last executing test programs: 7.373254338s ago: executing program 2 (id=944): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300070004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x900) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) 5.977143488s ago: executing program 3 (id=951): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7ff}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x1000, 0x1, r3, 0x8}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x1, r3, 0xd}) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-4'], 0x9) 5.788888332s ago: executing program 3 (id=953): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 4.767334825s ago: executing program 3 (id=956): syz_io_uring_submit(0x0, 0x0, 0x0) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, 0x0, 0x880, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000140)=[{0x9c, 0x11, 0xe4, &(0x7f00000002c0)="e510350490222569e3b0fc79368eb1e65f09fb0c36f5490afa0da5344f47b06c4c6be63ced3a4097c0a08fdf62b9f6d7f882f93f72a8929f7ab315798a8aa4e2e2e03037d2bd381b7dae49b23d22eed6b602d7940014457de555c9bfc61d06f0346720c7321b322de83e46ca59febdba8c9edcd5427e2f911d62ad2904a310697403d4ab5c291066e2695c1e1532eafa53510596c5bdc46d0d6f330b3d3fe0e0234687cac88ac5fd3830118e283ad2be4e81732c56e6a5ef066dc86f64d70624ee20766a55ca74d9e7ad6a3037eff45a89c94da3a0d0c8322ca20da1927dc9317d2ea6e6"}], 0x1}) 4.669809379s ago: executing program 0 (id=958): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 4.519601941s ago: executing program 0 (id=961): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) 4.311496395s ago: executing program 4 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000030000080900010073797a300000000014000000160a010100000000000000000700000830000000160a010300000000000000000300000604fcf312dc74000380090002007379afcb000000000900010073797a3000000000140000001100010000000000000000"], 0x8c}}, 0x4000000) 4.257089208s ago: executing program 2 (id=964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7ff}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x1000, 0x1, r3, 0x8}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x1, r3, 0xd}) listen(r0, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-4'], 0x9) 4.128717139s ago: executing program 4 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4000001, r0, 0x4}, 0x38) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000580)={0x0, 0x0, 0x0}) (async) r2 = socket(0x10, 0x803, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000380)=0x2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESHEX], 0x38}}, 0x40004010) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c000580080001008863"], 0x118}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0x8, 0x4) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a050000000000000000000100000008000240000000031c000000030a01020000000000000000010000200900010073797a30000000000900030073797a30000000000c000240000000000000000460000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d61746368000000240002800c000300e4edf2b75cc7c0a308000240000000010c000100706b7474797065000900010004007a3000000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) 4.078962498s ago: executing program 0 (id=966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="d800000007"], 0xd8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.004241955s ago: executing program 4 (id=967): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x2400c056) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0xd, &(0x7f00000004c0)=0x0) io_submit(r8, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x7aed979249b5ae9d, 0x0) syz_usb_connect(0x5, 0x58, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010200f837fa08e20422145353010a030109024600010000000009046d000002843b000595cb3cd4ff4260002406000064240003000d240f0101000000f0920800070524060001052400f1100d240f0100040000080000"], 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000000, 0x800, 0x7}, 0x6}, 0x20, 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 4.003042502s ago: executing program 2 (id=968): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfffffff903000006a108200000000020400000000640000950000000000ffff"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 3.907270445s ago: executing program 2 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x54}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (fail_nth: 7) 3.899765513s ago: executing program 0 (id=970): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/92, 0x5c}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000580)=0x2, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 3.799401502s ago: executing program 2 (id=971): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000000)={0x3, 0x0, 0x1018, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_pidfd_open(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x40040) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.647914189s ago: executing program 0 (id=972): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 2.389931059s ago: executing program 0 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc805}, 0x0) syz_usb_connect(0x1, 0x69, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYBLOB="46adc0c3f2de756f84e575ac378e5178bae6e8810ad28d27ed7c46c183008fb90ac2b04a1a5b5b06a0dc517b98a1158da5b60dd883fae5c59bcabeeadfab777c2efaf6a6", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.958794905s ago: executing program 1 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="d800000007"], 0xd8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.861188953s ago: executing program 1 (id=982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x0, 0x0, 0x1000}}}}}}, 0x0) 1.667786257s ago: executing program 3 (id=983): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/92, 0x5c}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000580)=0x2, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.532709829s ago: executing program 3 (id=984): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="0fa20367553f46836b4876477500c71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3f}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.274813162s ago: executing program 1 (id=985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x0, 0x0, 0x1000}}}}}}, 0x0) 787.961245ms ago: executing program 2 (id=986): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x9, 0x80000, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x81fb, 0xc3b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) 667.393495ms ago: executing program 1 (id=987): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 571.594007ms ago: executing program 1 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x19, 0x5b, 0x0, 0x1, [@generic="07e8b4961045a12728b1652dedbbb9f49526ee141c"]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 528.976172ms ago: executing program 1 (id=989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0300001600010025bd7000ffdbdf2500000000000000000000ffff6401010000000000000000000000ffff640101014e2300004e200003020020103c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x3bc}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200", @ANYRESDEC], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r2, r5, 0x0, 0x80001d00c0d1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e23, 0x8, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x4, r6, r7}, {0xdc, 0x57d, 0x73b, 0x7, 0xfffffffffffffff7, 0x8, 0x9, 0x4}, {0x80, 0xfffffffffffffff8, 0x7ff, 0x7d83}, 0x9, 0x6e6bb4, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x86, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x3502, 0x0, 0x1, 0x2, 0x4, 0xf, 0x4}}, 0xe4) 519.347725ms ago: executing program 3 (id=990): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000001f, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xc, 0x0, 0x5, 0x3, 0x0, 0x700, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x9}]}, 0x18}, 0x1, 0x7}, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x501100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) 356.911114ms ago: executing program 4 (id=991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7ff}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x1000, 0x1, r3, 0x8}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-4'], 0x9) 210.032588ms ago: executing program 4 (id=992): r0 = socket(0x11, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x1, 0x9}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000, 0xd000, 0x0, 0x3be66fef576f3e54}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4a7, @empty, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write(r0, &(0x7f00000000c0)="240000001a005f0400f9f40700090401b4ecd754388000000000000000000000000800827336cf9cc22c794b9836a952e4f11d19c7f132514298e799fc7b4565b0aa914713f800000000f8ffffffffffffffba6bb1ae9fa5d7", 0x59) 0s ago: executing program 4 (id=993): syz_io_uring_submit(0x0, 0x0, 0x0) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, 0x0, 0x880, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000140)=[{0x9c, 0x11, 0xe4, &(0x7f00000002c0)="e510350490222569e3b0fc79368eb1e65f09fb0c36f5490afa0da5344f47b06c4c6be63ced3a4097c0a08fdf62b9f6d7f882f93f72a8929f7ab315798a8aa4e2e2e03037d2bd381b7dae49b23d22eed6b602d7940014457de555c9bfc61d06f0346720c7321b322de83e46ca59febdba8c9edcd5427e2f911d62ad2904a310697403d4ab5c291066e2695c1e1532eafa53510596c5bdc46d0d6f330b3d3fe0e0234687cac88ac5fd3830118e283ad2be4e81732c56e6a5ef066dc86f64d70624ee20766a55ca74d9e7ad6a3037eff45a89c94da3a0d0c8322ca20da1927dc9317d2ea6e6"}], 0x1}) kernel console output (not intermixed with test programs): 0x10/0x10 [ 179.170769][ T7662] ? netlink_sendmsg+0x642/0xb30 [ 179.170793][ T7662] ? skb_put+0x11b/0x210 [ 179.170810][ T7662] netlink_sendmsg+0x805/0xb30 [ 179.170841][ T7662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.170866][ T7662] ? __import_iovec+0x5d4/0x7f0 [ 179.170886][ T7662] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.170904][ T7662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.170924][ T7662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.170961][ T7662] __sock_sendmsg+0x219/0x270 [ 179.170987][ T7662] ____sys_sendmsg+0x505/0x830 [ 179.171007][ T7662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.171026][ T7662] ? kstrtouint+0x6e/0xe0 [ 179.171052][ T7662] ___sys_sendmsg+0x21f/0x2a0 [ 179.171070][ T7662] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.171088][ T7662] ? get_pid_task+0x20/0x1f0 [ 179.171108][ T7662] ? get_pid_task+0x20/0x1f0 [ 179.171140][ T7662] ? __fget_files+0x2a/0x420 [ 179.171156][ T7662] ? __fget_files+0x3a0/0x420 [ 179.171176][ T7662] __sys_sendmsg+0x164/0x220 [ 179.171195][ T7662] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.171217][ T7662] ? __pfx_ksys_write+0x10/0x10 [ 179.171245][ T7662] __do_fast_syscall_32+0xb6/0x2b0 [ 179.171275][ T7662] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 179.171303][ T7662] do_fast_syscall_32+0x34/0x80 [ 179.171330][ T7662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.171353][ T7662] RIP: 0023:0xf7fa4539 [ 179.171369][ T7662] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 179.171386][ T7662] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 179.171407][ T7662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 179.171422][ T7662] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.171433][ T7662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.171444][ T7662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 179.171456][ T7662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.171475][ T7662] [ 180.028646][ T7668] wireguard3: entered promiscuous mode [ 180.217691][ T7668] wireguard3: entered allmulticast mode [ 180.246179][ T7680] netlink: 44 bytes leftover after parsing attributes in process `syz.4.477'. [ 180.255345][ T7680] netlink: 'syz.4.477': attribute type 6 has an invalid length. [ 180.263580][ T7680] netlink: 'syz.4.477': attribute type 5 has an invalid length. [ 180.309180][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 180.376238][ T7680] netlink: 'syz.4.477': attribute type 4 has an invalid length. [ 180.438868][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'. [ 180.492677][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.502269][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.672369][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.681970][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.827856][ T7701] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 181.867176][ T7701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.066074][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 182.086714][ T7701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.109559][ T7701] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 182.203375][ T7701] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 182.225818][ T7706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.503375][ T7720] FAULT_INJECTION: forcing a failure. [ 182.503375][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 182.516456][ T7720] CPU: 1 UID: 0 PID: 7720 Comm: syz.0.493 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 182.516486][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.516498][ T7720] Call Trace: [ 182.516505][ T7720] [ 182.516515][ T7720] dump_stack_lvl+0x189/0x250 [ 182.516545][ T7720] ? __pfx____ratelimit+0x10/0x10 [ 182.516572][ T7720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.516606][ T7720] ? __pfx__printk+0x10/0x10 [ 182.516635][ T7720] ? fs_reclaim_acquire+0x7d/0x100 [ 182.516665][ T7720] ? __pfx___might_resched+0x10/0x10 [ 182.516686][ T7720] ? lock_acquire+0x5f/0x360 [ 182.516714][ T7720] should_fail_ex+0x414/0x560 [ 182.516740][ T7720] should_failslab+0xa8/0x100 [ 182.516770][ T7720] __kmalloc_cache_noprof+0x70/0x3d0 [ 182.516798][ T7720] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 182.516828][ T7720] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 182.516855][ T7720] sctp_association_new+0x15d3/0x25f0 [ 182.516881][ T7720] sctp_connect_new_asoc+0x2c5/0x690 [ 182.516903][ T7720] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 182.516921][ T7720] ? __local_bh_enable_ip+0x12d/0x1c0 [ 182.516945][ T7720] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 182.516971][ T7720] ? security_sctp_bind_connect+0x7e/0x2e0 [ 182.516998][ T7720] sctp_sendmsg+0x155c/0x2810 [ 182.517032][ T7720] ? __pfx_sctp_sendmsg+0x10/0x10 [ 182.517064][ T7720] ? aa_sk_perm+0x81e/0x950 [ 182.517093][ T7720] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.517122][ T7720] ? sock_rps_record_flow+0x19/0x410 [ 182.517146][ T7720] ? inet_sendmsg+0x2f4/0x370 [ 182.517172][ T7720] __sock_sendmsg+0x19c/0x270 [ 182.517200][ T7720] __sys_sendto+0x3bd/0x520 [ 182.517229][ T7720] ? __pfx___sys_sendto+0x10/0x10 [ 182.517257][ T7720] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 182.517290][ T7720] ? __fget_files+0x3a0/0x420 [ 182.517312][ T7720] ? ksys_write+0x22a/0x250 [ 182.517336][ T7720] ? __pfx_ksys_write+0x10/0x10 [ 182.517359][ T7720] __ia32_sys_sendto+0xdd/0x100 [ 182.517387][ T7720] __do_fast_syscall_32+0xb6/0x2b0 [ 182.517415][ T7720] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 182.517445][ T7720] do_fast_syscall_32+0x34/0x80 [ 182.517474][ T7720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.517496][ T7720] RIP: 0023:0xf7fa4539 [ 182.517515][ T7720] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.517533][ T7720] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 182.517555][ T7720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 182.517571][ T7720] RDX: 0000000000000001 RSI: 0000000000044004 RDI: 0000000080000100 [ 182.517592][ T7720] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 182.517608][ T7720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.517619][ T7720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.517638][ T7720] [ 182.840349][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.180181][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 183.313983][ T7728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.494'. [ 183.323350][ T7728] netlink: 'syz.0.494': attribute type 6 has an invalid length. [ 183.331973][ T7728] netlink: 'syz.0.494': attribute type 5 has an invalid length. [ 183.341474][ T43] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 183.349665][ T43] usb 4-1: config 0 has no interface number 0 [ 183.356255][ T7728] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 183.364125][ T43] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 183.376625][ T43] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.388346][ T43] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.401718][ T43] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 183.411363][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.421739][ T43] usb 4-1: config 0 descriptor?? [ 183.430876][ T43] gspca_main: spca561-2.14.0 probing abcd:cdee [ 183.443735][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'. [ 183.815344][ T7737] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 183.838215][ T7737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 183.855061][ T7737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 183.862205][ T7737] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.873738][ T7737] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 183.903422][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.499'. [ 183.915458][ T7741] 8021q: adding VLAN 0 to HW filter on device bond7 [ 183.941570][ T43] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 183.950916][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.957939][ T43] usb 4-1: MIDIStreaming interface descriptor not found [ 183.985301][ T7744] FAULT_INJECTION: forcing a failure. [ 183.985301][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 183.998266][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.4.500 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 183.998297][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.998309][ T7744] Call Trace: [ 183.998317][ T7744] [ 183.998326][ T7744] dump_stack_lvl+0x189/0x250 [ 183.998355][ T7744] ? __pfx____ratelimit+0x10/0x10 [ 183.998382][ T7744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.998405][ T7744] ? __pfx__printk+0x10/0x10 [ 183.998432][ T7744] ? fs_reclaim_acquire+0x7d/0x100 [ 183.998462][ T7744] ? __pfx___might_resched+0x10/0x10 [ 183.998480][ T7744] ? lock_acquire+0x5f/0x360 [ 183.998509][ T7744] should_fail_ex+0x414/0x560 [ 183.998535][ T7744] should_failslab+0xa8/0x100 [ 183.998574][ T7744] kmem_cache_alloc_noprof+0x73/0x3c0 [ 183.998600][ T7744] ? getname_flags+0xb8/0x540 [ 183.998620][ T7744] getname_flags+0xb8/0x540 [ 183.998637][ T7744] ? rcu_is_watching+0x15/0xb0 [ 183.998658][ T7744] __ia32_sys_link+0x69/0x90 [ 183.998686][ T7744] __do_fast_syscall_32+0xb6/0x2b0 [ 183.998715][ T7744] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 183.998744][ T7744] do_fast_syscall_32+0x34/0x80 [ 183.998771][ T7744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.998796][ T7744] RIP: 0023:0xf7fa4539 [ 183.998812][ T7744] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.998829][ T7744] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 183.998852][ T7744] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800000c0 [ 183.998866][ T7744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.998878][ T7744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.998889][ T7744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.998901][ T7744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.998920][ T7744] [ 184.594318][ T5860] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 184.751649][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 184.763596][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 184.774867][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 184.784852][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 184.798456][ T5860] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 184.807920][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.816949][ T5860] usb 1-1: Product: syz [ 184.821406][ T5860] usb 1-1: Manufacturer: syz [ 184.826118][ T5860] usb 1-1: SerialNumber: syz [ 184.836559][ T5860] usb 1-1: config 0 descriptor?? [ 184.845837][ T5860] iguanair 1-1:0.0: failed to submit urb: -90 [ 184.858520][ T5860] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 184.918059][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 185.047676][ T5860] usb 1-1: USB disconnect, device number 16 [ 185.416682][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 185.443715][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 185.476975][ T43] usb 4-1: USB disconnect, device number 20 [ 185.501522][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 185.736112][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'. [ 185.741111][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 185.794206][ T7771] openvswitch: netlink: Flow key attr not present in new flow. [ 186.049976][ T7776] wireguard4: entered promiscuous mode [ 186.061542][ T7776] wireguard4: entered allmulticast mode [ 186.406811][ T7784] FAULT_INJECTION: forcing a failure. [ 186.406811][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 186.429663][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.2.512 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 186.429695][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.429707][ T7784] Call Trace: [ 186.429714][ T7784] [ 186.429722][ T7784] dump_stack_lvl+0x189/0x250 [ 186.429750][ T7784] ? __pfx____ratelimit+0x10/0x10 [ 186.429774][ T7784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.429793][ T7784] ? __pfx__printk+0x10/0x10 [ 186.429820][ T7784] should_fail_ex+0x414/0x560 [ 186.429847][ T7784] should_failslab+0xa8/0x100 [ 186.429877][ T7784] kmem_cache_alloc_noprof+0x73/0x3c0 [ 186.429899][ T7784] ? skb_clone+0x212/0x3a0 [ 186.429917][ T7784] skb_clone+0x212/0x3a0 [ 186.429932][ T7784] __netlink_deliver_tap+0x404/0x850 [ 186.429959][ T7784] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.429980][ T7784] netlink_deliver_tap+0x19c/0x1b0 [ 186.430002][ T7784] netlink_unicast+0x7fa/0x9e0 [ 186.430026][ T7784] ? __pfx_netlink_unicast+0x10/0x10 [ 186.430048][ T7784] ? netlink_sendmsg+0x642/0xb30 [ 186.430077][ T7784] ? skb_put+0x11b/0x210 [ 186.430095][ T7784] netlink_sendmsg+0x805/0xb30 [ 186.430122][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.430148][ T7784] ? __import_iovec+0x5d4/0x7f0 [ 186.430167][ T7784] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.430184][ T7784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.430203][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.430229][ T7784] __sock_sendmsg+0x219/0x270 [ 186.430252][ T7784] ____sys_sendmsg+0x505/0x830 [ 186.430271][ T7784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.430289][ T7784] ? kstrtouint+0x6e/0xe0 [ 186.430318][ T7784] ___sys_sendmsg+0x21f/0x2a0 [ 186.430336][ T7784] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.430354][ T7784] ? get_pid_task+0x20/0x1f0 [ 186.430375][ T7784] ? get_pid_task+0x20/0x1f0 [ 186.430405][ T7784] ? __fget_files+0x2a/0x420 [ 186.430420][ T7784] ? __fget_files+0x3a0/0x420 [ 186.430440][ T7784] __sys_sendmsg+0x164/0x220 [ 186.430458][ T7784] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.430478][ T7784] ? __pfx_ksys_write+0x10/0x10 [ 186.430503][ T7784] __do_fast_syscall_32+0xb6/0x2b0 [ 186.430529][ T7784] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 186.430565][ T7784] do_fast_syscall_32+0x34/0x80 [ 186.430591][ T7784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.430612][ T7784] RIP: 0023:0xf709e539 [ 186.430628][ T7784] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 186.430644][ T7784] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 186.430665][ T7784] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 186.430679][ T7784] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.430691][ T7784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.430703][ T7784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 186.430714][ T7784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.430730][ T7784] [ 187.722175][ T7805] FAULT_INJECTION: forcing a failure. [ 187.722175][ T7805] name failslab, interval 1, probability 0, space 0, times 0 [ 187.735170][ T7805] CPU: 1 UID: 0 PID: 7805 Comm: syz.1.520 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 187.735197][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.735204][ T7805] Call Trace: [ 187.735209][ T7805] [ 187.735214][ T7805] dump_stack_lvl+0x189/0x250 [ 187.735233][ T7805] ? __pfx____ratelimit+0x10/0x10 [ 187.735249][ T7805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.735262][ T7805] ? __pfx__printk+0x10/0x10 [ 187.735277][ T7805] ? rcu_is_watching+0x15/0xb0 [ 187.735289][ T7805] ? __pfx___might_resched+0x10/0x10 [ 187.735300][ T7805] ? lock_acquire+0x5f/0x360 [ 187.735317][ T7805] should_fail_ex+0x414/0x560 [ 187.735332][ T7805] should_failslab+0xa8/0x100 [ 187.735349][ T7805] __kmalloc_noprof+0xcb/0x4f0 [ 187.735364][ T7805] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 187.735379][ T7805] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 187.735394][ T7805] genl_family_rcv_msg_doit+0xb8/0x300 [ 187.735409][ T7805] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.735423][ T7805] ? apparmor_capable+0x137/0x1b0 [ 187.735437][ T7805] ? bpf_lsm_capable+0x9/0x20 [ 187.735452][ T7805] ? security_capable+0x7e/0x2e0 [ 187.735470][ T7805] genl_rcv_msg+0x60e/0x790 [ 187.735483][ T7805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.735496][ T7805] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 187.735586][ T7805] ? __asan_memcpy+0x40/0x70 [ 187.735600][ T7805] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.735615][ T7805] ? __skb_clone+0x63/0x7a0 [ 187.735629][ T7805] netlink_rcv_skb+0x208/0x470 [ 187.735645][ T7805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.735657][ T7805] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.735675][ T7805] ? lock_release+0x4b/0x3e0 [ 187.735692][ T7805] ? down_read+0x1ad/0x2e0 [ 187.735703][ T7805] genl_rcv+0x28/0x40 [ 187.735714][ T7805] netlink_unicast+0x82c/0x9e0 [ 187.735730][ T7805] ? __pfx_netlink_unicast+0x10/0x10 [ 187.735744][ T7805] ? netlink_sendmsg+0x642/0xb30 [ 187.735761][ T7805] ? skb_put+0x11b/0x210 [ 187.735773][ T7805] netlink_sendmsg+0x805/0xb30 [ 187.735791][ T7805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.735808][ T7805] ? __import_iovec+0x5d4/0x7f0 [ 187.735820][ T7805] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.735831][ T7805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.735844][ T7805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.735860][ T7805] __sock_sendmsg+0x219/0x270 [ 187.735875][ T7805] ____sys_sendmsg+0x505/0x830 [ 187.735890][ T7805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.735911][ T7805] ? kstrtouint+0x6e/0xe0 [ 187.735940][ T7805] ___sys_sendmsg+0x21f/0x2a0 [ 187.735958][ T7805] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.735969][ T7805] ? get_pid_task+0x20/0x1f0 [ 187.735983][ T7805] ? get_pid_task+0x20/0x1f0 [ 187.736002][ T7805] ? __fget_files+0x2a/0x420 [ 187.736012][ T7805] ? __fget_files+0x3a0/0x420 [ 187.736023][ T7805] __sys_sendmsg+0x164/0x220 [ 187.736034][ T7805] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.736047][ T7805] ? __pfx_ksys_write+0x10/0x10 [ 187.736065][ T7805] __do_fast_syscall_32+0xb6/0x2b0 [ 187.736082][ T7805] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 187.736099][ T7805] do_fast_syscall_32+0x34/0x80 [ 187.736116][ T7805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.736130][ T7805] RIP: 0023:0xf7f31539 [ 187.736141][ T7805] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 187.736151][ T7805] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 187.736166][ T7805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 187.736174][ T7805] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.736182][ T7805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.736188][ T7805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 187.736195][ T7805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.736206][ T7805] [ 187.900224][ T5860] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.076471][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.168305][ T7812] netlink: 72 bytes leftover after parsing attributes in process `syz.1.522'. [ 188.267482][ T7820] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 188.286816][ T7820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.303199][ T7820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.310340][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 188.312338][ T7820] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 188.317525][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 188.327613][ T7820] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 188.337543][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.354446][ T5860] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.364441][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 48335, setting to 1024 [ 188.367400][ T7822] __nla_validate_parse: 1 callbacks suppressed [ 188.367418][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 188.375751][ T5860] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 188.375802][ T5860] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 188.375835][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.421177][ T5860] usb 4-1: config 0 descriptor?? [ 188.428057][ T7803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.436206][ T7822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.550262][ T43] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 188.568449][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 188.666151][ T5868] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 188.666327][ T24] usb 4-1: USB disconnect, device number 21 [ 188.701694][ T43] usb 1-1: config index 0 descriptor too short (expected 61256, got 72) [ 188.712982][ T43] usb 1-1: config 1 has an invalid interface number: 0 but max is -1 [ 188.722563][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.741675][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 188.753911][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 188.769920][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.780012][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.795099][ T43] usb 1-1: SerialNumber: syz [ 188.809538][ T43] cdc_acm 1-1:1.0: skipping garbage [ 188.829439][ T43] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 188.866547][ T43] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 188.874382][ T43] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 189.029184][ T5861] usb 1-1: USB disconnect, device number 17 [ 189.663440][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.739843][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.121353][ T7857] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 190.167661][ T7857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.296473][ T7861] wireguard4: entered promiscuous mode [ 190.305009][ T7861] wireguard4: entered allmulticast mode [ 190.344919][ T7862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.353354][ T7862] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 190.376795][ T7862] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 190.387466][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.538'. [ 190.570987][ T7857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.680212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.204106][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 192.293975][ T7889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.545'. [ 192.403024][ T7889] netlink: 'syz.0.545': attribute type 6 has an invalid length. [ 192.411204][ T7889] netlink: 'syz.0.545': attribute type 5 has an invalid length. [ 192.419160][ T7889] netlink: 'syz.0.545': attribute type 4 has an invalid length. [ 192.711586][ T7894] FAULT_INJECTION: forcing a failure. [ 192.711586][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 192.833533][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.4.548 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 192.833565][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.833578][ T7894] Call Trace: [ 192.833585][ T7894] [ 192.833592][ T7894] dump_stack_lvl+0x189/0x250 [ 192.833614][ T7894] ? __pfx____ratelimit+0x10/0x10 [ 192.833630][ T7894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.833643][ T7894] ? __pfx__printk+0x10/0x10 [ 192.833661][ T7894] should_fail_ex+0x414/0x560 [ 192.833677][ T7894] should_failslab+0xa8/0x100 [ 192.833694][ T7894] kmem_cache_alloc_noprof+0x73/0x3c0 [ 192.833709][ T7894] ? skb_clone+0x212/0x3a0 [ 192.833725][ T7894] skb_clone+0x212/0x3a0 [ 192.833737][ T7894] __netlink_deliver_tap+0x404/0x850 [ 192.833756][ T7894] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.833772][ T7894] netlink_deliver_tap+0x19c/0x1b0 [ 192.833788][ T7894] netlink_unicast+0x7fa/0x9e0 [ 192.833804][ T7894] ? __pfx_netlink_unicast+0x10/0x10 [ 192.833818][ T7894] ? netlink_sendmsg+0x642/0xb30 [ 192.833834][ T7894] ? skb_put+0x11b/0x210 [ 192.833844][ T7894] netlink_sendmsg+0x805/0xb30 [ 192.833862][ T7894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.833879][ T7894] ? __import_iovec+0x5d4/0x7f0 [ 192.833891][ T7894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.833902][ T7894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.833915][ T7894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.833932][ T7894] __sock_sendmsg+0x219/0x270 [ 192.833947][ T7894] ____sys_sendmsg+0x505/0x830 [ 192.833959][ T7894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.833972][ T7894] ? kstrtouint+0x6e/0xe0 [ 192.833989][ T7894] ___sys_sendmsg+0x21f/0x2a0 [ 192.834000][ T7894] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.834012][ T7894] ? get_pid_task+0x20/0x1f0 [ 192.834025][ T7894] ? get_pid_task+0x20/0x1f0 [ 192.834044][ T7894] ? __fget_files+0x2a/0x420 [ 192.834054][ T7894] ? __fget_files+0x3a0/0x420 [ 192.834065][ T7894] __sys_sendmsg+0x164/0x220 [ 192.834076][ T7894] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.834089][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 192.834106][ T7894] __do_fast_syscall_32+0xb6/0x2b0 [ 192.834123][ T7894] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 192.834140][ T7894] do_fast_syscall_32+0x34/0x80 [ 192.834156][ T7894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.834170][ T7894] RIP: 0023:0xf7fa4539 [ 192.834181][ T7894] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.834192][ T7894] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 192.834207][ T7894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 192.834215][ T7894] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.834223][ T7894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.834229][ T7894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.834236][ T7894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.834247][ T7894] [ 193.197631][ T7898] netlink: 'syz.4.550': attribute type 3 has an invalid length. [ 193.205581][ T7898] netlink: 'syz.4.550': attribute type 3 has an invalid length. [ 193.228449][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 193.276778][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 193.830229][ T2153] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 194.153351][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 194.153373][ T30] audit: type=1326 audit(1755619941.618:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.1.552" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x0 [ 194.240167][ T2153] usb 5-1: device descriptor read/64, error -71 [ 194.523935][ T2153] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 194.544285][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550788][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.591124][ T7919] wireguard4: entered promiscuous mode [ 194.597487][ T7919] wireguard4: entered allmulticast mode [ 194.848938][ T2153] usb 5-1: device descriptor read/64, error -71 [ 194.970431][ T2153] usb usb5-port1: attempt power cycle [ 195.018303][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.066567][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.111500][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 195.123197][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 195.280175][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 195.287446][ T24] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 195.298499][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.312106][ T24] usb 4-1: config 0 descriptor?? [ 195.328911][ T2153] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 195.420238][ T24] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 195.430244][ T2153] usb 5-1: device descriptor read/8, error -71 [ 195.438872][ T24] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 195.539342][ T5860] usb 4-1: USB disconnect, device number 22 [ 195.715591][ T2153] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 195.743844][ T2153] usb 5-1: device descriptor read/8, error -71 [ 195.936170][ T2153] usb usb5-port1: unable to enumerate USB device [ 196.507600][ T7947] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 196.562007][ T7947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.681311][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 196.687657][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 196.704372][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.704458][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 196.720254][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 196.777435][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.562'. [ 196.824096][ T7947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.837071][ T7947] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.853482][ T7947] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 196.898358][ T7953] 8021q: adding VLAN 0 to HW filter on device bond8 [ 197.252026][ T7969] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.746540][ T7981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.574'. [ 197.756192][ T7981] netlink: 'syz.2.574': attribute type 6 has an invalid length. [ 197.783791][ T7981] netlink: 'syz.2.574': attribute type 5 has an invalid length. [ 197.792582][ T7981] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 197.935024][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 198.050315][ T7988] bridge4: entered allmulticast mode [ 198.168399][ T7990] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 198.256821][ T7990] 8021q: adding VLAN 0 to HW filter on device bond9 [ 198.301081][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 198.330508][ T5860] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 198.460175][ T5860] usb 4-1: device descriptor read/64, error -71 [ 198.510200][ T5947] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 198.667182][ T5947] usb 1-1: config 0 has no interfaces? [ 198.677773][ T5947] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.690151][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.705426][ T5947] usb 1-1: Product: syz [ 198.713525][ T5860] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 198.716963][ T5947] usb 1-1: Manufacturer: syz [ 198.731891][ T5947] usb 1-1: SerialNumber: syz [ 198.745116][ T5947] usb 1-1: config 0 descriptor?? [ 198.831277][ T8015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.584'. [ 198.841675][ T8015] netlink: 'syz.1.584': attribute type 6 has an invalid length. [ 198.849392][ T8015] netlink: 'syz.1.584': attribute type 5 has an invalid length. [ 198.861151][ T8015] netlink: 'syz.1.584': attribute type 4 has an invalid length. [ 198.871246][ T5860] usb 4-1: device descriptor read/64, error -71 [ 198.991046][ T5860] usb usb4-port1: attempt power cycle [ 198.998210][ T8020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 199.400224][ T5860] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 199.430815][ T5860] usb 4-1: device descriptor read/8, error -71 [ 199.672075][ T5860] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 199.701043][ T5860] usb 4-1: device descriptor read/8, error -71 [ 199.869673][ T5860] usb usb4-port1: unable to enumerate USB device [ 200.364167][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 200.377232][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.593'. [ 200.862118][ T8046] netlink: 712 bytes leftover after parsing attributes in process `syz.2.596'. [ 201.335173][ T8057] wireguard4: entered promiscuous mode [ 201.343843][ T8057] wireguard4: entered allmulticast mode [ 201.349539][ T5860] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 201.399356][ T5861] usb 1-1: USB disconnect, device number 18 [ 201.502312][ T8061] netlink: 44 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.512201][ T8061] netlink: 'syz.2.600': attribute type 6 has an invalid length. [ 201.519952][ T8061] netlink: 'syz.2.600': attribute type 5 has an invalid length. [ 201.538600][ T8061] netlink: 'syz.2.600': attribute type 4 has an invalid length. [ 201.605780][ T5860] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 201.614499][ T5860] usb 5-1: config 0 has no interface number 0 [ 201.620850][ T5860] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 201.638439][ T5860] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.648716][ T5860] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.672205][ T5860] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 201.834073][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.896246][ T5860] usb 5-1: config 0 descriptor?? [ 201.923806][ T5860] gspca_main: spca561-2.14.0 probing abcd:cdee [ 202.441070][ T5860] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 202.449793][ T5860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.574756][ T5860] usb 5-1: MIDIStreaming interface descriptor not found [ 202.686731][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 202.895139][ T8086] wireguard4: entered promiscuous mode [ 202.903515][ T8086] wireguard4: entered allmulticast mode [ 203.020157][ T5947] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 203.200149][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 203.213144][ T5947] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 203.223514][ T5947] usb 1-1: config 0 has no interface number 0 [ 203.229731][ T5947] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 203.239936][ T5947] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.249998][ T5947] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.262139][ T5947] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 203.280261][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.289049][ T5947] usb 1-1: Product: syz [ 203.293877][ T5947] usb 1-1: Manufacturer: syz [ 203.300557][ T5947] usb 1-1: SerialNumber: syz [ 203.310684][ T5947] usb 1-1: config 0 descriptor?? [ 203.317439][ T8084] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 203.585427][ T5947] usb-storage 1-1:0.20: USB Mass Storage device detected [ 203.595318][ T5947] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 203.786079][ T5947] scsi host1: usb-storage 1-1:0.20 [ 204.074655][ T5860] usb 5-1: USB disconnect, device number 23 [ 204.137249][ T8095] FAULT_INJECTION: forcing a failure. [ 204.137249][ T8095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.157536][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.4.609 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 204.157567][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.157578][ T8095] Call Trace: [ 204.157586][ T8095] [ 204.157593][ T8095] dump_stack_lvl+0x189/0x250 [ 204.157621][ T8095] ? __pfx____ratelimit+0x10/0x10 [ 204.157645][ T8095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.157665][ T8095] ? __pfx__printk+0x10/0x10 [ 204.157690][ T8095] ? rcu_is_watching+0x15/0xb0 [ 204.157709][ T8095] should_fail_ex+0x414/0x560 [ 204.157735][ T8095] _copy_to_user+0x31/0xb0 [ 204.157758][ T8095] simple_read_from_buffer+0xe1/0x170 [ 204.157786][ T8095] proc_fail_nth_read+0x1b3/0x220 [ 204.157808][ T8095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.157829][ T8095] ? rw_verify_area+0x2a6/0x4d0 [ 204.157851][ T8095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.157872][ T8095] vfs_read+0x1fd/0xa30 [ 204.157894][ T8095] ? fdget_pos+0x247/0x320 [ 204.157912][ T8095] ? __pfx___mutex_lock+0x10/0x10 [ 204.157938][ T8095] ? __pfx_vfs_read+0x10/0x10 [ 204.157962][ T8095] ? __fget_files+0x3a0/0x420 [ 204.157978][ T8095] ? __fget_files+0x2a/0x420 [ 204.157997][ T8095] ksys_read+0x145/0x250 [ 204.158020][ T8095] ? __pfx_ksys_read+0x10/0x10 [ 204.158047][ T8095] __do_fast_syscall_32+0xb6/0x2b0 [ 204.158075][ T8095] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 204.158101][ T8095] do_fast_syscall_32+0x34/0x80 [ 204.158128][ T8095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.158150][ T8095] RIP: 0023:0xf7fa4539 [ 204.158166][ T8095] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.158182][ T8095] RSP: 002b:00000000f54c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 204.158205][ T8095] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54c6620 [ 204.158219][ T8095] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 204.158230][ T8095] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 204.158241][ T8095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.158253][ T8095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.158269][ T8095] [ 204.383180][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.386593][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ef8400: rx timeout, send abort [ 204.886737][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052a59400: rx timeout, send abort [ 204.897536][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ef8400: abort rx timeout. Force session deactivation [ 204.970920][ T8091] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 205.395281][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052a59400: abort rx timeout. Force session deactivation [ 205.502337][ T8113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.613'. [ 205.521132][ T8113] netlink: 'syz.2.613': attribute type 6 has an invalid length. [ 205.537974][ T8113] netlink: 'syz.2.613': attribute type 5 has an invalid length. [ 205.559317][ T8113] netlink: 'syz.2.613': attribute type 4 has an invalid length. [ 205.781997][ T8117] FAULT_INJECTION: forcing a failure. [ 205.781997][ T8117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.865145][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: syz.1.615 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 205.865174][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.865186][ T8117] Call Trace: [ 205.865193][ T8117] [ 205.865200][ T8117] dump_stack_lvl+0x189/0x250 [ 205.865229][ T8117] ? __pfx____ratelimit+0x10/0x10 [ 205.865253][ T8117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.865274][ T8117] ? __pfx__printk+0x10/0x10 [ 205.865296][ T8117] ? rcu_is_watching+0x15/0xb0 [ 205.865314][ T8117] ? lock_acquire+0x5f/0x360 [ 205.865354][ T8117] ? rcu_is_watching+0x15/0xb0 [ 205.865372][ T8117] should_fail_ex+0x414/0x560 [ 205.865395][ T8117] _copy_from_user+0x2d/0xb0 [ 205.865416][ T8117] move_addr_to_kernel+0x7e/0x160 [ 205.865439][ T8117] get_compat_msghdr+0x3bd/0x4a0 [ 205.865468][ T8117] ? __pfx_get_compat_msghdr+0x10/0x10 [ 205.865495][ T8117] ? kstrtouint+0x6e/0xe0 [ 205.865521][ T8117] ___sys_sendmsg+0x193/0x2a0 [ 205.865540][ T8117] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.865558][ T8117] ? get_pid_task+0x20/0x1f0 [ 205.865579][ T8117] ? get_pid_task+0x20/0x1f0 [ 205.865610][ T8117] ? __fget_files+0x2a/0x420 [ 205.865626][ T8117] ? __fget_files+0x3a0/0x420 [ 205.865646][ T8117] __sys_sendmsg+0x164/0x220 [ 205.865665][ T8117] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.865686][ T8117] ? __pfx_ksys_write+0x10/0x10 [ 205.865714][ T8117] __do_fast_syscall_32+0xb6/0x2b0 [ 205.865742][ T8117] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 205.865769][ T8117] do_fast_syscall_32+0x34/0x80 [ 205.865797][ T8117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.865820][ T8117] RIP: 0023:0xf7f31539 [ 205.865836][ T8117] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 205.865852][ T8117] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 205.865875][ T8117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 205.865889][ T8117] RDX: 0000000024000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.865901][ T8117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.865912][ T8117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.865923][ T8117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.865940][ T8117] [ 206.105304][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.117743][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 206.166456][ T8123] sch_tbf: peakrate 4294967295 is lower than or equals to rate 5751014863438661559 ! [ 206.436119][ T8130] loop2: detected capacity change from 0 to 7 [ 206.491178][ T5947] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 206.680226][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.757265][ T5947] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 206.768607][ T2153] usb 1-1: USB disconnect, device number 19 [ 206.774791][ T5947] usb 4-1: config 0 has no interface number 0 [ 206.819629][ T5947] usb 4-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 206.849411][ T5947] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 206.851039][ T8137] wireguard5: entered promiscuous mode [ 206.859856][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.875044][ T5947] usb 4-1: config 0 descriptor?? [ 206.880213][ T8137] wireguard5: entered allmulticast mode [ 206.995722][ T8126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 207.266143][ T5859] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 207.693650][ T5947] usb 4-1: string descriptor 0 read error: -71 [ 207.703329][ T5947] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 207.716546][ T5947] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 207.746023][ T5947] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 207.814149][ T5947] usb 4-1: USB disconnect, device number 27 [ 208.217446][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 208.393110][ T8171] binder: BINDER_SET_CONTEXT_MGR already set [ 208.399292][ T8171] binder: 8169:8171 ioctl 4018620d 80000100 returned -16 [ 208.408249][ T8171] binder: BINDER_SET_CONTEXT_MGR already set [ 208.414674][ T8171] binder: 8169:8171 ioctl 4018620d 800002c0 returned -16 [ 208.423178][ T8170] binder: 8169:8170 ioctl c0306201 80000680 returned -14 [ 208.526332][ T8178] trusted_key: encrypted_key: master key parameter 'ecrypßöÇñ¬W™”tfs' is invalid [ 209.289344][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 210.524508][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 210.670828][ T8230] netlink: 3 bytes leftover after parsing attributes in process `syz.2.653'. [ 211.064291][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 211.301326][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 211.362780][ T8249] wireguard5: entered promiscuous mode [ 211.368981][ T8249] wireguard5: entered allmulticast mode [ 212.164764][ T8262] wireguard5: entered promiscuous mode [ 212.171804][ T8262] wireguard5: entered allmulticast mode [ 212.276005][ T8270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.275436][ T8285] qrtr: Invalid version 0 [ 213.838782][ T8288] syzkaller0: entered promiscuous mode [ 213.852754][ T8288] syzkaller0: entered allmulticast mode [ 213.887869][ T8288] fuse: Unknown parameter 'f©mD[]ad' [ 214.177211][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 215.467899][ T2153] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 215.743047][ T2153] usb 5-1: config 0 has no interfaces? [ 215.753624][ T2153] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 215.770770][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.790315][ T2153] usb 5-1: Product: syz [ 215.800665][ T2153] usb 5-1: Manufacturer: syz [ 215.805482][ T2153] usb 5-1: SerialNumber: syz [ 215.835665][ T2153] usb 5-1: config 0 descriptor?? [ 216.270144][ T2153] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 216.296140][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 216.430430][ T2153] usb 1-1: Using ep0 maxpacket: 32 [ 216.437707][ T2153] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 216.447186][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.457604][ T2153] usb 1-1: config 0 descriptor?? [ 216.471776][ T2153] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 216.548241][ T2153] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 216.670937][ T2153] usb 1-1: USB disconnect, device number 20 [ 217.409822][ T8347] input: syz0 as /devices/virtual/input/input21 [ 218.269622][ T5861] usb 5-1: USB disconnect, device number 24 [ 218.815689][ T30] audit: type=1326 audit(1755619966.268:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 218.920388][ T30] audit: type=1326 audit(1755619966.268:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 218.942798][ T30] audit: type=1326 audit(1755619966.268:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 218.971032][ T30] audit: type=1326 audit(1755619966.268:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 218.993686][ T30] audit: type=1326 audit(1755619966.268:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 219.171616][ T30] audit: type=1326 audit(1755619966.268:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 219.851211][ T30] audit: type=1326 audit(1755619966.268:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 219.950759][ T8370] wireguard5: entered promiscuous mode [ 219.956403][ T8370] wireguard5: entered allmulticast mode [ 220.130330][ T30] audit: type=1326 audit(1755619966.278:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 220.187142][ T30] audit: type=1326 audit(1755619966.278:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 220.423728][ T30] audit: type=1326 audit(1755619966.278:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 220.530624][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 222.412140][ T8417] wireguard6: entered promiscuous mode [ 222.417853][ T8417] wireguard6: entered allmulticast mode [ 222.599774][ T5860] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.771569][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 222.814453][ T5860] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 222.849154][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.921073][ T5860] usb 5-1: config 0 descriptor?? [ 222.970785][ T5860] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 223.008727][ T5860] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 223.393890][ T5947] usb 5-1: USB disconnect, device number 25 [ 224.130229][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 224.401013][ T8441] FAULT_INJECTION: forcing a failure. [ 224.401013][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.436859][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.2.714 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 224.436891][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.436903][ T8441] Call Trace: [ 224.436910][ T8441] [ 224.436918][ T8441] dump_stack_lvl+0x189/0x250 [ 224.436946][ T8441] ? __pfx____ratelimit+0x10/0x10 [ 224.436973][ T8441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.436995][ T8441] ? __pfx__printk+0x10/0x10 [ 224.437019][ T8441] ? __might_fault+0xb0/0x130 [ 224.437047][ T8441] ? rcu_is_watching+0x15/0xb0 [ 224.437068][ T8441] should_fail_ex+0x414/0x560 [ 224.437096][ T8441] _copy_from_user+0x2d/0xb0 [ 224.437118][ T8441] get_compat_msghdr+0xad/0x4a0 [ 224.437150][ T8441] ? __pfx_get_compat_msghdr+0x10/0x10 [ 224.437180][ T8441] ? rcu_is_watching+0x15/0xb0 [ 224.437197][ T8441] ? ___sys_recvmsg+0x1c4/0x510 [ 224.437219][ T8441] ___sys_recvmsg+0x17f/0x510 [ 224.437246][ T8441] ? lock_acquire+0x5f/0x360 [ 224.437275][ T8441] ? __pfx____sys_recvmsg+0x10/0x10 [ 224.437295][ T8441] ? kstrtoull+0x12f/0x1d0 [ 224.437321][ T8441] ? __fget_files+0x2a/0x420 [ 224.437337][ T8441] ? rcu_is_watching+0x15/0xb0 [ 224.437361][ T8441] ? __fget_files+0x3a0/0x420 [ 224.437382][ T8441] do_recvmmsg+0x36a/0x770 [ 224.437406][ T8441] ? __pfx_do_recvmmsg+0x10/0x10 [ 224.437426][ T8441] ? lock_release+0x4b/0x3e0 [ 224.437452][ T8441] ? vfs_write+0x956/0xb30 [ 224.437480][ T8441] ? __pfx_vfs_write+0x10/0x10 [ 224.437508][ T8441] __sys_recvmmsg+0x19d/0x280 [ 224.437529][ T8441] ? __pfx___sys_recvmmsg+0x10/0x10 [ 224.437548][ T8441] ? ksys_write+0x22a/0x250 [ 224.437572][ T8441] ? __pfx_ksys_write+0x10/0x10 [ 224.437598][ T8441] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 224.437620][ T8441] __do_fast_syscall_32+0xb6/0x2b0 [ 224.437649][ T8441] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 224.437677][ T8441] do_fast_syscall_32+0x34/0x80 [ 224.437705][ T8441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.437728][ T8441] RIP: 0023:0xf709e539 [ 224.437744][ T8441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 224.437761][ T8441] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 224.437784][ T8441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 224.437798][ T8441] RDX: 000000000000026c RSI: 0000000000000000 RDI: 0000000000000000 [ 224.437810][ T8441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.437821][ T8441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.437833][ T8441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.437851][ T8441] [ 224.965556][ T8448] wireguard6: entered promiscuous mode [ 224.971270][ T8448] wireguard6: entered allmulticast mode [ 225.308628][ T8457] wireguard5: entered promiscuous mode [ 225.324759][ T8457] wireguard5: entered allmulticast mode [ 225.504234][ T8470] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 225.610322][ T8470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.727740][ T8472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.746722][ T8472] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 226.104470][ T8472] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 226.422816][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 226.434604][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 226.529395][ T8470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.880207][ T2153] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 227.134250][ T2153] usb 1-1: config 0 has no interfaces? [ 227.142516][ T2153] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 227.153533][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.171934][ T2153] usb 1-1: Product: syz [ 227.182605][ T2153] usb 1-1: Manufacturer: syz [ 227.193784][ T2153] usb 1-1: SerialNumber: syz [ 227.205511][ T2153] usb 1-1: config 0 descriptor?? [ 228.245685][ T8506] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 228.268079][ T8506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.311973][ T8506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.322592][ T8506] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 228.335235][ T8506] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 228.356486][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 228.366349][ T8510] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.599510][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 229.429404][ T8526] netlink: 92 bytes leftover after parsing attributes in process `syz.4.738'. [ 229.562279][ T5860] usb 1-1: USB disconnect, device number 21 [ 229.762537][ T8541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 229.845194][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 230.393303][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 230.403072][ T8558] FAULT_INJECTION: forcing a failure. [ 230.403072][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 230.768785][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.0.749 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 230.768815][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.768826][ T8558] Call Trace: [ 230.768834][ T8558] [ 230.768842][ T8558] dump_stack_lvl+0x189/0x250 [ 230.768869][ T8558] ? __pfx____ratelimit+0x10/0x10 [ 230.768895][ T8558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.768916][ T8558] ? __pfx__printk+0x10/0x10 [ 230.768944][ T8558] should_fail_ex+0x414/0x560 [ 230.768962][ T8558] should_failslab+0xa8/0x100 [ 230.768980][ T8558] kmem_cache_alloc_noprof+0x73/0x3c0 [ 230.768995][ T8558] ? skb_clone+0x212/0x3a0 [ 230.769009][ T8558] skb_clone+0x212/0x3a0 [ 230.769021][ T8558] __netlink_deliver_tap+0x404/0x850 [ 230.769041][ T8558] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.769057][ T8558] netlink_deliver_tap+0x19c/0x1b0 [ 230.769073][ T8558] netlink_unicast+0x7fa/0x9e0 [ 230.769089][ T8558] ? __pfx_netlink_unicast+0x10/0x10 [ 230.769103][ T8558] ? netlink_sendmsg+0x642/0xb30 [ 230.769122][ T8558] ? skb_put+0x11b/0x210 [ 230.769132][ T8558] netlink_sendmsg+0x805/0xb30 [ 230.769150][ T8558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.769167][ T8558] ? __import_iovec+0x5d4/0x7f0 [ 230.769179][ T8558] ? aa_sock_msg_perm+0xf1/0x1d0 [ 230.769190][ T8558] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.769203][ T8558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.769220][ T8558] __sock_sendmsg+0x219/0x270 [ 230.769235][ T8558] ____sys_sendmsg+0x505/0x830 [ 230.769247][ T8558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.769259][ T8558] ? kstrtouint+0x6e/0xe0 [ 230.769277][ T8558] ___sys_sendmsg+0x21f/0x2a0 [ 230.769289][ T8558] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.769300][ T8558] ? get_pid_task+0x20/0x1f0 [ 230.769313][ T8558] ? get_pid_task+0x20/0x1f0 [ 230.769332][ T8558] ? __fget_files+0x2a/0x420 [ 230.769341][ T8558] ? __fget_files+0x3a0/0x420 [ 230.769353][ T8558] __sys_sendmsg+0x164/0x220 [ 230.769371][ T8558] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.769384][ T8558] ? __pfx_ksys_write+0x10/0x10 [ 230.769401][ T8558] __do_fast_syscall_32+0xb6/0x2b0 [ 230.769418][ T8558] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 230.769435][ T8558] do_fast_syscall_32+0x34/0x80 [ 230.769451][ T8558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.769466][ T8558] RIP: 0023:0xf7fa4539 [ 230.769478][ T8558] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 230.769488][ T8558] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 230.769502][ T8558] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 230.769517][ T8558] RDX: 0000000000042000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.769524][ T8558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.769531][ T8558] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.769538][ T8558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.769548][ T8558] [ 230.769573][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.749'. [ 231.310221][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.749'. [ 231.710304][ T5963] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 231.870144][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 231.877446][ T5963] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 231.887347][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.896604][ T5963] usb 1-1: config 0 descriptor?? [ 231.904184][ T5963] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 231.912720][ T5963] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 232.108312][ T5963] usb 1-1: USB disconnect, device number 22 [ 232.562438][ T8590] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 232.569658][ T8589] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 232.607686][ T8590] 8021q: adding VLAN 0 to HW filter on device bond10 [ 232.638383][ T8589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.700846][ T8593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.715684][ T8593] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 232.739589][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.759'. [ 232.755979][ T8593] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 232.792625][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.760'. [ 232.803205][ T8590] 8021q: adding VLAN 0 to HW filter on device bond10 [ 232.812588][ T8590] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.825288][ T8590] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 232.848949][ T8597] veth13: entered promiscuous mode [ 232.857273][ T8597] bond10: (slave veth13): Enslaving as an active interface with a down link [ 232.894438][ T8589] veth5: entered promiscuous mode [ 232.899978][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 232.909158][ T5963] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 232.910486][ T8589] bond3: (slave veth5): Enslaving as an active interface with a down link [ 232.985523][ T8607] FAULT_INJECTION: forcing a failure. [ 232.985523][ T8607] name failslab, interval 1, probability 0, space 0, times 0 [ 233.053504][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.0.766 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 233.053534][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.053547][ T8607] Call Trace: [ 233.053554][ T8607] [ 233.053562][ T8607] dump_stack_lvl+0x189/0x250 [ 233.053589][ T8607] ? __pfx____ratelimit+0x10/0x10 [ 233.053615][ T8607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.053637][ T8607] ? __pfx__printk+0x10/0x10 [ 233.053664][ T8607] ? __pfx___might_resched+0x10/0x10 [ 233.053690][ T8607] ? lock_acquire+0x5f/0x360 [ 233.053729][ T8607] should_fail_ex+0x414/0x560 [ 233.053754][ T8607] should_failslab+0xa8/0x100 [ 233.053781][ T8607] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 233.053806][ T8607] ? __alloc_skb+0x112/0x2d0 [ 233.053834][ T8607] __alloc_skb+0x112/0x2d0 [ 233.053862][ T8607] netlink_ack+0x146/0xa50 [ 233.053896][ T8607] netlink_rcv_skb+0x28c/0x470 [ 233.053922][ T8607] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.053947][ T8607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.053978][ T8607] ? bpf_lsm_capable+0x9/0x20 [ 233.054003][ T8607] ? security_capable+0x7e/0x2e0 [ 233.054032][ T8607] nfnetlink_rcv+0x26a/0x2520 [ 233.054056][ T8607] ? __dev_queue_xmit+0x1d79/0x3b50 [ 233.054091][ T8607] ? __dev_queue_xmit+0x27b/0x3b50 [ 233.054115][ T8607] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.054135][ T8607] ? __pfx___dev_queue_xmit+0x10/0x10 [ 233.054158][ T8607] ? ref_tracker_free+0x63a/0x7d0 [ 233.054182][ T8607] ? __asan_memcpy+0x40/0x70 [ 233.054201][ T8607] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.054224][ T8607] ? __skb_clone+0x63/0x7a0 [ 233.054244][ T8607] ? __skb_clone+0x483/0x7a0 [ 233.054264][ T8607] ? skb_clone+0x246/0x3a0 [ 233.054284][ T8607] ? __netlink_deliver_tap+0x807/0x850 [ 233.054311][ T8607] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.054335][ T8607] ? rcu_is_watching+0x15/0xb0 [ 233.054352][ T8607] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.054377][ T8607] ? lock_release+0x4b/0x3e0 [ 233.054406][ T8607] netlink_unicast+0x82c/0x9e0 [ 233.054432][ T8607] ? __pfx_netlink_unicast+0x10/0x10 [ 233.054455][ T8607] ? netlink_sendmsg+0x642/0xb30 [ 233.054481][ T8607] ? skb_put+0x11b/0x210 [ 233.054498][ T8607] netlink_sendmsg+0x805/0xb30 [ 233.054534][ T8607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.054562][ T8607] ? __import_iovec+0x5d4/0x7f0 [ 233.054581][ T8607] ? aa_sock_msg_perm+0xf1/0x1d0 [ 233.054601][ T8607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.054621][ T8607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.054648][ T8607] __sock_sendmsg+0x219/0x270 [ 233.054673][ T8607] ____sys_sendmsg+0x505/0x830 [ 233.054695][ T8607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.054716][ T8607] ? kstrtouint+0x6e/0xe0 [ 233.054745][ T8607] ___sys_sendmsg+0x21f/0x2a0 [ 233.054765][ T8607] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.054784][ T8607] ? get_pid_task+0x20/0x1f0 [ 233.054805][ T8607] ? get_pid_task+0x20/0x1f0 [ 233.054838][ T8607] ? __fget_files+0x2a/0x420 [ 233.054853][ T8607] ? __fget_files+0x3a0/0x420 [ 233.054872][ T8607] __sys_sendmsg+0x164/0x220 [ 233.054889][ T8607] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.054911][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 233.054940][ T8607] __do_fast_syscall_32+0xb6/0x2b0 [ 233.054969][ T8607] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 233.054997][ T8607] do_fast_syscall_32+0x34/0x80 [ 233.055023][ T8607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.055047][ T8607] RIP: 0023:0xf7fa4539 [ 233.055063][ T8607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 233.055089][ T8607] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 233.055112][ T8607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 233.055126][ T8607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.055137][ T8607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.055149][ T8607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.055160][ T8607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.055179][ T8607] [ 233.100217][ T5963] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.104091][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.108588][ T5963] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.501652][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.516670][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 233.528133][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 233.547108][ T5963] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.558025][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.566256][ T5963] usb 4-1: Product: syz [ 233.634648][ T5963] usb 4-1: Manufacturer: syz [ 233.735001][ T5963] cdc_wdm 4-1:1.0: skipping garbage [ 233.740584][ T5963] cdc_wdm 4-1:1.0: skipping garbage [ 233.747078][ T5963] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 233.776236][ T5963] cdc_wdm 4-1:1.0: Unknown control protocol [ 234.183283][ T5947] usb 4-1: USB disconnect, device number 28 [ 234.559758][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.635857][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.860168][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 235.175214][ T8662] wireguard6: entered promiscuous mode [ 235.185245][ T8662] wireguard6: entered allmulticast mode [ 235.193243][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.211317][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 235.237941][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.247246][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 235.258976][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 235.318128][ T5860] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 235.336907][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.361374][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.369558][ T9] usb 4-1: Product: syz [ 235.376906][ T9] usb 4-1: Manufacturer: syz [ 235.390899][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.392934][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 235.412776][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 235.424728][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 235.430931][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 235.442910][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.476909][ T8670] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 235.496492][ T8670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.512721][ T5860] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 235.527943][ T5860] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 235.552662][ T5860] usb 5-1: config 8 has no interface number 0 [ 235.677190][ T5860] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.694940][ T8673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.705401][ T8673] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 235.735146][ T8673] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 235.758999][ T8670] veth5: entered promiscuous mode [ 235.765992][ T8670] bond5: (slave veth5): Enslaving as an active interface with a down link [ 235.781584][ T5860] usb 5-1: config 8 interface 177 has no altsetting 0 [ 235.841719][ T5860] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 235.859403][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.879244][ T8670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'. [ 235.997146][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 237.295913][ T8695] FAULT_INJECTION: forcing a failure. [ 237.295913][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 237.309853][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.1.790 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 237.309884][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.309896][ T8695] Call Trace: [ 237.309908][ T8695] [ 237.309916][ T8695] dump_stack_lvl+0x189/0x250 [ 237.309945][ T8695] ? __pfx____ratelimit+0x10/0x10 [ 237.309971][ T8695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.309993][ T8695] ? __pfx__printk+0x10/0x10 [ 237.310018][ T8695] ? genl_family_rcv_msg_doit+0x267/0x300 [ 237.310042][ T8695] ? __pfx___might_resched+0x10/0x10 [ 237.310071][ T8695] ? lock_acquire+0x5f/0x360 [ 237.310098][ T8695] should_fail_ex+0x414/0x560 [ 237.310124][ T8695] should_failslab+0xa8/0x100 [ 237.310151][ T8695] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 237.310178][ T8695] ? __alloc_skb+0x112/0x2d0 [ 237.310205][ T8695] __alloc_skb+0x112/0x2d0 [ 237.310232][ T8695] netlink_ack+0x146/0xa50 [ 237.310255][ T8695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.310277][ T8695] ? __asan_memcpy+0x40/0x70 [ 237.310298][ T8695] ? __pfx_ref_tracker_free+0x10/0x10 [ 237.310325][ T8695] netlink_rcv_skb+0x28c/0x470 [ 237.310351][ T8695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.310370][ T8695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.310399][ T8695] ? lock_release+0x4b/0x3e0 [ 237.310426][ T8695] ? down_read+0x1ad/0x2e0 [ 237.310443][ T8695] genl_rcv+0x28/0x40 [ 237.310459][ T8695] netlink_unicast+0x82c/0x9e0 [ 237.310485][ T8695] ? __pfx_netlink_unicast+0x10/0x10 [ 237.310510][ T8695] ? netlink_sendmsg+0x642/0xb30 [ 237.310536][ T8695] ? skb_put+0x11b/0x210 [ 237.310553][ T8695] netlink_sendmsg+0x805/0xb30 [ 237.310584][ T8695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.310612][ T8695] ? __import_iovec+0x5d4/0x7f0 [ 237.310632][ T8695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.310650][ T8695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.310671][ T8695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.310696][ T8695] __sock_sendmsg+0x219/0x270 [ 237.310722][ T8695] ____sys_sendmsg+0x505/0x830 [ 237.310743][ T8695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.310764][ T8695] ? kstrtouint+0x6e/0xe0 [ 237.310793][ T8695] ___sys_sendmsg+0x21f/0x2a0 [ 237.310813][ T8695] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.310829][ T8695] ? get_pid_task+0x20/0x1f0 [ 237.310851][ T8695] ? get_pid_task+0x20/0x1f0 [ 237.310885][ T8695] ? __fget_files+0x2a/0x420 [ 237.310901][ T8695] ? __fget_files+0x3a0/0x420 [ 237.310921][ T8695] __sys_sendmsg+0x164/0x220 [ 237.310940][ T8695] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.310962][ T8695] ? __pfx_ksys_write+0x10/0x10 [ 237.310989][ T8695] __do_fast_syscall_32+0xb6/0x2b0 [ 237.311017][ T8695] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 237.311044][ T8695] do_fast_syscall_32+0x34/0x80 [ 237.311080][ T8695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.311103][ T8695] RIP: 0023:0xf7f31539 [ 237.311119][ T8695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.311136][ T8695] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 237.311159][ T8695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 237.311174][ T8695] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.311186][ T8695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.311198][ T8695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.311208][ T8695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.311226][ T8695] [ 237.937684][ T2153] usb 4-1: USB disconnect, device number 29 [ 238.135369][ T5860] usb 5-1: string descriptor 0 read error: -71 [ 238.183015][ T5860] ir_toy 5-1:8.177: required endpoints not found [ 238.197060][ T5860] usb 5-1: USB disconnect, device number 26 [ 238.472918][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.553999][ T8715] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[8715] [ 238.620189][ T5860] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 238.640209][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 238.659482][ T9] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 238.675341][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.706510][ T9] usb 1-1: config 0 descriptor?? [ 238.715444][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 238.725088][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 238.790535][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 238.797354][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 238.828970][ T5860] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 238.838412][ T5860] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 238.848472][ T5860] usb 5-1: Product: syz [ 238.858238][ T5860] usb 5-1: Manufacturer: syz [ 238.863189][ T5860] usb 5-1: SerialNumber: syz [ 239.081724][ T2153] usb 1-1: USB disconnect, device number 23 [ 239.307860][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.316946][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.325121][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.342647][ T5860] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 239.358838][ T5860] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 239.367159][ T5860] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 239.543599][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.552885][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.584035][ T5860] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 239.684567][ T5860] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 239.703826][ T5860] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 239.724424][ T5860] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 239.737439][ T5860] usb 5-1: USB disconnect, device number 27 [ 239.764452][ T5860] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 239.780322][ T5860] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 239.793604][ T5860] visor 5-1:1.0: device disconnected [ 240.384962][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 240.474200][ T8744] FAULT_INJECTION: forcing a failure. [ 240.474200][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 240.487619][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.3.806 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 240.487650][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.487660][ T8744] Call Trace: [ 240.487668][ T8744] [ 240.487675][ T8744] dump_stack_lvl+0x189/0x250 [ 240.487702][ T8744] ? __pfx____ratelimit+0x10/0x10 [ 240.487726][ T8744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.487746][ T8744] ? __pfx__printk+0x10/0x10 [ 240.487772][ T8744] ? __pfx___might_resched+0x10/0x10 [ 240.487791][ T8744] ? lock_acquire+0x5f/0x360 [ 240.487819][ T8744] should_fail_ex+0x414/0x560 [ 240.487847][ T8744] should_failslab+0xa8/0x100 [ 240.487894][ T8744] __kmalloc_cache_noprof+0x70/0x3d0 [ 240.487917][ T8744] ? xfrm_policy_alloc+0x78/0x2b0 [ 240.487937][ T8744] xfrm_policy_alloc+0x78/0x2b0 [ 240.487955][ T8744] xfrm_policy_construct+0x39/0x6b0 [ 240.487980][ T8744] xfrm_add_policy+0x267/0x800 [ 240.488002][ T8744] ? __pfx_xfrm_add_policy+0x10/0x10 [ 240.488026][ T8744] ? __nla_parse+0x40/0x60 [ 240.488055][ T8744] xfrm_user_rcv_msg+0x7a0/0xab0 [ 240.488079][ T8744] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 240.488110][ T8744] ? __pfx___mutex_trylock_common+0x10/0x10 [ 240.488132][ T8744] ? rcu_is_watching+0x15/0xb0 [ 240.488150][ T8744] ? trace_contention_end+0x39/0x120 [ 240.488170][ T8744] ? __mutex_lock+0x335/0x1350 [ 240.488200][ T8744] netlink_rcv_skb+0x208/0x470 [ 240.488227][ T8744] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 240.488248][ T8744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.488277][ T8744] ? lock_release+0x4b/0x3e0 [ 240.488304][ T8744] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.488336][ T8744] xfrm_netlink_rcv+0x79/0x90 [ 240.488367][ T8744] netlink_unicast+0x82c/0x9e0 [ 240.488393][ T8744] ? __pfx_netlink_unicast+0x10/0x10 [ 240.488416][ T8744] ? netlink_sendmsg+0x642/0xb30 [ 240.488441][ T8744] ? skb_put+0x11b/0x210 [ 240.488461][ T8744] netlink_sendmsg+0x805/0xb30 [ 240.488489][ T8744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.488517][ T8744] ? __import_iovec+0x5d4/0x7f0 [ 240.488537][ T8744] ? aa_sock_msg_perm+0xf1/0x1d0 [ 240.488554][ T8744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.488574][ T8744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.488601][ T8744] __sock_sendmsg+0x219/0x270 [ 240.488627][ T8744] ____sys_sendmsg+0x505/0x830 [ 240.488647][ T8744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.488667][ T8744] ? kstrtouint+0x6e/0xe0 [ 240.488697][ T8744] ___sys_sendmsg+0x21f/0x2a0 [ 240.488715][ T8744] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.488735][ T8744] ? get_pid_task+0x20/0x1f0 [ 240.488755][ T8744] ? get_pid_task+0x20/0x1f0 [ 240.488789][ T8744] ? __fget_files+0x2a/0x420 [ 240.488806][ T8744] ? __fget_files+0x3a0/0x420 [ 240.488826][ T8744] __sys_sendmsg+0x164/0x220 [ 240.488846][ T8744] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.488867][ T8744] ? __pfx_ksys_write+0x10/0x10 [ 240.488896][ T8744] __do_fast_syscall_32+0xb6/0x2b0 [ 240.488925][ T8744] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 240.488953][ T8744] do_fast_syscall_32+0x34/0x80 [ 240.488981][ T8744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.489003][ T8744] RIP: 0023:0xf7f91539 [ 240.489019][ T8744] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 240.489035][ T8744] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 240.489058][ T8744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 240.489073][ T8744] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.489085][ T8744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.489097][ T8744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.489107][ T8744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.489126][ T8744] [ 241.050189][ T2153] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.208575][ T8751] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 241.222695][ T2153] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.233762][ T2153] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.243781][ T2153] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.254592][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.259958][ T8751] 8021q: adding VLAN 0 to HW filter on device bond11 [ 241.273684][ T8739] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 241.294341][ T2153] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.310544][ T8753] 8021q: adding VLAN 0 to HW filter on device bond11 [ 241.317703][ T8753] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.344531][ T8753] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 241.383958][ T8755] fuse: Bad value for 'group_id' [ 241.399644][ T8755] fuse: Bad value for 'group_id' [ 241.430295][ T8751] veth15: entered promiscuous mode [ 241.438552][ T8751] bond11: (slave veth15): Enslaving as an active interface with a down link [ 241.530893][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 242.173771][ T8763] wireguard7: entered promiscuous mode [ 242.179538][ T8763] wireguard7: entered allmulticast mode [ 242.590141][ T5947] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 242.750131][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 242.756755][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.771824][ T5947] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.782516][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.790869][ T5947] usb 4-1: Product: syz [ 242.795490][ T5947] usb 4-1: Manufacturer: syz [ 242.800466][ T5947] usb 4-1: SerialNumber: syz [ 242.806900][ T5947] usb 4-1: config 0 descriptor?? [ 242.816642][ T5947] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.826343][ T5947] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 243.137051][ T9] usb 1-1: USB disconnect, device number 24 [ 243.432696][ T5947] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 244.041107][ T5947] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 244.066726][ T5947] em28xx 4-1:0.0: board has no eeprom [ 244.140275][ T5947] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 244.154942][ T5947] em28xx 4-1:0.0: dvb set to bulk mode. [ 244.160895][ T2153] em28xx 4-1:0.0: Binding DVB extension [ 244.182868][ T5947] usb 4-1: USB disconnect, device number 30 [ 244.199717][ T5947] em28xx 4-1:0.0: Disconnecting em28xx [ 244.214721][ T2153] em28xx 4-1:0.0: Registering input extension [ 244.222199][ T5947] em28xx 4-1:0.0: Closing input extension [ 244.243681][ T5947] em28xx 4-1:0.0: Freeing device [ 244.426941][ T8797] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 244.515376][ T8797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.533076][ T8803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.541051][ T8803] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 244.551715][ T8804] program syz.1.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.562357][ T8803] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 244.714854][ T8806] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 244.807293][ T8797] veth7: entered promiscuous mode [ 244.852095][ T8797] bond4: (slave veth7): Enslaving as an active interface with a down link [ 244.872297][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'. [ 245.003685][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 245.108459][ T8806] 8021q: adding VLAN 0 to HW filter on device bond12 [ 245.155695][ T8821] FAULT_INJECTION: forcing a failure. [ 245.155695][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 245.212943][ T8807] 8021q: adding VLAN 0 to HW filter on device bond12 [ 245.220935][ T8821] CPU: 0 UID: 0 PID: 8821 Comm: syz.1.828 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 245.220964][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.220976][ T8821] Call Trace: [ 245.220984][ T8821] [ 245.220992][ T8821] dump_stack_lvl+0x189/0x250 [ 245.221020][ T8821] ? __pfx____ratelimit+0x10/0x10 [ 245.221045][ T8821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.221067][ T8821] ? __pfx__printk+0x10/0x10 [ 245.221091][ T8821] ? rcu_is_watching+0x15/0xb0 [ 245.221111][ T8821] ? __pfx___might_resched+0x10/0x10 [ 245.221131][ T8821] ? lock_acquire+0x5f/0x360 [ 245.221160][ T8821] should_fail_ex+0x414/0x560 [ 245.221187][ T8821] should_failslab+0xa8/0x100 [ 245.221226][ T8821] __kmalloc_noprof+0xcb/0x4f0 [ 245.221253][ T8821] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 245.221280][ T8821] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 245.221306][ T8821] genl_family_rcv_msg_doit+0xb8/0x300 [ 245.221331][ T8821] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.221357][ T8821] ? apparmor_capable+0x137/0x1b0 [ 245.221382][ T8821] ? bpf_lsm_capable+0x9/0x20 [ 245.221407][ T8821] ? security_capable+0x7e/0x2e0 [ 245.221436][ T8821] genl_rcv_msg+0x60e/0x790 [ 245.221460][ T8821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.221480][ T8821] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 245.221508][ T8821] ? __asan_memcpy+0x40/0x70 [ 245.221530][ T8821] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.221555][ T8821] ? __skb_clone+0x63/0x7a0 [ 245.221578][ T8821] netlink_rcv_skb+0x208/0x470 [ 245.221605][ T8821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.221627][ T8821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.221658][ T8821] ? lock_release+0x4b/0x3e0 [ 245.221687][ T8821] ? down_read+0x1ad/0x2e0 [ 245.221705][ T8821] genl_rcv+0x28/0x40 [ 245.221724][ T8821] netlink_unicast+0x82c/0x9e0 [ 245.221751][ T8821] ? __pfx_netlink_unicast+0x10/0x10 [ 245.221776][ T8821] ? netlink_sendmsg+0x642/0xb30 [ 245.221802][ T8821] ? skb_put+0x11b/0x210 [ 245.221820][ T8821] netlink_sendmsg+0x805/0xb30 [ 245.221851][ T8821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.221879][ T8821] ? __import_iovec+0x5d4/0x7f0 [ 245.221900][ T8821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.221918][ T8821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.221938][ T8821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.221971][ T8821] __sock_sendmsg+0x219/0x270 [ 245.221998][ T8821] ____sys_sendmsg+0x505/0x830 [ 245.222019][ T8821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.222041][ T8821] ? kstrtouint+0x6e/0xe0 [ 245.222071][ T8821] ___sys_sendmsg+0x21f/0x2a0 [ 245.222089][ T8821] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.222108][ T8821] ? get_pid_task+0x20/0x1f0 [ 245.222129][ T8821] ? get_pid_task+0x20/0x1f0 [ 245.222159][ T8821] ? __fget_files+0x2a/0x420 [ 245.222174][ T8821] ? __fget_files+0x3a0/0x420 [ 245.222193][ T8821] __sys_sendmsg+0x164/0x220 [ 245.222220][ T8821] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.222242][ T8821] ? __pfx_ksys_write+0x10/0x10 [ 245.222270][ T8821] __do_fast_syscall_32+0xb6/0x2b0 [ 245.222299][ T8821] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 245.222322][ T8821] do_fast_syscall_32+0x34/0x80 [ 245.222350][ T8821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.222374][ T8821] RIP: 0023:0xf7f31539 [ 245.222390][ T8821] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.222407][ T8821] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 245.222428][ T8821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 245.222442][ T8821] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.222453][ T8821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.222463][ T8821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.222475][ T8821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.222492][ T8821] [ 245.250923][ T8807] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.801062][ T8807] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 245.895917][ T8810] veth17: entered promiscuous mode [ 245.918421][ T8810] bond12: (slave veth17): Enslaving as an active interface with a down link [ 246.358789][ T8845] wireguard8: entered promiscuous mode [ 246.365612][ T8845] wireguard8: entered allmulticast mode [ 246.435732][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 246.435754][ T30] audit: type=1326 audit(1755619993.908:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 246.520265][ T30] audit: type=1326 audit(1755619993.908:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 246.557653][ T8849] bond6: entered allmulticast mode [ 247.252212][ T8870] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 247.311070][ T8870] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.339185][ T8873] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.386318][ T8873] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 247.431925][ T8873] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 247.520288][ T8870] veth11: entered promiscuous mode [ 247.531025][ T8870] bond9: (slave veth11): Enslaving as an active interface with a down link [ 247.549002][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 248.758676][ T8895] netlink: 'syz.2.850': attribute type 2 has an invalid length. [ 249.440636][ T5947] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 249.504477][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 249.516081][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 249.543445][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 249.567990][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 249.610994][ T5947] usb 4-1: config 27 has an invalid descriptor of length 80, skipping remainder of the config [ 249.622703][ T5947] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 249.655793][ T5947] usb 4-1: New USB device found, idVendor=0582, idProduct=bb07, bcdDevice=bb.9d [ 249.676253][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.906224][ T8934] openvswitch: netlink: Message has 8 unknown bytes. [ 250.555953][ T8947] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.600023][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.870'. [ 250.766369][ T8953] wireguard6: entered promiscuous mode [ 250.772245][ T8953] wireguard6: entered allmulticast mode [ 251.193423][ T8956] FAULT_INJECTION: forcing a failure. [ 251.193423][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 251.206450][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.1.872 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 251.206478][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.206489][ T8956] Call Trace: [ 251.206497][ T8956] [ 251.206505][ T8956] dump_stack_lvl+0x189/0x250 [ 251.206532][ T8956] ? __pfx____ratelimit+0x10/0x10 [ 251.206558][ T8956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.206581][ T8956] ? __pfx__printk+0x10/0x10 [ 251.206607][ T8956] ? fs_reclaim_acquire+0x7d/0x100 [ 251.206634][ T8956] ? rcu_is_watching+0x15/0xb0 [ 251.206653][ T8956] ? __pfx___might_resched+0x10/0x10 [ 251.206671][ T8956] ? lock_acquire+0x5f/0x360 [ 251.206699][ T8956] should_fail_ex+0x414/0x560 [ 251.206726][ T8956] should_failslab+0xa8/0x100 [ 251.206755][ T8956] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 251.206781][ T8956] ? __alloc_skb+0x112/0x2d0 [ 251.206809][ T8956] ? __pfx___mutex_trylock_common+0x10/0x10 [ 251.206832][ T8956] __alloc_skb+0x112/0x2d0 [ 251.206861][ T8956] netlink_dump+0x1b7/0xe90 [ 251.206888][ T8956] ? lock_release+0x4b/0x3e0 [ 251.206914][ T8956] ? __dev_queue_xmit+0x27b/0x3b50 [ 251.206937][ T8956] ? __pfx_netlink_dump+0x10/0x10 [ 251.206961][ T8956] ? __netlink_lookup+0x752/0x810 [ 251.206996][ T8956] ? netlink_lookup+0x30/0x200 [ 251.207018][ T8956] ? netlink_lookup+0x30/0x200 [ 251.207044][ T8956] __netlink_dump_start+0x5cb/0x7e0 [ 251.207075][ T8956] rtnetlink_rcv_msg+0x9eb/0xb70 [ 251.207102][ T8956] ? __pfx_tc_dump_tclass+0x10/0x10 [ 251.207125][ T8956] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 251.207152][ T8956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.207178][ T8956] ? ref_tracker_free+0x63a/0x7d0 [ 251.207204][ T8956] ? __pfx_rtnl_dumpit+0x10/0x10 [ 251.207228][ T8956] ? __pfx_tc_dump_tclass+0x10/0x10 [ 251.207245][ T8956] ? __skb_clone+0x63/0x7a0 [ 251.207264][ T8956] netlink_rcv_skb+0x208/0x470 [ 251.207292][ T8956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.207319][ T8956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.207355][ T8956] netlink_unicast+0x82c/0x9e0 [ 251.207382][ T8956] ? __pfx_netlink_unicast+0x10/0x10 [ 251.207406][ T8956] ? netlink_sendmsg+0x642/0xb30 [ 251.207430][ T8956] ? skb_put+0x11b/0x210 [ 251.207446][ T8956] netlink_sendmsg+0x805/0xb30 [ 251.207477][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.207506][ T8956] ? __import_iovec+0x5d4/0x7f0 [ 251.207526][ T8956] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.207545][ T8956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.207566][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.207594][ T8956] __sock_sendmsg+0x219/0x270 [ 251.207620][ T8956] ____sys_sendmsg+0x505/0x830 [ 251.207642][ T8956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.207663][ T8956] ? kstrtouint+0x6e/0xe0 [ 251.207693][ T8956] ___sys_sendmsg+0x21f/0x2a0 [ 251.207712][ T8956] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.207732][ T8956] ? get_pid_task+0x20/0x1f0 [ 251.207767][ T8956] ? get_pid_task+0x20/0x1f0 [ 251.207802][ T8956] ? __fget_files+0x2a/0x420 [ 251.207819][ T8956] ? __fget_files+0x3a0/0x420 [ 251.207840][ T8956] __sys_sendmsg+0x164/0x220 [ 251.207859][ T8956] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.207881][ T8956] ? __pfx_ksys_write+0x10/0x10 [ 251.207910][ T8956] __do_fast_syscall_32+0xb6/0x2b0 [ 251.207939][ T8956] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 251.207967][ T8956] do_fast_syscall_32+0x34/0x80 [ 251.208055][ T8956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.208078][ T8956] RIP: 0023:0xf7f31539 [ 251.208095][ T8956] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.208113][ T8956] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 251.208136][ T8956] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 251.208151][ T8956] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.208163][ T8956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.208174][ T8956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.208185][ T8956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.208204][ T8956] [ 251.714753][ T8958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.724126][ T8958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.033156][ T5947] usb 4-1: string descriptor 0 read error: -71 [ 252.056683][ T5947] usb 4-1: USB disconnect, device number 31 [ 253.370178][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 253.500466][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.509618][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.531609][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 253.545077][ T43] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 253.558263][ T43] usb 5-1: config 0 has no interface number 0 [ 253.564984][ T43] usb 5-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 253.576419][ T43] usb 5-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.589057][ T43] usb 5-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 253.598818][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.607339][ T43] usb 5-1: Product: syz [ 253.614685][ T43] usb 5-1: Manufacturer: syz [ 253.619746][ T43] usb 5-1: SerialNumber: syz [ 253.626059][ T43] usb 5-1: config 0 descriptor?? [ 253.836093][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.849724][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.859697][ T43] udl 5-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 253.869490][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 253.892343][ T43] [drm] Initialized udl 0.0.1 for 5-1:0.217 on minor 2 [ 253.899435][ T43] [drm] Initialized udl on minor 2 [ 253.911063][ T43] udl 5-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.919575][ T43] udl 5-1:0.217: [drm] Cannot find any crtc or sizes [ 253.927081][ T5947] udl 5-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.935529][ T5947] udl 5-1:0.217: [drm] Cannot find any crtc or sizes [ 253.943920][ T43] usb 5-1: USB disconnect, device number 28 [ 254.049340][ T9006] FAULT_INJECTION: forcing a failure. [ 254.049340][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 254.062448][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.1.888 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 254.062476][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.062487][ T9006] Call Trace: [ 254.062495][ T9006] [ 254.062503][ T9006] dump_stack_lvl+0x189/0x250 [ 254.062525][ T9006] ? __pfx____ratelimit+0x10/0x10 [ 254.062542][ T9006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.062555][ T9006] ? __pfx__printk+0x10/0x10 [ 254.062570][ T9006] ? __pfx___might_resched+0x10/0x10 [ 254.062582][ T9006] ? lock_acquire+0x5f/0x360 [ 254.062598][ T9006] should_fail_ex+0x414/0x560 [ 254.062613][ T9006] should_failslab+0xa8/0x100 [ 254.062631][ T9006] kmem_cache_alloc_noprof+0x73/0x3c0 [ 254.062646][ T9006] ? ovs_flow_alloc+0x24/0x1f0 [ 254.062659][ T9006] ovs_flow_alloc+0x24/0x1f0 [ 254.062671][ T9006] ovs_flow_cmd_new+0x1ee/0xd80 [ 254.062686][ T9006] ? stack_depot_save_flags+0x40/0x860 [ 254.062701][ T9006] ? netlink_unicast+0x741/0x9e0 [ 254.062716][ T9006] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 254.062743][ T9006] ? __nla_parse+0x40/0x60 [ 254.062759][ T9006] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 254.062775][ T9006] genl_family_rcv_msg_doit+0x215/0x300 [ 254.062790][ T9006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.062805][ T9006] ? bpf_lsm_capable+0x9/0x20 [ 254.062820][ T9006] ? security_capable+0x7e/0x2e0 [ 254.062837][ T9006] genl_rcv_msg+0x60e/0x790 [ 254.062851][ T9006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.062863][ T9006] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 254.062878][ T9006] ? __asan_memcpy+0x40/0x70 [ 254.062893][ T9006] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.062908][ T9006] ? __skb_clone+0x63/0x7a0 [ 254.062922][ T9006] netlink_rcv_skb+0x208/0x470 [ 254.062938][ T9006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.062950][ T9006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.062968][ T9006] ? lock_release+0x4b/0x3e0 [ 254.062985][ T9006] ? down_read+0x1ad/0x2e0 [ 254.062996][ T9006] genl_rcv+0x28/0x40 [ 254.063007][ T9006] netlink_unicast+0x82c/0x9e0 [ 254.063023][ T9006] ? __pfx_netlink_unicast+0x10/0x10 [ 254.063037][ T9006] ? netlink_sendmsg+0x642/0xb30 [ 254.063053][ T9006] ? skb_put+0x11b/0x210 [ 254.063064][ T9006] netlink_sendmsg+0x805/0xb30 [ 254.063082][ T9006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.063098][ T9006] ? __import_iovec+0x5d4/0x7f0 [ 254.063110][ T9006] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.063121][ T9006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.063141][ T9006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.063157][ T9006] __sock_sendmsg+0x219/0x270 [ 254.063172][ T9006] ____sys_sendmsg+0x505/0x830 [ 254.063184][ T9006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.063196][ T9006] ? kstrtouint+0x6e/0xe0 [ 254.063212][ T9006] ___sys_sendmsg+0x21f/0x2a0 [ 254.063224][ T9006] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.063235][ T9006] ? get_pid_task+0x20/0x1f0 [ 254.063248][ T9006] ? get_pid_task+0x20/0x1f0 [ 254.063267][ T9006] ? __fget_files+0x2a/0x420 [ 254.063277][ T9006] ? __fget_files+0x3a0/0x420 [ 254.063288][ T9006] __sys_sendmsg+0x164/0x220 [ 254.063303][ T9006] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.063316][ T9006] ? __pfx_ksys_write+0x10/0x10 [ 254.063333][ T9006] __do_fast_syscall_32+0xb6/0x2b0 [ 254.063349][ T9006] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 254.063366][ T9006] do_fast_syscall_32+0x34/0x80 [ 254.063382][ T9006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.063396][ T9006] RIP: 0023:0xf7f31539 [ 254.063407][ T9006] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 254.063417][ T9006] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 254.063431][ T9006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 254.063440][ T9006] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.063447][ T9006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.063453][ T9006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.063460][ T9006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.063470][ T9006] [ 254.524519][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.539191][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.610387][ T5947] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 254.771577][ T5947] usb 1-1: config 0 has no interfaces? [ 254.779201][ T5947] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.788650][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.797401][ T5947] usb 1-1: Product: syz [ 254.806676][ T5947] usb 1-1: Manufacturer: syz [ 254.811968][ T5947] usb 1-1: SerialNumber: syz [ 254.818532][ T5947] usb 1-1: config 0 descriptor?? [ 254.970128][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 255.132277][ T9] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 255.145007][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.155626][ T9] usb 5-1: config 0 has no interface number 0 [ 255.163043][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 255.172275][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.182895][ T9] usb 5-1: config 0 descriptor?? [ 255.193889][ T9] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 255.221694][ T9] usb 5-1: bad CDC descriptors [ 255.241385][ T9] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 255.295701][ T9023] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.338364][ T9025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.895'. [ 255.839209][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 255.915583][ T9039] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 255.963829][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.971245][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981548][ T9039] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.012996][ T9041] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.021596][ T9041] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 256.042221][ T9041] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 256.070268][ T9039] veth13: entered promiscuous mode [ 256.082695][ T9039] bond10: (slave veth13): Enslaving as an active interface with a down link [ 256.418463][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 256.429651][ T9072] netlink: 'syz.3.902': attribute type 34 has an invalid length. [ 256.848821][ T9081] openvswitch: netlink: Actions may not be safe on all matching packets [ 256.993408][ T43] usb 1-1: USB disconnect, device number 25 [ 257.259699][ T9090] netlink: 'syz.1.910': attribute type 1 has an invalid length. [ 257.285806][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 257.399139][ T9090] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.585819][ T9097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.593831][ T9097] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 257.678045][ T9097] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 257.748551][ T9100] veth9: entered promiscuous mode [ 257.777207][ T9100] bond8: (slave veth9): Enslaving as an active interface with a down link [ 257.792086][ T9101] FAULT_INJECTION: forcing a failure. [ 257.792086][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 257.808804][ T9101] CPU: 0 UID: 0 PID: 9101 Comm: syz.0.911 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 257.808842][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.808854][ T9101] Call Trace: [ 257.808862][ T9101] [ 257.808871][ T9101] dump_stack_lvl+0x189/0x250 [ 257.808900][ T9101] ? __pfx____ratelimit+0x10/0x10 [ 257.808927][ T9101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.808948][ T9101] ? __pfx__printk+0x10/0x10 [ 257.808977][ T9101] ? __pfx___might_resched+0x10/0x10 [ 257.808995][ T9101] ? lock_acquire+0x5f/0x360 [ 257.809023][ T9101] should_fail_ex+0x414/0x560 [ 257.809050][ T9101] should_failslab+0xa8/0x100 [ 257.809078][ T9101] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 257.809105][ T9101] ? __alloc_skb+0x112/0x2d0 [ 257.809134][ T9101] __alloc_skb+0x112/0x2d0 [ 257.809163][ T9101] netlink_ack+0x146/0xa50 [ 257.809197][ T9101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.809225][ T9101] ? ref_tracker_free+0x63a/0x7d0 [ 257.809251][ T9101] ? __asan_memcpy+0x40/0x70 [ 257.809272][ T9101] ? __pfx_ref_tracker_free+0x10/0x10 [ 257.809297][ T9101] ? __skb_clone+0x63/0x7a0 [ 257.809319][ T9101] netlink_rcv_skb+0x28c/0x470 [ 257.809346][ T9101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.809374][ T9101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.809410][ T9101] netlink_unicast+0x82c/0x9e0 [ 257.809438][ T9101] ? __pfx_netlink_unicast+0x10/0x10 [ 257.809462][ T9101] ? netlink_sendmsg+0x642/0xb30 [ 257.809487][ T9101] ? skb_put+0x11b/0x210 [ 257.809505][ T9101] netlink_sendmsg+0x805/0xb30 [ 257.809536][ T9101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.809565][ T9101] ? __import_iovec+0x5d4/0x7f0 [ 257.809586][ T9101] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.809606][ T9101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.809627][ T9101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.809654][ T9101] __sock_sendmsg+0x219/0x270 [ 257.809680][ T9101] ____sys_sendmsg+0x505/0x830 [ 257.809701][ T9101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.809722][ T9101] ? kstrtouint+0x6e/0xe0 [ 257.809752][ T9101] ___sys_sendmsg+0x21f/0x2a0 [ 257.809772][ T9101] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.809792][ T9101] ? get_pid_task+0x20/0x1f0 [ 257.809814][ T9101] ? get_pid_task+0x20/0x1f0 [ 257.809847][ T9101] ? __fget_files+0x2a/0x420 [ 257.809862][ T9101] ? __fget_files+0x3a0/0x420 [ 257.809881][ T9101] __sys_sendmsg+0x164/0x220 [ 257.809899][ T9101] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.809918][ T9101] ? __pfx_ksys_write+0x10/0x10 [ 257.809944][ T9101] __do_fast_syscall_32+0xb6/0x2b0 [ 257.809968][ T9101] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 257.809993][ T9101] do_fast_syscall_32+0x34/0x80 [ 257.810020][ T9101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.810042][ T9101] RIP: 0023:0xf7fa4539 [ 257.810058][ T9101] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 257.810075][ T9101] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 257.810096][ T9101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 257.810110][ T9101] RDX: 0000000010004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.810122][ T9101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.810133][ T9101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.810145][ T9101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.810163][ T9101] [ 258.215121][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.241181][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.563447][ T9120] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.580386][ T43] usb 5-1: USB disconnect, device number 29 [ 259.070289][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 259.090007][ T9141] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 259.284882][ T43] usb 5-1: config 0 has no interfaces? [ 259.285565][ T9141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.299441][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.317699][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.318857][ T9144] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.333902][ T43] usb 5-1: Product: syz [ 259.338271][ T43] usb 5-1: Manufacturer: syz [ 259.343257][ T43] usb 5-1: SerialNumber: syz [ 259.344240][ T9144] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.360440][ T9144] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 259.360578][ T43] usb 5-1: config 0 descriptor?? [ 259.387991][ T9145] veth7: entered promiscuous mode [ 259.395206][ T9145] bond7: (slave veth7): Enslaving as an active interface with a down link [ 259.498929][ T9148] netlink: 'syz.0.927': attribute type 10 has an invalid length. [ 259.749432][ T9154] netlink: ct family unspecified [ 259.751849][ T9155] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.755859][ T9154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.800722][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.813438][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.963401][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.976363][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.988358][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.000757][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.011582][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.023411][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.056813][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.067250][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.077494][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.088125][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.800179][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 260.907216][ T5947] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 260.980845][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 260.989348][ T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 260.998788][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.008993][ T9] usb 4-1: config 0 descriptor?? [ 261.017400][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 261.032135][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 261.050124][ T5947] usb 1-1: device descriptor read/64, error -71 [ 261.102337][ T9183] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 261.128216][ T9183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.143423][ T9183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.150871][ T9183] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 261.165973][ T9183] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 261.195966][ T9185] veth9: entered promiscuous mode [ 261.203120][ T9185] bond5: (slave veth9): Enslaving as an active interface with a down link [ 261.221331][ T9] usb 4-1: USB disconnect, device number 32 [ 261.290826][ T5947] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 261.560233][ T5947] usb 1-1: device descriptor read/64, error -71 [ 261.629531][ T2153] usb 5-1: USB disconnect, device number 30 [ 261.672264][ T5947] usb usb1-port1: attempt power cycle [ 261.903014][ T9202] openvswitch: netlink: Actions may not be safe on all matching packets [ 261.929047][ T9201] wireguard9: entered promiscuous mode [ 261.935335][ T9201] wireguard9: entered allmulticast mode [ 262.170406][ T5947] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 262.200810][ T5947] usb 1-1: device descriptor read/8, error -71 [ 262.450304][ T5947] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 262.550122][ T5947] usb 1-1: device descriptor read/8, error -71 [ 262.660288][ T5947] usb usb1-port1: unable to enumerate USB device [ 262.888903][ T9218] netlink: 'syz.3.948': attribute type 72 has an invalid length. [ 262.905051][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'. [ 263.011788][ T9220] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 263.077884][ T9220] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.163151][ T9222] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.175659][ T9222] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 263.189379][ T9222] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 263.219014][ T9220] veth15: entered promiscuous mode [ 263.225645][ T9220] bond11: (slave veth15): Enslaving as an active interface with a down link [ 264.848601][ T9255] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 264.876668][ T9255] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.890231][ T5947] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 264.933206][ T9260] netlink: 712 bytes leftover after parsing attributes in process `syz.4.962'. [ 264.973056][ T9261] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.980737][ T9261] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 264.992926][ T9261] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 265.046080][ T5947] usb 4-1: device descriptor read/64, error -71 [ 265.091985][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 265.266482][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 265.302649][ T5947] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 265.574956][ T5947] usb 4-1: device descriptor read/64, error -71 [ 265.600676][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 265.616557][ T9289] @: renamed from vlan0 (while UP) [ 265.726114][ T5947] usb usb4-port1: attempt power cycle [ 265.736509][ T9290] wireguard7: entered promiscuous mode [ 265.742260][ T9290] wireguard7: entered allmulticast mode [ 266.159100][ T9300] netlink: 712 bytes leftover after parsing attributes in process `syz.1.974'. [ 266.290185][ T5947] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 266.380340][ T5947] usb 4-1: device descriptor read/8, error -71 [ 266.415553][ T9300] FAULT_INJECTION: forcing a failure. [ 266.415553][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 266.435980][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.1.974 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 266.436012][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.436024][ T9300] Call Trace: [ 266.436032][ T9300] [ 266.436040][ T9300] dump_stack_lvl+0x189/0x250 [ 266.436069][ T9300] ? __pfx____ratelimit+0x10/0x10 [ 266.436093][ T9300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.436115][ T9300] ? __pfx__printk+0x10/0x10 [ 266.436142][ T9300] ? fs_reclaim_acquire+0x7d/0x100 [ 266.436170][ T9300] ? rcu_is_watching+0x15/0xb0 [ 266.436188][ T9300] ? __pfx___might_resched+0x10/0x10 [ 266.436205][ T9300] ? lock_acquire+0x5f/0x360 [ 266.436233][ T9300] should_fail_ex+0x414/0x560 [ 266.436254][ T9300] ? xfrm_user_rcv_msg_compat+0x478/0x1460 [ 266.436277][ T9300] should_failslab+0xa8/0x100 [ 266.436305][ T9300] __kvmalloc_node_noprof+0x161/0x5f0 [ 266.436333][ T9300] ? xfrm_user_rcv_msg_compat+0x478/0x1460 [ 266.436361][ T9300] xfrm_user_rcv_msg_compat+0x478/0x1460 [ 266.436392][ T9300] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 266.436430][ T9300] ? xfrm_get_translator+0x1b/0x240 [ 266.436452][ T9300] ? lock_release+0x4b/0x3e0 [ 266.436477][ T9300] ? bpf_lsm_capable+0x9/0x20 [ 266.436501][ T9300] ? xfrm_get_translator+0x1b/0x240 [ 266.436525][ T9300] xfrm_user_rcv_msg+0x282/0xab0 [ 266.436550][ T9300] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 266.436585][ T9300] ? __pfx___mutex_trylock_common+0x10/0x10 [ 266.436609][ T9300] ? rcu_is_watching+0x15/0xb0 [ 266.436627][ T9300] ? trace_contention_end+0x39/0x120 [ 266.436648][ T9300] ? __mutex_lock+0x335/0x1350 [ 266.436677][ T9300] netlink_rcv_skb+0x208/0x470 [ 266.436704][ T9300] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 266.436726][ T9300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.436763][ T9300] ? lock_release+0x4b/0x3e0 [ 266.436799][ T9300] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.436826][ T9300] xfrm_netlink_rcv+0x79/0x90 [ 266.436846][ T9300] netlink_unicast+0x82c/0x9e0 [ 266.436873][ T9300] ? __pfx_netlink_unicast+0x10/0x10 [ 266.436898][ T9300] ? netlink_sendmsg+0x642/0xb30 [ 266.436924][ T9300] ? skb_put+0x11b/0x210 [ 266.436943][ T9300] netlink_sendmsg+0x805/0xb30 [ 266.436974][ T9300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.437003][ T9300] ? __import_iovec+0x5d4/0x7f0 [ 266.437023][ T9300] ? aa_sock_msg_perm+0xf1/0x1d0 [ 266.437042][ T9300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.437062][ T9300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.437091][ T9300] __sock_sendmsg+0x219/0x270 [ 266.437117][ T9300] ____sys_sendmsg+0x505/0x830 [ 266.437138][ T9300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.437159][ T9300] ? kstrtouint+0x6e/0xe0 [ 266.437189][ T9300] ___sys_sendmsg+0x21f/0x2a0 [ 266.437209][ T9300] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.437229][ T9300] ? get_pid_task+0x20/0x1f0 [ 266.437250][ T9300] ? get_pid_task+0x20/0x1f0 [ 266.437284][ T9300] ? __fget_files+0x2a/0x420 [ 266.437300][ T9300] ? __fget_files+0x3a0/0x420 [ 266.437320][ T9300] __sys_sendmsg+0x164/0x220 [ 266.437339][ T9300] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.437362][ T9300] ? __pfx_ksys_write+0x10/0x10 [ 266.437391][ T9300] __do_fast_syscall_32+0xb6/0x2b0 [ 266.437419][ T9300] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 266.437446][ T9300] do_fast_syscall_32+0x34/0x80 [ 266.437473][ T9300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.437497][ T9300] RIP: 0023:0xf7f31539 [ 266.437514][ T9300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 266.437531][ T9300] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 266.437553][ T9300] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080014800 [ 266.437567][ T9300] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.437580][ T9300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.437591][ T9300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 266.437602][ T9300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.437620][ T9300] [ 266.896692][ T5861] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 267.030443][ T5947] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 267.050711][ T5947] usb 4-1: device descriptor read/8, error -71 [ 267.071192][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 267.077445][ T5861] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 267.086344][ T5861] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 267.105884][ T5861] usb 5-1: config 0 has no interface number 0 [ 267.111026][ T9307] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.114111][ T5861] usb 5-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 267.129830][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 267.153858][ T9309] loop2: detected capacity change from 0 to 7 [ 267.158207][ T5861] usb 5-1: Product: syz [ 267.160582][ T5947] usb usb4-port1: unable to enumerate USB device [ 267.177877][ T5861] usb 5-1: Manufacturer: syz [ 267.183906][ T5861] usb 5-1: SerialNumber: syz [ 267.186168][ T9309] loop2: [ 267.192020][ T9309] loop2: partition table partially beyond EOD, truncated [ 267.192216][ T5861] usb 5-1: config 0 descriptor?? [ 267.204279][ T9] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 267.241653][ T5861] xr_serial 5-1:0.109: skipping garbage [ 267.360168][ T9] usb 1-1: device descriptor read/64, error -71 [ 267.513649][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.525346][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.600128][ T9] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 267.760363][ T9] usb 1-1: device descriptor read/64, error -71 [ 267.883890][ T9] usb usb1-port1: attempt power cycle [ 268.114685][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.135852][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.230169][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 268.251070][ T9] usb 1-1: device descriptor read/8, error -71 [ 268.490168][ T9] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 268.514762][ T9] usb 1-1: device descriptor read/8, error -71 [ 268.631176][ T9] usb usb1-port1: unable to enumerate USB device [ 268.787662][ T9333] openvswitch: netlink: Actions may not be safe on all matching packets [ 268.842390][ T9337] netlink: 712 bytes leftover after parsing attributes in process `syz.1.989'. [ 268.854317][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.865248][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.963111][ T5947] usb 5-1: USB disconnect, device number 31 [ 269.209789][ T9345] tipc: Started in network mode [ 269.222881][ T9345] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 269.242029][ T9345] tipc: Enabling of bearer rejected, failed to enable media [ 269.400257][ T31] INFO: task kworker/1:3:5924 blocked for more than 143 seconds. [ 269.408270][ T31] Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 [ 269.417473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.428693][ T31] task:kworker/1:3 state:D stack:21968 pid:5924 tgid:5924 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 269.444092][ T31] Workqueue: usb_hub_wq hub_event [ 269.449987][ T31] Call Trace: [ 269.454701][ T31] [ 269.458015][ T31] __schedule+0x1798/0x4cc0 [ 269.464941][ T31] ? __pfx___schedule+0x10/0x10 [ 269.470162][ T31] ? schedule+0x91/0x360 [ 269.474526][ T31] ? rcu_is_watching+0x15/0xb0 [ 269.479639][ T31] ? lock_release+0x4b/0x3e0 [ 269.484562][ T31] ? schedule+0x91/0x360 [ 269.489038][ T31] ? wq_worker_sleeping+0x63/0x250 [ 269.495480][ T31] schedule+0x165/0x360 [ 269.500009][ T31] schedule_timeout+0x9a/0x270 [ 269.505197][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 269.511149][ T31] ? rcu_is_watching+0x15/0xb0 [ 269.516544][ T31] ? rcu_is_watching+0x15/0xb0 [ 269.522593][ T31] ? wait_for_completion+0x267/0x5d0 [ 269.529286][ T31] wait_for_completion+0x2bf/0x5d0 [ 269.535343][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 269.542550][ T31] i2c_del_adapter+0x581/0x6e0 [ 269.547712][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 269.553251][ T31] ? em28xx_release_resources+0xde/0x240 [ 269.559647][ T31] ? kfree+0x18e/0x440 [ 269.564564][ T31] em28xx_i2c_unregister+0x4b/0x60 [ 269.570133][ T31] em28xx_release_resources+0x14c/0x240 [ 269.576359][ T31] em28xx_usb_disconnect+0x19f/0x2f0 [ 269.582553][ T31] usb_unbind_interface+0x26b/0x910 [ 269.594812][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 269.600919][ T31] device_release_driver_internal+0x4d9/0x800 [ 269.607029][ T31] bus_remove_device+0x34d/0x410 [ 269.612043][ T31] device_del+0x511/0x8e0 [ 269.616558][ T31] ? kfree+0x18e/0x440 [ 269.620676][ T5860] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 269.620722][ T31] ? __pfx_device_del+0x10/0x10 [ 269.633163][ T31] ? kobject_put+0x446/0x480 [ 269.637823][ T31] usb_disable_device+0x3e9/0x8a0 [ 269.645069][ T31] usb_disconnect+0x330/0x950 [ 269.649976][ T31] hub_event+0x1cf5/0x4a20 [ 269.654914][ T31] ? do_raw_spin_lock+0x121/0x290 [ 269.660611][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 269.666238][ T31] ? __pfx_hub_event+0x10/0x10 [ 269.671506][ T31] ? rcu_is_watching+0x15/0xb0 [ 269.680329][ T31] ? lock_acquire+0x5f/0x360 [ 269.686348][ T31] ? rcu_is_watching+0x15/0xb0 [ 269.691489][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 269.697349][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 269.703568][ T31] process_scheduled_works+0xade/0x17b0 [ 269.709363][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.715629][ T31] worker_thread+0x8a0/0xda0 [ 269.720352][ T31] kthread+0x70e/0x8a0 [ 269.724481][ T31] ? __pfx_worker_thread+0x10/0x10 [ 269.729675][ T31] ? __pfx_kthread+0x10/0x10 [ 269.734369][ T31] ? rcu_is_watching+0x15/0xb0 [ 269.739205][ T31] ? __pfx_kthread+0x10/0x10 [ 269.744008][ T31] ret_from_fork+0x3f9/0x770 [ 269.748972][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 269.754189][ T31] ? __switch_to_asm+0x39/0x70 [ 269.759004][ T31] ? __switch_to_asm+0x33/0x70 [ 269.763878][ T5860] usb 5-1: device descriptor read/64, error -71 [ 269.770404][ T31] ? __pfx_kthread+0x10/0x10 [ 269.775044][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.779925][ T31] [ 269.783234][ T31] INFO: lockdep is turned off. [ 269.789105][ T9342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.794154][ T31] NMI backtrace for cpu 1 [ 269.794175][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 269.794197][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.794208][ T31] Call Trace: [ 269.794215][ T31] [ 269.794222][ T31] dump_stack_lvl+0x189/0x250 [ 269.794250][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.794279][ T31] ? __pfx__printk+0x10/0x10 [ 269.794306][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 269.794328][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 269.794348][ T31] ? __pfx__printk+0x10/0x10 [ 269.794371][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.794399][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 269.794419][ T31] watchdog+0xf93/0xfe0 [ 269.794445][ T31] ? watchdog+0x1de/0xfe0 [ 269.794468][ T31] kthread+0x70e/0x8a0 [ 269.794489][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.794511][ T31] ? __pfx_kthread+0x10/0x10 [ 269.794532][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.794554][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.794575][ T31] ? __pfx_kthread+0x10/0x10 [ 269.794595][ T31] ret_from_fork+0x3f9/0x770 [ 269.794613][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 269.794632][ T31] ? __switch_to_asm+0x39/0x70 [ 269.794653][ T31] ? __switch_to_asm+0x33/0x70 [ 269.794673][ T31] ? __pfx_kthread+0x10/0x10 [ 269.794693][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.794720][ T31] [ 269.794727][ T31] Sending NMI from CPU 1 to CPUs 0: [ 269.944994][ C0] NMI backtrace for cpu 0 [ 269.945014][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 269.945034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.945043][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 269.945071][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 269.945084][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 269.945100][ C0] RAX: b6056360baf1d900 RBX: ffffffff81968308 RCX: b6056360baf1d900 [ 269.945112][ C0] RDX: 0000000000000001 RSI: ffffffff8be336e0 RDI: ffffffff81968308 [ 269.945123][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 269.945135][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38330 [ 269.945146][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 269.945157][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 269.945170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.945181][ C0] CR2: 0000000080202018 CR3: 0000000067ae6000 CR4: 00000000003526f0 [ 269.945197][ C0] Call Trace: [ 269.945204][ C0] [ 269.945210][ C0] default_idle+0x13/0x20 [ 269.945225][ C0] default_idle_call+0x74/0xb0 [ 269.945240][ C0] do_idle+0x1e8/0x510 [ 269.945257][ C0] ? __pfx_do_idle+0x10/0x10 [ 269.945276][ C0] cpu_startup_entry+0x44/0x60 [ 269.945290][ C0] rest_init+0x2de/0x300 [ 269.945306][ C0] start_kernel+0x3a9/0x410 [ 269.945325][ C0] x86_64_start_reservations+0x24/0x30 [ 269.945352][ C0] x86_64_start_kernel+0x143/0x1c0 [ 269.945372][ C0] common_startup_64+0x13e/0x147 [ 269.945396][ C0] [ 270.129990][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.137275][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 270.144247][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 270.156064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.166141][ T31] Call Trace: [ 270.169439][ T31] [ 270.172373][ T31] dump_stack_lvl+0x99/0x250 [ 270.177060][ T31] ? __asan_memcpy+0x40/0x70 [ 270.181658][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.187210][ T31] ? __pfx__printk+0x10/0x10 [ 270.191835][ T31] vpanic+0x281/0x750 [ 270.195837][ T31] ? __pfx_vpanic+0x10/0x10 [ 270.200341][ T31] ? rcu_is_watching+0x15/0xb0 [ 270.205108][ T31] ? preempt_schedule+0xae/0xc0 [ 270.209991][ T31] ? preempt_schedule_common+0x83/0xd0 [ 270.215463][ T31] panic+0xb9/0xc0 [ 270.219187][ T31] ? __pfx_panic+0x10/0x10 [ 270.223780][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 270.229167][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 270.235329][ T31] watchdog+0xfd2/0xfe0 [ 270.239494][ T31] ? watchdog+0x1de/0xfe0 [ 270.243852][ T31] kthread+0x70e/0x8a0 [ 270.248041][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.252730][ T31] ? __pfx_kthread+0x10/0x10 [ 270.257421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.262731][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.268158][ T31] ? __pfx_kthread+0x10/0x10 [ 270.272762][ T31] ret_from_fork+0x3f9/0x770 [ 270.277367][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 270.282484][ T31] ? __switch_to_asm+0x39/0x70 [ 270.287694][ T31] ? __switch_to_asm+0x33/0x70 [ 270.292637][ T31] ? __pfx_kthread+0x10/0x10 [ 270.297239][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.302023][ T31] [ 270.305739][ T31] Kernel Offset: disabled [ 270.310065][ T31] Rebooting in 86400 seconds..