last executing test programs: 3.460440072s ago: executing program 0 (id=2090): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="3e3ff971e781d7c1937fe55ef718275803fb334a97ee45c6"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 3.012267701s ago: executing program 0 (id=2096): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x824400, 0x0) 2.926337366s ago: executing program 2 (id=2097): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x400c1d1}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) 2.925092146s ago: executing program 3 (id=2098): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r2, &(0x7f00000000c0)="c56a4245bd85e578e7026e5387ba581a1f98c2a3ba8c2fdb40aaf60d3d83177bf4bcd2f6279c9b4d61977e8cec6059aba96fd03bb6625ee5e329bc5369dbc909242a3033ada78c59dca8c743fa0b5cbe6906843c627a831c68e2625860c08bc599db6a6e394ea4b399ff3b7885c536d1eb1a533260e993cec07dc65cba552894ae7bdfe20964140ab18289d8c04f3000bc6be26b6d58ed863a2393f5d370952ae858e1a23a4f3c780962976fc7679a91a20fb606b7d40cb024bf2af7ca859ccf4aff6816e88ff583f86b031f404bcb8e4aece64cb3b2dc6cfd0ddff56498341e2a290681daa010bcc567028bd14363b54f38d24b7db69bca3b", 0xf9, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.881106545s ago: executing program 0 (id=2099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x72) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) socket$kcm(0x2, 0x3, 0x84) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c8", 0xa7}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5e", 0x89}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82", 0x9a}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c0", 0xa4}], 0x4}}, {}], 0x2, 0xc0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x4, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x9, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa39, 0xa5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xd9, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x40, 0x1, {0x7, 0x25, 0x1, 0x2, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x2, 0xff, "7888d5da37f8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0xb, 0x3, {0x7, 0x25, 0x1, 0x1, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x0, 0x1, 0x10}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x4, 0x400, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x3, 0x5, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x0, 0x8, 0xffff, 0x4}]}}) syz_usb_control_io(r4, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="400d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2.814537416s ago: executing program 3 (id=2101): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 2.658938265s ago: executing program 2 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x5, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}) getsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clock_adjtime(0x6, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x4, 0x9d, 0x57, 0x9, 0x3, 0x5, 0xffffffffffffffff, 0x3, 0xbde5, 0x5, 0x81, 0x11, 0x2, 0xc, 0x9, 0xf, 0x6, 0x8, 0x70125ccc, 0x9, 0x7, 0x4, 0x80000000}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.641051338s ago: executing program 3 (id=2104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x402000, 0x2a) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x8, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xdc}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '/dev/kvm\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x76e5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000300)) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) recvmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) close(0x5) socket$nl_generic(0x10, 0x3, 0x10) 2.465190377s ago: executing program 2 (id=2105): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) move_pages(0x0, 0x5, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffa000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000001440)) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in6=@private0}}, {{@in6=@mcast2}}}, &(0x7f0000000240)=0xe8) (async, rerun: 32) r2 = syz_usb_connect(0x5, 0x6, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd0, 0xa2, 0x35, 0x20, 0x13b1, 0x23, 0x3bbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) (rerun: 32) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="0000040000009f212277"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r3, &(0x7f0000000080), &(0x7f0000000280)=0xc) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2.418330444s ago: executing program 2 (id=2106): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000000000060000090f000700756e636f6e66696e65640000"], 0x24}, 0x2, 0x34005, 0x0, 0x400c000}, 0x0) 2.410001528s ago: executing program 1 (id=2107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 2.35145788s ago: executing program 1 (id=2108): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) r2 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000080)=[{{}, 0x14, 0x8}, {{r4, r5/1000+10000}, 0x16, 0x6, 0xffffffff}], 0x30) 2.2891995s ago: executing program 2 (id=2109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="78020000", @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000010) 2.262356572s ago: executing program 1 (id=2110): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000002200)=0x40) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mq_open(&(0x7f0000000000)='\':\x00', 0x40, 0x3, &(0x7f0000000040)={0x10001, 0x4, 0x80000001, 0x3}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r5 = fcntl$getown(r0, 0x9) r6 = epoll_create(0xfffffff9) r7 = socket$kcm(0x29, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000040)={r0, r7, 0x9}) getrusage(0x1, &(0x7f0000000880)) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r9 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="50c21900", @ANYRES16=r3, @ANYBLOB="040026bd7000fddbdf250700000014000300fe8000000000000000000000000000aa2700070073797374656d5f753a6f626a6563745f723a6c645f736f5f63616368655f743a73300000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}}, 0x108) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r10, &(0x7f00000021c0)={0x2020}, 0x2040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6601002bbd700000000000060000090f000700756e636f6e66696e656400"], 0x24}, 0x2, 0x34005, 0x0, 0x8000}, 0x0) 2.205242091s ago: executing program 2 (id=2111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x64d1) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="072c965a14caaa7ce9870a2eadb0f047cf36659be612c807e8c532135e8e0ab96a54f89d9a860611b74c7512e88f043f8e6962103d444f7c0dd9792d968784156a25fff6a96f766bbb2600f90f0d23aead0c8ab6899be27ddc655e0915a6fb9cda68c1326589bed2e24d709e26338f7157eddb8143e52b3bb328cd6114e02af1fc7f", 0x82) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x20) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3ff, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000300)={r8}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33424752, 0x0, @stepwise}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r9, 0x5452, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r10, r3, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000380)={0x3, r8, 0x1, 0x100, 0x3, 0x1, 0x40}) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002b000b00100000000c00018006"], 0x20}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 2.097081304s ago: executing program 1 (id=2112): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0xfffffffd) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000600)=""/179, 0xb3}], 0x1, &(0x7f00000004c0)=""/52, 0x34}, 0xc}], 0x1, 0x40000000, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg$can_raw(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/17, 0x11}], 0x1}, 0x40) (async) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x115040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000700000400000861a2bd22e3137a62ee70d1bc7f755e194e21b2ed544d0598402cfed6b10e6a1a40a3a10f6645054812e2ab2a432d74573991d38226ed03bd8d7aa268f07322d78ef8ce80436ddf123619b9e7b2b980e85baf66cf9d7bc7328caa89bf99c9cae6300341dc16385216b4df84b9e3a4fbcc78edbff61ddba760db63c47fe"]) (async, rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000004000000200000000000000006000000000000000100000001000000de070000000000000800000001010000"]) (rerun: 32) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793a06c79d6"], 0x138) (async) write$UHID_DESTROY(r12, &(0x7f0000000340), 0x4) (async, rerun: 64) r13 = eventfd(0x2) (rerun: 64) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r13, 0x1}) 1.828294709s ago: executing program 1 (id=2113): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x7]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x428, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x3f8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfdc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4226}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb23}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x1d4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x481}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf43}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f695bae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f6f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x552}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8bc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2400}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0xa0, 0xc, "ea071d734f3e9b17c5efcca7e22a47dd43407f031cb0bee781eaf70670add744479616c231cc7f9d5117cf84bb311643c9a2eef1bbc34273f9a3cd450a789021a93042efe1d364522b9fb84486b85c789fc23db78726552d0e0cf7a7d2dcbaa54bec794ab3906504db7435c2fef9d236d9df8d044a7d89141f180e43997c2b9c372a9b31b4032ce34dd411f10da8a512a5d76ee67a64f8b7148fa137"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd00}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x688}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd8b}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x12c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x103, 0x8, "86a0b811a1075fdd5b67bb0ca40eb27c4f32f8a5956c51e6290da32c0faaea8d2d6815fe229cd30099702a5c98cf1a4c84c83ccdef184ab0e4ba6de6fdb55763f6887099b8bdf472a2b4a608c1c264dc45c15c97d7f8f9476459e65c6099d502bf89db5cea548ecb357f7786b3d96c8728715dc598980e45945309f6eb559a26002955d9ea999e1fbf1ddbb377c2a4bf043d922d048a75638c28ad9fe229395b2d324e9be04ead2072aa67c1a797d8092b9ea1a4367e1a60aabf2d505b50f774239781cc15afa054228f54d0586e5d193e94938f1579a2d61952e7b2d51a15f74df0ec070535eb03918c7b66ed277a608df92b7051217b7ece3fe1757a219a"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x302, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x104, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2ab4}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xad, 0x7, 0x1, 0x0, "182cf026f2170d13bcada51d4343d01ac1fc73afbfba49f46fd924ef49472d4a02ab3bd6669c10b60797b8d5ab0f0a4f230c97e4706589ca01249b674f7495518cdbaf608fe2d37135db99e535800ae74c1e8d7cbd33838e090f803444f9f54bc93b73dabca54966c4cd8cfadc95d0b51e7643078fdda2ac80a763e43053ea319b203387a78ab9e00313c2ac414296cf68970753dfda99a1190c9a194d82c5d38cd35a8d33cc479c27"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x958}, 0x1, 0x0, 0x0, 0x8090}, 0x20000005) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)={0x28, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40080) 1.76634418s ago: executing program 1 (id=2114): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80a00, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr\x00', 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904", @ANYRES8=0x0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000500)={0x0, 0x21, 0xca, {0xca, 0x2, "d945405885be273d2ac02a821e20da7694dbe55a7ef1c788986b5baed85d708d27700de061d6a82e5726a8c6ddc7dc454ffe5ebb78024c13ac4a0c1430d725cb142986a103b1d20154a7e1f5a8b435f96af2bfec312cef35ed18306d4fa48a089856aa913fc69df38e3c1b9dab1a7b7c44d8b6836d88a83676e0df05ab489db59e00a350f09700ba1540617da017f80858abadf03ae383ea713c94a7edda407b512559080b342c76e47c1a0966073af12e398eb936109f050eae00ab827d1fc1100b114d12641eee"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000640)={0x40, 0x12, 0xdd, "d64e942e011a0802ca9796579206b5dc1b48ad209b9cc0a401719331069df5164efbe08d690753e68fbd10b1fbff64c2cb81f414e98e10b56ee8fa360bde7f6320dc45fd516667b1b29c8c04500b93a28c03ae69416e105f09b5d4a7754b27b2550e534f7d16fd0b512619f3ee912ce32070e3572c0a18494f05c6e2618edee48362722b802fc584bd11a0cd6c6b39db56403f1a97dd7fd9f6921150a214072ff8c24ea187db10c6e7ccea25771c241b7faf4b1917c8814e0550679c3eb2db8ea92af44d7859e522fc3aac7de0b33bf3fcb80b43f70c16b7be50ddb574"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x100, 0xe, 0x9, 0xf0fe, 0x4, 0x4d9b, 0xfffe, 0x80, 0x101, 0x400, 0x8000, 0xd7f2}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x33ae000}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.63640964s ago: executing program 3 (id=2115): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x44) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r3, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x3204000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [], 0x6b}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d7, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0xd}, 0x8, {0x2, 0x4e24, @broadcast}, 'bond_slave_1\x00'}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r14) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r15, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={r12, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000140)=r12, 0x4) keyctl$setperm(0x5, r8, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xaadc, 0xffffffffffffffff, 0x2}) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r6, @ANYBLOB="1400508005000200050000000500090002000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) 793.761378ms ago: executing program 3 (id=2116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 689.463559ms ago: executing program 3 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000001c40)=""/4082, 0xff2}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4112, 0x1010}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x4, 0x12002, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x125, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "8659"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xf6e5, 0x81, 0x9}, [@mdlm_detail={0xcd, 0x24, 0x13, 0x2, "8b028ce79a0080b6d1b6ca44473caf9aef934aec512a4e1d1e50d4be3c1f72bcd8051aa1a185423e5b27bea2086c0035d873178328073e7e024cdfcabb05ed1f17073434cd054fd098aaa84d41ba66b0c52b04b607ceb97222de9df5163cc7e46b21064b42c1c72eecbc9a6a70b4b80a4fe801236671a9c370cc9cf5173050d24e32a9831ed1450a2f66b2dcff178a2ddf894023169f46d026b99f2de14094e6dab85e276e75a2361d2cf118c1e56df02f9fe182d687cedca945f48f620cfe927006b9c95129efaaad"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf7, 0x7f, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xd, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x52, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xfd, 0x1, 0x24, 0xff, 0x6}, 0xa2, &(0x7f00000009c0)={0x5, 0xf, 0xa2, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0xd, 0x88, 0x9, 0x5}, @generic={0x6b, 0x10, 0x1, "03f4587f5456bf5729520213b36532d63c5d91707d01734010994e783e70c197594ec7c38f11f10f79bb5b81e7ec2231a265c363b817ac59151912285f5e9324ba57c8f0702f2793bb98a54efa22932d97054e099fe888f5029c4f71daa0243fa98f81c9ebf949d1"}, @ssp_cap={0xc, 0x10, 0xa, 0xdb, 0x0, 0x9, 0xf0f, 0x4}, @ptm_cap={0x3}, @generic={0x4, 0x10, 0x1, "e0"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "41581bf7360ba28a6db0a256e3e8fe5f"}]}, 0x1, [{0xd6, &(0x7f0000000a80)=@string={0xd6, 0x3, "8cdebd7b7be16ed2b060847c68ec8bc6f9d8bc6ed6cf0bbed098076859e16f4a3053434753bbc8add4b1351542f7965602669b1333e01fa5ca23a6a5eedb2bab5ab6dadad272dc60ee0eddc4ef792b9de4ecc940a8e9a5477152e872a15249f836978a1ea2f8824ef57636e1792d978e263ada1339f84df8bda861b1a8271fc17dcb98ede5b2a9e6b2bcd1aca04e8a6a1df4f52736f64c2eba83ebf038d0f57c706f10eb2b4abc31880b0b4510d8f8b3df6aca0e5fba7b5c483393e99552d8e99be5009e002f4c98864044e1a51782da8b138a2b"}}]}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x28) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 141.052298ms ago: executing program 0 (id=2118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0xfffffffe, 0x6, 0xfffffffe, 0x1ff, 0x0, "4ae13ae17df4e98c69ba36c4095c811abad88f", 0xf95, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)="eb43"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3a) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x4102000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x2c, r6, 0x411, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 82.954337ms ago: executing program 0 (id=2119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x541b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r6, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x30004000) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x3c, r1, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) 0s ago: executing program 0 (id=2120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r5, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MASK={0xe, 0x2c, 0xd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x0, 0x31, 0xeac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x1, 0xf871, 0x4, 0x800, {{0x15, 0x4, 0x3, 0x4, 0x54, 0x64, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xb1, 0x1, 0x7, [{@remote, 0x3}, {@empty, 0x5}, {@broadcast, 0x40}, {@empty, 0xfffffffa}]}, @rr={0x7, 0x17, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xf, 0x5, 0x8, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x700, 0xe, 0xffffff00}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @broadcast}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r18, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r19, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0xcc851) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r17, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r16, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r17}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2b, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): PID: 10563 Comm: syz.3.1761 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 274.943553][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.943568][T10563] Call Trace: [ 274.943577][T10563] [ 274.943588][T10563] dump_stack_lvl+0x189/0x250 [ 274.943618][T10563] ? __pfx____ratelimit+0x10/0x10 [ 274.943644][T10563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.943669][T10563] ? __pfx__printk+0x10/0x10 [ 274.943695][T10563] ? __might_fault+0xb0/0x130 [ 274.943739][T10563] should_fail_ex+0x414/0x560 [ 274.943781][T10563] _copy_from_iter+0x1db/0x16f0 [ 274.943828][T10563] ? __pfx__copy_from_iter+0x10/0x10 [ 274.943858][T10563] ? sock_alloc_send_pskb+0x875/0x990 [ 274.943899][T10563] ? __pfx__copy_from_iter+0x10/0x10 [ 274.943945][T10563] ? page_copy_sane+0x16a/0x280 [ 274.943979][T10563] copy_page_from_iter+0xdd/0x170 [ 274.944017][T10563] skb_copy_datagram_from_iter+0x306/0x720 [ 274.944081][T10563] tun_get_user+0x15c3/0x3ce0 [ 274.944125][T10563] ? aa_file_perm+0x13e/0x11b0 [ 274.944167][T10563] ? aa_file_perm+0x13e/0x11b0 [ 274.944195][T10563] ? aa_file_perm+0x3ed/0x11b0 [ 274.944226][T10563] ? __pfx_tun_get_user+0x10/0x10 [ 274.944264][T10563] ? __lock_acquire+0xab9/0xd20 [ 274.944301][T10563] ? ref_tracker_alloc+0x318/0x460 [ 274.944320][T10563] ? __lock_acquire+0xab9/0xd20 [ 274.944352][T10563] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 274.944381][T10563] ? tun_get+0x1c/0x2f0 [ 274.944416][T10563] ? tun_get+0x1c/0x2f0 [ 274.944444][T10563] ? tun_get+0x1c/0x2f0 [ 274.944476][T10563] tun_chr_write_iter+0x113/0x200 [ 274.944509][T10563] vfs_write+0x548/0xa90 [ 274.944537][T10563] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 274.944568][T10563] ? __pfx_vfs_write+0x10/0x10 [ 274.944602][T10563] ? __fget_files+0x2a/0x420 [ 274.944640][T10563] ksys_write+0x145/0x250 [ 274.944667][T10563] ? __pfx_ksys_write+0x10/0x10 [ 274.944688][T10563] ? rcu_is_watching+0x15/0xb0 [ 274.944716][T10563] ? do_syscall_64+0xbe/0x3b0 [ 274.944751][T10563] do_syscall_64+0xfa/0x3b0 [ 274.944774][T10563] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.944797][T10563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.944818][T10563] ? clear_bhb_loop+0x60/0xb0 [ 274.944845][T10563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.944866][T10563] RIP: 0033:0x7f06a9b8e929 [ 274.944887][T10563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.944908][T10563] RSP: 002b:00007f06aaaa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.944932][T10563] RAX: ffffffffffffffda RBX: 00007f06a9db5fa0 RCX: 00007f06a9b8e929 [ 274.944949][T10563] RDX: 000000000000ffbf RSI: 00002000000000c0 RDI: 0000000000000004 [ 274.944963][T10563] RBP: 00007f06aaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 274.944978][T10563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.944991][T10563] R13: 0000000000000000 R14: 00007f06a9db5fa0 R15: 00007fffc35c4478 [ 274.945023][T10563] [ 275.022127][T10570] exFAT-fs (rnullb0): invalid boot record signature [ 275.256611][T10570] exFAT-fs (rnullb0): failed to read boot sector [ 275.263509][T10570] exFAT-fs (rnullb0): failed to recognize exfat type [ 275.454024][T10577] /dev/rnullb0: Can't open blockdev [ 275.907452][ T980] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 276.087460][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 276.106232][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.149711][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.162811][ T980] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 276.193876][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.225301][ T980] usb 4-1: config 0 descriptor?? [ 276.287642][ T5839] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 276.461186][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 276.482008][ T5839] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 276.501616][ T5839] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.513921][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.533789][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.545202][ T5839] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.560872][ T5839] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.571877][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.659699][ T980] hid_parser_main: 1 callbacks suppressed [ 276.659724][ T980] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 276.789145][ T5839] usb 1-1: usb_control_msg returned -32 [ 276.802227][ T5839] usbtmc 1-1:16.0: can't read capabilities [ 276.817632][ T5922] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 276.873983][ T980] ft260 0003:0403:6030.0009: chip code: 6424 0400 [ 276.981136][T10621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1781'. [ 277.000358][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 277.012088][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 277.024236][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.034546][ T5922] usb 2-1: Product: syz [ 277.043412][ T5922] usb 2-1: Manufacturer: syz [ 277.049892][ T5922] usb 2-1: SerialNumber: syz [ 277.062474][ T5922] usb 2-1: config 0 descriptor?? [ 277.085797][ T980] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 277.149059][T10597] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 277.160190][T10592] loop3: detected capacity change from 0 to 1 [ 277.173613][ T6258] Dev loop3: unable to read RDB block 1 [ 277.179536][ T6258] loop3: AHDI p1 [ 277.183329][ T6258] loop3: partition table partially beyond EOD, truncated [ 277.206855][T10592] Dev loop3: unable to read RDB block 1 [ 277.212632][T10592] loop3: AHDI p1 [ 277.216427][T10592] loop3: partition table partially beyond EOD, truncated [ 277.239803][ T5889] usb 1-1: USB disconnect, device number 37 [ 277.276131][ T5922] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 277.306800][ T980] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 277.529756][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 277.547764][ T5889] usb 4-1: USB disconnect, device number 36 [ 277.841008][ T5839] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 277.952484][T10641] syzkaller1: entered promiscuous mode [ 277.958705][T10641] syzkaller1: entered allmulticast mode [ 277.987365][ T5839] usb 3-1: device descriptor read/64, error -71 [ 278.155585][T10645] FAULT_INJECTION: forcing a failure. [ 278.155585][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 278.168522][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.3.1792 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 278.168553][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.168568][T10645] Call Trace: [ 278.168577][T10645] [ 278.168586][T10645] dump_stack_lvl+0x189/0x250 [ 278.168616][T10645] ? __pfx____ratelimit+0x10/0x10 [ 278.168640][T10645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.168666][T10645] ? __pfx__printk+0x10/0x10 [ 278.168698][T10645] ? __pfx___might_resched+0x10/0x10 [ 278.168727][T10645] should_fail_ex+0x414/0x560 [ 278.168767][T10645] should_failslab+0xa8/0x100 [ 278.168794][T10645] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 278.168819][T10645] ? __alloc_skb+0x112/0x2d0 [ 278.168852][T10645] __alloc_skb+0x112/0x2d0 [ 278.168884][T10645] netlink_sendmsg+0x5c6/0xb30 [ 278.168922][T10645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.168953][T10645] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.168983][T10645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.169014][T10645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.169043][T10645] __sock_sendmsg+0x219/0x270 [ 278.169069][T10645] ____sys_sendmsg+0x505/0x830 [ 278.169107][T10645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.169149][T10645] ? import_iovec+0x74/0xa0 [ 278.169175][T10645] ___sys_sendmsg+0x21f/0x2a0 [ 278.169209][T10645] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.169280][T10645] ? __fget_files+0x2a/0x420 [ 278.169309][T10645] ? __fget_files+0x3a0/0x420 [ 278.169350][T10645] __x64_sys_sendmsg+0x19b/0x260 [ 278.169394][T10645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.169438][T10645] ? __pfx_ksys_write+0x10/0x10 [ 278.169460][T10645] ? rcu_is_watching+0x15/0xb0 [ 278.169490][T10645] ? do_syscall_64+0xbe/0x3b0 [ 278.169520][T10645] do_syscall_64+0xfa/0x3b0 [ 278.169544][T10645] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.169568][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.169591][T10645] ? clear_bhb_loop+0x60/0xb0 [ 278.169619][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.169640][T10645] RIP: 0033:0x7f06a9b8e929 [ 278.169661][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.169681][T10645] RSP: 002b:00007f06aaaa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.169704][T10645] RAX: ffffffffffffffda RBX: 00007f06a9db5fa0 RCX: 00007f06a9b8e929 [ 278.169721][T10645] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 278.169736][T10645] RBP: 00007f06aaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 278.169751][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.169765][T10645] R13: 0000000000000000 R14: 00007f06a9db5fa0 R15: 00007fffc35c4478 [ 278.169800][T10645] [ 278.518196][ T5839] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 278.596785][T10653] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 278.647432][ T5839] usb 3-1: device descriptor read/64, error -71 [ 278.757749][ T5839] usb usb3-port1: attempt power cycle [ 278.929046][T10659] bond0: (slave rose0): Enslaving as an active interface with an up link [ 278.947761][ T980] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 279.107406][ T5839] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 279.126123][ T980] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.142001][ T980] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.167990][ T5839] usb 3-1: device descriptor read/8, error -71 [ 279.168028][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.192639][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 279.212376][ T5922] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 279.231880][ T5922] usb 2-1: USB disconnect, device number 40 [ 279.249501][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 279.287511][ T980] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.296796][ T980] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.309396][ T980] usb 1-1: Product: syz [ 279.316189][ T980] usb 1-1: Manufacturer: syz [ 279.355198][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 279.363055][ T980] cdc_wdm 1-1:1.0: skipping garbage [ 279.375721][ T980] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 279.381979][ T980] cdc_wdm 1-1:1.0: Unknown control protocol [ 279.419993][ T5839] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 279.468376][ T5839] usb 3-1: device descriptor read/8, error -71 [ 279.576924][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 279.583810][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 279.590696][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 279.597348][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 279.604613][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 279.607953][ T5839] usb usb3-port1: unable to enumerate USB device [ 279.611258][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 279.624167][ T5922] usb 1-1: USB disconnect, device number 38 [ 279.630239][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 279.630268][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 279.630289][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 279.892857][T10677] sctp: [Deprecated]: syz.1.1797 (pid 10677) Use of int in max_burst socket option. [ 279.892857][T10677] Use struct sctp_assoc_value instead [ 280.299789][T10690] syzkaller1: entered promiscuous mode [ 280.305331][T10690] syzkaller1: entered allmulticast mode [ 280.406672][T10696] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 280.423117][T10696] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 280.431928][T10696] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 280.444732][T10696] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 280.453955][T10696] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 281.637907][T10744] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 281.690439][T10744] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 281.763733][T10749] random: crng reseeded on system resumption [ 282.395452][T10772] netlink: 'syz.2.1826': attribute type 29 has an invalid length. [ 282.457427][T10772] netlink: 'syz.2.1826': attribute type 29 has an invalid length. [ 282.624994][T10784] syzkaller1: entered promiscuous mode [ 282.661218][T10784] syzkaller1: entered allmulticast mode [ 282.673399][T10784] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1830'. [ 282.877591][ T5839] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 283.059841][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.088590][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.118524][ T5839] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 283.150127][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.185225][ T5839] usb 1-1: config 0 descriptor?? [ 283.618453][ T5839] usbhid 1-1:0.0: can't add hid device: -71 [ 283.624617][ T5839] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 283.681925][ T5839] usb 1-1: USB disconnect, device number 39 [ 283.886367][T10833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1842'. [ 283.913114][T10833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1842'. [ 284.088162][T10838] FAULT_INJECTION: forcing a failure. [ 284.088162][T10838] name failslab, interval 1, probability 0, space 0, times 0 [ 284.132728][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.2.1843 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 284.132763][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.132779][T10838] Call Trace: [ 284.132789][T10838] [ 284.132799][T10838] dump_stack_lvl+0x189/0x250 [ 284.132831][T10838] ? __pfx____ratelimit+0x10/0x10 [ 284.132857][T10838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.132883][T10838] ? __pfx__printk+0x10/0x10 [ 284.132905][T10838] ? __lock_acquire+0xab9/0xd20 [ 284.132954][T10838] should_fail_ex+0x414/0x560 [ 284.132996][T10838] should_failslab+0xa8/0x100 [ 284.133024][T10838] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 284.133049][T10838] ? __alloc_skb+0x112/0x2d0 [ 284.133082][T10838] __alloc_skb+0x112/0x2d0 [ 284.133122][T10838] _sctp_make_chunk+0x5e/0x430 [ 284.133155][T10838] sctp_make_init+0x58b/0xd30 [ 284.133177][T10838] ? __lock_acquire+0xab9/0xd20 [ 284.133223][T10838] ? __pfx_sctp_make_init+0x10/0x10 [ 284.133271][T10838] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 284.133309][T10838] sctp_do_sm+0x1e7/0x5a20 [ 284.133328][T10838] ? __pfx_sctp_pname+0x10/0x10 [ 284.133371][T10838] ? sctp_hash_transport+0x17d/0x19c0 [ 284.133406][T10838] ? __pfx_sctp_ulpevent_notify_peer_addr_change+0x10/0x10 [ 284.133440][T10838] ? __pfx_sctp_do_sm+0x10/0x10 [ 284.133462][T10838] ? idr_get_free+0x8dc/0xa70 [ 284.133532][T10838] ? sctp_assoc_set_id+0x1b4/0x360 [ 284.133568][T10838] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 284.133605][T10838] __sctp_connect+0x947/0xd50 [ 284.133649][T10838] ? __pfx___sctp_connect+0x10/0x10 [ 284.133683][T10838] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 284.133716][T10838] ? security_sctp_bind_connect+0x7e/0x2e0 [ 284.133756][T10838] sctp_getsockopt_connectx3+0x2c4/0x440 [ 284.133786][T10838] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 284.133812][T10838] ? __local_bh_enable_ip+0x12d/0x1c0 [ 284.133835][T10838] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 284.133868][T10838] sctp_getsockopt+0x98a/0xb60 [ 284.133901][T10838] do_sock_getsockopt+0x35d/0x650 [ 284.133935][T10838] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 284.133965][T10838] ? do_syscall_64+0x80/0x3b0 [ 284.133991][T10838] ? __fget_files+0x3a0/0x420 [ 284.134019][T10838] ? __fget_files+0x2a/0x420 [ 284.134057][T10838] __x64_sys_getsockopt+0x1a5/0x250 [ 284.134116][T10838] ? do_syscall_64+0x80/0x3b0 [ 284.134150][T10838] ? do_syscall_64+0x80/0x3b0 [ 284.134180][T10838] do_syscall_64+0xfa/0x3b0 [ 284.134205][T10838] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.134228][T10838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.134251][T10838] ? clear_bhb_loop+0x60/0xb0 [ 284.134279][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.134307][T10838] RIP: 0033:0x7f89ce58e929 [ 284.134327][T10838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.134347][T10838] RSP: 002b:00007f89cc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 284.134377][T10838] RAX: ffffffffffffffda RBX: 00007f89ce7b5fa0 RCX: 00007f89ce58e929 [ 284.134395][T10838] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 284.134410][T10838] RBP: 00007f89cc3f6090 R08: 00002000000002c0 R09: 0000000000000000 [ 284.134426][T10838] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 284.134441][T10838] R13: 0000000000000000 R14: 00007f89ce7b5fa0 R15: 00007ffdd87de678 [ 284.134482][T10838] [ 284.651184][T10843] syzkaller1: entered promiscuous mode [ 284.656758][T10843] syzkaller1: entered allmulticast mode [ 284.666202][T10847] netlink: 'syz.3.1847': attribute type 21 has an invalid length. [ 284.678135][T10847] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1847'. [ 284.729380][T10847] ./file0: Can't lookup blockdev [ 284.800027][T10853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.824663][T10852] FAULT_INJECTION: forcing a failure. [ 284.824663][T10852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.843261][T10852] CPU: 1 UID: 0 PID: 10852 Comm: syz.2.1849 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 284.843294][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.843309][T10852] Call Trace: [ 284.843318][T10852] [ 284.843328][T10852] dump_stack_lvl+0x189/0x250 [ 284.843360][T10852] ? __pfx____ratelimit+0x10/0x10 [ 284.843384][T10852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.843408][T10852] ? __pfx__printk+0x10/0x10 [ 284.843445][T10852] should_fail_ex+0x414/0x560 [ 284.843483][T10852] _copy_to_user+0x31/0xb0 [ 284.843508][T10852] simple_read_from_buffer+0xe1/0x170 [ 284.843541][T10852] proc_fail_nth_read+0x1df/0x250 [ 284.843581][T10852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.843615][T10852] ? rw_verify_area+0x258/0x650 [ 284.843637][T10852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.843669][T10852] vfs_read+0x200/0x980 [ 284.843699][T10852] ? __pfx___mutex_lock+0x10/0x10 [ 284.843724][T10852] ? __pfx_vfs_read+0x10/0x10 [ 284.843751][T10852] ? __fget_files+0x2a/0x420 [ 284.843784][T10852] ? __fget_files+0x3a0/0x420 [ 284.843821][T10852] ? __fget_files+0x2a/0x420 [ 284.843859][T10852] ksys_read+0x145/0x250 [ 284.843886][T10852] ? __pfx_ksys_read+0x10/0x10 [ 284.843907][T10852] ? rcu_is_watching+0x15/0xb0 [ 284.843934][T10852] ? do_syscall_64+0xbe/0x3b0 [ 284.843964][T10852] do_syscall_64+0xfa/0x3b0 [ 284.843986][T10852] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.844008][T10852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.844030][T10852] ? clear_bhb_loop+0x60/0xb0 [ 284.844057][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.844080][T10852] RIP: 0033:0x7f89ce58d33c [ 284.844100][T10852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.844120][T10852] RSP: 002b:00007f89cc3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.844144][T10852] RAX: ffffffffffffffda RBX: 00007f89ce7b5fa0 RCX: 00007f89ce58d33c [ 284.844162][T10852] RDX: 000000000000000f RSI: 00007f89cc3f60a0 RDI: 0000000000000003 [ 284.844177][T10852] RBP: 00007f89cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 284.844192][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.844206][T10852] R13: 0000000000000000 R14: 00007f89ce7b5fa0 R15: 00007ffdd87de678 [ 284.844241][T10852] [ 285.194027][T10859] befs: (nbd2): No write support. Marking filesystem read-only [ 285.248920][T10859] syz.2.1852: attempt to access beyond end of device [ 285.248920][T10859] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 285.275601][T10862] could not open pipe file descriptor [ 285.282992][T10859] befs: (nbd2): unable to read superblock [ 285.508147][T10875] netlink: 'syz.3.1856': attribute type 3 has an invalid length. [ 285.522547][T10875] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 285.535238][T10875] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1856'. [ 285.857532][ T980] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 286.017385][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 286.025901][ T980] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 286.036041][ T980] usb 4-1: config 0 has no interface number 0 [ 286.051250][ T980] usb 4-1: config 0 interface 194 has no altsetting 0 [ 286.072892][ T980] usb 4-1: New USB device found, idVendor=040a, idProduct=0300, bcdDevice=27.b6 [ 286.083583][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.096065][ T980] usb 4-1: Product: syz [ 286.120140][ T980] usb 4-1: Manufacturer: syz [ 286.125038][ T980] usb 4-1: SerialNumber: syz [ 286.141333][ T980] usb 4-1: config 0 descriptor?? [ 286.155671][ T980] gspca_main: spca500-2.14.0 probing 040a:0300 [ 286.896224][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 286.896248][ T30] audit: type=1326 audit(1750885229.726:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10904 comm="syz.1.1864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a9178e929 code=0x0 [ 287.161785][T10906] syzkaller1: entered promiscuous mode [ 287.173244][T10906] syzkaller1: entered allmulticast mode [ 288.511125][ T5889] usb 4-1: USB disconnect, device number 37 [ 288.664214][T10928] vxfs: WRONG superblock magic 00000000 at 1 [ 288.672598][T10928] vxfs: WRONG superblock magic 00000000 at 8 [ 288.700623][T10928] vxfs: can't find superblock. [ 288.704563][T10930] syzkaller1: entered promiscuous mode [ 288.711509][T10930] syzkaller1: entered allmulticast mode [ 288.720305][T10930] FAULT_INJECTION: forcing a failure. [ 288.720305][T10930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.734282][T10930] CPU: 0 UID: 0 PID: 10930 Comm: syz.1.1872 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 288.734313][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.734327][T10930] Call Trace: [ 288.734337][T10930] [ 288.734347][T10930] dump_stack_lvl+0x189/0x250 [ 288.734377][T10930] ? __pfx____ratelimit+0x10/0x10 [ 288.734402][T10930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.734427][T10930] ? __pfx__printk+0x10/0x10 [ 288.734453][T10930] ? __might_fault+0xb0/0x130 [ 288.734488][T10930] should_fail_ex+0x414/0x560 [ 288.734529][T10930] _copy_from_iter+0x1db/0x16f0 [ 288.734587][T10930] ? __pfx__copy_from_iter+0x10/0x10 [ 288.734616][T10930] ? sock_alloc_send_pskb+0x875/0x990 [ 288.734658][T10930] ? __pfx__copy_from_iter+0x10/0x10 [ 288.734693][T10930] ? page_copy_sane+0x16a/0x280 [ 288.734728][T10930] copy_page_from_iter+0xdd/0x170 [ 288.734770][T10930] skb_copy_datagram_from_iter+0x306/0x720 [ 288.734818][T10930] tun_get_user+0x15c3/0x3ce0 [ 288.734861][T10930] ? aa_file_perm+0x13e/0x11b0 [ 288.734892][T10930] ? aa_file_perm+0x13e/0x11b0 [ 288.734920][T10930] ? aa_file_perm+0x3ed/0x11b0 [ 288.734952][T10930] ? __pfx_tun_get_user+0x10/0x10 [ 288.734992][T10930] ? __lock_acquire+0xab9/0xd20 [ 288.735033][T10930] ? ref_tracker_alloc+0x318/0x460 [ 288.735055][T10930] ? __lock_acquire+0xab9/0xd20 [ 288.735090][T10930] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 288.735120][T10930] ? tun_get+0x1c/0x2f0 [ 288.735157][T10930] ? tun_get+0x1c/0x2f0 [ 288.735188][T10930] ? tun_get+0x1c/0x2f0 [ 288.735224][T10930] tun_chr_write_iter+0x113/0x200 [ 288.735259][T10930] vfs_write+0x548/0xa90 [ 288.735290][T10930] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 288.735323][T10930] ? __pfx_vfs_write+0x10/0x10 [ 288.735359][T10930] ? __fget_files+0x2a/0x420 [ 288.735398][T10930] ksys_write+0x145/0x250 [ 288.735425][T10930] ? __pfx_ksys_write+0x10/0x10 [ 288.735447][T10930] ? rcu_is_watching+0x15/0xb0 [ 288.735476][T10930] ? do_syscall_64+0xbe/0x3b0 [ 288.735505][T10930] do_syscall_64+0xfa/0x3b0 [ 288.735529][T10930] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.735560][T10930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.735583][T10930] ? clear_bhb_loop+0x60/0xb0 [ 288.735610][T10930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.735633][T10930] RIP: 0033:0x7f6a9178e929 [ 288.735652][T10930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.735673][T10930] RSP: 002b:00007f6a926b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.735697][T10930] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178e929 [ 288.735715][T10930] RDX: 000000000000ffbf RSI: 00002000000000c0 RDI: 0000000000000004 [ 288.735730][T10930] RBP: 00007f6a926b8090 R08: 0000000000000000 R09: 0000000000000000 [ 288.735744][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.735758][T10930] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 288.735791][T10930] [ 289.252799][T10927] vxfs: WRONG superblock magic 00000000 at 1 [ 289.286379][T10927] vxfs: WRONG superblock magic 00000000 at 8 [ 289.295356][T10927] vxfs: can't find superblock. [ 289.375695][T10922] loop6: detected capacity change from 0 to 4 [ 289.513961][T10934] overlay: ./file0 is not a directory [ 289.610842][ T5889] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 289.706095][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 289.803150][ T5889] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 289.818058][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.822775][T10950] tipc: Started in network mode [ 289.832290][T10950] tipc: Node identity 4, cluster identity 4711 [ 289.841867][ T5889] usb 4-1: config 0 descriptor?? [ 289.854569][T10950] tipc: Node number set to 4 [ 289.915237][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 290.039474][T10957] FAULT_INJECTION: forcing a failure. [ 290.039474][T10957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.053051][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.2.1884 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 290.053079][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.053090][T10957] Call Trace: [ 290.053097][T10957] [ 290.053104][T10957] dump_stack_lvl+0x189/0x250 [ 290.053127][T10957] ? __pfx____ratelimit+0x10/0x10 [ 290.053145][T10957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.053163][T10957] ? __pfx__printk+0x10/0x10 [ 290.053181][T10957] ? __might_fault+0xb0/0x130 [ 290.053205][T10957] should_fail_ex+0x414/0x560 [ 290.053234][T10957] _copy_from_user+0x2d/0xb0 [ 290.053250][T10957] ___sys_sendmsg+0x158/0x2a0 [ 290.053275][T10957] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.053323][T10957] ? __fget_files+0x2a/0x420 [ 290.053343][T10957] ? __fget_files+0x3a0/0x420 [ 290.053374][T10957] __x64_sys_sendmsg+0x19b/0x260 [ 290.053410][T10957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.053447][T10957] ? __pfx_ksys_write+0x10/0x10 [ 290.053463][T10957] ? rcu_is_watching+0x15/0xb0 [ 290.053484][T10957] ? do_syscall_64+0xbe/0x3b0 [ 290.053505][T10957] do_syscall_64+0xfa/0x3b0 [ 290.053521][T10957] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.053538][T10957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.053554][T10957] ? clear_bhb_loop+0x60/0xb0 [ 290.053573][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.053589][T10957] RIP: 0033:0x7f89ce58e929 [ 290.053610][T10957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.053625][T10957] RSP: 002b:00007f89cc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.053643][T10957] RAX: ffffffffffffffda RBX: 00007f89ce7b5fa0 RCX: 00007f89ce58e929 [ 290.053655][T10957] RDX: 0000000004000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 290.053666][T10957] RBP: 00007f89cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 290.053676][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.053686][T10957] R13: 0000000000000000 R14: 00007f89ce7b5fa0 R15: 00007ffdd87de678 [ 290.053717][T10957] [ 290.317556][ T5839] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 290.481664][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.493305][ T5839] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 290.503761][ T5839] usb 2-1: config 6 has no interface number 0 [ 290.511525][ T5839] usb 2-1: config 6 interface 200 has no altsetting 0 [ 290.523669][ T5839] usb 2-1: string descriptor 0 read error: -22 [ 290.530485][ T5839] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 290.539978][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.561634][ T5839] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 290.637634][ T121] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 290.768070][ T121] usb 3-1: device descriptor read/64, error -71 [ 290.790857][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.839231][ T5839] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 290.849476][ T5839] usb 2-1: media controller created [ 290.883495][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.940003][ T5839] dvb-usb: bulk message failed: -71 (6/0) [ 290.953118][ T5839] dvb-usb: bulk message failed: -71 (6/0) [ 290.961779][ T5839] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 290.974082][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 290.990500][T10966] NILFS (rnullb0): couldn't find nilfs on the device [ 291.002037][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 291.011241][ T5839] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 291.040777][ T5839] usb 2-1: USB disconnect, device number 41 [ 291.057525][ T121] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 291.113402][ T5839] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 291.197408][ T121] usb 3-1: device descriptor read/64, error -71 [ 291.307687][ T121] usb usb3-port1: attempt power cycle [ 291.462169][T10976] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20004 [ 291.529110][ T5836] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 291.647400][ T121] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 291.671724][ T121] usb 3-1: device descriptor read/8, error -71 [ 291.687488][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 291.695183][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.705565][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.716371][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.727586][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.741198][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.753098][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.917623][ T121] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 291.941503][ T121] usb 3-1: device descriptor read/8, error -71 [ 291.976936][ T5836] usb 1-1: GET_CAPABILITIES returned 0 [ 291.982726][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 292.060136][ T121] usb usb3-port1: unable to enumerate USB device [ 292.226289][ T5922] usb 1-1: USB disconnect, device number 40 [ 292.306475][ T5889] pegasus 4-1:0.0: setup Pegasus II specific registers [ 292.327525][ T980] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 292.487589][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 292.495357][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 292.509452][ T980] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.519152][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.528861][ T980] usb 2-1: Product: syz [ 292.533646][ T980] usb 2-1: Manufacturer: syz [ 292.539707][ T980] usb 2-1: SerialNumber: syz [ 292.544485][ T30] audit: type=1326 audit(1750885235.376:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.569887][ T30] audit: type=1326 audit(1750885235.376:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.578956][ T980] usb 2-1: config 0 descriptor?? [ 292.603253][ T30] audit: type=1326 audit(1750885235.376:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.606013][ T980] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.632341][ T30] audit: type=1326 audit(1750885235.376:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.635764][ T980] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 292.668769][ T30] audit: type=1326 audit(1750885235.376:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.691872][ T30] audit: type=1326 audit(1750885235.386:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.717371][ T30] audit: type=1326 audit(1750885235.386:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.741454][ T30] audit: type=1326 audit(1750885235.386:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.764725][ T30] audit: type=1326 audit(1750885235.386:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.765065][ T5889] pegasus 4-1:0.0: can't locate MII phy, using default [ 292.793664][ T30] audit: type=1326 audit(1750885235.386:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.3.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 292.844018][ T5889] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, d6:4e:94:2e:01:1a [ 292.856437][ T5889] usb 4-1: USB disconnect, device number 38 [ 292.880143][ T980] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 292.937586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.963592][ T980] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 292.981635][ T980] em28xx 2-1:0.0: board has no eeprom [ 293.047450][ T980] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 293.055448][ T980] em28xx 2-1:0.0: dvb set to bulk mode. [ 293.062307][ T5922] em28xx 2-1:0.0: Binding DVB extension [ 293.087934][ T980] usb 2-1: USB disconnect, device number 42 [ 293.115872][ T980] em28xx 2-1:0.0: Disconnecting em28xx [ 293.200146][ T5922] em28xx 2-1:0.0: Registering input extension [ 293.218363][ T980] em28xx 2-1:0.0: Closing input extension [ 293.251459][T11002] FAULT_INJECTION: forcing a failure. [ 293.251459][T11002] name failslab, interval 1, probability 0, space 0, times 0 [ 293.265759][T11002] CPU: 1 UID: 0 PID: 11002 Comm: syz.3.1901 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 293.265793][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.265809][T11002] Call Trace: [ 293.265818][T11002] [ 293.265828][T11002] dump_stack_lvl+0x189/0x250 [ 293.265859][T11002] ? __pfx____ratelimit+0x10/0x10 [ 293.265885][T11002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.265910][T11002] ? __pfx__printk+0x10/0x10 [ 293.265943][T11002] ? ref_tracker_alloc+0x318/0x460 [ 293.265970][T11002] should_fail_ex+0x414/0x560 [ 293.266011][T11002] should_failslab+0xa8/0x100 [ 293.266039][T11002] kmem_cache_alloc_noprof+0x73/0x3c0 [ 293.266069][T11002] ? skb_clone+0x212/0x3a0 [ 293.266108][T11002] skb_clone+0x212/0x3a0 [ 293.266141][T11002] __netlink_deliver_tap+0x404/0x850 [ 293.266180][T11002] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.266209][T11002] netlink_deliver_tap+0x19c/0x1b0 [ 293.266235][T11002] netlink_unicast+0x72f/0x8d0 [ 293.266269][T11002] netlink_sendmsg+0x805/0xb30 [ 293.266304][T11002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.266335][T11002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 293.266364][T11002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.266395][T11002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.266423][T11002] __sock_sendmsg+0x219/0x270 [ 293.266449][T11002] ____sys_sendmsg+0x505/0x830 [ 293.266487][T11002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.266525][T11002] ? import_iovec+0x74/0xa0 [ 293.266551][T11002] ___sys_sendmsg+0x21f/0x2a0 [ 293.266585][T11002] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.266653][T11002] ? __fget_files+0x2a/0x420 [ 293.266678][T11002] ? __fget_files+0x3a0/0x420 [ 293.266710][T11002] __x64_sys_sendmsg+0x19b/0x260 [ 293.266744][T11002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.266780][T11002] ? __pfx_ksys_write+0x10/0x10 [ 293.266800][T11002] ? rcu_is_watching+0x15/0xb0 [ 293.266827][T11002] ? do_syscall_64+0xbe/0x3b0 [ 293.266858][T11002] do_syscall_64+0xfa/0x3b0 [ 293.266882][T11002] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.266905][T11002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.266928][T11002] ? clear_bhb_loop+0x60/0xb0 [ 293.266956][T11002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.266978][T11002] RIP: 0033:0x7f06a9b8e929 [ 293.266998][T11002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.267017][T11002] RSP: 002b:00007f06aaaa4038 EFLAGS: 00000246 [ 293.267027][ T980] em28xx 2-1:0.0: Freeing device [ 293.267031][T11002] ORIG_RAX: 000000000000002e [ 293.267042][T11002] RAX: ffffffffffffffda RBX: 00007f06a9db5fa0 RCX: 00007f06a9b8e929 [ 293.267068][T11002] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 293.267080][T11002] RBP: 00007f06aaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 293.267092][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.267106][T11002] R13: 0000000000000000 R14: 00007f06a9db5fa0 R15: 00007fffc35c4478 [ 293.267146][T11002] [ 293.618152][T11005] usb usb8: usbfs: process 11005 (syz.3.1902) did not claim interface 0 before use [ 293.732912][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 293.927330][ T5922] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 294.090322][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.104592][ T5922] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.124041][ T5922] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.140702][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 294.157565][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.175900][ T5922] usb 3-1: Product: syz [ 294.186044][ T5922] usb 3-1: Manufacturer: syz [ 294.197814][ T5922] usb 3-1: SerialNumber: syz [ 294.207703][ T980] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 294.222348][T11022] FAULT_INJECTION: forcing a failure. [ 294.222348][T11022] name failslab, interval 1, probability 0, space 0, times 0 [ 294.248022][T11022] CPU: 0 UID: 0 PID: 11022 Comm: syz.1.1908 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 294.248054][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.248068][T11022] Call Trace: [ 294.248077][T11022] [ 294.248087][T11022] dump_stack_lvl+0x189/0x250 [ 294.248117][T11022] ? __pfx____ratelimit+0x10/0x10 [ 294.248145][T11022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.248168][T11022] ? __pfx__printk+0x10/0x10 [ 294.248199][T11022] ? rcu_is_watching+0x15/0xb0 [ 294.248225][T11022] should_fail_ex+0x414/0x560 [ 294.248264][T11022] should_failslab+0xa8/0x100 [ 294.248290][T11022] kmem_cache_alloc_noprof+0x73/0x3c0 [ 294.248310][T11022] ? _sctp_make_chunk+0x14e/0x430 [ 294.248347][T11022] _sctp_make_chunk+0x14e/0x430 [ 294.248376][T11022] sctp_make_init+0x58b/0xd30 [ 294.248396][T11022] ? __lock_acquire+0xab9/0xd20 [ 294.248439][T11022] ? __pfx_sctp_make_init+0x10/0x10 [ 294.248471][T11022] ? rht_unlock+0x121/0x1d0 [ 294.248511][T11022] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 294.248546][T11022] sctp_do_sm+0x1e7/0x5a20 [ 294.248564][T11022] ? __pfx_sctp_pname+0x10/0x10 [ 294.248603][T11022] ? sctp_hash_transport+0x17d/0x19c0 [ 294.248635][T11022] ? __pfx_sctp_ulpevent_notify_peer_addr_change+0x10/0x10 [ 294.248666][T11022] ? __pfx_sctp_do_sm+0x10/0x10 [ 294.248686][T11022] ? idr_get_free+0x8dc/0xa70 [ 294.248752][T11022] ? sctp_assoc_set_id+0x1b4/0x360 [ 294.248786][T11022] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 294.248820][T11022] __sctp_connect+0x947/0xd50 [ 294.248859][T11022] ? __pfx___sctp_connect+0x10/0x10 [ 294.248888][T11022] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 294.248918][T11022] ? security_sctp_bind_connect+0x7e/0x2e0 [ 294.248953][T11022] sctp_getsockopt_connectx3+0x2c4/0x440 [ 294.248977][T11022] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 294.249002][T11022] ? __local_bh_enable_ip+0x12d/0x1c0 [ 294.249023][T11022] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 294.249055][T11022] sctp_getsockopt+0x98a/0xb60 [ 294.249086][T11022] do_sock_getsockopt+0x35d/0x650 [ 294.249119][T11022] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 294.249149][T11022] ? do_syscall_64+0x80/0x3b0 [ 294.249173][T11022] ? __fget_files+0x3a0/0x420 [ 294.249200][T11022] ? __fget_files+0x2a/0x420 [ 294.249237][T11022] __x64_sys_getsockopt+0x1a5/0x250 [ 294.249266][T11022] ? do_syscall_64+0x80/0x3b0 [ 294.249292][T11022] ? do_syscall_64+0x80/0x3b0 [ 294.249321][T11022] do_syscall_64+0xfa/0x3b0 [ 294.249354][T11022] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.249374][T11022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.249393][T11022] ? clear_bhb_loop+0x60/0xb0 [ 294.249415][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.249434][T11022] RIP: 0033:0x7f6a9178e929 [ 294.249452][T11022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.249469][T11022] RSP: 002b:00007f6a926b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 294.249489][T11022] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178e929 [ 294.249504][T11022] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 294.249516][T11022] RBP: 00007f6a926b8090 R08: 00002000000002c0 R09: 0000000000000000 [ 294.249531][T11022] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 294.249546][T11022] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 294.249576][T11022] [ 294.733836][ T5922] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 294.753589][ T980] usb 4-1: device descriptor read/64, error -71 [ 294.949910][T11009] trusted_key: encrypted_key: insufficient parameters specified [ 294.959421][ T5839] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 294.997881][ T980] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 295.013504][ T5922] usb 3-1: USB disconnect, device number 41 [ 295.023534][ T5922] usblp0: removed [ 295.127387][ T980] usb 4-1: device descriptor read/64, error -71 [ 295.127408][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 295.131272][ T5839] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.148141][ T5839] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.156778][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.169720][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.179555][ T5839] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.189346][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.202916][ T5839] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.212058][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.222493][ T5839] usb 2-1: config 0 descriptor?? [ 295.238355][ T980] usb usb4-port1: attempt power cycle [ 295.297427][ T5889] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 295.432813][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.442086][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.451640][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 295.453216][ T5839] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.476263][ T5889] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 295.483313][ T5839] usb 2-1: USB disconnect, device number 43 [ 295.498360][ T5889] usb 1-1: config 0 has no interface number 0 [ 295.504618][ T5889] usb 1-1: config 0 interface 132 has no altsetting 0 [ 295.507599][ T5839] usblp0: removed [ 295.524108][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 295.535403][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.546756][ T5889] usb 1-1: Product: syz [ 295.551166][ T5889] usb 1-1: Manufacturer: syz [ 295.555995][ T5889] usb 1-1: SerialNumber: syz [ 295.574674][ T5889] usb 1-1: config 0 descriptor?? [ 295.580247][ T980] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 295.612483][ T980] usb 4-1: device descriptor read/8, error -71 [ 295.803327][ T5889] cdc_subset 1-1:0.132: probe with driver cdc_subset failed with error -71 [ 295.827863][ T5889] usb 1-1: USB disconnect, device number 41 [ 295.853605][T11039] FAULT_INJECTION: forcing a failure. [ 295.853605][T11039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.858551][ T980] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 295.870839][T11039] CPU: 1 UID: 0 PID: 11039 Comm: syz.2.1915 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 295.870877][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.870895][T11039] Call Trace: [ 295.870906][T11039] [ 295.870925][T11039] dump_stack_lvl+0x189/0x250 [ 295.870959][T11039] ? __pfx____ratelimit+0x10/0x10 [ 295.870985][T11039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.871011][T11039] ? __pfx__printk+0x10/0x10 [ 295.871041][T11039] ? __might_fault+0xb0/0x130 [ 295.871079][T11039] should_fail_ex+0x414/0x560 [ 295.871125][T11039] _copy_from_user+0x2d/0xb0 [ 295.871153][T11039] ___sys_sendmsg+0x158/0x2a0 [ 295.871190][T11039] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.871266][T11039] ? __fget_files+0x2a/0x420 [ 295.871298][T11039] ? __fget_files+0x3a0/0x420 [ 295.871340][T11039] __x64_sys_sendmsg+0x19b/0x260 [ 295.871378][T11039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.871424][T11039] ? __pfx_ksys_write+0x10/0x10 [ 295.871448][T11039] ? rcu_is_watching+0x15/0xb0 [ 295.871481][T11039] ? do_syscall_64+0xbe/0x3b0 [ 295.871515][T11039] do_syscall_64+0xfa/0x3b0 [ 295.871540][T11039] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.871568][T11039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.871593][T11039] ? clear_bhb_loop+0x60/0xb0 [ 295.871623][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.871648][T11039] RIP: 0033:0x7f89ce58e929 [ 295.871670][T11039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.871694][T11039] RSP: 002b:00007f89cc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.871719][T11039] RAX: ffffffffffffffda RBX: 00007f89ce7b5fa0 RCX: 00007f89ce58e929 [ 295.871738][T11039] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 295.871755][T11039] RBP: 00007f89cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.871771][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.871784][T11039] R13: 0000000000000000 R14: 00007f89ce7b5fa0 R15: 00007ffdd87de678 [ 295.871823][T11039] [ 296.116260][ T980] usb 4-1: device descriptor read/8, error -71 [ 296.203706][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 296.227584][ T980] usb usb4-port1: unable to enumerate USB device [ 296.407852][ T121] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 296.434615][T11054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.518319][ T5836] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 296.548899][ T121] usb 2-1: device descriptor read/64, error -71 [ 296.604036][T11063] syzkaller1: entered promiscuous mode [ 296.609646][T11063] syzkaller1: entered allmulticast mode [ 296.679710][ T5836] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 296.688219][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.698714][ T5836] usb 3-1: config 0 has no interface number 0 [ 296.707527][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 296.717669][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.725705][ T5836] usb 3-1: Product: syz [ 296.730176][ T5836] usb 3-1: Manufacturer: syz [ 296.734810][ T5836] usb 3-1: SerialNumber: syz [ 296.745194][ T5836] usb 3-1: config 0 descriptor?? [ 296.769295][ T5836] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 296.797414][ T121] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 296.947483][ T121] usb 2-1: device descriptor read/64, error -71 [ 296.984069][ T5839] usb 3-1: USB disconnect, device number 42 [ 297.068388][ T121] usb usb2-port1: attempt power cycle [ 297.407378][ T121] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 297.428106][ T121] usb 2-1: device descriptor read/8, error -71 [ 297.457367][ T5839] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 297.477528][ T5889] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 297.607583][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 297.614722][ T5839] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 297.626454][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.639946][ T5839] usb 1-1: config 0 descriptor?? [ 297.649210][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.660992][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.667572][ T121] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 297.693718][ T5889] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 297.708707][ T121] usb 2-1: device descriptor read/8, error -71 [ 297.717966][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.729068][ T5889] usb 4-1: config 0 descriptor?? [ 297.786767][T11083] FAULT_INJECTION: forcing a failure. [ 297.786767][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 297.801255][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.2.1932 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 297.801289][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.801304][T11083] Call Trace: [ 297.801314][T11083] [ 297.801325][T11083] dump_stack_lvl+0x189/0x250 [ 297.801356][T11083] ? __pfx____ratelimit+0x10/0x10 [ 297.801381][T11083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.801406][T11083] ? __pfx__printk+0x10/0x10 [ 297.801439][T11083] ? __pfx___might_resched+0x10/0x10 [ 297.801467][T11083] should_fail_ex+0x414/0x560 [ 297.801508][T11083] should_failslab+0xa8/0x100 [ 297.801536][T11083] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 297.801560][T11083] ? __alloc_skb+0x112/0x2d0 [ 297.801585][T11083] ? __pfx___mutex_trylock_common+0x10/0x10 [ 297.801617][T11083] __alloc_skb+0x112/0x2d0 [ 297.801649][T11083] netlink_dump+0x22b/0xe20 [ 297.801685][T11083] ? __netlink_lookup+0xbd/0x810 [ 297.801721][T11083] ? __pfx_netlink_dump+0x10/0x10 [ 297.801761][T11083] ? netlink_lookup+0x30/0x200 [ 297.801785][T11083] ? netlink_lookup+0x30/0x200 [ 297.801806][T11083] ? netlink_lookup+0x30/0x200 [ 297.801837][T11083] __netlink_dump_start+0x5cb/0x7e0 [ 297.801874][T11083] ctnetlink_get_ct_dying+0x11c/0x190 [ 297.801905][T11083] ? __pfx___mutex_lock+0x10/0x10 [ 297.801932][T11083] ? __pfx_ctnetlink_get_ct_dying+0x10/0x10 [ 297.801962][T11083] ? __pfx_ctnetlink_dump_dying+0x10/0x10 [ 297.801992][T11083] ? __pfx_ctnetlink_done_list+0x10/0x10 [ 297.802042][T11083] nfnetlink_rcv_msg+0xb4a/0x1130 [ 297.802078][T11083] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 297.802134][T11083] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 297.802167][T11083] ? kasan_save_free_info+0x46/0x50 [ 297.802253][T11083] netlink_rcv_skb+0x208/0x470 [ 297.802281][T11083] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 297.802318][T11083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.802357][T11083] ? bpf_lsm_capable+0x9/0x20 [ 297.802380][T11083] ? security_capable+0x7e/0x2e0 [ 297.802414][T11083] nfnetlink_rcv+0x26a/0x2520 [ 297.802452][T11083] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 297.802491][T11083] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 297.802518][T11083] ? __dev_queue_xmit+0x27e/0x3a70 [ 297.802551][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.802586][T11083] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 297.802620][T11083] ? __pfx___dev_queue_xmit+0x10/0x10 [ 297.802688][T11083] ? ref_tracker_free+0x63a/0x7d0 [ 297.802711][T11083] ? __copy_skb_header+0xa7/0x550 [ 297.802744][T11083] ? __pfx_ref_tracker_free+0x10/0x10 [ 297.802766][T11083] ? __skb_clone+0x63/0x7a0 [ 297.802800][T11083] ? __skb_clone+0x483/0x7a0 [ 297.802828][T11083] ? skb_clone+0x246/0x3a0 [ 297.802862][T11083] ? __netlink_deliver_tap+0x807/0x850 [ 297.802889][T11083] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.802922][T11083] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.802946][T11083] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.802972][T11083] netlink_unicast+0x75b/0x8d0 [ 297.802998][T11083] netlink_sendmsg+0x805/0xb30 [ 297.803036][T11083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.803067][T11083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.803095][T11083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.803122][T11083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.803141][T11083] __sock_sendmsg+0x219/0x270 [ 297.803161][T11083] ____sys_sendmsg+0x505/0x830 [ 297.803201][T11083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.803242][T11083] ? import_iovec+0x74/0xa0 [ 297.803267][T11083] ___sys_sendmsg+0x21f/0x2a0 [ 297.803291][T11083] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.803355][T11083] ? __fget_files+0x2a/0x420 [ 297.803383][T11083] ? __fget_files+0x3a0/0x420 [ 297.803423][T11083] __x64_sys_sendmsg+0x19b/0x260 [ 297.803448][T11083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.803480][T11083] ? __pfx_ksys_write+0x10/0x10 [ 297.803514][T11083] ? do_syscall_64+0xbe/0x3b0 [ 297.803542][T11083] do_syscall_64+0xfa/0x3b0 [ 297.803568][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.803586][T11083] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.803602][T11083] ? clear_bhb_loop+0x60/0xb0 [ 297.803621][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.803642][T11083] RIP: 0033:0x7f89ce58e929 [ 297.803664][T11083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.803694][T11083] RSP: 002b:00007f89cc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.803717][T11083] RAX: ffffffffffffffda RBX: 00007f89ce7b5fa0 RCX: 00007f89ce58e929 [ 297.803734][T11083] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 297.803745][T11083] RBP: 00007f89cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.803755][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.803765][T11083] R13: 0000000000000000 R14: 00007f89ce7b5fa0 R15: 00007ffdd87de678 [ 297.803791][T11083] [ 297.848364][ T5839] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 297.850157][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.292459][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.300118][ T5839] asix 1-1:0.0: probe with driver asix failed with error -32 [ 298.307908][ T121] usb usb2-port1: unable to enumerate USB device [ 298.357882][ T5839] usb 1-1: USB disconnect, device number 42 [ 298.533707][ T5889] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 298.541274][ T5889] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 298.548779][ T5889] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 298.556247][ T5889] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 298.563737][ T5889] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 298.574280][ T5889] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 298.699739][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 298.699761][ T30] audit: type=1400 audit(1750885241.536:108): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A6B90880B384924FD511D903D72D8C0D8092F8D76D3A7D84AFD94234B54DD14D3E1BE5F24413D7AEEBD2F58BE6D4F58297394DEBE5F884EB8DEEB29CDC5366D0A0B01BEEBBB91117AC27C641B04D2F97978B21B084C547277887C3009C6E29CED5CD85BC80420F3AC5D561D3AFCC39E020778EFFE1C2E5454CFBFF5806125DC51B3437554CC02EA91E8D801595A79E621899CD1A616378A7673B207FEB36A2AAD1849CCE9AA7B5DEFB7F2EE2AF935084A74D073C4AAC8137EB2F230BD66DBAE47E3FBEF94EF3A511BE3A3A47DEF6065CD4CABDB0DF2799F6731F4091869 pid=11091 comm="syz.2.1936" [ 298.986217][ T5889] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 32: -71 [ 299.007372][ T5889] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense firmware info: -71 [ 299.022312][ T5889] playstation 0003:054C:0DF2.000A: Failed to get firmware info from DualSense [ 299.039396][ T5889] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 299.063145][ T5889] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -71 [ 299.098181][ T5889] usb 4-1: USB disconnect, device number 43 [ 299.317403][ T5839] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 299.443367][T11111] FAULT_INJECTION: forcing a failure. [ 299.443367][T11111] name failslab, interval 1, probability 0, space 0, times 0 [ 299.467329][T11111] CPU: 0 UID: 0 PID: 11111 Comm: syz.0.1944 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 299.467360][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.467374][T11111] Call Trace: [ 299.467383][T11111] [ 299.467393][T11111] dump_stack_lvl+0x189/0x250 [ 299.467423][T11111] ? __pfx____ratelimit+0x10/0x10 [ 299.467447][T11111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.467471][T11111] ? __pfx__printk+0x10/0x10 [ 299.467511][T11111] should_fail_ex+0x414/0x560 [ 299.467555][T11111] should_failslab+0xa8/0x100 [ 299.467579][T11111] __kmalloc_cache_noprof+0x70/0x3d0 [ 299.467598][T11111] ? sctp_add_bind_addr+0x8c/0x370 [ 299.467625][T11111] sctp_add_bind_addr+0x8c/0x370 [ 299.467651][T11111] sctp_copy_local_addr_list+0x30b/0x4e0 [ 299.467678][T11111] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 299.467703][T11111] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 299.467728][T11111] ? sctp_v6_is_any+0x64/0x80 [ 299.467756][T11111] ? sctp_copy_one_addr+0x93/0x360 [ 299.467784][T11111] sctp_bind_addr_copy+0xb3/0x3c0 [ 299.467822][T11111] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 299.467856][T11111] sctp_connect_new_asoc+0x2e0/0x690 [ 299.467880][T11111] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 299.467904][T11111] ? __ipv6_addr_type+0x247/0x2f0 [ 299.467930][T11111] ? sctp_inet6_send_verify+0x6e/0x300 [ 299.467946][T11111] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 299.467969][T11111] __sctp_connect+0x5ba/0xd50 [ 299.467999][T11111] ? __pfx___sctp_connect+0x10/0x10 [ 299.468022][T11111] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 299.468045][T11111] ? security_sctp_bind_connect+0x7e/0x2e0 [ 299.468073][T11111] sctp_getsockopt_connectx3+0x2c4/0x440 [ 299.468093][T11111] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 299.468112][T11111] ? __local_bh_enable_ip+0x12d/0x1c0 [ 299.468128][T11111] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 299.468151][T11111] sctp_getsockopt+0x98a/0xb60 [ 299.468174][T11111] do_sock_getsockopt+0x35d/0x650 [ 299.468204][T11111] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 299.468234][T11111] ? do_syscall_64+0x80/0x3b0 [ 299.468260][T11111] ? __fget_files+0x3a0/0x420 [ 299.468288][T11111] ? __fget_files+0x2a/0x420 [ 299.468319][T11111] __x64_sys_getsockopt+0x1a5/0x250 [ 299.468340][T11111] ? do_syscall_64+0x80/0x3b0 [ 299.468359][T11111] ? do_syscall_64+0x80/0x3b0 [ 299.468379][T11111] do_syscall_64+0xfa/0x3b0 [ 299.468396][T11111] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.468413][T11111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.468430][T11111] ? clear_bhb_loop+0x60/0xb0 [ 299.468449][T11111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.468465][T11111] RIP: 0033:0x7fd157f8e929 [ 299.468480][T11111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.468493][T11111] RSP: 002b:00007fd158e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 299.468510][T11111] RAX: ffffffffffffffda RBX: 00007fd1581b6080 RCX: 00007fd157f8e929 [ 299.468522][T11111] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 299.468532][T11111] RBP: 00007fd158e6f090 R08: 00002000000002c0 R09: 0000000000000000 [ 299.468543][T11111] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 299.468553][T11111] R13: 0000000000000000 R14: 00007fd1581b6080 R15: 00007ffd3ec95768 [ 299.468579][T11111] [ 299.804818][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.813193][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.839017][ T5839] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.860063][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.888251][ T5839] usb 3-1: config 0 descriptor?? [ 299.924818][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 300.096513][ T5839] pwc: send_video_command error -71 [ 300.117363][ T5839] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 300.125051][ T5839] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 300.148381][ T5839] usb 3-1: USB disconnect, device number 43 [ 300.219657][ T980] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 300.314368][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'. [ 300.367758][ T980] usb 4-1: device descriptor read/64, error -71 [ 300.616780][ T980] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 300.617549][ T5839] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 300.747469][ T980] usb 4-1: device descriptor read/64, error -71 [ 300.805244][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.825850][ T5839] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 300.845232][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.868525][ T5839] usb 3-1: config 0 descriptor?? [ 300.884940][ T980] usb usb4-port1: attempt power cycle [ 300.899502][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 301.257581][ T980] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 301.282582][T11132] syzkaller1: entered promiscuous mode [ 301.291643][ T980] usb 4-1: device descriptor read/8, error -71 [ 301.299208][T11132] syzkaller1: entered allmulticast mode [ 301.306186][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 301.322585][ T5839] pwc: recv_control_msg error -32 req 02 val 2700 [ 301.335304][ T5839] pwc: recv_control_msg error -32 req 02 val 2c00 [ 301.343125][ T5839] pwc: recv_control_msg error -32 req 04 val 1000 [ 301.353511][ T5839] pwc: recv_control_msg error -32 req 04 val 1300 [ 301.361324][ T5839] pwc: recv_control_msg error -32 req 04 val 1400 [ 301.375246][ T5839] pwc: recv_control_msg error -32 req 02 val 2000 [ 301.384824][ T5839] pwc: recv_control_msg error -32 req 02 val 2100 [ 301.401294][ T5839] pwc: recv_control_msg error -32 req 04 val 1500 [ 301.419753][ T5839] pwc: recv_control_msg error -32 req 02 val 2500 [ 301.556924][T11135] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82 [ 301.567120][ T980] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 301.599012][ T980] usb 4-1: device descriptor read/8, error -71 [ 301.631427][ T5839] pwc: recv_control_msg error -71 req 02 val 2600 [ 301.670838][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 301.681772][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.693421][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.718688][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.721823][ T980] usb usb4-port1: unable to enumerate USB device [ 301.758023][ T5839] pwc: Registered as video103. [ 301.761144][T11137] FAULT_INJECTION: forcing a failure. [ 301.761144][T11137] name failslab, interval 1, probability 0, space 0, times 0 [ 301.781262][T11137] CPU: 0 UID: 0 PID: 11137 Comm: syz.1.1954 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 301.781297][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.781311][T11137] Call Trace: [ 301.781321][T11137] [ 301.781331][T11137] dump_stack_lvl+0x189/0x250 [ 301.781362][T11137] ? __pfx____ratelimit+0x10/0x10 [ 301.781388][T11137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.781421][T11137] ? __pfx__printk+0x10/0x10 [ 301.781453][T11137] ? __pfx___might_resched+0x10/0x10 [ 301.781482][T11137] should_fail_ex+0x414/0x560 [ 301.781523][T11137] should_failslab+0xa8/0x100 [ 301.781551][T11137] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 301.781575][T11137] ? __alloc_skb+0x112/0x2d0 [ 301.781608][T11137] __alloc_skb+0x112/0x2d0 [ 301.781639][T11137] netlink_sendmsg+0x5c6/0xb30 [ 301.781677][T11137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.781708][T11137] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.781737][T11137] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.781768][T11137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.781796][T11137] __sock_sendmsg+0x219/0x270 [ 301.781823][T11137] ____sys_sendmsg+0x505/0x830 [ 301.781860][T11137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.781902][T11137] ? import_iovec+0x74/0xa0 [ 301.781928][T11137] ___sys_sendmsg+0x21f/0x2a0 [ 301.781962][T11137] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.782031][T11137] ? __fget_files+0x2a/0x420 [ 301.782060][T11137] ? __fget_files+0x3a0/0x420 [ 301.782100][T11137] __x64_sys_sendmsg+0x19b/0x260 [ 301.782135][T11137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.782177][T11137] ? __pfx_ksys_write+0x10/0x10 [ 301.782200][T11137] ? rcu_is_watching+0x15/0xb0 [ 301.782229][T11137] ? do_syscall_64+0xbe/0x3b0 [ 301.782258][T11137] do_syscall_64+0xfa/0x3b0 [ 301.782281][T11137] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.782305][T11137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.782326][T11137] ? clear_bhb_loop+0x60/0xb0 [ 301.782351][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.782372][T11137] RIP: 0033:0x7f6a9178e929 [ 301.782391][T11137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.782416][T11137] RSP: 002b:00007f6a926b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.782441][T11137] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178e929 [ 301.782457][T11137] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 301.782473][T11137] RBP: 00007f6a926b8090 R08: 0000000000000000 R09: 0000000000000000 [ 301.782487][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.782501][T11137] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 301.782535][T11137] [ 301.807617][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 302.115970][ T5839] usb 3-1: USB disconnect, device number 44 [ 302.647415][ T5839] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 302.797457][ T5839] usb 3-1: Invalid ep0 maxpacket: 32 [ 302.867428][ T980] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 302.927494][ T5839] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 303.027562][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 303.035376][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 303.043086][ T980] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 303.053313][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.064429][ T980] usb 2-1: config 0 descriptor?? [ 303.077503][ T5839] usb 3-1: Invalid ep0 maxpacket: 32 [ 303.087681][ T5839] usb usb3-port1: attempt power cycle [ 303.207444][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 303.217758][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 303.227094][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.235320][ T10] usb 1-1: Product: syz [ 303.241380][ T10] usb 1-1: Manufacturer: syz [ 303.246092][ T10] usb 1-1: SerialNumber: syz [ 303.254493][ T10] usb 1-1: config 0 descriptor?? [ 303.262122][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 303.274756][ T10] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 303.283853][ T10] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc3-next-20250625-syzkaller) [ 303.283853][ T10] Please send a copy of this message to and [ 303.429085][ T5839] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 303.459781][ T5839] usb 3-1: Invalid ep0 maxpacket: 32 [ 303.593806][ T5839] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 303.632746][ T5839] usb 3-1: Invalid ep0 maxpacket: 32 [ 303.643874][ T5839] usb usb3-port1: unable to enumerate USB device [ 303.775010][T11176] XFS (rnullb0): Invalid superblock magic number [ 305.517154][ T980] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 305.532933][ T980] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 305.545260][ T980] asix 2-1:0.0: probe with driver asix failed with error -71 [ 305.560734][ T980] usb 2-1: USB disconnect, device number 48 [ 305.667389][ T5922] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 305.734842][ T10] usb 1-1: USB disconnect, device number 43 [ 305.747558][ T121] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 305.819350][ T5922] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 305.830573][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.846803][ T5922] usb 3-1: config 0 descriptor?? [ 305.924912][T11211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1981'. [ 305.934325][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 305.940508][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 305.944587][T11211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1981'. [ 305.969082][ T121] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.979874][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.988071][ T121] usb 4-1: Product: syz [ 305.992396][ T121] usb 4-1: Manufacturer: syz [ 305.997101][ T121] usb 4-1: SerialNumber: syz [ 306.005146][ T121] usb 4-1: config 0 descriptor?? [ 306.130777][T11215] syzkaller1: entered promiscuous mode [ 306.136650][T11215] syzkaller1: entered allmulticast mode [ 306.151795][T11215] FAULT_INJECTION: forcing a failure. [ 306.151795][T11215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.165906][T11215] CPU: 0 UID: 0 PID: 11215 Comm: syz.1.1983 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 306.165938][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.165954][T11215] Call Trace: [ 306.165964][T11215] [ 306.165974][T11215] dump_stack_lvl+0x189/0x250 [ 306.166005][T11215] ? __pfx____ratelimit+0x10/0x10 [ 306.166036][T11215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.166062][T11215] ? __pfx__printk+0x10/0x10 [ 306.166088][T11215] ? __might_fault+0xb0/0x130 [ 306.166123][T11215] should_fail_ex+0x414/0x560 [ 306.166164][T11215] _copy_from_iter+0x1db/0x16f0 [ 306.166220][T11215] ? __pfx__copy_from_iter+0x10/0x10 [ 306.166250][T11215] ? sock_alloc_send_pskb+0x875/0x990 [ 306.166293][T11215] ? __pfx__copy_from_iter+0x10/0x10 [ 306.166330][T11215] ? page_copy_sane+0x16a/0x280 [ 306.166365][T11215] copy_page_from_iter+0xdd/0x170 [ 306.166403][T11215] skb_copy_datagram_from_iter+0x306/0x720 [ 306.166452][T11215] tun_get_user+0x15c3/0x3ce0 [ 306.166495][T11215] ? aa_file_perm+0x13e/0x11b0 [ 306.166527][T11215] ? aa_file_perm+0x13e/0x11b0 [ 306.166556][T11215] ? aa_file_perm+0x3ed/0x11b0 [ 306.166588][T11215] ? __pfx_tun_get_user+0x10/0x10 [ 306.166629][T11215] ? __lock_acquire+0xab9/0xd20 [ 306.166671][T11215] ? ref_tracker_alloc+0x318/0x460 [ 306.166692][T11215] ? __lock_acquire+0xab9/0xd20 [ 306.166727][T11215] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 306.166757][T11215] ? tun_get+0x1c/0x2f0 [ 306.166795][T11215] ? tun_get+0x1c/0x2f0 [ 306.166826][T11215] ? tun_get+0x1c/0x2f0 [ 306.166862][T11215] tun_chr_write_iter+0x113/0x200 [ 306.166898][T11215] vfs_write+0x548/0xa90 [ 306.166928][T11215] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 306.166961][T11215] ? __pfx_vfs_write+0x10/0x10 [ 306.166998][T11215] ? __fget_files+0x2a/0x420 [ 306.167038][T11215] ksys_write+0x145/0x250 [ 306.167066][T11215] ? __pfx_ksys_write+0x10/0x10 [ 306.167089][T11215] ? rcu_is_watching+0x15/0xb0 [ 306.167118][T11215] ? do_syscall_64+0xbe/0x3b0 [ 306.167149][T11215] do_syscall_64+0xfa/0x3b0 [ 306.167185][T11215] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.167210][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.167230][T11215] ? clear_bhb_loop+0x60/0xb0 [ 306.167257][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.167279][T11215] RIP: 0033:0x7f6a9178e929 [ 306.167301][T11215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.167322][T11215] RSP: 002b:00007f6a926b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.167347][T11215] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178e929 [ 306.167365][T11215] RDX: 000000000000ffbf RSI: 00002000000000c0 RDI: 0000000000000004 [ 306.167380][T11215] RBP: 00007f6a926b8090 R08: 0000000000000000 R09: 0000000000000000 [ 306.167394][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.167407][T11215] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 306.167441][T11215] [ 306.514889][ T121] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.749940][T11218] random: crng reseeded on system resumption [ 307.242255][T11223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 307.956696][ T121] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 307.988050][ T121] usb 4-1: USB disconnect, device number 48 [ 308.160373][T11238] FAULT_INJECTION: forcing a failure. [ 308.160373][T11238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.174672][T11238] CPU: 1 UID: 0 PID: 11238 Comm: syz.0.1990 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 308.174704][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.174715][T11238] Call Trace: [ 308.174722][T11238] [ 308.174730][T11238] dump_stack_lvl+0x189/0x250 [ 308.174769][T11238] ? __pfx____ratelimit+0x10/0x10 [ 308.174794][T11238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.174818][T11238] ? __pfx__printk+0x10/0x10 [ 308.174842][T11238] ? __might_fault+0xb0/0x130 [ 308.174872][T11238] should_fail_ex+0x414/0x560 [ 308.174901][T11238] _copy_from_iter+0x1db/0x16f0 [ 308.174940][T11238] ? rcu_is_watching+0x15/0xb0 [ 308.174964][T11238] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 308.174988][T11238] ? __pfx__copy_from_iter+0x10/0x10 [ 308.175022][T11238] ? __build_skb_around+0x257/0x3e0 [ 308.175045][T11238] ? netlink_sendmsg+0x642/0xb30 [ 308.175065][T11238] ? skb_put+0x11b/0x210 [ 308.175100][T11238] netlink_sendmsg+0x6b2/0xb30 [ 308.175136][T11238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.175166][T11238] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.175187][T11238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.175208][T11238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.175236][T11238] __sock_sendmsg+0x219/0x270 [ 308.175263][T11238] ____sys_sendmsg+0x505/0x830 [ 308.175298][T11238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.175333][T11238] ? import_iovec+0x74/0xa0 [ 308.175351][T11238] ___sys_sendmsg+0x21f/0x2a0 [ 308.175380][T11238] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.175449][T11238] ? __fget_files+0x2a/0x420 [ 308.175477][T11238] ? __fget_files+0x3a0/0x420 [ 308.175505][T11238] __x64_sys_sendmsg+0x19b/0x260 [ 308.175534][T11238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.175577][T11238] ? __pfx_ksys_write+0x10/0x10 [ 308.175598][T11238] ? rcu_is_watching+0x15/0xb0 [ 308.175647][T11238] ? do_syscall_64+0xbe/0x3b0 [ 308.175668][T11238] do_syscall_64+0xfa/0x3b0 [ 308.175692][T11238] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.175716][T11238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.175738][T11238] ? clear_bhb_loop+0x60/0xb0 [ 308.175771][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.175791][T11238] RIP: 0033:0x7fd157f8e929 [ 308.175807][T11238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.175821][T11238] RSP: 002b:00007fd158e90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.175842][T11238] RAX: ffffffffffffffda RBX: 00007fd1581b5fa0 RCX: 00007fd157f8e929 [ 308.175860][T11238] RDX: 0000000004000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 308.175876][T11238] RBP: 00007fd158e90090 R08: 0000000000000000 R09: 0000000000000000 [ 308.175890][T11238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.175903][T11238] R13: 0000000000000000 R14: 00007fd1581b5fa0 R15: 00007ffd3ec95768 [ 308.175936][T11238] [ 308.678560][ T5922] pegasus 3-1:0.0: setup Pegasus II specific registers [ 308.772995][T11249] FAULT_INJECTION: forcing a failure. [ 308.772995][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 308.791284][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.3.1994 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 308.791317][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.791332][T11249] Call Trace: [ 308.791341][T11249] [ 308.791351][T11249] dump_stack_lvl+0x189/0x250 [ 308.791382][T11249] ? __pfx____ratelimit+0x10/0x10 [ 308.791408][T11249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.791434][T11249] ? __pfx__printk+0x10/0x10 [ 308.791456][T11249] ? do_syscall_64+0xfa/0x3b0 [ 308.791488][T11249] ? ref_tracker_alloc+0x318/0x460 [ 308.791515][T11249] should_fail_ex+0x414/0x560 [ 308.791555][T11249] should_failslab+0xa8/0x100 [ 308.791580][T11249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 308.791601][T11249] ? skb_clone+0x212/0x3a0 [ 308.791636][T11249] skb_clone+0x212/0x3a0 [ 308.791673][T11249] __netlink_deliver_tap+0x404/0x850 [ 308.791715][T11249] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.791756][T11249] netlink_deliver_tap+0x19c/0x1b0 [ 308.791784][T11249] __netlink_sendskb+0x47/0x90 [ 308.791808][T11249] netlink_dump+0xa12/0xe20 [ 308.791848][T11249] ? __pfx_netlink_dump+0x10/0x10 [ 308.791888][T11249] ? netlink_lookup+0x30/0x200 [ 308.791911][T11249] ? netlink_lookup+0x30/0x200 [ 308.791933][T11249] ? netlink_lookup+0x30/0x200 [ 308.791964][T11249] __netlink_dump_start+0x5cb/0x7e0 [ 308.792000][T11249] ctnetlink_get_ct_dying+0x11c/0x190 [ 308.792031][T11249] ? __pfx___mutex_lock+0x10/0x10 [ 308.792055][T11249] ? __pfx_ctnetlink_get_ct_dying+0x10/0x10 [ 308.792085][T11249] ? __pfx_ctnetlink_dump_dying+0x10/0x10 [ 308.792115][T11249] ? __pfx_ctnetlink_done_list+0x10/0x10 [ 308.792161][T11249] nfnetlink_rcv_msg+0xb4a/0x1130 [ 308.792195][T11249] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 308.792240][T11249] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 308.792273][T11249] ? kasan_save_free_info+0x46/0x50 [ 308.792354][T11249] netlink_rcv_skb+0x208/0x470 [ 308.792374][T11249] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 308.792405][T11249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.792446][T11249] ? bpf_lsm_capable+0x9/0x20 [ 308.792467][T11249] ? security_capable+0x7e/0x2e0 [ 308.792500][T11249] nfnetlink_rcv+0x26a/0x2520 [ 308.792527][T11249] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 308.792560][T11249] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 308.792588][T11249] ? __dev_queue_xmit+0x27e/0x3a70 [ 308.792621][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.792653][T11249] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 308.792677][T11249] ? __pfx___dev_queue_xmit+0x10/0x10 [ 308.792731][T11249] ? ref_tracker_free+0x63a/0x7d0 [ 308.792760][T11249] ? __copy_skb_header+0xa7/0x550 [ 308.792792][T11249] ? __pfx_ref_tracker_free+0x10/0x10 [ 308.792812][T11249] ? __skb_clone+0x63/0x7a0 [ 308.792838][T11249] ? __skb_clone+0x483/0x7a0 [ 308.792874][T11249] ? skb_clone+0x246/0x3a0 [ 308.792911][T11249] ? __netlink_deliver_tap+0x807/0x850 [ 308.792936][T11249] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.792964][T11249] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.792982][T11249] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.793008][T11249] netlink_unicast+0x75b/0x8d0 [ 308.793047][T11249] netlink_sendmsg+0x805/0xb30 [ 308.793084][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.793113][T11249] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.793133][T11249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.793154][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.793182][T11249] __sock_sendmsg+0x219/0x270 [ 308.793209][T11249] ____sys_sendmsg+0x505/0x830 [ 308.793245][T11249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.793280][T11249] ? import_iovec+0x74/0xa0 [ 308.793298][T11249] ___sys_sendmsg+0x21f/0x2a0 [ 308.793328][T11249] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.793401][T11249] ? __fget_files+0x2a/0x420 [ 308.793426][T11249] ? __fget_files+0x3a0/0x420 [ 308.793454][T11249] __x64_sys_sendmsg+0x19b/0x260 [ 308.793486][T11249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.793528][T11249] ? __pfx_ksys_write+0x10/0x10 [ 308.793549][T11249] ? rcu_is_watching+0x15/0xb0 [ 308.793575][T11249] ? do_syscall_64+0xbe/0x3b0 [ 308.793596][T11249] do_syscall_64+0xfa/0x3b0 [ 308.793612][T11249] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.793636][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.793659][T11249] ? clear_bhb_loop+0x60/0xb0 [ 308.793684][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.793705][T11249] RIP: 0033:0x7f06a9b8e929 [ 308.793724][T11249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.793744][T11249] RSP: 002b:00007f06aaaa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.793761][T11249] RAX: ffffffffffffffda RBX: 00007f06a9db5fa0 RCX: 00007f06a9b8e929 [ 308.793774][T11249] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 308.793792][T11249] RBP: 00007f06aaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 308.793806][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.793820][T11249] R13: 0000000000000000 R14: 00007f06a9db5fa0 R15: 00007fffc35c4478 [ 308.793853][T11249] [ 309.289653][ T30] audit: type=1326 audit(1750885252.126:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.312411][ T30] audit: type=1326 audit(1750885252.126:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.335336][ T30] audit: type=1326 audit(1750885252.126:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.359945][ T30] audit: type=1326 audit(1750885252.126:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.383227][ T30] audit: type=1326 audit(1750885252.126:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.425339][ T30] audit: type=1326 audit(1750885252.166:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.448309][ T30] audit: type=1326 audit(1750885252.176:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.472020][ T30] audit: type=1326 audit(1750885252.176:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.2.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ce58e929 code=0x7ffc0000 [ 309.498675][ T5922] pegasus 3-1:0.0: can't locate MII phy, using default [ 309.545860][ T5922] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, d6:4e:94:2e:01:1a [ 309.621742][ T5922] usb 3-1: USB disconnect, device number 49 [ 309.898129][ T5889] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 310.048014][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 310.059010][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 310.086128][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.122257][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.132825][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.147318][ T5889] usb 4-1: Product: syz [ 310.151552][ T5889] usb 4-1: Manufacturer: syz [ 310.169309][ T5889] usb 4-1: SerialNumber: syz [ 310.222060][ T5889] usb 4-1: config 0 descriptor?? [ 310.245836][ T5889] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 310.272130][ T5889] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 310.712696][T11288] /dev/rnullb0: Can't open blockdev [ 310.919292][ T5889] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 310.926669][ T5889] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 311.143023][ T5889] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 311.159142][ T5889] em28xx 4-1:0.0: No AC97 audio processor [ 311.215048][T11310] syzkaller1: entered promiscuous mode [ 311.230784][T11310] syzkaller1: entered allmulticast mode [ 311.246225][T11310] FAULT_INJECTION: forcing a failure. [ 311.246225][T11310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.277504][T11310] CPU: 1 UID: 0 PID: 11310 Comm: syz.1.2011 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 311.277535][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.277548][T11310] Call Trace: [ 311.277556][T11310] [ 311.277566][T11310] dump_stack_lvl+0x189/0x250 [ 311.277595][T11310] ? __pfx____ratelimit+0x10/0x10 [ 311.277618][T11310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.277642][T11310] ? __pfx__printk+0x10/0x10 [ 311.277666][T11310] ? __might_fault+0xb0/0x130 [ 311.277708][T11310] should_fail_ex+0x414/0x560 [ 311.277757][T11310] _copy_from_iter+0x1db/0x16f0 [ 311.277803][T11310] ? __pfx__copy_from_iter+0x10/0x10 [ 311.277833][T11310] ? sock_alloc_send_pskb+0x875/0x990 [ 311.277874][T11310] ? __pfx__copy_from_iter+0x10/0x10 [ 311.277909][T11310] ? page_copy_sane+0x16a/0x280 [ 311.277942][T11310] copy_page_from_iter+0xdd/0x170 [ 311.277979][T11310] skb_copy_datagram_from_iter+0x306/0x720 [ 311.278027][T11310] tun_get_user+0x15c3/0x3ce0 [ 311.278070][T11310] ? aa_file_perm+0x13e/0x11b0 [ 311.278100][T11310] ? aa_file_perm+0x13e/0x11b0 [ 311.278129][T11310] ? aa_file_perm+0x3ed/0x11b0 [ 311.278161][T11310] ? __pfx_tun_get_user+0x10/0x10 [ 311.278202][T11310] ? __lock_acquire+0xab9/0xd20 [ 311.278243][T11310] ? ref_tracker_alloc+0x318/0x460 [ 311.278265][T11310] ? __lock_acquire+0xab9/0xd20 [ 311.278300][T11310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 311.278339][T11310] ? tun_get+0x1c/0x2f0 [ 311.278377][T11310] ? tun_get+0x1c/0x2f0 [ 311.278412][T11310] ? tun_get+0x1c/0x2f0 [ 311.278449][T11310] tun_chr_write_iter+0x113/0x200 [ 311.278485][T11310] vfs_write+0x548/0xa90 [ 311.278514][T11310] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 311.278546][T11310] ? __pfx_vfs_write+0x10/0x10 [ 311.278582][T11310] ? __fget_files+0x2a/0x420 [ 311.278622][T11310] ksys_write+0x145/0x250 [ 311.278650][T11310] ? __pfx_ksys_write+0x10/0x10 [ 311.278672][T11310] ? rcu_is_watching+0x15/0xb0 [ 311.278700][T11310] ? do_syscall_64+0xbe/0x3b0 [ 311.278731][T11310] do_syscall_64+0xfa/0x3b0 [ 311.278762][T11310] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.278786][T11310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.278809][T11310] ? clear_bhb_loop+0x60/0xb0 [ 311.278836][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.278857][T11310] RIP: 0033:0x7f6a9178e929 [ 311.278878][T11310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.278898][T11310] RSP: 002b:00007f6a926b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.278922][T11310] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178e929 [ 311.278939][T11310] RDX: 000000000000ffbf RSI: 00002000000000c0 RDI: 0000000000000004 [ 311.278955][T11310] RBP: 00007f6a926b8090 R08: 0000000000000000 R09: 0000000000000000 [ 311.278970][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.278984][T11310] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 311.279017][T11310] [ 311.821102][T11319] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2013'. [ 311.885552][T11320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2013'. [ 311.897350][ T121] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 312.057308][ T121] usb 1-1: Using ep0 maxpacket: 32 [ 312.078783][ T121] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 312.097327][ T121] usb 1-1: config 0 has no interface number 0 [ 312.103505][ T121] usb 1-1: config 0 interface 184 has no altsetting 0 [ 312.146315][ T121] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 312.180047][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.213856][ T121] usb 1-1: Product: syz [ 312.223039][ T121] usb 1-1: Manufacturer: syz [ 312.231799][ T121] usb 1-1: SerialNumber: syz [ 312.246218][ T121] usb 1-1: config 0 descriptor?? [ 312.261619][ T121] smsc75xx v1.0.0 [ 312.691476][ T121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 312.716219][ T121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 312.741247][ T121] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 312.756991][ T121] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 313.005565][T11366] FAULT_INJECTION: forcing a failure. [ 313.005565][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.020055][T11366] CPU: 0 UID: 0 PID: 11366 Comm: syz.2.2023 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 313.020080][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.020091][T11366] Call Trace: [ 313.020098][T11366] [ 313.020105][T11366] dump_stack_lvl+0x189/0x250 [ 313.020127][T11366] ? __pfx____ratelimit+0x10/0x10 [ 313.020145][T11366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.020163][T11366] ? __pfx__printk+0x10/0x10 [ 313.020182][T11366] ? __might_fault+0xb0/0x130 [ 313.020205][T11366] should_fail_ex+0x414/0x560 [ 313.020235][T11366] _copy_from_iter+0x3f5/0x16f0 [ 313.020261][T11366] ? rcu_is_watching+0x15/0xb0 [ 313.020287][T11366] ? __pfx__copy_from_iter+0x10/0x10 [ 313.020321][T11366] ? __build_skb_around+0x257/0x3e0 [ 313.020364][T11366] ? netlink_sendmsg+0x642/0xb30 [ 313.020389][T11366] ? skb_put+0x11b/0x210 [ 313.020421][T11366] netlink_sendmsg+0x6b2/0xb30 [ 313.020447][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.020469][T11366] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.020490][T11366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.020512][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.020532][T11366] __sock_sendmsg+0x219/0x270 [ 313.020551][T11366] ____sys_sendmsg+0x505/0x830 [ 313.020576][T11366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.020607][T11366] ? import_iovec+0x74/0xa0 [ 313.020625][T11366] ___sys_sendmsg+0x21f/0x2a0 [ 313.020649][T11366] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.020697][T11366] ? __fget_files+0x2a/0x420 [ 313.020717][T11366] ? __fget_files+0x3a0/0x420 [ 313.020745][T11366] __x64_sys_sendmsg+0x19b/0x260 [ 313.020770][T11366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.020799][T11366] ? __pfx_ksys_write+0x10/0x10 [ 313.020820][T11366] ? do_syscall_64+0xbe/0x3b0 [ 313.020841][T11366] do_syscall_64+0xfa/0x3b0 [ 313.020858][T11366] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.020874][T11366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.020889][T11366] ? clear_bhb_loop+0x60/0xb0 [ 313.020908][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.020923][T11366] RIP: 0033:0x7f89ce58e929 [ 313.020938][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.020952][T11366] RSP: 002b:00007f89cc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.020969][T11366] RAX: ffffffffffffffda RBX: 00007f89ce7b5fa0 RCX: 00007f89ce58e929 [ 313.020981][T11366] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 313.020992][T11366] RBP: 00007f89cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.021002][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.021011][T11366] R13: 0000000000000000 R14: 00007f89ce7b5fa0 R15: 00007ffdd87de678 [ 313.021033][T11366] [ 313.353246][ T980] usb 4-1: USB disconnect, device number 49 [ 313.360938][ T980] em28xx 4-1:0.0: Disconnecting em28xx [ 313.370751][ T980] em28xx 4-1:0.0: Freeing device [ 313.440876][ T121] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 313.620883][ T121] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 313.629262][ T121] usb 2-1: config 0 has no interface number 0 [ 313.635395][ T121] usb 2-1: config 0 interface 106 has no altsetting 0 [ 313.644998][ T121] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 313.654748][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.664155][ T121] usb 2-1: Product: syz [ 313.668485][ T121] usb 2-1: Manufacturer: syz [ 313.673109][ T121] usb 2-1: SerialNumber: syz [ 313.681192][ T121] usb 2-1: config 0 descriptor?? [ 313.697381][ T5839] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 313.829016][ T5839] usb 3-1: device descriptor read/64, error -71 [ 313.890561][T11362] hpfs: Bad magic ... probably not HPFS [ 313.905974][ T121] usb 2-1: USB disconnect, device number 49 [ 314.067336][ T5839] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 314.208583][ T5839] usb 3-1: device descriptor read/64, error -71 [ 314.328015][T11386] FAULT_INJECTION: forcing a failure. [ 314.328015][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 314.350013][ T5839] usb usb3-port1: attempt power cycle [ 314.354209][T11386] CPU: 0 UID: 0 PID: 11386 Comm: syz.3.2030 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 314.354244][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.354261][T11386] Call Trace: [ 314.354274][T11386] [ 314.354284][T11386] dump_stack_lvl+0x189/0x250 [ 314.354320][T11386] ? __pfx____ratelimit+0x10/0x10 [ 314.354351][T11386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.354379][T11386] ? __pfx__printk+0x10/0x10 [ 314.354412][T11386] ? __pfx___might_resched+0x10/0x10 [ 314.354438][T11386] ? fs_reclaim_acquire+0x7d/0x100 [ 314.354483][T11386] should_fail_ex+0x414/0x560 [ 314.354529][T11386] should_failslab+0xa8/0x100 [ 314.354560][T11386] __kmalloc_noprof+0xcb/0x4f0 [ 314.354585][T11386] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 314.354632][T11386] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 314.354679][T11386] genl_family_rcv_msg_doit+0xb8/0x300 [ 314.354726][T11386] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.354767][T11386] ? rcu_is_watching+0x15/0xb0 [ 314.354797][T11386] ? apparmor_capable+0x137/0x1b0 [ 314.354837][T11386] ? bpf_lsm_capable+0x9/0x20 [ 314.354861][T11386] ? security_capable+0x7e/0x2e0 [ 314.354897][T11386] genl_rcv_msg+0x60e/0x790 [ 314.354942][T11386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.354978][T11386] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 314.355033][T11386] netlink_rcv_skb+0x208/0x470 [ 314.355063][T11386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.355122][T11386] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.355171][T11386] ? down_read+0x1ad/0x2e0 [ 314.355206][T11386] genl_rcv+0x28/0x40 [ 314.355239][T11386] netlink_unicast+0x75b/0x8d0 [ 314.355278][T11386] netlink_sendmsg+0x805/0xb30 [ 314.355321][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.355355][T11386] ? aa_sock_msg_perm+0xf1/0x1d0 [ 314.355387][T11386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.355421][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.355449][T11386] __sock_sendmsg+0x219/0x270 [ 314.355482][T11386] ____sys_sendmsg+0x505/0x830 [ 314.355521][T11386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.355567][T11386] ? import_iovec+0x74/0xa0 [ 314.355598][T11386] ___sys_sendmsg+0x21f/0x2a0 [ 314.355638][T11386] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.355719][T11386] ? __fget_files+0x2a/0x420 [ 314.355752][T11386] ? __fget_files+0x3a0/0x420 [ 314.355798][T11386] __x64_sys_sendmsg+0x19b/0x260 [ 314.355837][T11386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.355884][T11386] ? __pfx_ksys_write+0x10/0x10 [ 314.355919][T11386] ? do_syscall_64+0xbe/0x3b0 [ 314.355954][T11386] do_syscall_64+0xfa/0x3b0 [ 314.355981][T11386] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.356007][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.356033][T11386] ? clear_bhb_loop+0x60/0xb0 [ 314.356069][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.356094][T11386] RIP: 0033:0x7f06a9b8e929 [ 314.356117][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.356140][T11386] RSP: 002b:00007f06aaaa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.356168][T11386] RAX: ffffffffffffffda RBX: 00007f06a9db5fa0 RCX: 00007f06a9b8e929 [ 314.356187][T11386] RDX: 0000000004000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 314.356204][T11386] RBP: 00007f06aaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 314.356221][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.356237][T11386] R13: 0000000000000000 R14: 00007f06a9db5fa0 R15: 00007fffc35c4478 [ 314.356275][T11386] [ 314.374495][ T5889] usb 1-1: USB disconnect, device number 44 [ 314.628507][T11390] program syz.3.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.780903][ T5839] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 314.822243][T11394] FAULT_INJECTION: forcing a failure. [ 314.822243][T11394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.828197][ T5839] usb 3-1: device descriptor read/8, error -71 [ 314.851967][T11394] CPU: 0 UID: 0 PID: 11394 Comm: syz.1.2034 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 314.852000][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.852015][T11394] Call Trace: [ 314.852025][T11394] [ 314.852034][T11394] dump_stack_lvl+0x189/0x250 [ 314.852066][T11394] ? __pfx____ratelimit+0x10/0x10 [ 314.852090][T11394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.852115][T11394] ? __pfx__printk+0x10/0x10 [ 314.852154][T11394] should_fail_ex+0x414/0x560 [ 314.852196][T11394] _copy_to_user+0x31/0xb0 [ 314.852229][T11394] simple_read_from_buffer+0xe1/0x170 [ 314.852262][T11394] proc_fail_nth_read+0x1df/0x250 [ 314.852298][T11394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.852334][T11394] ? rw_verify_area+0x258/0x650 [ 314.852357][T11394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.852390][T11394] vfs_read+0x200/0x980 [ 314.852420][T11394] ? __pfx___mutex_lock+0x10/0x10 [ 314.852447][T11394] ? __pfx_vfs_read+0x10/0x10 [ 314.852473][T11394] ? __fget_files+0x2a/0x420 [ 314.852507][T11394] ? __fget_files+0x3a0/0x420 [ 314.852534][T11394] ? __fget_files+0x2a/0x420 [ 314.852573][T11394] ksys_read+0x145/0x250 [ 314.852600][T11394] ? __pfx_ksys_read+0x10/0x10 [ 314.852621][T11394] ? rcu_is_watching+0x15/0xb0 [ 314.852651][T11394] ? do_syscall_64+0xbe/0x3b0 [ 314.852681][T11394] do_syscall_64+0xfa/0x3b0 [ 314.852705][T11394] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.852736][T11394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.852759][T11394] ? clear_bhb_loop+0x60/0xb0 [ 314.852786][T11394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.852808][T11394] RIP: 0033:0x7f6a9178d33c [ 314.852828][T11394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 314.852849][T11394] RSP: 002b:00007f6a926b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.852873][T11394] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178d33c [ 314.852891][T11394] RDX: 000000000000000f RSI: 00007f6a926b80a0 RDI: 0000000000000006 [ 314.852906][T11394] RBP: 00007f6a926b8090 R08: 0000000000000000 R09: 0000000000000000 [ 314.852921][T11394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.852935][T11394] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 314.852969][T11394] [ 315.257830][ T5839] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 315.335824][ T5839] usb 3-1: device descriptor read/8, error -71 [ 315.475156][ T5839] usb usb3-port1: unable to enumerate USB device [ 315.841891][T11420] netlink: 'syz.1.2045': attribute type 6 has an invalid length. [ 316.290537][ T5889] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 316.469332][ T5889] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 316.499751][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.529767][ T5889] usb 4-1: config 0 descriptor?? [ 317.299783][T11460] syzkaller1: entered promiscuous mode [ 317.305342][T11460] syzkaller1: entered allmulticast mode [ 317.330401][T11460] FAULT_INJECTION: forcing a failure. [ 317.330401][T11460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.380125][T11460] CPU: 0 UID: 0 PID: 11460 Comm: syz.1.2060 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 317.380163][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.380178][T11460] Call Trace: [ 317.380188][T11460] [ 317.380199][T11460] dump_stack_lvl+0x189/0x250 [ 317.380229][T11460] ? __pfx____ratelimit+0x10/0x10 [ 317.380254][T11460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.380279][T11460] ? __pfx__printk+0x10/0x10 [ 317.380305][T11460] ? __might_fault+0xb0/0x130 [ 317.380339][T11460] should_fail_ex+0x414/0x560 [ 317.380379][T11460] _copy_from_iter+0x1db/0x16f0 [ 317.380425][T11460] ? __pfx__copy_from_iter+0x10/0x10 [ 317.380454][T11460] ? sock_alloc_send_pskb+0x875/0x990 [ 317.380494][T11460] ? __pfx__copy_from_iter+0x10/0x10 [ 317.380528][T11460] ? page_copy_sane+0x16a/0x280 [ 317.380562][T11460] copy_page_from_iter+0xdd/0x170 [ 317.380601][T11460] skb_copy_datagram_from_iter+0x306/0x720 [ 317.380650][T11460] tun_get_user+0x15c3/0x3ce0 [ 317.380693][T11460] ? aa_file_perm+0x13e/0x11b0 [ 317.380724][T11460] ? aa_file_perm+0x13e/0x11b0 [ 317.380753][T11460] ? aa_file_perm+0x3ed/0x11b0 [ 317.380785][T11460] ? __pfx_tun_get_user+0x10/0x10 [ 317.380826][T11460] ? __lock_acquire+0xab9/0xd20 [ 317.380867][T11460] ? ref_tracker_alloc+0x318/0x460 [ 317.380889][T11460] ? __lock_acquire+0xab9/0xd20 [ 317.380924][T11460] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 317.380953][T11460] ? tun_get+0x1c/0x2f0 [ 317.380988][T11460] ? tun_get+0x1c/0x2f0 [ 317.381017][T11460] ? tun_get+0x1c/0x2f0 [ 317.381060][T11460] tun_chr_write_iter+0x113/0x200 [ 317.381096][T11460] vfs_write+0x548/0xa90 [ 317.381126][T11460] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 317.381158][T11460] ? __pfx_vfs_write+0x10/0x10 [ 317.381194][T11460] ? __fget_files+0x2a/0x420 [ 317.381233][T11460] ksys_write+0x145/0x250 [ 317.381261][T11460] ? __pfx_ksys_write+0x10/0x10 [ 317.381283][T11460] ? rcu_is_watching+0x15/0xb0 [ 317.381309][T11460] ? do_syscall_64+0xbe/0x3b0 [ 317.381339][T11460] do_syscall_64+0xfa/0x3b0 [ 317.381365][T11460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.381385][T11460] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.381408][T11460] ? clear_bhb_loop+0x60/0xb0 [ 317.381434][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.381454][T11460] RIP: 0033:0x7f6a9178e929 [ 317.381474][T11460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.381492][T11460] RSP: 002b:00007f6a926b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.381515][T11460] RAX: ffffffffffffffda RBX: 00007f6a919b5fa0 RCX: 00007f6a9178e929 [ 317.381530][T11460] RDX: 000000000000ffbf RSI: 00002000000000c0 RDI: 0000000000000004 [ 317.381545][T11460] RBP: 00007f6a926b8090 R08: 0000000000000000 R09: 0000000000000000 [ 317.381558][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.381572][T11460] R13: 0000000000000000 R14: 00007f6a919b5fa0 R15: 00007fffe4377768 [ 317.381606][T11460] [ 317.426569][T11462] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2061'. [ 317.853017][T11468] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 317.861239][T11468] VFS: Can't find a romfs filesystem on dev rnullb0. [ 317.861239][T11468] [ 317.917411][ T5922] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 318.017332][ T121] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 318.080545][ T5922] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 318.097359][ T5922] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 318.117512][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.126865][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.138952][ T5922] usb 1-1: SerialNumber: syz [ 318.153456][T11463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 318.177768][ T121] usb 3-1: Using ep0 maxpacket: 8 [ 318.212327][ T121] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 318.227484][ T121] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 318.235738][ T121] usb 3-1: Product: syz [ 318.242241][ T121] usb 3-1: Manufacturer: syz [ 318.246889][ T121] usb 3-1: SerialNumber: syz [ 318.260488][ T121] usb 3-1: config 0 descriptor?? [ 318.375150][T11462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 318.474852][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 318.581578][ T121] usb 3-1: USB disconnect, device number 54 [ 318.682546][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.776601][ T5889] pegasus 4-1:0.0: setup Pegasus II specific registers [ 318.800267][ T5922] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 318.815487][T11480] netlink: 6308 bytes leftover after parsing attributes in process `syz.1.2068'. [ 318.989361][ T30] audit: type=1326 audit(1750885261.826:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 319.032569][ T30] audit: type=1326 audit(1750885261.826:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a9b8e929 code=0x7ffc0000 [ 319.100170][ T5889] pegasus 4-1:0.0: can't locate MII phy, using default [ 319.127081][ T5889] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, d6:4e:94:2e:01:1a [ 319.172314][ T5889] usb 4-1: USB disconnect, device number 50 [ 319.550687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 319.698253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 319.772424][ T5836] usb 1-1: USB disconnect, device number 45 [ 319.792216][ T5836] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 320.737819][ T5836] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 320.887463][ T121] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 320.897736][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 320.916585][ T5836] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 320.934083][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.947498][ T5839] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 320.972270][ T5836] usb 1-1: config 0 has no interface number 0 [ 320.998394][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 321.013370][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.031114][ T5836] usb 1-1: Product: syz [ 321.035346][ T5836] usb 1-1: Manufacturer: syz [ 321.060204][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 321.068238][ T5836] usb 1-1: SerialNumber: syz [ 321.076794][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.107153][ T5836] usb 1-1: config 0 descriptor?? [ 321.119625][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.132518][ T121] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 321.144046][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.157441][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.157589][ T5839] usb 3-1: config 16 has an invalid interface number: 195 but max is 0 [ 321.178412][ T121] usb 4-1: config 0 descriptor?? [ 321.190909][ T5839] usb 3-1: config 16 has no interface number 0 [ 321.202194][ T5839] usb 3-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 321.213694][ T5839] usb 3-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 321.224263][ T5839] usb 3-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 321.241885][ T5839] usb 3-1: config 16 interface 195 has no altsetting 0 [ 321.252116][ T5839] usb 3-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 321.266543][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.276001][ T5839] usb 3-1: Product: syz [ 321.283222][ T5839] usb 3-1: Manufacturer: syz [ 321.289348][ T5839] usb 3-1: SerialNumber: syz [ 321.319262][T11537] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 321.326768][T11537] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 321.350282][ T5836] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 321.356824][ T5836] usb 1-1: No valid video chain found. [ 321.559083][ T5839] usb 3-1: bad CDC descriptors [ 321.597048][ T5922] usb 1-1: USB disconnect, device number 46 [ 321.597070][ T121] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 321.625963][ T5839] usb 3-1: USB disconnect, device number 55 [ 321.691439][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 321.700513][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 321.709998][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 321.722779][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 321.732692][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 321.792713][ T121] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 321.993457][ T121] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 322.258131][T11562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.285806][T11562] efs: device does not support 512 byte blocks [ 322.295504][T11562] device does not support 512 byte blocks [ 322.295504][T11562] [ 322.314074][T11568] syzkaller1: entered promiscuous mode [ 322.321653][T11568] syzkaller1: entered allmulticast mode [ 322.425150][ T121] ft260 0003:0403:6030.000B: failed to retrieve status: -71 [ 322.434517][ T121] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71 [ 322.452323][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.458978][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.484409][ T121] usb 4-1: USB disconnect, device number 51 [ 322.522782][T11570] FAULT_INJECTION: forcing a failure. [ 322.522782][T11570] name failslab, interval 1, probability 0, space 0, times 0 [ 322.542437][T11570] CPU: 1 UID: 0 PID: 11570 Comm: syz.0.2089 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 322.542471][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.542486][T11570] Call Trace: [ 322.542496][T11570] [ 322.542507][T11570] dump_stack_lvl+0x189/0x250 [ 322.542537][T11570] ? __pfx____ratelimit+0x10/0x10 [ 322.542562][T11570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.542588][T11570] ? __pfx__printk+0x10/0x10 [ 322.542619][T11570] ? __lock_acquire+0xab9/0xd20 [ 322.542661][T11570] should_fail_ex+0x414/0x560 [ 322.542702][T11570] should_failslab+0xa8/0x100 [ 322.542730][T11570] __kmalloc_cache_noprof+0x70/0x3d0 [ 322.542753][T11570] ? netlbl_unlhsh_add+0x449/0x1280 [ 322.542788][T11570] netlbl_unlhsh_add+0x449/0x1280 [ 322.542831][T11570] ? netlbl_unlhsh_add+0xdc/0x1280 [ 322.542863][T11570] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 322.542892][T11570] ? apparmor_secctx_to_secid+0x98/0x110 [ 322.542929][T11570] netlbl_unlabel_staticadddef+0x52a/0x680 [ 322.542966][T11570] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 322.543006][T11570] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 322.543051][T11570] genl_family_rcv_msg_doit+0x212/0x300 [ 322.543092][T11570] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 322.543139][T11570] ? bpf_lsm_capable+0x9/0x20 [ 322.543161][T11570] ? security_capable+0x7e/0x2e0 [ 322.543193][T11570] genl_rcv_msg+0x60e/0x790 [ 322.543234][T11570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.543267][T11570] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 322.543315][T11570] netlink_rcv_skb+0x208/0x470 [ 322.543343][T11570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.543378][T11570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.543429][T11570] ? down_read+0x1ad/0x2e0 [ 322.543462][T11570] genl_rcv+0x28/0x40 [ 322.543491][T11570] netlink_unicast+0x75b/0x8d0 [ 322.543528][T11570] netlink_sendmsg+0x805/0xb30 [ 322.543565][T11570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.543598][T11570] ? aa_sock_msg_perm+0xf1/0x1d0 [ 322.543626][T11570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.543654][T11570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.543680][T11570] __sock_sendmsg+0x219/0x270 [ 322.543708][T11570] ____sys_sendmsg+0x505/0x830 [ 322.543736][T11570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.543766][T11570] ? import_iovec+0x74/0xa0 [ 322.543784][T11570] ___sys_sendmsg+0x21f/0x2a0 [ 322.543817][T11570] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.543868][T11570] ? __fget_files+0x2a/0x420 [ 322.543888][T11570] ? __fget_files+0x3a0/0x420 [ 322.543917][T11570] __x64_sys_sendmsg+0x19b/0x260 [ 322.543942][T11570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.543973][T11570] ? __pfx_ksys_write+0x10/0x10 [ 322.543988][T11570] ? rcu_is_watching+0x15/0xb0 [ 322.544009][T11570] ? do_syscall_64+0xbe/0x3b0 [ 322.544030][T11570] do_syscall_64+0xfa/0x3b0 [ 322.544047][T11570] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.544064][T11570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.544079][T11570] ? clear_bhb_loop+0x60/0xb0 [ 322.544099][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.544114][T11570] RIP: 0033:0x7fd157f8e929 [ 322.544129][T11570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.544144][T11570] RSP: 002b:00007fd158e90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.544161][T11570] RAX: ffffffffffffffda RBX: 00007fd1581b5fa0 RCX: 00007fd157f8e929 [ 322.544173][T11570] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 322.544184][T11570] RBP: 00007fd158e90090 R08: 0000000000000000 R09: 0000000000000000 [ 322.544194][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.544203][T11570] R13: 0000000000000000 R14: 00007fd1581b5fa0 R15: 00007ffd3ec95768 [ 322.544227][T11570] [ 323.402093][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2095'. [ 323.619045][T11590] Bluetooth: hci4: Frame reassembly failed (-84) [ 323.669836][T11596] vxfs: WRONG superblock magic 00000000 at 1 [ 323.675903][T11596] vxfs: WRONG superblock magic 00000000 at 8 [ 323.694450][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2097'. [ 323.718250][T11596] vxfs: can't find superblock. [ 323.917618][ T5922] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 324.091123][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 324.110940][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.120547][ T5922] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 324.134541][ T5922] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 324.144108][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.152263][ T5922] usb 1-1: Product: syz [ 324.156637][ T5922] usb 1-1: Manufacturer: syz [ 324.161998][ T5922] usb 1-1: SerialNumber: syz [ 324.380825][ T5922] usb 1-1: Invalid number of CPorts: 0 [ 324.391955][ T5922] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 324.587477][ T5889] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 324.620955][ T5922] usb 1-1: USB disconnect, device number 47 [ 324.777453][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 324.784422][ T5889] usb 3-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 324.794864][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.803884][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 324.812072][T11639] 9pnet_fd: Insufficient options for proto=fd [ 324.818212][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24681, setting to 1024 [ 324.833327][ T5889] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 324.842568][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.859711][ T5889] hub 3-1:1.0: bad descriptor, ignoring hub [ 324.865826][ T5889] hub 3-1:1.0: probe with driver hub failed with error -5 [ 324.878143][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 324.883410][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 324.892636][ T5889] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 324.897988][ T121] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 324.899983][ T5889] cdc_wdm 3-1:1.0: Unknown control protocol [ 325.062984][ T121] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 325.072600][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.093497][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 325.094823][ T121] usb 2-1: config 0 descriptor?? [ 325.639042][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 325.977576][ T10] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 326.142067][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 326.154380][ T10] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.169958][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 326.179609][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.191906][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.202523][ T10] usb 4-1: Product: syz [ 326.206741][ T10] usb 4-1: Manufacturer: syz [ 326.216179][ T10] usb 4-1: SerialNumber: syz [ 326.232616][T11643] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 326.444633][ T1144] ------------[ cut here ]------------ [ 326.450669][ T1144] WARNING: net/ipv6/ip6mr.c:2376 at ip6_mr_output+0xe0b/0x1040, CPU#1: kworker/u8:5/1144 [ 326.460613][ T1144] Modules linked in: [ 326.464914][ T1144] CPU: 1 UID: 0 PID: 1144 Comm: kworker/u8:5 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 326.476642][ T1144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.486786][ T1144] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 326.493832][ T1144] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 326.499400][ T1144] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 60 19 1b ff e9 a7 fd ff ff e8 06 a0 86 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 f8 9f 86 f7 90 0f 0b 90 43 80 3c 2e 00 [ 326.519102][ T1144] RSP: 0018:ffffc900044a73e0 EFLAGS: 00010293 [ 326.525212][ T1144] RAX: ffffffff8a396c7a RBX: 0000000000000000 RCX: ffff888026fd3c00 [ 326.533281][ T1144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.541341][ T1144] RBP: ffffc900044a7658 R08: ffffc900044a75c7 R09: 0000000000000000 [ 326.549414][ T1144] R10: ffffc900044a7570 R11: fffff52000894eb9 R12: 1ffff92000894e8c [ 326.550490][T11649] netlink: 'syz.0.2120': attribute type 44 has an invalid length. [ 326.557474][ T1144] R13: dffffc0000000000 R14: ffffc900044a7570 R15: ffff888050ab18c0 [ 326.557546][ T1144] FS: 0000000000000000(0000) GS:ffff888125ae9000(0000) knlGS:0000000000000000 [ 326.557569][ T1144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.557586][ T1144] CR2: 00007fd157f743e0 CR3: 00000000780b2000 CR4: 00000000003526f0 [ 326.557608][ T1144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 326.557625][ T1144] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 326.557642][ T1144] Call Trace: [ 326.557653][ T1144] [ 326.557665][ T1144] ? __pfx_ip6t_do_table+0x10/0x10 [ 326.557713][ T1144] ? __pfx_ip6_mr_output+0x10/0x10 [ 326.557752][ T1144] ? __ip6_local_out+0x609/0x870 [ 326.557784][ T1144] ? __ip6_local_out+0x82c/0x870 [ 326.557807][ T1144] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 326.557840][ T1144] ? __ip6_local_out+0x609/0x870 [ 326.557877][ T1144] ? __lock_acquire+0xab9/0xd20 [ 326.557913][ T1144] ? udp6_set_csum+0x995/0xee0 [ 326.557935][ T1144] ? skb_dst+0x4f/0xd0 [ 326.557961][ T1144] ? dst_output+0x177/0x1c0 [ 326.557990][ T1144] udp_tunnel6_xmit_skb+0x640/0xad0 [ 326.558037][ T1144] send6+0x5ac/0x8d0 [ 326.558078][ T1144] ? send6+0x220/0x8d0 [ 326.558117][ T1144] ? __pfx_send6+0x10/0x10 [ 326.558161][ T1144] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 326.558204][ T1144] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 326.558243][ T1144] wg_packet_handshake_send_worker+0x1db/0x320 [ 326.558279][ T1144] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 326.713179][ T1144] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.713219][ T1144] ? process_scheduled_works+0x9ef/0x17b0 [ 326.713257][ T1144] ? process_scheduled_works+0x9ef/0x17b0 [ 326.713296][ T1144] process_scheduled_works+0xade/0x17b0 [ 326.713367][ T1144] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.713436][ T1144] worker_thread+0x8a0/0xda0 [ 326.713492][ T1144] kthread+0x711/0x8a0 [ 326.713523][ T1144] ? __pfx_worker_thread+0x10/0x10 [ 326.713547][ T1144] ? __pfx_kthread+0x10/0x10 [ 326.713577][ T1144] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.765636][ T1144] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.765672][ T1144] ? __pfx_kthread+0x10/0x10 [ 326.765706][ T1144] ret_from_fork+0x3fc/0x770 [ 326.765733][ T1144] ? __pfx_ret_from_fork+0x10/0x10 [ 326.784360][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 326.785557][ T1144] ? __switch_to_asm+0x39/0x70 [ 326.785594][ T1144] ? __switch_to_asm+0x33/0x70 [ 326.803504][ T1144] ? __pfx_kthread+0x10/0x10 [ 326.808276][ T1144] ret_from_fork_asm+0x1a/0x30 [ 326.813117][ T1144] [ 326.816179][ T1144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 326.823491][ T1144] CPU: 1 UID: 0 PID: 1144 Comm: kworker/u8:5 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 326.835157][ T1144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.845248][ T1144] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 326.852229][ T1144] Call Trace: [ 326.855555][ T1144] [ 326.858538][ T1144] dump_stack_lvl+0x99/0x250 [ 326.863188][ T1144] ? __asan_memcpy+0x40/0x70 [ 326.867852][ T1144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.873118][ T1144] ? __pfx__printk+0x10/0x10 [ 326.877776][ T1144] panic+0x2db/0x790 [ 326.881822][ T1144] ? __pfx_panic+0x10/0x10 [ 326.886316][ T1144] ? ret_from_fork_asm+0x1a/0x30 [ 326.891322][ T1144] __warn+0x334/0x4c0 [ 326.895352][ T1144] ? ip6_mr_output+0xe0b/0x1040 [ 326.900273][ T1144] ? ip6_mr_output+0xe0b/0x1040 [ 326.905174][ T1144] report_bug+0x2be/0x4f0 [ 326.909527][ T1144] ? ip6_mr_output+0xe0b/0x1040 [ 326.914424][ T1144] ? ip6_mr_output+0xe0b/0x1040 [ 326.919570][ T1144] ? ip6_mr_output+0xe0d/0x1040 [ 326.924454][ T1144] handle_bug+0x84/0x160 [ 326.928719][ T1144] exc_invalid_op+0x1a/0x50 [ 326.933238][ T1144] asm_exc_invalid_op+0x1a/0x20 [ 326.938101][ T1144] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 326.943582][ T1144] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 60 19 1b ff e9 a7 fd ff ff e8 06 a0 86 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 f8 9f 86 f7 90 0f 0b 90 43 80 3c 2e 00 [ 326.963228][ T1144] RSP: 0018:ffffc900044a73e0 EFLAGS: 00010293 [ 326.969319][ T1144] RAX: ffffffff8a396c7a RBX: 0000000000000000 RCX: ffff888026fd3c00 [ 326.977302][ T1144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.985370][ T1144] RBP: ffffc900044a7658 R08: ffffc900044a75c7 R09: 0000000000000000 [ 326.993370][ T1144] R10: ffffc900044a7570 R11: fffff52000894eb9 R12: 1ffff92000894e8c [ 327.001459][ T1144] R13: dffffc0000000000 R14: ffffc900044a7570 R15: ffff888050ab18c0 [ 327.009462][ T1144] ? ip6_mr_output+0xe0a/0x1040 [ 327.014341][ T1144] ? __pfx_ip6t_do_table+0x10/0x10 [ 327.019475][ T1144] ? __pfx_ip6_mr_output+0x10/0x10 [ 327.024604][ T1144] ? __ip6_local_out+0x609/0x870 [ 327.029557][ T1144] ? __ip6_local_out+0x82c/0x870 [ 327.034503][ T1144] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 327.039887][ T1144] ? __ip6_local_out+0x609/0x870 [ 327.044836][ T1144] ? __lock_acquire+0xab9/0xd20 [ 327.049709][ T1144] ? udp6_set_csum+0x995/0xee0 [ 327.054474][ T1144] ? skb_dst+0x4f/0xd0 [ 327.058567][ T1144] ? dst_output+0x177/0x1c0 [ 327.063085][ T1144] udp_tunnel6_xmit_skb+0x640/0xad0 [ 327.068307][ T1144] send6+0x5ac/0x8d0 [ 327.072225][ T1144] ? send6+0x220/0x8d0 [ 327.076311][ T1144] ? __pfx_send6+0x10/0x10 [ 327.080746][ T1144] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 327.086932][ T1144] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 327.092671][ T1144] wg_packet_handshake_send_worker+0x1db/0x320 [ 327.098843][ T1144] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 327.105547][ T1144] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.110751][ T1144] ? process_scheduled_works+0x9ef/0x17b0 [ 327.116486][ T1144] ? process_scheduled_works+0x9ef/0x17b0 [ 327.122223][ T1144] process_scheduled_works+0xade/0x17b0 [ 327.127813][ T1144] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.133826][ T1144] worker_thread+0x8a0/0xda0 [ 327.138451][ T1144] kthread+0x711/0x8a0 [ 327.142535][ T1144] ? __pfx_worker_thread+0x10/0x10 [ 327.147651][ T1144] ? __pfx_kthread+0x10/0x10 [ 327.152252][ T1144] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.157475][ T1144] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.162680][ T1144] ? __pfx_kthread+0x10/0x10 [ 327.167293][ T1144] ret_from_fork+0x3fc/0x770 [ 327.171904][ T1144] ? __pfx_ret_from_fork+0x10/0x10 [ 327.177026][ T1144] ? __switch_to_asm+0x39/0x70 [ 327.181799][ T1144] ? __switch_to_asm+0x33/0x70 [ 327.186578][ T1144] ? __pfx_kthread+0x10/0x10 [ 327.191183][ T1144] ret_from_fork_asm+0x1a/0x30 [ 327.195982][ T1144] [ 327.199313][ T1144] Kernel Offset: disabled [ 327.203641][ T1144] Rebooting in 86400 seconds..