last executing test programs: 9.169079406s ago: executing program 0 (id=2665): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c) sendto$inet6(r6, &(0x7f0000000380)="88caaa8e254c4d67978b45bc3887067516c8269efb94626c82ab4c5309846e6358a0c6ad6982483f1ac6d434f90d3c8fd3a5680123b12469aed65374ca508d25bcde77176ae13a9a3d02215c0e4127ad20a87053cc930a15a8a279fda107417193ecb12782e71d68fb1156541a8456257895392cb3ba98ff6054a676e67934c0921f1a3af0b92a50c3aa99b5d23d6cce2c41954d766105fc3a6840403db46b610ae6f588cb7bf67346a44759b8de0d3fca8e57954066e8e36e9cfd45f9ac29da710da58c", 0xc4, 0x4000c00, &(0x7f0000000480)={0xa, 0x4e22, 0xffffff86, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xf}, 0x1c) 8.916815736s ago: executing program 0 (id=2668): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x3b0982, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000002060108000000de8700000000000000450005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000bbdc94c066b27269955e71cae2"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000640)='net/nf_conntrack_expect\x00') 7.920340728s ago: executing program 0 (id=2670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x3}, 0x1}], 0x1, 0x20, 0x0) 7.816837799s ago: executing program 0 (id=2671): socketpair(0x1, 0x5, 0x1, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) sched_getattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38}, 0xffffffffffffff07, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x0, 0x0, 0x0, 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)) r5 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, 0x0, 0x0, 0xffffffffffffff9c) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_usb_connect(0x1, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$radio(&(0x7f00000001c0), 0x1, 0x2) 7.209096695s ago: executing program 3 (id=2672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000100), 0x8, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40012}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000140)={{@align=0x5, {0xd76, 0x2, 0xc, 0x4}}, {{[0x5, 0x80000001, 0x8, 0x4]}, 0x0, 0x1, 0x7, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x100, 0x7]}, {0xf, 0x1, 0x4, 0x1}}, 0x1, 0x0, 'wpan1\x00'}]}}) 7.115416692s ago: executing program 1 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1, 0xd2, 0x51}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, &(0x7f0000000140)="0a9574fcae70828fb2dea2db6953fc8a0e5ec18ca1ae1461340881db6f8176f7c633f650d4fa540cb115f496b1a6103ca2d7f1c9834eed5c0e9f3b7fa89706dbe433d733b561ba73dc27b2d01c57c028638031fc758f93c3b5afc015eceb367512861ef6b320ea001902f5ca122e62ff78c86a914176451b09f1503014ab8e93f6f94ed575c7d3eb198e0b39f95ba89c4b640369bd0090df6dac340f899bacae812a1b1b67487e3ed4aea2c1732b53c5a7c28efcd587c7a9c26bc59e1c65583e114209eff23f6a2099b73d1747130b68d5f1", &(0x7f0000000240)=""/81) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xb0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000102010200000000000000000a000000300001802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) 6.713060963s ago: executing program 1 (id=2675): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r0, 0x0, 0x80, &(0x7f0000000200)={@_ha_fsid={[0xffffffff, 0xb]}, {0xf, 0x9, 0x4, 0x382b}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0xef4}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000f65200010000d31785ad5f000000000000000000009f0abdc1"], 0x20}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "02f151047fb274e6d8451697efe42811ee38f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x5}, 0x3c) 6.58096607s ago: executing program 1 (id=2676): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x300}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.644076359s ago: executing program 2 (id=2678): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x800000, '\x00', 0x3}, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0xfffffffffffffcea}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) (async) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) write$6lowpan_control(r5, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) (rerun: 32) r7 = socket$kcm(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) socket$kcm(0x29, 0x5, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6000800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) timer_create(0x0, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x100) 5.20549987s ago: executing program 2 (id=2679): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x3b0982, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000002060108000000de8700000000000000450005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000bbdc94c066b27269955e71cae2"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000640)='net/nf_conntrack_expect\x00') 4.55937549s ago: executing program 3 (id=2680): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) close(r0) 4.333843849s ago: executing program 2 (id=2681): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000d00)={&(0x7f0000000040)=0xd331, 0x9, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000cc0)}) 4.153195767s ago: executing program 2 (id=2682): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40941) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x9a49}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000001740)={0x20, 0x0, 0x0}) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) ptrace$pokeuser(0x6, r8, 0x388, 0x7ffe) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 4.028679493s ago: executing program 3 (id=2683): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b9", 0x53, 0xfffffffffffffffe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) socket$nl_route(0x10, 0x3, 0x0) 3.941146153s ago: executing program 0 (id=2684): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="4df3d99a134ba79554ba3a23", 0xc}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000800}, 0x4048002) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="d005e57b76de5569f56876ebf6bae25eab7cc7d602844f3841e242406c9d4bc758817f5e149d9dccb11c4c5b46181f4de23215d4afd7eb4909a03b4e393945d72d469e8f0e0141061663a49e9e403a7da1d5f7be10958f9d602778d78d76d3a163d2bb6f6ffc85e1b5c7bb16212a8a0e51c17af2e92f0f9d16ecdb7a0e235b25a347eaccc6", 0x85}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x11) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f00000008c0)=""/203, 0xcb}], 0x3}, 0x21) 3.552244858s ago: executing program 4 (id=2685): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) pipe2$watch_queue(0x0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x390, &(0x7f00000002c0)={0x0, 0xc8df, 0x2, 0xa, 0x20402f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x41, &(0x7f0000000080)={&(0x7f0000000100)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x7}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb40, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xa0, 0xc8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x4, 0x2, 0x20616, 0x6, 0x1, 0x200080}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7ffffffffffffffc, 0xb, 0x10000, 0x8, 0x4, 0x7, 0x10, 0x4, 0x34, 0x0, 0xd, 0x9, 0x5, 0x3, 0x4], 0x0, 0x110900}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) 3.365572192s ago: executing program 1 (id=2686): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/4096) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3}, 0x94) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.211019733s ago: executing program 1 (id=2687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b9", 0x53, 0xfffffffffffffffe) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) wait4(r6, &(0x7f0000000100), 0x8, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40012}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.565870404s ago: executing program 4 (id=2688): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x4000000000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x20a101, 0x70) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1b, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000000100)={0x1, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) getsockopt(r4, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, 0x0, 0x48800) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) sendto(r4, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 2.325925595s ago: executing program 3 (id=2689): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1, {0x2, 0xf0, 0x1}}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r3, 0x24, &(0x7f0000000140)={0x2, 0x2, 0x400000000000101, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24002041}, 0x4010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x80, 0x20, 0x2, 0x8, {{0x7, 0x4, 0x3, 0x11, 0x1c, 0x68, 0x0, 0x2, 0x0, 0x0, @multicast2, @remote, {[@noop, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) 2.137486002s ago: executing program 3 (id=2690): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b9", 0x53, 0xfffffffffffffffe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) wait4(r5, &(0x7f0000000100), 0x8, 0x0) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 1.375844597s ago: executing program 2 (id=2691): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0x3}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.293720591s ago: executing program 1 (id=2692): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000007110089600000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xf5ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000007010100000000000000000200000a0900010073797a3100000140000069ff0800084000006dcb0800014000008001080001400000010008000240fffffffe0c000640000000000000f42a0c0002400000128c00000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20004020) getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.16914315s ago: executing program 4 (id=2693): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000150001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/297], 0x1b8}}, 0x44050) 997.042506ms ago: executing program 4 (id=2694): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d28f75d96a2566e506bce1e8", 0x14}], 0x1}, 0x0) (fail_nth: 18) 914.014215ms ago: executing program 4 (id=2695): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x2, 0x24050000) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="f20c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x20, 0x8, 0xca, "1d86b558efd3f8eaf8eec59f91b7efd002e8c3e79642932bf926d935dcf12b6fe49db7ad39979ff8813a1a78b15af1a97c480b448691359dbbfdcf9f7f3ca648a9f7afd27e4c900dda51643cb32120f4bc7cb5618331615d6834b529d1378194988568e7407ec204b5163a89899ce1574149ed1237a8aac6557cb4e4ff6337241d6e4156ec5cb02de5623422cf89ba3d974de630b0226bbee6d8595401d4d1ac66349309242b1400773122cda13e84046e81a3588f955ac4ff4b0b0c5d28ea5d61cef6e3e9d32ae7a5f9"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000a00)={0x20, 0x81, 0x3, "d4e4d8"}, &(0x7f0000000a40)={0x20, 0x82, 0x2, "9308"}, &(0x7f0000000a80)={0x20, 0x83, 0x2, "fe66"}, &(0x7f0000000ac0)={0x20, 0x84, 0x4, "4640b703"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "5f65a7"}}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000002c00)={0x44, &(0x7f0000002a00)={0x20, 0xb, 0x4, "0130a61a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff}, 0x10) 841.914508ms ago: executing program 0 (id=2696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b9", 0x53, 0xfffffffffffffffe) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) wait4(r6, &(0x7f0000000100), 0x8, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40012}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 389.011108ms ago: executing program 2 (id=2697): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB='\x00'/28], 0x50) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="210329bd7000fbdbdf2501000004"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 202.419446ms ago: executing program 4 (id=2698): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c4", 0xd1}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="2965f78e76fbad492286a1f21bae45fbb9f61dccf4bb63e722da893d7fdd687f4e35d480fa2e29", 0x27}, {&(0x7f00000002c0)="2ee49fcda4402f2167734349925cb151f1eb02dc7b6a1b9d776830d385d6f5354c1c096c599b68bb3544f50902a6ac170daf6a3ee579e476bdc03378bdc77a18c3137afae4229167c8e5fe047da4e9f4b18e4ad4ccbf71559a2659fb30f53b9f1e6ff21dc41b3d49c88ba768c648a23a4a2c21e4a0f24efdef4b164ef61f688a62eec945266dd39ada5448323fa6557be73437fa788af07e6a48015333bbd665a53155960657844f248df418e27c03083f6b2f88aae5ec677d3a3c71512f2163", 0xc0}, {&(0x7f0000000380)="994f1d3c09020ddab5fc56371a4c026cf80e89ab73d35113cb8d3184895ba6", 0x1f}, {&(0x7f00000003c0)="6db8bf1385f520a530a36fc50b60149c4c918e1200248ef10cdb0a68c54506c8e1dc4a8e8599c30891bdb01d13102b103eafb8488e865e", 0x37}, {&(0x7f0000000500)="e990035bad34f369d967a07123e50dcf5fc9e04bc5c958f07d92f00f7f0349deb70218e7680bbdda0e4baa9f5f6b31e14b4c7dc94a55cd7bc31df5cd9aa5abdc2178ae0bcc8f64e24ff946ea", 0x4c}, {&(0x7f0000000640)="9f5a6d5ad6b98140ef31851b552d6d0ad829cea9ce3d444c353c4ebc65664d48c1c3d452bb81b81613af0314e342aaa46f6dd3dbd65e1caea0537ec3c9be7bff492b8be3a4c425b8a4b8753b81307b6fe9406bd054b5b7d1e3d13bf180f58883eefa9cb11c7d270d0f257355cec9ae48", 0x70}, {&(0x7f00000006c0)="0d2b975ed1f1bee2337ade9bb2e0fcb6ea733f61922253812fe436a032f87e4cb156a90c5b7947467b912aa1875ac51cd385e21fff9dec6ce1e616b02efad2d8e81dc26c38c3079e34e80bc954d664b6bb2c85132b81dfd515ea93aa8600eb0e0fdc04bce625e538f6d832598d875d946a98369edf3dd43c75fb83e2d5f21030ec4a6d8b85efe237603e5ff756fdce0d7b8b8636ab015ab82a1a70e643a5ec7677c63054eafb25767b2458d41921e6d839e8b4b728c2f3fd8134232dc86184d64e4d9fa3497ddb94021860e7949821fc1db0a31d8d033b", 0xd7}, {&(0x7f00000007c0)="f9b3b69f679a7e0169e062016d441ca348781eaa346d8db5f4a806cfd21d52407615f10e51e966f742eafba8e97abb870e7003c353350e08a4214e505c07e487ae997217862e0b807a96e5e247e17547c6b2a33b38e97c3a008ff9c3f78182ece35ac2eb7ee63c6cd5005b099ff94696e36de84946d444e02b4b18ab9658b100763d4edd320b2f2764f3cceb9565ca3690c44ef6c5f76e", 0x97}], 0x8}}], 0x1, 0x884) 0s ago: executing program 3 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b9", 0x53, 0xfffffffffffffffe) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000100), 0x8, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40012}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000140)={{@align=0x5, {0xd76, 0x2, 0xc, 0x4}}, {{[0x5, 0x80000001, 0x8, 0x4]}, 0x0, 0x1, 0x7, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x100, 0x7]}, {0xf, 0x1, 0x4, 0x1}}, 0x1, 0x0, 'wpan1\x00'}]}}) kernel console output (not intermixed with test programs): ess `syz.2.2041'. [ 511.291805][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.311408][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.344774][T12398] netlink: 'syz.1.2044': attribute type 12 has an invalid length. [ 511.364015][T12398] netlink: 'syz.1.2044': attribute type 29 has an invalid length. [ 511.373191][T12398] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2044'. [ 511.383560][T12398] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 511.734930][T12403] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 511.749957][T12403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.760027][T12403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.965276][T12410] FAULT_INJECTION: forcing a failure. [ 511.965276][T12410] name failslab, interval 1, probability 0, space 0, times 0 [ 511.987928][T12410] CPU: 0 UID: 0 PID: 12410 Comm: syz.1.2049 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.987963][T12410] Tainted: [L]=SOFTLOCKUP [ 511.987970][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.987988][T12410] Call Trace: [ 511.987996][T12410] [ 511.988006][T12410] dump_stack_lvl+0xe8/0x150 [ 511.988036][T12410] should_fail_ex+0x40c/0x560 [ 511.988063][T12410] should_failslab+0xa8/0x100 [ 511.988087][T12410] __kmalloc_cache_noprof+0x88/0x660 [ 511.988120][T12410] ? vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 511.988277][T12410] vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 511.988311][T12410] vhost_dev_ioctl+0xe06/0x1170 [ 511.988336][T12410] ? vhost_vsock_dev_ioctl+0x220/0xed0 [ 511.988393][T12410] ? __pfx___mutex_lock+0x10/0x10 [ 511.988426][T12410] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 511.988458][T12410] vhost_vsock_dev_ioctl+0x22e/0xed0 [ 511.988487][T12410] ? lock_release+0x4b/0x3c0 [ 511.988508][T12410] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 511.988537][T12410] ? __fget_files+0x2a/0x420 [ 511.988568][T12410] ? __fget_files+0x3a2/0x420 [ 511.988598][T12410] ? __fget_files+0x2a/0x420 [ 511.988641][T12410] ? bpf_lsm_file_ioctl+0x9/0x20 [ 511.988672][T12410] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 511.988700][T12410] __se_sys_ioctl+0xfc/0x170 [ 511.988724][T12410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.988747][T12410] do_syscall_64+0x174/0x580 [ 511.988777][T12410] ? trace_irq_disable+0x3b/0x140 [ 511.988809][T12410] ? clear_bhb_loop+0x40/0x90 [ 511.988848][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.988869][T12410] RIP: 0033:0x7f8a0c59ce59 [ 511.988888][T12410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.988907][T12410] RSP: 002b:00007f8a0d38e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.988930][T12410] RAX: ffffffffffffffda RBX: 00007f8a0c815fa0 RCX: 00007f8a0c59ce59 [ 511.988946][T12410] RDX: 0000200000000400 RSI: 000000004008af03 RDI: 0000000000000003 [ 511.988961][T12410] RBP: 00007f8a0d38e090 R08: 0000000000000000 R09: 0000000000000000 [ 511.988976][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.988989][T12410] R13: 00007f8a0c816038 R14: 00007f8a0c815fa0 R15: 00007f8a0c93fa48 [ 511.989013][T12410] [ 512.007063][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.270394][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.274360][T12408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.304072][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.308241][T12408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.340142][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.437145][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.446483][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.651653][T12442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2059'. [ 513.714282][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.797336][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.877350][T12447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.920239][T12447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.681268][T12458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.749350][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.778311][T12458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.806119][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.698540][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.723414][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.756137][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.785021][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.902217][T12470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.927692][T12470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.949048][T12470] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2070'. [ 516.091515][T12471] syzkaller0: entered promiscuous mode [ 516.245930][T12471] syzkaller0: entered allmulticast mode [ 516.876943][T12477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.889599][T12477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.201733][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2073'. [ 517.425100][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.485878][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.562770][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.573755][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.575884][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.603177][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 517.630824][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.017503][T12498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.030066][T12498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.374712][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 518.416835][T12502] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.425004][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.982918][T12512] batadv_slave_0: entered promiscuous mode [ 519.306916][T12512] batadv_slave_0: left promiscuous mode [ 519.317940][T12520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2087'. [ 519.607868][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.657691][ T5639] Bluetooth: hci4: unexpected event for opcode 0x007f [ 519.678081][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.798708][T12534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.850724][T12534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.967521][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 520.086122][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.107154][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.490299][T12539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.514815][T12539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.442377][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'. [ 521.642480][T12561] fuse: Unknown parameter '0x0000000022ca19220x0000000000000006' [ 521.736745][T12562] input: syz1 as /devices/virtual/input/input46 [ 522.607861][T12570] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2101'. [ 522.854484][T12573] hub 8-0:1.0: USB hub found [ 522.880550][T12573] hub 8-0:1.0: 1 port detected [ 523.065284][T12584] hub 8-0:1.0: USB hub found [ 523.071837][T12584] hub 8-0:1.0: 1 port detected [ 524.445448][T12597] FAULT_INJECTION: forcing a failure. [ 524.445448][T12597] name failslab, interval 1, probability 0, space 0, times 0 [ 524.520311][T12597] CPU: 0 UID: 0 PID: 12597 Comm: syz.3.2106 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.520347][T12597] Tainted: [L]=SOFTLOCKUP [ 524.520355][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.520371][T12597] Call Trace: [ 524.520383][T12597] [ 524.520393][T12597] dump_stack_lvl+0xe8/0x150 [ 524.520416][T12597] should_fail_ex+0x40c/0x560 [ 524.520436][T12597] should_failslab+0xa8/0x100 [ 524.520453][T12597] __kvmalloc_node_noprof+0x16e/0x890 [ 524.520468][T12597] ? traverse+0xf1/0x620 [ 524.520490][T12597] traverse+0xf1/0x620 [ 524.520507][T12597] ? aa_file_perm+0x18b/0x15f0 [ 524.520527][T12597] ? aa_file_perm+0x4ed/0x15f0 [ 524.520545][T12597] seq_read_iter+0xb6a/0xca0 [ 524.520568][T12597] seq_read+0x367/0x480 [ 524.520586][T12597] ? kstrtoull+0x12f/0x1d0 [ 524.520605][T12597] ? __pfx_seq_read+0x10/0x10 [ 524.520633][T12597] ? apparmor_file_permission+0x1f4/0x300 [ 524.520657][T12597] ? __pfx_seq_read+0x10/0x10 [ 524.520675][T12597] proc_reg_read+0x1e9/0x2e0 [ 524.520722][T12597] vfs_readv+0x57c/0x850 [ 524.520756][T12597] ? __pfx_proc_reg_read+0x10/0x10 [ 524.520773][T12597] ? __pfx_vfs_readv+0x10/0x10 [ 524.520797][T12597] ? lock_release+0x4b/0x3c0 [ 524.520813][T12597] ? __fget_files+0x3a2/0x420 [ 524.520835][T12597] ? __fget_files+0x2a/0x420 [ 524.520863][T12597] __x64_sys_preadv+0x19c/0x2b0 [ 524.520884][T12597] ? __pfx___x64_sys_preadv+0x10/0x10 [ 524.520902][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.520919][T12597] ? rcu_is_watching+0x15/0xb0 [ 524.520936][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.520951][T12597] do_syscall_64+0x174/0x580 [ 524.520977][T12597] ? trace_irq_disable+0x3b/0x140 [ 524.521000][T12597] ? clear_bhb_loop+0x40/0x90 [ 524.521018][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.521033][T12597] RIP: 0033:0x7f6bdff9ce59 [ 524.521048][T12597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.521062][T12597] RSP: 002b:00007f6be0dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 524.521079][T12597] RAX: ffffffffffffffda RBX: 00007f6be0215fa0 RCX: 00007f6bdff9ce59 [ 524.521091][T12597] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 524.521101][T12597] RBP: 00007f6be0dc6090 R08: 0000000000010009 R09: 0000000000000000 [ 524.521112][T12597] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 524.521123][T12597] R13: 00007f6be0216038 R14: 00007f6be0215fa0 R15: 00007f6be033fa48 [ 524.521141][T12597] [ 524.974640][T12600] batadv_slave_0: entered promiscuous mode [ 525.098699][T12600] batadv_slave_0: left promiscuous mode [ 525.162449][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.190640][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.338027][T12608] FAULT_INJECTION: forcing a failure. [ 525.338027][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.397917][T12608] CPU: 0 UID: 0 PID: 12608 Comm: syz.3.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.397952][T12608] Tainted: [L]=SOFTLOCKUP [ 525.397958][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.397968][T12608] Call Trace: [ 525.397975][T12608] [ 525.397982][T12608] dump_stack_lvl+0xe8/0x150 [ 525.398012][T12608] should_fail_ex+0x40c/0x560 [ 525.398032][T12608] _copy_to_user+0x31/0xb0 [ 525.398070][T12608] simple_read_from_buffer+0xe1/0x170 [ 525.398128][T12608] proc_fail_nth_read+0x1bb/0x230 [ 525.398153][T12608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.398178][T12608] ? rw_verify_area+0x24a/0x4c0 [ 525.398194][T12608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.398221][T12608] vfs_read+0x213/0xa80 [ 525.398238][T12608] ? __pfx___mutex_lock+0x10/0x10 [ 525.398261][T12608] ? __pfx_vfs_read+0x10/0x10 [ 525.398278][T12608] ? __fget_files+0x3a2/0x420 [ 525.398300][T12608] ? __fget_files+0x2a/0x420 [ 525.398324][T12608] ksys_read+0x150/0x270 [ 525.398340][T12608] ? __pfx_ksys_read+0x10/0x10 [ 525.398356][T12608] ? rcu_is_watching+0x15/0xb0 [ 525.398374][T12608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.398390][T12608] do_syscall_64+0x174/0x580 [ 525.398410][T12608] ? trace_irq_disable+0x3b/0x140 [ 525.398432][T12608] ? clear_bhb_loop+0x40/0x90 [ 525.398461][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.398501][T12608] RIP: 0033:0x7f6bdff5d68e [ 525.398521][T12608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 525.398541][T12608] RSP: 002b:00007f6be0dc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.398565][T12608] RAX: ffffffffffffffda RBX: 00007f6be0dc66c0 RCX: 00007f6bdff5d68e [ 525.398581][T12608] RDX: 000000000000000f RSI: 00007f6be0dc60a0 RDI: 0000000000000004 [ 525.398595][T12608] RBP: 00007f6be0dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.398609][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.398622][T12608] R13: 00007f6be0216038 R14: 00007f6be0215fa0 R15: 00007f6be033fa48 [ 525.398646][T12608] [ 525.645073][T12611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.657634][T12611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.794529][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.804811][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.861538][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 525.871276][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 525.884494][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.914747][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.963639][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.975753][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.023811][T12619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.034405][T12619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.418429][T12624] netlink: 'syz.0.2117': attribute type 2 has an invalid length. [ 526.654028][T12639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2122'. [ 527.601687][T12650] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2125'. [ 528.269819][T12667] FAULT_INJECTION: forcing a failure. [ 528.269819][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 528.294526][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.4.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.294552][T12667] Tainted: [L]=SOFTLOCKUP [ 528.294559][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.294568][T12667] Call Trace: [ 528.294575][T12667] [ 528.294581][T12667] dump_stack_lvl+0xe8/0x150 [ 528.294604][T12667] should_fail_ex+0x40c/0x560 [ 528.294624][T12667] should_failslab+0xa8/0x100 [ 528.294640][T12667] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 528.294685][T12667] kmem_cache_alloc_noprof+0x87/0x650 [ 528.294706][T12667] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 528.294724][T12667] ? kmem_cache_alloc_noprof+0x156/0x650 [ 528.294747][T12667] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 528.294769][T12667] mmu_topup_memory_caches+0x21/0x170 [ 528.294795][T12667] kvm_mmu_load+0x9d/0x2380 [ 528.294813][T12667] ? kvm_msr_allowed+0x9a/0x490 [ 528.294835][T12667] ? kvm_msr_allowed+0x9a/0x490 [ 528.294862][T12667] ? kvm_msr_allowed+0x9a/0x490 [ 528.294886][T12667] ? kvm_msr_allowed+0x9a/0x490 [ 528.294906][T12667] ? kvm_apic_has_interrupt+0x740/0x770 [ 528.294931][T12667] vcpu_run+0x4cdb/0x77d0 [ 528.294980][T12667] ? __pfx_vcpu_run+0x10/0x10 [ 528.295002][T12667] ? kvm_arch_vcpu_ioctl_run+0x2fa/0x2070 [ 528.295025][T12667] ? rcu_is_watching+0x15/0xb0 [ 528.295042][T12667] ? lock_acquire+0x5f/0x350 [ 528.295056][T12667] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 528.295077][T12667] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 528.295100][T12667] kvm_arch_vcpu_ioctl_run+0x1193/0x2070 [ 528.295129][T12667] ? kvm_arch_vcpu_ioctl_run+0x2fa/0x2070 [ 528.295152][T12667] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 528.295177][T12667] ? rcu_is_watching+0x15/0xb0 [ 528.295194][T12667] ? trace_contention_end+0x3d/0x140 [ 528.295213][T12667] ? __mutex_lock+0x30d/0x1550 [ 528.295236][T12667] ? rcu_is_watching+0x15/0xb0 [ 528.295253][T12667] ? trace_irq_enable+0x3b/0x140 [ 528.295276][T12667] ? rcu_is_watching+0x15/0xb0 [ 528.295293][T12667] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 528.295314][T12667] ? get_task_pid+0x22/0x310 [ 528.295329][T12667] ? do_raw_write_lock+0x11d/0x260 [ 528.295353][T12667] ? rcu_is_watching+0x15/0xb0 [ 528.295370][T12667] ? lock_release+0x4b/0x3c0 [ 528.295383][T12667] ? get_task_pid+0x22/0x310 [ 528.295400][T12667] kvm_vcpu_ioctl+0xa61/0xfd0 [ 528.295441][T12667] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 528.295469][T12667] ? hook_file_ioctl+0x1f0/0x5f0 [ 528.295496][T12667] ? lock_release+0x4b/0x3c0 [ 528.295520][T12667] ? __fget_files+0x2a/0x420 [ 528.295543][T12667] ? __fget_files+0x3a2/0x420 [ 528.295565][T12667] ? __fget_files+0x2a/0x420 [ 528.295588][T12667] ? bpf_lsm_file_ioctl+0x9/0x20 [ 528.295610][T12667] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 528.295630][T12667] __se_sys_ioctl+0xfc/0x170 [ 528.295647][T12667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.295663][T12667] do_syscall_64+0x174/0x580 [ 528.295684][T12667] ? trace_irq_disable+0x3b/0x140 [ 528.295706][T12667] ? clear_bhb_loop+0x40/0x90 [ 528.295723][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.295738][T12667] RIP: 0033:0x7f368c99ce59 [ 528.295753][T12667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.295767][T12667] RSP: 002b:00007f368d89d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.295784][T12667] RAX: ffffffffffffffda RBX: 00007f368cc15fa0 RCX: 00007f368c99ce59 [ 528.295795][T12667] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 528.295805][T12667] RBP: 00007f368d89d090 R08: 0000000000000000 R09: 0000000000000000 [ 528.295814][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.295824][T12667] R13: 00007f368cc16038 R14: 00007f368cc15fa0 R15: 00007f368cd3fa48 [ 528.295846][T12667] [ 529.287850][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2132'. [ 529.444379][T12678] netlink: 'syz.3.2135': attribute type 13 has an invalid length. [ 529.485088][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2136'. [ 529.531953][T12683] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2137'. [ 529.665495][T12687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.677509][T12687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.706407][T12689] netlink: 'syz.0.2140': attribute type 13 has an invalid length. [ 529.826279][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 530.048388][ T5639] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 530.284741][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.307206][T12709] netlink: 'syz.4.2147': attribute type 11 has an invalid length. [ 530.325084][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.350110][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 530.354484][T12711] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2148'. [ 530.421711][T12709] bridge0: entered promiscuous mode [ 530.428772][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.437553][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.459619][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.484426][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.498022][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.526941][T12716] loop5: detected capacity change from 0 to 7 [ 530.535242][T12716] loop5: p1 < > p3 p4 [ 530.543701][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.544881][T12716] loop5: partition table partially beyond EOD, truncated [ 530.558358][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.563794][T12716] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 530.580322][T12716] loop5: p4 start 33554432 is beyond EOD, truncated [ 530.584113][T12709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.605506][T12709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.636005][T12709] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 530.658181][T12713] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 530.676587][T12713] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 530.694069][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.701389][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.717563][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.724994][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.871111][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.897066][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.991445][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.027371][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.123377][T12727] FAULT_INJECTION: forcing a failure. [ 531.123377][T12727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.137986][T12727] CPU: 0 UID: 0 PID: 12727 Comm: syz.1.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.138021][T12727] Tainted: [L]=SOFTLOCKUP [ 531.138029][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.138042][T12727] Call Trace: [ 531.138051][T12727] [ 531.138059][T12727] dump_stack_lvl+0xe8/0x150 [ 531.138088][T12727] should_fail_ex+0x40c/0x560 [ 531.138127][T12727] _copy_to_user+0x31/0xb0 [ 531.138159][T12727] simple_read_from_buffer+0xe1/0x170 [ 531.138194][T12727] proc_fail_nth_read+0x1bb/0x230 [ 531.138228][T12727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.138262][T12727] ? rw_verify_area+0x24a/0x4c0 [ 531.138284][T12727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.138315][T12727] vfs_read+0x213/0xa80 [ 531.138339][T12727] ? __pfx___mutex_lock+0x10/0x10 [ 531.138371][T12727] ? __pfx_vfs_read+0x10/0x10 [ 531.138396][T12727] ? __fget_files+0x3a2/0x420 [ 531.138428][T12727] ? __fget_files+0x2a/0x420 [ 531.138464][T12727] ksys_read+0x150/0x270 [ 531.138488][T12727] ? __pfx_ksys_read+0x10/0x10 [ 531.138513][T12727] ? rcu_is_watching+0x15/0xb0 [ 531.138538][T12727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.138561][T12727] do_syscall_64+0x174/0x580 [ 531.138592][T12727] ? trace_irq_disable+0x3b/0x140 [ 531.138626][T12727] ? clear_bhb_loop+0x40/0x90 [ 531.138650][T12727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.138674][T12727] RIP: 0033:0x7f8a0c55d68e [ 531.138697][T12727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.138717][T12727] RSP: 002b:00007f8a0d38dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.138757][T12727] RAX: ffffffffffffffda RBX: 00007f8a0d38e6c0 RCX: 00007f8a0c55d68e [ 531.138775][T12727] RDX: 000000000000000f RSI: 00007f8a0d38e0a0 RDI: 0000000000000006 [ 531.138789][T12727] RBP: 00007f8a0d38e090 R08: 0000000000000000 R09: 0000000000000000 [ 531.138803][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.138817][T12727] R13: 00007f8a0c816038 R14: 00007f8a0c815fa0 R15: 00007f8a0c93fa48 [ 531.138842][T12727] [ 531.489111][T12736] netlink: 'syz.1.2157': attribute type 15 has an invalid length. [ 531.522074][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.558411][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.827946][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.844134][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.857226][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.867142][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.869066][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.891142][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.916306][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.925923][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.081094][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.090676][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.101348][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.110926][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.513422][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.534822][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.741332][T12763] __nla_validate_parse: 1 callbacks suppressed [ 532.741355][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 532.824654][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.858184][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.909093][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.918638][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.709082][T12781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.719351][T12781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.843486][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.856346][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.478710][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.505091][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.148258][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.172506][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.267324][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.302069][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.446097][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.460605][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.628414][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.645904][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.660665][T12822] Cannot find add_set index 0 as target [ 536.032116][T12832] batadv_slave_0: entered promiscuous mode [ 536.111227][T12832] batadv_slave_0: left promiscuous mode [ 536.303353][T12837] fuse: Bad value for 'fd' [ 537.244358][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.268309][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.405824][T12847] kvm: pic: non byte write [ 537.438124][ T30] audit: type=1804 audit(1782150956.801:1225): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2196" name="bus" dev="ramfs" ino=54906 res=1 errno=0 [ 537.471872][ T30] audit: type=1804 audit(1782150956.831:1226): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2196" name="bus" dev="ramfs" ino=54906 res=1 errno=0 [ 537.620291][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.632776][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.691531][T12858] FAULT_INJECTION: forcing a failure. [ 537.691531][T12858] name failslab, interval 1, probability 0, space 0, times 0 [ 537.728031][T12858] CPU: 1 UID: 0 PID: 12858 Comm: syz.1.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.728075][T12858] Tainted: [L]=SOFTLOCKUP [ 537.728081][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.728091][T12858] Call Trace: [ 537.728097][T12858] [ 537.728104][T12858] dump_stack_lvl+0xe8/0x150 [ 537.728126][T12858] should_fail_ex+0x40c/0x560 [ 537.728157][T12858] should_failslab+0xa8/0x100 [ 537.728186][T12858] __kmalloc_noprof+0xe8/0x750 [ 537.728208][T12858] ? __pfx_dynamic_dname+0x10/0x10 [ 537.728229][T12858] ? tomoyo_encode+0x2ad/0x570 [ 537.728247][T12858] tomoyo_encode+0x2ad/0x570 [ 537.728266][T12858] tomoyo_realpath_from_path+0x5fa/0x640 [ 537.728287][T12858] ? tomoyo_path_number_perm+0x219/0x5f0 [ 537.728322][T12858] tomoyo_path_number_perm+0x246/0x5f0 [ 537.728366][T12858] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 537.728432][T12858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.728461][T12858] ? preempt_count_add+0x91/0x190 [ 537.728486][T12858] ? rcu_is_watching+0x15/0xb0 [ 537.728505][T12858] ? hook_file_ioctl+0x1f0/0x5f0 [ 537.728530][T12858] ? lock_release+0x4b/0x3c0 [ 537.728545][T12858] ? __fget_files+0x2a/0x420 [ 537.728568][T12858] ? __fget_files+0x3a2/0x420 [ 537.728590][T12858] ? __fget_files+0x2a/0x420 [ 537.728614][T12858] security_file_ioctl+0xc3/0x2a0 [ 537.728636][T12858] __se_sys_ioctl+0x47/0x170 [ 537.728654][T12858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.728670][T12858] do_syscall_64+0x174/0x580 [ 537.728693][T12858] ? trace_irq_disable+0x3b/0x140 [ 537.728718][T12858] ? clear_bhb_loop+0x40/0x90 [ 537.728736][T12858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.728751][T12858] RIP: 0033:0x7f8a0c59ce59 [ 537.728766][T12858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.728779][T12858] RSP: 002b:00007f8a0d38e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.728796][T12858] RAX: ffffffffffffffda RBX: 00007f8a0c815fa0 RCX: 00007f8a0c59ce59 [ 537.728808][T12858] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000006 [ 537.728818][T12858] RBP: 00007f8a0d38e090 R08: 0000000000000000 R09: 0000000000000000 [ 537.728828][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.728837][T12858] R13: 00007f8a0c816038 R14: 00007f8a0c815fa0 R15: 00007f8a0c93fa48 [ 537.728855][T12858] [ 537.728882][T12858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.152671][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.180411][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.206034][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.231981][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.446623][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.460783][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.845794][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.859480][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.877123][T12880] loop5: detected capacity change from 0 to 7 [ 538.884295][T12881] netlink: 'syz.1.2208': attribute type 4 has an invalid length. [ 538.893773][T12880] loop5: [POWERTEC] p1 p2 p3 [ 538.900917][T12880] loop5: p1 size 8716288 extends beyond EOD, truncated [ 538.908479][T12881] netlink: 'syz.1.2208': attribute type 21 has an invalid length. [ 538.921612][T12880] loop5: p2 start 536870912 is beyond EOD, truncated [ 538.933510][T12880] loop5: p3 start 3670016 is beyond EOD, truncated [ 538.940552][T12881] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.949906][T12883] sctp: [Deprecated]: syz.0.2209 (pid 12883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.949906][T12883] Use struct sctp_sack_info instead [ 539.079103][T12883] loop5: [POWERTEC] p1 p2 p3 [ 539.097252][ T5642] udevd[5642]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 539.106534][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.123219][T12883] loop5: p1 size 8716288 extends beyond EOD, truncated [ 539.139732][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.165766][T12883] loop5: p2 start 536870912 is beyond EOD, truncated [ 539.187629][T12883] loop5: p3 start 3670016 is beyond EOD, truncated [ 539.226121][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.247290][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.475946][T12897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.493638][T12897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.550990][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.560413][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.638710][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.648052][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.049021][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.070450][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.133742][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.184954][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.727779][T12917] FAULT_INJECTION: forcing a failure. [ 540.727779][T12917] name failslab, interval 1, probability 0, space 0, times 0 [ 540.750283][T12917] CPU: 0 UID: 0 PID: 12917 Comm: syz.4.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.750323][T12917] Tainted: [L]=SOFTLOCKUP [ 540.750333][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.750348][T12917] Call Trace: [ 540.750358][T12917] [ 540.750370][T12917] dump_stack_lvl+0xe8/0x150 [ 540.750401][T12917] should_fail_ex+0x40c/0x560 [ 540.750430][T12917] should_failslab+0xa8/0x100 [ 540.750456][T12917] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 540.750490][T12917] ? alloc_unbound_pwq+0xaa6/0xe00 [ 540.750524][T12917] alloc_unbound_pwq+0xaa6/0xe00 [ 540.750559][T12917] apply_wqattrs_prepare+0x389/0xdc0 [ 540.750591][T12917] ? pcpu_alloc_noprof+0x100f/0x1900 [ 540.750633][T12917] __alloc_workqueue+0x117c/0x2060 [ 540.750664][T12917] alloc_workqueue_noprof+0xe3/0x210 [ 540.750690][T12917] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 540.750713][T12917] ? rcu_is_watching+0x15/0xb0 [ 540.750740][T12917] ? rcu_is_watching+0x15/0xb0 [ 540.750773][T12917] ? trace_irq_enable+0x3b/0x140 [ 540.750808][T12917] nci_register_device+0x5c9/0xa00 [ 540.750835][T12917] ? __pfx_nci_register_device+0x10/0x10 [ 540.750856][T12917] ? __raw_spin_lock_init+0x45/0x100 [ 540.750886][T12917] ? __raw_spin_lock_init+0x45/0x100 [ 540.750915][T12917] ? __init_waitqueue_head+0xa8/0x150 [ 540.750945][T12917] virtual_ncidev_open+0x129/0x1a0 [ 540.750971][T12917] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 540.750993][T12917] misc_open+0x2d5/0x350 [ 540.751028][T12917] chrdev_open+0x4d9/0x600 [ 540.751057][T12917] ? __pfx_chrdev_open+0x10/0x10 [ 540.751084][T12917] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 540.751112][T12917] ? __pfx_chrdev_open+0x10/0x10 [ 540.751138][T12917] do_dentry_open+0x816/0x1380 [ 540.751173][T12917] vfs_open+0x3b/0x340 [ 540.751201][T12917] ? path_openat+0x2e2d/0x3830 [ 540.751234][T12917] path_openat+0x2e44/0x3830 [ 540.751261][T12917] ? kasan_save_track+0x3e/0x80 [ 540.751293][T12917] ? do_getname+0x2e/0x250 [ 540.751321][T12917] ? do_sys_openat2+0xcc/0x200 [ 540.751350][T12917] ? __x64_sys_openat+0x138/0x170 [ 540.751391][T12917] do_file_open+0x23e/0x4a0 [ 540.751416][T12917] ? __pfx_do_file_open+0x10/0x10 [ 540.751450][T12917] ? _raw_spin_unlock+0x28/0x50 [ 540.751476][T12917] ? alloc_fd+0x651/0x6c0 [ 540.751511][T12917] do_sys_openat2+0x115/0x200 [ 540.751544][T12917] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.751577][T12917] ? ksys_write+0x242/0x270 [ 540.751601][T12917] ? __pfx_ksys_write+0x10/0x10 [ 540.751626][T12917] __x64_sys_openat+0x138/0x170 [ 540.751659][T12917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.751681][T12917] do_syscall_64+0x174/0x580 [ 540.751712][T12917] ? trace_irq_disable+0x3b/0x140 [ 540.751744][T12917] ? clear_bhb_loop+0x40/0x90 [ 540.751777][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.751799][T12917] RIP: 0033:0x7f368c99ce59 [ 540.751820][T12917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.751839][T12917] RSP: 002b:00007f368d89d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.751864][T12917] RAX: ffffffffffffffda RBX: 00007f368cc15fa0 RCX: 00007f368c99ce59 [ 540.751881][T12917] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 540.751896][T12917] RBP: 00007f368d89d090 R08: 0000000000000000 R09: 0000000000000000 [ 540.751910][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.751923][T12917] R13: 00007f368cc16038 R14: 00007f368cc15fa0 R15: 00007f368cd3fa48 [ 540.751947][T12917] [ 541.573058][T12934] FAULT_INJECTION: forcing a failure. [ 541.573058][T12934] name failslab, interval 1, probability 0, space 0, times 0 [ 541.643064][T12934] CPU: 1 UID: 0 PID: 12934 Comm: syz.4.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.643089][T12934] Tainted: [L]=SOFTLOCKUP [ 541.643095][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.643105][T12934] Call Trace: [ 541.643112][T12934] [ 541.643121][T12934] dump_stack_lvl+0xe8/0x150 [ 541.643145][T12934] should_fail_ex+0x40c/0x560 [ 541.643164][T12934] should_failslab+0xa8/0x100 [ 541.643182][T12934] __kmalloc_cache_noprof+0x88/0x660 [ 541.643204][T12934] ? __sctp_v6_cmp_addr+0x1d1/0x4f0 [ 541.643225][T12934] ? sctp_add_bind_addr+0x8c/0x370 [ 541.643246][T12934] sctp_add_bind_addr+0x8c/0x370 [ 541.643278][T12934] sctp_copy_local_addr_list+0x31a/0x4e0 [ 541.643301][T12934] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 541.643321][T12934] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 541.643351][T12934] ? sctp_v6_is_any+0x64/0x80 [ 541.643463][T12934] ? sctp_copy_one_addr+0x93/0x360 [ 541.643484][T12934] sctp_bind_addr_copy+0xb3/0x3c0 [ 541.643503][T12934] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 541.643522][T12934] sctp_connect_new_asoc+0x2ff/0x6b0 [ 541.643547][T12934] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 541.643570][T12934] ? rcu_is_watching+0x15/0xb0 [ 541.643588][T12934] ? rcu_is_watching+0x15/0xb0 [ 541.643604][T12934] ? trace_irq_enable+0x3b/0x140 [ 541.643628][T12934] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 541.643649][T12934] ? security_sctp_bind_connect+0x7e/0x2c0 [ 541.643672][T12934] sctp_sendmsg+0x159b/0x2d00 [ 541.643702][T12934] ? kstrtouint+0x6e/0xe0 [ 541.643719][T12934] ? __pfx_sctp_sendmsg+0x10/0x10 [ 541.643743][T12934] ? get_pid_task+0x20/0x1f0 [ 541.643765][T12934] ? rcu_is_watching+0x15/0xb0 [ 541.643783][T12934] ? aa_sk_perm+0x6d5/0x900 [ 541.643800][T12934] ? __pfx_aa_sk_perm+0x10/0x10 [ 541.643812][T12934] ? sock_rps_record_flow+0x19/0x350 [ 541.643834][T12934] ? inet_sendmsg+0x298/0x320 [ 541.643884][T12934] ? __pfx_inet_sendmsg+0x10/0x10 [ 541.643912][T12934] sock_sendmsg_nosec+0x10e/0x180 [ 541.643943][T12934] __sys_sendto+0x408/0x5a0 [ 541.643968][T12934] ? __pfx___sys_sendto+0x10/0x10 [ 541.643989][T12934] ? __mutex_unlock_slowpath+0x731/0x900 [ 541.644023][T12934] ? __pfx_ksys_write+0x10/0x10 [ 541.644041][T12934] __x64_sys_sendto+0xde/0x100 [ 541.644064][T12934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.644080][T12934] do_syscall_64+0x174/0x580 [ 541.644100][T12934] ? trace_irq_disable+0x3b/0x140 [ 541.644122][T12934] ? clear_bhb_loop+0x40/0x90 [ 541.644138][T12934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.644153][T12934] RIP: 0033:0x7f368c99ce59 [ 541.644168][T12934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.644181][T12934] RSP: 002b:00007f368d89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 541.644198][T12934] RAX: ffffffffffffffda RBX: 00007f368cc15fa0 RCX: 00007f368c99ce59 [ 541.644210][T12934] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 541.644220][T12934] RBP: 00007f368d89d090 R08: 0000200000000080 R09: 000000000000001c [ 541.644230][T12934] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 541.644240][T12934] R13: 00007f368cc16038 R14: 00007f368cc15fa0 R15: 00007f368cd3fa48 [ 541.644257][T12934] [ 542.081493][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.100408][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.358513][T12941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.410511][T12941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.462103][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.473564][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.578943][T12949] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2232'. [ 542.628959][T12950] batadv_slave_0: entered promiscuous mode [ 542.693354][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.711956][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.721433][T12950] batadv_slave_0: left promiscuous mode [ 542.993182][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 543.057413][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 543.483532][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.531042][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.609355][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2246'. [ 543.764923][T12997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.797499][T12997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.180395][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.254498][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.716717][ T30] audit: type=1326 audit(1782150964.081:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 544.784008][ T30] audit: type=1326 audit(1782150964.111:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 544.953839][ T30] audit: type=1326 audit(1782150964.111:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 544.986656][ T7846] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 545.021560][ T7846] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 545.051346][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 545.083329][ T30] audit: type=1326 audit(1782150964.111:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 545.142574][T13022] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 545.185978][ T30] audit: type=1326 audit(1782150964.131:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 545.255849][T13027] program syz.4.2257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.286580][ T30] audit: type=1326 audit(1782150964.131:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 545.394891][ T30] audit: type=1326 audit(1782150964.141:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13016 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6bdff5d68e code=0x7ffc0000 [ 545.463939][ T30] audit: type=1326 audit(1782150964.141:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 545.545804][ T30] audit: type=1326 audit(1782150964.291:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13016 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 545.631949][ T30] audit: type=1326 audit(1782150964.311:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13013 comm="syz.3.2254" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 545.947523][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 546.140880][T13038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.158735][T13038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.169141][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 546.202537][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 546.213518][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 546.403817][T13044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 546.410852][T13044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 546.444083][T13044] vhci_hcd vhci_hcd.0: Device attached [ 546.537168][T13045] usbip_core: unknown command [ 546.558946][T13045] vhci_hcd: unknown pdu 774857333 [ 546.574132][T13045] usbip_core: unknown command [ 546.590477][T10936] vhci_hcd vhci_hcd.3: stop threads [ 546.596070][T10936] vhci_hcd vhci_hcd.3: release socket [ 546.612136][T10936] vhci_hcd vhci_hcd.3: disconnect device [ 546.672403][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.691948][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.734306][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.752720][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.830740][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.846107][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.921792][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 547.445342][T13068] syzkaller0: entered promiscuous mode [ 547.456221][T13068] syzkaller0: entered allmulticast mode [ 547.673704][T13072] FAULT_INJECTION: forcing a failure. [ 547.673704][T13072] name failslab, interval 1, probability 0, space 0, times 0 [ 547.720309][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.3.2272 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.720342][T13072] Tainted: [L]=SOFTLOCKUP [ 547.720348][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.720358][T13072] Call Trace: [ 547.720365][T13072] [ 547.720372][T13072] dump_stack_lvl+0xe8/0x150 [ 547.720395][T13072] should_fail_ex+0x40c/0x560 [ 547.720415][T13072] should_failslab+0xa8/0x100 [ 547.720432][T13072] __kmalloc_noprof+0xe8/0x750 [ 547.720454][T13072] ? do_sys_poll+0x2c4/0x1110 [ 547.720478][T13072] do_sys_poll+0x2c4/0x1110 [ 547.720500][T13072] ? rcu_is_watching+0x15/0xb0 [ 547.720547][T13072] ? rcu_is_watching+0x15/0xb0 [ 547.720571][T13072] ? lock_release+0x4b/0x3c0 [ 547.720594][T13072] ? lock_release+0x4b/0x3c0 [ 547.720612][T13072] ? __pfx_do_sys_poll+0x10/0x10 [ 547.720641][T13072] ? is_bpf_text_address+0x292/0x2b0 [ 547.720663][T13072] ? aa_file_perm+0x18b/0x15f0 [ 547.720685][T13072] ? rcu_is_watching+0x15/0xb0 [ 547.720734][T13072] ? rcu_is_watching+0x15/0xb0 [ 547.720757][T13072] ? lock_release+0x4b/0x3c0 [ 547.720776][T13072] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.720822][T13072] ? set_user_sigmask+0xcd/0x1c0 [ 547.720854][T13072] ? __pfx_set_user_sigmask+0x10/0x10 [ 547.720883][T13072] ? kmem_cache_free+0x182/0x650 [ 547.720914][T13072] ? fd_install+0x94/0x3d0 [ 547.720949][T13072] __se_sys_ppoll+0x209/0x2b0 [ 547.720981][T13072] ? __pfx___se_sys_ppoll+0x10/0x10 [ 547.721009][T13072] ? __pfx_ksys_write+0x10/0x10 [ 547.721034][T13072] ? rcu_is_watching+0x15/0xb0 [ 547.721058][T13072] ? __x64_sys_ppoll+0x20/0xc0 [ 547.721087][T13072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.721110][T13072] do_syscall_64+0x174/0x580 [ 547.721141][T13072] ? trace_irq_disable+0x3b/0x140 [ 547.721173][T13072] ? clear_bhb_loop+0x40/0x90 [ 547.721197][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.721232][T13072] RIP: 0033:0x7f6bdff9ce59 [ 547.721252][T13072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.721272][T13072] RSP: 002b:00007f6be0dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 547.721296][T13072] RAX: ffffffffffffffda RBX: 00007f6be0215fa0 RCX: 00007f6bdff9ce59 [ 547.721313][T13072] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 547.721341][T13072] RBP: 00007f6be0dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.721355][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.721369][T13072] R13: 00007f6be0216038 R14: 00007f6be0215fa0 R15: 00007f6be033fa48 [ 547.721395][T13072] [ 548.202828][T13079] geneve1: Caught tx_queue_len zero misconfig [ 548.537047][T13084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.570622][T13084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.654494][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.692503][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.903735][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.914783][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.979976][T13101] __nla_validate_parse: 2 callbacks suppressed [ 548.980001][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 548.997829][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2282'. [ 549.009609][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2282'. [ 549.125931][T13107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2283'. [ 549.167974][T13108] netlink: 'syz.3.2284': attribute type 2 has an invalid length. [ 549.229939][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.244023][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.591174][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.601026][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.058624][T13125] netlink: 'syz.3.2290': attribute type 4 has an invalid length. [ 550.203473][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 550.203495][ T30] audit: type=1326 audit(1782150969.571:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.283013][ T30] audit: type=1326 audit(1782150969.601:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.358084][ T30] audit: type=1326 audit(1782150969.611:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.453840][ T30] audit: type=1326 audit(1782150969.611:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.502408][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.516265][ T30] audit: type=1326 audit(1782150969.631:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.567250][ T30] audit: type=1326 audit(1782150969.631:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.601131][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.615122][ T30] audit: type=1326 audit(1782150969.631:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2f1b5d68e code=0x7ffc0000 [ 550.671211][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 550.684747][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 550.699886][ T30] audit: type=1326 audit(1782150969.631:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.751169][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 550.783361][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 550.799344][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.832863][ T30] audit: type=1326 audit(1782150969.791:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.837886][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 550.858315][ T30] audit: type=1326 audit(1782150970.011:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.2291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f1b9ce59 code=0x7ffc0000 [ 550.893606][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.967693][T13144] ipt_REJECT: TCP_RESET invalid for non-tcp [ 551.077387][T13150] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2296'. [ 551.509872][T13152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.557182][T13152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.565928][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.594918][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.711678][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.750531][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.551621][T13184] kvm: emulating exchange as write [ 552.558531][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.578471][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.582269][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.632961][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.637959][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.655207][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.668551][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.693127][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.739682][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.769193][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.796797][T13188] hub 8-0:1.0: USB hub found [ 552.812994][T13188] hub 8-0:1.0: 1 port detected [ 553.394784][T13197] lo: Caught tx_queue_len zero misconfig [ 553.977314][T13203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.018118][T13203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.055064][T13204] hub 8-0:1.0: USB hub found [ 554.063540][T13204] hub 8-0:1.0: 1 port detected [ 554.090338][T13203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.110090][T13203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.132926][T13203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.166887][T13203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.939025][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.980536][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.142005][T13218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.156939][T13218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.240650][T13220] __nla_validate_parse: 4 callbacks suppressed [ 555.240674][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 555.287936][T13220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2316'. [ 555.664692][T13226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.676207][T13226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.941759][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 555.941779][ T30] audit: type=1326 audit(1782150975.311:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 555.995955][T13237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2320'. [ 555.998222][ T30] audit: type=1326 audit(1782150975.341:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.041743][ T30] audit: type=1326 audit(1782150975.341:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.122300][ T30] audit: type=1326 audit(1782150975.341:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.158105][T13242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.181204][T13242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.204438][ T30] audit: type=1326 audit(1782150975.341:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.260628][ T30] audit: type=1326 audit(1782150975.361:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.290043][ T30] audit: type=1326 audit(1782150975.361:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.319174][ T30] audit: type=1326 audit(1782150975.361:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f368c95d68e code=0x7ffc0000 [ 556.347144][ T30] audit: type=1326 audit(1782150975.361:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 556.432269][ T30] audit: type=1326 audit(1782150975.521:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.2321" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f368c99ce59 code=0x7ffc0000 [ 557.144277][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.185567][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.186223][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.215923][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.228521][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.262183][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2327'. [ 557.274505][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.790278][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'. [ 557.842402][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.853241][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.872819][T13272] batadv_slave_0: entered promiscuous mode [ 557.943934][T13272] batadv_slave_0: left promiscuous mode [ 558.067215][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 558.602315][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 558.627403][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.660441][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.782456][T13292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2337'. [ 559.989068][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.006744][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.791975][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.807159][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.900321][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.948619][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.962505][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 561.640461][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 561.664995][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.746119][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.834027][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.863471][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.045597][T13280] Set syz1 is full, maxelem 65536 reached [ 562.107074][T13338] hub 8-0:1.0: USB hub found [ 562.131126][T13338] hub 8-0:1.0: 1 port detected [ 562.148422][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2350'. [ 562.366803][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2351'. [ 562.402528][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 562.402550][ T30] audit: type=1400 audit(1782150981.771:1346): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=13347 comm="syz.3.2352" [ 562.584513][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.633361][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.342027][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.368984][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.432261][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.438916][ T30] audit: type=1326 audit(1782150982.781:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.3.2355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x0 [ 563.443275][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.676155][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.704877][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.997362][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2361'. [ 564.113371][T13377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.126245][T13377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.349146][T13379] input: syz0 as /devices/virtual/input/input48 [ 564.816515][T13391] hub 8-0:1.0: USB hub found [ 564.840660][T13391] hub 8-0:1.0: 1 port detected [ 566.155240][T13401] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2369'. [ 566.358938][T13404] FAULT_INJECTION: forcing a failure. [ 566.358938][T13404] name failslab, interval 1, probability 0, space 0, times 0 [ 566.392690][T13404] CPU: 1 UID: 0 PID: 13404 Comm: syz.3.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.392719][T13404] Tainted: [L]=SOFTLOCKUP [ 566.392726][T13404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.392737][T13404] Call Trace: [ 566.392745][T13404] [ 566.392760][T13404] dump_stack_lvl+0xe8/0x150 [ 566.392785][T13404] should_fail_ex+0x40c/0x560 [ 566.392808][T13404] should_failslab+0xa8/0x100 [ 566.392826][T13404] __kmalloc_cache_noprof+0x88/0x660 [ 566.392853][T13404] ? vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 566.392879][T13404] ? __kasan_kmalloc+0x93/0xb0 [ 566.392897][T13404] vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 566.392924][T13404] vhost_iotlb_add_range_ctx+0x5fa/0x6b0 [ 566.392951][T13404] vhost_dev_ioctl+0xe06/0x1170 [ 566.392972][T13404] ? vhost_vsock_dev_ioctl+0x220/0xed0 [ 566.392996][T13404] ? __pfx___mutex_lock+0x10/0x10 [ 566.393023][T13404] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 566.393049][T13404] vhost_vsock_dev_ioctl+0x22e/0xed0 [ 566.393072][T13404] ? lock_release+0x4b/0x3c0 [ 566.393089][T13404] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 566.393112][T13404] ? __fget_files+0x2a/0x420 [ 566.393137][T13404] ? __fget_files+0x3a2/0x420 [ 566.393164][T13404] ? __fget_files+0x2a/0x420 [ 566.393192][T13404] ? bpf_lsm_file_ioctl+0x9/0x20 [ 566.393216][T13404] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 566.393276][T13404] __se_sys_ioctl+0xfc/0x170 [ 566.393305][T13404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.393330][T13404] do_syscall_64+0x174/0x580 [ 566.393363][T13404] ? trace_irq_disable+0x3b/0x140 [ 566.393409][T13404] ? clear_bhb_loop+0x40/0x90 [ 566.393429][T13404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.393447][T13404] RIP: 0033:0x7f6bdff9ce59 [ 566.393463][T13404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.393479][T13404] RSP: 002b:00007f6be0dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.393498][T13404] RAX: ffffffffffffffda RBX: 00007f6be0215fa0 RCX: 00007f6bdff9ce59 [ 566.393512][T13404] RDX: 0000200000000400 RSI: 000000004008af03 RDI: 0000000000000003 [ 566.393523][T13404] RBP: 00007f6be0dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.393535][T13404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.393545][T13404] R13: 00007f6be0216038 R14: 00007f6be0215fa0 R15: 00007f6be033fa48 [ 566.393565][T13404] [ 566.847237][T13409] netlink: 'syz.3.2372': attribute type 11 has an invalid length. [ 566.954383][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.971303][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.077732][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 567.171271][T13421] batadv_slave_0: entered promiscuous mode [ 567.290543][T13421] batadv_slave_0: left promiscuous mode [ 567.507721][T13429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.535109][T13429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.268977][T13442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.289397][T13442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.536601][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.556403][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.899296][T13448] syzkaller0: entered promiscuous mode [ 568.907648][T13448] syzkaller0: entered allmulticast mode [ 569.126082][ T30] audit: type=1326 audit(1782150988.491:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.224998][T13460] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2389'. [ 569.234838][ T30] audit: type=1326 audit(1782150988.491:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.266850][T13460] gretap0: entered promiscuous mode [ 569.292842][ T30] audit: type=1326 audit(1782150988.521:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.332504][ T30] audit: type=1326 audit(1782150988.521:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.383767][T13462] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.392066][ T30] audit: type=1326 audit(1782150988.521:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.438347][ T30] audit: type=1326 audit(1782150988.521:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.476216][ T30] audit: type=1326 audit(1782150988.541:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.517009][ T30] audit: type=1326 audit(1782150988.551:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.544220][ T30] audit: type=1326 audit(1782150988.551:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca5655d68e code=0x7ffc0000 [ 569.578505][ T30] audit: type=1326 audit(1782150988.581:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.0.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fca5659ce59 code=0x7ffc0000 [ 569.730561][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 569.796908][T13467] batadv_slave_0: entered promiscuous mode [ 569.892124][T13467] batadv_slave_0: left promiscuous mode [ 570.113461][T13471] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 570.213411][T13471] tc_dump_action: action bad kind [ 570.268704][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.292346][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.585183][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.611093][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.694039][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.717558][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.743190][T13481] fuse: fd is not a fuse device [ 571.011644][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 571.076385][T13489] batadv_slave_0: entered promiscuous mode [ 571.141805][T13489] batadv_slave_0: left promiscuous mode [ 571.208214][T13493] netlink: 400 bytes leftover after parsing attributes in process `syz.3.2398'. [ 571.349197][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.364217][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.469854][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.492565][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.506641][T13503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.525051][T13503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.366822][T13526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.379980][T13526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.404170][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.415935][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.497841][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 573.531753][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.542376][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.553413][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.564335][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.576204][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.587287][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.595579][T13537] batadv_slave_0: entered promiscuous mode [ 573.661954][T13537] batadv_slave_0: left promiscuous mode [ 573.758671][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 573.810595][T13543] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 573.853503][T13543] bond5: (slave veth5): Enslaving as an active interface with a down link [ 573.926291][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.936233][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.903428][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 575.322554][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.370690][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.851972][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 575.925653][T13580] batadv_slave_0: entered promiscuous mode [ 576.000620][T13580] batadv_slave_0: left promiscuous mode [ 576.062654][T13582] FAULT_INJECTION: forcing a failure. [ 576.062654][T13582] name failslab, interval 1, probability 0, space 0, times 0 [ 576.094926][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.123390][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.123891][T13582] CPU: 0 UID: 0 PID: 13582 Comm: syz.1.2424 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.123983][T13582] Tainted: [L]=SOFTLOCKUP [ 576.124007][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.124046][T13582] Call Trace: [ 576.124069][T13582] [ 576.124091][T13582] dump_stack_lvl+0xe8/0x150 [ 576.124167][T13582] should_fail_ex+0x40c/0x560 [ 576.124269][T13582] should_failslab+0xa8/0x100 [ 576.124333][T13582] ? security_inode_alloc+0x39/0x310 [ 576.124399][T13582] kmem_cache_alloc_noprof+0x87/0x650 [ 576.124484][T13582] ? __pfx_make_kgid+0x10/0x10 [ 576.124603][T13582] security_inode_alloc+0x39/0x310 [ 576.124668][T13582] inode_init_always_gfp+0x97e/0xd30 [ 576.124779][T13582] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 576.124866][T13582] alloc_inode+0x82/0x1b0 [ 576.124959][T13582] new_inode+0x1f/0x170 [ 576.125068][T13582] shmem_get_inode+0x3a4/0xfe0 [ 576.125162][T13582] ? __pfx_shmem_get_inode+0x10/0x10 [ 576.125236][T13582] ? make_vfsuid+0x49/0xa0 [ 576.125303][T13582] ? generic_permission+0x2bf/0x670 [ 576.125397][T13582] shmem_mknod+0x17d/0x340 [ 576.125493][T13582] vfs_mknod+0x441/0x600 [ 576.125566][T13582] unix_bind+0x56a/0x1270 [ 576.125756][T13582] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 576.125815][T13582] ? __pfx_unix_bind+0x10/0x10 [ 576.125886][T13582] ? bpf_lsm_socket_bind+0x9/0x20 [ 576.125967][T13582] __sys_bind+0x2e3/0x410 [ 576.126050][T13582] ? __pfx___sys_bind+0x10/0x10 [ 576.126143][T13582] ? __pfx_ksys_write+0x10/0x10 [ 576.126207][T13582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.126263][T13582] __x64_sys_bind+0x7a/0x90 [ 576.126351][T13582] do_syscall_64+0x174/0x580 [ 576.126461][T13582] ? trace_irq_disable+0x3b/0x140 [ 576.126549][T13582] ? clear_bhb_loop+0x40/0x90 [ 576.126613][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.126676][T13582] RIP: 0033:0x7f8a0c59ce59 [ 576.126730][T13582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.126784][T13582] RSP: 002b:00007f8a0d38e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 576.126848][T13582] RAX: ffffffffffffffda RBX: 00007f8a0c815fa0 RCX: 00007f8a0c59ce59 [ 576.126891][T13582] RDX: 000000000000006e RSI: 0000200000000240 RDI: 0000000000000003 [ 576.126933][T13582] RBP: 00007f8a0d38e090 R08: 0000000000000000 R09: 0000000000000000 [ 576.126967][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.126994][T13582] R13: 00007f8a0c816038 R14: 00007f8a0c815fa0 R15: 00007f8a0c93fa48 [ 576.127060][T13582] [ 576.532056][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.549289][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.598659][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.607980][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.968273][T13598] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2430'. [ 577.546887][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.560919][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.575971][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 577.613266][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 577.642107][T13618] netlink: 'syz.2.2436': attribute type 15 has an invalid length. [ 578.031697][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.054294][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.082238][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.102373][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.288160][T13658] binder: 13657:13658 ioctl c0306201 0 returned -14 [ 579.426215][T13658] syz.2.2448 (13658): drop_caches: 2 [ 579.773678][T13671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.773954][T13671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.068110][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.104399][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.119813][T13681] syzkaller0: entered promiscuous mode [ 580.133918][T13681] syzkaller0: entered allmulticast mode [ 580.154790][T13681] FAULT_INJECTION: forcing a failure. [ 580.154790][T13681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.169362][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2454'. [ 580.182234][T13681] CPU: 1 UID: 0 PID: 13681 Comm: syz.2.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.182271][T13681] Tainted: [L]=SOFTLOCKUP [ 580.182279][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.182294][T13681] Call Trace: [ 580.182303][T13681] [ 580.182312][T13681] dump_stack_lvl+0xe8/0x150 [ 580.182342][T13681] should_fail_ex+0x40c/0x560 [ 580.182371][T13681] _copy_from_iter+0x1d3/0x1660 [ 580.182400][T13681] ? __might_fault+0xaf/0x130 [ 580.182429][T13681] ? __might_fault+0xcb/0x130 [ 580.182457][T13681] ? _copy_from_iter+0x21b/0x1660 [ 580.182485][T13681] ? __pfx__copy_from_iter+0x10/0x10 [ 580.182514][T13681] ? __pfx__copy_from_iter+0x10/0x10 [ 580.182547][T13681] copy_page_from_iter+0x219/0x2d0 [ 580.182588][T13681] skb_copy_datagram_from_iter+0x2f4/0x720 [ 580.182698][T13681] packet_sendmsg+0x36ab/0x5040 [ 580.182802][T13681] ? arch_stack_walk+0xfb/0x150 [ 580.182832][T13681] ? rcu_is_watching+0x15/0xb0 [ 580.182857][T13681] ? lock_acquire+0x5f/0x350 [ 580.182877][T13681] ? aa_file_perm+0x18b/0x15f0 [ 580.182901][T13681] ? _parse_integer_limit+0x192/0x1e0 [ 580.182930][T13681] ? kstrtoull+0x12f/0x1d0 [ 580.182955][T13681] ? kstrtouint+0x6e/0xe0 [ 580.182980][T13681] ? get_pid_task+0x20/0x1f0 [ 580.183000][T13681] ? rcu_is_watching+0x15/0xb0 [ 580.183024][T13681] ? __pfx_packet_sendmsg+0x10/0x10 [ 580.183047][T13681] ? aa_sk_perm+0x6d5/0x900 [ 580.183068][T13681] ? lock_acquire+0x5f/0x350 [ 580.183089][T13681] ? __pfx_aa_sk_perm+0x10/0x10 [ 580.183107][T13681] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 580.183135][T13681] ? lock_release+0x4b/0x3c0 [ 580.183162][T13681] ? __might_fault+0xaf/0x130 [ 580.183191][T13681] ? __pfx_packet_sendmsg+0x10/0x10 [ 580.183213][T13681] sock_sendmsg_nosec+0x13a/0x180 [ 580.183241][T13681] __sys_sendto+0x408/0x5a0 [ 580.183275][T13681] ? __pfx___sys_sendto+0x10/0x10 [ 580.183305][T13681] ? __mutex_unlock_slowpath+0x731/0x900 [ 580.183348][T13681] ? __pfx_ksys_write+0x10/0x10 [ 580.183375][T13681] __x64_sys_sendto+0xde/0x100 [ 580.183413][T13681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.183436][T13681] do_syscall_64+0x174/0x580 [ 580.183478][T13681] ? clear_bhb_loop+0x40/0x90 [ 580.183508][T13681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.183530][T13681] RIP: 0033:0x7fa2f1b9ce59 [ 580.183551][T13681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.183571][T13681] RSP: 002b:00007fa2f298d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 580.183596][T13681] RAX: ffffffffffffffda RBX: 00007fa2f1e15fa0 RCX: 00007fa2f1b9ce59 [ 580.183613][T13681] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 580.183627][T13681] RBP: 00007fa2f298d090 R08: 0000200000000140 R09: 0000000000000014 [ 580.183641][T13681] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 580.183656][T13681] R13: 00007fa2f1e16038 R14: 00007fa2f1e15fa0 R15: 00007fa2f1f3fa48 [ 580.183681][T13681] [ 581.083760][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.097670][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.204404][T13697] syzkaller0: entered promiscuous mode [ 581.210894][T13697] syzkaller0: entered allmulticast mode [ 581.262348][T13699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.273859][T13699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.820440][T13713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2465'. [ 581.860297][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 582.275831][T13720] warning: `syz.4.2468' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 583.505914][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2474'. [ 583.520566][T13737] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2474'. [ 583.968023][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 584.034083][T13746] batadv_slave_0: entered promiscuous mode [ 584.132576][T13746] batadv_slave_0: left promiscuous mode [ 584.212634][T13755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.227207][T13755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.317876][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.331901][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.347183][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.356821][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.471020][T13764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.482961][T13764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.083396][T13781] xt_hashlimit: size too large, truncated to 1048576 [ 586.135913][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.156139][T13792] syz.1.2492 (13792): drop_caches: 2 [ 586.162373][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.269466][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.284145][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.483005][T13802] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2495'. [ 586.504828][T13802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.514561][T13802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.793046][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.803220][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.174351][T13808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.184304][T13808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.497030][T13822] Cannot find del_set index 8192 as target [ 587.562768][T13825] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.579217][T13825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.595327][T13825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.188473][T13833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.239909][T13833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.360004][T13839] netlink: 'syz.2.2509': attribute type 1 has an invalid length. [ 588.385566][T13839] netlink: 'syz.2.2509': attribute type 2 has an invalid length. [ 588.642974][T13846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.657446][T13846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.793512][T13853] Invalid logical block size (33023) [ 588.842840][T13856] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 588.864418][T13856] 8021q: adding VLAN 0 to HW filter on device bond8 [ 588.938464][T13860] FAULT_INJECTION: forcing a failure. [ 588.938464][T13860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.953106][T13860] CPU: 0 UID: 0 PID: 13860 Comm: syz.4.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.953143][T13860] Tainted: [L]=SOFTLOCKUP [ 588.953152][T13860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.953166][T13860] Call Trace: [ 588.953175][T13860] [ 588.953185][T13860] dump_stack_lvl+0xe8/0x150 [ 588.953217][T13860] should_fail_ex+0x40c/0x560 [ 588.953245][T13860] _copy_from_user+0x2d/0xb0 [ 588.953278][T13860] input_event_from_user+0xb1/0x290 [ 588.953407][T13860] ? __pfx_input_event_from_user+0x10/0x10 [ 588.953443][T13860] ? rcu_is_watching+0x15/0xb0 [ 588.953475][T13860] evdev_write+0x2c7/0x4c0 [ 588.953534][T13860] ? get_pid_task+0x20/0x1f0 [ 588.953558][T13860] ? __pfx_evdev_write+0x10/0x10 [ 588.953589][T13860] ? bpf_lsm_file_permission+0x9/0x20 [ 588.953620][T13860] ? security_file_permission+0x75/0x260 [ 588.953652][T13860] ? rw_verify_area+0x203/0x4c0 [ 588.953677][T13860] ? __pfx_evdev_write+0x10/0x10 [ 588.953707][T13860] vfs_write+0x296/0xba0 [ 588.953735][T13860] ? __pfx_vfs_write+0x10/0x10 [ 588.953757][T13860] ? lock_release+0x4b/0x3c0 [ 588.953790][T13860] ? __fget_files+0x2a/0x420 [ 588.953822][T13860] ? __fget_files+0x3a2/0x420 [ 588.953854][T13860] ? __fget_files+0x2a/0x420 [ 588.953890][T13860] ksys_write+0x150/0x270 [ 588.953914][T13860] ? __pfx_ksys_write+0x10/0x10 [ 588.953939][T13860] ? rcu_is_watching+0x15/0xb0 [ 588.953964][T13860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.953986][T13860] do_syscall_64+0x174/0x580 [ 588.954038][T13860] ? clear_bhb_loop+0x40/0x90 [ 588.954063][T13860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.954085][T13860] RIP: 0033:0x7f368c99ce59 [ 588.954106][T13860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.954126][T13860] RSP: 002b:00007f368d89d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.954150][T13860] RAX: ffffffffffffffda RBX: 00007f368cc15fa0 RCX: 00007f368c99ce59 [ 588.954167][T13860] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 588.954182][T13860] RBP: 00007f368d89d090 R08: 0000000000000000 R09: 0000000000000000 [ 588.954195][T13860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.954208][T13860] R13: 00007f368cc16038 R14: 00007f368cc15fa0 R15: 00007f368cd3fa48 [ 588.954232][T13860] [ 589.499099][T13872] batadv_slave_0: entered promiscuous mode [ 589.610850][T13872] batadv_slave_0: left promiscuous mode [ 589.919992][T13879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.943835][T13879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.722146][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 590.722161][ T30] audit: type=1400 audit(1782151010.091:1363): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=13888 comm="syz.3.2524" [ 590.874209][T13890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.905188][T13890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.291437][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.345036][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.569981][T13901] hub 8-0:1.0: USB hub found [ 591.575611][T13901] hub 8-0:1.0: 1 port detected [ 592.704574][T13923] hub 8-0:1.0: USB hub found [ 592.711886][T13923] hub 8-0:1.0: 1 port detected [ 593.479892][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.504067][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.772524][T13934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.794469][T13934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.950779][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2540'. [ 594.021185][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 594.040487][T13938] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 594.248968][T13948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.268639][T13948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.602734][T13951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.628809][T13951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.756585][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.766030][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.457670][ T30] audit: type=1326 audit(1782151014.821:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.484334][ T30] audit: type=1326 audit(1782151014.821:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.512395][ T30] audit: type=1326 audit(1782151014.821:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.549477][ T30] audit: type=1326 audit(1782151014.821:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.605193][ T30] audit: type=1326 audit(1782151014.821:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.641992][ T30] audit: type=1326 audit(1782151014.821:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.667549][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.681311][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.699523][ T30] audit: type=1326 audit(1782151014.881:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.725782][ T30] audit: type=1326 audit(1782151014.881:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.752500][ T30] audit: type=1326 audit(1782151014.881:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6bdff5d68e code=0x7ffc0000 [ 595.780060][ T30] audit: type=1326 audit(1782151014.971:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.832833][ T30] audit: type=1326 audit(1782151015.031:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.885539][ T30] audit: type=1326 audit(1782151015.061:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.911888][ T30] audit: type=1326 audit(1782151015.061:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.938351][ T30] audit: type=1326 audit(1782151015.151:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.966150][ T30] audit: type=1326 audit(1782151015.151:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 595.997434][ T30] audit: type=1326 audit(1782151015.151:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 596.025616][ T30] audit: type=1326 audit(1782151015.171:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 596.054351][ T30] audit: type=1326 audit(1782151015.171:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.2555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdff9ce59 code=0x7ffc0000 [ 596.313990][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.347204][T13991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.356848][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.369065][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'. [ 596.383501][T13991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.464363][T13993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.519800][T13997] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 596.539604][T13993] FAULT_INJECTION: forcing a failure. [ 596.539604][T13993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.596372][T13993] CPU: 1 UID: 0 PID: 13993 Comm: syz.1.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.596408][T13993] Tainted: [L]=SOFTLOCKUP [ 596.596417][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.596430][T13993] Call Trace: [ 596.596439][T13993] [ 596.596449][T13993] dump_stack_lvl+0xe8/0x150 [ 596.596480][T13993] should_fail_ex+0x40c/0x560 [ 596.596510][T13993] _copy_from_user+0x2d/0xb0 [ 596.596544][T13993] ___sys_sendmsg+0x1c6/0x360 [ 596.596566][T13993] ? rcu_is_watching+0x15/0xb0 [ 596.596591][T13993] ? get_pid_task+0x20/0x1f0 [ 596.596615][T13993] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.596639][T13993] ? rcu_is_watching+0x15/0xb0 [ 596.596676][T13993] ? __fget_files+0x2a/0x420 [ 596.596709][T13993] ? __fget_files+0x3a2/0x420 [ 596.596746][T13993] __x64_sys_sendmsg+0x1b1/0x290 [ 596.596777][T13993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.596805][T13993] ? rcu_is_watching+0x15/0xb0 [ 596.596829][T13993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.596852][T13993] do_syscall_64+0x174/0x580 [ 596.596885][T13993] ? trace_irq_disable+0x3b/0x140 [ 596.596918][T13993] ? clear_bhb_loop+0x40/0x90 [ 596.596943][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.596965][T13993] RIP: 0033:0x7f8a0c59ce59 [ 596.596985][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.597006][T13993] RSP: 002b:00007f8a0d38e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.597030][T13993] RAX: ffffffffffffffda RBX: 00007f8a0c815fa0 RCX: 00007f8a0c59ce59 [ 596.597046][T13993] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 596.597061][T13993] RBP: 00007f8a0d38e090 R08: 0000000000000000 R09: 0000000000000000 [ 596.597075][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.597089][T13993] R13: 00007f8a0c816038 R14: 00007f8a0c815fa0 R15: 00007f8a0c93fa48 [ 596.597114][T13993] [ 597.509038][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.551600][T14010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.566934][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.592907][T14010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.725068][T14016] hub 8-0:1.0: USB hub found [ 597.737141][T14016] hub 8-0:1.0: 1 port detected [ 598.712413][T14026] syzkaller0: entered promiscuous mode [ 598.735881][T14026] syzkaller0: entered allmulticast mode [ 599.048021][T14036] openvswitch: netlink: VXLAN extension message has 4096 unknown bytes. [ 599.108185][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.135700][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.486292][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.498980][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.535382][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2579'. [ 599.643604][T14052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.655518][T14052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.804345][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 599.814637][T14055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2581'. [ 599.825173][T14055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2581'. [ 600.118825][T14071] batadv_slave_0: entered promiscuous mode [ 600.181880][T14071] batadv_slave_0: left promiscuous mode [ 600.356978][T14078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2588'. [ 600.496779][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 602.099276][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2600'. [ 602.302701][T14109] hub 8-0:1.0: USB hub found [ 602.333086][T14109] hub 8-0:1.0: 1 port detected [ 602.394574][T14115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.429238][T14115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.442808][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 602.490032][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 603.508284][T14133] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2608'. [ 603.709924][T14136] syzkaller0: entered promiscuous mode [ 603.730532][T14136] syzkaller0: entered allmulticast mode [ 603.913939][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.937396][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.969502][T14139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.988331][T14139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.201786][T14142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.214712][T14142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.249316][T14147] netlink: 'syz.2.2613': attribute type 4 has an invalid length. [ 604.500602][T14149] FAULT_INJECTION: forcing a failure. [ 604.500602][T14149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.515066][T14149] CPU: 1 UID: 0 PID: 14149 Comm: syz.4.2614 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.515103][T14149] Tainted: [L]=SOFTLOCKUP [ 604.515113][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.515136][T14149] Call Trace: [ 604.515145][T14149] [ 604.515154][T14149] dump_stack_lvl+0xe8/0x150 [ 604.515190][T14149] should_fail_ex+0x40c/0x560 [ 604.515210][T14149] copy_fpstate_to_sigframe+0xa83/0xd20 [ 604.515236][T14149] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 604.515262][T14149] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 604.515285][T14149] ? rcu_is_watching+0x15/0xb0 [ 604.515304][T14149] ? ktime_get+0x45/0x220 [ 604.515325][T14149] ? ktime_get+0x45/0x220 [ 604.515346][T14149] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 604.515369][T14149] ? ktime_get+0x1f5/0x220 [ 604.515392][T14149] ? fpu__alloc_mathframe+0xac/0x130 [ 604.515415][T14149] get_sigframe+0x603/0x830 [ 604.515444][T14149] ? __pfx_get_sigframe+0x10/0x10 [ 604.515471][T14149] x64_setup_rt_frame+0x163/0xc50 [ 604.515494][T14149] ? rcu_is_watching+0x15/0xb0 [ 604.515512][T14149] ? _raw_spin_unlock_irq+0x2e/0x50 [ 604.515532][T14149] ? get_signal+0x10dd/0x12c0 [ 604.515557][T14149] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 604.515583][T14149] arch_do_signal_or_restart+0x456/0x860 [ 604.515607][T14149] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 604.515665][T14149] ? __x64_sys_recvmmsg+0x198/0x250 [ 604.515689][T14149] ? rcu_is_watching+0x15/0xb0 [ 604.515715][T14149] exit_to_user_mode_loop+0x104/0x730 [ 604.515748][T14149] ? rcu_is_watching+0x15/0xb0 [ 604.515772][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.515797][T14149] do_syscall_64+0x353/0x580 [ 604.515818][T14149] ? trace_irq_disable+0x3b/0x140 [ 604.515842][T14149] ? clear_bhb_loop+0x40/0x90 [ 604.515859][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.515874][T14149] RIP: 0033:0x7f368c99ce57 [ 604.515888][T14149] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 604.515902][T14149] RSP: 002b:00007f368d89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 604.515920][T14149] RAX: 000000000000012b RBX: 00007f368cc15fa0 RCX: 00007f368c99ce59 [ 604.515931][T14149] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 604.515941][T14149] RBP: 00007f368d89d090 R08: 0000000000000000 R09: 0000000000000000 [ 604.515951][T14149] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 604.515961][T14149] R13: 00007f368cc16038 R14: 00007f368cc15fa0 R15: 00007f368cd3fa48 [ 604.515978][T14149] [ 604.964734][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.989118][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.029029][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.040042][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.097465][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 605.639325][T14167] batadv_slave_0: entered promiscuous mode [ 605.648415][T14168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.658261][T14168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.722242][T14167] batadv_slave_0: left promiscuous mode [ 606.104541][T14180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2624'. [ 606.817485][T14187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.826519][T14187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.844094][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 606.982130][T14191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.995013][T14191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.206945][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.225930][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.445207][T14201] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 607.462602][T14201] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 607.757894][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.775286][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.807508][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.837071][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.947771][T14210] usb usb7: usbfs: process 14210 (syz.1.2635) did not claim interface 0 before use [ 608.212117][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.222756][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.379096][T14218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2638'. [ 608.790929][T14228] bond5: entered promiscuous mode [ 608.817547][T14228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.120785][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2645'. [ 609.224474][T14241] batadv_slave_0: entered promiscuous mode [ 609.322310][T14241] batadv_slave_0: left promiscuous mode [ 609.507684][ T9] usb 4-1: USB disconnect, device number 55 [ 609.577565][T14250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 609.586676][T14250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 609.595889][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.611722][T14250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 609.628265][T14250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 609.637792][T14250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.678656][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.831769][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.893769][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.009370][T13290] syz_tun (unregistering): left allmulticast mode [ 610.199533][T10933] bond0: (slave netdevsim1): Releasing backup interface [ 610.376470][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.398973][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.423690][T14253] bridge_slave_0: entered allmulticast mode [ 610.444707][T14253] bridge_slave_0: entered promiscuous mode [ 610.471460][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.493565][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.518903][T14253] bridge_slave_1: entered allmulticast mode [ 610.543159][T14253] bridge_slave_1: entered promiscuous mode [ 610.675907][T14253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.707520][T14253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.799588][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 610.799609][ T30] audit: type=1400 audit(1782151030.161:1387): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=14268 comm="syz.1.2652" [ 610.955058][T14273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.993540][T14273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.022572][T14253] team0: Port device team_slave_0 added [ 611.048295][T10933] bridge_slave_1: left allmulticast mode [ 611.074061][T10933] bridge_slave_1: left promiscuous mode [ 611.098135][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.129733][T10933] bridge_slave_0: left allmulticast mode [ 611.162922][T10933] bridge_slave_0: left promiscuous mode [ 611.194147][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.244806][T10933] tipc: Resetting bearer [ 611.338513][T10933] tipc: Disabling bearer [ 611.464536][T10933] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 611.624187][T10933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.656677][T10933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.670425][ T5639] Bluetooth: hci5: command tx timeout [ 611.697877][T10933] bond0 (unregistering): Released all slaves [ 611.730841][T10933] bond1 (unregistering): Released all slaves [ 611.757135][T10933] bond2 (unregistering): Released all slaves [ 611.794891][T10933] bond3 (unregistering): Released all slaves [ 611.836864][T10933] bond4 (unregistering): Released all slaves [ 611.888018][T10933] bond5 (unregistering): (slave veth5): Releasing active interface [ 611.919420][T10933] bond5 (unregistering): Released all slaves [ 611.970573][T14253] team0: Port device team_slave_1 added [ 612.065807][T10933] tipc: Left network mode [ 612.078383][T14253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.110018][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.184737][T14253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.257158][T14253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.294440][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.379042][T14253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.449076][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 612.663205][T14253] hsr_slave_0: entered promiscuous mode [ 612.688003][T14294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.700858][T14253] hsr_slave_1: entered promiscuous mode [ 612.719789][T14253] debugfs: 'hsr0' already exists in 'hsr' [ 612.749569][T14253] Cannot create hsr debugfs directory [ 612.773252][T14294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.004553][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.109577][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.323314][T14306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2656'. [ 613.375959][T10933] hsr_slave_0: left promiscuous mode [ 613.385378][T10933] hsr_slave_1: left promiscuous mode [ 613.393692][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.415780][T10933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.451754][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.490861][T10933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.750445][ T5639] Bluetooth: hci5: command tx timeout [ 613.878011][T14315] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 613.908346][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2658'. [ 613.934300][T10933] team0 (unregistering): Port device team_slave_1 removed [ 613.976659][T10933] team0 (unregistering): Port device team_slave_0 removed [ 614.186058][T14320] batadv_slave_0: entered promiscuous mode [ 614.221514][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 614.341152][T14317] batadv_slave_0: left promiscuous mode [ 614.578435][T14337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.640593][T14337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.732596][T14253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 614.763807][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.782720][T14253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 614.805641][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.818579][T14253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 614.856199][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.875659][T14253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.902569][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.124126][T14253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.167108][T14253] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.187759][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.196026][T10933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.247747][T10936] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.255853][T10936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.400043][T14363] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2665'. [ 615.432052][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2665'. [ 615.501288][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'. [ 615.553301][T14370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2667'. [ 615.581336][T14253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.621641][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'. [ 615.697400][T14377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2668'. [ 615.806015][T14253] veth0_vlan: entered promiscuous mode [ 615.830378][ T5639] Bluetooth: hci5: command tx timeout [ 615.853051][T14253] veth1_vlan: entered promiscuous mode [ 615.957980][T14253] veth0_macvtap: entered promiscuous mode [ 615.993865][T14253] veth1_macvtap: entered promiscuous mode [ 616.100776][T14253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.144208][T14253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.199758][T10932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.222351][T10932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.271126][T10932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.322656][T10932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.503963][T10932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.592647][T10932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.817822][T10934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.835350][T10934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.912624][ T30] audit: type=1400 audit(1782151036.271:1388): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=14400 comm="syz.0.2671" [ 617.151964][T14404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.233507][T14404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.574352][T14416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2673'. [ 617.644958][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.669132][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.691030][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 617.910254][ T5639] Bluetooth: hci5: command tx timeout [ 618.976857][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.010183][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.453532][T14465] __nla_validate_parse: 5 callbacks suppressed [ 619.453550][T14465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2679'. [ 621.095015][T14494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.170741][T14494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.300222][ T30] audit: type=1326 audit(1782151042.661:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.2.2691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2f1b9ce59 code=0x0 [ 623.420527][T14526] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2693'. [ 623.458987][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2692'. [ 623.624553][T14528] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2692'. [ 623.721893][T14534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.760387][T14534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.423630][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 624.871534][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.879445][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.886572][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 624.905626][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 624.924017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.992476][ T31] task:kworker/1:0 state:D stack:20968 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 625.063280][ T31] Workqueue: usb_hub_wq hub_event [ 625.123141][ T31] Call Trace: [ 625.143391][ T31] [ 625.151704][ T31] __schedule+0x17d9/0x56c0 [ 625.164401][ T31] ? trace_irq_enable+0x3b/0x140 [ 625.184709][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 625.197539][ T31] ? __pfx___schedule+0x10/0x10 [ 625.219086][ T31] ? rcu_is_watching+0x15/0xb0 [ 625.252371][ T31] ? rcu_is_watching+0x15/0xb0 [ 625.312724][ T31] ? lock_release+0x4b/0x3c0 [ 625.336020][ T31] ? rcu_is_watching+0x15/0xb0 [ 625.355025][ T31] ? schedule+0x90/0x360 [ 625.371735][ T31] ? trace_irq_enable+0x3b/0x140 [ 625.386243][ T31] schedule+0x164/0x360 [ 625.401700][ T31] schedule_preempt_disabled+0x13/0x30 [ 625.419232][ T31] __mutex_lock+0x7bf/0x1550 [ 625.443484][ T31] ? __mutex_lock+0x5d4/0x1550 [ 625.456312][ T31] ? hub_event+0x20c9/0x4d30 [ 625.475245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 625.493168][ T31] hub_event+0x20c9/0x4d30 [ 625.511239][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 625.533801][ T9] usb 1-1: USB disconnect, device number 90 [ 625.543303][ T31] ? __pfx_hub_event+0x10/0x10 [ 625.568086][ T31] ? rcu_is_watching+0x15/0xb0 [ 625.596167][ T31] ? lock_acquire+0x5f/0x350 [ 625.618476][ T31] ? rcu_is_watching+0x15/0xb0 [ 625.644924][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 625.676053][ T31] process_scheduled_works+0xa8e/0x14e0 [ 625.700217][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.725942][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 625.741886][ T7735] usb 3-1: USB disconnect, device number 74 [ 625.760225][ T31] ? assign_work+0x3cf/0x5d0 [ 625.780233][ T31] worker_thread+0xa47/0xfb0 [ 625.803623][ T31] kthread+0x388/0x470 [ 625.824330][ T31] ? __pfx_worker_thread+0x10/0x10 [ 625.847097][ T31] ? __pfx_kthread+0x10/0x10 [ 625.873196][ T31] ret_from_fork+0x514/0xb70 [ 625.887521][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.916041][ T31] ? __switch_to+0xc89/0x1420 [ 625.932088][ T31] ? __pfx_kthread+0x10/0x10 [ 625.953256][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.967582][ T31] [ 625.968734][T10516] vhci_hcd: connection reset by peer [ 625.997642][ T31] INFO: lockdep is turned off. [ 626.007994][T10933] vhci_hcd vhci_hcd.1: stop threads [ 626.035982][T10933] vhci_hcd vhci_hcd.1: release socket [ 626.041851][ T31] NMI backtrace for cpu 1 [ 626.041871][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 626.041895][ T31] Tainted: [L]=SOFTLOCKUP [ 626.041902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.041913][ T31] Call Trace: [ 626.041920][ T31] [ 626.041927][ T31] dump_stack_lvl+0xe8/0x150 [ 626.041951][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 626.041973][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 626.041993][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 626.042014][ T31] sys_info+0x135/0x170 [ 626.042031][ T31] watchdog+0xfd7/0x1030 [ 626.042059][ T31] ? watchdog+0x1c7/0x1030 [ 626.042086][ T31] kthread+0x388/0x470 [ 626.042103][ T31] ? __pfx_watchdog+0x10/0x10 [ 626.042126][ T31] ? __pfx_kthread+0x10/0x10 [ 626.042143][ T31] ret_from_fork+0x514/0xb70 [ 626.042163][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 626.042180][ T31] ? __switch_to+0xc89/0x1420 [ 626.042206][ T31] ? __pfx_kthread+0x10/0x10 [ 626.042223][ T31] ret_from_fork_asm+0x1a/0x30 [ 626.042250][ T31] [ 626.042257][ T31] Sending NMI from CPU 1 to CPUs 0: [ 626.162240][ C0] NMI backtrace for cpu 0 [ 626.162262][ C0] CPU: 0 UID: 0 PID: 10934 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.162291][ C0] Tainted: [L]=SOFTLOCKUP [ 626.162299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.162313][ C0] Workqueue: events_unbound toggle_allocation_gate [ 626.162343][ C0] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 626.162369][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 626.162387][ C0] RSP: 0018:ffffc90004b776a8 EFLAGS: 00000046 [ 626.162405][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff817896bd [ 626.162420][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9031b3f0 [ 626.162433][ C0] RBP: dffffc0000000000 R08: ffffffff9031b3f7 R09: 1ffffffff206367e [ 626.162449][ C0] R10: dffffc0000000000 R11: fffffbfff206367e R12: 0000000000000001 [ 626.162464][ C0] R13: ffffffff8ea87640 R14: fffffbfff206367f R15: 1ffffffff206367e [ 626.162480][ C0] FS: 0000000000000000(0000) GS:ffff888125251000(0000) knlGS:0000000000000000 [ 626.162497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.162512][ C0] CR2: 0000200000401030 CR3: 000000013fe6a000 CR4: 00000000003526f0 [ 626.162530][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000003ff [ 626.162543][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 626.162556][ C0] Call Trace: [ 626.162565][ C0] [ 626.162576][ C0] trace_tlb_flush+0x2d/0x160 [ 626.162609][ C0] switch_mm_irqs_off+0x458/0x680 [ 626.162642][ C0] use_temporary_mm+0x98/0x140 [ 626.162671][ C0] __text_poke+0x646/0x9b0 [ 626.162702][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 626.162731][ C0] ? __kmalloc_noprof+0xfc/0x750 [ 626.162761][ C0] ? __pfx___text_poke+0x10/0x10 [ 626.162789][ C0] ? on_each_cpu_cond_mask+0x75/0x80 [ 626.162858][ C0] smp_text_poke_batch_finish+0xd0e/0x1110 [ 626.162888][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 626.162923][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 626.162955][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 626.162988][ C0] ? __jump_label_update+0x347/0x370 [ 626.163014][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 626.163046][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 626.163067][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 626.163094][ C0] static_key_enable+0x1a/0x20 [ 626.163113][ C0] toggle_allocation_gate+0xab/0x290 [ 626.163133][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 626.163152][ C0] ? rcu_is_watching+0x15/0xb0 [ 626.163175][ C0] ? lock_acquire+0x5f/0x350 [ 626.163197][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 626.163225][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 626.163251][ C0] process_scheduled_works+0xa8e/0x14e0 [ 626.163291][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.163337][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.163367][ C0] ? assign_work+0x3cf/0x5d0 [ 626.163395][ C0] worker_thread+0xa47/0xfb0 [ 626.163430][ C0] ? __kthread_parkme+0x71/0x1f0 [ 626.163465][ C0] kthread+0x388/0x470 [ 626.163485][ C0] ? __pfx_worker_thread+0x10/0x10 [ 626.163512][ C0] ? __pfx_kthread+0x10/0x10 [ 626.163532][ C0] ret_from_fork+0x514/0xb70 [ 626.163554][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.163575][ C0] ? __switch_to+0xc89/0x1420 [ 626.163605][ C0] ? __pfx_kthread+0x10/0x10 [ 626.163625][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.163656][ C0] [ 626.169359][T10933] vhci_hcd vhci_hcd.1: disconnect device [ 626.660284][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 626.667820][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 626.678868][ T31] Tainted: [L]=SOFTLOCKUP [ 626.683512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.693781][ T31] Call Trace: [ 626.697211][ T31] [ 626.700177][ T31] vpanic+0x56c/0xa60 [ 626.704247][ T31] ? __pfx___schedule+0x10/0x10 [ 626.709135][ T31] ? __pfx_vpanic+0x10/0x10 [ 626.713852][ T31] panic+0xc5/0xd0 [ 626.717824][ T31] ? __pfx_panic+0x10/0x10 [ 626.722377][ T31] ? preempt_schedule_common+0x82/0xd0 [ 626.727975][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 626.733485][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 626.739765][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 626.746221][ T31] watchdog+0x1030/0x1030 [ 626.750855][ T31] ? watchdog+0x1c7/0x1030 [ 626.755650][ T31] kthread+0x388/0x470 [ 626.759949][ T31] ? __pfx_watchdog+0x10/0x10 [ 626.765093][ T31] ? __pfx_kthread+0x10/0x10 [ 626.769788][ T31] ret_from_fork+0x514/0xb70 [ 626.774651][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 626.779868][ T31] ? __switch_to+0xc89/0x1420 [ 626.784586][ T31] ? __pfx_kthread+0x10/0x10 [ 626.789197][ T31] ret_from_fork_asm+0x1a/0x30 [ 626.794009][ T31] [ 626.797995][ T31] Kernel Offset: disabled [ 626.802486][ T31] Rebooting in 86400 seconds..