last executing test programs: 10.985962727s ago: executing program 1 (id=6292): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 17) 10.179661133s ago: executing program 0 (id=6297): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) (fail_nth: 3) r4 = memfd_create(&(0x7f00000008c0)='[\v\xdbA\xae[5\xa9\x90\xffc\x1f\x1a\xa9\x16\xfa\xadR\x10\xf3\xb6\xffT\x02\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9e,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xef\xa2\x82\x1e\x03\x00(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89c\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9dM\xe2[\xd0YF\xf8\xb2\xa5\x1c\x00\x89\xeb]\xa3\xfd\xd8\xec\xbd\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xe3\x00\x00\x80\xb5\xa8{K\xfd\xeb\x16:\xfe\xafk\xb4\xd04(\xae\x0e\xd1a\xacV\xdd\xd5\x86\x82\xb0X2\x85j4g\xa5~\xe9\xdd=\\w\x91b\x87#\xdesgF\x86\xa8d\xec\xa1\xe8\x1cL\x8a\x03\x84+\x92\x88]s\b1\xa7( )?2\x11|\xce\x06c\xeb`\x8b\xdb\xa1<\x11\xbdq\b1\f\xbcd\xf3E\xd0\xc1g\x96\x16\xd2t\xce\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{0x20, '0|\xee\xdcCh\x1e\x88\nk\xa8\xdf\x89{\xaf\x12B\xfa\x1a:/Fi\x83\xb2\x95\xbb\x02&x!\xf0q\xaa\x02\xaf\x8c\xb4\x90\xf5\xd4\x9b\xfa\x83\x9f\xd5\xe66\xdc\xbb\n'}, {0x20, 'x#L;\xf6\xbf\xba'}, {0x20, ':,'}, {0x20, '\x00'}]}, 0x4c) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file7\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000id=\x00'/41, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fcc6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2816a172511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34f57bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000000d117affb"], 0x18}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x2}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x0, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x6, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000019380)="43290db1beb16d21792cbdc24d071e8f277ecf0a24c365addc891408860afde84523156db6506557cc24a9c18f4fda9cf6d0d1bdffa367ac18ed391c379e059c820defe74b58e6e3feac972b1bb0680f49973e19f63c1d5c9e82dc10d43830e86cb8e7427ac8bef084c374c15031c8de723dcfaec0553d0751c65211f847bfc67f4c0f668a951a569a327a76e124121d27d165548ff48e5a727f57c23ef8afdef4aaf7125b91eed467812c65137b64399ff54c0ca6badf884421e31bf5fc117765b424550665ec7d7c4f8ce751888b5f07447c39e3cd4cec2c94eb373ebe236be008782ded4ed3b10e0db3ae63ac8c701b641f478cc06a471fe85c6e0a69778298fccd27f8646223beef5798c4d25fa56eb063f8b3493548e0b0c88005dddc183ba871115707109cdced26b38aebdf9cd5236272d849580d27d89c0c7fdd20412df23e58c93c1213e6d42557fb92141e1f01604821305a1f38fc8de159d3b04456361f0ae8c90e169bfc7a570931eaf8e3b4381f6a422832fa027caea657b67fbe1b922e1b971a54395a54919a6bcebee8eec69b505fe02712f48c7a3890da80e69d9a3dc15236589d2fe5c7042d66f9817bb62a4b234486fa831a44ca26384d383dd970a4f44e31df91b2757db6f6ad39276e975e57a8b72dfd077a0eb7425a5f09674a52c4d7beeaa0227e672ad374477f6f1980dab51b126aad494679bd2e51afa839778684f5d3103f9034c3a84ede302958b307f2786899308f1467ce65d421f890e39a7ffd8233e56bf858d558384b4649a9460c9c3e17a0b0ad8138c420d655d49c9749dc5fddfdb8f3d665f4005b47206a849c2bd12a58472db21ffa8f52d34bf5bfdbe97862d7c2254043cd4e77eaa0af0400610719301cf821ee6fd09af556a4c40bfe80f3ad5090d892d18243334273768c2f9f0751cbd8d511f33643dfd3aa20a82ba09f231824b79079dfafd5da7a3fba003515d2b269be30f30914c84a6e456b759305aa8a07ec99c6e2fba0f832a3abbc3d7c76f9498ef92c78ad42eaa774e89f21d4692bc45df73fe01f4a3d426360771608c81f3e92cbaa6faf1d9c3fcfc0c5aab25c249dbb4ef4570ec8161b015bb7d24b75f4b58ac90d3a5bad78e49b597a04c7a1750c4d4a9cb2c14d8c7c1ad83e21ee13ede32545242ce95954fd58aab828ae3304cff50ef92e68f53e310aa2b353e275fa851acec9572319367803496f8b769908ab2665692fd832841476c5b8c6909e803337984bdeea53d8c7638fec40a4ee547e6bf937c8dec1cdf2b044e91ec1219f8fe8a2cee4962a0767ca721e43be27522c21f7414e557bdc618b797bdce4f65a372ea05a88f64bd154d149eceb2df887ea8828731c3c0ecbc61debc32c13c4c51d360831e13735fa4cc33d178bfb6564c0e4de580da0c0367622ac7979a1ba07c6011f497538bd7a2309678ede0f8a43d569ddefeef5a9a1b7839ae7fdf8ea9afd0e60434289ee59c9907f12ae80859d634ce821b6f189ab7f5fa910bd5e27aadc569f0f7470aceeaefb8102119635935cfda620da47fcc401479e24755700e2ad096d947d24a0dca4eccc76c39372aabd2e68adfa807ccd3e6a7bb109bc05ae707a8b3a8b2768151e947447ebabfb97d9098fd0962434fc1ed3ffcd04e1549cd6b7301a0d1eb25d653c8da3c61c791575f4dda22a2bb6948c04f543499c0655054c1c869321a1719b3d75f1deb4a71c9b7bfceed17297fad6553250051b49f1a8d8f8f90d1192b28fd21c6bb6d963549eaf088b741479a871d8f2dd1fdcc73e3ad1d8159bec746a571e4e4c199dbadfbf577bfff94b1337b9de099da4b0c2f401055ce703b73f18e623f92deda883f28696d5433fe28120fd754dbc8f247ace2c5c7961cef8dc301f68fecae5268aec08d396802fbeaeee510f72980bd9b5742528a715cff8e33c93c20c48d6d27b9e9efcfdc4a3463bbcddffa49fc139872835873ba309a8f9606897e58079aa3111fbbb163dfcd9b3e430f6d29536ff98dfbd1e2ebcbaf0793254c98b287c37e62491e4b05e82035ce36807efe0853c16ff2f44be34c643612e97d57380bae2a5b17b6bb64b5fc6a5b5e760f53b827c34da5334c6dad8244a5e5d654173f5f46fc85da20fc0d7cede8563d3bb3a2dd879f33d407eec219f1ce172e3f7369b472ff3603113266a16c8d5f6d0992a310ff7f10e5fb103f5441c680803cbf4ca9c37ac7c2a78792312830536d1e62640b16da0298fc7b67a74dccee33a8cd9b8f4883bb20bb487018f2f5252cbe1776ca02e50ee271d0cb8ec39d2f8b99d50a8961c8bdd0218960a79999bbf2eaa0a41c16d78adff3f3f4d91a0044c5c11521f46d7ea751ea8f195925379bf12a8a2dea0550d689bca8baea8c862dfb2f9e32b6b92f5dc633e0803b7b47b79f2ed01807c1a932dff792e8323e001d0357db374f8e7d32d98f1b8b542119f9913877d3cc091152c06a54273c7dcc44a5ca8e1e77d130de4e3055dff0d2169315d3345544991467f8dbc1dde8a2c43c1f0778257a6edefe71ae2a817d733a8e5682740d2a19c34407cb8a6480b8864136cc278ded82b936d0a4e82768d3ff3bd3b54d010148ee0847423858ab6c413d7523d9dffa4060c50311a3ccaf31c4da7d518acb57f33c20c8b20507475f98670a117fa142680eda769261757cc23f2b1025642016a8a1e913aea1b4d4a9180beb95b97b2c4b4f40f82427e21cfb19d7a9a19a0769a150347ef8077ea71c272e2bddc8ec8698d5de1ff1bf94a5d971971524a04bde1dfb71d83790e01e7f3483e863bc4d3fb1bb88f2ac31c74bedfbd0074d43eedfc211c5b683cfa60afa27a377e9300276ed18cd04343a21c26ac0cba1cf1dee07f5cd12c129fbf4d783f7532bd86af7c3a6d232a30ec3f213b6e954ab1d1fcbe6da51d33a54ea9ec7906cb7e59e8e1237753179ff7c7176deec170c508a744f413b37fc734e427a6c1eb9d58feaf49c580ddeb829435fb54683b27e7938d6a757897434ccf1e3bdbe7d48e319e0bb3f3e47393f41fb18b673d4bf0570acb490a0c188e4d586d1c5c74342cf67cf721de3916074809b30d2ed150c752a5df9c492065de83d639bcf2fe9d95d80673d195ffd5c70efb76820619c3153dc335492ef7b97b85ff0bd4e6832f8fd30fa3f39bda6cbdba361a83879b82b376e8907d864074c8b7cf6a11ad14c22c1a12c7f485c4e7963b045ad18db328628cdf2072a17c7c3a289bcef24ae4898cbfb3001d4a727538346b1ba27702f4b86820be062c97ce9b22a35f6f62013d3ecac76545f5a541d3b6255e03ecfe199fdf05d625a1b48c7f1d45393bde49b20bcc6de98fc208219762cc91e334c72a1dfb8b44039257c65d793fb2148581acfd185e15e41162677f5d2f7736130f90baf758dede558f19b410acc6f997efa15e5c1982aa21359f85989bdbe4a99b67f1674a4d07366d199b7b6b8f3dc3f3e4281a9042de414f2cb60f9d1304af0f4c446af0b22951c9c2e2532f4ceaf800a034b755be4a6faee461e4ac1663a10976e0912951a45d25f8fdf7a45168cd191b406cd28042413a35834bfa4d8ce15fb13cc633b33d8e9ac82e85bb7b444250260b1f696de9db2eda5d394495184fe1fdfbdf0ab8bdff2a2a93bcad791c896b4a323ea4e4920247505ec6e5c0d32d41bf3eb39f06524116c29d3bf220bfb28e78501e7306fe9473415cc261e755618b566c28bd4cca0e1fd94daa018cdf5c733d5dda813bc13e007af18d657ed450f317f7afe95bd352b77f9b25acd864af1adb0e13e0390255a8a6b8abd8c333e7585f6667045e77bdd4b566ba7dc281a59539c0f01693128813599c30b166e4a6ff1bccbba7fab857d99378852ed9efeb839e7de376a3a50ec55db60204bab32744f0f73f829ec856883d31ba52c872d7d5356c5d884b30dd742c4007abb27f391ee16ee64b6fc962a718b85a84b6408a7ef48a433a05493d6462d72afc3d825e066563cf54b29ce095a95f5c45187b9c7f71d10b82fd53986be7e4c9d63100b80c1ec01bcf216ad37610082d30f76de8f06dd9507a938c1629adfea196c3ad72dbf104303ee5a77a10ad69f790533139eb18152028db963d84570eb8c6a403e1502ba67d988867580d9b9c95edd4e0d68d31e1bf142e5179948a35c183afc562c9baba14ea05dab7e127c4fde413a27d99642bd35193207fde6c17324b61f649cfb2344b351a266a4f70d2dbe2c5ec6553fc332ad08c0c1abf58f0a8fd64edfe7b3e95d5c254f83527796d62c8fd51a2c8a24c10c12cbffef60ed6cd9536720e3fc79db7aa90819ef70fa8ac97e876721e46fbfe282ab0198f5d28566d88654fd6c35f7af6645712ff46b50676e63582fe3b1cb98d9f224bc5f68e0b73a9b984125f02fa5c265a799069df881a3eff1ad34d8a929b1263a508fa5c027bbcd8cd992d340d04b72226df5733b91cda06fd99e6106e9e28c1d6546ee7ae8da9a31337e6f71fd8e6dac0671714bc32e32e6e2b836a4a622b8bafa86b618255c0022295cbe480c56670673c31c628e1426253db1ad82d1be89a4ef83ee925e439752dd4068de9201ca23f592c1719bf2bbd6a862d8cb687f75926e440fe375ab715df7c4aab1c86a4dec49a5a7d9d81611407d98a52750ec4aaa0dbe0244526fce5aa022f0a506e39ea94b35dc8548f17db0747ffb7b44abd1994f7943f59127c8f758dea01a2f9e0818aac07e2562f5d74e9ed53a7d61d9c731c6fb648bac0290e7972f57a9f5856f5ab89f6b1e1d4e6818fba7fbc8b468d04cea6d0718a3a9a781dfb4233d60165740bbec054e0b8bc4757c124706f134df58689b6812ff79f390d63fdb665213b085780b4cb2dc70845228408f1791d2c7e46a84be0ebed339b3a8cec9e3a6ccdfe02c0b0999179c3a8f2906f1c5e14527d99153ad25ceb8eb53e45e04a1613c363aafb62367a7916736045e926b6c5b659269768e5ddbdc20c0e962dab253eef4f66c280d5eb0c3a8da2115e09bf4bd71e724ed01c014d46c4ddc1949e3c7be97b8cc8a0dd0859c8797e0f2e035ce38fb9c800cb9014b58660abb97b4bedce71276804c96f221ffee2e372c115d22f05fb41e29db0dfbb1c5cef288329692b16d19b96dc1811b712ccd71cbe053bcc1755ecb95fc3471746f4c0565736671cc72bfcde4f7c0973b00d9663f6405b00b27e0368e717c2691e0b1e1b219e67d46b5ff4cd3fbcf8162d21374880b643044486cd4d0ebf3ed6808d588287034ea078a50fb087d4fa2aec4d6f88177f394cd07306fc1db2144e5290421fc57d201636785cf148f4ef37f28c4e24554ee93ed499b819e310c3241c2aab473c09ff9c9f77c03dab2417c0eb31389200780d50ca9ff8d123032aab0e5d236ef5dfcf26bb3f5ba415f8fd43af9a9ff799c1ba25153874cab2c6c242cef54d859c18237885ce12f517e44f3f73f0e7d84632d2e427970ba80301c9d934de5f2d1ddd9c770dc9959c603a3141cf2435797af8372ed5b7ad7bba223e0d9cbdcf06270e7475b6ac094982b3535ef34e3cc00e0c8124355c22901ea88f8603269b816599393c823c2b0b4b3e461fdd08f972c2f7bc034887cfaa16f97d2124a7932cc2200e9afaef0fc4fff09324581047d73e134adca4474ce022120f95a20a48b1bbed809ec0db32c751fd6bd096a952669035916e0cbd02137278ec8e70ffef4bdbbb6f24472b196ce410d7cc6a3faeb438b6272c1be61f0c1d97114a5c26be25303ae4da4fcc5fa96ab57ced5401ed938a54f421a45555967772e48cf9eddf7f42b0d57d89c033d7012d3fd9b62e3b37ab52dddad1ac657adaf5a2114c828615836c70c1348d598c7dee0e0467d6efbe37dd287496801865b862887706ace5ca18b77321aa61804d59c37b07871bccfd0983f2032e7facd4d99668d9bf9f08b80bfbdaf24b9d61ecff40c88e68e6985c9637c83e37c31fc9bb2bf9637bcd307c9b2b23d2d5e31dacc327b08feefcc35232feec26efe6a86f884607da1919669f0ea62f1107a0259b5c2c85c0a3396d3ff117ed331dc44319de136789dcb4c57304f709fcce018a41cf6b8f19b0a84870021ec0b3ab1579282c22e75859c3c136b887569fd12b97a7e118c1fe98cbaed5a46a86b54e55c97d5c7f04cf7d9721b310ab6b2a9a01479d8a67aad618471234ce2cefa91642d917e7c5525c0361767841abef7d5192e9119ef1b68e438514878d91bd3b612c5f7d8fa89a1d618a45e59e0704e4b3f1252d5eb5a63711a5a47f8cd2dd89591e2c32131c064afcd5a068152dfb78d24174c4b928d5dccaa7774eeadee0028a574664eec91afc6cc714b63a32afd608cd5f8004ed6dc988b147aa75d359f88a825ed8ce02354d4cbe02eb61a773a3d2f82f2b23dba4fb2855d975ab8fca646e2a314344ecb289e63fbbd3d82b54706f49d08f5825334591d627876bc0fa51839daba03a4d8db4c043d50a9010b9bba3bbd97918c0474068a09a00490263fbe61d0bb9b9f0ae6408e07d6ac325094790801d1a7ac7509a79d0fdb1e8a11a77e79d14ba1676f61bd60893edf03e5036d530aebd28bf91bc9bb216ae2e68d70b63719f07a9b03c12b401aa45c2726c0c07c0d6ca320c95ee1e4f1dcf3a9229a93a08879ca042429f25f025e72f615066498df52e6053f5bc79380d4cbbf307cd2437bc4fba5b3a225e51bcfbbb5ba01490e4e3c353fccd81d35c854b9363a74557213318e28c6473756d7b6061e9f4035a0ad0b89b4a09bd6919bb0c6e53aaa1237fcd09c18cb5649a310de47186811602cf1731840c7b1a6f7e9c520ba16a8b338f128cba5288ae12c153c2b38e93cf35a1496fc8ebdd7bb0849607097c37a8a14c2a61bf209a6059cf40a8a678136a9b0bb968e53fb0529e761f6f81b058270cd499fb2de2512c4f3e4302a8f19de87972dfe425a590a6c31e79950cb1f2fc4c4f59dbe01017ea7f5ce8ce358508a936fa1880206aaed4de63d64eaf4927ba62d13d334936db13853f032e7ba5bcc4aa81a612044a185be63725f4131f0b67a923a5ddf3b2aff81eefb04ff7aa70585f0e495a4170e97da772d8498d78960141ef61736bed192f0b1841245398485a367c4e91cd88c376191aed07333f724e22873de4d4a19406920a82d13969cc7ce39844863197687f0b127ff8c351880b6e483305fa9f08e7e28334d685ba777259930f1679271b11605a6cc8950c871d52947a1872fe392a39b26ff7af7c200aa1d1774d3d641bc3b63244eb3871dd8195cc4ffd5497c897915949f89ad520c870dd63f2206027e30276c5afc3a343218525131a31b25a50ea982809a6c56c95b726c8729b2750808b1a5c31d09880eec741b4d171cecfb6b55ccd9973b991b73a7febb8fa99d154e383f1ebcf951da461bf3bbd89fa65ee647a2516326356e09757e0cd9c856e4baa349ddfb7cfb6d4c9fe16f20b7d839e7e51b89bbbf9849ec218b9947f01dc377f29e77bb67c418263be18efd31027e9663f011d6883a6bcdc18b59d37c95e0d3ea0563dc44037f1b49fe7fee26cb9c6d0c70d3a53636618f0520c8601c820db4368cfc83a2cffce938dabf1a3dd9b917fdbbaceb18a10e228224c15627bbba343f5bedd4b5a1e43896eda38d9f2c8b6f4c317b571b987df51acfed409cfb238152dac54990561545783691e44a90f3aa55539783d577378c3cf94db060e2d0ad480a03286dd6e0ee1e28888923688a950cbc303a9e4031cfa80a9991121206e2dd5cc4f4acce09d8bd47a199b4cc52092278699dd6d7d961740a3606319a1290ddd1031c72460a230f132c1ddb46feea89202d365bf78eccfe27f365db9526202559f67e4e3b3e76f004b02ca5a156277825763217341ec040ad01c39ec6b0e218c33143c74ea4fdf81f5a94fe7c27dfdefef4ee8359996fffef9286fcbe96139a9109bb3e964a70851c578741af82cf3858c22618286364ae21e79796753b4ab6ce3ed0d24d93369650721b7f7814eadc5c7f84717d701dbcef40cd04172d3c874bbda07fac5f62785b1f87312b794bc4a04310f1078bbe8669ae24660ba6f94111ecf85c575c50c3de706d93f3867bd43784fafa6e70fdf592fc5ecaefa3edb95b6fb74866699e9497dfe31dab8b2c876cd66256b94517aefc69b79c32fc89757d6493d218e03bc2a5bd412bd698bc136e6b6f733ba17c8f963cee92d35fb0805c4d26ce5ae3f2e83b3f0052d7008bed0ef1321759aed665ab9469c9baef8e5686e26f83f17a3ab3fc85a179fdbcf8846a36578935482a7c04e912fbd336db19acfa71d9e09639516f105a6f26a67b2f144cc94388726bfc1e5447950527855db00429fa304eaf463d2f289a150baf3ad894c70b3e0b54b1f023feb1605c0ee03038b387e088ba0c3ccd6788908439ad6af0f3d6d12b548340cb3c193edfbfc8b133f5d0edf0b4893583dc0e1f1394b4fdfd05996a79de85952498295e37c5d7c20c3a9cdea717dba9109b8b564ef02f34b28b5fc66b746e71e87cde312cee074cb676c87c0ebd4e30d0b4489fed41ed0d014a1b19952d2500661e340c73e0c62686d9465419cf95081f60472d785c6cc086db76f01a8bfd71dc512259b9ddd8a1f39df021226c2e173549262bc41206c024b9476d62ee44ea02b73b8c8e8ac99786a8ad8358573da822c469facdb00b46e3467958bd845154c4ebef8546cbd525929af471ff6260ac4b09e8eb2cafbac3f22b5e18f09f5c5800cdff4b0714727c1c6c05b02c03740c95126ad9302b0de51ebc0d115088a9aeb3ba262eb41ecab7162f8a2151b070dac80ceb9c0e18089ae75c1e4442aee670dd2a414969da62e3cedf433c91002f07a0a4004e39042247468da81cfc63f71c7614b2a882d63becd52227af28e3cf7df91998577ce19e5a5da78e442a8526ec6536bfff893e63c9f55d91676a68fb957e0a01ca8858184b217147b7521f529166ea4feb0b21a7dc77df41d09ebf23dd54e9fcbd86414abf145a573538d15887ced18c22a5399f7b6406c227a92593f23b3e8dd448a1e934f709d44f0fe7ed6a86b5a7b9ab5e0c487da1a15d5b95bf905517c2f01133dac657a9e4a358651df51614c4d87983369d33861cd843a48bd1f98abbac439b7ea8c3a5915ddaa8185d2f80f5a1b449d7f856f8aca34aa1e7ba0922e0dca9d333178059b80c8d4ddec5125d0213115bd81cb4e18c6cf398ec1599673f4ce894b307bada1d5e91530052f652046c4d19445b0ace6e30c70890c4840eb546d230313cd0bc0352f3bc248aba0258780745a2d2403e957f08a3caaac86355d3843e2c60cf9ec81b35f00e203da7583980501a2485ce5feedf2dc8633ce2309edb3a566a57c795bd44fd210c5a331b19ab8d8e0125ecc655f28712293c07616974823690b57f106754ce35fa006f4b01c50ed8700e3d5dfe0e94fffcdacdd31016081e9323e4a1bbd959178be187718cdde9e5ce6457db171f767c534e3c3098fa80435b467ae37fc6888e9e9935074a370d2305417128f9a508403b21997bc351bf90bb4ec0515a279bf6ac95f8a837987f08c5a284dba77efdfa29df0b483eb2dc2fda3812fa7cfc4fe0fcd388b246616b10df63c08a4962056f9575613b34875afe630717efbeb970b7548eaa2d7955ace7576c6add55036486ec9795ae56901fd09a3e5e72e82dff1497d509acbfbde721eb3012cb692b64f7aec44de5814da2a750b23ddb4c52d64a3e87ef9ab37517173b8c8f76ce91147b2a25e29a880b49d7ebb8b420e0eb2973776ffc06fa97d85c3bfe56d68ad04053a3f41239c359ed59f9e145f4a00d513656d71ab8ee41cdd4966275b5306b0d266c75de34f7ce28a90a28cb9d13e8680e3b24ca5ee5c289fba76218a28c956a7ab9cd17195ffc10421a0f25c028d19272c6e0c94327116e080e6ce02dacefe72c5bc468e8c97b7335607f8728340c8ce3103ea3e3c1b1f969535044fb3e118821ea778f3505d1e003e475052e54e17a528f267b02ef8e6f43555bb3bb3a60912ab0876f86c74c88b467a114676aa2d239a949a9b8cfb2682c857bbacb66710a04bdff1456955460eeecb55d715cbc2bb7fe00d8aa329a81fda22f106ea254f39ace3d4d366cf3a643f7e78fd26a7ac5af253c8e5a91ddae1c181a4e232994a5d43beab5df8b38b4392bcab6621c7ade60914b4c5bba236411efc83114c3ddc5c4634917b98418a8283c5e08230a2d9c1970af80f7d0755c29dee6ef218f9b0a914a429623d368091ab116727ff75acb547b291828ee6ec48040576d23decdd19f4d94c3e9692f2ff12be30eac06f5f7731dd335e5b6b36131a9b84aae37ba78d0214c6f3cde51f554bfce33b4c1c69016bb2f8ed96c12f4e55555ae0ec36d21a58428923e54af1f1a8215ad0de2d6674dc0a93fa72f46555e66ec8ccbe658ad0c18a491d86b9bd23254a87637b7b661f6d846b15ac7f0653052ad3f96d3521bc13d5f3c1d318d98e504ba0edf28131c4829786ab68c19db0db052c4e4e5def1b236cadae4faa1ae385a769d265118b93da94587658d726aaf794e961f9d71728d34df30cd996ccac4c41d938d87aa18045c52d3db2eab3fd3a4bbd4c6c41e98b63f633a18f31a5d37d28317d00cb91e81f1364980bbabc4351917fcfd5037be7f589d52db82cbc8ce71964c1d313ff43876684db22b2703b663a1a84f17042c63e8ec083da3df5c7b6a65455e96afb8b404ebab450f684dacb6c870c05a2c3159e3d248ded58c551ef48b15c6e065efe8965d7bb94fc2a72d87624359fddb22b3122991f912928bb5cdfe14c0c8634bbd3abc98538a650535929993b4494fd85c7e677bb72ca80449b567cb94785db4aae7a8521b9b90c0ee30b875393fc93dcccf98ff220314de42aec4ca2f87c8189afbd073aa9762de33b40541f3a75b1d673cbd9c2cc9fe614764c6bfe2dbb939708e0d7963681b6a6ce3e48c35d27b34e641a98940ced4ff27cb349e4f4199bdcde2cdcddbe6a136755210b63174a28d4a6cb705c4b97fe4e00fdf8a09782ea84fca94e91cfef6dda886a2db1feaf6f467818e21d1cad34f40146bd4a26ca31dad1379d3e8b2f0093b524986d4f9913102f69b1f7ebd08830ec32948682b2570bc730bfb373daa1ca56651aef494b1f53d7d6a36d4e86fb3d300860e4a4ff54d1096580f58ac83d4257e089c5c7b41436cf9a9f966a58fb9b4f3d65e657ae966838bfd40e7da219d699f53669f0199f348c389d6b6bababb5303edc6680f97070e75ff301e686873353f3b80a08824c4214f8db8ef3679a522ec3a3cf9ba1951f5bdfe18541d2f3eb3f4a46d9344e77a66cfba1aaae101007f26e2b3a458eec35e6eac60155aa9d2af7a9019841e434bf488cda2b88d94e980fbef47075a2de0269ff42c9347142f6e2e95ff177afaabdd1efb628279c9bba1b62a3052ba030b50ba6559507d0ab6f40be93298b105595d005d82d6f30037dbbe6a29938e08133249301bdb2a814d9c16b02698afd9a4d949c5d78df2f6688e4ba27ed02498fa6ba5cb1c600", 0x2000, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0x5, {0x4, 0x3, 0x7ff, 0x6, 0x96, 0x2, {0x6, 0x800, 0x8, 0x4, 0x5, 0x1, 0xfd, 0x4, 0x3, 0x6000, 0x8, 0x0, 0xee00, 0x3119, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.504341079s ago: executing program 1 (id=6298): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r2 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0xff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) recvmmsg$unix(r2, &(0x7f0000000a40)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f00000004c0)=""/41, 0x29}], 0x5, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x1, 0x40002042, &(0x7f0000000ac0)={0x0, 0x989680}) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) cachestat(r7, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x74, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6erspan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) 6.620229404s ago: executing program 0 (id=6302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x300, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 6.209790012s ago: executing program 4 (id=6305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x82004) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 5.019550666s ago: executing program 2 (id=6309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.836185387s ago: executing program 1 (id=6310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1468, 0x3}) syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x4c0942) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000014c0)="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", 0x689}, {&(0x7f0000000940)}, {0x0}, {0x0}, {&(0x7f0000000c00)}], 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/43, 0x2b) getdents64(r4, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xe000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.655144977s ago: executing program 2 (id=6311): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffe, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, @in={0x2, 0x4e21, @loopback}}}, 0x118) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x28842842, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f00000004c0)) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x54, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r8 = socket(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @noop, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x57f00, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x6, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.177345022s ago: executing program 4 (id=6312): r0 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x81800) mmap(&(0x7f000047f000/0x3000)=nil, 0x3000, 0xb635773f05ebbeef, 0x30, 0xffffffffffffffff, 0x1000) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = dup(0xffffffffffffffff) bind$inet(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r6}}, 0x48) setpriority(0x2, 0x0, 0x18000000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000300feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 4.124408424s ago: executing program 3 (id=6313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0) 3.807141622s ago: executing program 0 (id=6314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x100000, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) (fail_nth: 8) 3.104319658s ago: executing program 2 (id=6315): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r4, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000400), 0x0, 0x4880) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x25, 0xbc, 0x86, 0x20, 0x4e8, 0xff30, 0x34ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x14, [{{0x9, 0x4, 0xe9, 0xfa, 0x2, 0xf7, 0xef, 0xb4, 0x5, [], [{{0x9, 0x5, 0x1, 0x6e8b2aa4490576db, 0x3ff, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0xf, 0x40, 0x8}}]}}]}}]}}, 0x0) 3.042663506s ago: executing program 0 (id=6316): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r2, &(0x7f0000000000), 0x10) getsockname$packet(r2, 0x0, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006d", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000200)={0x10000, 0x102000}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x8, 0x7, 0xfffff801, 0x8}, 0x10) read$char_usb(r0, &(0x7f0000000380)=""/190, 0xbe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000300)={0x1d, r8, 0x0, {0x2, 0xff, 0x2}, 0x1fc}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) listen(0xffffffffffffffff, 0x2) 2.832386877s ago: executing program 0 (id=6317): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r4, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x5, 0x40}, {0x0, 0x1}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x8, 0x15}, @val={0x7, 0x3, 0x3, 0x2, 0x15}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 2.648618416s ago: executing program 1 (id=6318): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="93d4e8a5b6bf00000000000086dd61f2774b00080001fe8000000000ee0000000000000000aa200100000000000000000000000000023a000104"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="00080fae9d69cd2392ea54c7beef915d564c90c2006930f1bfd33a28d7584e55d751d6274e4fc6448493d6da3816db5392e8721bb5bfb973623d0045683b8ec7d53b5c1ec34e375c526e1e9c1290977ab70014c2636a46afa05a8ab4a7805da8578581d1333e16779057510129807b2dac3b7487e093b879897b", 0x7a) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f0000001f00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000880)=""/150, 0x96}], 0x6}, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\v', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="180000000201050062000000eaffffff0900000a04007680"], 0x18}, 0x1, 0x0, 0x0, 0x200400c4}, 0x24004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000083a097c50400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="9442000018100200280012800b00010067656e65766500001800028014000700fc0000000000000000000000000000011400030067656e65766530000000000000000000"], 0x5c}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE(r5, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x4, 0x40e, 0x8, 0x204, 0x1}}, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000580)={0x200d}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 2.617914211s ago: executing program 3 (id=6319): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f3727bd70bf00000000103d0010"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x20000037, [0xfffffff8, 0x3c, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xfbf, 0x4a732f64, 0x1, 0x3, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x7d, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x80000002, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x200400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0xffffffff, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1d, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xa2f60b4cc662fd78, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r3, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) writev(r2, &(0x7f0000000300)=[{0x0}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0xb, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.411655032s ago: executing program 2 (id=6320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32, @ANYBLOB="1000a206080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 2.24037488s ago: executing program 3 (id=6321): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x2, 0x40, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001, {[@noop, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x1, [{@rand_addr=0x64010102, 0x9}, {@multicast1, 0x2}, {@private=0xa010100}]}]}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @void, @llc={@llc={0x0, 0xe, "8d49", "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"}}}, 0x1004) 2.144194366s ago: executing program 2 (id=6322): r0 = socket$inet6(0xa, 0x80000, 0x2245) socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = eventfd2(0xff, 0x80001) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r8, 0xc0305302, &(0x7f0000000180)={0x4, 0x7ff, 0x3, 0x0, 0x8000, 0x4}) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) close_range(r9, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f0000000100)={[0xfffffffffffffffe]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000200001030000000000000000000000001c80000014001100626f6e643000"/44], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 2.133681339s ago: executing program 4 (id=6323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000003c0)) r3 = syz_usb_connect$hid(0x0, 0x88140b0764558959, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x700a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0x10, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0x22, 0xf, {0xf, 0xe, "0884b6756e97cc84f814e2faf2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x158, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe3d}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x530}, @NL80211_ATTR_FRAME_MATCH={0x76, 0x5b, "4309e5371f5968781b02c0dd676ae37298701d4fee65bf70351090cf13ecb00ffdc4ad5e335f1142876e6712f10ca2df92e30568bd1212e797634f16616366e4242f1e6eef47413ed758492ae9bfa2dec0ac3753616b8747bfc97bfc2b9b4310eae5eecd8580bb4eac998dbbeaafbc2c14c2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "5b35bed33de909879841f78eaac8d18d36b23358c57d29017abad40567fc56d5bf74600689a7ed07252125bce70d9d78c85504f89c00636fa491b23bfcfb1e234e4da7c64a4385ef65d9ad42af95c4f745210976dedf7c13523f20074b15dc81ae733422ad0008c33aef94d4b396ec37bb5d10eb940e7db07f9b8d669a6744f7a07a198ea147d780d7bd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x802, 0x0) 2.047953174s ago: executing program 3 (id=6324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r3) r5 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_enter(r5, 0xdb4, 0xf258, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r5, 0x33, {0x5, 0x10001}, 0x6}, 0x1) io_uring_setup(0xed, &(0x7f0000000340)={0x0, 0x228c, 0x1000, 0x1, 0x4d, 0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.954994536s ago: executing program 1 (id=6325): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r4 = openat(r3, &(0x7f0000000300)='./file1\x00', 0xc100, 0x32) (async) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) (async) connect$qrtr(r5, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) (async) sendmsg$can_bcm(r5, 0x0, 0x24000010) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16=r4], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050800) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="253aa748449c7b5e0ae6a9bd4ef6cbcd01a323a6a0863133999d5918417e04e9923fdb6193fe0b9301fc2809c56a51c9ad5d8fc203fde2f22aa435ec8616a05e8da0aed782912f2d8969f1997af0ca0da7360e41731ad49a74156356f2f5e5bf92054a5c401482b5b5b8e6339670be5da3a0bb480c064385d9c83333d52898b8ab53f808837c33a1d9c93ee38f25785b8212f8ec8971513c76edb6606eba33b756598f4ccf0168ca28996692d94992d962964a48e193f2aa42859651342543e0c6328c094dfdeecaf19f4ffa177dc1a1e9608c9e64421c619179a308b8b434689d518f7138a14bfb39c1df22b22e2785bcc24a90d9a5308e", 0xf8}, {&(0x7f0000000540)="0dc33bb7813546813a1a9055ad284e810ec17a1bdb", 0x15}, {&(0x7f0000000600)="a16f1ad19b5f0a9504587efbe1b126ef1f48e3dc57747a751428da031ccf24d0ccdbb1f3874df50ea70129bf3b395109905570e9634f5b745f38a1e149921015878e72bf94c4421ac601f62ffc2a748757164e1febbb322d", 0x58}, {&(0x7f0000000680)="ab534b7ea120bb67fa59c1a4be9d6875db609619abab27326590b80825d0a9421329b4f9b5761319a7356eeeb89767b7f04154af10a54724be15739edc3530a25a8af749df9e7368c4027cf53a105256a5580cbb79d048586c7e96edab37d8a6b34cacca7154307b96aeb72e5833c2db784c7d771dcaa74821beba8b2e4382b93b6664fc49e45d3cad2d3e4e4e839969a543947eba69c120867bedc697950c5f89965e31d8bfd5bc6fb424fe", 0xfffffffffffffcfa}, {&(0x7f0000000580)="758c50220601bb18d14460f20f42773acc5b30aae929ad5efa4df6b85f8681fa526b7e6f33a38f9c9125ddfdec54", 0x2e}, {&(0x7f0000000740)="8e2558ecc1e2c7884e932f954d87c2b29a07843959592409d1c97a6d0069bdccc430a04e1a27dd4882b988154a6ec9", 0x2f}, {&(0x7f0000000780)}], 0x7}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x52, 0x1, 0x0, 0x4, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd5, 0x70, 0x4, 0x20, 0xbfd, 0x114, 0x4be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0x26, 0xa9, 0x5d, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3c, 0x8, 0xaa}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xbf, 0x3, 0x1}}]}}]}}]}}, 0x0) 1.445275457s ago: executing program 3 (id=6326): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xb}, {0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0x3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffcc9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x3000) r11 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x101}) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x20, 0x3e, 0x8, "2346852e41859a99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, 0x0) readv(r10, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4092, 0xffc}, {0x0}], 0x2) 1.220992506s ago: executing program 4 (id=6327): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r2, &(0x7f0000000000), 0x10) getsockname$packet(r2, 0x0, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006d", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000200)={0x10000, 0x102000}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x8, 0x7, 0xfffff801, 0x8}, 0x10) read$char_usb(r0, &(0x7f0000000380)=""/190, 0xbe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000300)={0x1d, r8, 0x0, {0x2, 0xff, 0x2}, 0x1fc}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) listen(0xffffffffffffffff, 0x2) 1.037694196s ago: executing program 4 (id=6328): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (fail_nth: 59) 854.574731ms ago: executing program 0 (id=6329): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x85, 0x4, 0x6, 0x4, "8842cc0f", "03000010"}}, 0x0}, &(0x7f0000000a80)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000180)={0x34, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc883, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = fsopen(&(0x7f0000000200)='securityfs\x00', 0x0) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r4, 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) write$cgroup_int(r8, &(0x7f0000000080)=0xfffffffd, 0x12) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 184.292016ms ago: executing program 4 (id=6330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4004000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') syz_open_pts(r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) 183.582891ms ago: executing program 1 (id=6331): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f3727bd70bf00000000103d0010"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x20000037, [0xfffffff8, 0x3c, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xfbf, 0x4a732f64, 0x1, 0x3, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x7d, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x80000002, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x200400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0xffffffff, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1d, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xa2f60b4cc662fd78, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r3, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) writev(r2, &(0x7f0000000300)=[{0x0}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0xb, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 176.621119ms ago: executing program 2 (id=6332): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_ext={0x1c, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0xd, 0x9, 0x2}, 0x10, 0x2b791, 0xffffffffffffffff, 0x0, &(0x7f0000001580)=[0x1, 0x1], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x6, 0x16, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x10, 0x4, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf404, 0xfffffffd, 0x0, 0x0, 0xd, 0x8, "ca968d0d0d1218c9df25ca2dc71f6047957a0575c1e8de7873b8e69ed934f73e886543738d770e9fac1dedc88873577890da5cc3fc01a707a5e24415a04d00", "983fd5afcebf2d211f73b5c9b24547efd317ad10d52bdf5a7c76916c3ad48bfb9a00d52b458157d5a62489470311a3a924fe42ed6b245b444f3f745b90b3f6f1", "22aebd0ce460ad9c99a4bcaf1c0e33b22e84a0535400", [0x4, 0x718a183c]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) sync_file_range(r0, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, 0x0) 0s ago: executing program 3 (id=6333): syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): 509993.555:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.4.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1756.362683][ T30] audit: type=1326 audit(1770509993.555:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.4.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1756.590773][ T30] audit: type=1326 audit(1770509993.555:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.4.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1756.654447][ T30] audit: type=1326 audit(1770509993.555:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.4.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1756.851108][ T30] audit: type=1326 audit(1770509993.555:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.4.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1756.917234][ T30] audit: type=1326 audit(1770509993.555:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.4.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1757.013156][T26613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5530'. [ 1757.239726][T26619] random: crng reseeded on system resumption [ 1757.553407][T26626] netlink: 'syz.3.5533': attribute type 3 has an invalid length. [ 1759.161108][T26640] usb 1-1: USB disconnect, device number 73 [ 1759.799046][T26652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.818272][T26652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.871694][T26652] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1759.897947][T26655] No such timeout policy "syz0" [ 1760.550824][T26663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.585099][T26663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.765431][T26667] FAULT_INJECTION: forcing a failure. [ 1760.765431][T26667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1760.784801][T26667] CPU: 1 UID: 0 PID: 26667 Comm: syz.1.5545 Tainted: G L syzkaller #0 PREEMPT(full) [ 1760.784835][T26667] Tainted: [L]=SOFTLOCKUP [ 1760.784843][T26667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1760.784856][T26667] Call Trace: [ 1760.784872][T26667] [ 1760.784880][T26667] dump_stack_lvl+0xe8/0x150 [ 1760.784905][T26667] should_fail_ex+0x412/0x560 [ 1760.784928][T26667] _copy_from_user+0x2d/0xb0 [ 1760.784943][T26667] ___sys_recvmsg+0x175/0x590 [ 1760.784970][T26667] ? __pfx____sys_recvmsg+0x10/0x10 [ 1760.784995][T26667] ? __fget_files+0x2a/0x420 [ 1760.785035][T26667] do_recvmmsg+0x334/0x800 [ 1760.785062][T26667] ? __pfx_do_recvmmsg+0x10/0x10 [ 1760.785092][T26667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1760.785122][T26667] __x64_sys_recvmmsg+0x198/0x250 [ 1760.785146][T26667] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1760.785176][T26667] do_syscall_64+0xe2/0xf80 [ 1760.785193][T26667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.785207][T26667] ? trace_irq_disable+0x37/0x100 [ 1760.785222][T26667] ? clear_bhb_loop+0x60/0xb0 [ 1760.785240][T26667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.785255][T26667] RIP: 0033:0x7f6ee199aeb9 [ 1760.785275][T26667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.785288][T26667] RSP: 002b:00007f6ee2841028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1760.785305][T26667] RAX: ffffffffffffffda RBX: 00007f6ee1c16090 RCX: 00007f6ee199aeb9 [ 1760.785316][T26667] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1760.785327][T26667] RBP: 00007f6ee2841090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.785336][T26667] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1760.785345][T26667] R13: 00007f6ee1c16128 R14: 00007f6ee1c16090 R15: 00007f6ee1d3fa48 [ 1760.785396][T26667] [ 1761.720150][T26677] FAULT_INJECTION: forcing a failure. [ 1761.720150][T26677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.745253][T26677] CPU: 0 UID: 0 PID: 26677 Comm: syz.1.5550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1761.745290][T26677] Tainted: [L]=SOFTLOCKUP [ 1761.745299][T26677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1761.745312][T26677] Call Trace: [ 1761.745320][T26677] [ 1761.745330][T26677] dump_stack_lvl+0xe8/0x150 [ 1761.745364][T26677] should_fail_ex+0x412/0x560 [ 1761.745396][T26677] _copy_from_user+0x2d/0xb0 [ 1761.745417][T26677] generic_map_update_batch+0x51b/0x810 [ 1761.745459][T26677] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1761.745488][T26677] ? __fget_files+0x2a/0x420 [ 1761.745520][T26677] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1761.745547][T26677] bpf_map_do_batch+0x39b/0x630 [ 1761.745577][T26677] __sys_bpf+0x709/0x920 [ 1761.745600][T26677] ? __pfx___sys_bpf+0x10/0x10 [ 1761.745638][T26677] ? ksys_write+0x242/0x270 [ 1761.745671][T26677] ? __pfx_ksys_write+0x10/0x10 [ 1761.745710][T26677] __x64_sys_bpf+0x7c/0x90 [ 1761.745742][T26677] do_syscall_64+0xe2/0xf80 [ 1761.745765][T26677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.745785][T26677] ? trace_irq_disable+0x37/0x100 [ 1761.745805][T26677] ? clear_bhb_loop+0x60/0xb0 [ 1761.745831][T26677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.745852][T26677] RIP: 0033:0x7f6ee199aeb9 [ 1761.745870][T26677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.745888][T26677] RSP: 002b:00007f6ee2862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1761.745919][T26677] RAX: ffffffffffffffda RBX: 00007f6ee1c15fa0 RCX: 00007f6ee199aeb9 [ 1761.745934][T26677] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1761.745947][T26677] RBP: 00007f6ee2862090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.745959][T26677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.745971][T26677] R13: 00007f6ee1c16038 R14: 00007f6ee1c15fa0 R15: 00007f6ee1d3fa48 [ 1761.746011][T26677] [ 1762.251513][T26685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.271411][T26685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.283120][T23011] Bluetooth: hci4: unknown advertising packet type: 0xe1 [ 1762.283154][T23011] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1762.454275][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5554'. [ 1762.469521][T26691] vlan3: entered promiscuous mode [ 1762.478473][T26691] veth1: entered promiscuous mode [ 1762.948427][T26700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.003310][T26700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.485558][T26711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.559528][T26711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.860615][T26736] veth1_to_batadv: entered promiscuous mode [ 1765.029206][T26742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5567'. [ 1766.143264][T26762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.156974][T26762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.178706][T26762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.215019][T26762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.293464][T26762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.317812][T26762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.370217][T26762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.402887][T26762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.433866][T23011] Bluetooth: hci1: Unknown advertising packet type: 0x5c [ 1766.433903][T23011] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1768.111841][T26801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.158882][T26801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.212909][T26801] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1770.442898][T26833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.490091][T26833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.923047][T26843] syzkaller1: entered promiscuous mode [ 1770.946944][T26843] syzkaller1: entered allmulticast mode [ 1772.690702][T26868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1772.697443][T26868] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1772.725412][T26868] vhci_hcd vhci_hcd.0: Device attached [ 1772.874475][T26869] vhci_hcd: connection closed [ 1772.877516][T13622] vhci_hcd vhci_hcd.3: stop threads [ 1772.908465][T15124] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1772.922354][T13622] vhci_hcd vhci_hcd.3: release socket [ 1772.968387][T13622] vhci_hcd vhci_hcd.3: disconnect device [ 1772.978703][T15124] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1775.535293][T26900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.649776][T26900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.851206][T26904] : renamed from bond0 (while UP) [ 1776.331629][T26890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.341295][T26890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.375689][T15124] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1778.693470][T26939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.749515][T26939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.546697][T26948] ALSA: mixer_oss: invalid OSS volume 'PH' [ 1780.727081][T26965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5624'. [ 1782.181265][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1782.348801][T26981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.358377][T26981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.803090][T26989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.813807][T26989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.925925][T27003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.967754][T27003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.132214][T27005] vlan3: entered promiscuous mode [ 1784.151813][T27005] bridge0: entered promiscuous mode [ 1785.443795][T27012] syz.4.5636: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1785.459726][T27012] CPU: 1 UID: 0 PID: 27012 Comm: syz.4.5636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1785.459763][T27012] Tainted: [L]=SOFTLOCKUP [ 1785.459772][T27012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1785.459787][T27012] Call Trace: [ 1785.459798][T27012] [ 1785.459809][T27012] dump_stack_lvl+0xe8/0x150 [ 1785.459847][T27012] warn_alloc+0x249/0x340 [ 1785.459873][T27012] ? stack_trace_save+0xa9/0x100 [ 1785.459906][T27012] ? __pfx_warn_alloc+0x10/0x10 [ 1785.459938][T27012] ? kasan_save_track+0x4f/0x80 [ 1785.459958][T27012] ? kasan_save_track+0x3e/0x80 [ 1785.459978][T27012] ? __kasan_kmalloc+0x93/0xb0 [ 1785.459999][T27012] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1785.460019][T27012] ? xskq_create+0x56/0x170 [ 1785.460040][T27012] ? xsk_setsockopt+0x54c/0x990 [ 1785.460071][T27012] ? do_sock_setsockopt+0x17c/0x1b0 [ 1785.460098][T27012] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1785.460133][T27012] ? do_syscall_64+0xe2/0xf80 [ 1785.460162][T27012] __vmalloc_node_range_noprof+0x132/0x1730 [ 1785.460221][T27012] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1785.460252][T27012] ? __kasan_kmalloc+0x93/0xb0 [ 1785.460282][T27012] vmalloc_user_noprof+0xad/0xe0 [ 1785.460305][T27012] ? xskq_create+0xbf/0x170 [ 1785.460328][T27012] xskq_create+0xbf/0x170 [ 1785.460354][T27012] xsk_init_queue+0xad/0x110 [ 1785.460391][T27012] xsk_setsockopt+0x54c/0x990 [ 1785.460428][T27012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1785.460461][T27012] ? __pfx_aa_sk_perm+0x10/0x10 [ 1785.460492][T27012] ? aa_sock_opt_perm+0xff/0x1a0 [ 1785.460524][T27012] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1785.460548][T27012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1785.460583][T27012] do_sock_setsockopt+0x17c/0x1b0 [ 1785.460617][T27012] __x64_sys_setsockopt+0x13d/0x1b0 [ 1785.460654][T27012] do_syscall_64+0xe2/0xf80 [ 1785.460678][T27012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.460700][T27012] ? trace_irq_disable+0x37/0x100 [ 1785.460721][T27012] ? clear_bhb_loop+0x60/0xb0 [ 1785.460752][T27012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.460775][T27012] RIP: 0033:0x7f380bb9aeb9 [ 1785.460796][T27012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.460815][T27012] RSP: 002b:00007f380ca86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1785.460838][T27012] RAX: ffffffffffffffda RBX: 00007f380be16180 RCX: 00007f380bb9aeb9 [ 1785.460855][T27012] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 1785.460868][T27012] RBP: 00007f380bc08c1f R08: 0000000000000004 R09: 0000000000000000 [ 1785.460882][T27012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1785.460897][T27012] R13: 00007f380be16218 R14: 00007f380be16180 R15: 00007f380bf3fa48 [ 1785.460932][T27012] [ 1785.460991][T27012] Mem-Info: [ 1785.754432][T27012] active_anon:33440 inactive_anon:0 isolated_anon:0 [ 1785.754432][T27012] active_file:22505 inactive_file:4562 isolated_file:0 [ 1785.754432][T27012] unevictable:768 dirty:207 writeback:0 [ 1785.754432][T27012] slab_reclaimable:12474 slab_unreclaimable:110153 [ 1785.754432][T27012] mapped:41541 shmem:23551 pagetables:2344 [ 1785.754432][T27012] sec_pagetables:0 bounce:0 [ 1785.754432][T27012] kernel_misc_reclaimable:0 [ 1785.754432][T27012] free:1290407 free_pcp:13822 free_cma:0 [ 1785.867253][T27012] Node 0 active_anon:128560kB inactive_anon:0kB active_file:89948kB inactive_file:18112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154528kB dirty:828kB writeback:0kB shmem:92668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14832kB pagetables:9252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1785.909515][T27012] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1786.038512][T27012] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.196727][T27012] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1786.251043][T27018] netlink: 'syz.1.5638': attribute type 298 has an invalid length. [ 1786.280721][T27012] Node 0 DMA32 free:1264132kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:130216kB inactive_anon:0kB active_file:89948kB inactive_file:18112kB unevictable:1536kB writepending:784kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:41520kB local_pcp:21616kB free_cma:0kB [ 1786.452913][T27021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.529939][T27012] lowmem_reserve[]: 0 0 1 1 1 [ 1786.534427][T27021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.634876][T27012] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.668911][T27012] lowmem_reserve[]: 0 0 0 0 0 [ 1786.673800][T27012] Node 1 Normal free:3893160kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11200kB local_pcp:7296kB free_cma:0kB [ 1786.835184][T27012] lowmem_reserve[]: 0 0 0 0 0 [ 1786.850476][T27012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1786.879893][T27012] Node 0 DMA32: 4703*4kB (UME) 5274*8kB (UME) 4457*16kB (UM) 625*32kB (UME) 481*64kB (UME) 514*128kB (UM) 445*256kB (UME) 264*512kB (UM) 164*1024kB (UM) 7*2048kB (UM) 146*4096kB (UM) = 1278268kB [ 1786.916365][T27030] ALSA: mixer_oss: invalid OSS volume 'PH' [ 1786.932621][T27012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.948589][T27029] fuse: root generation should be zero [ 1786.988595][T27012] Node 1 Normal: 239*4kB (UME) 70*8kB (UME) 41*16kB (UME) 251*32kB (UME) 84*64kB (UME) 16*128kB (UME) 7*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 943*4096kB (M) = 3893212kB [ 1787.008191][T27012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1787.043285][T27012] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 1787.504645][T27012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1787.561468][T27012] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1787.649813][T27012] 57994 total pagecache pages [ 1787.700706][T27038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.728627][T27038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.763266][T27012] 0 pages in swap cache [ 1787.772110][T27032] openvswitch: netlink: Message has 2 unknown bytes. [ 1787.801163][T27012] Free swap = 124996kB [ 1787.808177][T27012] Total swap = 124996kB [ 1787.812856][T27012] 2097051 pages RAM [ 1787.816730][T27012] 0 pages HighMem/MovableOnly [ 1787.822157][T27012] 426624 pages reserved [ 1787.826366][T27012] 0 pages cma reserved [ 1787.852051][T27032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1787.979381][T27018] : (slave netdevsim0): Releasing backup interface [ 1788.449021][T27044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.469187][T27045] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5645'. [ 1788.519821][T27044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.751289][T27052] fuse: Bad value for 'group_id' [ 1788.759897][T27052] fuse: Bad value for 'group_id' [ 1788.847709][T27049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.867447][T27049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.883394][T27049] No such timeout policy "syz0" [ 1789.424129][T27070] netlink: 'syz.1.5656': attribute type 11 has an invalid length. [ 1789.449913][T27071] FAULT_INJECTION: forcing a failure. [ 1789.449913][T27071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.528721][T27071] CPU: 1 UID: 0 PID: 27071 Comm: syz.4.5655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1789.528758][T27071] Tainted: [L]=SOFTLOCKUP [ 1789.528767][T27071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1789.528780][T27071] Call Trace: [ 1789.528789][T27071] [ 1789.528799][T27071] dump_stack_lvl+0xe8/0x150 [ 1789.528831][T27071] should_fail_ex+0x412/0x560 [ 1789.528863][T27071] _copy_from_user+0x2d/0xb0 [ 1789.528883][T27071] ___sys_recvmsg+0x175/0x590 [ 1789.528919][T27071] ? __pfx____sys_recvmsg+0x10/0x10 [ 1789.528952][T27071] ? __fget_files+0x2a/0x420 [ 1789.529007][T27071] do_recvmmsg+0x334/0x800 [ 1789.529046][T27071] ? __pfx_do_recvmmsg+0x10/0x10 [ 1789.529088][T27071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1789.529130][T27071] __x64_sys_recvmmsg+0x198/0x250 [ 1789.529163][T27071] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1789.529204][T27071] do_syscall_64+0xe2/0xf80 [ 1789.529227][T27071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.529248][T27071] ? trace_irq_disable+0x37/0x100 [ 1789.529268][T27071] ? clear_bhb_loop+0x60/0xb0 [ 1789.529293][T27071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.529314][T27071] RIP: 0033:0x7f380bb9aeb9 [ 1789.529333][T27071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.529352][T27071] RSP: 002b:00007f380caa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1789.529374][T27071] RAX: ffffffffffffffda RBX: 00007f380be16090 RCX: 00007f380bb9aeb9 [ 1789.529390][T27071] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1789.529404][T27071] RBP: 00007f380caa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.529417][T27071] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1789.529430][T27071] R13: 00007f380be16128 R14: 00007f380be16090 R15: 00007f380bf3fa48 [ 1789.529464][T27071] [ 1789.746424][T27070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.948826][T27070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.056064][T27070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1790.079717][T27070] block device autoloading is deprecated and will be removed. [ 1790.102257][T27076] ptrace attach of "./syz-executor exec"[27084] was attempted by "./syz-executor exec"[27076] [ 1790.406417][T27088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.415979][T27088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.346235][T27123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.356384][T27123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.367064][T27120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1793.407955][T27122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.459871][T27122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.746616][T27130] ALSA: mixer_oss: invalid OSS volume 'PH' [ 1793.856559][T27130] ptrace attach of "./syz-executor exec"[27131] was attempted by "./syz-executor exec"[27130] [ 1794.572683][T23011] Bluetooth: hci3: unknown advertising packet type: 0xe1 [ 1794.572717][T23011] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1794.755144][T27155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.789154][T27155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.019236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.032790][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.875093][T27180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5683'. [ 1798.150143][T27186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.179698][T27186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.201063][T27186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1798.568024][T27191] ALSA: mixer_oss: invalid OSS volume 'PH' [ 1798.610047][T27191] ptrace attach of "./syz-executor exec"[27192] was attempted by "./syz-executor exec"[27191] [ 1798.672290][T27194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.690264][T27194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.720466][T27194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.744850][T27194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.773592][T23011] Bluetooth: hci4: Unknown advertising packet type: 0x5c [ 1798.773618][T23011] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1799.359420][T27204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1800.067339][T27218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.110264][T27218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.189363][T27222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.245555][T27222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.730693][T27222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.848803][T27222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.752570][T27235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.804245][T27235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.898082][T27235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1803.222627][T27250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.266289][T27250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.457897][T27255] ipt_ECN: cannot use operation on non-tcp rule [ 1803.568662][T27259] bond12: up delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1803.694237][T27265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.729341][T27265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.819939][T27265] netlink: 'syz.1.5709': attribute type 72 has an invalid length. [ 1804.087069][T27274] netlink: 'syz.4.5712': attribute type 1 has an invalid length. [ 1804.144425][T27279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5712'. [ 1804.296420][T27281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5712'. [ 1804.367750][T27274] bond13: entered promiscuous mode [ 1804.378229][T27274] bond13: entered allmulticast mode [ 1805.021784][T27290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.041141][T27290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.053855][T27291] loop2: detected capacity change from 0 to 7 [ 1805.150764][T27291] Dev loop2: unable to read RDB block 7 [ 1805.155502][T27294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1805.180316][T27291] loop2: unable to read partition table [ 1805.293353][T27291] loop2: partition table beyond EOD, truncated [ 1805.303931][T27291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1806.222613][T27301] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5720'. [ 1806.259284][T27301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5720'. [ 1806.273235][T27301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5720'. [ 1806.667331][T27308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.749947][T27308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.214822][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1808.745421][T27333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1809.586813][T27347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.595994][T27347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.917562][T27351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.929789][T27351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.955522][T27355] FAULT_INJECTION: forcing a failure. [ 1810.955522][T27355] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.075993][T27356] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1811.126038][T27355] CPU: 0 UID: 0 PID: 27355 Comm: syz.1.5730 Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.126071][T27355] Tainted: [L]=SOFTLOCKUP [ 1811.126080][T27355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1811.126092][T27355] Call Trace: [ 1811.126101][T27355] [ 1811.126110][T27355] dump_stack_lvl+0xe8/0x150 [ 1811.126144][T27355] should_fail_ex+0x412/0x560 [ 1811.126176][T27355] should_failslab+0xa8/0x100 [ 1811.126203][T27355] __kmalloc_noprof+0xde/0x7e0 [ 1811.126223][T27355] ? kfree+0x4d/0x650 [ 1811.126251][T27355] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1811.126287][T27355] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1811.126317][T27355] ? tomoyo_domain+0xd7/0x130 [ 1811.126352][T27355] ? tomoyo_path_number_perm+0x219/0x630 [ 1811.126376][T27355] tomoyo_path_number_perm+0x246/0x630 [ 1811.126403][T27355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1811.126426][T27355] ? __lock_acquire+0x6b5/0x2cf0 [ 1811.126471][T27355] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1811.126518][T27355] ? __fget_files+0x2a/0x420 [ 1811.126545][T27355] ? __fget_files+0x2a/0x420 [ 1811.126566][T27355] ? __fget_files+0x3a0/0x420 [ 1811.126589][T27355] ? __fget_files+0x2a/0x420 [ 1811.126617][T27355] security_file_ioctl+0xc3/0x2a0 [ 1811.126641][T27355] __se_sys_ioctl+0x47/0x170 [ 1811.126674][T27355] do_syscall_64+0xe2/0xf80 [ 1811.126697][T27355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.126717][T27355] ? trace_irq_disable+0x37/0x100 [ 1811.126737][T27355] ? clear_bhb_loop+0x60/0xb0 [ 1811.126762][T27355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.126783][T27355] RIP: 0033:0x7f6ee199aeb9 [ 1811.126802][T27355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.126819][T27355] RSP: 002b:00007f6ee2862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.126842][T27355] RAX: ffffffffffffffda RBX: 00007f6ee1c15fa0 RCX: 00007f6ee199aeb9 [ 1811.126858][T27355] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 1811.126872][T27355] RBP: 00007f6ee2862090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.126886][T27355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.126898][T27355] R13: 00007f6ee1c16038 R14: 00007f6ee1c15fa0 R15: 00007f6ee1d3fa48 [ 1811.126933][T27355] [ 1811.127519][T27355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1811.201170][T27357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1811.520522][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1811.720302][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1812.714177][T27379] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1814.362912][T27394] loop2: detected capacity change from 0 to 7 [ 1814.383114][T27394] Dev loop2: unable to read RDB block 7 [ 1814.403620][T27394] loop2: unable to read partition table [ 1814.442298][T27394] loop2: partition table beyond EOD, truncated [ 1814.576858][T27394] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1814.616026][T27401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.633125][T27401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.660479][T27401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.690649][T27400] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1814.691172][T27401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.785508][T27400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1815.426282][T27409] FAULT_INJECTION: forcing a failure. [ 1815.426282][T27409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.488731][T27409] CPU: 0 UID: 0 PID: 27409 Comm: syz.1.5748 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.488767][T27409] Tainted: [L]=SOFTLOCKUP [ 1815.488776][T27409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1815.488789][T27409] Call Trace: [ 1815.488798][T27409] [ 1815.488808][T27409] dump_stack_lvl+0xe8/0x150 [ 1815.488843][T27409] should_fail_ex+0x412/0x560 [ 1815.488876][T27409] _copy_from_user+0x2d/0xb0 [ 1815.488896][T27409] do_sys_poll+0x2a9/0x1120 [ 1815.488934][T27409] ? __lock_acquire+0x6b5/0x2cf0 [ 1815.488963][T27409] ? __pfx_do_sys_poll+0x10/0x10 [ 1815.488991][T27409] ? aa_file_perm+0x12d/0x1630 [ 1815.489120][T27409] ? set_user_sigmask+0xcd/0x1c0 [ 1815.489141][T27409] ? __pfx_set_user_sigmask+0x10/0x10 [ 1815.489169][T27409] __se_sys_ppoll+0x209/0x2b0 [ 1815.489192][T27409] ? fput+0xa0/0xd0 [ 1815.489220][T27409] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1815.489241][T27409] ? __pfx_ksys_write+0x10/0x10 [ 1815.489277][T27409] ? __x64_sys_ppoll+0x20/0xc0 [ 1815.489300][T27409] do_syscall_64+0xe2/0xf80 [ 1815.489322][T27409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.489341][T27409] ? trace_irq_disable+0x37/0x100 [ 1815.489361][T27409] ? clear_bhb_loop+0x60/0xb0 [ 1815.489398][T27409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.489419][T27409] RIP: 0033:0x7f6ee199aeb9 [ 1815.489438][T27409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.489456][T27409] RSP: 002b:00007f6ee2841028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1815.489481][T27409] RAX: ffffffffffffffda RBX: 00007f6ee1c16090 RCX: 00007f6ee199aeb9 [ 1815.489496][T27409] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1815.489510][T27409] RBP: 00007f6ee2841090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.489523][T27409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.489536][T27409] R13: 00007f6ee1c16128 R14: 00007f6ee1c16090 R15: 00007f6ee1d3fa48 [ 1815.489570][T27409] [ 1815.800746][T27417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1815.829070][T27414] loop4: detected capacity change from 0 to 524287936 [ 1815.836272][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1815.836292][ T30] audit: type=1326 audit(1770510053.215:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.3.5750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865219aeb9 code=0x0 [ 1816.221118][T27431] No such timeout policy "syz0" [ 1816.457415][ T30] audit: type=1326 audit(1770510053.865:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1816.516592][T27426] binder: BINDER_SET_CONTEXT_MGR already set [ 1816.522775][T27426] binder: 27410:27426 ioctl 4018620d 200000000040 returned -16 [ 1816.549282][ T30] audit: type=1326 audit(1770510053.865:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1816.627041][T27437] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1816.747683][ T30] audit: type=1326 audit(1770510053.895:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1816.776075][T27437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1817.418588][ T30] audit: type=1326 audit(1770510054.785:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1817.548445][ T30] audit: type=1326 audit(1770510054.785:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1818.182368][ T30] audit: type=1326 audit(1770510055.575:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1818.281923][ T30] audit: type=1326 audit(1770510055.585:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1818.358158][ T30] audit: type=1326 audit(1770510055.585:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1818.461113][ T30] audit: type=1326 audit(1770510055.585:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27435 comm="syz.4.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1818.528792][T27465] loop4: detected capacity change from 0 to 524287936 [ 1819.245732][T27478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.279633][T27478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.306082][T27480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.328964][T27480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.361769][T27475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.384928][T27475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.411554][T27475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.437219][T27475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.463481][T27475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.486156][T27475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.707336][T27475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.720631][T27475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.716997][T27502] loop2: detected capacity change from 0 to 7 [ 1820.756236][ T5873] Dev loop2: unable to read RDB block 7 [ 1820.764243][ T5873] loop2: unable to read partition table [ 1820.773642][ T5873] loop2: partition table beyond EOD, truncated [ 1820.784391][T27502] Dev loop2: unable to read RDB block 7 [ 1820.791722][T27502] loop2: unable to read partition table [ 1820.799030][T27502] loop2: partition table beyond EOD, truncated [ 1820.845755][T27502] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1820.869259][ T5192] Dev loop2: unable to read RDB block 7 [ 1820.876420][ T5192] loop2: unable to read partition table [ 1820.885053][ T5192] loop2: partition table beyond EOD, truncated [ 1820.974616][T27507] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1821.432162][T27489] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1822.655529][T27535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.837040][T27535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.179543][T27539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.241117][T27539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.338083][T27550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1825.950273][T27576] FAULT_INJECTION: forcing a failure. [ 1825.950273][T27576] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.009403][T27576] CPU: 1 UID: 0 PID: 27576 Comm: syz.0.5793 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.009438][T27576] Tainted: [L]=SOFTLOCKUP [ 1826.009447][T27576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1826.009461][T27576] Call Trace: [ 1826.009470][T27576] [ 1826.009479][T27576] dump_stack_lvl+0xe8/0x150 [ 1826.009514][T27576] should_fail_ex+0x412/0x560 [ 1826.009559][T27576] should_failslab+0xa8/0x100 [ 1826.009586][T27576] __kmalloc_cache_noprof+0x83/0x6e0 [ 1826.009610][T27576] ? sctp_add_bind_addr+0x8c/0x370 [ 1826.009639][T27576] sctp_add_bind_addr+0x8c/0x370 [ 1826.009666][T27576] sctp_copy_local_addr_list+0x314/0x4f0 [ 1826.009694][T27576] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1826.009716][T27576] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1826.009741][T27576] ? sctp_v6_is_any+0x64/0x80 [ 1826.009772][T27576] ? sctp_copy_one_addr+0x93/0x360 [ 1826.009798][T27576] sctp_bind_addr_copy+0xb3/0x3c0 [ 1826.009821][T27576] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1826.009858][T27576] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1826.009888][T27576] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1826.009931][T27576] ? sctp_inet6_send_verify+0x23a/0x300 [ 1826.009951][T27576] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1826.009983][T27576] __sctp_connect+0x5cb/0xdc0 [ 1826.010023][T27576] ? __pfx___sctp_connect+0x10/0x10 [ 1826.010048][T27576] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1826.010074][T27576] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1826.010098][T27576] sctp_getsockopt_connectx3+0x227/0x360 [ 1826.010120][T27576] ? lock_sock_nested+0x6a/0x100 [ 1826.010143][T27576] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1826.010177][T27576] ? __local_bh_enable_ip+0xd0/0x130 [ 1826.010203][T27576] sctp_getsockopt+0x984/0xb90 [ 1826.010228][T27576] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1826.010253][T27576] do_sock_getsockopt+0x2d3/0x3f0 [ 1826.010291][T27576] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1826.010319][T27576] ? __fget_files+0x3a0/0x420 [ 1826.010343][T27576] ? __fget_files+0x2a/0x420 [ 1826.010374][T27576] __x64_sys_getsockopt+0x1a4/0x240 [ 1826.010412][T27576] do_syscall_64+0xe2/0xf80 [ 1826.010436][T27576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.010456][T27576] ? trace_irq_disable+0x37/0x100 [ 1826.010477][T27576] ? clear_bhb_loop+0x60/0xb0 [ 1826.010502][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.010523][T27576] RIP: 0033:0x7fb5a919aeb9 [ 1826.010543][T27576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.010561][T27576] RSP: 002b:00007fb5a9f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1826.010583][T27576] RAX: ffffffffffffffda RBX: 00007fb5a9415fa0 RCX: 00007fb5a919aeb9 [ 1826.010598][T27576] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1826.010611][T27576] RBP: 00007fb5a9f91090 R08: 0000200000000080 R09: 0000000000000000 [ 1826.010626][T27576] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 1826.010639][T27576] R13: 00007fb5a9416038 R14: 00007fb5a9415fa0 R15: 00007fb5a953fa48 [ 1826.010674][T27576] [ 1826.699234][T27569] set match dimension is over the limit! [ 1826.710000][T27579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.739331][T27579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.946452][T27584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.988271][T27584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.354059][T27609] fuse: Bad value for 'fd' [ 1828.715500][T27617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.761933][T27617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.829011][T27617] kvm: kvm [27615]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1829.887284][T27633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.919629][T27633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.384787][T27639] loop4: detected capacity change from 0 to 524287936 [ 1830.415911][T27640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.526331][T27640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.559976][T27640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.569325][T27640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.903515][T27650] fuse: Bad value for 'fd' [ 1831.586473][T27667] : renamed from bond0 (while UP) [ 1833.241540][T27682] loop4: detected capacity change from 0 to 524287936 [ 1834.039794][T27693] fuse: Bad value for 'fd' [ 1834.225231][T27697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.234894][T27697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.803941][T27702] netlink: 'syz.4.5830': attribute type 21 has an invalid length. [ 1834.827987][T27702] IPv6: NLM_F_CREATE should be specified when creating new route [ 1835.006737][T27704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1835.199726][T27710] loop4: detected capacity change from 0 to 524287936 [ 1835.954997][T27723] fuse: Bad value for 'fd' [ 1837.359686][T27739] netlink: 'syz.0.5842': attribute type 275 has an invalid length. [ 1837.556666][T27744] loop4: detected capacity change from 0 to 7 [ 1837.615574][ T5838] Dev loop4: unable to read RDB block 7 [ 1837.646585][ T5838] loop4: AHDI p1 p2 p3 [ 1837.668770][ T5838] loop4: partition table partially beyond EOD, truncated [ 1837.676146][ T5838] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1837.684688][ T5838] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1837.693348][T27744] Dev loop4: unable to read RDB block 7 [ 1837.700510][T27744] loop4: AHDI p1 p2 p3 [ 1837.704745][T27744] loop4: partition table partially beyond EOD, truncated [ 1837.712369][T27744] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1837.724204][T27744] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1837.871235][T27752] fuse: Bad value for 'fd' [ 1837.961054][T27750] loop4: detected capacity change from 0 to 524287936 [ 1838.050463][T27757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.078637][T27757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.508689][T23011] Bluetooth: hci0: unknown advertising packet type: 0xe1 [ 1838.508725][T23011] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1838.927518][T27774] fuse: Bad value for 'user_id' [ 1838.972285][T27774] fuse: Bad value for 'user_id' [ 1840.655439][T27794] loop4: detected capacity change from 0 to 524287936 [ 1841.349313][T23011] Bluetooth: hci2: unknown advertising packet type: 0xe1 [ 1841.349348][T23011] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1841.636818][T27807] fuse: Bad value for 'user_id' [ 1841.648010][T27807] fuse: Bad value for 'user_id' [ 1842.124694][T27816] CUSE: info not properly terminated [ 1842.221405][T27819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.233441][T27816] batman_adv: batadv0: Adding interface: dummy0 [ 1842.278145][T27819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.278778][T27816] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.316211][T27816] batman_adv: batadv0: Interface activated: dummy0 [ 1842.493762][T27826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1842.583797][T27819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1842.644667][T27820] batadv0: mtu less than device minimum [ 1842.659129][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.671276][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.682638][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.694013][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.705334][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.717267][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.728952][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.740377][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.751853][T27820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1842.936978][T27829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.973819][T27829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.475132][T27841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.553760][T27842] FAULT_INJECTION: forcing a failure. [ 1843.553760][T27842] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.566039][T27841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.631218][T27840] ip6gretap0: entered promiscuous mode [ 1843.646493][T27842] CPU: 1 UID: 0 PID: 27842 Comm: syz.1.5872 Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.646530][T27842] Tainted: [L]=SOFTLOCKUP [ 1843.646539][T27842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1843.646552][T27842] Call Trace: [ 1843.646561][T27842] [ 1843.646571][T27842] dump_stack_lvl+0xe8/0x150 [ 1843.646605][T27842] should_fail_ex+0x412/0x560 [ 1843.646637][T27842] should_failslab+0xa8/0x100 [ 1843.646664][T27842] __kmalloc_noprof+0xde/0x7e0 [ 1843.646685][T27842] ? do_sys_poll+0x313/0x1120 [ 1843.646714][T27842] do_sys_poll+0x313/0x1120 [ 1843.646750][T27842] ? __lock_acquire+0x6b5/0x2cf0 [ 1843.646779][T27842] ? __pfx_do_sys_poll+0x10/0x10 [ 1843.646807][T27842] ? aa_file_perm+0x12d/0x1630 [ 1843.646943][T27842] ? set_user_sigmask+0xcd/0x1c0 [ 1843.646964][T27842] ? __pfx_set_user_sigmask+0x10/0x10 [ 1843.646994][T27842] __se_sys_ppoll+0x209/0x2b0 [ 1843.647016][T27842] ? fput+0xa0/0xd0 [ 1843.647044][T27842] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1843.647065][T27842] ? __pfx_ksys_write+0x10/0x10 [ 1843.647102][T27842] ? __x64_sys_ppoll+0x20/0xc0 [ 1843.647126][T27842] do_syscall_64+0xe2/0xf80 [ 1843.647149][T27842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.647169][T27842] ? trace_irq_disable+0x37/0x100 [ 1843.647190][T27842] ? clear_bhb_loop+0x60/0xb0 [ 1843.647215][T27842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.647236][T27842] RIP: 0033:0x7f6ee199aeb9 [ 1843.647255][T27842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.647273][T27842] RSP: 002b:00007f6ee2820028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1843.647295][T27842] RAX: ffffffffffffffda RBX: 00007f6ee1c16180 RCX: 00007f6ee199aeb9 [ 1843.647311][T27842] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1843.647325][T27842] RBP: 00007f6ee2820090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.647339][T27842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.647351][T27842] R13: 00007f6ee1c16218 R14: 00007f6ee1c16180 R15: 00007f6ee1d3fa48 [ 1843.647385][T27842] [ 1843.710997][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1843.711054][ T30] audit: type=1326 audit(1770510081.045:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1843.959142][ T30] audit: type=1326 audit(1770510081.045:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1843.986345][ T30] audit: type=1326 audit(1770510081.045:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1844.012854][ T30] audit: type=1326 audit(1770510081.045:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1844.049983][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5871'. [ 1844.132817][ T30] audit: type=1326 audit(1770510081.045:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1844.250261][T27844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5873'. [ 1844.264647][ T30] audit: type=1326 audit(1770510081.045:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1844.353317][ T30] audit: type=1326 audit(1770510081.045:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1844.381114][ T30] audit: type=1326 audit(1770510081.045:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1844.573845][T27848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5875'. [ 1845.427942][T27858] fuse: Bad value for 'user_id' [ 1845.566203][T27858] fuse: Bad value for 'user_id' [ 1845.848911][T27859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.876708][T27859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.902859][T27871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.929002][T27871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.307798][T27875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5881'. [ 1848.318172][T27871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.384501][T27879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5881'. [ 1848.449234][T27871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.484133][T27875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5881'. [ 1849.400367][T27896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.410644][T27899] FAULT_INJECTION: forcing a failure. [ 1849.410644][T27899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.448454][T27899] CPU: 0 UID: 0 PID: 27899 Comm: syz.4.5887 Tainted: G L syzkaller #0 PREEMPT(full) [ 1849.448491][T27899] Tainted: [L]=SOFTLOCKUP [ 1849.448500][T27899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1849.448513][T27899] Call Trace: [ 1849.448523][T27899] [ 1849.448533][T27899] dump_stack_lvl+0xe8/0x150 [ 1849.448569][T27899] should_fail_ex+0x412/0x560 [ 1849.448619][T27899] _copy_from_user+0x2d/0xb0 [ 1849.448641][T27899] generic_map_update_batch+0x572/0x810 [ 1849.448686][T27899] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1849.448718][T27899] ? __fget_files+0x2a/0x420 [ 1849.448752][T27899] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1849.448782][T27899] bpf_map_do_batch+0x39b/0x630 [ 1849.448814][T27899] __sys_bpf+0x709/0x920 [ 1849.448839][T27899] ? __pfx___sys_bpf+0x10/0x10 [ 1849.448879][T27899] ? ksys_write+0x242/0x270 [ 1849.448916][T27899] ? __pfx_ksys_write+0x10/0x10 [ 1849.448957][T27899] __x64_sys_bpf+0x7c/0x90 [ 1849.448991][T27899] do_syscall_64+0xe2/0xf80 [ 1849.449016][T27899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.449039][T27899] ? trace_irq_disable+0x37/0x100 [ 1849.449061][T27899] ? clear_bhb_loop+0x60/0xb0 [ 1849.449088][T27899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.449110][T27899] RIP: 0033:0x7f380bb9aeb9 [ 1849.449130][T27899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.449150][T27899] RSP: 002b:00007f380cac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1849.449174][T27899] RAX: ffffffffffffffda RBX: 00007f380be15fa0 RCX: 00007f380bb9aeb9 [ 1849.449191][T27899] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1849.449206][T27899] RBP: 00007f380cac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.449220][T27899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.449234][T27899] R13: 00007f380be16038 R14: 00007f380be15fa0 R15: 00007f380bf3fa48 [ 1849.449272][T27899] [ 1849.668592][T27896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.998808][T27901] fuse: Bad value for 'fd' [ 1851.507057][T27921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.590382][T27921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.929078][T27940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1853.027425][T27941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.051177][T27941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.239562][T27945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.261594][T27945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.760285][ T30] audit: type=1326 audit(1770510091.145:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1853.932189][ T30] audit: type=1326 audit(1770510091.145:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.025638][ T30] audit: type=1326 audit(1770510091.145:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.129805][ T30] audit: type=1326 audit(1770510091.145:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.173465][T27954] fuse: Bad value for 'fd' [ 1854.205911][ T30] audit: type=1326 audit(1770510091.145:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.407647][ T30] audit: type=1326 audit(1770510091.145:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.494328][ T30] audit: type=1326 audit(1770510091.145:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.546698][ T30] audit: type=1326 audit(1770510091.145:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.661389][ T30] audit: type=1326 audit(1770510091.145:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1854.743586][ T30] audit: type=1326 audit(1770510091.145:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f380bb9aeb9 code=0x7ffc0000 [ 1855.875768][T27970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.899035][T27970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.909892][T27982] fuse: Bad value for 'fd' [ 1857.707828][T27990] fuse: Bad value for 'fd' [ 1858.106154][T27992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5911'. [ 1858.248311][T27994] fuse: Bad value for 'fd' [ 1858.341381][T27998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.374338][T27998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.389730][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.396110][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.470215][T28000] syzkaller1: entered promiscuous mode [ 1858.475779][T28000] syzkaller1: entered allmulticast mode [ 1858.637615][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.725071][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.883984][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.963653][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.007244][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.032868][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.062002][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.478189][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.487044][T28016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.571371][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.581239][T28016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.589464][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.638176][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.659254][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.225768][T28026] fuse: Bad value for 'fd' [ 1860.421420][T28030] loop2: detected capacity change from 0 to 7 [ 1860.431015][T28030] Dev loop2: unable to read RDB block 7 [ 1860.451430][T28030] loop2: AHDI p1 p2 p3 [ 1860.481990][T28030] loop2: partition table partially beyond EOD, truncated [ 1860.506725][T28030] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1860.529142][T28030] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1860.676036][T28032] xt_socket: unknown flags 0x50 [ 1861.221064][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 1861.869647][T28041] FAULT_INJECTION: forcing a failure. [ 1861.869647][T28041] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.940688][T28041] CPU: 1 UID: 0 PID: 28041 Comm: syz.2.5926 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.940722][T28041] Tainted: [L]=SOFTLOCKUP [ 1861.940731][T28041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1861.940749][T28041] Call Trace: [ 1861.940758][T28041] [ 1861.940768][T28041] dump_stack_lvl+0xe8/0x150 [ 1861.940800][T28041] should_fail_ex+0x412/0x560 [ 1861.940833][T28041] should_failslab+0xa8/0x100 [ 1861.940859][T28041] __kmalloc_cache_noprof+0x83/0x6e0 [ 1861.940883][T28041] ? snd_pcm_hw_param_near+0x7f/0x4d0 [ 1861.940905][T28041] ? kasan_quarantine_put+0xbb/0x1f0 [ 1861.940942][T28041] snd_pcm_hw_param_near+0x7f/0x4d0 [ 1861.940964][T28041] ? snd_pcm_oss_change_params_locked+0xdf1/0x3e00 [ 1861.940988][T28041] ? kfree+0x1be/0x650 [ 1861.941022][T28041] snd_pcm_oss_change_params_locked+0xe41/0x3e00 [ 1861.941077][T28041] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1861.941124][T28041] ? __might_fault+0xaf/0x130 [ 1861.941157][T28041] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 1861.941189][T28041] snd_pcm_oss_get_formats+0x34/0x420 [ 1861.941218][T28041] snd_pcm_oss_set_format+0x41/0x500 [ 1861.941242][T28041] ? __might_fault+0xaf/0x130 [ 1861.941277][T28041] snd_pcm_oss_ioctl+0xbe9/0xdf0 [ 1861.941301][T28041] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1861.941324][T28041] __se_sys_ioctl+0xfc/0x170 [ 1861.941357][T28041] do_syscall_64+0xe2/0xf80 [ 1861.941380][T28041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.941399][T28041] ? trace_irq_disable+0x37/0x100 [ 1861.941420][T28041] ? clear_bhb_loop+0x60/0xb0 [ 1861.941496][T28041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.941518][T28041] RIP: 0033:0x7f5930b9aeb9 [ 1861.941537][T28041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.941555][T28041] RSP: 002b:00007f5931a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.941578][T28041] RAX: ffffffffffffffda RBX: 00007f5930e15fa0 RCX: 00007f5930b9aeb9 [ 1861.941594][T28041] RDX: 0000200000000080 RSI: 00000000c0045005 RDI: 0000000000000004 [ 1861.941608][T28041] RBP: 00007f5931a47090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.941622][T28041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.941634][T28041] R13: 00007f5930e16038 R14: 00007f5930e15fa0 R15: 00007f5930f3fa48 [ 1861.941668][T28041] [ 1862.327423][T28041] netlink: 'syz.2.5926': attribute type 1 has an invalid length. [ 1862.502165][T28042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1862.557399][T28051] fuse: Bad value for 'fd' [ 1862.576652][T28048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1862.626493][T28041] bond0: entered promiscuous mode [ 1862.648379][T28041] bond0: entered allmulticast mode [ 1863.490544][T28065] fuse: Bad value for 'fd' [ 1863.748168][T28067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5933'. [ 1863.961959][T28067] 8021q: VLANs not supported on vxcan1 [ 1864.296325][T28074] netlink: 'syz.2.5935': attribute type 1 has an invalid length. [ 1864.358109][T28076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1864.560093][T28074] bond17: entered promiscuous mode [ 1864.581683][T28077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1864.605020][T28074] bond17: entered allmulticast mode [ 1865.149629][T28081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5936'. [ 1865.798931][T28097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5939'. [ 1865.972995][T28088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.982755][T28088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.007797][T28107] pim6reg: left allmulticast mode [ 1867.487039][T28110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.530533][T28110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.682666][T28115] FAULT_INJECTION: forcing a failure. [ 1867.682666][T28115] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.682705][T28115] CPU: 1 UID: 0 PID: 28115 Comm: syz.3.5943 Tainted: G L syzkaller #0 PREEMPT(full) [ 1867.682733][T28115] Tainted: [L]=SOFTLOCKUP [ 1867.682741][T28115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1867.682754][T28115] Call Trace: [ 1867.682763][T28115] [ 1867.682772][T28115] dump_stack_lvl+0xe8/0x150 [ 1867.682802][T28115] should_fail_ex+0x412/0x560 [ 1867.682834][T28115] should_failslab+0xa8/0x100 [ 1867.682859][T28115] __kmalloc_noprof+0xde/0x7e0 [ 1867.682880][T28115] ? alloc_pipe_info+0x1fc/0x4d0 [ 1867.682904][T28115] alloc_pipe_info+0x1fc/0x4d0 [ 1867.682927][T28115] splice_direct_to_actor+0xa08/0xc70 [ 1867.682958][T28115] ? kstrtouint+0x6e/0xe0 [ 1867.682985][T28115] ? __pfx_direct_splice_actor+0x10/0x10 [ 1867.683010][T28115] ? __pfx_aa_file_perm+0x10/0x10 [ 1867.683041][T28115] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1867.683076][T28115] do_splice_direct+0x195/0x290 [ 1867.683102][T28115] ? __pfx_do_splice_direct+0x10/0x10 [ 1867.683127][T28115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1867.683158][T28115] ? rw_verify_area+0x255/0x4d0 [ 1867.683201][T28115] do_sendfile+0x535/0x7d0 [ 1867.683233][T28115] ? __pfx_do_sendfile+0x10/0x10 [ 1867.683269][T28115] __se_sys_sendfile64+0xdf/0x1a0 [ 1867.683294][T28115] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1867.683318][T28115] ? __secure_computing+0xe1/0x2a0 [ 1867.683353][T28115] do_syscall_64+0xe2/0xf80 [ 1867.683375][T28115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.683396][T28115] ? trace_irq_disable+0x37/0x100 [ 1867.683415][T28115] ? clear_bhb_loop+0x60/0xb0 [ 1867.683440][T28115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.683461][T28115] RIP: 0033:0x7f865219aeb9 [ 1867.683480][T28115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.683499][T28115] RSP: 002b:00007f8652f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1867.683520][T28115] RAX: ffffffffffffffda RBX: 00007f8652415fa0 RCX: 00007f865219aeb9 [ 1867.683534][T28115] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000007 [ 1867.683547][T28115] RBP: 00007f8652f9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.683561][T28115] R10: 0000000100000500 R11: 0000000000000246 R12: 0000000000000001 [ 1867.683574][T28115] R13: 00007f8652416038 R14: 00007f8652415fa0 R15: 00007f865253fa48 [ 1867.683606][T28115] [ 1868.384323][T28120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.479220][T28120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.189286][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5948'. [ 1869.309361][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5944'. [ 1872.176581][T28152] netlink: 'syz.2.5955': attribute type 1 has an invalid length. [ 1872.836210][T28165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.071958][T28167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.118128][T28167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.283570][T28167] syzkaller0: entered promiscuous mode [ 1873.333042][T28167] syzkaller0: entered allmulticast mode [ 1873.983594][T28184] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1874.035057][T28184] PKCS7: Only support pkcs7_signedData type [ 1876.592645][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1876.869374][T28206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.977106][T28206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.864192][T28213] ALSA: mixer_oss: invalid OSS volume '' [ 1878.481548][T28215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.554355][T28215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.416551][T28223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.426842][T28223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.774892][T28241] fuse: Bad value for 'fd' [ 1882.741500][T28254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5978'. [ 1883.425410][T28262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5979'. [ 1885.548165][T28281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5985'. [ 1886.359773][T28295] loop4: detected capacity change from 0 to 524287936 [ 1886.582476][T28276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1887.545010][T28310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.598413][T28310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.382008][T28325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.416318][T28325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.242353][T28316] input: syz0 as /devices/virtual/input/input23 [ 1890.841486][T28348] loop4: detected capacity change from 0 to 524287936 [ 1891.043680][T23011] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 1891.045799][T23011] Bluetooth: hci4: hardware error 0x01 [ 1893.093783][T28371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.099037][T23011] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1893.218442][T28371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.311451][T28385] : renamed from bond0 (while UP) [ 1894.950258][T28389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1895.951848][T28400] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1896.219870][T28402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1896.322091][T28400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1898.277404][T28419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1898.330261][T28422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.359246][T28422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.441486][T28437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1899.564716][T28444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1899.581181][T28444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1899.594524][T28444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1899.825512][T28456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.849094][T28456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.892421][T28456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1900.052228][T28466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'. [ 1900.698089][T28474] fuse: Unknown parameter 'use00000000000000000000' [ 1901.350505][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1901.350552][ T30] audit: type=1326 audit(1770510138.765:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1901.464717][T28479] program syz.0.6034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1901.495004][ T30] audit: type=1326 audit(1770510138.845:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1901.749220][ T30] audit: type=1326 audit(1770510138.875:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1901.814528][ T30] audit: type=1326 audit(1770510138.875:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1901.882084][ T30] audit: type=1326 audit(1770510138.875:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1901.966703][ T30] audit: type=1326 audit(1770510138.875:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1902.040191][ T30] audit: type=1326 audit(1770510138.875:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1902.113787][ T30] audit: type=1326 audit(1770510138.875:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1902.228493][ T30] audit: type=1326 audit(1770510138.875:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1902.307445][ T30] audit: type=1326 audit(1770510138.875:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.0.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1902.397408][T28488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1902.441860][T28488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1902.473878][T28488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1903.903129][T28517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6042'. [ 1904.245883][T28517] Invalid argument reading file caps for ./file0 [ 1904.487863][T28522] fuse: Unknown parameter 'user_i00000000000000000000' [ 1904.800997][T23011] Bluetooth: hci3: unexpected subevent 0x10 length: 248 > 2 [ 1904.819324][T28526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1904.869786][T28526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1905.349736][T28537] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1905.376380][T28537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1905.400999][T28540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1905.437264][T28537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1906.223445][T28550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.255733][T28551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.291720][T28550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.310781][T28551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.484994][T28555] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 1906.491413][T28555] PKCS7: Only support pkcs7_signedData type [ 1907.168591][T28566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.201392][T28566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.334310][T28566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.344857][T28566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.962578][T28582] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1908.990371][T28582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1909.017854][T28582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1909.104490][T28586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.137649][T28586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.308894][T28589] loop2: detected capacity change from 0 to 7 [ 1909.331127][T28589] Dev loop2: unable to read RDB block 7 [ 1909.346783][T28589] loop2: unable to read partition table [ 1909.366711][T28589] loop2: partition table beyond EOD, truncated [ 1909.389466][T28589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1909.676846][T28592] batadv_slave_0: left allmulticast mode [ 1909.985320][T28597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.258929][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6071'. [ 1910.309926][T28605] FAULT_INJECTION: forcing a failure. [ 1910.309926][T28605] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.341522][T28605] CPU: 1 UID: 0 PID: 28605 Comm: syz.4.6071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1910.341559][T28605] Tainted: [L]=SOFTLOCKUP [ 1910.341567][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1910.341580][T28605] Call Trace: [ 1910.341686][T28605] [ 1910.341706][T28605] dump_stack_lvl+0xe8/0x150 [ 1910.341742][T28605] should_fail_ex+0x412/0x560 [ 1910.341773][T28605] should_failslab+0xa8/0x100 [ 1910.341801][T28605] __kmalloc_cache_noprof+0x83/0x6e0 [ 1910.341822][T28605] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1910.342005][T28605] ? sctp_add_bind_addr+0x8c/0x370 [ 1910.342033][T28605] sctp_add_bind_addr+0x8c/0x370 [ 1910.342053][T28605] sctp_copy_local_addr_list+0x314/0x4f0 [ 1910.342073][T28605] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1910.342089][T28605] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1910.342107][T28605] ? sctp_v6_is_any+0x64/0x80 [ 1910.342125][T28605] ? sctp_copy_one_addr+0x93/0x360 [ 1910.342142][T28605] sctp_bind_addr_copy+0xb3/0x3c0 [ 1910.342169][T28605] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1910.342195][T28605] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1910.342218][T28605] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1910.342238][T28605] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1910.342257][T28605] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1910.342276][T28605] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1910.342296][T28605] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 1910.342318][T28605] __sctp_connect+0x5cb/0xdc0 [ 1910.342353][T28605] ? __pfx___sctp_connect+0x10/0x10 [ 1910.342375][T28605] ? __local_bh_enable_ip+0xd0/0x130 [ 1910.342393][T28605] sctp_inet_connect+0x12e/0x210 [ 1910.342414][T28605] __sys_connect+0x312/0x450 [ 1910.342435][T28605] ? __pfx___sys_connect+0x10/0x10 [ 1910.342462][T28605] ? __pfx_ksys_write+0x10/0x10 [ 1910.342492][T28605] __x64_sys_connect+0x7a/0x90 [ 1910.342510][T28605] do_syscall_64+0xe2/0xf80 [ 1910.342528][T28605] ? rcu_is_watching+0x15/0xb0 [ 1910.342542][T28605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.342556][T28605] ? clear_bhb_loop+0x60/0xb0 [ 1910.342575][T28605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.342592][T28605] RIP: 0033:0x7f380bb9aeb9 [ 1910.342608][T28605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.342623][T28605] RSP: 002b:00007f380cac8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1910.342640][T28605] RAX: ffffffffffffffda RBX: 00007f380be15fa0 RCX: 00007f380bb9aeb9 [ 1910.342652][T28605] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1910.342662][T28605] RBP: 00007f380cac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.342672][T28605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1910.342681][T28605] R13: 00007f380be16038 R14: 00007f380be15fa0 R15: 00007f380bf3fa48 [ 1910.342705][T28605] [ 1910.811863][T23011] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 1910.813921][T23011] Bluetooth: hci0: hardware error 0x01 [ 1911.493201][T28630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1911.607278][T28630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1911.621541][T28630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1912.019922][T28639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.197377][T28639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.301013][T28639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.339591][T28639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.458868][T28646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.597746][T28646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.944115][T23011] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1912.999061][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1912.999088][ T30] audit: type=1326 audit(1770510150.385:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.117728][ T30] audit: type=1326 audit(1770510150.385:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.187131][ T30] audit: type=1326 audit(1770510150.385:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.225762][T23011] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 1913.227900][ T5834] Bluetooth: hci2: hardware error 0x01 [ 1913.266175][ T30] audit: type=1326 audit(1770510150.385:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.440970][ T30] audit: type=1326 audit(1770510150.385:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.500184][ T30] audit: type=1326 audit(1770510150.385:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.523705][ T30] audit: type=1326 audit(1770510150.385:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.574393][ T30] audit: type=1326 audit(1770510150.445:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.622431][ T30] audit: type=1326 audit(1770510150.445:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.690866][ T30] audit: type=1326 audit(1770510150.445:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.2.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5930b9aeb9 code=0x7ffc0000 [ 1913.795913][T28667] fuse: Bad value for 'fd' [ 1914.268044][T28673] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6090'. [ 1914.290657][T28673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6090'. [ 1914.302664][T28673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6090'. [ 1914.354305][T28675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.381759][T28675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.431389][T28675] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6091'. [ 1915.253868][T28680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.269146][ T5834] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1915.269474][T28680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.467306][T28694] netlink: 'syz.2.6097': attribute type 30 has an invalid length. [ 1915.475911][T28694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1915.733470][T28692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1915.742816][T28692] lo: MTU too low for tipc bearer [ 1915.748101][T28692] tipc: Enabling of bearer rejected, failed to enable media [ 1915.915154][T28706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.935699][T28706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.125163][T28706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.138494][T28710] loop2: detected capacity change from 0 to 7 [ 1916.147613][T28710] Dev loop2: unable to read RDB block 7 [ 1916.158084][T28706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.168825][T28710] loop2: unable to read partition table [ 1916.175268][T28710] loop2: partition table beyond EOD, truncated [ 1916.189654][T28710] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1916.370777][T28714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.394633][T28714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.071451][T28723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.080384][T28723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.306864][ T5834] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 1917.308936][T23011] Bluetooth: hci1: hardware error 0x01 [ 1917.994879][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1918.269967][T28740] trusted_key: encrypted_key: insufficient parameters specified [ 1918.897015][T28746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1919.358773][T23011] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1919.624892][T28750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.638490][T28750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.823297][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.830004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.878571][T28765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.890859][T28765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.237437][T28772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.271410][T28772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.327406][T28773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.382364][T28773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.724293][T28780] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1921.446007][T28808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.455052][T28808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1922.829709][T28821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1922.841170][T28821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.134277][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.172769][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.667370][T28845] FAULT_INJECTION: forcing a failure. [ 1924.667370][T28845] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.718968][T28845] CPU: 1 UID: 0 PID: 28845 Comm: syz.4.6138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.719019][T28845] Tainted: [L]=SOFTLOCKUP [ 1924.719026][T28845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1924.719035][T28845] Call Trace: [ 1924.719042][T28845] [ 1924.719049][T28845] dump_stack_lvl+0xe8/0x150 [ 1924.719075][T28845] should_fail_ex+0x412/0x560 [ 1924.719105][T28845] should_failslab+0xa8/0x100 [ 1924.719125][T28845] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1924.719150][T28845] ? dup_task_struct+0x57/0x9a0 [ 1924.719169][T28845] dup_task_struct+0x57/0x9a0 [ 1924.719185][T28845] ? _raw_spin_unlock_irq+0x23/0x50 [ 1924.719203][T28845] copy_process+0x508/0x3980 [ 1924.719236][T28845] ? __pfx_copy_process+0x10/0x10 [ 1924.719256][T28845] ? mutex_init_lockep+0xf9/0x130 [ 1924.719274][T28845] vhost_task_create+0x1f9/0x380 [ 1924.719291][T28845] ? finish_task_switch+0x161/0x920 [ 1924.719310][T28845] ? lock_acquire+0x106/0x330 [ 1924.719329][T28845] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1924.719350][T28845] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1924.719372][T28845] ? __pfx_vhost_task_create+0x10/0x10 [ 1924.719395][T28845] ? __pfx_vhost_task_fn+0x10/0x10 [ 1924.719418][T28845] ? rcu_is_watching+0x15/0xb0 [ 1924.719435][T28845] ? __schedule+0x1538/0x51d0 [ 1924.719452][T28845] kvm_mmu_post_init_vm+0x14c/0x300 [ 1924.719477][T28845] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1924.719508][T28845] ? look_up_lock_class+0x57/0x110 [ 1924.719525][T28845] ? register_lock_class+0x31/0x2e0 [ 1924.719545][T28845] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1924.719570][T28845] ? __lock_acquire+0x6b5/0x2cf0 [ 1924.719593][T28845] ? __mutex_lock+0x319/0x1300 [ 1924.719613][T28845] ? irqentry_exit+0x59c/0x620 [ 1924.719629][T28845] ? lockdep_hardirqs_on+0x7a/0x110 [ 1924.719645][T28845] ? irqentry_exit+0x59c/0x620 [ 1924.719667][T28845] ? do_raw_write_lock+0x11d/0x260 [ 1924.719696][T28845] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1924.719720][T28845] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1924.719739][T28845] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1924.719771][T28845] ? __fget_files+0x2a/0x420 [ 1924.719789][T28845] ? __fget_files+0x2a/0x420 [ 1924.719804][T28845] ? __fget_files+0x3a0/0x420 [ 1924.719820][T28845] ? __fget_files+0x2a/0x420 [ 1924.719838][T28845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1924.719857][T28845] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1924.719877][T28845] __se_sys_ioctl+0xfc/0x170 [ 1924.719901][T28845] do_syscall_64+0xe2/0xf80 [ 1924.719917][T28845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.719932][T28845] ? trace_irq_disable+0x37/0x100 [ 1924.719946][T28845] ? clear_bhb_loop+0x60/0xb0 [ 1924.719986][T28845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.720007][T28845] RIP: 0033:0x7f380bb9aeb9 [ 1924.720027][T28845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.720047][T28845] RSP: 002b:00007f380caa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1924.720063][T28845] RAX: ffffffffffffffda RBX: 00007f380be16090 RCX: 00007f380bb9aeb9 [ 1924.720074][T28845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1924.720084][T28845] RBP: 00007f380caa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.720093][T28845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.720106][T28845] R13: 00007f380be16128 R14: 00007f380be16090 R15: 00007f380bf3fa48 [ 1924.720130][T28845] [ 1925.438808][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6130'. [ 1926.174380][T28865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.196759][T28865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.365367][T28869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.375063][T28869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.735880][T28879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.186543][T28879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.008434][T28890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.044865][T28890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.091435][T28894] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 1928.101219][T28892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.101265][T28894] ALSA: mixer_oss: invalid OSS volume 'VOLU4E' [ 1928.140637][T28892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.154524][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 1928.154543][ T30] audit: type=1326 audit(1770510165.565:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.206120][ T30] audit: type=1326 audit(1770510165.595:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.230500][ T30] audit: type=1326 audit(1770510165.595:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.305414][ T30] audit: type=1326 audit(1770510165.605:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.353200][ T30] audit: type=1326 audit(1770510165.605:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.378403][ T30] audit: type=1326 audit(1770510165.605:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.404420][ T30] audit: type=1326 audit(1770510165.605:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.500657][ T30] audit: type=1326 audit(1770510165.605:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.533512][ T30] audit: type=1326 audit(1770510165.605:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.562474][ T30] audit: type=1326 audit(1770510165.605:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28889 comm="syz.0.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb5a919aeb9 code=0x7ffc0000 [ 1928.601280][T28900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.619123][T28900] bridge_slave_1: left allmulticast mode [ 1928.637419][T28900] bridge_slave_1: left promiscuous mode [ 1928.652819][T28900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.679767][T28900] : (slave bond_slave_0): Releasing backup interface [ 1928.692761][T28900] bond_slave_0: left promiscuous mode [ 1928.713463][T28900] : (slave bond_slave_1): Releasing backup interface [ 1928.731008][T28900] bond_slave_1: left promiscuous mode [ 1928.750977][T28900] team0: Port device team_slave_0 removed [ 1928.768086][T28900] team0: Port device team_slave_1 removed [ 1928.789615][T28900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.816468][T28903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.830275][T28900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1928.855846][T28903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.887076][T28900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.932173][T28900] net_ratelimit: 11 callbacks suppressed [ 1928.932194][T28900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1929.848598][T28914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1929.925000][T28918] FAULT_INJECTION: forcing a failure. [ 1929.925000][T28918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1929.951206][T28918] CPU: 0 UID: 0 PID: 28918 Comm: syz.1.6156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.951248][T28918] Tainted: [L]=SOFTLOCKUP [ 1929.951255][T28918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1929.951265][T28918] Call Trace: [ 1929.951272][T28918] [ 1929.951279][T28918] dump_stack_lvl+0xe8/0x150 [ 1929.951305][T28918] should_fail_ex+0x412/0x560 [ 1929.951328][T28918] _copy_from_user+0x2d/0xb0 [ 1929.951344][T28918] kstrtouint_from_user+0xd6/0x180 [ 1929.951368][T28918] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1929.951401][T28918] proc_fail_nth_write+0x8e/0x210 [ 1929.951425][T28918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1929.951453][T28918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1929.951477][T28918] vfs_write+0x29a/0xb90 [ 1929.951508][T28918] ? __pfx_vfs_write+0x10/0x10 [ 1929.951532][T28918] ? __fget_files+0x2a/0x420 [ 1929.951554][T28918] ? __fget_files+0x3a0/0x420 [ 1929.951571][T28918] ? __fget_files+0x2a/0x420 [ 1929.951596][T28918] ksys_write+0x150/0x270 [ 1929.951621][T28918] ? __pfx_ksys_write+0x10/0x10 [ 1929.951643][T28918] ? __pfx_sock_ioctl+0x10/0x10 [ 1929.951666][T28918] do_syscall_64+0xe2/0xf80 [ 1929.951683][T28918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.951698][T28918] ? trace_irq_disable+0x37/0x100 [ 1929.951714][T28918] ? clear_bhb_loop+0x60/0xb0 [ 1929.951733][T28918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.951748][T28918] RIP: 0033:0x7f6ee195b78e [ 1929.951762][T28918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1929.951776][T28918] RSP: 002b:00007f6ee2861fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1929.951793][T28918] RAX: ffffffffffffffda RBX: 00007f6ee28626c0 RCX: 00007f6ee195b78e [ 1929.951805][T28918] RDX: 0000000000000001 RSI: 00007f6ee28620a0 RDI: 0000000000000004 [ 1929.951815][T28918] RBP: 00007f6ee2862090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.951830][T28918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.951839][T28918] R13: 00007f6ee1c16038 R14: 00007f6ee1c15fa0 R15: 00007f6ee1d3fa48 [ 1929.951864][T28918] [ 1930.657304][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6157'. [ 1930.666504][T28924] openvswitch: netlink: Flow actions attr not present in new flow. [ 1931.805284][T28943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6161'. [ 1932.159770][T28947] fuse: Unknown parameter '00000000000000000006' [ 1932.518024][T28953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.537003][T28953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.562559][T28956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.671127][T28956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.381783][T28984] fuse: Unknown parameter '00000000000000000006' [ 1934.596280][T28990] loop2: detected capacity change from 0 to 7 [ 1934.616279][T28990] Dev loop2: unable to read RDB block 7 [ 1934.635430][T28990] loop2: unable to read partition table [ 1934.649611][T28990] loop2: partition table beyond EOD, truncated [ 1934.712026][T28990] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1937.086153][T29010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.138863][T29010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1937.733822][T29020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6186'. [ 1938.016012][T29026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.045081][T29026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.085728][T29026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.144429][T29026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.594092][T29041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1940.262431][T29063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1940.273400][T29063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1940.286931][T29063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1940.435574][T29065] tmpfs: Unknown parameter ' ' [ 1940.497235][T29066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.516514][T29066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.624328][T29083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1942.572098][T29092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.589683][T29092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.640733][T29106] ALSA: mixer_oss: invalid OSS volume 'P' [ 1945.329518][T29112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6209'. [ 1945.361899][T29112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6209'. [ 1945.397696][T29112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6209'. [ 1945.741037][T29118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.765907][T29118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.187295][T29131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.197512][T29131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.308084][T29136] batadv_slave_0: entered allmulticast mode [ 1947.957672][T15105] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1947.975406][T15105] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1948.157192][T29159] loop4: detected capacity change from 0 to 524287936 [ 1948.584394][T29162] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1948.631467][T29162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1948.647554][T29162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1949.346645][T29170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.380708][T29170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.267303][T29174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.303327][T29174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.626111][T29192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.685100][T29192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.024066][T29197] loop4: detected capacity change from 0 to 524287936 [ 1951.751156][T29216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.760602][T29216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.059717][T29214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1954.836048][T29245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6243'. [ 1955.193602][T29251] loop4: detected capacity change from 0 to 524287936 [ 1955.885303][T29244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1955.918487][T29244] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1956.136772][T29259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1956.372235][T29259] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1956.513246][T29262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.523901][T29262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.736100][T29264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.798771][T29264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.350074][T23011] Bluetooth: hci3: command 0x0406 tx timeout [ 1959.423565][T23011] Bluetooth: hci3: command 0x0406 tx timeout [ 1959.568948][T29294] netlink: 'syz.3.6259': attribute type 8 has an invalid length. [ 1959.659527][T29283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6254'. [ 1959.777104][T29300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.839050][T29300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.918656][T29303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.919031][T29303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.920274][T29303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.920567][T29303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.929337][T29303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.933877][T29303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.578816][T29316] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1960.664762][T29320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.684913][T29320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.744037][T29313] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1960.819574][T29313] bond13 (unregistering): Released all slaves [ 1961.295382][T29331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1961.464422][T29331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.663837][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1964.719538][T29362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.918718][T29362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.647581][T29373] fuse: Bad value for 'fd' [ 1965.694126][T29373] netlink: 'syz.1.6279': attribute type 8 has an invalid length. [ 1966.035695][T29378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.064299][T29378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.430435][T29385] ALSA: mixer_oss: invalid OSS volume 'PH' [ 1967.716470][T29395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.735820][T29395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.266986][T29404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.279811][T29404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.609609][T29410] FAULT_INJECTION: forcing a failure. [ 1968.609609][T29410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1968.644808][T29410] CPU: 1 UID: 0 PID: 29410 Comm: syz.1.6292 Tainted: G L syzkaller #0 PREEMPT(full) [ 1968.644843][T29410] Tainted: [L]=SOFTLOCKUP [ 1968.644852][T29410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1968.644865][T29410] Call Trace: [ 1968.644874][T29410] [ 1968.644885][T29410] dump_stack_lvl+0xe8/0x150 [ 1968.644919][T29410] should_fail_ex+0x412/0x560 [ 1968.644952][T29410] _copy_from_user+0x2d/0xb0 [ 1968.644974][T29410] ___sys_recvmsg+0x175/0x590 [ 1968.645012][T29410] ? __pfx____sys_recvmsg+0x10/0x10 [ 1968.645047][T29410] ? __fget_files+0x2a/0x420 [ 1968.645102][T29410] do_recvmmsg+0x334/0x800 [ 1968.645141][T29410] ? __pfx_do_recvmmsg+0x10/0x10 [ 1968.645183][T29410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1968.645226][T29410] __x64_sys_recvmmsg+0x198/0x250 [ 1968.645259][T29410] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1968.645301][T29410] do_syscall_64+0xe2/0xf80 [ 1968.645324][T29410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.645345][T29410] ? trace_irq_disable+0x37/0x100 [ 1968.645366][T29410] ? clear_bhb_loop+0x60/0xb0 [ 1968.645391][T29410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.645411][T29410] RIP: 0033:0x7f6ee199aeb9 [ 1968.645430][T29410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1968.645449][T29410] RSP: 002b:00007f6ee2862028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1968.645472][T29410] RAX: ffffffffffffffda RBX: 00007f6ee1c15fa0 RCX: 00007f6ee199aeb9 [ 1968.645489][T29410] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1968.645503][T29410] RBP: 00007f6ee2862090 R08: 0000000000000000 R09: 0000000000000000 [ 1968.645517][T29410] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1968.645530][T29410] R13: 00007f6ee1c16038 R14: 00007f6ee1c15fa0 R15: 00007f6ee1d3fa48 [ 1968.645574][T29410] [ 1968.724837][T29416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.879563][T29416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.516498][T29429] FAULT_INJECTION: forcing a failure. [ 1969.516498][T29429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.529817][T29429] CPU: 1 UID: 0 PID: 29429 Comm: syz.0.6297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1969.529851][T29429] Tainted: [L]=SOFTLOCKUP [ 1969.529859][T29429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1969.529873][T29429] Call Trace: [ 1969.529883][T29429] [ 1969.529893][T29429] dump_stack_lvl+0xe8/0x150 [ 1969.529926][T29429] should_fail_ex+0x412/0x560 [ 1969.529958][T29429] _copy_from_iter+0x1d3/0x1670 [ 1969.529995][T29429] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1969.530032][T29429] ? __pfx__copy_from_iter+0x10/0x10 [ 1969.530062][T29429] ? __build_skb_around+0x22d/0x3c0 [ 1969.530092][T29429] ? __alloc_skb+0x193/0x390 [ 1969.530117][T29429] ? netlink_sendmsg+0x650/0xb40 [ 1969.530139][T29429] ? skb_put+0x11b/0x210 [ 1969.530169][T29429] netlink_sendmsg+0x6c0/0xb40 [ 1969.530202][T29429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.530229][T29429] ? aa_file_perm+0x12d/0x1630 [ 1969.530257][T29429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1969.530285][T29429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1969.530311][T29429] sock_write_iter+0x503/0x550 [ 1969.530347][T29429] ? __pfx_sock_write_iter+0x10/0x10 [ 1969.530402][T29429] do_iter_readv_writev+0x619/0x8c0 [ 1969.530427][T29429] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1969.530461][T29429] ? bpf_lsm_file_permission+0x9/0x20 [ 1969.530486][T29429] ? security_file_permission+0x75/0x260 [ 1969.530510][T29429] ? rw_verify_area+0x255/0x4d0 [ 1969.530544][T29429] vfs_writev+0x33c/0x990 [ 1969.530578][T29429] ? __pfx_vfs_writev+0x10/0x10 [ 1969.530618][T29429] ? __fget_files+0x2a/0x420 [ 1969.530647][T29429] ? __fget_files+0x3a0/0x420 [ 1969.530670][T29429] ? __fget_files+0x2a/0x420 [ 1969.530703][T29429] do_writev+0x154/0x2e0 [ 1969.530729][T29429] ? __pfx_do_writev+0x10/0x10 [ 1969.530766][T29429] do_syscall_64+0xe2/0xf80 [ 1969.530790][T29429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.530811][T29429] ? trace_irq_disable+0x37/0x100 [ 1969.530832][T29429] ? clear_bhb_loop+0x60/0xb0 [ 1969.530857][T29429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.530878][T29429] RIP: 0033:0x7fb5a919aeb9 [ 1969.530897][T29429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1969.530915][T29429] RSP: 002b:00007fb5a73f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1969.530938][T29429] RAX: ffffffffffffffda RBX: 00007fb5a9416180 RCX: 00007fb5a919aeb9 [ 1969.530953][T29429] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000a [ 1969.530966][T29429] RBP: 00007fb5a73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1969.530980][T29429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.530992][T29429] R13: 00007fb5a9416218 R14: 00007fb5a9416180 R15: 00007fb5a953fa48 [ 1969.531027][T29429] [ 1970.153097][T29431] forcing mempool usage for bio_alloc_bioset+0x336/0x14e0 [ 1970.489939][T29438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.500354][T29438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.673265][T29451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6300'. [ 1973.263266][T29463] FAULT_INJECTION: forcing a failure. [ 1973.263266][T29463] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.324282][T29463] CPU: 1 UID: 0 PID: 29463 Comm: syz.3.6303 Tainted: G L syzkaller #0 PREEMPT(full) [ 1973.324318][T29463] Tainted: [L]=SOFTLOCKUP [ 1973.324327][T29463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1973.324341][T29463] Call Trace: [ 1973.324350][T29463] [ 1973.324360][T29463] dump_stack_lvl+0xe8/0x150 [ 1973.324395][T29463] should_fail_ex+0x412/0x560 [ 1973.324428][T29463] should_failslab+0xa8/0x100 [ 1973.324456][T29463] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1973.324487][T29463] ? __netlink_lookup+0xc6/0x8b0 [ 1973.324511][T29463] ? skb_clone+0x212/0x3a0 [ 1973.324544][T29463] skb_clone+0x212/0x3a0 [ 1973.324578][T29463] __netlink_deliver_tap+0x404/0x850 [ 1973.324613][T29463] ? netlink_deliver_tap+0x2e/0x1b0 [ 1973.324639][T29463] netlink_deliver_tap+0x19c/0x1b0 [ 1973.324664][T29463] netlink_unicast+0x7e3/0x9b0 [ 1973.324705][T29463] ? __pfx_netlink_unicast+0x10/0x10 [ 1973.324736][T29463] ? __alloc_skb+0x193/0x390 [ 1973.324762][T29463] ? netlink_sendmsg+0x650/0xb40 [ 1973.324784][T29463] ? skb_put+0x11b/0x210 [ 1973.324822][T29463] netlink_sendmsg+0x813/0xb40 [ 1973.324966][T29463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1973.325007][T29463] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1973.325037][T29463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1973.325063][T29463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1973.325087][T29463] ____sys_sendmsg+0xa68/0xad0 [ 1973.325117][T29463] ? __might_fault+0xaf/0x130 [ 1973.325152][T29463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1973.325190][T29463] ? import_iovec+0x73/0xa0 [ 1973.325225][T29463] ___sys_sendmsg+0x2a5/0x360 [ 1973.325252][T29463] ? __lock_acquire+0x6b5/0x2cf0 [ 1973.325287][T29463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1973.325349][T29463] ? __fget_files+0x2a/0x420 [ 1973.325372][T29463] ? __fget_files+0x3a0/0x420 [ 1973.325406][T29463] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1973.325438][T29463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1973.325479][T29463] ? __pfx_ksys_write+0x10/0x10 [ 1973.325523][T29463] do_syscall_64+0xe2/0xf80 [ 1973.325548][T29463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.325568][T29463] ? trace_irq_disable+0x37/0x100 [ 1973.325588][T29463] ? clear_bhb_loop+0x60/0xb0 [ 1973.325615][T29463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.325636][T29463] RIP: 0033:0x7f865219aeb9 [ 1973.325663][T29463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1973.325677][T29463] RSP: 002b:00007f8652f9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1973.325713][T29463] RAX: ffffffffffffffda RBX: 00007f8652415fa0 RCX: 00007f865219aeb9 [ 1973.325726][T29463] RDX: 0000000024044080 RSI: 0000200000000240 RDI: 0000000000000003 [ 1973.325736][T29463] RBP: 00007f8652f9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1973.325747][T29463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1973.325756][T29463] R13: 00007f8652416038 R14: 00007f8652415fa0 R15: 00007f865253fa48 [ 1973.325783][T29463] [ 1973.787482][T29470] trusted_key: encrypted_key: key user:syz not found [ 1973.789654][T29470] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1974.487717][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6309'. [ 1975.472323][T29497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1975.661698][T29501] xt_NFQUEUE: number of total queues is 0 [ 1975.675729][T29501] FAULT_INJECTION: forcing a failure. [ 1975.675729][T29501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1975.723191][T29501] CPU: 1 UID: 0 PID: 29501 Comm: syz.0.6314 Tainted: G L syzkaller #0 PREEMPT(full) [ 1975.723242][T29501] Tainted: [L]=SOFTLOCKUP [ 1975.723251][T29501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1975.723264][T29501] Call Trace: [ 1975.723274][T29501] [ 1975.723284][T29501] dump_stack_lvl+0xe8/0x150 [ 1975.723322][T29501] should_fail_ex+0x412/0x560 [ 1975.723357][T29501] _copy_to_user+0x31/0xb0 [ 1975.723382][T29501] simple_read_from_buffer+0xe1/0x170 [ 1975.723402][T29501] proc_fail_nth_read+0x1bb/0x230 [ 1975.723431][T29501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1975.723456][T29501] ? rw_verify_area+0x2a6/0x4d0 [ 1975.723478][T29501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1975.723501][T29501] vfs_read+0x20c/0xa70 [ 1975.723521][T29501] ? fdget_pos+0x246/0x320 [ 1975.723541][T29501] ? __pfx___mutex_lock+0x10/0x10 [ 1975.723559][T29501] ? __pfx_vfs_read+0x10/0x10 [ 1975.723581][T29501] ? __fget_files+0x2a/0x420 [ 1975.723601][T29501] ? __fget_files+0x3a0/0x420 [ 1975.723616][T29501] ? __fget_files+0x2a/0x420 [ 1975.723638][T29501] ksys_read+0x150/0x270 [ 1975.723661][T29501] ? __pfx_ksys_read+0x10/0x10 [ 1975.723691][T29501] do_syscall_64+0xe2/0xf80 [ 1975.723713][T29501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.723727][T29501] ? trace_irq_disable+0x37/0x100 [ 1975.723742][T29501] ? clear_bhb_loop+0x60/0xb0 [ 1975.723761][T29501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.723775][T29501] RIP: 0033:0x7fb5a915b78e [ 1975.723789][T29501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1975.723801][T29501] RSP: 002b:00007fb5a9f90fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1975.723817][T29501] RAX: ffffffffffffffda RBX: 00007fb5a9f916c0 RCX: 00007fb5a915b78e [ 1975.723828][T29501] RDX: 000000000000000f RSI: 00007fb5a9f910a0 RDI: 0000000000000004 [ 1975.723837][T29501] RBP: 00007fb5a9f91090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.723846][T29501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.723855][T29501] R13: 00007fb5a9416038 R14: 00007fb5a9415fa0 R15: 00007fb5a953fa48 [ 1975.723878][T29501] [ 1976.331869][T29504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.356283][T29504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.448152][T29506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6316'. [ 1977.130449][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1977.659818][T29538] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1977.675680][T29538] bond7 (unregistering): Released all slaves [ 1978.244592][T29546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6327'. [ 1978.374228][T29548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.424606][T29548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1978.538730][T29551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6328'. [ 1978.591317][T29551] FAULT_INJECTION: forcing a failure. [ 1978.591317][T29551] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.618767][T29553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.638369][T29551] CPU: 0 UID: 0 PID: 29551 Comm: syz.4.6328 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.638406][T29551] Tainted: [L]=SOFTLOCKUP [ 1978.638414][T29551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1978.638427][T29551] Call Trace: [ 1978.638436][T29551] [ 1978.638446][T29551] dump_stack_lvl+0xe8/0x150 [ 1978.638480][T29551] should_fail_ex+0x412/0x560 [ 1978.638512][T29551] should_failslab+0xa8/0x100 [ 1978.638538][T29551] __kmalloc_cache_noprof+0x83/0x6e0 [ 1978.638558][T29551] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1978.638582][T29551] ? sctp_add_bind_addr+0x8c/0x370 [ 1978.638608][T29551] sctp_add_bind_addr+0x8c/0x370 [ 1978.638635][T29551] sctp_copy_local_addr_list+0x314/0x4f0 [ 1978.638661][T29551] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1978.638691][T29551] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1978.638715][T29551] ? sctp_v6_is_any+0x64/0x80 [ 1978.638739][T29551] ? sctp_copy_one_addr+0x93/0x360 [ 1978.638765][T29551] sctp_bind_addr_copy+0xb3/0x3c0 [ 1978.638787][T29551] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1978.638821][T29551] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1978.638849][T29551] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1978.638875][T29551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1978.638900][T29551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1978.638924][T29551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1978.638953][T29551] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 1978.638982][T29551] __sctp_connect+0x5cb/0xdc0 [ 1978.639019][T29551] ? __pfx___sctp_connect+0x10/0x10 [ 1978.639043][T29551] ? __local_bh_enable_ip+0xd0/0x130 [ 1978.639064][T29551] sctp_inet_connect+0x12e/0x210 [ 1978.639086][T29551] __sys_connect+0x312/0x450 [ 1978.639109][T29551] ? __pfx___sys_connect+0x10/0x10 [ 1978.639139][T29551] ? __pfx_ksys_write+0x10/0x10 [ 1978.639170][T29551] __x64_sys_connect+0x7a/0x90 [ 1978.639191][T29551] do_syscall_64+0xe2/0xf80 [ 1978.639211][T29551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.639227][T29551] ? trace_irq_disable+0x37/0x100 [ 1978.639244][T29551] ? clear_bhb_loop+0x60/0xb0 [ 1978.639264][T29551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.639280][T29551] RIP: 0033:0x7f380bb9aeb9 [ 1978.639296][T29551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.639312][T29551] RSP: 002b:00007f380cac8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1978.639331][T29551] RAX: ffffffffffffffda RBX: 00007f380be15fa0 RCX: 00007f380bb9aeb9 [ 1978.639343][T29551] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 1978.639355][T29551] RBP: 00007f380cac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.639366][T29551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1978.639376][T29551] R13: 00007f380be16038 R14: 00007f380be15fa0 R15: 00007f380bf3fa48 [ 1978.639402][T29551] [ 1978.969400][T29553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.311053][T29558] Invalid logical block size (6) [ 1979.412512][T29558] [ 1979.414896][T29558] ====================================================== [ 1979.421934][T29558] WARNING: possible circular locking dependency detected [ 1979.429009][T29558] syzkaller #0 Tainted: G L [ 1979.435012][T29558] ------------------------------------------------------ [ 1979.442052][T29558] syz.2.6332/29558 is trying to acquire lock: [ 1979.448137][T29558] ffff88801cab0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1979.458751][T29558] [ 1979.458751][T29558] but task is already holding lock: [ 1979.466138][T29558] ffff888024a44ca0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1979.476113][T29558] [ 1979.476113][T29558] which lock already depends on the new lock. [ 1979.476113][T29558] [ 1979.486643][T29558] [ 1979.486643][T29558] the existing dependency chain (in reverse order) is: [ 1979.495818][T29558] [ 1979.495818][T29558] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 1979.504650][T29558] blk_alloc_queue+0x52f/0x610 [ 1979.510069][T29558] __blk_mq_alloc_disk+0x197/0x390 [ 1979.515740][T29558] loop_add+0x482/0xb40 [ 1979.520532][T29558] loop_init+0xd9/0x170 [ 1979.525253][T29558] do_one_initcall+0x250/0x840 [ 1979.530936][T29558] do_initcall_level+0x104/0x190 [ 1979.536453][T29558] do_initcalls+0x59/0xa0 [ 1979.541349][T29558] kernel_init_freeable+0x2a6/0x3d0 [ 1979.547107][T29558] kernel_init+0x1d/0x1d0 [ 1979.551989][T29558] ret_from_fork+0x51b/0xa40 [ 1979.557130][T29558] ret_from_fork_asm+0x1a/0x30 [ 1979.562444][T29558] [ 1979.562444][T29558] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1979.569699][T29558] fs_reclaim_acquire+0x71/0x100 [ 1979.575189][T29558] kmem_cache_alloc_noprof+0x45/0x6e0 [ 1979.581106][T29558] __kernfs_iattrs+0xdf/0x340 [ 1979.586332][T29558] kernfs_iop_setattr+0xea/0x3f0 [ 1979.591821][T29558] notify_change+0xc1a/0xf40 [ 1979.596963][T29558] do_truncate+0x1c2/0x250 [ 1979.601929][T29558] path_openat+0x360c/0x3e20 [ 1979.607085][T29558] do_filp_open+0x22d/0x490 [ 1979.612178][T29558] do_sys_openat2+0x12f/0x220 [ 1979.617517][T29558] __x64_sys_openat+0x138/0x170 [ 1979.622923][T29558] do_syscall_64+0xe2/0xf80 [ 1979.627978][T29558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.634503][T29558] [ 1979.634503][T29558] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1979.643048][T29558] __lock_acquire+0x15a5/0x2cf0 [ 1979.648459][T29558] lock_acquire+0x106/0x330 [ 1979.653520][T29558] down_read+0x47/0x2e0 [ 1979.658233][T29558] kernfs_iop_getattr+0x9e/0x450 [ 1979.663728][T29558] vfs_getattr_nosec+0x2e1/0x430 [ 1979.669221][T29558] loop_assign_backing_file+0x27a/0x4b0 [ 1979.675328][T29558] lo_ioctl+0x1acb/0x1fb0 [ 1979.680203][T29558] blkdev_ioctl+0x5e3/0x740 [ 1979.685251][T29558] __se_sys_ioctl+0xfc/0x170 [ 1979.690387][T29558] do_syscall_64+0xe2/0xf80 [ 1979.695441][T29558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.701921][T29558] [ 1979.701921][T29558] other info that might help us debug this: [ 1979.701921][T29558] [ 1979.712170][T29558] Chain exists of: [ 1979.712170][T29558] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 1979.712170][T29558] [ 1979.726633][T29558] Possible unsafe locking scenario: [ 1979.726633][T29558] [ 1979.734106][T29558] CPU0 CPU1 [ 1979.739507][T29558] ---- ---- [ 1979.744906][T29558] lock(&q->q_usage_counter(io)#22); [ 1979.750315][T29558] lock(fs_reclaim); [ 1979.756848][T29558] lock(&q->q_usage_counter(io)#22); [ 1979.764763][T29558] rlock(&root->kernfs_iattr_rwsem); [ 1979.770165][T29558] [ 1979.770165][T29558] *** DEADLOCK *** [ 1979.770165][T29558] [ 1979.778328][T29558] 3 locks held by syz.2.6332/29558: [ 1979.783545][T29558] #0: ffff888142b86448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 1979.792643][T29558] #1: ffff888024a44ca0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1979.802971][T29558] #2: ffff888024a44cd8 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1979.813397][T29558] [ 1979.813397][T29558] stack backtrace: [ 1979.819318][T29558] CPU: 1 UID: 0 PID: 29558 Comm: syz.2.6332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.819345][T29558] Tainted: [L]=SOFTLOCKUP [ 1979.819352][T29558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1979.819366][T29558] Call Trace: [ 1979.819374][T29558] [ 1979.819381][T29558] dump_stack_lvl+0xe8/0x150 [ 1979.819407][T29558] print_circular_bug+0x2e1/0x300 [ 1979.819427][T29558] check_noncircular+0x12e/0x150 [ 1979.819447][T29558] __lock_acquire+0x15a5/0x2cf0 [ 1979.819480][T29558] ? kernfs_iop_getattr+0x9e/0x450 [ 1979.819504][T29558] lock_acquire+0x106/0x330 [ 1979.819526][T29558] ? kernfs_iop_getattr+0x9e/0x450 [ 1979.819554][T29558] down_read+0x47/0x2e0 [ 1979.819574][T29558] ? kernfs_iop_getattr+0x9e/0x450 [ 1979.819598][T29558] kernfs_iop_getattr+0x9e/0x450 [ 1979.819629][T29558] vfs_getattr_nosec+0x2e1/0x430 [ 1979.819650][T29558] loop_assign_backing_file+0x27a/0x4b0 [ 1979.819674][T29558] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1979.819708][T29558] lo_ioctl+0x1acb/0x1fb0 [ 1979.819730][T29558] ? __pfx_lo_ioctl+0x10/0x10 [ 1979.819751][T29558] ? do_raw_spin_unlock+0xf5/0x210 [ 1979.819772][T29558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1979.819790][T29558] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.819815][T29558] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.819841][T29558] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.819865][T29558] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.819890][T29558] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.819913][T29558] ? __lock_acquire+0x6b5/0x2cf0 [ 1979.819939][T29558] ? unwind_next_frame+0xa5/0x23c0 [ 1979.819960][T29558] ? unwind_next_frame+0xa5/0x23c0 [ 1979.819978][T29558] ? is_bpf_text_address+0x26/0x2b0 [ 1979.820001][T29558] ? is_bpf_text_address+0x26/0x2b0 [ 1979.820021][T29558] ? is_bpf_text_address+0x292/0x2b0 [ 1979.820039][T29558] ? is_bpf_text_address+0x26/0x2b0 [ 1979.820058][T29558] ? kernel_text_address+0xa5/0xe0 [ 1979.820079][T29558] ? __kernel_text_address+0xd/0x30 [ 1979.820099][T29558] ? unwind_get_return_address+0x4d/0x90 [ 1979.820117][T29558] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1979.820155][T29558] ? arch_stack_walk+0xfb/0x150 [ 1979.820176][T29558] ? stack_trace_save+0xa9/0x100 [ 1979.820196][T29558] ? __pfx_stack_trace_save+0x10/0x10 [ 1979.820216][T29558] ? stack_depot_save_flags+0x33/0x810 [ 1979.820239][T29558] ? kasan_save_track+0x4f/0x80 [ 1979.820254][T29558] ? kasan_save_track+0x3e/0x80 [ 1979.820268][T29558] ? kasan_save_free_info+0x46/0x50 [ 1979.820289][T29558] ? __kasan_slab_free+0x5c/0x80 [ 1979.820303][T29558] ? kfree+0x1be/0x650 [ 1979.820325][T29558] ? tomoyo_path_number_perm+0x501/0x630 [ 1979.820342][T29558] ? security_file_ioctl+0xc3/0x2a0 [ 1979.820359][T29558] ? __se_sys_ioctl+0x47/0x170 [ 1979.820381][T29558] ? do_syscall_64+0xe2/0xf80 [ 1979.820398][T29558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.820416][T29558] ? __asan_memset+0x22/0x50 [ 1979.820439][T29558] ? blk_get_meta_cap+0x16d/0x7a0 [ 1979.820458][T29558] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1979.820478][T29558] ? blkdev_common_ioctl+0x14b7/0x3250 [ 1979.820500][T29558] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1979.820520][T29558] ? kasan_quarantine_put+0xbb/0x1f0 [ 1979.820548][T29558] ? tomoyo_path_number_perm+0x219/0x630 [ 1979.820566][T29558] ? tomoyo_path_number_perm+0x219/0x630 [ 1979.820585][T29558] ? do_vfs_ioctl+0x1166/0x1530 [ 1979.820613][T29558] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1979.820641][T29558] ? do_futex+0x333/0x420 [ 1979.820670][T29558] ? __pfx_lo_ioctl+0x10/0x10 [ 1979.820689][T29558] blkdev_ioctl+0x5e3/0x740 [ 1979.820709][T29558] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1979.820727][T29558] ? __fget_files+0x2a/0x420 [ 1979.820745][T29558] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1979.820765][T29558] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1979.820784][T29558] __se_sys_ioctl+0xfc/0x170 [ 1979.820808][T29558] do_syscall_64+0xe2/0xf80 [ 1979.820824][T29558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.820841][T29558] ? trace_irq_disable+0x37/0x100 [ 1979.820857][T29558] ? clear_bhb_loop+0x60/0xb0 [ 1979.820874][T29558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.820891][T29558] RIP: 0033:0x7f5930b9aeb9 [ 1979.820907][T29558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1979.820922][T29558] RSP: 002b:00007f5931a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1979.820942][T29558] RAX: ffffffffffffffda RBX: 00007f5930e15fa0 RCX: 00007f5930b9aeb9 [ 1979.820954][T29558] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1979.820965][T29558] RBP: 00007f5930c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1979.820977][T29558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1979.820987][T29558] R13: 00007f5930e16038 R14: 00007f5930e15fa0 R15: 00007f5930f3fa48 [ 1979.821007][T29558] [ 1980.438369][T29566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.547891][T29566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.572111][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1980.583584][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1980.594333][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1980.603933][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1980.613693][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1980.661819][T29568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.709928][T29568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.261339][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.267722][ T1302] ieee802154 phy1 wpan1: encryption failed: -22