last executing test programs: 10.17644217s ago: executing program 0 (id=344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a0104000000000000000001"], 0xec}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0xff95) write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = syz_open_dev$video4linux(&(0x7f0000001e00), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3013, 0x0, 0x0, 0x0, 0xffff}) syz_fuse_handle_req(r4, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffffe}, 0x0}) ioctl$FS_IOC_RESVSP(r5, 0x40086602, &(0x7f0000002740)={0xda}) 9.71630366s ago: executing program 0 (id=347): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000040)="240000001a005f3814f9dc07000904018000200000200000000000000800080040000000", 0x24) socket$igmp(0x2, 0x3, 0x2) r1 = syz_io_uring_setup(0xaf3, &(0x7f0000000080)={0x0, 0xb528, 0x10300}, &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) get_mempolicy(0x0, 0x0, 0x10001, &(0x7f0000297000/0x4000)=nil, 0x3) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x1}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r1, 0xc1, 0x0, 0x0, 0x0, 0x0) 7.709443047s ago: executing program 2 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x0, 0x88, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cdf06b66a3ca343e29e347dc236a000300000000b49b87", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) 7.439353084s ago: executing program 2 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 7.210027414s ago: executing program 2 (id=365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xc01, 0x0) write$FUSE_WRITE(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0100001a0013070000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000002000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x311101) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x108, 0x10, 0x1, 0x70bd28, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xadb}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_VFINFO_LIST={0xd4, 0x16, 0x0, 0x1, [{0x4}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x7fffff2a}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x0, 0x6}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8001, 0x283, 0x200, 0x8100}}, {0x14, 0x1, {0x8, 0x221, 0x1}}, {0x14, 0x1, {0x18c, 0xc66, 0x4, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xa9b, 0x7, 0x8100}}, {0x14, 0x1, {0xff, 0x207, 0xffffff66, 0x88a8}}, {0x14, 0x1, {0xcaf6, 0x3dc, 0x83, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0xd55, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xb2d, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7ff, 0x4}}]}]}]}, 0x108}}, 0x0) 6.873291075s ago: executing program 2 (id=367): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x91, 0x6}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x8e0, 0x2c, 0xd27, 0x70bd34, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8b0, 0x2, [@TCA_ROUTE4_POLICE={0x7e9, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x0, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x803, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x4, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x2, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x4, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x2, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x10003, 0x2, 0x0, 0x200, 0x8, 0x9, 0x34b, 0x2, 0x80, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0x1, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x5849, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x8, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x2, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x1000, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0xfffffffe, 0x8, 0x0, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x40000001, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7fd, 0x2, 0x400, 0x1, 0x400000, 0x96d3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0xfffffffd, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10010000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x1, 0x8, 0xd675, 0xf, 0x8, 0x8002, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0x6, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0xa, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0xffffffff, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x400, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf5, 0xd8fb, 0x9, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x5, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x40000002, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0x3, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd27}, @TCA_POLICE_TBF={0x3c, 0x1, {0xead0, 0x1, 0x5, 0x8, 0x6, {0x88, 0x0, 0x5, 0xd, 0x4, 0x9}, {0x5, 0x2, 0x6, 0xfff8, 0x2, 0x4}, 0x332d, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe0db}]}]}}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.568525629s ago: executing program 4 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) 6.525374158s ago: executing program 0 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2) shutdown(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000004004045507000000000001090224"], 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.52408874s ago: executing program 1 (id=372): syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) epoll_create1(0x80000) r1 = semget$private(0x0, 0x4, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x400, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28c702, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8f", 0xa3}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x4, 0x54fc, &(0x7f00000000c0)="52d0b1777a73c2737c1082280509005a3ac907078e280e702e0b54a9215d895eff280d0cfbca9ba6f9f24c03fbeb8488de"}) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r5, &(0x7f00000003c0)='io.weight\x00', 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000002240), 0x80) semctl$SETALL(r1, 0x0, 0x11, 0x0) 6.330386714s ago: executing program 4 (id=373): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400", 0x2000}, 0x3c) 5.948664493s ago: executing program 4 (id=374): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7438}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) sendto(r6, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x2a, 0x5, 0xffff0001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x208}, 0x40000) 5.474810217s ago: executing program 1 (id=376): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000025c0), 0x300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f0000000000)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) faccessat2(0xffffffffffffff9c, 0x0, 0x5f, 0x1100) 5.189584761s ago: executing program 3 (id=377): mkdirat(0xffffffffffffff9c, 0x0, 0xe0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "1cdf651ae755736f6ab4293a6b27f980a9653a6b966b92300c74da83ed313b4c2713bfb11e23bd24dc8f4050d0852419ced3a5ea7776d5ff08c163729878500e7a9a79192b1dbdfc27576676d5bed821c257a94b0cef6b63a9755c36359357a566b8fc728c0616892c8519cb1338dc2c769104a927b3d3bc21a4f857df0c65db1a5380a33023146e3479141968068187f74c1382"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf742}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x608}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xe9\xbc/{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0f8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x19c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd98}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x99ec}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!@%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'^][%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ')\'\xbb\a-%!]^-+%$(\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!-!\\\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7507}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'io\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8a}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "bbd9f08f69e60cfc85329c923fd35e14be002e8b44153b068aef81d1856e3b04d8700377c2e1b529400c855339c374845e88b7af8291ba713720631717beb49e92af6d6127ccb21fe10b28cff4d46bf0a2597b626e928d9b76293c462e00d200bf53ad24fc8b70f37497b4cd926eda"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x891) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) listen(0xffffffffffffffff, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100)) socket$igmp(0x2, 0x3, 0x2) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 5.012473608s ago: executing program 4 (id=378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x8001, 0x1b, 0x6, 0x80}, {0x0, 0xb, 0x1, 0x8}, {0x8000, 0x6, 0x0, 0x4}, {0x1, 0x9, 0x5, 0x9}, {0x8, 0x15, 0xff, 0x8}, {0xf1bc, 0x1f, 0xfd, 0x5}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="200549"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, 0x0, 0x5f, 0x1100) 4.705968023s ago: executing program 1 (id=379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x2, 0x1, 0x1, "feba1de8a07b4bc8fbd9f4d9c3b000e65ea90ba57feceb9f2b9224a3a32796e8", 0x41414270}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1102000000000000000001000000280001801400040000000000000000000000ffffac1414aa0800060001000000060001000a000000209a1984de0ef537d74c47efd314a7b45ab8d583435f3716188651d0365d17010a568cab007d27861b48c3332de48dfacb5d2a893f361a1c1469"], 0x3c}}, 0x0) 4.052374849s ago: executing program 1 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x0, 0x88, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cdf06b66a3ca343e29e347dc236a000000000000b49b87", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) 3.826853768s ago: executing program 0 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x0, 0x88, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cdf06b66a3ca343e29e347dc236a004000000000b49b87", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) 1.664993439s ago: executing program 4 (id=382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r0 = syz_io_uring_setup(0x496, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x6000, @fd_index, 0xf, &(0x7f0000000bc0), 0x0, 0x2}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x9000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0xa, &(0x7f00000001c0)='1\x00\x00\x00', 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) r4 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000100)={0x1}) 1.648278528s ago: executing program 0 (id=383): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="03de", 0x2) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) 1.43344441s ago: executing program 2 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x6, 0x5, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES16=r6, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRESHEX], 0x48) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) openat$fb0(0xffffffffffffff9c, 0x0, 0x20800, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0xb512, 0x40, 0x0, 0x1f}) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) listen(r3, 0x3) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r3, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) openat$sequencer2(0xffffff9c, &(0x7f00000018c0), 0x200, 0x0) 1.240176386s ago: executing program 1 (id=385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x50}, {&(0x7f0000000280)=""/96, 0x60}], 0x2}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x40800) 986.839456ms ago: executing program 3 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800fae3ffffffffff181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x3c, r1, 0x401, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x14004000) 732.542202ms ago: executing program 3 (id=387): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018310000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000041b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 572.622366ms ago: executing program 3 (id=388): r0 = syz_io_uring_setup(0xaf3, &(0x7f0000000080)={0x0, 0xb528, 0x10300}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x1}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0xc1, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 489.486964ms ago: executing program 3 (id=389): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffd) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000003c0)) 346.084032ms ago: executing program 4 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_timeval(r2, 0x1, 0x48, 0x0, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e1e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000040)={0x1d, r11}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) 313.5993ms ago: executing program 2 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2) shutdown(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000004004045507000000000001090224"], 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 205.190675ms ago: executing program 3 (id=392): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7438}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) sendto(r6, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x2a, 0x5, 0xffff0001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x208}, 0x40000) 184.945557ms ago: executing program 1 (id=393): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0xd, 0x4000ffc, 0x2004a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) setrlimit(0x8, &(0x7f00000010c0)={0x0, 0x7fffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x23) dup3(r4, r3, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002220000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 0s ago: executing program 0 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) kernel console output (not intermixed with test programs): _0 added [ 87.106794][ T5846] team0: Port device team_slave_0 added [ 87.117564][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.120108][ T5842] Bluetooth: hci3: command tx timeout [ 87.126771][ T5840] Bluetooth: hci1: command tx timeout [ 87.132480][ T5836] Bluetooth: hci4: command tx timeout [ 87.141421][ T5847] team0: Port device team_slave_0 added [ 87.143748][ T5838] Bluetooth: hci2: command tx timeout [ 87.194319][ T5848] team0: Port device team_slave_1 added [ 87.204071][ T5846] team0: Port device team_slave_1 added [ 87.212928][ T5847] team0: Port device team_slave_1 added [ 87.262744][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.269736][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.297447][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.375816][ T5850] team0: Port device team_slave_0 added [ 87.382401][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.389465][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.415557][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.450780][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.457771][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.484388][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.498541][ T5850] team0: Port device team_slave_1 added [ 87.512204][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.519436][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.546372][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.558724][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.566013][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.592831][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.605612][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.613592][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.640634][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.667788][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.674842][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.701427][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.713268][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.720920][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.748354][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.801458][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.808593][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.835490][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.875117][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.882229][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.909181][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.936263][ T5849] hsr_slave_0: entered promiscuous mode [ 87.942933][ T5849] hsr_slave_1: entered promiscuous mode [ 88.031634][ T5848] hsr_slave_0: entered promiscuous mode [ 88.038149][ T5848] hsr_slave_1: entered promiscuous mode [ 88.045413][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 88.051435][ T5848] Cannot create hsr debugfs directory [ 88.076504][ T5847] hsr_slave_0: entered promiscuous mode [ 88.083515][ T5847] hsr_slave_1: entered promiscuous mode [ 88.090307][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 88.096173][ T5847] Cannot create hsr debugfs directory [ 88.107604][ T5846] hsr_slave_0: entered promiscuous mode [ 88.114432][ T5846] hsr_slave_1: entered promiscuous mode [ 88.120956][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 88.126793][ T5846] Cannot create hsr debugfs directory [ 88.218578][ T5850] hsr_slave_0: entered promiscuous mode [ 88.225553][ T5850] hsr_slave_1: entered promiscuous mode [ 88.233062][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 88.238821][ T5850] Cannot create hsr debugfs directory [ 88.831652][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.845636][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.857412][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.877443][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.948629][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.977521][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.993238][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.015147][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.080559][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.099280][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.120362][ T5838] Bluetooth: hci0: command tx timeout [ 89.129525][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.141903][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.201114][ T5842] Bluetooth: hci4: command tx timeout [ 89.201159][ T5840] Bluetooth: hci3: command tx timeout [ 89.206649][ T5836] Bluetooth: hci1: command tx timeout [ 89.217617][ T5838] Bluetooth: hci2: command tx timeout [ 89.287479][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.312939][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.327130][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.358486][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.418983][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.461517][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.481592][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.503504][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.516463][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.563639][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.595137][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.602564][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.634406][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.660555][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.667729][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.716936][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.736565][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.771349][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.778535][ T4492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.814399][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.824967][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.832236][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.895288][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.902575][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.929762][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.936910][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.995376][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.076971][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.088616][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.102554][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.138183][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.145420][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.176540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.183769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.209198][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.238757][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.245937][ T4033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.278484][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.311257][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.318366][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.394608][ T5849] veth0_vlan: entered promiscuous mode [ 90.408702][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.436574][ T5849] veth1_vlan: entered promiscuous mode [ 90.499803][ T5847] veth0_vlan: entered promiscuous mode [ 90.549760][ T5847] veth1_vlan: entered promiscuous mode [ 90.566270][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.578589][ T5849] veth0_macvtap: entered promiscuous mode [ 90.605774][ T5849] veth1_macvtap: entered promiscuous mode [ 90.635384][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.648762][ T5846] veth0_vlan: entered promiscuous mode [ 90.691413][ T5846] veth1_vlan: entered promiscuous mode [ 90.707404][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.718872][ T5847] veth0_macvtap: entered promiscuous mode [ 90.754075][ T5847] veth1_macvtap: entered promiscuous mode [ 90.764891][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.781611][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.809586][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.819673][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.840567][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.887699][ T5848] veth0_vlan: entered promiscuous mode [ 90.924669][ T5846] veth0_macvtap: entered promiscuous mode [ 90.934670][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.945683][ T5848] veth1_vlan: entered promiscuous mode [ 90.981404][ T5846] veth1_macvtap: entered promiscuous mode [ 90.993086][ T5850] veth0_vlan: entered promiscuous mode [ 91.016835][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.061996][ T4033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.071338][ T4033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.094473][ T4033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.103765][ T4033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.114667][ T5850] veth1_vlan: entered promiscuous mode [ 91.127142][ T4033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.142109][ T4033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.173760][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.200417][ T5838] Bluetooth: hci0: command tx timeout [ 91.219073][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.228326][ T5848] veth0_macvtap: entered promiscuous mode [ 91.253222][ T5848] veth1_macvtap: entered promiscuous mode [ 91.277129][ T5850] veth0_macvtap: entered promiscuous mode [ 91.283162][ T5838] Bluetooth: hci2: command tx timeout [ 91.284479][ T5836] Bluetooth: hci1: command tx timeout [ 91.288575][ T5840] Bluetooth: hci4: command tx timeout [ 91.294573][ T5842] Bluetooth: hci3: command tx timeout [ 91.313612][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.315679][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.331244][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.333448][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354848][ T5850] veth1_macvtap: entered promiscuous mode [ 91.384444][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.393976][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.427424][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.464240][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.471412][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.478746][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.514604][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.617382][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.648052][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.648436][ T5928] FAULT_INJECTION: forcing a failure. [ 91.648436][ T5928] name failslab, interval 1, probability 0, space 0, times 1 [ 91.672999][ T5928] CPU: 1 UID: 0 PID: 5928 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 91.673023][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.673034][ T5928] Call Trace: [ 91.673041][ T5928] [ 91.673050][ T5928] dump_stack_lvl+0x189/0x250 [ 91.673078][ T5928] ? __pfx____ratelimit+0x10/0x10 [ 91.673098][ T5928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.673120][ T5928] ? __pfx__printk+0x10/0x10 [ 91.673154][ T5928] ? __pfx___might_resched+0x10/0x10 [ 91.673180][ T5928] should_fail_ex+0x414/0x560 [ 91.673212][ T5928] should_failslab+0xa8/0x100 [ 91.673235][ T5928] __kmalloc_noprof+0xdf/0x800 [ 91.673251][ T5928] ? bcm_rx_setup+0x62e/0x1970 [ 91.673274][ T5928] bcm_rx_setup+0x62e/0x1970 [ 91.673300][ T5928] bcm_sendmsg+0x255/0x6a0 [ 91.673322][ T5928] ? __pfx_bcm_sendmsg+0x10/0x10 [ 91.673344][ T5928] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 91.673371][ T5928] ? aa_sock_msg_perm+0xf1/0x1b0 [ 91.673396][ T5928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.673415][ T5928] ? __pfx_bcm_sendmsg+0x10/0x10 [ 91.673433][ T5928] __sock_sendmsg+0x21c/0x270 [ 91.673464][ T5928] sock_write_iter+0x279/0x360 [ 91.673491][ T5928] ? __pfx_sock_write_iter+0x10/0x10 [ 91.673527][ T5928] ? bpf_lsm_file_permission+0x9/0x20 [ 91.673546][ T5928] ? security_file_permission+0x75/0x290 [ 91.673565][ T5928] ? rw_verify_area+0x255/0x4d0 [ 91.673581][ T5928] ? import_ubuf+0xfb/0x1d0 [ 91.673607][ T5928] aio_write+0x535/0x7a0 [ 91.673630][ T5928] ? __pfx_aio_write+0x10/0x10 [ 91.673664][ T5928] ? __might_fault+0xb0/0x130 [ 91.673709][ T5928] io_submit_one+0x775/0x1430 [ 91.673745][ T5928] ? __pfx_io_submit_one+0x10/0x10 [ 91.673765][ T5928] ? __might_fault+0xb0/0x130 [ 91.673813][ T5928] ? __might_fault+0xb0/0x130 [ 91.673844][ T5928] __ia32_compat_sys_io_submit+0x1c7/0x360 [ 91.673874][ T5928] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 91.673899][ T5928] ? ksys_write+0x22a/0x250 [ 91.673929][ T5928] ? __do_fast_syscall_32+0xbe/0x590 [ 91.673955][ T5928] __do_fast_syscall_32+0x1f7/0x590 [ 91.673977][ T5928] ? rcu_is_watching+0x15/0xb0 [ 91.673998][ T5928] ? do_fast_syscall_32+0x34/0x80 [ 91.674024][ T5928] do_fast_syscall_32+0x34/0x80 [ 91.674044][ T5928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.674065][ T5928] RIP: 0023:0xf70bd539 [ 91.674082][ T5928] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 91.674096][ T5928] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 91.674116][ T5928] RAX: ffffffffffffffda RBX: 00000000f7fc0000 RCX: 0000000000000001 [ 91.674128][ T5928] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.674138][ T5928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.674150][ T5928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.674159][ T5928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.674190][ T5928] [ 91.677993][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.992364][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.017229][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.026936][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.027827][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.042201][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.074425][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.085219][ T1216] cfg80211: failed to load regulatory.db [ 92.095106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.114500][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.132527][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.177380][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.207378][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.326770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.331107][ T30] audit: type=1326 audit(1766198155.706:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 92.391628][ T30] audit: type=1326 audit(1766198155.746:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 92.400033][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.414168][ T30] audit: type=1326 audit(1766198155.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 92.472790][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.496821][ T30] audit: type=1326 audit(1766198155.746:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 92.540654][ T30] audit: type=1326 audit(1766198155.746:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 92.580820][ T30] audit: type=1326 audit(1766198155.746:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 92.604729][ T30] audit: type=1326 audit(1766198155.746:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 92.627927][ T30] audit: type=1326 audit(1766198155.746:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 92.692097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.760076][ T30] audit: type=1326 audit(1766198155.746:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 92.787294][ T4033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.803211][ T4033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.862511][ T30] audit: type=1326 audit(1766198155.746:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 92.981457][ T4033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.992379][ T4033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.016526][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.035153][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.220719][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.281075][ T5842] Bluetooth: hci0: command tx timeout [ 93.301440][ T4492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.332834][ T4492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.361424][ T5842] Bluetooth: hci3: command tx timeout [ 93.366909][ T5842] Bluetooth: hci1: command tx timeout [ 93.368017][ T5836] Bluetooth: hci4: command tx timeout [ 93.372447][ T5842] Bluetooth: hci2: command tx timeout [ 93.478131][ T5884] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 93.516267][ T5884] usb 1-1: config 0 has no interface number 0 [ 93.583511][ T5884] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 93.660086][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.729207][ T5884] usb 1-1: Product: syz [ 93.758341][ T5884] usb 1-1: Manufacturer: syz [ 93.797901][ T5884] usb 1-1: SerialNumber: syz [ 93.861393][ T5884] usb 1-1: config 0 descriptor?? [ 93.937824][ T5884] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 93.949130][ T5942] syzkaller1: entered promiscuous mode [ 93.970892][ T5942] syzkaller1: entered allmulticast mode [ 93.989716][ T5884] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 94.165060][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.228594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.239522][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.280805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.358039][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.412923][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.501421][ T5952] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 94.578959][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 94.652434][ T5952] ip_vti0: entered allmulticast mode [ 94.688663][ T5884] usb 1-1: USB disconnect, device number 2 [ 94.750197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.838825][ T5952] syzkaller1: entered promiscuous mode [ 94.857149][ T5958] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 94.882774][ T5952] syzkaller1: entered allmulticast mode [ 94.901904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.910777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.919436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.924276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.928321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.944959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.945810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 95.027105][ T5963] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 95.502421][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 95.849767][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 96.019555][ T5976] lo: entered promiscuous mode [ 96.036829][ T5976] tunl0: entered promiscuous mode [ 96.048240][ T5976] gre0: entered promiscuous mode [ 96.180651][ T5976] gretap0: entered promiscuous mode [ 96.201398][ T5976] erspan0: entered promiscuous mode [ 96.215721][ T5976] ip_vti0: entered promiscuous mode [ 96.222260][ T5976] ip_vti0: left allmulticast mode [ 96.237562][ T5976] ip6_vti0: entered promiscuous mode [ 96.269003][ T5976] sit0: entered promiscuous mode [ 96.296607][ T5976] ip6tnl0: entered promiscuous mode [ 96.310218][ T5976] ip6gre0: entered promiscuous mode [ 96.336415][ T5976] syz_tun: entered promiscuous mode [ 96.504471][ T5976] ip6gretap0: entered promiscuous mode [ 96.574008][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.581960][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.627574][ T5976] bridge0: entered promiscuous mode [ 96.667997][ T5938] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.716730][ T5976] vcan0: entered promiscuous mode [ 96.744489][ T5976] bond0: entered promiscuous mode [ 96.756626][ T5976] bond_slave_0: entered promiscuous mode [ 96.763832][ T5976] bond_slave_1: entered promiscuous mode [ 96.814560][ T5976] team0: entered promiscuous mode [ 96.824724][ T5976] team_slave_0: entered promiscuous mode [ 96.831685][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 96.840970][ T5938] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.850376][ T5938] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.859101][ T5938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.878643][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.900918][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.913722][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.939986][ T5938] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.953271][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.974823][ T5938] usb 3-1: config 0 descriptor?? [ 96.995598][ T5976] team_slave_1: entered promiscuous mode [ 97.129249][ T5976] dummy0: entered promiscuous mode [ 97.333588][ T5976] nlmon0: entered promiscuous mode [ 97.341883][ T5976] caif0: entered promiscuous mode [ 97.367759][ T5938] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.387454][ T5976] batadv0: entered promiscuous mode [ 97.423267][ T5976] vxcan0: entered promiscuous mode [ 97.491044][ T5976] vxcan1: entered promiscuous mode [ 97.526930][ T5976] veth0: entered promiscuous mode [ 97.569876][ C0] usblp0: nonzero read bulk status received: -71 [ 97.577238][ T977] usb 3-1: USB disconnect, device number 2 [ 97.589627][ T5976] veth1: entered promiscuous mode [ 97.646845][ T5976] wg0: entered promiscuous mode [ 97.664006][ T5976] wg1: entered promiscuous mode [ 97.691076][ T5976] wg2: entered promiscuous mode [ 97.705763][ T5976] veth0_to_bridge: entered promiscuous mode [ 97.747142][ T5976] veth1_to_bridge: entered promiscuous mode [ 97.802629][ T5976] veth0_to_bond: entered promiscuous mode [ 97.857188][ T5976] veth1_to_bond: entered promiscuous mode [ 97.894812][ T30] kauditd_printk_skb: 952 callbacks suppressed [ 97.894826][ T30] audit: type=1326 audit(1766198161.276:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.2.16" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 97.972678][ T5976] veth0_to_team: entered promiscuous mode [ 98.036155][ T5976] veth1_to_team: entered promiscuous mode [ 98.071589][ T5976] veth0_to_batadv: entered promiscuous mode [ 98.091861][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.100742][ T5976] batadv_slave_0: entered promiscuous mode [ 98.126090][ T5976] veth1_to_batadv: entered promiscuous mode [ 98.135895][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.144789][ T5976] batadv_slave_1: entered promiscuous mode [ 98.157179][ T5976] xfrm0: entered promiscuous mode [ 98.168630][ T5976] veth0_to_hsr: entered promiscuous mode [ 98.180828][ T5976] veth1_to_hsr: entered promiscuous mode [ 98.192663][ T5976] hsr0: entered promiscuous mode [ 98.202958][ T5976] veth1_virt_wifi: entered promiscuous mode [ 98.213270][ T5976] veth0_virt_wifi: entered promiscuous mode [ 98.225385][ T5976] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 98.251458][ T5976] vlan0: entered promiscuous mode [ 98.256955][ T5976] vlan1: entered promiscuous mode [ 98.264805][ T5976] macvlan0: entered promiscuous mode [ 98.276775][ T5976] macvlan1: entered promiscuous mode [ 98.286500][ T5976] ipvlan0: entered promiscuous mode [ 98.293040][ T5976] ipvlan1: entered promiscuous mode [ 98.308398][ T5976] macvtap0: entered promiscuous mode [ 98.317883][ T5976] macsec0: entered promiscuous mode [ 98.330773][ T5976] geneve0: entered promiscuous mode [ 98.341509][ T5976] geneve1: entered promiscuous mode [ 98.353095][ T5976] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 98.366143][ T5976] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 98.379171][ T5976] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 98.391139][ T5976] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 98.414196][ T5976] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 98.434715][ T5976] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 98.788092][ T5992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16'. [ 98.803375][ T5990] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.807549][ T5992] Zero length message leads to an empty skb [ 98.814625][ T5990] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.860490][ T5990] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.897748][ T5990] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.970051][ T6009] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 99.380130][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.530103][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 99.537772][ T5884] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 99.548145][ T5884] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 99.562074][ T5884] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 99.585662][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.596759][ T5884] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 99.618882][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.633032][ T5884] usb 4-1: Product: syz [ 99.641231][ T5884] usb 4-1: Manufacturer: syz [ 99.646944][ T5884] usb 4-1: SerialNumber: syz [ 99.673270][ T5884] usb 4-1: config 0 descriptor?? [ 99.759771][ T6013] syzkaller1: entered promiscuous mode [ 99.778050][ T6013] syzkaller1: entered allmulticast mode [ 99.834717][ T6016] FAULT_INJECTION: forcing a failure. [ 99.834717][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.853546][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 99.853575][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.853586][ T6016] Call Trace: [ 99.853594][ T6016] [ 99.853602][ T6016] dump_stack_lvl+0x189/0x250 [ 99.853635][ T6016] ? __pfx____ratelimit+0x10/0x10 [ 99.853653][ T6016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.853674][ T6016] ? __pfx__printk+0x10/0x10 [ 99.853699][ T6016] ? __might_fault+0xb0/0x130 [ 99.853736][ T6016] should_fail_ex+0x414/0x560 [ 99.853768][ T6016] _copy_from_iter+0x1cd/0x1630 [ 99.853792][ T6016] ? __build_skb_around+0x22d/0x3c0 [ 99.853818][ T6016] ? __pfx__copy_from_iter+0x10/0x10 [ 99.853834][ T6016] ? __alloc_skb+0x2f1/0x430 [ 99.853856][ T6016] ? __pfx___alloc_skb+0x10/0x10 [ 99.853877][ T6016] ? netlink_sendmsg+0x642/0xb30 [ 99.853899][ T6016] ? skb_put+0x11b/0x210 [ 99.853923][ T6016] netlink_sendmsg+0x6b2/0xb30 [ 99.853956][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.853981][ T6016] ? __import_iovec+0x5d4/0x7f0 [ 99.853998][ T6016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 99.854022][ T6016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.854041][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.854066][ T6016] __sock_sendmsg+0x21c/0x270 [ 99.854095][ T6016] ____sys_sendmsg+0x505/0x820 [ 99.854124][ T6016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.854163][ T6016] ? kstrtouint+0x6e/0xe0 [ 99.854197][ T6016] ___sys_sendmsg+0x21f/0x2a0 [ 99.854222][ T6016] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.854252][ T6016] ? rcu_read_lock_any_held+0xb3/0x120 [ 99.854319][ T6016] ? __fget_files+0x2a/0x420 [ 99.854340][ T6016] ? __fget_files+0x3a0/0x420 [ 99.854373][ T6016] __sys_sendmsg+0x164/0x220 [ 99.854398][ T6016] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.854430][ T6016] ? __pfx_ksys_write+0x10/0x10 [ 99.854463][ T6016] ? __do_fast_syscall_32+0xbe/0x590 [ 99.854488][ T6016] __do_fast_syscall_32+0x1f7/0x590 [ 99.854509][ T6016] ? rcu_is_watching+0x15/0xb0 [ 99.854530][ T6016] ? do_fast_syscall_32+0x34/0x80 [ 99.854555][ T6016] do_fast_syscall_32+0x34/0x80 [ 99.854576][ T6016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.854606][ T6016] RIP: 0023:0xf70dd539 [ 99.854630][ T6016] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 99.854644][ T6016] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 99.854664][ T6016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 99.854676][ T6016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.854686][ T6016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.854695][ T6016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.854705][ T6016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.854733][ T6016] [ 100.200773][ T5884] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 100.257295][ T5991] usblp0: removed [ 100.310029][ T5923] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.493222][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.503693][ T5923] usb 2-1: config 0 has no interfaces? [ 100.509265][ T5923] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 100.557750][ T5884] usb 4-1: USB disconnect, device number 2 [ 100.557916][ C1] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 100.609127][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.693925][ T5923] usb 2-1: config 0 descriptor?? [ 100.728253][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 100.933846][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 101.071570][ T5923] IPVS: starting estimator thread 0... [ 101.099380][ T6030] delete_channel: no stack [ 101.140550][ T6030] tipc: Enabling of bearer rejected, failed to enable media [ 101.162443][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 101.184856][ T9] usb 5-1: config 0 has no interface number 0 [ 101.210689][ T6031] IPVS: using max 48 ests per chain, 115200 per kthread [ 101.256637][ T5923] usb 2-1: USB disconnect, device number 2 [ 101.267296][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 101.307628][ T6029] delete_channel: no stack [ 101.344938][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 101.490407][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 101.523437][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.541312][ T9] usb 5-1: Product: syz [ 101.546028][ T9] usb 5-1: Manufacturer: syz [ 101.552160][ T9] usb 5-1: SerialNumber: syz [ 101.582103][ T9] usb 5-1: config 0 descriptor?? [ 101.775406][ T6028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.789413][ T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 102.133281][ T6042] fuse: Unknown parameter '000000000000000000060x0000000000000006' [ 102.139736][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 102.141509][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 102.687194][ T6045] syzkaller0: entered promiscuous mode [ 102.796912][ T6045] syzkaller0: entered allmulticast mode [ 103.640293][ T5970] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.810030][ T5970] usb 2-1: Using ep0 maxpacket: 16 [ 103.851930][ T5970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.882408][ T5970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.913146][ T5923] usb 5-1: USB disconnect, device number 2 [ 103.940069][ T5970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.963069][ T6054] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 103.984260][ T5923] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 103.994579][ T5970] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.016236][ T5970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.030030][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.038243][ T5970] usb 2-1: SerialNumber: syz [ 104.153318][ T5970] hub 2-1:1.0: bad descriptor, ignoring hub [ 104.203554][ T5970] hub 2-1:1.0: probe with driver hub failed with error -5 [ 104.220001][ T5970] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 104.276559][ T6060] trusted_key: syz.0.37 sent an empty control message without MSG_MORE. [ 104.589042][ T6052] raw-gadget.1 gadget.1: fail, usb_ep_set_wedge returned -11 [ 104.605993][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.630543][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.772878][ T5938] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.783559][ T6079] syzkaller1: entered promiscuous mode [ 104.797608][ T6079] syzkaller1: entered allmulticast mode [ 104.843934][ T6052] process 'syz.1.33' launched '/dev/fd/12' with NULL argv: empty string added [ 104.940049][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 104.955474][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.967836][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.982627][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.995999][ T5938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.030405][ T5938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.050450][ T5923] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.050493][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.232880][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.254954][ T5923] usb 5-1: config 0 has no interfaces? [ 105.265131][ T5923] usb 5-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 105.344916][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.419823][ T5938] usb 1-1: GET_CAPABILITIES returned 0 [ 105.426600][ T5938] usbtmc 1-1:16.0: can't read capabilities [ 105.427234][ T5923] usb 5-1: config 0 descriptor?? [ 105.649462][ T6069] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 105.748921][ T6086] fuse: Bad value for 'fd' [ 105.894533][ T6086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.44'. [ 105.917196][ T6086] syzkaller1: entered promiscuous mode [ 105.925204][ T6086] syzkaller1: entered allmulticast mode [ 105.951131][ T5923] usb 5-1: USB disconnect, device number 3 [ 106.035389][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 106.090390][ T5913] usb 2-1: USB disconnect, device number 3 [ 106.191280][ T40] usb 1-1: USB disconnect, device number 3 [ 106.467511][ T6100] fuse: Bad value for 'fd' [ 106.523831][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'. [ 106.570658][ T6100] syzkaller1: entered promiscuous mode [ 106.591608][ T6100] syzkaller1: entered allmulticast mode [ 106.670460][ T5898] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 106.910753][ T5898] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 106.928132][ T5898] usb 3-1: config 0 has no interface number 0 [ 106.963560][ T5898] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.036876][ T5898] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 107.066207][ T6107] fuse: Unknown parameter '000000000000000000060x0000000000000006' [ 107.080948][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 107.093093][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 107.155355][ T5898] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 107.213638][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.272885][ T5898] usb 3-1: Product: syz [ 107.297464][ T5898] usb 3-1: Manufacturer: syz [ 107.307901][ T5898] usb 3-1: SerialNumber: syz [ 107.324102][ T5898] usb 3-1: config 0 descriptor?? [ 107.367221][ T6098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.389816][ T5898] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 107.476275][ T5913] IPVS: starting estimator thread 0... [ 107.492639][ T6112] delete_channel: no stack [ 107.503996][ T6112] tipc: Enabling of bearer rejected, failed to enable media [ 107.525890][ T6111] delete_channel: no stack [ 107.593254][ T6113] IPVS: using max 49 ests per chain, 117600 per kthread [ 108.251072][ T6123] mmap: syz.0.52 (6123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.450667][ T40] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.632207][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.689991][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.736002][ T40] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.747769][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.779110][ T40] usb 5-1: SerialNumber: syz [ 109.223203][ T40] usb 5-1: 0:2 : does not exist [ 109.262810][ T40] usb 5-1: USB disconnect, device number 4 [ 109.861005][ T5970] usb 3-1: USB disconnect, device number 3 [ 109.898335][ T5970] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 110.393823][ T6147] syzkaller1: entered promiscuous mode [ 110.399536][ T6147] syzkaller1: entered allmulticast mode [ 110.650140][ T5970] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 110.767842][ T6156] fuse: Bad value for 'fd' [ 110.803984][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.62'. [ 110.817143][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.834956][ T5970] usb 1-1: config 0 has no interfaces? [ 110.845480][ T6156] syzkaller1: entered promiscuous mode [ 110.856647][ T5970] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 110.872324][ T6156] syzkaller1: entered allmulticast mode [ 110.895743][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.925946][ T5970] usb 1-1: config 0 descriptor?? [ 111.172581][ T5970] usb 1-1: USB disconnect, device number 4 [ 111.607862][ T6162] FAULT_INJECTION: forcing a failure. [ 111.607862][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 111.623725][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 111.623751][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.623762][ T6162] Call Trace: [ 111.623770][ T6162] [ 111.623778][ T6162] dump_stack_lvl+0x189/0x250 [ 111.623806][ T6162] ? __pfx____ratelimit+0x10/0x10 [ 111.623827][ T6162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.623850][ T6162] ? __pfx__printk+0x10/0x10 [ 111.623880][ T6162] ? __pfx___might_resched+0x10/0x10 [ 111.623901][ T6162] ? fs_reclaim_acquire+0x7d/0x100 [ 111.623927][ T6162] should_fail_ex+0x414/0x560 [ 111.623962][ T6162] should_failslab+0xa8/0x100 [ 111.623987][ T6162] kmem_cache_alloc_noprof+0x88/0x710 [ 111.624017][ T6162] ? vm_area_dup+0x2b/0x680 [ 111.624034][ T6162] ? mas_alloc_nodes+0x2b4/0x350 [ 111.624066][ T6162] vm_area_dup+0x2b/0x680 [ 111.624088][ T6162] __split_vma+0x1a9/0xa00 [ 111.624115][ T6162] ? mas_next_slot+0xc20/0xcf0 [ 111.624139][ T6162] ? __pfx___split_vma+0x10/0x10 [ 111.624175][ T6162] ? mas_find+0xb0e/0xd30 [ 111.624193][ T6162] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 111.624224][ T6162] vms_gather_munmap_vmas+0x4c6/0x12f0 [ 111.624247][ T6162] ? __page_table_check_zero+0x6a/0x3e0 [ 111.624286][ T6162] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 111.624305][ T6162] ? get_page_from_freelist+0x2365/0x2440 [ 111.624326][ T6162] ? __lock_acquire+0x6b6/0x2cf0 [ 111.624364][ T6162] do_vmi_align_munmap+0x268/0x440 [ 111.624387][ T6162] ? __lock_acquire+0x6b6/0x2cf0 [ 111.624425][ T6162] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 111.624495][ T6162] do_vmi_munmap+0x253/0x2e0 [ 111.624527][ T6162] do_munmap+0xcf/0x120 [ 111.624557][ T6162] ? __pfx_do_munmap+0x10/0x10 [ 111.624606][ T6162] mremap_to+0x2c8/0x790 [ 111.624634][ T6162] ? mtree_load+0x101/0x6f0 [ 111.624653][ T6162] ? __pfx_mremap_to+0x10/0x10 [ 111.624675][ T6162] ? may_expand_vm+0x1af/0x2f0 [ 111.624695][ T6162] ? check_prep_vma+0x8bb/0xb00 [ 111.624729][ T6162] __se_sys_mremap+0xd45/0xfb0 [ 111.624765][ T6162] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 111.624798][ T6162] ? __pfx___se_sys_mremap+0x10/0x10 [ 111.624830][ T6162] ? fput+0xa0/0xd0 [ 111.624856][ T6162] ? ksys_write+0x22a/0x250 [ 111.624873][ T6162] ? exc_page_fault+0x82/0x100 [ 111.624893][ T6162] ? __pfx_ksys_write+0x10/0x10 [ 111.624916][ T6162] ? __do_fast_syscall_32+0xbe/0x590 [ 111.624936][ T6162] ? __ia32_sys_mremap+0x20/0xc0 [ 111.624962][ T6162] __do_fast_syscall_32+0x1f7/0x590 [ 111.624985][ T6162] ? rcu_is_watching+0x15/0xb0 [ 111.625006][ T6162] ? do_fast_syscall_32+0x34/0x80 [ 111.625034][ T6162] do_fast_syscall_32+0x34/0x80 [ 111.625056][ T6162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.625079][ T6162] RIP: 0023:0xf70cd539 [ 111.625097][ T6162] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 111.625112][ T6162] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 111.625133][ T6162] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000 [ 111.625147][ T6162] RDX: 0000000000400000 RSI: 0000000000000003 RDI: 0000000080000000 [ 111.625159][ T6162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.625169][ T6162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.625179][ T6162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.625210][ T6162] [ 111.967943][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.000636][ T30] audit: type=1804 audit(1766198175.176:965): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.68" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=9172 res=1 errno=0 [ 112.143463][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.157556][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.190921][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.233343][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.245021][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.279303][ T5906] usb 4-1: config 0 descriptor?? [ 112.534088][ T6181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.553341][ T6184] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 112.611481][ T5898] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 112.803616][ T5906] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 112.924104][ T5898] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 112.932487][ T5898] usb 5-1: config 0 has no interface number 0 [ 112.945662][ T5898] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 113.018369][ T5898] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 113.447139][ T5898] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 113.458509][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.468286][ T5898] usb 5-1: Product: syz [ 113.473046][ T5898] usb 5-1: Manufacturer: syz [ 113.484264][ T5906] usb 4-1: USB disconnect, device number 3 [ 113.498169][ T5898] usb 5-1: SerialNumber: syz [ 113.499651][ T6191] fido_id[6191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 113.783469][ T5898] usb 5-1: config 0 descriptor?? [ 113.813320][ T6180] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.894317][ T5898] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 115.162569][ T6211] blkio.reset_stats is deprecated [ 115.887472][ T6228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.82'. [ 115.965510][ T5898] usb 5-1: USB disconnect, device number 5 [ 115.974954][ T5898] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 116.424662][ T6226] syzkaller1: entered promiscuous mode [ 116.430380][ T6226] syzkaller1: entered allmulticast mode [ 116.780046][ T5906] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 117.188428][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.202442][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.95'. [ 117.243435][ T5906] usb 4-1: config 0 has no interfaces? [ 117.276124][ T5906] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 117.358411][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.387714][ T5906] usb 4-1: config 0 descriptor?? [ 117.635143][ T5906] usb 4-1: USB disconnect, device number 4 [ 118.310013][ T5938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.473668][ T5938] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.508338][ T5938] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 118.527876][ T5938] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 118.539406][ T5938] usb 1-1: config 0 has no interface number 0 [ 118.546975][ T5938] usb 1-1: config 0 has no interface number 1 [ 118.547579][ T6260] fuse: Bad value for 'fd' [ 118.584652][ T5938] usb 1-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 118.612901][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.630546][ T5938] usb 1-1: Product: syz [ 118.640570][ T5938] usb 1-1: Manufacturer: syz [ 118.645374][ T5938] usb 1-1: SerialNumber: syz [ 118.650971][ T6260] syzkaller1: entered promiscuous mode [ 118.656781][ T6260] syzkaller1: entered allmulticast mode [ 118.669871][ T5938] usb 1-1: config 0 descriptor?? [ 118.711567][ T5938] cdc_acm 1-1:0.51: probe with driver cdc_acm failed with error -22 [ 118.946438][ T5906] usb 1-1: USB disconnect, device number 5 [ 119.349993][ T40] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 119.384532][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 119.517916][ T40] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 119.528529][ T40] usb 5-1: config 0 has no interface number 0 [ 119.543024][ T40] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 119.585750][ T40] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 119.668465][ T40] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.717015][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.789959][ T40] usb 5-1: Product: syz [ 119.849602][ T40] usb 5-1: Manufacturer: syz [ 119.873978][ T40] usb 5-1: SerialNumber: syz [ 119.911603][ T40] usb 5-1: config 0 descriptor?? [ 119.953852][ T6273] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.009421][ T6286] bridge_slave_0: left allmulticast mode [ 120.014414][ T40] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 120.064458][ T6286] bridge_slave_0: left promiscuous mode [ 120.132607][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.301430][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.99'. [ 120.348312][ T6286] bridge_slave_1: left allmulticast mode [ 120.354147][ T6286] bridge_slave_1: left promiscuous mode [ 120.372169][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.485457][ T6286] bond0: (slave bond_slave_0): Releasing backup interface [ 120.512541][ T6286] bond0: (slave bond_slave_1): Releasing backup interface [ 120.617987][ T6286] team0: Port device team_slave_0 removed [ 120.631484][ T6286] team0: Port device team_slave_1 removed [ 120.639793][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.649060][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.662008][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.669798][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.700681][ T6286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.808101][ T6289] ip6gre0: entered promiscuous mode [ 120.929837][ T6289] team0: Port device ip6gre0 added [ 121.380730][ T6303] syzkaller1: entered promiscuous mode [ 121.403872][ T6303] syzkaller1: entered allmulticast mode [ 121.740044][ T5913] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 121.913277][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.927048][ T5913] usb 2-1: config 0 has no interfaces? [ 121.949663][ T5913] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 121.982854][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.013033][ T5913] usb 2-1: config 0 descriptor?? [ 122.201962][ T6317] FAULT_INJECTION: forcing a failure. [ 122.201962][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 122.262248][ T6319] fuse: Bad value for 'fd' [ 122.273335][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 122.273361][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.273372][ T6317] Call Trace: [ 122.273380][ T6317] [ 122.273388][ T6317] dump_stack_lvl+0x189/0x250 [ 122.273416][ T6317] ? __pfx____ratelimit+0x10/0x10 [ 122.273436][ T6317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.273456][ T6317] ? __pfx__printk+0x10/0x10 [ 122.273490][ T6317] ? __pfx___might_resched+0x10/0x10 [ 122.273516][ T6317] should_fail_ex+0x414/0x560 [ 122.273550][ T6317] should_failslab+0xa8/0x100 [ 122.273577][ T6317] kmem_cache_alloc_noprof+0x88/0x710 [ 122.273606][ T6317] ? __mpol_dup+0x79/0x320 [ 122.273632][ T6317] __mpol_dup+0x79/0x320 [ 122.273661][ T6317] ? __pfx___mpol_dup+0x10/0x10 [ 122.273694][ T6317] vma_dup_policy+0x45/0xa0 [ 122.273715][ T6317] __split_vma+0x328/0xa00 [ 122.273752][ T6317] ? __pfx___split_vma+0x10/0x10 [ 122.273787][ T6317] ? mas_find+0xb0e/0xd30 [ 122.273806][ T6317] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 122.273834][ T6317] vms_gather_munmap_vmas+0x4c6/0x12f0 [ 122.273856][ T6317] ? __page_table_check_zero+0x6a/0x3e0 [ 122.273894][ T6317] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 122.273913][ T6317] ? get_page_from_freelist+0x2365/0x2440 [ 122.273936][ T6317] ? __lock_acquire+0x6b6/0x2cf0 [ 122.273971][ T6317] do_vmi_align_munmap+0x268/0x440 [ 122.273994][ T6317] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 122.274038][ T6317] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 122.274099][ T6317] do_vmi_munmap+0x253/0x2e0 [ 122.274130][ T6317] do_munmap+0xcf/0x120 [ 122.274161][ T6317] ? __pfx_do_munmap+0x10/0x10 [ 122.274216][ T6317] mremap_to+0x2c8/0x790 [ 122.274246][ T6317] ? mtree_load+0x101/0x6f0 [ 122.274266][ T6317] ? __pfx_mremap_to+0x10/0x10 [ 122.274288][ T6317] ? may_expand_vm+0x1af/0x2f0 [ 122.274309][ T6317] ? check_prep_vma+0x8bb/0xb00 [ 122.274345][ T6317] __se_sys_mremap+0xd45/0xfb0 [ 122.274381][ T6317] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 122.274417][ T6317] ? __pfx___se_sys_mremap+0x10/0x10 [ 122.274448][ T6317] ? fput+0xa0/0xd0 [ 122.274474][ T6317] ? ksys_write+0x22a/0x250 [ 122.274491][ T6317] ? exc_page_fault+0x82/0x100 [ 122.274512][ T6317] ? __pfx_ksys_write+0x10/0x10 [ 122.274536][ T6317] ? __do_fast_syscall_32+0xbe/0x590 [ 122.274555][ T6317] ? __ia32_sys_mremap+0x20/0xc0 [ 122.274581][ T6317] __do_fast_syscall_32+0x1f7/0x590 [ 122.274603][ T6317] ? rcu_is_watching+0x15/0xb0 [ 122.274624][ T6317] ? do_fast_syscall_32+0x34/0x80 [ 122.274659][ T6317] do_fast_syscall_32+0x34/0x80 [ 122.274681][ T6317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.274704][ T6317] RIP: 0023:0xf70cd539 [ 122.274722][ T6317] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 122.274737][ T6317] RSP: 002b:00000000f547b55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 122.274759][ T6317] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000 [ 122.274773][ T6317] RDX: 0000000000400000 RSI: 0000000000000003 RDI: 0000000080000000 [ 122.274785][ T6317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.274796][ T6317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.274807][ T6317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.274839][ T6317] [ 122.287976][ T5913] usb 2-1: USB disconnect, device number 4 [ 122.710445][ T5898] usb 5-1: USB disconnect, device number 6 [ 122.799191][ T6320] syzkaller1: entered promiscuous mode [ 122.833089][ T6320] syzkaller1: entered allmulticast mode [ 122.961284][ T5898] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 123.078944][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 123.415035][ T6336] netlink: 456 bytes leftover after parsing attributes in process `syz.4.112'. [ 123.431264][ T6336] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 123.531241][ T6336] openvswitch: netlink: Message has 16 unknown bytes. [ 123.628940][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 123.722595][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.895439][ T5898] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.917045][ T5898] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 123.947293][ T5898] usb 1-1: config 220 interface 0 has no altsetting 0 [ 123.976291][ T5898] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 123.988034][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.999646][ T5898] usb 1-1: Product: syz [ 124.005532][ T5898] usb 1-1: Manufacturer: syz [ 124.010924][ T5898] usb 1-1: SerialNumber: syz [ 124.335991][ T6352] syzkaller1: entered promiscuous mode [ 124.349746][ T6352] syzkaller1: entered allmulticast mode [ 124.391110][ T6335] IPVS: length: 157 != 24 [ 124.814472][ T5898] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 124.841041][ T40] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.859591][ T5898] uvcvideo 1-1:220.0: No valid video chain found. [ 124.881351][ T5898] usb 1-1: USB disconnect, device number 6 [ 124.997889][ T6364] fuse: Bad value for 'fd' [ 125.023679][ T6364] syzkaller1: entered promiscuous mode [ 125.031111][ T40] usb 3-1: device descriptor read/64, error -71 [ 125.171781][ T6364] syzkaller1: entered allmulticast mode [ 125.441796][ T40] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.525784][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.120'. [ 125.580362][ T40] usb 3-1: device descriptor read/64, error -71 [ 125.740065][ T40] usb usb3-port1: attempt power cycle [ 126.082707][ T5898] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 126.204263][ T40] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.453872][ T40] usb 3-1: device descriptor read/8, error -71 [ 126.648929][ T5898] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 126.672278][ T5898] usb 4-1: config 0 has no interface number 0 [ 126.685493][ T5898] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 126.700037][ T40] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.736854][ T5898] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 126.751920][ T40] usb 3-1: device descriptor read/8, error -71 [ 126.870733][ T40] usb usb3-port1: unable to enumerate USB device [ 126.912636][ T5898] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 126.940014][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.970485][ T5898] usb 4-1: Product: syz [ 126.978003][ T6382] delete_channel: no stack [ 126.984549][ T6382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.122'. [ 126.993666][ T6382] tipc: Invalid UDP bearer configuration [ 126.993717][ T6382] tipc: Enabling of bearer rejected, failed to enable media [ 127.015748][ T6381] delete_channel: no stack [ 127.023565][ T5898] usb 4-1: Manufacturer: syz [ 127.043748][ T5898] usb 4-1: SerialNumber: syz [ 127.073901][ T5898] usb 4-1: config 0 descriptor?? [ 127.152157][ T6384] syzkaller1: entered promiscuous mode [ 127.157720][ T6384] syzkaller1: entered allmulticast mode [ 127.233347][ T6375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.264282][ T5898] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 127.305654][ T6386] bridge_slave_0: left allmulticast mode [ 127.311601][ T6386] bridge_slave_0: left promiscuous mode [ 127.317643][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.373865][ T6386] bridge_slave_1: left allmulticast mode [ 127.408373][ T6386] bridge_slave_1: left promiscuous mode [ 127.439850][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.459989][ T5913] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 127.601387][ T6386] bond0: (slave bond_slave_0): Releasing backup interface [ 127.619243][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 127.630897][ T6386] bond0: (slave bond_slave_1): Releasing backup interface [ 127.657319][ T6386] team0: Port device team_slave_0 removed [ 127.733212][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.736862][ T6386] team0: Port device team_slave_1 removed [ 127.743387][ T5913] usb 2-1: config 0 has no interfaces? [ 127.743438][ T5913] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 127.743461][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.746274][ T5913] usb 2-1: config 0 descriptor?? [ 127.928799][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.937784][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.291195][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.335722][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.375807][ T6386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.401908][ T6387] ip6gre0: entered promiscuous mode [ 128.453074][ T5913] usb 2-1: USB disconnect, device number 5 [ 128.465294][ T6387] team0: Port device ip6gre0 added [ 128.586331][ T6399] netlink: 144 bytes leftover after parsing attributes in process `syz.0.127'. [ 128.958758][ T6405] fuse: Bad value for 'fd' [ 128.990004][ T6405] syzkaller1: entered promiscuous mode [ 128.995939][ T6405] syzkaller1: entered allmulticast mode [ 129.060010][ T40] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.210011][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 129.219398][ T40] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.230097][ T40] usb 1-1: config 0 has no interface number 0 [ 129.244420][ T40] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.271586][ T40] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 129.292486][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.321933][ T40] usb 1-1: Product: syz [ 129.326251][ T40] usb 1-1: Manufacturer: syz [ 129.551863][ T40] usb 1-1: SerialNumber: syz [ 129.567460][ T40] usb 1-1: config 0 descriptor?? [ 129.670167][ T5913] usb 4-1: USB disconnect, device number 5 [ 129.686742][ T5913] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 129.703031][ T40] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 129.723946][ T40] em28xx 1-1:0.132: Video interface 132 found: [ 129.804625][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.022056][ T5898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.034517][ T6402] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.136988][ T5898] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 130.163042][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.187195][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.197803][ T5898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.522117][ T6430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 130.667431][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.915630][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.970881][ T40] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 130.975016][ T5898] usb 2-1: invalid MIDI out EP 0 [ 131.225233][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 131.294305][ T40] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 131.351677][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.483293][ T40] em28xx 1-1:0.132: board has no eeprom [ 131.491033][ T5898] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 131.692624][ T40] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 131.759972][ T40] em28xx 1-1:0.132: analog set to bulk mode. [ 131.798951][ T5906] em28xx 1-1:0.132: Registering V4L2 extension [ 132.065243][ T40] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.066882][ T5898] usb 1-1: USB disconnect, device number 7 [ 132.131676][ T5898] em28xx 1-1:0.132: Disconnecting em28xx [ 132.256584][ T40] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 132.266138][ T40] usb 3-1: config 0 has no interface number 0 [ 132.274639][ T40] usb 3-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 132.306273][ T40] usb 3-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.332602][ T6442] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 132.397390][ T40] usb 3-1: config 0 interface 153 has no altsetting 0 [ 132.452611][ T5906] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 132.461136][ T40] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 132.474056][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.486301][ T5906] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 132.498790][ T40] usb 3-1: Product: syz [ 132.505141][ T5906] em28xx 1-1:0.132: No AC97 audio processor [ 132.511459][ T40] usb 3-1: Manufacturer: syz [ 132.520139][ T40] usb 3-1: SerialNumber: syz [ 132.529717][ T5906] usb 1-1: Decoder not found [ 132.537135][ T5906] em28xx 1-1:0.132: failed to create media graph [ 132.545249][ T40] usb 3-1: config 0 descriptor?? [ 132.551221][ T5906] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 132.560789][ T40] hub 3-1:0.153: bad descriptor, ignoring hub [ 132.566949][ T40] hub 3-1:0.153: probe with driver hub failed with error -5 [ 132.580936][ T5906] em28xx 1-1:0.132: Remote control support is not available for this card. [ 132.590177][ T40] sierra 3-1:0.153: Sierra USB modem converter detected [ 132.597905][ T5898] em28xx 1-1:0.132: Closing input extension [ 132.630338][ T6447] fuse: Bad value for 'fd' [ 132.675651][ T5898] em28xx 1-1:0.132: Freeing device [ 132.691977][ T6447] syzkaller1: entered promiscuous mode [ 132.697693][ T6447] syzkaller1: entered allmulticast mode [ 132.751000][ T6450] syzkaller1: entered promiscuous mode [ 132.769623][ T6438] netlink: 104 bytes leftover after parsing attributes in process `syz.2.138'. [ 132.794043][ T6450] syzkaller1: entered allmulticast mode [ 132.808462][ T40] usb 3-1: USB disconnect, device number 8 [ 132.826990][ T40] sierra 3-1:0.153: device disconnected [ 133.044888][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.051734][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.120270][ T5898] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 133.363661][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.386092][ T5898] usb 1-1: config 0 has no interfaces? [ 133.396122][ T5898] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 133.431819][ T5921] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 133.453840][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.462188][ T40] usb 2-1: USB disconnect, device number 6 [ 133.487441][ T5898] usb 1-1: config 0 descriptor?? [ 133.542231][ T6462] netlink: 'syz.4.146': attribute type 12 has an invalid length. [ 133.798211][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 133.928195][ T5921] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.937436][ T5921] usb 4-1: config 0 has no interface number 0 [ 133.944793][ T5921] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 133.956460][ T5906] usb 1-1: USB disconnect, device number 8 [ 133.981309][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 133.993373][ T5921] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 134.101435][ T5921] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 134.111219][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.119503][ T5921] usb 4-1: Product: syz [ 134.124251][ T5921] usb 4-1: Manufacturer: syz [ 134.130010][ T5921] usb 4-1: SerialNumber: syz [ 134.175113][ T5921] usb 4-1: config 0 descriptor?? [ 134.187350][ T6457] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.216142][ T5921] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 134.760777][ T6479] syzkaller1: entered promiscuous mode [ 134.766642][ T6479] syzkaller1: entered allmulticast mode [ 135.865784][ T6488] fuse: Bad value for 'fd' [ 135.917987][ T6488] syzkaller1: entered promiscuous mode [ 135.933732][ T6488] syzkaller1: entered allmulticast mode [ 136.128343][ T5923] usb 4-1: USB disconnect, device number 6 [ 136.157164][ T5923] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 136.331580][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 136.784656][ T6518] warning: `syz.1.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.857053][ T6517] syzkaller1: entered promiscuous mode [ 136.870038][ T6517] syzkaller1: entered allmulticast mode [ 137.150131][ T5921] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 137.170031][ T40] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.326175][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.351699][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.360143][ T5921] usb 4-1: config 0 has no interfaces? [ 137.371062][ T40] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.382906][ T40] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.392444][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.401615][ T5921] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 137.404982][ T40] usb 3-1: SerialNumber: syz [ 137.416420][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.432716][ T5921] usb 4-1: config 0 descriptor?? [ 137.683500][ T5921] usb 4-1: USB disconnect, device number 7 [ 138.357050][ T40] usb 3-1: skipping empty audio interface (v1) [ 138.402769][ T40] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 138.624227][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 138.677742][ T40] usb 3-1: USB disconnect, device number 9 [ 138.683802][ T5906] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 139.031505][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.620436][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.770042][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 140.037458][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 140.092695][ T5906] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 140.113064][ T5906] usb 5-1: config 0 has no interface number 0 [ 140.170300][ T5906] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 140.183831][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 140.268596][ T6568] netlink: 7 bytes leftover after parsing attributes in process `syz.2.176'. [ 140.283446][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.283995][ T5906] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 140.317467][ T6568] netlink: 7 bytes leftover after parsing attributes in process `syz.2.176'. [ 140.336164][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.508604][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.598094][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 140.857922][ T40] usb 1-1: USB disconnect, device number 9 [ 140.872138][ T5906] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 140.881918][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.933933][ T5906] usb 5-1: Product: syz [ 140.948851][ T5906] usb 5-1: Manufacturer: syz [ 140.959455][ T5906] usb 5-1: SerialNumber: syz [ 140.982478][ T5906] usb 5-1: config 0 descriptor?? [ 140.997410][ T6545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.028489][ T5906] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 141.446752][ T40] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.621325][ T40] usb 3-1: Using ep0 maxpacket: 8 [ 141.630458][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.672612][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.831711][ T40] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.882583][ T9] usb 5-1: USB disconnect, device number 7 [ 141.890044][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.954133][ T40] usb 3-1: config 0 descriptor?? [ 142.060206][ T9] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 142.069719][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 142.170957][ T40] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 142.381501][ T6576] PKCS8: Unsupported PKCS#8 version [ 142.400473][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.571363][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 142.603044][ T5923] usb 2-1: config 0 has no interfaces? [ 142.637431][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.660193][ T5923] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.740009][ T5923] usb 2-1: Manufacturer: syz [ 142.741918][ T5921] usb 3-1: USB disconnect, device number 10 [ 142.772211][ T5923] usb 2-1: config 0 descriptor?? [ 143.256869][ T6605] syzkaller1: entered promiscuous mode [ 143.363914][ T6605] syzkaller1: entered allmulticast mode [ 145.124698][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 145.415923][ T6632] syzkaller1: entered promiscuous mode [ 145.439731][ T6632] syzkaller1: entered allmulticast mode [ 145.518217][ T30] audit: type=1326 audit(1766198208.896:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 145.601512][ T30] audit: type=1326 audit(1766198208.896:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 145.633598][ T30] audit: type=1326 audit(1766198208.896:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 145.660096][ T30] audit: type=1326 audit(1766198208.896:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 145.712931][ T30] audit: type=1326 audit(1766198208.896:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 145.720020][ T5921] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 145.801722][ T9] usb 2-1: USB disconnect, device number 7 [ 145.830620][ T30] audit: type=1326 audit(1766198208.936:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 145.922206][ T30] audit: type=1326 audit(1766198208.936:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 146.027530][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.038177][ T30] audit: type=1326 audit(1766198208.936:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 146.092598][ T5921] usb 1-1: config 0 has no interfaces? [ 146.099110][ T5921] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 146.159927][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.180019][ T30] audit: type=1326 audit(1766198208.936:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 146.230810][ T5921] usb 1-1: config 0 descriptor?? [ 146.287747][ T30] audit: type=1326 audit(1766198208.936:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 146.920782][ T5921] IPVS: starting estimator thread 0... [ 146.922435][ T6653] delete_channel: no stack [ 146.936119][ T6653] tipc: Invalid UDP bearer configuration [ 146.936182][ T6653] tipc: Enabling of bearer rejected, failed to enable media [ 146.951920][ T6652] delete_channel: no stack [ 147.051336][ T6654] IPVS: using max 24 ests per chain, 57600 per kthread [ 147.110000][ T5921] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 147.290167][ T5921] usb 4-1: device descriptor read/64, error -71 [ 147.362865][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 147.539992][ T5921] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 147.587328][ T5898] usb 1-1: USB disconnect, device number 10 [ 147.699997][ T5921] usb 4-1: device descriptor read/64, error -71 [ 147.780262][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.811075][ T5921] usb usb4-port1: attempt power cycle [ 148.368387][ T5921] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 148.442919][ T5921] usb 4-1: device descriptor read/8, error -71 [ 148.690907][ T5921] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 148.729490][ T5921] usb 4-1: device descriptor read/8, error -71 [ 148.830446][ T5921] usb usb4-port1: unable to enumerate USB device [ 148.933448][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.933922][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.531556][ T6690] FAULT_INJECTION: forcing a failure. [ 149.531556][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 149.534204][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) [ 149.534223][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.534230][ T6690] Call Trace: [ 149.534235][ T6690] [ 149.534241][ T6690] dump_stack_lvl+0x189/0x250 [ 149.534259][ T6690] ? __pfx____ratelimit+0x10/0x10 [ 149.534271][ T6690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.534284][ T6690] ? __pfx__printk+0x10/0x10 [ 149.534312][ T6690] ? __pfx___might_resched+0x10/0x10 [ 149.534325][ T6690] ? fs_reclaim_acquire+0x7d/0x100 [ 149.534340][ T6690] should_fail_ex+0x414/0x560 [ 149.534360][ T6690] should_failslab+0xa8/0x100 [ 149.534375][ T6690] kmem_cache_alloc_noprof+0x88/0x710 [ 149.534392][ T6690] ? vm_area_dup+0x2b/0x680 [ 149.534406][ T6690] vm_area_dup+0x2b/0x680 [ 149.534420][ T6690] copy_vma+0x4c5/0x920 [ 149.534440][ T6690] ? __pfx_copy_vma+0x10/0x10 [ 149.534458][ T6690] ? __vma_start_write+0x23/0x140 [ 149.534483][ T6690] ? move_vma+0x689/0x1840 [ 149.534501][ T6690] move_vma+0x814/0x1840 [ 149.534528][ T6690] ? __pfx_move_vma+0x10/0x10 [ 149.534547][ T6690] ? mm_get_unmapped_area+0xd4/0x100 [ 149.534568][ T6690] ? cap_mmap_addr+0xb0/0x100 [ 149.534580][ T6690] ? bpf_lsm_mmap_addr+0x9/0x20 [ 149.534599][ T6690] mremap_to+0x6ce/0x790 [ 149.534615][ T6690] ? mtree_load+0x101/0x6f0 [ 149.534628][ T6690] ? __pfx_mremap_to+0x10/0x10 [ 149.534641][ T6690] ? may_expand_vm+0x1af/0x2f0 [ 149.534653][ T6690] ? check_prep_vma+0x8bb/0xb00 [ 149.534674][ T6690] __se_sys_mremap+0xd45/0xfb0 [ 149.534694][ T6690] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 149.534714][ T6690] ? __pfx___se_sys_mremap+0x10/0x10 [ 149.534731][ T6690] ? fput+0xa0/0xd0 [ 149.534746][ T6690] ? ksys_write+0x22a/0x250 [ 149.534757][ T6690] ? exc_page_fault+0x82/0x100 [ 149.534768][ T6690] ? __pfx_ksys_write+0x10/0x10 [ 149.534782][ T6690] ? __do_fast_syscall_32+0xbe/0x590 [ 149.534793][ T6690] ? __ia32_sys_mremap+0x20/0xc0 [ 149.534808][ T6690] __do_fast_syscall_32+0x1f7/0x590 [ 149.534821][ T6690] ? rcu_is_watching+0x15/0xb0 [ 149.534834][ T6690] ? do_fast_syscall_32+0x34/0x80 [ 149.534849][ T6690] do_fast_syscall_32+0x34/0x80 [ 149.534862][ T6690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.534875][ T6690] RIP: 0023:0xf70bd539 [ 149.534886][ T6690] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 149.534896][ T6690] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 149.534909][ T6690] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000 [ 149.534917][ T6690] RDX: 0000000000400000 RSI: 0000000000000003 RDI: 0000000080000000 [ 149.534924][ T6690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.534931][ T6690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 149.534937][ T6690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.534954][ T6690] [ 150.071716][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.219'. [ 150.136982][ T40] IPVS: starting estimator thread 0... [ 150.161991][ T6704] delete_channel: no stack [ 150.164277][ T6704] tipc: Invalid UDP bearer configuration [ 150.164332][ T6704] tipc: Enabling of bearer rejected, failed to enable media [ 150.164599][ T6703] delete_channel: no stack [ 150.296645][ T6705] IPVS: using max 27 ests per chain, 64800 per kthread [ 150.493535][ T6711] syzkaller1: entered promiscuous mode [ 150.493562][ T6711] syzkaller1: entered allmulticast mode [ 150.790743][ T5921] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 151.043363][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.043392][ T5921] usb 2-1: config 0 has no interfaces? [ 151.043425][ T5921] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 151.043449][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.045984][ T5921] usb 2-1: config 0 descriptor?? [ 151.609809][ T6729] openvswitch: netlink: Key type 234 is out of range max 32 [ 152.126749][ T40] usb 2-1: USB disconnect, device number 9 [ 152.630108][ T977] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 153.161584][ T977] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 153.190323][ T977] usb 5-1: config 0 has no interface number 0 [ 153.196583][ T977] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 153.249096][ T977] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 153.354564][ T977] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 153.384552][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.431859][ T977] usb 5-1: Product: syz [ 153.439126][ T977] usb 5-1: Manufacturer: syz [ 153.448341][ T977] usb 5-1: SerialNumber: syz [ 153.475147][ T977] usb 5-1: config 0 descriptor?? [ 153.497687][ T6743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.538677][ T977] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 153.675169][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.820063][ T5921] usb 3-1: device descriptor read/64, error -71 [ 154.070011][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.251223][ T5921] usb 3-1: device descriptor read/64, error -71 [ 154.373612][ T5921] usb usb3-port1: attempt power cycle [ 154.740149][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.760768][ T5921] usb 3-1: device descriptor read/8, error -71 [ 155.000083][ T5921] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.023934][ T5921] usb 3-1: device descriptor read/8, error -71 [ 155.141881][ T5921] usb usb3-port1: unable to enumerate USB device [ 155.215283][ T6777] syzkaller1: entered promiscuous mode [ 155.247534][ T6777] syzkaller1: entered allmulticast mode [ 155.319314][ T6780] netlink: 'syz.1.250': attribute type 11 has an invalid length. [ 155.380186][ T5921] usb 5-1: USB disconnect, device number 8 [ 155.396721][ T5921] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 155.580060][ T977] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 155.589553][ T6787] binder: 6786:6787 ioctl 5608 0 returned -22 [ 155.732305][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.762121][ T977] usb 4-1: config 0 has no interfaces? [ 155.782774][ T977] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 155.835023][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.882379][ T977] usb 4-1: config 0 descriptor?? [ 156.180283][ T40] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 156.680600][ T40] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.699107][ T40] usb 5-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 156.758656][ T40] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 156.808246][ T40] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.831824][ T40] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.850290][ T40] usb 5-1: Product: syz [ 156.859142][ T40] usb 5-1: Manufacturer: syz [ 157.092621][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.104904][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.119541][ T40] usb 5-1: USB disconnect, device number 9 [ 157.428815][ T5921] usb 4-1: USB disconnect, device number 12 [ 157.438224][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'. [ 157.870065][ T40] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.964854][ T6820] FAULT_INJECTION: forcing a failure. [ 157.964854][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 157.979306][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.0.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.979338][ T6820] Tainted: [L]=SOFTLOCKUP [ 157.979345][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.979355][ T6820] Call Trace: [ 157.979363][ T6820] [ 157.979372][ T6820] dump_stack_lvl+0x189/0x250 [ 157.979401][ T6820] ? __pfx____ratelimit+0x10/0x10 [ 157.979421][ T6820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.979444][ T6820] ? __pfx__printk+0x10/0x10 [ 157.979475][ T6820] ? __pfx___might_resched+0x10/0x10 [ 157.979502][ T6820] ? fs_reclaim_acquire+0x7d/0x100 [ 157.979528][ T6820] should_fail_ex+0x414/0x560 [ 157.979564][ T6820] should_failslab+0xa8/0x100 [ 157.979590][ T6820] kmem_cache_alloc_noprof+0x88/0x710 [ 157.979620][ T6820] ? vm_area_dup+0x2b/0x680 [ 157.979645][ T6820] vm_area_dup+0x2b/0x680 [ 157.979669][ T6820] __split_vma+0x1a9/0xa00 [ 157.979696][ T6820] ? mas_next_slot+0xc27/0xcf0 [ 157.979722][ T6820] ? __pfx___split_vma+0x10/0x10 [ 157.979759][ T6820] ? mas_find+0xb0e/0xd30 [ 157.979785][ T6820] vms_gather_munmap_vmas+0x2e2/0x12f0 [ 157.979833][ T6820] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 157.979866][ T6820] ? __pfx___might_resched+0x10/0x10 [ 157.979901][ T6820] do_vmi_align_munmap+0x268/0x440 [ 157.979944][ T6820] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 157.980006][ T6820] do_vmi_munmap+0x253/0x2e0 [ 157.980038][ T6820] move_vma+0x10f5/0x1840 [ 157.980088][ T6820] ? __pfx_move_vma+0x10/0x10 [ 157.980122][ T6820] ? mm_get_unmapped_area+0xd4/0x100 [ 157.980159][ T6820] ? cap_mmap_addr+0xb0/0x100 [ 157.980180][ T6820] ? bpf_lsm_mmap_addr+0x9/0x20 [ 157.980214][ T6820] mremap_to+0x6ce/0x790 [ 157.980248][ T6820] ? __pfx_mremap_to+0x10/0x10 [ 157.980279][ T6820] ? may_expand_vm+0x1af/0x2f0 [ 157.980301][ T6820] ? check_prep_vma+0x8bb/0xb00 [ 157.980338][ T6820] __se_sys_mremap+0xd45/0xfb0 [ 157.980372][ T6820] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 157.980409][ T6820] ? __pfx___se_sys_mremap+0x10/0x10 [ 157.980440][ T6820] ? fput+0xa0/0xd0 [ 157.980465][ T6820] ? ksys_write+0x22a/0x250 [ 157.980482][ T6820] ? exc_page_fault+0x82/0x100 [ 157.980502][ T6820] ? __pfx_ksys_write+0x10/0x10 [ 157.980524][ T6820] ? __do_fast_syscall_32+0xbe/0x590 [ 157.980544][ T6820] ? __ia32_sys_mremap+0x20/0xc0 [ 157.980571][ T6820] __do_fast_syscall_32+0x1f7/0x590 [ 157.980593][ T6820] ? rcu_is_watching+0x15/0xb0 [ 157.980614][ T6820] ? do_fast_syscall_32+0x34/0x80 [ 157.980641][ T6820] do_fast_syscall_32+0x34/0x80 [ 157.980662][ T6820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.980685][ T6820] RIP: 0023:0xf70dd539 [ 157.980703][ T6820] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 157.980718][ T6820] RSP: 002b:00000000f548b55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 157.980740][ T6820] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000 [ 157.980753][ T6820] RDX: 0000000000400000 RSI: 0000000000000003 RDI: 0000000080000000 [ 157.980765][ T6820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.980776][ T6820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.980787][ T6820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.980819][ T6820] [ 158.442358][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.453414][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.463537][ T40] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 158.472698][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.482640][ T40] usb 2-1: config 0 descriptor?? [ 158.499994][ T5925] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 158.620957][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 158.632769][ T6823] FAULT_INJECTION: forcing a failure. [ 158.632769][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 158.704856][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.3.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.704890][ T6823] Tainted: [L]=SOFTLOCKUP [ 158.704897][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.704907][ T6823] Call Trace: [ 158.704914][ T6823] [ 158.704923][ T6823] dump_stack_lvl+0x189/0x250 [ 158.704952][ T6823] ? __pfx____ratelimit+0x10/0x10 [ 158.704971][ T6823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.704993][ T6823] ? __pfx__printk+0x10/0x10 [ 158.705026][ T6823] ? __pfx___might_resched+0x10/0x10 [ 158.705045][ T6823] ? fs_reclaim_acquire+0x7d/0x100 [ 158.705069][ T6823] should_fail_ex+0x414/0x560 [ 158.705103][ T6823] should_failslab+0xa8/0x100 [ 158.705128][ T6823] __kmalloc_noprof+0xdf/0x800 [ 158.705146][ T6823] ? tomoyo_encode+0x28b/0x550 [ 158.705176][ T6823] tomoyo_encode+0x28b/0x550 [ 158.705206][ T6823] tomoyo_realpath_from_path+0x58d/0x5d0 [ 158.705242][ T6823] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 158.705262][ T6823] tomoyo_path_number_perm+0x1e8/0x5a0 [ 158.705293][ T6823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.705314][ T6823] ? __lock_acquire+0x6b6/0x2cf0 [ 158.705376][ T6823] ? __fget_files+0x2a/0x420 [ 158.705404][ T6823] ? __fget_files+0x3a0/0x420 [ 158.705424][ T6823] ? __fget_files+0x2a/0x420 [ 158.705451][ T6823] security_file_ioctl_compat+0xcb/0x2d0 [ 158.705474][ T6823] __ia32_compat_sys_ioctl+0x128/0x840 [ 158.705497][ T6823] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 158.705516][ T6823] ? __fget_files+0x3a0/0x420 [ 158.705544][ T6823] ? fput+0xa0/0xd0 [ 158.705568][ T6823] ? ksys_write+0x22a/0x250 [ 158.705584][ T6823] ? exc_page_fault+0x82/0x100 [ 158.705605][ T6823] ? __pfx_ksys_write+0x10/0x10 [ 158.705629][ T6823] ? __do_fast_syscall_32+0xbe/0x590 [ 158.705654][ T6823] __do_fast_syscall_32+0x1f7/0x590 [ 158.705676][ T6823] ? rcu_is_watching+0x15/0xb0 [ 158.705695][ T6823] ? do_fast_syscall_32+0x34/0x80 [ 158.705720][ T6823] do_fast_syscall_32+0x34/0x80 [ 158.705741][ T6823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.705761][ T6823] RIP: 0023:0xf7f51539 [ 158.705779][ T6823] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 158.705793][ T6823] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 158.705814][ T6823] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040047459 [ 158.705827][ T6823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.705837][ T6823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.705847][ T6823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.705864][ T6823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.705895][ T6823] [ 158.705952][ T6823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.713229][ T5925] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 159.012863][ T5925] usb 5-1: config 0 has no interface number 0 [ 159.019185][ T5925] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 159.030886][ T5925] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 159.045078][ T6810] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.049699][ T5925] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 159.061961][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.085177][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.120370][ T6810] set match dimension is over the limit! [ 159.165856][ T40] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 159.180016][ T40] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 159.202259][ T5925] usb 5-1: Product: syz [ 159.206506][ T5925] usb 5-1: Manufacturer: syz [ 159.219388][ T40] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 159.226851][ T5925] usb 5-1: SerialNumber: syz [ 159.234233][ T40] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 159.245579][ T5925] usb 5-1: config 0 descriptor?? [ 159.250848][ T40] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 159.265794][ T6818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 159.275503][ T40] stadia 0003:18D1:9400.0002: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 159.292426][ T40] stadia 0003:18D1:9400.0002: no inputs found [ 159.298671][ T40] stadia 0003:18D1:9400.0002: force feedback init failed [ 159.318711][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.363624][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.372449][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.402718][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.404625][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.463056][ T5925] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 159.470088][ T5921] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.530695][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.586608][ T5921] usb 1-1: config 0 descriptor?? [ 159.601153][ T5925] usb 2-1: USB disconnect, device number 10 [ 159.855455][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 160.074756][ T5921] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 160.380029][ T5925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.477317][ T5921] usb 1-1: USB disconnect, device number 11 [ 160.491110][ T40] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.619957][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 160.629418][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.644720][ T40] usb 4-1: device descriptor read/64, error -71 [ 160.657736][ T5925] usb 2-1: config 0 has no interfaces? [ 160.670955][ T5925] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 160.680661][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 160.690048][ T5925] usb 2-1: Product: syz [ 160.695001][ T5925] usb 2-1: Manufacturer: syz [ 160.699974][ T5925] usb 2-1: SerialNumber: syz [ 160.711189][ T5925] usb 2-1: config 0 descriptor?? [ 160.783061][ T5921] usb 5-1: USB disconnect, device number 10 [ 160.804313][ T5921] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 160.936557][ T40] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.974016][ T6846] fuse: Unknown parameter '0x0000000000000004' [ 161.101838][ T40] usb 4-1: device descriptor read/64, error -71 [ 161.122958][ T5921] usb 2-1: USB disconnect, device number 11 [ 161.173560][ T6853] syzkaller1: entered promiscuous mode [ 161.179232][ T6853] syzkaller1: entered allmulticast mode [ 161.210554][ T40] usb usb4-port1: attempt power cycle [ 161.370016][ T6860] ======================================================= [ 161.370016][ T6860] WARNING: The mand mount option has been deprecated and [ 161.370016][ T6860] and is ignored by this kernel. Remove the mand [ 161.370016][ T6860] option from the mount to silence this warning. [ 161.370016][ T6860] ======================================================= [ 161.404580][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 161.430295][ T5926] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 161.560082][ T40] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.593564][ T40] usb 4-1: device descriptor read/8, error -71 [ 161.601079][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.612979][ T5926] usb 5-1: config 0 has no interfaces? [ 161.618631][ T5926] usb 5-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 161.628095][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.670368][ T5926] usb 5-1: config 0 descriptor?? [ 161.863432][ T40] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.949733][ T40] usb 4-1: device descriptor read/8, error -71 [ 161.978172][ T5921] usb 5-1: USB disconnect, device number 11 [ 162.070482][ T40] usb usb4-port1: unable to enumerate USB device [ 162.388894][ T6873] syzkaller1: entered promiscuous mode [ 162.394951][ T6873] syzkaller1: entered allmulticast mode [ 162.684962][ T6879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.281'. [ 163.150031][ T5884] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 163.378922][ T5884] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 163.390311][ T5884] usb 5-1: config 0 has no interface number 0 [ 163.397633][ T5884] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.409972][ T5906] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 163.425316][ T5884] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 163.513234][ T5884] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 163.530485][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.600650][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 163.606024][ T5884] usb 5-1: Product: syz [ 163.607936][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.640688][ T5884] usb 5-1: Manufacturer: syz [ 163.652679][ T5884] usb 5-1: SerialNumber: syz [ 163.686166][ T5906] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 163.687148][ T5884] usb 5-1: config 0 descriptor?? [ 163.835611][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.880350][ T6885] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.926008][ T5906] usb 3-1: config 0 descriptor?? [ 163.966790][ T5884] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 164.357544][ T5906] hid (null): report_id 20425 is invalid [ 164.385879][ T5906] mcp2221 0003:04D8:00DD.0004: report_id 20425 is invalid [ 164.404308][ T5906] mcp2221 0003:04D8:00DD.0004: item 0 2 1 8 parsing failed [ 164.501094][ T5906] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 164.507744][ T5906] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22 [ 164.621942][ T5906] usb 3-1: USB disconnect, device number 15 [ 165.319911][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 165.359094][ T6903] netlink: 168 bytes leftover after parsing attributes in process `syz.3.286'. [ 166.870661][ T6924] syzkaller1: entered promiscuous mode [ 166.876154][ T6924] syzkaller1: entered allmulticast mode [ 167.123210][ T6927] syzkaller1: entered promiscuous mode [ 167.131204][ T5884] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 167.174076][ T6927] syzkaller1: entered allmulticast mode [ 167.185753][ T977] usb 5-1: USB disconnect, device number 12 [ 167.195022][ T977] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 167.302777][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.343843][ T5884] usb 3-1: config 0 has no interfaces? [ 167.365083][ T5884] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 167.399507][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.438339][ T5884] usb 3-1: config 0 descriptor?? [ 167.725005][ T6936] fuse: Unknown parameter '0xffffffffffffffff' [ 168.232667][ T6948] fuse: Bad value for 'fd' [ 168.471734][ T5926] usb 3-1: USB disconnect, device number 16 [ 168.931776][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 169.223409][ T6959] delete_channel: no stack [ 169.261067][ T6959] tipc: Enabling of bearer rejected, failed to enable media [ 169.272333][ T6958] delete_channel: no stack [ 169.348666][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.305'. [ 169.631614][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 169.678389][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 169.749427][ T6970] fuse: Bad value for 'fd' [ 169.819614][ T6966] vlan2: entered allmulticast mode [ 169.859300][ T6966] veth1_virt_wifi: entered allmulticast mode [ 170.054102][ T6979] syzkaller1: entered promiscuous mode [ 170.094002][ T6979] syzkaller1: entered allmulticast mode [ 170.169495][ T6982] fuse: Bad value for 'fd' [ 171.142216][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 171.194427][ T7000] syzkaller1: entered promiscuous mode [ 171.204522][ T7000] syzkaller1: entered allmulticast mode [ 171.554886][ T7008] fuse: Unknown parameter '0xffffffffffffffff' [ 171.888843][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 171.888857][ T30] audit: type=1326 audit(1766198235.266:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 171.946561][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 171.971020][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 172.016812][ T30] audit: type=1326 audit(1766198235.326:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 172.311245][ T30] audit: type=1326 audit(1766198235.326:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 172.460009][ T30] audit: type=1326 audit(1766198235.326:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 172.546198][ T30] audit: type=1326 audit(1766198235.326:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 172.599764][ T7024] fuse: Bad value for 'fd' [ 172.632389][ T30] audit: type=1326 audit(1766198235.326:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 172.683875][ T30] audit: type=1326 audit(1766198235.326:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 172.717902][ T30] audit: type=1326 audit(1766198235.326:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 173.064316][ T30] audit: type=1326 audit(1766198235.426:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 173.161909][ T30] audit: type=1326 audit(1766198235.426:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 173.939985][ T5906] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 174.130067][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 174.142950][ T5906] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 174.155027][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64320, setting to 1024 [ 174.185142][ T5906] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 174.226985][ T5906] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.265151][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 174.277988][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.302722][ T5906] usb 4-1: Product: syz [ 174.314689][ T5906] usb 4-1: Manufacturer: syz [ 174.320571][ T5906] usb 4-1: SerialNumber: syz [ 174.350963][ T7056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.374921][ T5906] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 174.399837][ T5906] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 174.471365][ T5906] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 174.539976][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.702420][ T7070] fuse: Bad value for 'fd' [ 174.847705][ T5921] usb 3-1: device descriptor read/64, error -71 [ 175.143354][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 175.217255][ T7074] Option '/00' to dns_resolver key: bad/missing value [ 175.290016][ T5921] usb 3-1: device descriptor read/64, error -71 [ 175.410042][ T5921] usb usb3-port1: attempt power cycle [ 175.467108][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 175.640419][ T7078] delete_channel: no stack [ 175.648271][ T7078] tipc: Enabling of bearer rejected, failed to enable media [ 175.656879][ T7077] delete_channel: no stack [ 175.755152][ T5921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 175.790485][ T5921] usb 3-1: device descriptor read/8, error -71 [ 176.051976][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 176.081993][ T5921] usb 3-1: device descriptor read/8, error -71 [ 176.201180][ T5921] usb usb3-port1: unable to enumerate USB device [ 176.482086][ T7093] syzkaller1: entered promiscuous mode [ 176.509240][ T7093] syzkaller1: entered allmulticast mode [ 176.571749][ T5926] usb 4-1: USB disconnect, device number 17 [ 176.699567][ T7097] fuse: Bad value for 'fd' [ 176.770355][ T5921] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 176.932423][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.954144][ T5921] usb 2-1: config 0 has no interfaces? [ 176.970227][ T5921] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 176.984944][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.012852][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'. [ 177.024382][ T5921] usb 2-1: config 0 descriptor?? [ 177.147266][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'. [ 177.291045][ T5926] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 177.380824][ T7115] syzkaller1: entered promiscuous mode [ 177.386353][ T7115] syzkaller1: entered allmulticast mode [ 177.461907][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.463379][ T5921] usb 2-1: USB disconnect, device number 12 [ 177.472694][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.491113][ T5926] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.501311][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.510958][ T5926] usb 4-1: SerialNumber: syz [ 177.733994][ T5926] usb 4-1: 0:2 : does not exist [ 177.742102][ T5926] usb 4-1: unit 5: unexpected type 0x0c [ 177.758244][ T5926] usb 4-1: USB disconnect, device number 18 [ 177.794117][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.137551][ T7122] syzkaller1: entered promiscuous mode [ 178.143461][ T7122] syzkaller1: entered allmulticast mode [ 178.411381][ T7127] fuse: Bad value for 'fd' [ 178.908449][ T7135] syzkaller1: entered promiscuous mode [ 178.957827][ T7135] syzkaller1: entered allmulticast mode [ 179.074987][ T7140] delete_channel: no stack [ 179.082660][ T7140] tipc: Enabling of bearer rejected, failed to enable media [ 179.092850][ T7139] delete_channel: no stack [ 179.232077][ T7141] geneve2: entered promiscuous mode [ 179.300326][ T7141] geneve2: entered allmulticast mode [ 179.529106][ T7154] hub 1-0:1.0: USB hub found [ 179.538396][ T7154] hub 1-0:1.0: 1 port detected [ 179.699243][ T7152] syzkaller1: entered promiscuous mode [ 179.705086][ T7152] syzkaller1: entered allmulticast mode [ 179.820079][ T5926] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 179.850965][ T977] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 179.972702][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.983095][ T5926] usb 1-1: config 0 has no interfaces? [ 179.988870][ T5926] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 179.998078][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.008791][ T5926] usb 1-1: config 0 descriptor?? [ 180.009974][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 180.025438][ T977] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 180.040987][ T977] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 180.050784][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.063373][ T977] usb 3-1: Product: syz [ 180.068045][ T977] usb 3-1: Manufacturer: syz [ 180.073588][ T977] usb 3-1: SerialNumber: syz [ 180.085661][ T977] usb 3-1: config 0 descriptor?? [ 180.096197][ T977] cdc_ether 3-1:0.0: skipping garbage [ 180.097868][ T7163] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 180.102400][ T977] usb 3-1: bad CDC descriptors [ 180.121916][ T977] usb 3-1: unsupported MDLM descriptors [ 180.127179][ T7163] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 180.459609][ T7165] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 180.479411][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 180.489223][ T7165] ipvlan1: entered promiscuous mode [ 180.500770][ T7165] ipvlan1: entered allmulticast mode [ 180.508776][ T7165] veth0_vlan: entered allmulticast mode [ 180.569587][ T7165] bridge0: port 3(ipvlan1) entered blocking state [ 180.609096][ T7165] bridge0: port 3(ipvlan1) entered disabled state [ 180.636292][ T7165] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 180.853776][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 180.853796][ T30] audit: type=1326 audit(1766198244.216:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 180.932824][ T5926] usb 1-1: USB disconnect, device number 12 [ 181.000743][ T30] audit: type=1326 audit(1766198244.216:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 181.032902][ T30] audit: type=1326 audit(1766198244.216:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 181.058907][ T30] audit: type=1326 audit(1766198244.306:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 181.090039][ T5925] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 181.099743][ T30] audit: type=1326 audit(1766198244.306:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 181.302544][ T5925] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 181.362104][ T5925] usb 4-1: config 0 has no interface number 0 [ 181.374119][ T5925] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 181.388234][ T30] audit: type=1326 audit(1766198244.316:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 181.456218][ T5925] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 181.660032][ T977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.674854][ T30] audit: type=1326 audit(1766198244.316:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 181.727646][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 181.754572][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.778048][ T30] audit: type=1326 audit(1766198244.316:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 181.818459][ T5925] usb 4-1: Product: syz [ 181.827475][ T5925] usb 4-1: Manufacturer: syz [ 181.840495][ T5925] usb 4-1: SerialNumber: syz [ 181.878651][ T30] audit: type=1326 audit(1766198244.356:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 182.140145][ T30] audit: type=1326 audit(1766198244.356:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 182.221893][ T5926] usb 3-1: USB disconnect, device number 21 [ 182.248565][ T5925] usb 4-1: config 0 descriptor?? [ 182.356798][ T7173] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 183.787521][ T7182] syzkaller1: entered promiscuous mode [ 183.793528][ T5925] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 183.896959][ T7182] syzkaller1: entered allmulticast mode [ 184.460114][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.515496][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.757187][ T9] usb 4-1: USB disconnect, device number 19 [ 184.793601][ T9] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 185.724791][ T7222] delete_channel: no stack [ 185.750477][ T7218] syzkaller1: entered promiscuous mode [ 185.766459][ T7218] syzkaller1: entered allmulticast mode [ 185.822359][ T7222] tipc: Enabling of bearer rejected, failed to enable media [ 185.871447][ T7224] team0: Port device ip6gre0 removed [ 185.921555][ T7224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.938145][ T7221] delete_channel: no stack [ 185.939057][ T5925] skbuff: skb_under_panic: text:ffffffff8a27e588 len:136 put:40 head:ffff888078aff000 data:ffff888078afefe8 tail:0x70 end:0x6c0 dev:team0 [ 185.987825][ T5925] ------------[ cut here ]------------ [ 185.993479][ T5925] kernel BUG at net/core/skbuff.c:213! [ 186.003854][ T5925] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 186.010156][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.021132][ T5925] Tainted: [L]=SOFTLOCKUP [ 186.025475][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.035532][ T5925] Workqueue: mld mld_ifc_work [ 186.040226][ T5925] RIP: 0010:skb_panic+0x157/0x160 [ 186.045263][ T5925] Code: c7 20 98 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 186.064959][ T5925] RSP: 0018:ffffc900050472c0 EFLAGS: 00010286 [ 186.071033][ T5925] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: de763518fa0ac900 [ 186.079097][ T5925] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 186.087163][ T5925] RBP: 00000000000006c0 R08: ffffc90005046fc7 R09: 1ffff92000a08df8 [ 186.095141][ T5925] R10: dffffc0000000000 R11: fffff52000a08df9 R12: ffff888029203150 [ 186.103118][ T5925] R13: ffff888078aff000 R14: ffff888078afefe8 R15: 0000000000000070 [ 186.111090][ T5925] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 186.120109][ T5925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.127300][ T5925] CR2: 000000000c2b4809 CR3: 000000006c04e000 CR4: 00000000003526f0 [ 186.135367][ T5925] Call Trace: [ 186.138646][ T5925] [ 186.141579][ T5925] ? ip6gre_header+0xc8/0x790 [ 186.146263][ T5925] ? ip6gre_header+0xc8/0x790 [ 186.150942][ T5925] skb_push+0xc3/0xe0 [ 186.154937][ T5925] ip6gre_header+0xc8/0x790 [ 186.159455][ T5925] ? __pfx_ip6gre_header+0x10/0x10 [ 186.164603][ T5925] ? read_seqbegin+0x1ac/0x250 [ 186.169365][ T5925] ? __pfx_read_seqbegin+0x10/0x10 [ 186.174484][ T5925] ? ___neigh_create+0x1c5f/0x2230 [ 186.179687][ T5925] ? __pfx_ip6gre_header+0x10/0x10 [ 186.184802][ T5925] neigh_connected_output+0x286/0x460 [ 186.190272][ T5925] ip6_finish_output2+0xfb3/0x1480 [ 186.195503][ T5925] ? __pfx_ip6_finish_output2+0x10/0x10 [ 186.201073][ T5925] ? ip6_mtu+0x7d/0x490 [ 186.205253][ T5925] ? ip6_mtu+0x38c/0x490 [ 186.209501][ T5925] ? ip6_finish_output+0x2ef/0x4e0 [ 186.214622][ T5925] ? ip6_output+0x126/0x550 [ 186.219200][ T5925] ip6_output+0x340/0x550 [ 186.223621][ T5925] NF_HOOK+0x9e/0x380 [ 186.227612][ T5925] ? NF_HOOK+0x101/0x380 [ 186.231854][ T5925] ? __pfx_NF_HOOK+0x10/0x10 [ 186.236457][ T5925] ? __pfx_dst_output+0x10/0x10 [ 186.241312][ T5925] ? icmp6_dst_alloc+0x3a5/0x420 [ 186.246255][ T5925] ? icmp6_dst_alloc+0x3a5/0x420 [ 186.251199][ T5925] mld_sendpack+0x8d4/0xe60 [ 186.255709][ T5925] ? mld_sendpack+0x1e7/0xe60 [ 186.260566][ T5925] ? __pfx_mld_sendpack+0x10/0x10 [ 186.265609][ T5925] mld_ifc_work+0x83e/0xd60 [ 186.270117][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.275417][ T5925] ? process_scheduled_works+0x9ef/0x1770 [ 186.281135][ T5925] process_scheduled_works+0xad1/0x1770 [ 186.286690][ T5925] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.292689][ T5925] worker_thread+0x8a0/0xda0 [ 186.297296][ T5925] kthread+0x711/0x8a0 [ 186.301386][ T5925] ? __pfx_worker_thread+0x10/0x10 [ 186.306580][ T5925] ? __pfx_kthread+0x10/0x10 [ 186.311257][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.316544][ T5925] ? lockdep_hardirqs_on+0x98/0x140 [ 186.321746][ T5925] ? __pfx_kthread+0x10/0x10 [ 186.326337][ T5925] ret_from_fork+0x599/0xb30 [ 186.330938][ T5925] ? __pfx_ret_from_fork+0x10/0x10 [ 186.336064][ T5925] ? __switch_to_asm+0x39/0x70 [ 186.340937][ T5925] ? __switch_to_asm+0x33/0x70 [ 186.345714][ T5925] ? __pfx_kthread+0x10/0x10 [ 186.350423][ T5925] ret_from_fork_asm+0x1a/0x30 [ 186.355221][ T5925] [ 186.358297][ T5925] Modules linked in: [ 186.363021][ T5925] ---[ end trace 0000000000000000 ]--- [ 186.408708][ T7230] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 186.426182][ T5925] RIP: 0010:skb_panic+0x157/0x160 [ 186.426223][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 186.439152][ T7230] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 186.452928][ T7230] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 186.460771][ T7230] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.470505][ T5925] Code: c7 20 98 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 186.493745][ T5925] RSP: 0018:ffffc900050472c0 EFLAGS: 00010286 [ 186.506361][ T5925] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: de763518fa0ac900 [ 186.520384][ T5925] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 186.529557][ T5925] RBP: 00000000000006c0 R08: ffffc90005046fc7 R09: 1ffff92000a08df8 [ 186.538860][ T5925] R10: dffffc0000000000 R11: fffff52000a08df9 R12: ffff888029203150 [ 186.547525][ T5925] R13: ffff888078aff000 R14: ffff888078afefe8 R15: 0000000000000070 [ 186.556411][ T5925] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 186.591181][ T5925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.598918][ T5925] CR2: 000000003140cffc CR3: 000000006c04e000 CR4: 00000000003526f0 [ 186.601536][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.610572][ T5925] Kernel panic - not syncing: Fatal exception [ 186.617324][ T5925] Kernel Offset: disabled