] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1401.689579][T24511] alloc_file_pseudo+0xa8/0x1e0 [ 1401.689601][T24511] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1401.689618][T24511] ? security_inode_alloc+0xd5/0x310 [ 1401.689637][T24511] ? inode_init_always_gfp+0x994/0xd30 [ 1401.689659][T24511] sock_alloc_file+0xb8/0x2e0 [ 1401.689683][T24511] do_accept+0x3a0/0x750 [ 1401.689701][T24511] ? __pfx_do_accept+0x10/0x10 [ 1401.689740][T24511] __sys_accept4+0x139/0x230 [ 1401.689756][T24511] ? __pfx___sys_accept4+0x10/0x10 [ 1401.689771][T24511] ? ksys_write+0x242/0x270 [ 1401.689799][T24511] __ia32_sys_accept4+0x9a/0xb0 [ 1401.689815][T24511] __do_fast_syscall_32+0x23e/0x6f0 [ 1401.689836][T24511] ? do_fast_syscall_32+0x33/0x70 [ 1401.689854][T24511] ? lockdep_hardirqs_on+0x7a/0x110 [ 1401.689870][T24511] ? asm_int80_emulation+0x1a/0x20 [ 1401.689885][T24511] ? do_int80_emulation+0x29f/0x550 [ 1401.689904][T24511] ? trace_irq_disable+0x3b/0x140 [ 1401.689927][T24511] do_fast_syscall_32+0x33/0x70 [ 1401.689946][T24511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1401.689965][T24511] RIP: 0023:0xf7f950ec [ 1401.689979][T24511] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1401.689993][T24511] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 1401.690009][T24511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1401.690019][T24511] RDX: 00000000800001c0 RSI: 0000000000080800 RDI: 0000000000000000 [ 1401.690029][T24511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.690038][T24511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1401.690047][T24511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.690069][T24511] [ 1402.258121][T24518] fuse: Bad value for 'fd' [ 1402.390847][T24527] netlink: 'syz.2.5475': attribute type 10 has an invalid length. [ 1402.415258][T24527] netlink: 'syz.2.5475': attribute type 10 has an invalid length. [ 1402.467342][T24521] can: request_module (can-proto-3) failed. [ 1403.195318][T24527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.206881][T24527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.348751][T24539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.367750][T24539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.518852][T24541] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1403.573365][T24541] PKCS7: Only support pkcs7_signedData type [ 1405.037137][T24565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.062968][T24565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.090355][T24565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1405.169651][T24568] syzkaller0: entered promiscuous mode [ 1405.183973][T24568] syzkaller0: entered allmulticast mode [ 1405.611925][T24577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.629810][T24577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.797488][T24582] netlink: 'syz.2.5494': attribute type 10 has an invalid length. [ 1405.807712][T24582] netlink: 'syz.2.5494': attribute type 10 has an invalid length. [ 1405.864079][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5493'. [ 1405.886141][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5493'. [ 1405.955725][T24587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.978495][T24587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.354790][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.370043][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.360094][T24603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.387915][T24603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.461633][T24605] FAULT_INJECTION: forcing a failure. [ 1407.461633][T24605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1407.482575][T24605] CPU: 0 UID: 0 PID: 24605 Comm: syz.1.5501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.482614][T24605] Tainted: [L]=SOFTLOCKUP [ 1407.482624][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1407.482639][T24605] Call Trace: [ 1407.482649][T24605] [ 1407.482660][T24605] dump_stack_lvl+0xe8/0x150 [ 1407.482703][T24605] should_fail_ex+0x40c/0x560 [ 1407.482740][T24605] prepare_alloc_pages+0x230/0x650 [ 1407.482782][T24605] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1407.482822][T24605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1407.482861][T24605] ? __pfx_policy_nodemask+0x10/0x10 [ 1407.482895][T24605] ? __get_vm_area_node+0x136/0x300 [ 1407.482920][T24605] ? __vmalloc_node_range_noprof+0x358/0x1730 [ 1407.482949][T24605] ? __vmalloc_node_noprof+0xc2/0x100 [ 1407.482976][T24605] ? dup_task_struct+0x2a0/0x8e0 [ 1407.483003][T24605] ? copy_process+0x820/0x4390 [ 1407.483029][T24605] ? __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 1407.483065][T24605] ? __do_fast_syscall_32+0x23e/0x6f0 [ 1407.483097][T24605] ? do_fast_syscall_32+0x33/0x70 [ 1407.483126][T24605] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1407.483163][T24605] alloc_pages_mpol+0x212/0x380 [ 1407.483206][T24605] alloc_pages_noprof+0xac/0x2a0 [ 1407.483250][T24605] get_free_pages_noprof+0xf/0x80 [ 1407.483284][T24605] __kasan_populate_vmalloc+0x38/0x1c0 [ 1407.483314][T24605] ? do_raw_spin_unlock+0xf5/0x210 [ 1407.483347][T24605] alloc_vmap_area+0xd1a/0x1420 [ 1407.483400][T24605] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1407.483429][T24605] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 1407.483462][T24605] ? __get_vm_area_node+0x136/0x300 [ 1407.483488][T24605] ? __get_vm_area_node+0x136/0x300 [ 1407.483520][T24605] __get_vm_area_node+0x1f2/0x300 [ 1407.483555][T24605] __vmalloc_node_range_noprof+0x358/0x1730 [ 1407.483586][T24605] ? copy_process+0x820/0x4390 [ 1407.483621][T24605] ? percpu_ref_get_many+0x19/0x140 [ 1407.483679][T24605] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1407.483708][T24605] ? rcu_is_watching+0x15/0xb0 [ 1407.483742][T24605] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1407.483771][T24605] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1407.483797][T24605] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1407.483827][T24605] ? memcpy_and_pad+0x48/0x80 [ 1407.483858][T24605] __vmalloc_node_noprof+0xc2/0x100 [ 1407.483886][T24605] ? copy_process+0x820/0x4390 [ 1407.483911][T24605] ? copy_process+0x820/0x4390 [ 1407.483940][T24605] dup_task_struct+0x2a0/0x8e0 [ 1407.483972][T24605] copy_process+0x820/0x4390 [ 1407.484017][T24605] ? kstrtouint+0x6e/0xe0 [ 1407.484049][T24605] ? get_pid_task+0x20/0x1f0 [ 1407.484081][T24605] ? __pfx_copy_process+0x10/0x10 [ 1407.484109][T24605] ? get_pid_task+0x20/0x1f0 [ 1407.484148][T24605] kernel_clone+0x2d7/0x940 [ 1407.484183][T24605] ? __pfx_kernel_clone+0x10/0x10 [ 1407.484221][T24605] ? ksys_write+0x1e6/0x270 [ 1407.484264][T24605] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 1407.484299][T24605] ? __fget_files+0x2a/0x420 [ 1407.484331][T24605] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 1407.484396][T24605] ? ksys_write+0x242/0x270 [ 1407.484447][T24605] __do_fast_syscall_32+0x23e/0x6f0 [ 1407.484479][T24605] ? do_fast_syscall_32+0x33/0x70 [ 1407.484508][T24605] ? lockdep_hardirqs_on+0x7a/0x110 [ 1407.484537][T24605] ? asm_int80_emulation+0x1a/0x20 [ 1407.484560][T24605] ? do_int80_emulation+0x29f/0x550 [ 1407.484597][T24605] do_fast_syscall_32+0x33/0x70 [ 1407.484628][T24605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1407.484659][T24605] RIP: 0023:0xf7f550ec [ 1407.484682][T24605] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1407.484703][T24605] RSP: 002b:00000000f54164bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 1407.484731][T24605] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 0000000000000000 [ 1407.484749][T24605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1407.484764][T24605] RBP: 00000000f7414f80 R08: 0000000000000000 R09: 0000000000000000 [ 1407.484780][T24605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1407.484794][T24605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1407.484830][T24605] [ 1407.488373][T24605] syz.1.5501: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1408.011990][T24605] CPU: 0 UID: 0 PID: 24605 Comm: syz.1.5501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.012028][T24605] Tainted: [L]=SOFTLOCKUP [ 1408.012038][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.012052][T24605] Call Trace: [ 1408.012060][T24605] [ 1408.012070][T24605] dump_stack_lvl+0xe8/0x150 [ 1408.012111][T24605] warn_alloc+0x24c/0x270 [ 1408.012144][T24605] ? kasan_quarantine_put+0xbb/0x1f0 [ 1408.012183][T24605] ? __pfx_warn_alloc+0x10/0x10 [ 1408.012216][T24605] ? __get_vm_area_node+0x20b/0x300 [ 1408.012247][T24605] ? __get_vm_area_node+0x20b/0x300 [ 1408.012280][T24605] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1408.012318][T24605] ? percpu_ref_get_many+0x19/0x140 [ 1408.012375][T24605] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1408.012403][T24605] ? rcu_is_watching+0x15/0xb0 [ 1408.012437][T24605] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1408.012467][T24605] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1408.012492][T24605] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1408.012523][T24605] ? memcpy_and_pad+0x48/0x80 [ 1408.012554][T24605] __vmalloc_node_noprof+0xc2/0x100 [ 1408.012583][T24605] ? copy_process+0x820/0x4390 [ 1408.012608][T24605] ? copy_process+0x820/0x4390 [ 1408.012637][T24605] dup_task_struct+0x2a0/0x8e0 [ 1408.012670][T24605] copy_process+0x820/0x4390 [ 1408.012716][T24605] ? kstrtouint+0x6e/0xe0 [ 1408.012759][T24605] ? get_pid_task+0x20/0x1f0 [ 1408.012793][T24605] ? __pfx_copy_process+0x10/0x10 [ 1408.012821][T24605] ? get_pid_task+0x20/0x1f0 [ 1408.012860][T24605] kernel_clone+0x2d7/0x940 [ 1408.012892][T24605] ? __pfx_kernel_clone+0x10/0x10 [ 1408.012930][T24605] ? ksys_write+0x1e6/0x270 [ 1408.012974][T24605] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 1408.013011][T24605] ? __fget_files+0x2a/0x420 [ 1408.013042][T24605] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 1408.013092][T24605] ? ksys_write+0x242/0x270 [ 1408.013140][T24605] __do_fast_syscall_32+0x23e/0x6f0 [ 1408.013171][T24605] ? do_fast_syscall_32+0x33/0x70 [ 1408.013198][T24605] ? lockdep_hardirqs_on+0x7a/0x110 [ 1408.013225][T24605] ? asm_int80_emulation+0x1a/0x20 [ 1408.013249][T24605] ? do_int80_emulation+0x29f/0x550 [ 1408.013283][T24605] do_fast_syscall_32+0x33/0x70 [ 1408.013313][T24605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.013343][T24605] RIP: 0023:0xf7f550ec [ 1408.013365][T24605] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1408.013387][T24605] RSP: 002b:00000000f54164bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 1408.013414][T24605] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 0000000000000000 [ 1408.013431][T24605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1408.013446][T24605] RBP: 00000000f7414f80 R08: 0000000000000000 R09: 0000000000000000 [ 1408.013462][T24605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1408.013477][T24605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1408.013512][T24605] [ 1408.013566][T24605] Mem-Info: [ 1408.330710][T24610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.342221][T24610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.354801][T24605] active_anon:7555 inactive_anon:145 isolated_anon:0 [ 1408.354801][T24605] active_file:11 inactive_file:44673 isolated_file:0 [ 1408.354801][T24605] unevictable:0 dirty:114 writeback:0 [ 1408.354801][T24605] slab_reclaimable:6922 slab_unreclaimable:107170 [ 1408.354801][T24605] mapped:30842 shmem:1558 pagetables:2264 [ 1408.354801][T24605] sec_pagetables:0 bounce:0 [ 1408.354801][T24605] kernel_misc_reclaimable:0 [ 1408.354801][T24605] free:1299647 free_pcp:13498 free_cma:0 [ 1408.411061][T24605] Node 0 active_anon:30220kB inactive_anon:580kB active_file:44kB inactive_file:178396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123320kB dirty:456kB writeback:0kB shmem:6232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13668kB pagetables:8836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1408.448367][T24605] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1408.489941][T24605] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.523733][T24605] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1408.529639][T24605] Node 0 DMA32 free:1238580kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30220kB inactive_anon:580kB active_file:44kB inactive_file:178396kB unevictable:0kB writepending:456kB zspages:1724kB present:3129332kB managed:2548488kB mlocked:0kB bounce:0kB free_pcp:46940kB local_pcp:28640kB free_cma:0kB [ 1408.601531][T24605] lowmem_reserve[]: 0 0 0 0 0 [ 1408.621175][T24605] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.677035][T24613] FAULT_INJECTION: forcing a failure. [ 1408.677035][T24613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1408.691246][T24613] CPU: 1 UID: 0 PID: 24613 Comm: syz.4.5504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.691289][T24613] Tainted: [L]=SOFTLOCKUP [ 1408.691298][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.691313][T24613] Call Trace: [ 1408.691322][T24613] [ 1408.691333][T24613] dump_stack_lvl+0xe8/0x150 [ 1408.691373][T24613] should_fail_ex+0x40c/0x560 [ 1408.691409][T24613] _copy_from_iter+0x1d3/0x1660 [ 1408.691452][T24613] ? __lock_acquire+0x683/0x2cf0 [ 1408.691484][T24613] ? __pfx__copy_from_iter+0x10/0x10 [ 1408.691535][T24613] tun_get_user+0x50c/0x4370 [ 1408.691587][T24613] ? aa_file_perm+0x18b/0x15f0 [ 1408.691619][T24613] ? aa_file_perm+0x4ed/0x15f0 [ 1408.691643][T24613] ? __pfx_tun_get_user+0x10/0x10 [ 1408.691688][T24613] ? __lock_acquire+0x683/0x2cf0 [ 1408.691725][T24613] ? kstrtoull+0x12f/0x1d0 [ 1408.691758][T24613] ? ref_tracker_alloc+0x341/0x4b0 [ 1408.691792][T24613] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1408.691826][T24613] ? tun_get+0x1c/0x2f0 [ 1408.691861][T24613] ? tun_get+0x1c/0x2f0 [ 1408.691913][T24613] ? tun_get+0x1c/0x2f0 [ 1408.691947][T24613] ? tun_get+0x1c/0x2f0 [ 1408.691986][T24613] tun_chr_write_iter+0x113/0x200 [ 1408.692025][T24613] vfs_write+0x612/0xba0 [ 1408.692073][T24613] ? __pfx_vfs_write+0x10/0x10 [ 1408.692123][T24613] ? __fget_files+0x2a/0x420 [ 1408.692166][T24613] ksys_write+0x150/0x270 [ 1408.692206][T24613] ? __pfx_ksys_write+0x10/0x10 [ 1408.692254][T24613] __do_fast_syscall_32+0x23e/0x6f0 [ 1408.692287][T24613] ? do_fast_syscall_32+0x33/0x70 [ 1408.692315][T24613] ? lockdep_hardirqs_on+0x7a/0x110 [ 1408.692343][T24613] ? asm_int80_emulation+0x1a/0x20 [ 1408.692368][T24613] ? do_int80_emulation+0x29f/0x550 [ 1408.692396][T24613] ? trace_irq_disable+0x3b/0x140 [ 1408.692437][T24613] do_fast_syscall_32+0x33/0x70 [ 1408.692469][T24613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.692500][T24613] RIP: 0023:0xf6fff0ec [ 1408.692522][T24613] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1408.692542][T24613] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1408.692569][T24613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 1408.692585][T24613] RDX: 000000000000ffdd RSI: 0000000000000000 RDI: 0000000000000000 [ 1408.692600][T24613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1408.692615][T24613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1408.692630][T24613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1408.692664][T24613] [ 1408.951911][T24605] lowmem_reserve[]: 0 0 0 0 0 [ 1408.957317][T24605] Node 1 Normal free:3944520kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:296kB unevictable:0kB writepending:0kB zspages:76kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6868kB local_pcp:2644kB free_cma:0kB [ 1408.990009][T24605] lowmem_reserve[]: 0 0 0 0 0 [ 1408.995262][T24605] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1409.008444][T24605] Node 0 DMA32: 1563*4kB (UM) 391*8kB (UME) 845*16kB (UME) 707*32kB (UME) 520*64kB (UME) 281*128kB (UME) 152*256kB (UME) 47*512kB (UME) 23*1024kB (UME) 4*2048kB (UM) 251*4096kB (UM) = 1237588kB [ 1409.027905][T24605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.039903][T24605] Node 1 Normal: 2*4kB (U) 0*8kB 2*16kB (U) 5*32kB (U) 8*64kB (UM) 5*128kB (U) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3944520kB [ 1409.056267][T24605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.065911][T24605] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1409.075828][T24605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.085883][T24605] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1409.095371][T24605] 46414 total pagecache pages [ 1409.100105][T24605] 167 pages in swap cache [ 1409.104516][T24605] Free swap = 118948kB [ 1409.108709][T24605] Total swap = 124996kB [ 1409.113146][T24605] 2097051 pages RAM [ 1409.116993][T24605] 0 pages HighMem/MovableOnly [ 1409.123009][T24605] 428250 pages reserved [ 1409.127211][T24605] 0 pages cma reserved [ 1409.338906][T24625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.354873][T24625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.479985][T24632] FAULT_INJECTION: forcing a failure. [ 1409.479985][T24632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.508453][T24632] CPU: 0 UID: 0 PID: 24632 Comm: syz.2.5510 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.508488][T24632] Tainted: [L]=SOFTLOCKUP [ 1409.508497][T24632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.508510][T24632] Call Trace: [ 1409.508519][T24632] [ 1409.508529][T24632] dump_stack_lvl+0xe8/0x150 [ 1409.508567][T24632] should_fail_ex+0x40c/0x560 [ 1409.508599][T24632] _copy_from_iter+0x1d3/0x1660 [ 1409.508628][T24632] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1409.508666][T24632] ? rcu_is_watching+0x15/0xb0 [ 1409.508709][T24632] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1409.508743][T24632] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1409.508770][T24632] ? __pfx__copy_from_iter+0x10/0x10 [ 1409.508798][T24632] ? __alloc_skb+0x276/0x7a0 [ 1409.508819][T24632] ? __alloc_skb+0x276/0x7a0 [ 1409.508855][T24632] ? netlink_sendmsg+0x650/0xb40 [ 1409.508882][T24632] ? skb_put+0x112/0x210 [ 1409.508907][T24632] netlink_sendmsg+0x6c0/0xb40 [ 1409.508944][T24632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1409.508975][T24632] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1409.509003][T24632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1409.509029][T24632] sock_sendmsg_nosec+0x13a/0x180 [ 1409.509062][T24632] ____sys_sendmsg+0x54e/0x850 [ 1409.509094][T24632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1409.509136][T24632] ___sys_sendmsg+0x2a5/0x360 [ 1409.509161][T24632] ? __lock_acquire+0x683/0x2cf0 [ 1409.509194][T24632] ? __pfx____sys_sendmsg+0x10/0x10 [ 1409.509227][T24632] ? get_pid_task+0x20/0x1f0 [ 1409.509256][T24632] ? get_pid_task+0x20/0x1f0 [ 1409.509282][T24632] ? get_pid_task+0x20/0x1f0 [ 1409.509358][T24632] ? __fget_files+0x2a/0x420 [ 1409.509386][T24632] ? __fget_files+0x3a2/0x420 [ 1409.509429][T24632] __sys_sendmsg+0x177/0x240 [ 1409.509457][T24632] ? __pfx___sys_sendmsg+0x10/0x10 [ 1409.509502][T24632] __do_fast_syscall_32+0x23e/0x6f0 [ 1409.509531][T24632] ? do_fast_syscall_32+0x33/0x70 [ 1409.509557][T24632] ? lockdep_hardirqs_on+0x7a/0x110 [ 1409.509581][T24632] ? asm_int80_emulation+0x1a/0x20 [ 1409.509603][T24632] ? do_int80_emulation+0x29f/0x550 [ 1409.509628][T24632] ? trace_irq_disable+0x3b/0x140 [ 1409.509658][T24632] do_fast_syscall_32+0x33/0x70 [ 1409.509686][T24632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1409.509713][T24632] RIP: 0023:0xf6fef0ec [ 1409.509734][T24632] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1409.509753][T24632] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1409.509777][T24632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 1409.509792][T24632] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.509805][T24632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1409.509818][T24632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1409.509839][T24632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1409.509871][T24632] [ 1411.398839][T24657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.424826][T24657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.465527][T24657] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1411.619174][T24661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.629590][T24661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.645364][T24661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.654671][T24661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.942591][T24685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5524'. [ 1412.961414][ T31] INFO: task kworker/1:1:29 blocked for more than 143 seconds. [ 1412.971985][ T31] Tainted: G L syzkaller #0 [ 1412.993311][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1413.006240][T24685] libceph: secret too big 289 [ 1413.016376][T24685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5524'. [ 1413.029287][ T31] task:kworker/1:1 state:D stack:20328 pid:29 tgid:29 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1413.066989][ T31] Workqueue: usb_hub_wq hub_event [ 1413.091245][ T31] Call Trace: [ 1413.104016][ T31] [ 1413.117067][ T31] __schedule+0x17d9/0x56c0 [ 1413.133719][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1413.146578][ T31] ? __pfx___schedule+0x10/0x10 [ 1413.196185][ T31] ? schedule+0x90/0x2b0 [ 1413.220696][ T31] schedule+0x164/0x2b0 [ 1413.243178][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1413.252320][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1413.257841][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1413.281888][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 1413.297875][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1413.319538][ T31] usb_control_msg+0x234/0x3e0 [ 1413.332889][ T31] hub_port_init+0xb0b/0x28c0 [ 1413.346694][ T31] hub_event+0x24e8/0x4d30 [ 1413.360863][ T31] ? __pfx_hub_event+0x10/0x10 [ 1413.366261][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1413.372565][ T31] ? rcu_is_watching+0x15/0xb0 [ 1413.378362][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1413.384400][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1413.390186][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1413.396709][ T31] ? assign_work+0x3cf/0x5d0 [ 1413.402979][ T31] worker_thread+0xa47/0xfb0 [ 1413.407719][ T31] kthread+0x388/0x470 [ 1413.412909][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1413.418506][ T31] ? __pfx_kthread+0x10/0x10 [ 1413.424343][ T31] ret_from_fork+0x514/0xb70 [ 1413.429205][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.438598][ T31] ? __switch_to+0xc89/0x1420 [ 1413.444004][ T31] ? __pfx_kthread+0x10/0x10 [ 1413.448938][ T31] ret_from_fork_asm+0x1a/0x30 [ 1413.457483][ T31] [ 1413.461192][ T31] INFO: task kworker/0:5:5614 blocked for more than 143 seconds. [ 1413.472189][ T31] Tainted: G L syzkaller #0 [ 1413.488307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1413.507121][ T31] task:kworker/0:5 state:D stack:20800 pid:5614 tgid:5614 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1413.524683][ T31] Workqueue: usb_hub_wq hub_event [ 1413.529955][ T31] Call Trace: [ 1413.533822][ T31] [ 1413.537269][ T31] __schedule+0x17d9/0x56c0 [ 1413.543002][ T31] ? __pfx___schedule+0x10/0x10 [ 1413.548147][ T31] ? schedule+0x90/0x2b0 [ 1413.553266][ T31] schedule+0x164/0x2b0 [ 1413.558763][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1413.567194][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1413.573375][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1413.579648][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 1413.587134][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1413.593963][ T31] usb_control_msg+0x234/0x3e0 [ 1413.598983][ T31] hub_port_init+0xb0b/0x28c0 [ 1413.604427][ T31] hub_event+0x24e8/0x4d30 [ 1413.609726][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1413.615647][ T31] ? __pfx_hub_event+0x10/0x10 [ 1413.620807][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1413.627592][ T31] ? rcu_is_watching+0x15/0xb0 [ 1413.632912][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1413.638820][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1413.645088][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1413.651995][ T31] ? assign_work+0x3cf/0x5d0 [ 1413.656783][ T31] worker_thread+0xa47/0xfb0 [ 1413.662426][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1413.667562][ T31] kthread+0x388/0x470 [ 1413.673715][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1413.679065][ T31] ? __pfx_kthread+0x10/0x10 [ 1413.687318][ T31] ret_from_fork+0x514/0xb70 [ 1413.692946][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.698380][ T31] ? __switch_to+0xc89/0x1420 [ 1413.703705][ T31] ? __pfx_kthread+0x10/0x10 [ 1413.708498][ T31] ret_from_fork_asm+0x1a/0x30 [ 1413.714478][ T31] [ 1413.717811][ T31] INFO: task kworker/1:4:5694 blocked for more than 144 seconds. [ 1413.729044][ T31] Tainted: G L syzkaller #0 [ 1413.736587][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1413.749527][ T31] task:kworker/1:4 state:D stack:21424 pid:5694 tgid:5694 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1413.763073][ T31] Workqueue: usb_hub_wq hub_event [ 1413.768548][ T31] Call Trace: [ 1413.772477][ T31] [ 1413.775585][ T31] __schedule+0x17d9/0x56c0 [ 1413.780318][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1413.787452][ T31] ? __pfx___schedule+0x10/0x10 [ 1413.792874][ T31] ? schedule+0x90/0x2b0 [ 1413.797351][ T31] schedule+0x164/0x2b0 [ 1413.802329][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1413.807375][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1413.812991][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1413.819262][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 1413.824935][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1413.831097][ T31] usb_control_msg+0x234/0x3e0 [ 1413.839575][ T31] hub_port_init+0xb0b/0x28c0 [ 1413.850689][ T31] hub_event+0x24e8/0x4d30 [ 1413.861017][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1413.872527][ T31] ? __pfx_hub_event+0x10/0x10 [ 1413.884871][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1413.898793][ T31] ? rcu_is_watching+0x15/0xb0 [ 1413.904570][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1413.910498][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1413.917169][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1413.923830][ T31] ? assign_work+0x3cf/0x5d0 [ 1413.928627][ T31] worker_thread+0xa47/0xfb0 [ 1413.933828][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1413.939373][ T31] kthread+0x388/0x470 [ 1413.944082][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1413.949386][ T31] ? __pfx_kthread+0x10/0x10 [ 1413.954569][ T31] ret_from_fork+0x514/0xb70 [ 1413.959757][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1413.965555][ T31] ? load_gs_index+0x97/0xc0 [ 1413.970334][ T31] ? __switch_to+0xc89/0x1420 [ 1413.976046][ T31] ? __pfx_kthread+0x10/0x10 [ 1413.980843][ T31] ret_from_fork_asm+0x1a/0x30 [ 1413.986318][ T31] [ 1413.989556][ T31] INFO: task kworker/1:5:5709 blocked for more than 144 seconds. [ 1413.999714][ T31] Tainted: G L syzkaller #0 [ 1414.006959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.017482][ T31] task:kworker/1:5 state:D stack:20672 pid:5709 tgid:5709 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1414.030498][ T31] Workqueue: usb_hub_wq hub_event [ 1414.036020][ T31] Call Trace: [ 1414.039461][ T31] [ 1414.043005][ T31] __schedule+0x17d9/0x56c0 [ 1414.048100][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1414.053862][ T31] ? __pfx___schedule+0x10/0x10 [ 1414.058919][ T31] ? schedule+0x90/0x2b0 [ 1414.063984][ T31] schedule+0x164/0x2b0 [ 1414.068757][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1414.073910][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1414.080234][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1414.087563][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 1414.093755][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1414.099522][ T31] usb_control_msg+0x234/0x3e0 [ 1414.104993][ T31] hub_port_init+0xb0b/0x28c0 [ 1414.110445][ T31] hub_event+0x24e8/0x4d30 [ 1414.115528][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1414.121219][ T31] ? __pfx_hub_event+0x10/0x10 [ 1414.126945][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1414.133386][ T31] ? rcu_is_watching+0x15/0xb0 [ 1414.138435][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1414.144750][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1414.150939][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1414.157787][ T31] ? assign_work+0x3cf/0x5d0 [ 1414.162898][ T31] worker_thread+0xa47/0xfb0 [ 1414.168155][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1414.173732][ T31] kthread+0x388/0x470 [ 1414.177986][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1414.183711][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.188899][ T31] ret_from_fork+0x514/0xb70 [ 1414.194174][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.200705][ T31] ? load_gs_index+0x97/0xc0 [ 1414.206409][ T31] ? __switch_to+0xc89/0x1420 [ 1414.214543][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.219640][ T31] ret_from_fork_asm+0x1a/0x30 [ 1414.226881][ T31] [ 1414.230174][ T31] INFO: task kworker/1:7:6944 blocked for more than 144 seconds. [ 1414.244191][ T31] Tainted: G L syzkaller #0 [ 1414.250878][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.260504][ T31] task:kworker/1:7 state:D stack:20928 pid:6944 tgid:6944 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1414.273429][ T31] Workqueue: usb_hub_wq hub_event [ 1414.278763][ T31] Call Trace: [ 1414.283031][ T31] [ 1414.286143][ T31] __schedule+0x17d9/0x56c0 [ 1414.290863][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1414.297067][ T31] ? __pfx___schedule+0x10/0x10 [ 1414.303009][ T31] ? schedule+0x90/0x2b0 [ 1414.307456][ T31] schedule+0x164/0x2b0 [ 1414.312495][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1414.317599][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1414.323292][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1414.329600][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 1414.339256][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1414.345580][ T31] usb_control_msg+0x234/0x3e0 [ 1414.350548][ T31] hub_port_init+0xb0b/0x28c0 [ 1414.357551][ T31] hub_event+0x24e8/0x4d30 [ 1414.364470][ T31] ? __pfx_hub_event+0x10/0x10 [ 1414.369504][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1414.376401][ T31] ? rcu_is_watching+0x15/0xb0 [ 1414.381679][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1414.387595][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1414.399336][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1414.406508][ T31] ? assign_work+0x3cf/0x5d0 [ 1414.411610][ T31] worker_thread+0xa47/0xfb0 [ 1414.416841][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1414.422559][ T31] kthread+0x388/0x470 [ 1414.426857][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1414.432629][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.437802][ T31] ret_from_fork+0x514/0xb70 [ 1414.443075][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.448468][ T31] ? load_gs_index+0x97/0xc0 [ 1414.453663][ T31] ? __switch_to+0xc89/0x1420 [ 1414.458972][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.465252][ T31] ret_from_fork_asm+0x1a/0x30 [ 1414.470267][ T31] [ 1414.478308][ T31] [ 1414.478308][ T31] Showing all locks held in the system: [ 1414.489264][ T31] 5 locks held by kworker/1:1/29: [ 1414.494855][ T31] #0: ffff88801ea85540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.508192][ T31] #1: ffffc90000a47c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.520625][ T31] #2: ffff88802ba281d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.530662][ T31] #3: ffff88802ba2c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.541370][ T31] #4: ffff88802b98e360 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.552185][ T31] 1 lock held by khungtaskd/31: [ 1414.557299][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1414.567988][ T31] 2 locks held by getty/5371: [ 1414.573937][ T31] #0: ffff8880329810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1414.584262][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1414.595335][ T31] 5 locks held by kworker/0:5/5614: [ 1414.600777][ T31] #0: ffff88801ea85540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.614048][ T31] #1: ffffc90003a7fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.626412][ T31] #2: ffff88802bb9b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.636334][ T31] #3: ffff88802bb98568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.646962][ T31] #4: ffff88802baea760 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.657715][ T31] 2 locks held by kworker/1:3/5679: [ 1414.663360][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.674861][ T31] #1: ffffc90004a5fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.688750][ T31] 5 locks held by kworker/1:4/5694: [ 1414.694719][ T31] #0: ffff88801ea85540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.706573][ T31] #1: ffffc90004b4fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.720099][ T31] #2: ffff88802be4c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.729627][ T31] #3: ffff88802bea9568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.740541][ T31] #4: ffff88802bdc6f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.750695][ T31] 5 locks held by kworker/1:5/5709: [ 1414.756798][ T31] #0: ffff88801ea85540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.768721][ T31] #1: ffffc90004c6fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.781937][ T31] #2: ffff88802bc5e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.791076][ T31] #3: ffff88802bccb568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.803094][ T31] #4: ffff88802bbee460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.814382][ T31] 5 locks held by kworker/1:7/6944: [ 1414.819805][ T31] #0: ffff88801ea85540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.832273][ T31] #1: ffffc90004f97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.844784][ T31] #2: ffff88802bd711d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.854665][ T31] #3: ffff88802bd76568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.865094][ T31] #4: ffff88802bcde960 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.875827][ T31] 5 locks held by kworker/1:0/15518: [ 1414.883345][ T31] #0: ffff88801ea85540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.895774][ T31] #1: ffffc9000346fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1414.908119][ T31] #2: ffff88802be331d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1414.919535][ T31] #3: ffff88802be30568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1414.930054][ T31] #4: ffff88802bcde960 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1414.940691][ T31] 3 locks held by syz.3.5524/24687: [ 1414.946402][ T31] [ 1414.948871][ T31] ============================================= [ 1414.948871][ T31] [ 1414.972344][ T31] NMI backtrace for cpu 1 [ 1414.972366][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.972394][ T31] Tainted: [L]=SOFTLOCKUP [ 1414.972402][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1414.972416][ T31] Call Trace: [ 1414.972424][ T31] [ 1414.972434][ T31] dump_stack_lvl+0xe8/0x150 [ 1414.972470][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1414.972506][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1414.972539][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1414.972575][ T31] sys_info+0x135/0x170 [ 1414.972604][ T31] watchdog+0xfd7/0x1030 [ 1414.972638][ T31] ? watchdog+0x1c7/0x1030 [ 1414.972669][ T31] kthread+0x388/0x470 [ 1414.972700][ T31] ? __pfx_watchdog+0x10/0x10 [ 1414.972723][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.972753][ T31] ret_from_fork+0x514/0xb70 [ 1414.972787][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.972816][ T31] ? __switch_to+0xc89/0x1420 [ 1414.972844][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.972874][ T31] ret_from_fork_asm+0x1a/0x30 [ 1414.972925][ T31] [ 1414.972960][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1415.091759][ C0] NMI backtrace for cpu 0 [ 1415.091781][ C0] CPU: 0 UID: 0 PID: 24687 Comm: syz.3.5524 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.091806][ C0] Tainted: [L]=SOFTLOCKUP [ 1415.091813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.091824][ C0] RIP: 0010:pie_calculate_probability+0x320/0x7f0 [ 1415.091883][ C0] Code: 16 39 5a f8 4c 89 e1 4c 8b 64 24 28 4c 89 e0 48 89 4c 24 38 48 2b 01 49 0f af c6 4c 89 e1 48 2b 4c 24 18 4c 0f af f9 49 01 c7 <4c> 89 ef 48 89 ee e8 75 a1 ec f7 48 bb 1e 85 eb 51 b8 1e 05 00 49 [ 1415.091899][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00000286 [ 1415.091916][ C0] RAX: fffffff0a3da8872 RBX: 00000010c6f7a0b5 RCX: 0000000000000000 [ 1415.091929][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000010c6f7a0b5 [ 1415.091941][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1415.091951][ C0] R10: dffffc0000000000 R11: fffff52000000f70 R12: 0000000000000000 [ 1415.091964][ C0] R13: 0019999999999998 R14: 0000000000044b82 R15: fffffff0a3da8872 [ 1415.091977][ C0] FS: 0000000000000000(0000) GS:ffff888124f49000(0063) knlGS:00000000f54a6b40 [ 1415.091993][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1415.092005][ C0] CR2: 000000005814021c CR3: 00000000656ae000 CR4: 00000000003526f0 [ 1415.092020][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1415.092031][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1415.092042][ C0] Call Trace: [ 1415.092050][ C0] [ 1415.092065][ C0] fq_pie_timer+0x27d/0x5a0 [ 1415.092084][ C0] ? fq_pie_timer+0x4d/0x5a0 [ 1415.092104][ C0] call_timer_fn+0x192/0x5e0 [ 1415.092131][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 1415.092149][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1415.092173][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1415.092204][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1415.092222][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 1415.092241][ C0] __run_timer_base+0x652/0x8b0 [ 1415.092264][ C0] ? ktime_get+0x45/0x220 [ 1415.092290][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1415.092315][ C0] ? ktime_get+0x1f5/0x220 [ 1415.092335][ C0] ? lapic_next_event+0x11/0x20 [ 1415.092366][ C0] run_timer_softirq+0xb7/0x170 [ 1415.092390][ C0] handle_softirqs+0x225/0x840 [ 1415.092411][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1415.092434][ C0] __irq_exit_rcu+0xca/0x220 [ 1415.092453][ C0] irq_exit_rcu+0x9/0x30 [ 1415.092471][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1415.092491][ C0] [ 1415.092497][ C0] [ 1415.092504][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1415.092524][ C0] RIP: 0010:mt_find+0x0/0x630 [ 1415.092547][ C0] Code: 89 df e8 53 fd ff ff 48 89 df 5b e9 4a 9f 09 00 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 1415.092562][ C0] RSP: 0018:ffffc900060769d8 EFLAGS: 00000286 [ 1415.092576][ C0] RAX: ffffffff821e30e0 RBX: ffff88805408c000 RCX: ffff888026f15d00 [ 1415.092590][ C0] RDX: ffffffffffffffff RSI: ffffc90006076a00 RDI: ffff88805408c000 [ 1415.092603][ C0] RBP: ffffc90006076a80 R08: ffffc90006076c40 R09: ffffc90006076e50 [ 1415.092617][ C0] R10: dffffc0000000000 R11: ffffed100a811864 R12: dffffc0000000000 [ 1415.092636][ C0] R13: 1ffff92000c0ed3c R14: ffffc90006076a00 R15: 0000000000000001 [ 1415.092653][ C0] ? find_vma+0xd0/0x160 [ 1415.092675][ C0] find_vma+0xed/0x160 [ 1415.092692][ C0] ? __pfx_find_vma+0x10/0x10 [ 1415.092710][ C0] ? generic_perform_write+0x805/0x8f0 [ 1415.092736][ C0] __get_user_pages+0x3b8/0x2720 [ 1415.092770][ C0] ? file_update_time_flags+0x3b3/0x4a0 [ 1415.092800][ C0] ? dump_user_range+0x1c5/0x12c0 [ 1415.092823][ C0] get_dump_page+0x1b5/0x410 [ 1415.092840][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 1415.092868][ C0] ? down_read_killable+0x1bb/0x3b0 [ 1415.092891][ C0] ? iov_iter_bvec+0xb8/0x180 [ 1415.092917][ C0] dump_user_range+0x20a/0x12c0 [ 1415.092943][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1415.092965][ C0] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 1415.092992][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1415.093020][ C0] ? elf_core_dump+0x2ccb/0x4050 [ 1415.093044][ C0] elf_core_dump+0x387b/0x4050 [ 1415.093074][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1415.093092][ C0] ? get_signal+0x1094/0x12c0 [ 1415.093122][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1415.093159][ C0] ? vfs_coredump+0x36ff/0x44b0 [ 1415.093178][ C0] ? vfs_coredump+0x36ff/0x44b0 [ 1415.093203][ C0] coredump_write+0x1290/0x1960 [ 1415.093230][ C0] ? __pfx_coredump_write+0x10/0x10 [ 1415.093248][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1415.093271][ C0] ? put_files_struct+0x24f/0x350 [ 1415.093292][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1415.093313][ C0] ? unshare_files+0x103/0x140 [ 1415.093337][ C0] vfs_coredump+0x36ff/0x44b0 [ 1415.093355][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 1415.093388][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1415.093408][ C0] ? mt_find+0x186/0x630 [ 1415.093433][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1415.093459][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1415.093485][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1415.093511][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1415.093527][ C0] ? lock_acquire+0x106/0x350 [ 1415.093553][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1415.093575][ C0] ? lock_acquire+0x106/0x350 [ 1415.093602][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1415.093628][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1415.093658][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1415.093684][ C0] ? kernel_text_address+0xa5/0xe0 [ 1415.093710][ C0] ? __kernel_text_address+0xd/0x30 [ 1415.093734][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1415.093751][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1415.093772][ C0] ? arch_stack_walk+0xfb/0x150 [ 1415.093794][ C0] ? stack_trace_save+0xa9/0x100 [ 1415.093820][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1415.093841][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1415.093863][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1415.093888][ C0] ? kasan_save_track+0x4f/0x80 [ 1415.093909][ C0] ? kasan_save_track+0x3e/0x80 [ 1415.093929][ C0] ? kasan_save_free_info+0x40/0x50 [ 1415.093946][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1415.093967][ C0] ? kmem_cache_free+0x182/0x650 [ 1415.093989][ C0] ? get_signal+0x9e7/0x12c0 [ 1415.094005][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 1415.094025][ C0] ? irqentry_exit+0x2ba/0x8f0 [ 1415.094044][ C0] ? asm_exc_page_fault+0x26/0x30 [ 1415.094081][ C0] ? proc_coredump_connector+0x187/0x4e0 [ 1415.094117][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1415.094137][ C0] get_signal+0x1094/0x12c0 [ 1415.094166][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1415.094189][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1415.094222][ C0] irqentry_exit+0x2ba/0x8f0 [ 1415.094243][ C0] ? trace_irq_disable+0x3b/0x140 [ 1415.094267][ C0] asm_exc_page_fault+0x26/0x30 [ 1415.094284][ C0] RIP: 0023:0x0 [ 1415.094296][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1415.094369][ C0] RSP: 002b:00000000800002a0 EFLAGS: 00010206 [ 1415.094384][ C0] RAX: 0000000000000000 RBX: 0000000040900400 RCX: 0000000000000000 [ 1415.094395][ C0] RDX: 0000000000000000 RSI: 0000000080000300 RDI: 0000000080000340 [ 1415.094407][ C0] RBP: 000000000012c7bc R08: 0000000000000000 R09: 0000000000000000 [ 1415.094418][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1415.094429][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.094449][ C0] [ 1415.848631][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1415.855637][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.866378][ T31] Tainted: [L]=SOFTLOCKUP [ 1415.870747][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.880944][ T31] Call Trace: [ 1415.884635][ T31] [ 1415.887632][ T31] vpanic+0x56c/0xa60 [ 1415.891707][ T31] ? __pfx___schedule+0x10/0x10 [ 1415.896623][ T31] ? __pfx_vpanic+0x10/0x10 [ 1415.901180][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1415.907570][ T31] panic+0xc5/0xd0 [ 1415.911529][ T31] ? __pfx_panic+0x10/0x10 [ 1415.915993][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1415.921507][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1415.927009][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1415.933213][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1415.939431][ T31] watchdog+0x1030/0x1030 [ 1415.943808][ T31] ? watchdog+0x1c7/0x1030 [ 1415.948280][ T31] kthread+0x388/0x470 [ 1415.952653][ T31] ? __pfx_watchdog+0x10/0x10 [ 1415.957363][ T31] ? __pfx_kthread+0x10/0x10 [ 1415.961999][ T31] ret_from_fork+0x514/0xb70 [ 1415.966643][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1415.971892][ T31] ? __switch_to+0xc89/0x1420 [ 1415.976696][ T31] ? __pfx_kthread+0x10/0x10 [ 1415.981334][ T31] ret_from_fork_asm+0x1a/0x30 [ 1415.986194][ T31] [ 1415.989861][ T31] Kernel Offset: disabled [ 1415.994225][ T31] Rebooting in 86400 seconds..