last executing test programs: 11.727155783s ago: executing program 0 (id=3323): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) close(r1) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1e3ef2, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x3000002, 0x12, r1, 0x0) 11.457155248s ago: executing program 0 (id=3327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x50, {"0f01cbb8010000000f01c1c4827d79247bc401f9d5d6d0f30f01c566baf80cb8700bf48def66bafc0cb80e000000ef0f0866b819010f00d0c4e1815944b209"}}], 0x98}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.420329135s ago: executing program 0 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 9.313657948s ago: executing program 0 (id=3343): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0x4e22, 0xbe1, @remote, 0x3f}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x80, 0x8, 0xbfd, 0x8, 0x0, 0x75a1, 0x0}) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x4000c000) 8.670176507s ago: executing program 0 (id=3344): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x822, 0x5, 0x1}) 7.38931609s ago: executing program 2 (id=3346): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 7.346026398s ago: executing program 2 (id=3347): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req={0x101, 0x7, 0x0, 0xfffffff0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffc, 0x8000, 0x0, 0x5, 0x2, 0x3}, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x100000000005, 0x3, 0x5, 0x2000000000}, 0x0, 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5, 0x1000}], 0x1, 0x0, &(0x7f0000000200)={[0x8001a0efffffff]}, 0x8) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) io_uring_setup(0x2891, &(0x7f0000000500)={0x0, 0x7, 0x2000, 0x3, 0x22b}) tkill(r3, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6.561034984s ago: executing program 3 (id=3349): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d7401097307733960000000109021200010000"], 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000000}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 6.54737092s ago: executing program 1 (id=3350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2, 0x0, 0x0, 0xa0000000}, 0x20) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000880) 6.472576494s ago: executing program 2 (id=3351): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffe, 0x0, 0xffdfffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x1e, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) writev(r4, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000200)="e84acff97e", 0x5}], 0x2) syz_open_dev$cec(0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r6 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x2000) r9 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x1) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x20, r10, 0x1, 0x25, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41081}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 6.425373798s ago: executing program 1 (id=3352): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000200000000000000000000000850000008000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 6.321434128s ago: executing program 1 (id=3353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000100)=""/164, &(0x7f0000000080)=0xa4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0xb05a27783621dc14, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000340)='\x00\x00\x00\x00', 0x0, r3) connect(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010100}, 0xffffffffffffff79) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010", @ANYRESHEX], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="e6fb05f921c8efab6bd4b1114ea2c818940300afb204f48f1e38632d9fcde3b47a9fd36990fc2af138c6122c8c00036beab0dcb02d431bc24767a9895f0e2c11a2b9194d74453f0e14452500ea199dae8d682821fb3ded7584ab29cd1d77d34a5ff49486609b6300100000fafea27b1116f3a3ce3257b50e7646ce3f6c8c7321cbc2a88927b0a1c6e3b7197af0f35172aa0b441b179a21f07899189983f0d684afa00c600fc10abbf22f9719615e25deb9bf843de18fca", 0xb7}, {&(0x7f0000000500)="9b138f67bdd8158107781adfd6310aa329650937eb43cf15c7c5517f79123c6baf6e488ac769c5526b38246da16539c6e195f9d9ced594b663689b835410c1f9a7c96d52cbfbe905b291c938949cfad363d5a9a3e0393a41c87d903373125e3ffabd2baffb9d0b5ab8933939d9fb7b45d7b37e5a71a6c89c399bf28c7b56717a05fe66de1bd481459ad2148f79f16758d6109f2ab58d359ae9494234d5bd67fb942f65eaf13f4b0860e89bc1107d3c1a190110068691840438585b588b5d95698b99dc66b966", 0xc6}, {&(0x7f0000000600)="e529c8bab8b263e95d117a6ae6c4201310750ef0e67d092c5ce0c5929a60c3eb4e3033d2467ea01282f97bd1bacbe114325dd093dbe3c2f293a29da24c49782172e01e6cd3677537b7aed3e7e16234f77fcf953496b3d3a2272e72f3506fdcb3b5ea5ac7448dff66ab8757e1799940df2d617d36bf1b49db1bffd99eecf92923047fc5483bcd7c2d2eba9e681165c3f8823565b27a4af04257a45d5d1ee9ab1c", 0xa0}, {&(0x7f00000006c0)="4ed4262d1b52166c64ae0732527a65e16b6fb71a6479c9e7f80559741fd84186e7c5568bf831e0ec45bc67f78016094c8f0fe0814b0545d8e18c8d3a940a1231df4191190ce2d22d03863518b713ed90512fb59f48b9cef4bb0030586dc9548649c324a7951799dfd2a3179c97cd28448a011f5ced496c3d8c0da0dd6d8756b41c042ba20a17757e741f0389e4e78b1da856f2a86d30", 0x96}, {&(0x7f0000000780)="30ae606875cec18c4c6a07bdf0361daeb840ed4753c9952ce31935b5d87e918b015b522749f27aa179b1cb6ec818a70b0beaf2bc8a399a6f3aa59dc0716779877892fa9e050c1b3cbbfdfcd8a566980bbc9641d4b791fdc55b01688fbd9678777d936d3c12610c97bd1e73554c8e8fa12c33b1706e043ba98a40d69b64dcded62a00736a77e80746a43598af5d5298bd8cbbbdddba5c9597a9bffe546583abe82fc21989494e9de98ae24356f5a825121bcd56b8253e86443d808cd73791cdca0ee0edacf04c", 0xc6}], 0x5}}], 0x1, 0xf00) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x20000}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.601968567s ago: executing program 0 (id=3354): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0x4e22, 0xbe1, @remote, 0x3f}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x80, 0x8, 0xbfd, 0x8, 0x0, 0x75a1, 0x0}) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="82", 0x1}], 0x1}}], 0x1, 0x4000c000) 3.466671578s ago: executing program 3 (id=3360): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000340)={0x18, 0x2, 0x0, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="92010000100013077d00000000000000000000f817059d4900000000000000000000000000000000000000000000010000000000040000000040", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000002000000960000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000f5d3003900000008ec0300cf79942ca1c2c4dd15841f4722a7b0587870e39ad7a94f210a86132d77c0c3e000000000010000006492c6fe75bffcd9f73e43a7e3572343cf40a14175dbd963a85bd77d6742b037557496ac87f11d3796a0926f9253b8370210dc07d6c0bb7d6a2dd1ec2e26a50c0481205fc42ace14ff930b0cdaa71d20b29a9688ce474ce1d1c42eb192e97026efcee16b9ff4dc50bfc29beccb234de77c9719435140c9d4a46163fb", @ANYRES32=r8, @ANYBLOB="14005a800c000080050007000200000004000280"], 0x30}}, 0x0) 3.345847032s ago: executing program 3 (id=3361): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b695239c08196411731fab0a53dff72d3b912a4c8c8ae6bfe7c7a41b2224bd9057314eaecc8b5ef1615c4de085d09dc96aa6f36060732826c0e3e473c0a25e7e2d0aa543b3ca73575cff431fef8c6e67a630e54ba2c6caae10cf00ad0b0ae4dad4bf1d7ae18a88a6d2708cba894deb38669e18ec5818acb3a51f7e2a773e1cdc22399f34a95753795c5acd9531caf27ffb707b980cc4cf895a2b45afc19e37628e2e41c6a13cf268f44b474eb1dfa40a3e94ae0bd61d4630f0cb71aeb4291d35a4ece94df5", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a80)="300c9fd7cbdc2b2f", 0x8}, {&(0x7f0000000b00)="06cedc4940a621666d04c16c7bc82365a6c30f93012a61487c83f039ffe6e1f06f7b3e966de5ebb9c5f7619c3550cb59fb7880b62ef411bdf76f9fe495b036d68a34f5962b6540b7e38cd9d93e52a809c1aae88fe7214723ea2631f776ea5d951164aaf876", 0x65}, {&(0x7f00000000c0)="189c7dcac838fa83dd6f62c025a959fd53f5bf2e9e039800a30c55bed4cc9fe77d0f6fef1aeb93d9f51ec878ed6aa6ea5492bfd9a562ae3530c4c4fef10f8ab089da9677d8ba1781bdfb5046c7e5cabff142c26e09ecc2b9", 0x58}, {&(0x7f00000001c0)="a802bb6415fc5c94736515e81fe08d8096d632d004b117cd4c9a621b4c9785817a386dc00bec0b0b524e2c6082e943bd5e64f3e0e9e2bc1095620a1b4e4ee99a3be1b479d0453e0c8bb32c68443444bdd8507f4ff0955d7ff8c3d73c1fdebf5ce59c29d05611273ef87a4e2d43e5ad7c172d3d1facc39af6052371089f03dbfd34ac9f8e2c5f8277d7fa38e02d05babb586b5e629b00a82b856668f7e8", 0x9d}, {&(0x7f00000003c0)="2fcf77db968406c715eab22b48accda40859a7a624cc9cc29af5235f92706df98ed9f079a6d783a8774c31f34cb6a5e97817", 0x32}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f00000005c0)="5dfd88a30cb8fbcc3b6a4c8873d1dea423622f2139860a15c87426b5dc6e251ce529ca6c11d2caaa43903f693cb69ab657d1e959f950d882632229d9aa759473a6fd495435263662a0fd1f18c3ecbf68167249805cb19d71f15a92b159fce9c256d108ea7c0298a21df7b02cc3cfa64228000fcffb6e6faa7b1c2a03585cf45caf17ab4af849ff33853ffbeff9b7ca8d42c2c3541dbd", 0x96}, {&(0x7f0000000700)="82b94e67283c3a7b43b230116f32f6f958c7d7a807c1cff22c2db317c06475bf9b9d21273f82a716bdd421269e2aee4c530eea464998e90a30922d54adf43998464b0a96000000", 0x47}], 0x8}}], 0x2, 0xc0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x74, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff801}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc110}, 0x8000) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.253696371s ago: executing program 2 (id=3362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x10000, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b5000040"]) 3.189255799s ago: executing program 1 (id=3363): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6e) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="ff071d6ce89d9666", 0x8}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x8, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getneigh={0x28, 0x1e, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10c1, 0x2802}, [@IFLA_NUM_RX_QUEUES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000001140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x6, @local, 0x268f}]}, &(0x7f0000001240)=0x10) sendmsg$AUDIT_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.102053283s ago: executing program 2 (id=3364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x822, 0x5, 0x1}) 2.085586293s ago: executing program 1 (id=3365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0xffff, 0xeeee0000, 0x1, r2, 0x8}) close(0x4) 1.997465987s ago: executing program 1 (id=3366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x4, {0x4, 0x11, "0aaf"}}, &(0x7f00000004c0)={0x0, 0x3, 0x59, @string={0x59, 0x3, "45e19526f709b9f87927c53b8f5c7149225d45c27df3cefa85d341497ee141d3ea9d271e179f9eb751c630ccb035bddcedf4eb542fe7b8e6cc459dcdc72824975c25bbda68b64d9f06959aab5b287991ff11a37c78db61"}}, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x2, "b7e5b9ca"}, @global=@item_4={0x3, 0x1, 0xb, "500de2f0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x7ea}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="400f5f00000008a8f3368b865cb303fa84155ecf76eb8dee1353751b2a02af2377ec3e198e44871e17732fdc3f740904b04252e7709595055bd75793ef76467d96589af79c8dc258fdd8d55a3687f1a6276925d5d40af70c594a99934ce0b87bc8b38d579f8a1d70df4b"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x39}, &(0x7f00000002c0)={0x20, 0x1, 0xc2, "50b73b88f1741f94c44e7fe660ddb024478a0cd735304d853ebd14c2a2a3ddb9b2cf7337174a404a7c5f47f2c5bae73a0c2368a4f0b4f7513da9198925fb9862d736814252a9cfb501a01c52f0580cda649699abb9d550cafba57fdc2d4ba2fd92d832e9843e699ea613d2ae3bfbc384a20fef1d5b1f8b8a80f5d49f57d24a21c73d85888f3bc3590c93d77d2252a54518ec091dd9abc5598e1201fa50880a17aa8bcd26715541118a746140c511e9853896b2ef0da3d5fac06e89f91dbb8cd21a22"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6}}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 1.511521243s ago: executing program 4 (id=3369): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x75}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.472652983s ago: executing program 4 (id=3370): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000009c0)={0x1, 0x0, [{0x345, 0x0, 0x6680}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000690000000000000048b8c8000000000000000f23d00f21f835102000080f23f8b9d00a"], 0x156}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.298584551s ago: executing program 4 (id=3371): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000340)={0x18, 0x2, 0x0, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="92010000100013077d00000000000000000000f817059d4900000000000000000000000000000000000000000000010000000000040000000040", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000002000000960000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000f5d3003900000008ec0300cf79942ca1c2c4dd15841f4722a7b0587870e39ad7a94f210a86132d77c0c3e000000000010000006492c6fe75bffcd9f73e43a7e3572343cf40a14175dbd963a85bd77d6742b037557496ac87f11d3796a0926f9253b8370210dc07d6c0bb7d6a2dd1ec2e26a50c0481205fc42ace14ff930b0cdaa71d20b29a9688ce474ce1d1c42eb192e97026efcee16b9ff4dc50bfc29beccb234de77c9719435140c9d4a46163fb", @ANYRES32=r8, @ANYBLOB="14005a800c000080050007000200000004000280"], 0x30}}, 0x0) 1.207107732s ago: executing program 4 (id=3372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x24000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xa}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @void, @val={0xc, 0x99, {0x5, 0x58}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c005}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 293.559329ms ago: executing program 4 (id=3373): add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x10200300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000180)=@ax25={{}, [@rose, @remote, @remote, @bcast, @bcast, @null, @rose]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000540)=""/108, 0x6c}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/166, 0xa6}, {&(0x7f0000000800)=""/198, 0xc6}, {&(0x7f00000000c0)=""/37, 0x25}], 0x9, &(0x7f00000009c0)=""/110, 0x6e}, 0x2}], 0x1, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='dvmrp1\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)='p', 0x1}], 0x2}}], 0x1, 0x4400c000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) sendmsg$nl_route_sched(r4, 0x0, 0x4000800) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x3) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) write(r7, 0x0, 0x0) 260.188491ms ago: executing program 3 (id=3374): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808001100000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 161.21746ms ago: executing program 3 (id=3375): r0 = socket$kcm(0x29, 0x5, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'syzkaller1\x00', {}, 0x5}) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008) (async) pselect6(0x40, &(0x7f00000000c0)={0xcd, 0x80, 0x4, 0x6, 0xffffffffffff8000, 0xbe, 0x1000}, &(0x7f0000000100)={0x4, 0x0, 0x3, 0x4127, 0x5, 0x2, 0x80, 0x8}, &(0x7f0000000140)={0x200, 0x2, 0x100, 0x5, 0x5, 0x80000000, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x2]}, 0x8}) (async) clock_getres(0x2, &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'macvlan1\x00', {0x2}, 0x1}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x7, 0x3, 0x2, 0x4}, {0x0, 0x80, 0x58, 0x800}]}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000003c0)={0x0, 'ipvlan0\x00', {0x2}, 0x6}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x1, 'erspan0\x00', {}, 0x69}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x29, r4}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) recvmmsg$unix(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/234, 0xea}, {&(0x7f0000001700)=""/245, 0xf5}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002880)=""/188, 0xbc}, {&(0x7f0000002940)=""/168, 0xa8}, {&(0x7f0000002a00)=""/171, 0xab}, {&(0x7f0000002ac0)=""/152, 0x98}, {&(0x7f0000002b80)=""/5, 0x5}, {&(0x7f0000002bc0)=""/91, 0x5b}], 0x6}}], 0x2, 0x10121, &(0x7f0000002d40)={0x77359400}) (rerun: 32) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x78, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000003480)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003440)={&(0x7f0000002f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x4b8, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0x95, 0x7, 0x1, 0x0, "365b3da4f0226b40d5754ae8ecfc14c987e4187e322e8699d186dbdf5f73acce824c76dc5bd651c509c78042243531bbd5b8bb49fd23c31713cf217858e5d1f69196d86e496f9ef2d2fa2d05d01e21510ddafe5ebf0b5e4f797ba497656c6c7ec22fb5de735cc709ae0bec59b25e65995ac859d2f453216de9abdf36e52685c7e05c18b7eb7b559ab1ee0441be9ce805c4"}, @NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "48595f8d426369e048d906"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x24, 0x7, 0x0, 0x1, {{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4b}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe2}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x1d8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x64, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x24, 0xa, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x3c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xe}, @NFTA_OSF_TTL={0x5, 0x2, 0x69}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_USERDATA={0xfd, 0x7, 0x1, 0x0, "700bb03d7621aa9c77be2401b9b6e3a1df7e74003b4bbc3ba158ae85bb9903b8e43fe5af93a92ed4f3916ac0cf378b300d7ce480080990683a9a246269bd6ed64d593722104060e4954b38aaffdfc2e1a4e248cb3284b3f54b6e0912c69882642bafbc7f7f18398c2268aa023149deb5e142967f74881783edcf53684d697103476da10aafc152e4cde198c1a9b817ed13b10c235c300c1043cd0afb0b52f5dee68d89a87b21e274605ddd6c01a1df839ff378a23d527c1576f15347abb057411a04cdfb31efdd4bb40b081653c8d84f22b1137d8954e457eead5beeb63e3e9857eb4f8a2b0fbb4632c4f60a47813817f4e43405119d0ea90d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x51c}}, 0x20000810) (async) r6 = getpid() quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r5, &(0x7f00000034c0)) (async) r7 = syz_open_procfs(r6, &(0x7f0000003500)='net/sockstat6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003540), 0x2, 0x0) ioctl$KDSETLED(r8, 0x4b32, 0x4) clock_nanosleep(0x2, 0x1, &(0x7f0000003580)={0x77359400}, &(0x7f00000035c0)) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x8) (async) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000003600)="a1c1d4e1922e3d7f28fd4c1dde9f2b9d6378b3dff853cdfbcfb1a678932739f3c6c13ea93c625e0fb241d4dd720a21f79429923ce155e9cbd1be23f2bd31375faa16") r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x8000000) syz_io_uring_complete(r9) (async) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x0) 33.583974ms ago: executing program 3 (id=3376): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r2]}}], 0x28, 0x8000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x7f000000, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) getsockname(r3, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 33.306243ms ago: executing program 2 (id=3377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000a40)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000a80)={{0x3, 0x0, 0xffffffffffffff67, {0x4000, 0x2}}, "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", "92bbe68d68831472731a7d2c7a754fd8b796b7be48982576b6d9a9601d71811fd857b11f89039fd56f1cc71b70df1b5c66084c14a90b752d8c4a37c6ce3dfea7ee28d47ef60f00e26bc9923267366b9c78de736d87d02ed8265ffe733cf8029a495ccd2dfa56ab87fb1eb9cfa89683c413d40ed8f7a468aaad6abf030868ec9b2377752723093ae56768fbdbff774591dc7e1ddbabfdcaf7f9bb773056ef239f1622d310993efb4e84dd2ed536836b03f1b32948222e8bba288569b75a6e1fc068a0d7eebb2b6fff77a40524c491a0c31296ca1f430403afbe50e15aa2b96fc1d2d4240314eb56dc75dc8dcceb7d826f42f04391b9e3625031d569bcbdc75b1ccc5ab848056c3ba27e4bfbcfbae398f9adc3c8e2e5087b4544a2495fcda939fc4f19d1e963620879e2e7ee7ab8f4fd7d337a95105be0166b8d15090d456e363367a2e19d548a941088bf1d1cf715c5401f95a27dd14cd2525015233531f59e45eb750246427027fe3fbcfd1e17e9a1bd77dff8790ecd2a1a95944cbe3ac1181c0c15acf2aefb97002056c3b08e918be915a70bb9b6a9b1b7af8f32937cca7d532154162181da3c7bd4115ad9560c1875566c6202086929b7d2dd3ae628e1817de91c2f750215339ac2878156fb125e645691f29c7a7d0586a0b63230338a0a52167b42d1894649c09de65669de20dd22a9b514c680d3c9238bbfdeb03d066f0a6ae3b25d7dea410a41a10cb32cb588ea5f7300eb2ca4ee60ba11cbf4ab2d4016b9d2b283221973e21c47ad08a5e15112126bd0d99546e8da93eb7723d54c8ea41a06ec90eda609cc2afae509cca499802163d1b6913e56dc1dbb5402772b1358fb05220b01e5be456cce429dab81ce56dba3334bde68e6ddd8e81d1a8f9908791428fe827cada399365db0bc9d551e7e24582a56fe2429244b571c91ed8c397911e92502c8b78b1c8141c299c9e867f63295c29df1afb362dbd38596d159a762d224995d59b3f124d68bace27daca69552f8f427196bc0e105828a8abee8ae82dbccb916a5b4636cee9b9131a7781be6d03456eecf533e427c1517ad5901bff4447cc6ad047b214d01ba951433a90960bd942bd48b08a56a8faa5967214c75f08b3661bc169ba36605bf358f854bf052ad84f1f58726c93133fea250c114a223e7366ee5c5eb235db720b862a158bcd0945e97a6744ff73ba294b7a2d028c165dbd9abd623cde1d427198a0fe60f24c01bc4e808147c2a03e8b62d1047e47e1d6fad8c96aee7e1c8c5c762d50f8d163cf4aa395a63931930af406af52bd489852105f67ee09234b1e4697313a7b3cd580eb367f64e9a09dc32a577f38f682e536b35db040d19aef21fd8f29d7f73171f42cb9da72a83cd86b8224ae6a496c8b2abffeba222b16be038c932191b4ad1c329e78570bf576c12fb212f0efb25cc3c3be755d7c80bcf1354d6ee6dba72771660a77fce172e33f32a3ba1bdf6b427f37ced092eeabfa368f11101547980b0cb827ed3db3a1b22431c37ef691a8f9e07cdef557a3cd0e666188a6780709f374bd8fbfdeeb88e0faf1c95d0f668116227b447bb1490b65938dcaf47e358591220d8dbc5d87b122d9be6f30d363c2626de93cd480a21875f474b96bed3f198f690883f8622dd96c174b43cea38229d323142e03a27016c5f442b9449379ac455aae9f2bc87bd376f526c386bea3fbb0bc95e31be68dc0de076aa754322755dbe09f69f80ba6cf4f786da3cf3813688ed2c48414e1a55cd1d04e368dfe73cc314ed0bd555e9c64bd5b737545b20a654c3e2ad4fe94e274b74ee54bdbbf8f7631cffd2fd8447877b6eaae6d96cc0c761d4493afa04d8810852097fd61e1e6a9c4a7aeb71142399aaa1a8ea7c9bc03c28028c983c9479909d8810dfae6897e136766f3b24de25ce7a13627b2f37c08230947bc89ea8016adadc1069b2aa04a072721fbce01c471d3520e9e335176930ce4a9e573a97dc741e78325b1c8392812c78d36284c2d030ebb89245ede680e794bbddc7f7254c0d00f379956d9f8c90df6ec790da86af76f8a802d8e2371a5f5b2a308495c9df549e0c966bf74751fa647b268e4739d2e40710c82cd8868a06f37a2eb683362ea14dbdbc4d3d12020f4dc5e1d6829bb1ad6efecc444e5e0abcc54935f30253357cfbfdba20aa6802d473add296144537e83028a693cbb14b6125b68734ad019261356d8d83d977ec33de801614d8a22f5c4f8f0b2bc9bdc2b5324ff579d61437d4048bd9711d96b70a0eec2b731dac54d0fdaf83320ebc64bdae72b15691fca6309d8d67386a9df132f947f423486dbf2f9dcd074b0a70a0b9c765ef0dc60e0607c09e12fae48a91eae09acd1c2a15d2f89662946a4a859d22203346c3b8feffa01751d01dad6d57201fe094d8c4e5ddda1daf100f6564079df306230e4bee1766d03084b220c69073727b030c4a6e44f1813af289792d837820420ef4d6525b59444e5b5eeaab7722fd84036e3da513c463c272f8387535a0417f07c211a99d1e0db229608e85f8cf116f3228af89106deb4e6af28b95a8bde03c0c04557d2244c9a6d31cd7ed27a8202eac27b5676d8658bb48ca765bad75200ac95762f3f7fd795372740ab1f985ca205bcacebfdb83a9bbc32ecc3e3c0bcef1997b5c6bd4a045ec0441ee07b4c7d9ad45aedbd983229f487441a52a6452074382ef2721eec882a64cdd6929da3d0341506021e9a7b1a869898f96a5c7b9ec6d320ab0a3a66f80a74242d3e267d399906f6ba1ddcd79b47acdff546df087b49ba83381c64fb7b72d19c2ba6a04790f13c3032a930c4d86ba14bac98af65ebe10d23da426e2636ab4950f0c0cafb0f1f4a493b7a6824612d79449456b930cdeda4bfa9389b314b7dd57df97c406140f0810e249c12095c6108b0c98a8e553f942f4c8f28fdeaf7981ba623add8f0c3906ca533d2862295591d3aba261f41a234ee5305de309bb43140985dd796afb3a02e04bf314a165fb4698c1d2156dbece00135d1e043bd78064db6e97cf13afb9a188aec0945405c8ec7fcff33969d97d60e2f2b06e3ab88f2ccc4db9915e42d31e575b91577d3d578ed2169b2cde0d8df8bb277459bdac3c82daa7254dafd5a518e04fb70574a31f04da50ff379f15464ae70067480e6b071cb3389d45a0e9cfa9bef1a040f6ed85be7923325a23ccdffe208911319acceb99b4f8455a74d7f98b2cfd53761e78c6fe1ee095aa2ed0e338b75c92b6479a98e2f441b79c8bb2ec73b30fdf7164d0c4c8ecbd439f62f91b32165bd06027f0c64bc2acd2281b57cffd4e3f36378160ea6c0b3390be56af4e48fba1a59982a677b0f0bd571a84f19f26bd23d670a86c7db50d42fa1219ab7b42c4f2f49032af1825a62646cbe47f2d0128c3e72f712725eb5767033f8df3ecc5a5dd2be2d91dac9c0856bd1ae289082a88975a1ef49274d7f742a866067f4d9c76ba4e8854f791c902dcc794b2a82de8c389e74fdc676700b0a7e561597ec73f933dbb8ba5b9902346c858b3ff78c38bf9c2daea6aadb37b5e58620198a82c5198e6128e087893d29ce34c0d98270e2f5f4272b9e2433575284b9d0c1461442b95dda0fae59f1f0841f1c3fc7dc76052a359395f2ffb1466e248afa7243f4d95a634d62f281cfedd8aa6284819710dde3541efddaeadabda068c36c887d967a23af265189aeb147f7b183f406e47a4f2dcb24728e0947d0cf93529ea2663ccea2150ad89856049d595a507012628b48b240eb31426f8c0a3313fce2b1fdec122c91b52c5dfeba8df4e9145924bc7fab618e3058d0c2eaf7f47aab8b13505d8ed5be57b63d938a77d5cd5bb136241812ee86acef0ed4f3d298ad5f1345280a84145e18e23265dcb436e4777f81112204fed54d20f906ea50ff33902c18c7dd9a57ea93115a3f9da7fc917eac1446cc684ac293d90cc600665e837102a1a251fc956d49b30651fc5101c4e984de2b979257b4ce2159e04a4fa5841296212c41247530aa147ca3618c79e7f8e4f91f3e80c864675cc1caeda7700bc014b14f8702d68477389a99a4760d34be7aba08065949f8e68849160e9336011c26e10517f5b4f6e688fc27877714db0d2b49d13d67ffa01c2115a49283693d94469fa425bcbe7f56fda05ec44824f0468e983eedb0f61ff52d326c957b413de509b429a10f558be7d873484dfa03d9ec43da3d42c9510315523d057eeb4c057e7d5bede834620dcfa019f0575e44fd1a0d6b38082d1042c11ff4a4c4822ab718604ecfdd8c52c1937ab2d3c0aae66b054e44b95a8613dd8c725a817d1d2c2717ef14091083d3ffbb191875d290942afcbc2d3480de3533d237797cd1f75b701b0f2cca9f80d6236d888cf2e28eac2b1f429dbd54f0b0a2df50bf57eb27620018126f8bd4580f299d57e44b080775b4dca99722228d070db0056cddf0f70ab7157fb0ce4acfb7140884e24b1682b25230d403670a422b488cd978bd7df59bafc58f6f4eba87cb3d031ea2e5927b2ddbb215edb0820900cd6d21d88b0c74a0f86cdefc3ea911601c718edbe3b48d3cd521ebee2e68ceca79fe65d1cb190d8d56689eba06fbf4de6bdbbdb831a2d8359c7580efe7269a754d3f121f960a9a7231dfdc0b474a24bed56f2f0eaf32c97b4f103d2cce6b4f0a932a743d9dcbb52581f628aea23820347b83ca15e4f952ea77e84e032c2c0f0a70deb9ee1c587b4de34e41d437c8953c5e1604ad463118dbd2efac204ecf8e661344668f7753d1b24c57381a6b57bcdb53b429905cffe7b8d0ac3c692bf42f1aa3029a1de4b1668ae6b78e4bf92ec7fa40b0b667592ef2bbe44bf3ab48609274754562653c8abc16c4e86200448b7f72d56d098cea39f7ed9484ce9eaddf72ec3299c4d9808d1276fde0736564c3589d780607cb8cf119b96f6326d70287f30a46a4ca94ea86ea9e490c02f106142db5a0f2fa9d69323dd89a81a27fe76eeb94fa8cf1624ac51c05c9e305350593d509dc3adf70e3ee2f9ab8c0780af9084044b402a18b942a73f76048d466cdcdb0caf26badbc7b87cf8f11d5c065f17b893359cdb0cf94c0456858e5343beb608e0cda10e8ba457a9d6867f0a989ec54e8d80d6e0ab961d85bdff4333e6c0ddb2250099e073a50223a4cb78a9be174f17b8a67d60eab0d6a1c0ed0bfb03589bfc81ed5bc2b1ff085458187a2d4b2dcd753fbcc883a3339508a72d6f368be3ad946c5e1fdd25547bb26d73617761f55454c1242361c5168119bf7f5b6f44a72f5eeac798a7e1fe19802c75397879597e1ca564d8d62d5bc73fbc0ceef13f511d24f1702cb9705ab6d493ccf1d0f79fb584f76428a7ba80b6ecded9e19e0f12a7f3a28a8093fe6f4b5e2e7c7efc0c5b71ea4a276fe136a7d589f280787ccb6b40a685cb632de8530215759295c36f2cf9c882ac9584d68d5891525e7b08fd751e659f51f1785f2727cf5e1dde9d52b6285e5db4bfc308ec4efecdf4843fbe0c40113be473c6cb9ec3b539ae0216ffcc74ce5b57a8dcb95060547bc42e0394e199535e71e21ebf394605483f72ec2ec5188ca38fd9faa47686bd338dfc9870c8b6203a201d1258064523c5d627313b78dc94f6a1a488d49a9296d632e6e31e17712209fd67bc669515fca6ca43210203e921081af13a862d14812e98ed1e380c45fec0b16f3e4cc04bf3fe00cb28a6c65b446b45c6530c38057841e25211d53f57acb24d35c0765d1f34c62626cb89ec09d6b6cc27ce2c064173ce0d83b4535891fac2cb"}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x40000, 0x0, [0xb, 0x2d, 0x7, 0x7, 0x1, 0x5, 0x4, 0x5ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=3378): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = eventfd2(0x4, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000070000040"]) close(r4) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r6, 0x2000002, 0x11, r4, 0x0) write$eventfd(r4, &(0x7f0000000080)=0x3, 0xfdef) kernel console output (not intermixed with test programs): 7.905978][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.958154][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.966671][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.272474][ T5897] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 758.307330][ T5897] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 758.394238][ T5897] appleir 0003:05AC:8243.003D: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 758.467855][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 758.540230][ T48] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 758.638726][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 758.654928][ T5899] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 758.663395][ T5899] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 758.707998][ T5899] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 758.733291][ T48] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 758.748740][ T48] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 758.766312][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 758.786515][ T48] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 758.799953][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 758.817952][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.864405][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 758.923717][ T5899] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 758.944497][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.982258][ T5899] usb 5-1: config 0 descriptor?? [ 759.089612][ T5902] usb 3-1: USB disconnect, device number 40 [ 759.156833][T19035] kAFS: unable to lookup cell '.,' [ 759.215334][ T5899] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 759.282145][ T5899] usb 5-1: USB disconnect, device number 20 [ 759.304834][ T5899] usblp0: removed [ 759.708255][ T5899] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 759.858017][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 759.864779][ T5899] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 759.875451][ T5899] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 759.937097][ T5899] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 759.954221][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 759.988545][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 760.012316][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 760.045239][ T5899] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 760.071257][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.104061][T18791] usb 4-1: USB disconnect, device number 31 [ 760.124628][ T5899] usb 5-1: config 0 descriptor?? [ 760.201373][T19054] FAULT_INJECTION: forcing a failure. [ 760.201373][T19054] name failslab, interval 1, probability 0, space 0, times 0 [ 760.228832][T19054] CPU: 1 UID: 0 PID: 19054 Comm: syz.3.3082 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 760.228858][T19054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.228870][T19054] Call Trace: [ 760.228878][T19054] [ 760.228886][T19054] dump_stack_lvl+0x189/0x250 [ 760.228918][T19054] ? __pfx____ratelimit+0x10/0x10 [ 760.228942][T19054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.228969][T19054] ? __pfx__printk+0x10/0x10 [ 760.228993][T19054] ? __pfx___might_resched+0x10/0x10 [ 760.229010][T19054] ? fs_reclaim_acquire+0x7d/0x100 [ 760.229036][T19054] should_fail_ex+0x414/0x560 [ 760.229064][T19054] should_failslab+0xa8/0x100 [ 760.229086][T19054] __kmalloc_cache_noprof+0x70/0x3d0 [ 760.229111][T19054] ? ip_set_create+0x348/0x1940 [ 760.229138][T19054] ip_set_create+0x348/0x1940 [ 760.229171][T19054] ? trace_contention_end+0x39/0x120 [ 760.229192][T19054] ? __pfx_ip_set_create+0x10/0x10 [ 760.229249][T19054] nfnetlink_rcv_msg+0xb4a/0x1130 [ 760.229274][T19054] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 760.229314][T19054] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 760.229335][T19054] ? __lock_acquire+0xab9/0xd20 [ 760.229387][T19054] ? __lock_acquire+0xab9/0xd20 [ 760.229425][T19054] netlink_rcv_skb+0x208/0x470 [ 760.229444][T19054] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 760.229469][T19054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.229497][T19054] ? bpf_lsm_capable+0x9/0x20 [ 760.229514][T19054] ? security_capable+0x7e/0x2e0 [ 760.229544][T19054] nfnetlink_rcv+0x26a/0x2520 [ 760.229568][T19054] ? unwind_get_return_address+0x4d/0x90 [ 760.229595][T19054] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.229616][T19054] ? arch_stack_walk+0xfc/0x150 [ 760.229645][T19054] ? stack_trace_save+0x9c/0xe0 [ 760.229666][T19054] ? stack_depot_save_flags+0x40/0x900 [ 760.229695][T19054] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 760.229720][T19054] ? kasan_save_track+0x4f/0x80 [ 760.229734][T19054] ? kasan_save_track+0x3e/0x80 [ 760.229756][T19054] ? __lock_acquire+0xab9/0xd20 [ 760.229806][T19054] ? __lock_acquire+0xab9/0xd20 [ 760.229840][T19054] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.229881][T19054] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.229899][T19054] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.229934][T19054] netlink_unicast+0x75b/0x8d0 [ 760.229970][T19054] netlink_sendmsg+0x805/0xb30 [ 760.229997][T19054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.230018][T19054] ? aa_sock_msg_perm+0x94/0x160 [ 760.230043][T19054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.230067][T19054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.230109][T19054] __sock_sendmsg+0x21c/0x270 [ 760.230139][T19054] ____sys_sendmsg+0x505/0x830 [ 760.230165][T19054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.230195][T19054] ? import_iovec+0x74/0xa0 [ 760.230218][T19054] ___sys_sendmsg+0x21f/0x2a0 [ 760.230241][T19054] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.230298][T19054] ? __fget_files+0x2a/0x420 [ 760.230318][T19054] ? __fget_files+0x3a0/0x420 [ 760.230350][T19054] __x64_sys_sendmsg+0x19b/0x260 [ 760.230373][T19054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.230404][T19054] ? __pfx_ksys_write+0x10/0x10 [ 760.230420][T19054] ? rcu_is_watching+0x15/0xb0 [ 760.230443][T19054] ? do_syscall_64+0xbe/0x3b0 [ 760.230472][T19054] do_syscall_64+0xfa/0x3b0 [ 760.230496][T19054] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.230520][T19054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.230538][T19054] ? clear_bhb_loop+0x60/0xb0 [ 760.230561][T19054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.230579][T19054] RIP: 0033:0x7fbc09b8e929 [ 760.230596][T19054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.230612][T19054] RSP: 002b:00007fbc0a955038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.230632][T19054] RAX: ffffffffffffffda RBX: 00007fbc09db5fa0 RCX: 00007fbc09b8e929 [ 760.230646][T19054] RDX: 0000000020004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 760.230659][T19054] RBP: 00007fbc0a955090 R08: 0000000000000000 R09: 0000000000000000 [ 760.230671][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.230681][T19054] R13: 0000000000000000 R14: 00007fbc09db5fa0 R15: 00007fbc09edfa28 [ 760.230710][T19054] [ 761.055905][ T5899] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 761.069155][ T5899] usb 5-1: USB disconnect, device number 21 [ 761.077227][ T5899] usblp0: removed [ 761.274992][ T5899] usb 2-1: USB disconnect, device number 122 [ 761.774803][T19078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.864351][T19078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.125448][T19082] FAULT_INJECTION: forcing a failure. [ 762.125448][T19082] name failslab, interval 1, probability 0, space 0, times 0 [ 762.143221][T19082] CPU: 0 UID: 0 PID: 19082 Comm: syz.4.3087 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 762.143248][T19082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.143258][T19082] Call Trace: [ 762.143266][T19082] [ 762.143273][T19082] dump_stack_lvl+0x189/0x250 [ 762.143302][T19082] ? __pfx____ratelimit+0x10/0x10 [ 762.143321][T19082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.143340][T19082] ? __pfx__printk+0x10/0x10 [ 762.143358][T19082] ? __pfx___might_resched+0x10/0x10 [ 762.143369][T19082] ? fs_reclaim_acquire+0x7d/0x100 [ 762.143388][T19082] should_fail_ex+0x414/0x560 [ 762.143408][T19082] should_failslab+0xa8/0x100 [ 762.143424][T19082] __kmalloc_noprof+0xcb/0x4f0 [ 762.143436][T19082] ? fuse_direct_io+0xa12/0x2a70 [ 762.143457][T19082] fuse_direct_io+0xa12/0x2a70 [ 762.143498][T19082] ? __pfx_fuse_direct_io+0x10/0x10 [ 762.143517][T19082] ? __kasan_kmalloc+0x93/0xb0 [ 762.143533][T19082] ? __raw_spin_lock_init+0x45/0x100 [ 762.143549][T19082] fuse_direct_IO+0x8a8/0x1210 [ 762.143580][T19082] ? __pfx_fuse_direct_IO+0x10/0x10 [ 762.143594][T19082] ? cap_inode_need_killpriv+0x51/0x60 [ 762.143608][T19082] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 762.143625][T19082] ? security_inode_need_killpriv+0x71/0x270 [ 762.143639][T19082] ? file_remove_privs_flags+0x483/0x5f0 [ 762.143664][T19082] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 762.143688][T19082] generic_file_direct_write+0x1db/0x3e0 [ 762.143707][T19082] ? file_update_time+0x115/0x490 [ 762.143727][T19082] __generic_file_write_iter+0x11d/0x230 [ 762.143744][T19082] ? generic_file_write_iter+0xfb/0x540 [ 762.143763][T19082] generic_file_write_iter+0x10f/0x540 [ 762.143783][T19082] ? __pfx_generic_file_write_iter+0x10/0x10 [ 762.143800][T19082] ? is_bpf_text_address+0x26/0x2b0 [ 762.143815][T19082] ? __lock_acquire+0xab9/0xd20 [ 762.143847][T19082] ? aa_file_perm+0x11f/0xed0 [ 762.143866][T19082] ? aa_file_perm+0x11f/0xed0 [ 762.143883][T19082] ? aa_file_perm+0x3e7/0xed0 [ 762.143909][T19082] ? look_up_lock_class+0x74/0x170 [ 762.143928][T19082] fuse_file_write_iter+0xd98/0x10a0 [ 762.143962][T19082] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 762.144000][T19082] ? rcu_read_lock_any_held+0xb3/0x120 [ 762.144019][T19082] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 762.144053][T19082] vfs_write+0x54b/0xa90 [ 762.144070][T19082] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 762.144097][T19082] ? __pfx_vfs_write+0x10/0x10 [ 762.144126][T19082] ? __fget_files+0x2a/0x420 [ 762.144155][T19082] ksys_write+0x145/0x250 [ 762.144175][T19082] ? __pfx_ksys_write+0x10/0x10 [ 762.144186][T19082] ? rcu_is_watching+0x15/0xb0 [ 762.144201][T19082] ? do_syscall_64+0xbe/0x3b0 [ 762.144221][T19082] do_syscall_64+0xfa/0x3b0 [ 762.144238][T19082] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.144258][T19082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.144276][T19082] ? clear_bhb_loop+0x60/0xb0 [ 762.144299][T19082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.144317][T19082] RIP: 0033:0x7faf4798e929 [ 762.144334][T19082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.144350][T19082] RSP: 002b:00007faf48899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.144370][T19082] RAX: ffffffffffffffda RBX: 00007faf47bb5fa0 RCX: 00007faf4798e929 [ 762.144380][T19082] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000005 [ 762.144389][T19082] RBP: 00007faf48899090 R08: 0000000000000000 R09: 0000000000000000 [ 762.144397][T19082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.144404][T19082] R13: 0000000000000000 R14: 00007faf47bb5fa0 R15: 00007faf47cdfa28 [ 762.144424][T19082] [ 762.509299][ T1210] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 762.527574][ T1210] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 762.548109][ T1210] usb 1-1: USB disconnect, device number 124 [ 763.017998][ T1210] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 763.179470][ T1210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.191040][ T1210] usb 1-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.204392][ T1210] usb 1-1: config 0 interface 0 has no altsetting 0 [ 763.213670][ T1210] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 763.222920][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.230970][ T1210] usb 1-1: Product: syz [ 763.235182][ T1210] usb 1-1: Manufacturer: syz [ 763.239900][ T1210] usb 1-1: SerialNumber: syz [ 763.246726][ T1210] usb 1-1: config 0 descriptor?? [ 763.347901][ T5902] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 763.455004][T19078] fuse: Invalid uid '0x0000000000000003' [ 763.462385][T18791] usb 1-1: USB disconnect, device number 125 [ 763.499527][ T5902] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 763.511236][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.522668][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.534077][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 763.548550][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 763.557839][ T5902] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 763.565925][ T5902] usb 5-1: Manufacturer: syz [ 763.573117][ T5902] usb 5-1: config 0 descriptor?? [ 764.013424][ T5902] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 764.037371][ T5902] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 764.066896][ T5902] appleir 0003:05AC:8243.003E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 764.218921][ T5898] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 764.287964][ T1210] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 764.387809][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 764.396947][ T5898] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 764.433555][ T5898] usb 4-1: config 0 has no interface number 0 [ 764.442919][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 764.454626][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.467919][ T5898] usb 4-1: config 0 interface 184 has no altsetting 0 [ 764.481831][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.492510][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 764.507328][ T1210] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 764.517309][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.526007][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 764.537982][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 764.546007][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.570916][ T5898] usb 4-1: Product: syz [ 764.577704][ T1210] usb 1-1: config 0 descriptor?? [ 764.609886][ T5898] usb 4-1: Manufacturer: syz [ 764.626110][ T5898] usb 4-1: SerialNumber: syz [ 764.641385][ T5898] usb 4-1: config 0 descriptor?? [ 764.660106][ T5898] smsc75xx v1.0.0 [ 764.664273][ T5898] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 764.678910][ T5898] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 764.820497][ T5898] usb 5-1: USB disconnect, device number 22 [ 764.828048][ T5902] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 765.031561][ T1210] usbhid 1-1:0.0: can't add hid device: -71 [ 765.037620][ T1210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 765.047979][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 765.067542][ T1210] usb 1-1: USB disconnect, device number 126 [ 765.099630][T19127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3099'. [ 765.140502][ T5902] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 765.165673][T19129] fuse: Unknown parameter '' [ 765.201326][ T5902] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 765.219138][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 765.234443][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 765.249092][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 765.261113][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 765.359715][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 765.457359][ T5902] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 765.478724][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.515024][ T5902] usb 3-1: config 0 descriptor?? [ 765.648007][ T1210] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 765.802534][ T5902] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 765.812845][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 765.827126][ T1210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 765.839886][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 765.850975][ T1210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 765.866074][ T1210] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 765.876737][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.892206][ T1210] usb 5-1: Product: syz [ 765.896614][ T1210] usb 5-1: Manufacturer: syz [ 765.901700][ T1210] usb 5-1: SerialNumber: syz [ 765.924011][ T1210] usb 5-1: config 0 descriptor?? [ 765.933948][ T5902] usb 3-1: USB disconnect, device number 41 [ 765.935802][ T1210] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 765.988361][ T5902] usblp0: removed [ 766.165917][ T1210] scsi host1: usb-storage 5-1:0.0 [ 766.253959][ T1210] usb 5-1: USB disconnect, device number 23 [ 766.387831][ T5902] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 766.539206][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 766.546180][ T5902] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 766.556013][ T5902] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 766.566347][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 766.575846][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 766.589226][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 766.611082][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 766.638783][ T5902] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 766.721946][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.793933][ T5902] usb 3-1: config 0 descriptor?? [ 767.064893][ T5902] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 767.308798][ T1210] usb 3-1: USB disconnect, device number 42 [ 767.371623][ T1210] usblp0: removed [ 767.641558][T19162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.682526][T19159] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 767.711249][ T5899] usb 4-1: USB disconnect, device number 32 [ 767.957807][ T5898] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 768.107809][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 768.140775][ T5898] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 768.149225][ T5898] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 768.162563][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.186797][ T5898] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 768.200990][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 768.212630][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.231167][ T5898] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 768.242677][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.251657][ T5898] usb 2-1: Product: syz [ 768.256041][ T5898] usb 2-1: Manufacturer: syz [ 768.324473][ T5898] usb 2-1: SerialNumber: syz [ 768.341418][ T5898] usb 2-1: config 0 descriptor?? [ 768.358870][ T5898] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 768.368773][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 768.376990][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 768.389292][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 768.397112][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 768.407779][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 768.415577][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 768.425646][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 768.434979][ T5898] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 768.443220][ T5899] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 768.456295][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 768.465627][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 768.477476][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 768.485264][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 768.495225][ T5898] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 768.506282][ T5898] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 768.821498][T10555] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 768.918102][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.949177][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.959071][ T5899] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 768.969084][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.990043][T19157] tipc: Enabled bearer , priority 22 [ 769.022072][ T5899] usb 3-1: config 0 descriptor?? [ 769.069820][T10555] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 769.084578][T19177] netlink: 162 bytes leftover after parsing attributes in process `syz.3.3113'. [ 769.104359][T19177] input: syz0 as /devices/virtual/input/input36 [ 769.150581][ T5898] usb 2-1: USB disconnect, device number 123 [ 769.165666][ T5898] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 769.193945][T10555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.197696][ T5898] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 769.226771][ T5898] keyspan 2-1:0.0: device disconnected [ 769.243541][T10555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.280382][T10555] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 769.334074][T10555] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 769.352478][T10555] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 769.360648][T19180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 769.402138][T10555] usb 5-1: Manufacturer: syz [ 769.422842][T10555] usb 5-1: config 0 descriptor?? [ 769.441582][ T5899] hid-steam 0003:28DE:1142.003F: unknown main item tag 0x0 [ 769.449768][ T5899] hid-steam 0003:28DE:1142.003F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 769.518469][ T5899] hid-steam 0003:28DE:1142.003F: Steam wireless receiver connected [ 769.528524][ T5899] hid-steam 0003:28DE:1142.003F: No HID_FEATURE_REPORT submitted - nothing to read [ 769.550744][ T5899] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 769.571321][ T5899] hid-steam 0003:28DE:1142.0040: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 769.658006][ T5898] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 769.691430][ T5899] usb 3-1: USB disconnect, device number 43 [ 769.725261][ T5899] hid-steam 0003:28DE:1142.003F: Steam wireless receiver disconnected [ 769.752129][T19182] fido_id[19182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 769.842450][ T5898] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 769.850082][T10555] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 769.861959][ T5898] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 769.875763][T10555] appleir 0003:05AC:8243.0041: No inputs registered, leaving [ 769.882903][ T5898] usb 4-1: config 0 has no interface number 0 [ 769.895602][ T5898] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.912238][ T5898] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 769.922915][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.934807][T10555] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 769.944130][ T5898] usb 4-1: config 0 descriptor?? [ 770.107951][ T1210] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 770.272338][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 770.282484][ T1210] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 770.298792][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 770.313236][ T1210] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 770.326315][ T1210] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 770.336369][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.345107][ T1210] usb 2-1: Product: syz [ 770.349657][ T1210] usb 2-1: Manufacturer: syz [ 770.354277][ T1210] usb 2-1: SerialNumber: syz [ 770.363224][ T1210] usb 2-1: config 0 descriptor?? [ 770.368269][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 770.384447][ T1210] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 770.594987][ T1210] scsi host1: usb-storage 2-1:0.0 [ 770.606560][ T1210] usb 2-1: USB disconnect, device number 124 [ 770.663660][ T5899] usb 5-1: USB disconnect, device number 24 [ 771.407818][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.375460][ T5902] usb 4-1: USB disconnect, device number 33 [ 772.793781][T19235] netlink: 'syz.2.3132': attribute type 2 has an invalid length. [ 772.816207][T19237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.967833][ T5899] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 772.990079][ T1210] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 773.117919][ T5902] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 773.120936][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 773.138048][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 773.152023][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 773.163672][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 773.174722][ T1210] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 773.189546][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.201228][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.212289][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 773.229254][ T5899] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 773.242481][ T1210] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 773.252802][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.263751][ T5899] usb 5-1: Product: syz [ 773.267829][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 773.268012][ T1210] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 773.275758][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.281268][ T5899] usb 5-1: Manufacturer: syz [ 773.281288][ T5899] usb 5-1: SerialNumber: syz [ 773.284358][ T5899] usb 5-1: config 0 descriptor?? [ 773.302357][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.312132][ T1210] usb 1-1: Manufacturer: syz [ 773.322239][ T5902] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 773.335173][ T5899] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 773.341013][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.350649][ T1210] usb 1-1: config 0 descriptor?? [ 773.357245][ T5902] usb 3-1: config 0 descriptor?? [ 773.544695][ T5899] scsi host1: usb-storage 5-1:0.0 [ 773.563212][ T5899] usb 5-1: USB disconnect, device number 25 [ 773.594491][ T5902] playstation 0003:054C:05C4.0042: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 773.776005][ T5902] playstation 0003:054C:05C4.0042: Failed to retrieve feature with reportID 18: -71 [ 773.788911][ T1210] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 773.801484][ T5902] playstation 0003:054C:05C4.0042: Failed to retrieve DualShock4 pairing info: -71 [ 773.807220][ T1210] appleir 0003:05AC:8243.0043: No inputs registered, leaving [ 773.826328][ T5902] playstation 0003:054C:05C4.0042: Failed to get MAC address from DualShock4 [ 773.837228][ T1210] appleir 0003:05AC:8243.0043: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 773.845941][ T5902] playstation 0003:054C:05C4.0042: Failed to create dualshock4. [ 773.885872][ T5902] playstation 0003:054C:05C4.0042: probe with driver playstation failed with error -71 [ 773.923124][ T5902] usb 3-1: USB disconnect, device number 44 [ 774.224519][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.233692][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.239220][T19268] fuse: blksize only supported for fuseblk [ 774.263499][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.273774][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.282863][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.351073][T19269] bridge0: entered promiscuous mode [ 774.372721][T19269] macvlan2: entered promiscuous mode [ 774.389813][T19274] : entered promiscuous mode [ 774.603629][ T5899] usb 1-1: USB disconnect, device number 127 [ 774.647815][ T1210] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 774.797813][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 774.816191][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 774.837527][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 774.857841][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.867595][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 774.877380][ T1210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 774.887471][ T1210] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 774.896595][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.908370][ T1210] usb 5-1: config 0 descriptor?? [ 774.947635][T19271] chnl_net:caif_netlink_parms(): no params data found [ 775.088440][ T49] bridge_slave_1: left allmulticast mode [ 775.099360][ T49] bridge_slave_1: left promiscuous mode [ 775.112655][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.174801][ T1210] usb 5-1: USB disconnect, device number 26 [ 775.194761][ T49] bridge_slave_0: left allmulticast mode [ 775.203291][ T49] bridge_slave_0: left promiscuous mode [ 775.218058][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.353724][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 775.362952][T19295] openvswitch: netlink: Unknown nsh attribute 0 [ 775.388049][T19295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.540678][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 775.556222][ T49] tipc: Disabling bearer [ 775.713858][ T5899] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 775.748667][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 775.767210][ T5899] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 775.810931][ T5899] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 775.839859][ T5899] usb 1-1: Manufacturer: syz [ 775.866365][ T5899] usb 1-1: config 0 descriptor?? [ 775.883840][ T5899] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 776.127864][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 776.156616][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.168821][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.178182][ T49] bond0 (unregistering): Released all slaves [ 776.336942][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 776.357232][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 776.367532][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 776.377348][ T51] Bluetooth: hci0: command tx timeout [ 776.387868][ T49] : left promiscuous mode [ 776.402703][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 776.413172][T19271] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.424856][ T5898] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 776.435565][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.443752][T19271] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.458458][ T5898] usb 5-1: Product: syz [ 776.470952][T19271] bridge_slave_0: entered allmulticast mode [ 776.477872][ T5898] usb 5-1: Manufacturer: syz [ 776.489336][ T5898] usb 5-1: SerialNumber: syz [ 776.499540][T19271] bridge_slave_0: entered promiscuous mode [ 776.521888][T19271] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.529385][T19271] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.537059][ T5898] usb 5-1: config 0 descriptor?? [ 776.550115][ T5898] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 776.557310][T19271] bridge_slave_1: entered allmulticast mode [ 776.570453][T19271] bridge_slave_1: entered promiscuous mode [ 776.588399][ T49] tipc: Disabling bearer [ 776.620038][ T49] tipc: Left network mode [ 776.648101][T18791] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 776.670311][T19271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.683415][T19271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.765998][ T5898] scsi host1: usb-storage 5-1:0.0 [ 776.797373][ T5898] usb 5-1: USB disconnect, device number 27 [ 776.817828][T18791] usb 2-1: Using ep0 maxpacket: 16 [ 776.844211][T18791] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 776.856222][T18791] usb 2-1: config 0 has no interface number 0 [ 776.890860][T18791] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 776.904204][T18791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.918944][T18791] usb 2-1: Product: syz [ 776.928041][T18791] usb 2-1: Manufacturer: syz [ 776.932661][T18791] usb 2-1: SerialNumber: syz [ 776.957406][T19271] team0: Port device team_slave_0 added [ 776.988719][T18791] usb 2-1: config 0 descriptor?? [ 777.067481][T19271] team0: Port device team_slave_1 added [ 777.210498][T18791] go7007 2-1:0.41: probe with driver go7007 failed with error -12 [ 777.234407][T18791] usb 2-1: USB disconnect, device number 125 [ 777.304886][T19271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.324353][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.363648][T19271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.443408][T19342] openvswitch: netlink: Flow key attr not present in new flow. [ 777.467311][T19271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.493652][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.526105][T19271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.577284][ T49] hsr_slave_0: left promiscuous mode [ 777.591724][ T49] hsr_slave_1: left promiscuous mode [ 777.822171][T19352] netlink: 162 bytes leftover after parsing attributes in process `syz.1.3156'. [ 777.838213][T19352] input: syz0 as /devices/virtual/input/input38 [ 777.874253][T19352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3156'. [ 777.891008][T18791] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 778.050952][T18791] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 778.068933][T18791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.091361][T18791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.101644][T18791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 778.140895][T18791] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 778.151566][T18791] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 778.167713][T18791] usb 5-1: Manufacturer: syz [ 778.183969][ T49] team0 (unregistering): Port device team_slave_1 removed [ 778.195222][T18791] usb 5-1: config 0 descriptor?? [ 778.236726][ T49] team0 (unregistering): Port device team_slave_0 removed [ 778.326773][ T5898] usb 1-1: USB disconnect, device number 2 [ 778.449968][ T51] Bluetooth: hci0: command tx timeout [ 778.631005][T18791] appleir 0003:05AC:8243.0044: unknown main item tag 0x0 [ 778.642346][T18791] appleir 0003:05AC:8243.0044: No inputs registered, leaving [ 778.674836][T18791] appleir 0003:05AC:8243.0044: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 778.687893][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 778.704575][T19361] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 778.711227][T19271] hsr_slave_0: entered promiscuous mode [ 778.725688][T19271] hsr_slave_1: entered promiscuous mode [ 778.733244][T19271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.743669][T19271] Cannot create hsr debugfs directory [ 778.869563][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.899674][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.926882][ T5898] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 778.940634][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 778.985044][ T5898] usb 1-1: SerialNumber: syz [ 779.149784][ T49] IPVS: stop unused estimator thread 0... [ 779.207432][ T5898] usb 1-1: 0:2 : does not exist [ 779.303670][ T5898] usb 1-1: USB disconnect, device number 3 [ 779.531590][ T1210] usb 5-1: USB disconnect, device number 28 [ 779.716158][T19384] tipc: Enabling of bearer rejected, already enabled [ 780.127850][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 780.379571][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 780.386354][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.396654][ T5902] usb 1-1: config 0 has no interfaces? [ 780.414130][ T5902] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 780.424700][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.453947][ T5902] usb 1-1: config 0 descriptor?? [ 780.547015][ T51] Bluetooth: hci0: command tx timeout [ 781.937046][T19271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.012704][T19271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.093452][T19271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.210913][T19271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.608136][ T51] Bluetooth: hci0: command tx timeout [ 782.613073][T19271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.662620][T19271] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.688142][T18791] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 782.722741][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.729891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.777511][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.784643][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.840109][T19428] binder: 19427:19428 unknown command 0 [ 782.856681][T18791] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 782.869334][T19428] binder: 19427:19428 ioctl c0306201 200000000780 returned -22 [ 782.890524][T18791] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 782.904348][T19430] netlink: 162 bytes leftover after parsing attributes in process `syz.2.3171'. [ 782.926745][T18791] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 782.947173][T18791] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 782.966471][T19430] input: syz0 as /devices/virtual/input/input39 [ 782.977115][T18791] usb 2-1: Manufacturer: syz [ 783.010346][T19271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.020738][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3171'. [ 783.028305][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.040433][T18791] usb 2-1: config 0 descriptor?? [ 783.062631][T18791] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 783.075740][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.101215][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.125813][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.136100][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.144602][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.160041][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.168195][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.185164][T19271] veth0_vlan: entered promiscuous mode [ 783.192656][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.200850][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.210109][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.223517][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.227018][T19271] veth1_vlan: entered promiscuous mode [ 783.239100][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.245988][T19437] gretap0: entered promiscuous mode [ 783.252825][T19437] gretap0: entered allmulticast mode [ 783.257346][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.282241][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.304608][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.333206][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.349984][T19271] veth0_macvtap: entered promiscuous mode [ 783.364037][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.375620][T19271] veth1_macvtap: entered promiscuous mode [ 783.391216][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.424114][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.459533][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.466847][T19271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.483331][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.522673][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.536218][T19271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.556191][T19428] binder: 19427:19428 ioctl 4020ae46 7faf48897be0 returned -22 [ 783.559073][T19271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.582432][ T5898] usb 1-1: USB disconnect, device number 4 [ 783.599558][T19271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.619571][T19271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.627891][T19428] binder: 19427:19428 ioctl 4020ae46 7faf488978e0 returned -22 [ 783.628773][T19271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.903595][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.922019][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.977849][T18791] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 783.992092][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.020493][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.238132][T18791] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 784.250048][T18791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.578210][T19452] syz.0.3174 (19452): drop_caches: 1 [ 784.591097][T19453] syz.0.3174 (19453): drop_caches: 1 [ 784.607295][T18791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.681466][T19452] syz.0.3174 (19452): drop_caches: 1 [ 784.702864][T18791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 784.828856][T18791] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 784.843343][T18791] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 784.883535][T18791] usb 3-1: Manufacturer: syz [ 784.924840][T18791] usb 3-1: config 0 descriptor?? [ 785.365766][T18791] appleir 0003:05AC:8243.0045: unknown main item tag 0x0 [ 785.421390][T18791] appleir 0003:05AC:8243.0045: No inputs registered, leaving [ 785.465865][T18791] appleir 0003:05AC:8243.0045: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 785.680991][T18791] usb 2-1: USB disconnect, device number 126 [ 785.983015][T19482] No such timeout policy "syz0" [ 786.036513][T19482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3179'. [ 786.120983][T19482] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.128781][T19482] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.181029][ T5897] usb 3-1: USB disconnect, device number 45 [ 786.354384][T19491] netlink: 162 bytes leftover after parsing attributes in process `syz.1.3181'. [ 786.449733][T19491] input: syz0 as /devices/virtual/input/input40 [ 786.461655][T19491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3181'. [ 786.575829][T19495] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3182'. [ 786.604599][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 786.616867][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 786.616882][ T30] audit: type=1326 audit(1749117027.544:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 786.639406][T19495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3182'. [ 786.692067][T19495] fuse: Unknown parameter '' [ 786.747855][ T30] audit: type=1326 audit(1749117027.544:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 786.860500][ T30] audit: type=1326 audit(1749117027.544:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 786.917882][ T30] audit: type=1326 audit(1749117027.544:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 786.944579][ T30] audit: type=1326 audit(1749117027.544:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 786.966930][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.973252][ T5897] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 786.980876][ T1210] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 786.991180][ T30] audit: type=1326 audit(1749117027.544:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 787.039132][ T30] audit: type=1326 audit(1749117027.544:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 787.090508][ T30] audit: type=1326 audit(1749117027.544:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 787.148102][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 787.153547][ T30] audit: type=1326 audit(1749117027.544:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 787.181390][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.193270][ T1210] usb 2-1: config 0 has no interfaces? [ 787.199333][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.209846][ T5897] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 787.219353][ T30] audit: type=1326 audit(1749117027.544:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19494 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4798e929 code=0x7ffc0000 [ 787.243002][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.253287][ T1210] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 787.262818][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.271181][ T5902] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 787.273464][ T5897] usb 4-1: config 0 descriptor?? [ 787.284345][ T1210] usb 2-1: Product: syz [ 787.289249][ T1210] usb 2-1: Manufacturer: syz [ 787.294139][ T1210] usb 2-1: SerialNumber: syz [ 787.302421][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 787.312577][ T1210] usb 2-1: config 0 descriptor?? [ 787.357988][ T977] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 787.440030][ T5902] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 787.453325][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 787.473698][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 787.484045][ T5902] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 787.498981][ T5902] usb 5-1: Manufacturer: syz [ 787.509574][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 787.522248][ T5902] usb 5-1: config 0 descriptor?? [ 787.537658][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 787.544389][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 787.556667][T18791] usb 2-1: USB disconnect, device number 127 [ 787.566589][ T5902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 787.584393][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 787.599194][ T977] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 787.609868][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.620601][ T977] usb 1-1: Product: syz [ 787.630430][ T977] usb 1-1: Manufacturer: syz [ 787.637819][ T977] usb 1-1: SerialNumber: syz [ 787.644952][ T977] usb 1-1: config 0 descriptor?? [ 787.755144][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 787.767229][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 787.864660][T18791] usb 1-1: USB disconnect, device number 5 [ 788.292638][ T5897] pwc: recv_control_msg error -71 req 04 val 1000 [ 788.303425][ T5897] pwc: recv_control_msg error -71 req 04 val 1300 [ 788.318713][ T5897] pwc: recv_control_msg error -71 req 04 val 1400 [ 788.336563][ T5897] pwc: recv_control_msg error -71 req 02 val 2000 [ 788.354039][ T5897] pwc: recv_control_msg error -71 req 02 val 2100 [ 788.359754][T19550] netlink: 162 bytes leftover after parsing attributes in process `syz.1.3194'. [ 788.370241][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 788.382288][T19550] input: syz0 as /devices/virtual/input/input41 [ 788.397435][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 788.412432][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 788.430333][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 788.437283][T19552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3194'. [ 788.450831][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 788.467541][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 788.485062][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 788.506053][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 788.541908][ T5897] pwc: Registered as video103. [ 788.597605][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 788.675013][ T5897] usb 4-1: USB disconnect, device number 34 [ 789.072299][T19569] fuse: Unknown parameter '000ú½ÝÙPê0Owû00' [ 789.718667][T18791] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 789.761025][T19587] CIFS: VFS: Malformed UNC in devname [ 789.918208][T18791] usb 4-1: Using ep0 maxpacket: 32 [ 789.932813][T18791] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 789.941228][T18791] usb 4-1: config 0 has no interface number 0 [ 789.947691][T18791] usb 4-1: config 0 interface 184 has no altsetting 0 [ 790.097881][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 790.148232][ T5897] usb 5-1: USB disconnect, device number 29 [ 790.240135][T18791] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 790.256879][T18791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.272776][T18791] usb 4-1: Product: syz [ 790.279690][T18791] usb 4-1: Manufacturer: syz [ 790.325184][ T5902] usb 2-1: device descriptor read/64, error -71 [ 790.343974][T18791] usb 4-1: SerialNumber: syz [ 790.382519][T18791] usb 4-1: config 0 descriptor?? [ 790.446853][T18791] smsc75xx v1.0.0 [ 790.575376][T18791] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 790.657480][T18791] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 790.718342][ T5897] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 790.737823][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 790.924918][ T5902] usb 2-1: device descriptor read/64, error -71 [ 790.967957][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 790.993247][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.033091][ T5897] usb 3-1: config 0 has no interfaces? [ 791.051192][ T5902] usb usb2-port1: attempt power cycle [ 791.060780][ T5897] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 791.077133][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.107687][ T5897] usb 3-1: Product: syz [ 791.152322][ T5897] usb 3-1: Manufacturer: syz [ 791.201649][ T5897] usb 3-1: SerialNumber: syz [ 791.241440][ T5897] usb 3-1: config 0 descriptor?? [ 791.427969][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 791.449073][ T5902] usb 2-1: device descriptor read/8, error -71 [ 791.467999][ T5897] usb 3-1: USB disconnect, device number 46 [ 791.697895][ T5902] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 791.739095][ T5902] usb 2-1: device descriptor read/8, error -71 [ 791.869454][ T5902] usb usb2-port1: unable to enumerate USB device [ 791.887843][ T5838] Bluetooth: hci0: command 0x0405 tx timeout [ 792.278318][T19619] tipc: Enabling of bearer rejected, already enabled [ 792.448189][ T5897] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 792.611159][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 792.626818][ T5898] usb 4-1: USB disconnect, device number 35 [ 792.645393][ T5897] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 792.669886][ T5897] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 792.679478][ T5897] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 792.686882][ T5897] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 792.697035][ T5897] usb 3-1: config 129 has no interface number 0 [ 792.703449][ T1210] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 792.735617][ T5897] usb 3-1: config 129 has no interface number 1 [ 792.752459][ T5897] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 792.775815][ T5897] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 792.791864][ T5897] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 792.824881][ T5897] usb 3-1: config 129 interface 135 has no altsetting 0 [ 792.836095][ T5897] usb 3-1: config 129 interface 5 has no altsetting 0 [ 792.857347][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 792.867287][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.876254][ T5897] usb 3-1: Product: syz [ 792.899603][ T1210] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 792.959567][ T5897] usb 3-1: Manufacturer: syz [ 793.006265][ T5897] usb 3-1: SerialNumber: syz [ 793.011521][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.037120][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.047205][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 793.061742][ T1210] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 793.076171][ T1210] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 793.094339][ T1210] usb 1-1: Manufacturer: syz [ 793.105275][ T1210] usb 1-1: config 0 descriptor?? [ 793.147919][ T5898] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 793.263065][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 793.264803][T19630] vti0: entered promiscuous mode [ 793.275316][ T5897] usb 3-1: MIDIStreaming interface descriptor not found [ 793.297873][T19630] vti0: entered allmulticast mode [ 793.307974][ T5898] usb 4-1: device descriptor read/64, error -71 [ 793.310315][T19627] dlm: no locking on control device [ 793.360370][ T5897] usb 3-1: USB disconnect, device number 47 [ 793.360684][T19630] dlm: no locking on control device [ 793.477336][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.531491][ T1210] usbhid 1-1:0.0: can't add hid device: -71 [ 793.548218][ T1210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 793.557870][ T5898] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 793.573416][ T1210] usb 1-1: USB disconnect, device number 6 [ 793.687822][ T5898] usb 4-1: device descriptor read/64, error -71 [ 793.794784][T19641] FAULT_INJECTION: forcing a failure. [ 793.794784][T19641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.801365][ T5898] usb usb4-port1: attempt power cycle [ 793.808134][T19641] CPU: 0 UID: 0 PID: 19641 Comm: syz.2.3212 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 793.808162][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 793.808173][T19641] Call Trace: [ 793.808183][T19641] [ 793.808193][T19641] dump_stack_lvl+0x189/0x250 [ 793.808229][T19641] ? __pfx____ratelimit+0x10/0x10 [ 793.808256][T19641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.808287][T19641] ? __pfx__printk+0x10/0x10 [ 793.808321][T19641] should_fail_ex+0x414/0x560 [ 793.808364][T19641] _copy_to_user+0x31/0xb0 [ 793.808388][T19641] vmci_host_unlocked_ioctl+0x217a/0x26a0 [ 793.808427][T19641] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 793.808462][T19641] ? do_vfs_ioctl+0xf37/0x1990 [ 793.808504][T19641] ? kasan_quarantine_put+0xdd/0x220 [ 793.808544][T19641] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 793.808571][T19641] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 793.808594][T19641] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 793.808617][T19641] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 793.808641][T19641] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 793.808682][T19641] ? __lock_acquire+0xab9/0xd20 [ 793.808731][T19641] ? __fget_files+0x2a/0x420 [ 793.808757][T19641] ? __fget_files+0x2a/0x420 [ 793.808778][T19641] ? __fget_files+0x3a0/0x420 [ 793.808799][T19641] ? __fget_files+0x2a/0x420 [ 793.808843][T19641] ? bpf_lsm_file_ioctl+0x9/0x20 [ 793.808875][T19641] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 793.808908][T19641] __se_sys_ioctl+0xfc/0x170 [ 793.808942][T19641] do_syscall_64+0xfa/0x3b0 [ 793.808969][T19641] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.808995][T19641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.809017][T19641] ? clear_bhb_loop+0x60/0xb0 [ 793.809043][T19641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.809064][T19641] RIP: 0033:0x7fdd24b8e929 [ 793.809082][T19641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.809100][T19641] RSP: 002b:00007fdd25a76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.809123][T19641] RAX: ffffffffffffffda RBX: 00007fdd24db5fa0 RCX: 00007fdd24b8e929 [ 793.809140][T19641] RDX: 0000200000000040 RSI: 00000000000007a6 RDI: 0000000000000003 [ 793.809155][T19641] RBP: 00007fdd25a76090 R08: 0000000000000000 R09: 0000000000000000 [ 793.809169][T19641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.809181][T19641] R13: 0000000000000000 R14: 00007fdd24db5fa0 R15: 00007fdd24edfa28 [ 793.809213][T19641] [ 793.848121][ T5902] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 794.188014][ T5898] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 794.208228][ T5898] usb 4-1: device descriptor read/8, error -71 [ 794.219537][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 794.231684][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 794.241572][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 794.253267][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 794.269973][ T5902] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 794.281639][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.292113][ T5902] usb 2-1: Product: syz [ 794.296572][ T5902] usb 2-1: Manufacturer: syz [ 794.306732][ T5902] usb 2-1: SerialNumber: syz [ 794.333050][ T5902] usb 2-1: config 0 descriptor?? [ 794.347149][ T5902] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 794.357842][T18791] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 794.449074][ T5898] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 794.478364][ T5898] usb 4-1: device descriptor read/8, error -71 [ 794.538653][T18791] usb 1-1: Using ep0 maxpacket: 32 [ 794.557331][T18791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.558694][T19657] netlink: 'syz.4.3217': attribute type 1 has an invalid length. [ 794.567652][ T5902] scsi host1: usb-storage 2-1:0.0 [ 794.585107][T18791] usb 1-1: config 0 has no interfaces? [ 794.597484][T19659] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 794.632090][ T5898] usb usb4-port1: unable to enumerate USB device [ 794.647120][ T5902] usb 2-1: USB disconnect, device number 6 [ 794.670190][T18791] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 794.682083][T18791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.690946][T19657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3217'. [ 794.692344][T18791] usb 1-1: Product: syz [ 794.706329][T18791] usb 1-1: Manufacturer: syz [ 794.713946][T18791] usb 1-1: SerialNumber: syz [ 794.749994][T18791] usb 1-1: config 0 descriptor?? [ 794.983772][T18791] usb 1-1: USB disconnect, device number 7 [ 795.509336][ T5898] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 795.670594][ T5898] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 795.681021][ T5898] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 795.691770][ T5898] usb 5-1: config 8 has no interface number 0 [ 795.698462][ T5898] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 795.729272][ T5898] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 795.745139][ T5898] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 795.759034][ T5898] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 795.768359][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.782612][ T5898] usb 5-1: NFC: intf ffff888034595000 id ffffffff8eb532c0 [ 795.907883][ T5897] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 796.003284][T19691] syzkaller0: entered promiscuous mode [ 796.017952][T19691] syzkaller0: entered allmulticast mode [ 796.056996][T19697] netlink: 'syz.3.3228': attribute type 27 has an invalid length. [ 796.060297][ T5897] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 796.079340][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.090696][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.121995][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 796.138656][ T5897] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 796.148260][ T5897] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 796.156370][ T5897] usb 1-1: Manufacturer: syz [ 796.175255][ T5897] usb 1-1: config 0 descriptor?? [ 796.205724][T19697] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.214261][T19697] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.328610][T18791] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 796.447020][T19697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.472469][T19697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.511409][T19704] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 796.525669][T18791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 796.536206][T18791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 796.546513][T18791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 796.557301][T18791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 796.583359][T18791] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 796.597502][T18791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.606091][T18791] usb 3-1: Product: syz [ 796.610863][T18791] usb 3-1: Manufacturer: syz [ 796.615572][T18791] usb 3-1: SerialNumber: syz [ 796.632479][T18791] usb 3-1: config 0 descriptor?? [ 796.649735][T18791] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 796.658710][ T5897] usbhid 1-1:0.0: can't add hid device: -71 [ 796.676759][ T5897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 796.711826][ T5897] usb 1-1: USB disconnect, device number 8 [ 796.899216][T18791] scsi host1: usb-storage 3-1:0.0 [ 796.912304][T18791] usb 3-1: USB disconnect, device number 48 [ 797.014144][T19697] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.036317][T19697] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.056465][T19697] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.066300][T19697] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.435843][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 797.435860][ T30] audit: type=1800 audit(1749117038.374:1955): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3232" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 797.520687][T19697] syzkaller0: left promiscuous mode [ 797.552588][T19697] syzkaller0: left allmulticast mode [ 798.160224][ T5902] usb 5-1: USB disconnect, device number 30 [ 798.838502][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 800.237023][T19727] ip6tnl1: entered promiscuous mode [ 800.244772][T19727] ip6tnl1: entered allmulticast mode [ 800.837854][ T5902] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 800.898198][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 800.968272][ T5881] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 801.009967][ T5902] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 801.020939][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.032604][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.045546][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 801.060111][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 801.069508][ T5902] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 801.077604][ T5902] usb 3-1: Manufacturer: syz [ 801.084238][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 801.098448][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.110324][ T5902] usb 3-1: config 0 descriptor?? [ 801.125941][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.137260][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 801.148710][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 801.161761][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 801.171954][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 801.181926][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 801.192957][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 801.202322][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 801.210659][ T9] usb 4-1: Manufacturer: syz [ 801.216165][ T5881] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 801.226343][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.235325][ T9] usb 4-1: config 0 descriptor?? [ 801.240548][ T5881] usb 1-1: Product: syz [ 801.244771][ T5881] usb 1-1: Manufacturer: syz [ 801.253426][ T5881] usb 1-1: SerialNumber: syz [ 801.269271][ T5881] usb 1-1: config 0 descriptor?? [ 801.279217][ T5881] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 801.359631][T12148] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 801.482437][T19766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3249'. [ 801.528155][T12148] usb 5-1: Using ep0 maxpacket: 8 [ 801.531124][ T5902] appleir 0003:05AC:8243.0046: item fetching failed at offset 0/1 [ 801.542153][ T5902] appleir 0003:05AC:8243.0046: parse failed [ 801.542813][T12148] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 801.550410][ T5902] appleir 0003:05AC:8243.0046: probe with driver appleir failed with error -22 [ 801.574349][T12148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.585629][T12148] usb 5-1: Product: syz [ 801.590553][T12148] usb 5-1: Manufacturer: syz [ 801.595289][T12148] usb 5-1: SerialNumber: syz [ 801.606389][T12148] usb 5-1: config 0 descriptor?? [ 801.733589][ T48] usb 3-1: USB disconnect, device number 49 [ 801.819329][T12148] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 801.857390][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 801.866769][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 801.877664][ T9] usb 4-1: USB disconnect, device number 40 [ 802.191804][T19771] xt_HMARK: proto mask must be zero with L3 mode [ 802.305814][ T30] audit: type=1326 audit(1749117043.244:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.360060][ T30] audit: type=1326 audit(1749117043.284:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.409271][ T30] audit: type=1326 audit(1749117043.284:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.435150][ T30] audit: type=1326 audit(1749117043.284:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.493586][ T30] audit: type=1326 audit(1749117043.304:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.520416][ T30] audit: type=1326 audit(1749117043.404:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.534734][T19776] syzkaller0: entered promiscuous mode [ 802.548760][T19776] syzkaller0: entered allmulticast mode [ 802.558364][ T30] audit: type=1326 audit(1749117043.434:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.589356][ T30] audit: type=1326 audit(1749117043.434:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.614807][ T30] audit: type=1326 audit(1749117043.434:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.641543][ T30] audit: type=1326 audit(1749117043.464:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.668519][ T30] audit: type=1326 audit(1749117043.504:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.696085][T19780] netlink: 'syz.2.3253': attribute type 27 has an invalid length. [ 802.706672][ T30] audit: type=1326 audit(1749117043.584:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.771517][ T30] audit: type=1326 audit(1749117043.604:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.797096][T19780] gretap0: left promiscuous mode [ 802.803623][T19780] gretap0: left allmulticast mode [ 802.817619][ T30] audit: type=1326 audit(1749117043.604:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2812b8e929 code=0x7ffc0000 [ 802.893495][T19780] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.901117][T19780] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.114279][T12148] gspca_sunplus: reg_w_riv err -71 [ 803.137999][T12148] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 803.155579][T12148] usb 5-1: USB disconnect, device number 31 [ 803.327696][T19780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.346564][T19780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.401155][T19780] vlan1: left promiscuous mode [ 803.436836][T19780] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.446875][T19780] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.456174][T19780] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.465675][T19780] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.518399][ T1210] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 803.556012][T19780] syzkaller0: left promiscuous mode [ 803.561342][T19780] syzkaller0: left allmulticast mode [ 803.581347][T19787] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 803.591839][T19787] team0: Port device batadv1 added [ 803.662191][ T1210] usb 4-1: device descriptor read/64, error -71 [ 803.706980][ T5881] scsi host1: usb-storage 1-1:0.0 [ 803.731886][T19792] FAULT_INJECTION: forcing a failure. [ 803.731886][T19792] name failslab, interval 1, probability 0, space 0, times 0 [ 803.759638][ T5881] usb 1-1: USB disconnect, device number 9 [ 803.775007][T19792] CPU: 0 UID: 0 PID: 19792 Comm: syz.1.3259 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 803.775025][T19792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.775033][T19792] Call Trace: [ 803.775039][T19792] [ 803.775045][T19792] dump_stack_lvl+0x189/0x250 [ 803.775069][T19792] ? __pfx____ratelimit+0x10/0x10 [ 803.775087][T19792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.775106][T19792] ? __pfx__printk+0x10/0x10 [ 803.775124][T19792] ? __pfx___might_resched+0x10/0x10 [ 803.775135][T19792] ? fs_reclaim_acquire+0x7d/0x100 [ 803.775154][T19792] should_fail_ex+0x414/0x560 [ 803.775174][T19792] should_failslab+0xa8/0x100 [ 803.775189][T19792] __kmalloc_cache_noprof+0x70/0x3d0 [ 803.775203][T19792] ? __scm_send+0x63f/0x14a0 [ 803.775224][T19792] __scm_send+0x63f/0x14a0 [ 803.775239][T19792] ? is_bpf_text_address+0x26/0x2b0 [ 803.775252][T19792] ? aa_label_sk_perm+0x413/0x560 [ 803.775276][T19792] ? __pfx___scm_send+0x10/0x10 [ 803.775295][T19792] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 803.775316][T19792] unix_dgram_sendmsg+0x139/0x1870 [ 803.775341][T19792] ? aa_sk_perm+0x81e/0x950 [ 803.775359][T19792] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 803.775378][T19792] ? aa_sock_msg_perm+0x94/0x160 [ 803.775396][T19792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.775412][T19792] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 803.775427][T19792] __sock_sendmsg+0x21c/0x270 [ 803.775446][T19792] ____sys_sendmsg+0x505/0x830 [ 803.775463][T19792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.775493][T19792] __sys_sendmsg_sock+0x28/0x40 [ 803.775506][T19792] io_sendmsg+0x1ed/0x590 [ 803.775530][T19792] __io_issue_sqe+0x17e/0x4b0 [ 803.775546][T19792] ? io_file_get_normal+0x101/0x2f0 [ 803.775563][T19792] io_issue_sqe+0x165/0xfd0 [ 803.775583][T19792] io_submit_sqes+0xa38/0x1c50 [ 803.775617][T19792] __se_sys_io_uring_enter+0x2df/0x2b20 [ 803.775644][T19792] ? ksys_write+0x1cb/0x250 [ 803.775659][T19792] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 803.775674][T19792] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 803.775692][T19792] ? __pfx_vfs_write+0x10/0x10 [ 803.775706][T19792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 803.775725][T19792] ? __fget_files+0x3a0/0x420 [ 803.775744][T19792] ? fput+0xa0/0xd0 [ 803.775760][T19792] ? ksys_write+0x22a/0x250 [ 803.775774][T19792] ? __pfx_ksys_write+0x10/0x10 [ 803.775788][T19792] ? rcu_is_watching+0x15/0xb0 [ 803.775804][T19792] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 803.775822][T19792] do_syscall_64+0xfa/0x3b0 [ 803.775838][T19792] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.775854][T19792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.775867][T19792] ? clear_bhb_loop+0x60/0xb0 [ 803.775882][T19792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.775894][T19792] RIP: 0033:0x7f2812b8e929 [ 803.775906][T19792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.775916][T19792] RSP: 002b:00007f28139fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 803.775930][T19792] RAX: ffffffffffffffda RBX: 00007f2812db5fa0 RCX: 00007f2812b8e929 [ 803.775940][T19792] RDX: 000000000080ffff RSI: 00000000000047f6 RDI: 0000000000000005 [ 803.775948][T19792] RBP: 00007f28139fc090 R08: 0000000000000000 R09: 0000000000000000 [ 803.775956][T19792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.775964][T19792] R13: 0000000000000000 R14: 00007f2812db5fa0 R15: 00007f2812edfa28 [ 803.775982][T19792] [ 803.978098][ T1210] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 804.302349][ T1210] usb 4-1: device descriptor read/64, error -71 [ 804.420618][ T1210] usb usb4-port1: attempt power cycle [ 804.521687][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 804.692813][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 804.709126][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.744143][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.781454][ T1210] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 804.794315][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 804.809617][ T1210] usb 4-1: device descriptor read/8, error -71 [ 804.846333][ T5902] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 804.860838][ T5902] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 804.894590][ T5902] usb 2-1: Manufacturer: syz [ 804.934307][ T5902] usb 2-1: config 0 descriptor?? [ 805.037948][ T48] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 805.057917][ T1210] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 805.098660][ T1210] usb 4-1: device descriptor read/8, error -71 [ 805.309445][ T48] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 805.320553][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.332420][ T1210] usb usb4-port1: unable to enumerate USB device [ 805.363968][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.416318][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 805.433714][ T48] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 805.441336][ T5902] appleir 0003:05AC:8243.0047: item fetching failed at offset 0/1 [ 805.468063][ T48] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 805.476771][ T48] usb 5-1: Manufacturer: syz [ 805.502611][ T5902] appleir 0003:05AC:8243.0047: parse failed [ 805.518516][ T5902] appleir 0003:05AC:8243.0047: probe with driver appleir failed with error -22 [ 805.518697][ T48] usb 5-1: config 0 descriptor?? [ 805.657650][ T5902] usb 2-1: USB disconnect, device number 7 [ 806.187877][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 806.206726][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 806.235229][ T48] usb 5-1: USB disconnect, device number 32 [ 807.047428][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 807.164539][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 807.328202][T19804] tipc: Enabling of bearer rejected, already enabled [ 807.343013][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 807.358427][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 807.484313][ T1210] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 807.902619][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 807.921948][ T1210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 807.965542][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 808.019816][ T1210] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 808.091489][ T1210] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 808.102222][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.115854][ T1210] usb 5-1: Product: syz [ 808.144434][ T1210] usb 5-1: Manufacturer: syz [ 808.158329][ T1210] usb 5-1: SerialNumber: syz [ 808.233222][ T1210] usb 5-1: config 0 descriptor?? [ 808.320475][ T1210] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 808.471112][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.477587][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.477605][ T1210] scsi host1: usb-storage 5-1:0.0 [ 808.564368][ T1210] usb 5-1: USB disconnect, device number 33 [ 808.824297][T19851] FAULT_INJECTION: forcing a failure. [ 808.824297][T19851] name failslab, interval 1, probability 0, space 0, times 0 [ 808.837389][T19851] CPU: 0 UID: 0 PID: 19851 Comm: syz.2.3276 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 808.837407][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.837416][T19851] Call Trace: [ 808.837421][T19851] [ 808.837426][T19851] dump_stack_lvl+0x189/0x250 [ 808.837450][T19851] ? __pfx____ratelimit+0x10/0x10 [ 808.837467][T19851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.837486][T19851] ? __pfx__printk+0x10/0x10 [ 808.837503][T19851] ? __pfx___might_resched+0x10/0x10 [ 808.837515][T19851] ? fs_reclaim_acquire+0x7d/0x100 [ 808.837534][T19851] should_fail_ex+0x414/0x560 [ 808.837553][T19851] should_failslab+0xa8/0x100 [ 808.837568][T19851] kmem_cache_alloc_noprof+0x73/0x3c0 [ 808.837581][T19851] ? skb_clone+0x212/0x3a0 [ 808.837598][T19851] skb_clone+0x212/0x3a0 [ 808.837611][T19851] ? nfnetlink_rcv+0x486/0x2520 [ 808.837629][T19851] nfnetlink_rcv+0x4b4/0x2520 [ 808.837646][T19851] ? unwind_get_return_address+0x4d/0x90 [ 808.837666][T19851] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 808.837691][T19851] ? stack_trace_save+0x9c/0xe0 [ 808.837710][T19851] ? stack_depot_save_flags+0x40/0x900 [ 808.837744][T19851] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 808.837778][T19851] ? __lock_acquire+0xab9/0xd20 [ 808.837824][T19851] ? __lock_acquire+0xab9/0xd20 [ 808.837858][T19851] ? netlink_deliver_tap+0x2e/0x1b0 [ 808.837882][T19851] ? netlink_deliver_tap+0x2e/0x1b0 [ 808.837899][T19851] ? netlink_deliver_tap+0x2e/0x1b0 [ 808.837929][T19851] netlink_unicast+0x75b/0x8d0 [ 808.837965][T19851] netlink_sendmsg+0x805/0xb30 [ 808.837992][T19851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.838013][T19851] ? aa_sock_msg_perm+0x94/0x160 [ 808.838038][T19851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 808.838061][T19851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.838080][T19851] __sock_sendmsg+0x21c/0x270 [ 808.838107][T19851] ____sys_sendmsg+0x505/0x830 [ 808.838131][T19851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.838158][T19851] ? import_iovec+0x74/0xa0 [ 808.838180][T19851] ___sys_sendmsg+0x21f/0x2a0 [ 808.838201][T19851] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.838253][T19851] ? __fget_files+0x2a/0x420 [ 808.838273][T19851] ? __fget_files+0x3a0/0x420 [ 808.838302][T19851] __x64_sys_sendmsg+0x19b/0x260 [ 808.838325][T19851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.838353][T19851] ? __pfx_ksys_write+0x10/0x10 [ 808.838368][T19851] ? rcu_is_watching+0x15/0xb0 [ 808.838389][T19851] ? do_syscall_64+0xbe/0x3b0 [ 808.838418][T19851] do_syscall_64+0xfa/0x3b0 [ 808.838441][T19851] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.838463][T19851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.838480][T19851] ? clear_bhb_loop+0x60/0xb0 [ 808.838502][T19851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.838519][T19851] RIP: 0033:0x7fdd24b8e929 [ 808.838535][T19851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.838550][T19851] RSP: 002b:00007fdd25a76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.838569][T19851] RAX: ffffffffffffffda RBX: 00007fdd24db5fa0 RCX: 00007fdd24b8e929 [ 808.838582][T19851] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 808.838593][T19851] RBP: 00007fdd25a76090 R08: 0000000000000000 R09: 0000000000000000 [ 808.838605][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.838615][T19851] R13: 0000000000000000 R14: 00007fdd24db5fa0 R15: 00007fdd24edfa28 [ 808.838643][T19851] [ 809.417269][T19854] Attempt to restore checkpoint with obsolete wellknown handles [ 809.458008][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 809.819173][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 809.950070][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.981375][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.993192][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 810.026613][ T5902] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 810.041360][ T5902] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 810.053761][ T5902] usb 2-1: Manufacturer: syz [ 810.071287][ T5902] usb 2-1: config 0 descriptor?? [ 810.358056][ T5881] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 810.771780][ T5902] appleir 0003:05AC:8243.0048: item fetching failed at offset 0/1 [ 810.779747][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 810.786363][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.819735][ T5902] appleir 0003:05AC:8243.0048: parse failed [ 810.845313][ T5881] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 810.861626][T19882] syz_tun: entered allmulticast mode [ 810.876047][ T5902] appleir 0003:05AC:8243.0048: probe with driver appleir failed with error -22 [ 810.900598][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.933231][ T5902] usb 2-1: USB disconnect, device number 8 [ 810.981545][ T5881] usb 4-1: config 0 descriptor?? [ 811.245523][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 811.259885][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 811.309474][T19877] syz_tun: left allmulticast mode [ 811.324098][ T5881] usb 4-1: USB disconnect, device number 45 [ 812.117792][ T1210] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 812.185368][T19900] FAULT_INJECTION: forcing a failure. [ 812.185368][T19900] name failslab, interval 1, probability 0, space 0, times 0 [ 812.198168][T19900] CPU: 0 UID: 0 PID: 19900 Comm: syz.1.3290 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 812.198189][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 812.198198][T19900] Call Trace: [ 812.198204][T19900] [ 812.198210][T19900] dump_stack_lvl+0x189/0x250 [ 812.198233][T19900] ? __pfx____ratelimit+0x10/0x10 [ 812.198251][T19900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.198270][T19900] ? __pfx__printk+0x10/0x10 [ 812.198293][T19900] ? __pfx___might_resched+0x10/0x10 [ 812.198305][T19900] ? fs_reclaim_acquire+0x7d/0x100 [ 812.198324][T19900] should_fail_ex+0x414/0x560 [ 812.198345][T19900] should_failslab+0xa8/0x100 [ 812.198360][T19900] kmem_cache_alloc_noprof+0x73/0x3c0 [ 812.198373][T19900] ? __kernfs_new_node+0xd7/0x7e0 [ 812.198392][T19900] __kernfs_new_node+0xd7/0x7e0 [ 812.198408][T19900] ? __lock_acquire+0xab9/0xd20 [ 812.198430][T19900] ? __pfx___kernfs_new_node+0x10/0x10 [ 812.198446][T19900] ? kernfs_root+0x1c/0x230 [ 812.198466][T19900] ? kernfs_root+0x1c/0x230 [ 812.198480][T19900] ? kernfs_root+0x1c/0x230 [ 812.198493][T19900] ? kernfs_root+0x1c/0x230 [ 812.198517][T19900] kernfs_new_node+0x102/0x210 [ 812.198545][T19900] __kernfs_create_file+0x4b/0x2e0 [ 812.198576][T19900] sysfs_add_file_mode_ns+0x238/0x300 [ 812.198603][T19900] internal_create_group+0x66d/0x1110 [ 812.198641][T19900] ? __pfx_internal_create_group+0x10/0x10 [ 812.198665][T19900] ? kernfs_add_one+0xf0/0x520 [ 812.198690][T19900] sysfs_create_groups+0x59/0x120 [ 812.198708][T19900] device_add_attrs+0xe0/0x5a0 [ 812.198728][T19900] ? __pfx_device_add_attrs+0x10/0x10 [ 812.198745][T19900] ? device_add_class_symlinks+0x21f/0x240 [ 812.198762][T19900] device_add+0x496/0xb50 [ 812.198775][T19900] ? device_initialize+0x24b/0x440 [ 812.198791][T19900] netdev_register_kobject+0x156/0x2f0 [ 812.198810][T19900] register_netdevice+0x126c/0x1ae0 [ 812.198836][T19900] ? __pfx_register_netdevice+0x10/0x10 [ 812.198853][T19900] ? __kasan_kmalloc+0x93/0xb0 [ 812.198866][T19900] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 812.198878][T19900] ? register_vlan_dev+0x380/0x800 [ 812.198894][T19900] register_vlan_dev+0x3cb/0x800 [ 812.198911][T19900] vlan_newlink+0x4b2/0x610 [ 812.198928][T19900] ? __pfx_vlan_newlink+0x10/0x10 [ 812.198945][T19900] rtnl_newlink_create+0x30d/0xb00 [ 812.198963][T19900] ? __pfx_aa_get_newest_label+0x10/0x10 [ 812.198982][T19900] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 812.198993][T19900] ? rtnl_newlink+0x8db/0x1c70 [ 812.199021][T19900] ? __pfx___mutex_lock+0x10/0x10 [ 812.199056][T19900] ? ns_capable+0x8a/0xf0 [ 812.199082][T19900] rtnl_newlink+0x16d6/0x1c70 [ 812.199102][T19900] ? netlink_sendmsg+0x805/0xb30 [ 812.199122][T19900] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.199155][T19900] ? kasan_quarantine_put+0xdd/0x220 [ 812.199174][T19900] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.199194][T19900] ? nlmon_xmit+0xb0/0x100 [ 812.199204][T19900] ? kmem_cache_free+0x18f/0x400 [ 812.199221][T19900] ? __local_bh_enable_ip+0x12d/0x1c0 [ 812.199240][T19900] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.199257][T19900] ? __local_bh_enable_ip+0x12d/0x1c0 [ 812.199275][T19900] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 812.199301][T19900] ? __dev_queue_xmit+0x27e/0x3a70 [ 812.199325][T19900] ? __lock_acquire+0xab9/0xd20 [ 812.199358][T19900] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.199376][T19900] rtnetlink_rcv_msg+0x7cc/0xb70 [ 812.199397][T19900] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 812.199415][T19900] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.199432][T19900] ? ref_tracker_free+0x63a/0x7d0 [ 812.199449][T19900] ? __copy_skb_header+0xa7/0x550 [ 812.199465][T19900] ? __pfx_ref_tracker_free+0x10/0x10 [ 812.199482][T19900] ? __skb_clone+0x63/0x7a0 [ 812.199501][T19900] netlink_rcv_skb+0x208/0x470 [ 812.199513][T19900] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.199533][T19900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.199555][T19900] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.199567][T19900] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.199583][T19900] netlink_unicast+0x75b/0x8d0 [ 812.199609][T19900] netlink_sendmsg+0x805/0xb30 [ 812.199632][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.199654][T19900] ? aa_sock_msg_perm+0x94/0x160 [ 812.199679][T19900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.199703][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.199723][T19900] __sock_sendmsg+0x21c/0x270 [ 812.199751][T19900] ____sys_sendmsg+0x505/0x830 [ 812.199776][T19900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.199796][T19900] ? import_iovec+0x74/0xa0 [ 812.199812][T19900] ___sys_sendmsg+0x21f/0x2a0 [ 812.199827][T19900] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.199881][T19900] ? __fget_files+0x2a/0x420 [ 812.199896][T19900] ? __fget_files+0x3a0/0x420 [ 812.199919][T19900] __x64_sys_sendmsg+0x19b/0x260 [ 812.199936][T19900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.199957][T19900] ? __pfx_ksys_write+0x10/0x10 [ 812.199974][T19900] ? do_syscall_64+0xbe/0x3b0 [ 812.199995][T19900] do_syscall_64+0xfa/0x3b0 [ 812.200012][T19900] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.200029][T19900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.200042][T19900] ? clear_bhb_loop+0x60/0xb0 [ 812.200058][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.200070][T19900] RIP: 0033:0x7f2812b8e929 [ 812.200082][T19900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.200094][T19900] RSP: 002b:00007f28139fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.200114][T19900] RAX: ffffffffffffffda RBX: 00007f2812db5fa0 RCX: 00007f2812b8e929 [ 812.200128][T19900] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 812.200141][T19900] RBP: 00007f28139fc090 R08: 0000000000000000 R09: 0000000000000000 [ 812.200153][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.200165][T19900] R13: 0000000000000000 R14: 00007f2812db5fa0 R15: 00007f2812edfa28 [ 812.200187][T19900] [ 812.364605][ T1210] usb 5-1: config 0 has no interfaces? [ 812.364704][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.788965][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.806801][ T1210] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 812.816711][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.843647][ T1210] usb 5-1: Product: syz [ 812.853361][ T1210] usb 5-1: Manufacturer: syz [ 812.865746][ T1210] usb 5-1: SerialNumber: syz [ 812.890230][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 812.900628][T19902] netlink: 'syz.1.3291': attribute type 9 has an invalid length. [ 812.907630][ T1210] usb 5-1: config 0 descriptor?? [ 812.915531][T19902] macvlan0: entered allmulticast mode [ 812.921286][T19902] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 813.070091][T19908] FAULT_INJECTION: forcing a failure. [ 813.070091][T19908] name failslab, interval 1, probability 0, space 0, times 0 [ 813.090912][T19908] CPU: 0 UID: 0 PID: 19908 Comm: syz.2.3292 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 813.090937][T19908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.090949][T19908] Call Trace: [ 813.090969][T19908] [ 813.090977][T19908] dump_stack_lvl+0x189/0x250 [ 813.091008][T19908] ? __pfx____ratelimit+0x10/0x10 [ 813.091031][T19908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.091059][T19908] ? __pfx__printk+0x10/0x10 [ 813.091081][T19908] ? __pfx___might_resched+0x10/0x10 [ 813.091098][T19908] ? fs_reclaim_acquire+0x7d/0x100 [ 813.091123][T19908] should_fail_ex+0x414/0x560 [ 813.091149][T19908] should_failslab+0xa8/0x100 [ 813.091169][T19908] __kmalloc_noprof+0xcb/0x4f0 [ 813.091185][T19908] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 813.091258][T19908] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 813.091289][T19908] genl_family_rcv_msg_doit+0xb8/0x300 [ 813.091316][T19908] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 813.091340][T19908] ? rcu_is_watching+0x15/0xb0 [ 813.091358][T19908] ? apparmor_capable+0x137/0x1b0 [ 813.091376][T19908] ? bpf_lsm_capable+0x9/0x20 [ 813.091390][T19908] ? security_capable+0x7e/0x2e0 [ 813.091414][T19908] genl_rcv_msg+0x60e/0x790 [ 813.091447][T19908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.091465][T19908] ? __pfx_wg_set_device+0x10/0x10 [ 813.091493][T19908] netlink_rcv_skb+0x208/0x470 [ 813.091507][T19908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.091526][T19908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.091552][T19908] ? down_read+0x1ad/0x2e0 [ 813.091574][T19908] genl_rcv+0x28/0x40 [ 813.091590][T19908] netlink_unicast+0x75b/0x8d0 [ 813.091619][T19908] netlink_sendmsg+0x805/0xb30 [ 813.091639][T19908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.091657][T19908] ? aa_sock_msg_perm+0x94/0x160 [ 813.091677][T19908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 813.091695][T19908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.091710][T19908] __sock_sendmsg+0x21c/0x270 [ 813.091732][T19908] ____sys_sendmsg+0x505/0x830 [ 813.091752][T19908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.091775][T19908] ? import_iovec+0x74/0xa0 [ 813.091793][T19908] ___sys_sendmsg+0x21f/0x2a0 [ 813.091810][T19908] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.091851][T19908] ? __fget_files+0x2a/0x420 [ 813.091866][T19908] ? __fget_files+0x3a0/0x420 [ 813.091890][T19908] __x64_sys_sendmsg+0x19b/0x260 [ 813.091912][T19908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 813.091935][T19908] ? __pfx_ksys_write+0x10/0x10 [ 813.091948][T19908] ? rcu_is_watching+0x15/0xb0 [ 813.091965][T19908] ? do_syscall_64+0xbe/0x3b0 [ 813.091988][T19908] do_syscall_64+0xfa/0x3b0 [ 813.092006][T19908] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.092023][T19908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.092037][T19908] ? clear_bhb_loop+0x60/0xb0 [ 813.092054][T19908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.092067][T19908] RIP: 0033:0x7fdd24b8e929 [ 813.092082][T19908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.092094][T19908] RSP: 002b:00007fdd25a76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.092109][T19908] RAX: ffffffffffffffda RBX: 00007fdd24db5fa0 RCX: 00007fdd24b8e929 [ 813.092120][T19908] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 813.092129][T19908] RBP: 00007fdd25a76090 R08: 0000000000000000 R09: 0000000000000000 [ 813.092138][T19908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.092146][T19908] R13: 0000000000000000 R14: 00007fdd24db5fa0 R15: 00007fdd24edfa28 [ 813.092168][T19908] [ 813.137209][T12148] usb 5-1: USB disconnect, device number 34 [ 813.140654][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.457032][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.463047][ C0] hrtimer: interrupt took 365333784 ns [ 813.563063][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.847797][ T5902] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 813.997792][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 814.043743][ T5902] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 814.059732][T19919] FAULT_INJECTION: forcing a failure. [ 814.059732][T19919] name failslab, interval 1, probability 0, space 0, times 0 [ 814.072929][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.081433][ T5902] usb 2-1: Product: syz [ 814.087887][T19919] CPU: 1 UID: 0 PID: 19919 Comm: syz.4.3297 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 814.087896][ T5902] usb 2-1: Manufacturer: syz [ 814.087912][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 814.087924][T19919] Call Trace: [ 814.087932][T19919] [ 814.087941][T19919] dump_stack_lvl+0x189/0x250 [ 814.087979][T19919] ? __pfx____ratelimit+0x10/0x10 [ 814.088008][T19919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.088041][T19919] ? __pfx__printk+0x10/0x10 [ 814.088069][T19919] ? __pfx___might_resched+0x10/0x10 [ 814.088097][T19919] ? fs_reclaim_acquire+0x7d/0x100 [ 814.088128][T19919] should_fail_ex+0x414/0x560 [ 814.088160][T19919] should_failslab+0xa8/0x100 [ 814.088185][T19919] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 814.088208][T19919] ? snd_timer_instance_new+0x6a/0x220 [ 814.088240][T19919] kstrdup+0x42/0x100 [ 814.088268][T19919] snd_timer_instance_new+0x6a/0x220 [ 814.088294][T19919] snd_seq_timer_open+0x237/0x5f0 [ 814.088324][T19919] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 814.088344][T19919] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 814.088374][T19919] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 814.088398][T19919] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 814.088424][T19919] ? kfree+0x18e/0x440 [ 814.088449][T19919] snd_seq_queue_timer_open+0xc2/0x130 [ 814.088483][T19919] snd_seq_ioctl_set_queue_timer+0x21c/0x360 [ 814.088517][T19919] snd_seq_ioctl+0x254/0x420 [ 814.088551][T19919] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 814.088597][T19919] ? __fget_files+0x3a0/0x420 [ 814.088620][T19919] ? __fget_files+0x2a/0x420 [ 814.088647][T19919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 814.088677][T19919] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 814.088703][T19919] __se_sys_ioctl+0xfc/0x170 [ 814.088738][T19919] do_syscall_64+0xfa/0x3b0 [ 814.088763][T19919] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.088788][T19919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.088809][T19919] ? clear_bhb_loop+0x60/0xb0 [ 814.088833][T19919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.088853][T19919] RIP: 0033:0x7faf4798e929 [ 814.088871][T19919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.088887][T19919] RSP: 002b:00007faf48899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.088908][T19919] RAX: ffffffffffffffda RBX: 00007faf47bb5fa0 RCX: 00007faf4798e929 [ 814.088923][T19919] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000005 [ 814.088938][T19919] RBP: 00007faf48899090 R08: 0000000000000000 R09: 0000000000000000 [ 814.088949][T19919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.088962][T19919] R13: 0000000000000000 R14: 00007faf47bb5fa0 R15: 00007faf47cdfa28 [ 814.088994][T19919] [ 814.137867][T12148] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 814.141491][ T5902] usb 2-1: SerialNumber: syz [ 814.339489][T12148] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 814.456327][T12148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.477487][T12148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.497894][T12148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 814.522326][T12148] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 814.537327][T12148] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 814.556822][T12148] usb 1-1: Manufacturer: syz [ 814.590817][T12148] usb 1-1: config 0 descriptor?? [ 814.751664][ T5902] usb 2-1: config 0 descriptor?? [ 814.818938][T19923] input: syz1 as /devices/virtual/input/input43 [ 814.944652][T19923] tap0: tun_chr_ioctl cmd 1074025677 [ 814.972833][ T5902] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 009 [ 814.988057][T19923] tap0: linktype set to 825 [ 815.009671][T12148] appleir 0003:05AC:8243.0049: item fetching failed at offset 0/1 [ 815.026322][T19923] syz_tun: entered allmulticast mode [ 815.041766][T12148] appleir 0003:05AC:8243.0049: parse failed [ 815.064532][T19922] syz_tun: left allmulticast mode [ 815.068485][T12148] appleir 0003:05AC:8243.0049: probe with driver appleir failed with error -22 [ 815.177636][ T5902] usb 2-1: USB disconnect, device number 9 [ 815.224002][T12148] usb 1-1: USB disconnect, device number 10 [ 815.360058][T19935] netlink: 'syz.4.3303': attribute type 7 has an invalid length. [ 816.163163][T19960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.373917][T19946] netlink: 'syz.4.3306': attribute type 32 has an invalid length. [ 816.717874][ T48] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 816.943132][ T48] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 816.962536][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.968532][T19972] kvm: user requested TSC rate below hardware speed [ 816.990322][ T48] usb 5-1: config 0 descriptor?? [ 817.434702][T19946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.469278][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.508265][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.052499][ T48] ath6kl: Failed to submit usb control message: -110 [ 818.064917][ T48] ath6kl: unable to send the bmi data to the device: -110 [ 818.099053][ T48] ath6kl: Unable to send get target info: -110 [ 818.144359][ T48] ath6kl: Failed to init ath6kl core: -110 [ 818.160497][ T48] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 818.597422][ T5902] usb 5-1: USB disconnect, device number 35 [ 818.630285][T20003] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 820.720931][T20069] fuse: blksize only supported for fuseblk [ 820.928460][ T1210] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 821.027815][ T48] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 821.119265][ T1210] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 821.167874][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.188091][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.203420][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 821.208857][ T5902] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 821.221728][ T1210] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 821.233177][ T5881] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 821.241230][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 821.265335][ T1210] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 821.274870][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 821.286135][ T1210] usb 3-1: Manufacturer: syz [ 821.291061][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 821.313649][ T1210] usb 3-1: config 0 descriptor?? [ 821.329323][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.363520][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 821.374702][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 821.386318][ T48] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 821.400395][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.405513][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 821.417259][ T48] usb 5-1: config 0 descriptor?? [ 821.418753][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 821.438062][ T5881] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 821.450941][ T5881] usb 4-1: config 0 has no interface number 0 [ 821.469732][ T5902] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 821.478299][ T5881] usb 4-1: config 0 interface 184 has no altsetting 0 [ 821.505482][ T5902] usb 2-1: config 0 has no interface number 0 [ 821.512804][ T5902] usb 2-1: config 0 interface 184 has no altsetting 0 [ 821.522013][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 821.531969][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.540567][ T5881] usb 4-1: Product: syz [ 821.548322][ T5881] usb 4-1: Manufacturer: syz [ 821.553013][ T5881] usb 4-1: SerialNumber: syz [ 821.565387][ T5881] usb 4-1: config 0 descriptor?? [ 821.572156][ T5902] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 821.582870][ T5881] smsc75xx v1.0.0 [ 821.586611][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 821.596811][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.605197][ T5881] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 821.613537][ T5902] usb 2-1: Product: syz [ 821.617807][ T5902] usb 2-1: Manufacturer: syz [ 821.622422][ T5902] usb 2-1: SerialNumber: syz [ 821.631922][ T48] usb 5-1: USB disconnect, device number 36 [ 821.639793][ T5902] usb 2-1: config 0 descriptor?? [ 821.660094][ T5902] smsc75xx v1.0.0 [ 821.663773][ T5902] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 821.681750][ T5902] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 821.756395][ T1210] appleir 0003:05AC:8243.004A: unknown main item tag 0x0 [ 821.765676][ T1210] appleir 0003:05AC:8243.004A: No inputs registered, leaving [ 821.779799][ T1210] appleir 0003:05AC:8243.004A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 821.881545][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.896132][T20072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.909590][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.920613][T20072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.128236][ T5902] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 822.257813][ T5902] usb 1-1: device descriptor read/64, error -71 [ 822.457826][ T5881] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 822.497840][ T5902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 822.571252][ T9] usb 3-1: USB disconnect, device number 50 [ 822.588793][ T5881] usb 5-1: device descriptor read/64, error -71 [ 822.630143][ T5902] usb 1-1: device descriptor read/64, error -71 [ 822.738238][ T5902] usb usb1-port1: attempt power cycle [ 822.837802][ T5881] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 822.968013][ T5881] usb 5-1: device descriptor read/64, error -71 [ 823.077833][ T5902] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 823.085946][ T5881] usb usb5-port1: attempt power cycle [ 823.108480][ T5902] usb 1-1: device descriptor read/8, error -71 [ 823.357808][ T5902] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 823.378891][ T5902] usb 1-1: device descriptor read/8, error -71 [ 823.438078][ T5881] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 823.458367][ T5881] usb 5-1: device descriptor read/8, error -71 [ 823.498176][ T5902] usb usb1-port1: unable to enumerate USB device [ 823.717911][ T5881] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 823.738456][ T5881] usb 5-1: device descriptor read/8, error -71 [ 823.852461][ T9] usb 2-1: USB disconnect, device number 10 [ 823.870070][ T5881] usb usb5-port1: unable to enumerate USB device [ 823.933265][ T1210] usb 4-1: USB disconnect, device number 46 [ 824.308134][ T48] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 824.417880][ T1210] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 824.467791][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 824.474388][ T48] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 824.483581][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.491890][T12148] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 824.501608][ T48] usb 3-1: config 0 descriptor?? [ 824.579585][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.589933][ T1210] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 824.598956][ T1210] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 824.608157][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.618275][ T1210] usb 4-1: config 0 descriptor?? [ 824.662741][T12148] usb 2-1: config 27 has an invalid descriptor of length 120, skipping remainder of the config [ 824.673329][T12148] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.684430][T12148] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.697378][T12148] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.706451][T12148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.731857][T12148] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.739451][T12148] usb 2-1: invalid MIDI out EP 0 [ 824.787256][T20112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.800444][T20112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.862705][T12148] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 826.077832][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 826.227803][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 826.234654][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 826.242999][ T9] usb 5-1: config 0 has no interface number 0 [ 826.249409][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 826.260039][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 826.269182][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.277216][ T9] usb 5-1: Product: syz [ 826.281444][ T9] usb 5-1: Manufacturer: syz [ 826.286214][ T9] usb 5-1: SerialNumber: syz [ 826.293903][ T9] usb 5-1: config 0 descriptor?? [ 826.301584][ T9] smsc75xx v1.0.0 [ 826.305257][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 826.315793][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 827.015309][T12148] usb 4-1: USB disconnect, device number 47 [ 827.077058][T20132] netlink: 162 bytes leftover after parsing attributes in process `syz.3.3360'. [ 827.095407][T20132] input: syz0 as /devices/virtual/input/input44 [ 827.105140][T20132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3360'. [ 827.254030][ T48] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 827.264840][ T9] usb 2-1: USB disconnect, device number 11 [ 827.277189][ T48] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 827.280438][T20111] delete_channel: no stack [ 827.315194][ T48] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 827.557840][T12148] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 827.719654][T12148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 827.730849][T12148] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 827.741035][T12148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 827.750854][T12148] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 827.763983][T12148] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 827.773822][T12148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.782052][T12148] usb 4-1: Product: syz [ 827.786768][T12148] usb 4-1: Manufacturer: syz [ 827.791508][T12148] usb 4-1: SerialNumber: syz [ 827.799187][T12148] usb 4-1: config 0 descriptor?? [ 827.811675][T12148] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 828.013349][T12148] scsi host1: usb-storage 4-1:0.0 [ 828.777807][T12148] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 828.803819][ T9] usb 5-1: USB disconnect, device number 41 [ 828.908365][T12148] usb 2-1: device descriptor read/64, error -71 [ 829.151318][T12148] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 829.229479][T20164] netlink: 162 bytes leftover after parsing attributes in process `syz.4.3371'. [ 829.243892][T20164] input: syz0 as /devices/virtual/input/input45 [ 829.256051][T20164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3371'. [ 829.287831][T12148] usb 2-1: device descriptor read/64, error -71 [ 829.400851][T12148] usb usb2-port1: attempt power cycle [ 829.740037][T12148] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 829.768380][T12148] usb 2-1: device descriptor read/8, error -71 [ 830.027779][T12148] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 830.048376][T12148] usb 2-1: device descriptor read/8, error -71 [ 830.169197][T12148] usb usb2-port1: unable to enumerate USB device [ 830.230277][ T5902] usb 4-1: USB disconnect, device number 48 [ 830.331990][T20176] syz.4.3373 (20176): drop_caches: 2 [ 830.384270][T20173] syz.4.3373 (20173): drop_caches: 2 [ 830.392605][T20173] syz.4.3373 (20173): drop_caches: 2 [ 830.619138][T20186] ------------[ cut here ]------------ [ 830.624683][T20186] WARNING: CPU: 0 PID: 20186 at arch/x86/kvm/lapic.c:3407 kvm_apic_accept_events+0x341/0x490 [ 830.635146][T20186] Modules linked in: [ 830.639322][T20186] CPU: 0 UID: 0 PID: 20186 Comm: syz.2.3377 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 830.651139][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.661307][T20186] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 830.667512][T20186] Code: eb 0c e8 62 7b 72 00 eb 05 e8 5b 7b 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 99 1a 0a cc e8 40 7b 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 830.687247][T20186] RSP: 0018:ffffc900033c75c8 EFLAGS: 00010287 [ 830.693623][T20186] RAX: ffffffff814de090 RBX: 0000000000000002 RCX: 0000000000080000 [ 830.701722][T20186] RDX: ffffc9001d575000 RSI: 0000000000000a98 RDI: 0000000000000a99 [ 830.709797][T20186] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81463863 [ 830.717993][T20186] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: 0000000000000002 [ 830.725998][T20186] R13: dffffc0000000000 R14: ffff888033827800 R15: ffff888024795558 [ 830.734048][T20186] FS: 00007fdd25a766c0(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 830.743064][T20186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.749732][T20186] CR2: 00007fdd25a74b28 CR3: 0000000041e1e000 CR4: 00000000003526f0 [ 830.757879][T20186] Call Trace: [ 830.761182][T20186] [ 830.764146][T20186] vcpu_run+0x76f/0x6f70 [ 830.768540][T20186] ? __pfx_vcpu_run+0x10/0x10 [ 830.773259][T20186] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 830.779086][T20186] ? rcu_is_watching+0x15/0xb0 [ 830.783893][T20186] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 830.789547][T20186] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 830.795299][T20186] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 830.801444][T20186] ? rcu_is_watching+0x15/0xb0 [ 830.806251][T20186] ? look_up_lock_class+0x74/0x170 [ 830.811475][T20186] ? register_lock_class+0x51/0x320 [ 830.816721][T20186] ? __lock_acquire+0xab9/0xd20 [ 830.821781][T20186] kvm_vcpu_ioctl+0x95c/0xe90 [ 830.826488][T20186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 830.831761][T20186] ? __lock_acquire+0xab9/0xd20 [ 830.836651][T20186] ? __fget_files+0x2a/0x420 [ 830.841320][T20186] ? __fget_files+0x2a/0x420 [ 830.845936][T20186] ? __fget_files+0x3a0/0x420 [ 830.850723][T20186] ? __fget_files+0x2a/0x420 [ 830.855354][T20186] ? bpf_lsm_file_ioctl+0x9/0x20 [ 830.860438][T20186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 830.865680][T20186] __se_sys_ioctl+0xfc/0x170 [ 830.870380][T20186] do_syscall_64+0xfa/0x3b0 [ 830.874916][T20186] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.880217][T20186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.886393][T20186] ? clear_bhb_loop+0x60/0xb0 [ 830.891147][T20186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.897065][T20186] RIP: 0033:0x7fdd24b8e929 [ 830.901574][T20186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.921256][T20186] RSP: 002b:00007fdd25a76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.929766][T20186] RAX: ffffffffffffffda RBX: 00007fdd24db5fa0 RCX: 00007fdd24b8e929 [ 830.937848][T20186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 830.945832][T20186] RBP: 00007fdd24c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 830.953877][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.961942][T20186] R13: 0000000000000000 R14: 00007fdd24db5fa0 R15: 00007fdd24edfa28 [ 830.970026][T20186] [ 830.973072][T20186] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 830.980375][T20186] CPU: 0 UID: 0 PID: 20186 Comm: syz.2.3377 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 830.992114][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.002184][T20186] Call Trace: [ 831.005482][T20186] [ 831.008430][T20186] dump_stack_lvl+0x99/0x250 [ 831.013074][T20186] ? __asan_memcpy+0x40/0x70 [ 831.017701][T20186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.022939][T20186] ? __pfx__printk+0x10/0x10 [ 831.027564][T20186] panic+0x2db/0x790 [ 831.031498][T20186] ? __pfx_panic+0x10/0x10 [ 831.035940][T20186] ? show_trace_log_lvl+0x4fb/0x550 [ 831.041188][T20186] __warn+0x31b/0x4b0 [ 831.045208][T20186] ? kvm_apic_accept_events+0x341/0x490 [ 831.050786][T20186] ? kvm_apic_accept_events+0x341/0x490 [ 831.056364][T20186] report_bug+0x2be/0x4f0 [ 831.060724][T20186] ? kvm_apic_accept_events+0x341/0x490 [ 831.066301][T20186] ? kvm_apic_accept_events+0x341/0x490 [ 831.071872][T20186] ? kvm_apic_accept_events+0x343/0x490 [ 831.077545][T20186] handle_bug+0x84/0x160 [ 831.081812][T20186] exc_invalid_op+0x1a/0x50 [ 831.086326][T20186] asm_exc_invalid_op+0x1a/0x20 [ 831.091173][T20186] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 831.097334][T20186] Code: eb 0c e8 62 7b 72 00 eb 05 e8 5b 7b 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 16 99 1a 0a cc e8 40 7b 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 831.116938][T20186] RSP: 0018:ffffc900033c75c8 EFLAGS: 00010287 [ 831.123010][T20186] RAX: ffffffff814de090 RBX: 0000000000000002 RCX: 0000000000080000 [ 831.130996][T20186] RDX: ffffc9001d575000 RSI: 0000000000000a98 RDI: 0000000000000a99 [ 831.138984][T20186] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81463863 [ 831.146958][T20186] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: 0000000000000002 [ 831.154929][T20186] R13: dffffc0000000000 R14: ffff888033827800 R15: ffff888024795558 [ 831.162906][T20186] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 831.168629][T20186] ? kvm_apic_accept_events+0x340/0x490 [ 831.174185][T20186] ? kvm_apic_accept_events+0x340/0x490 [ 831.179736][T20186] vcpu_run+0x76f/0x6f70 [ 831.184027][T20186] ? __pfx_vcpu_run+0x10/0x10 [ 831.188719][T20186] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 831.194452][T20186] ? rcu_is_watching+0x15/0xb0 [ 831.199219][T20186] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 831.204772][T20186] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 831.210492][T20186] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 831.216476][T20186] ? rcu_is_watching+0x15/0xb0 [ 831.221242][T20186] ? look_up_lock_class+0x74/0x170 [ 831.226364][T20186] ? register_lock_class+0x51/0x320 [ 831.231572][T20186] ? __lock_acquire+0xab9/0xd20 [ 831.236445][T20186] kvm_vcpu_ioctl+0x95c/0xe90 [ 831.241128][T20186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 831.246327][T20186] ? __lock_acquire+0xab9/0xd20 [ 831.251194][T20186] ? __fget_files+0x2a/0x420 [ 831.255788][T20186] ? __fget_files+0x2a/0x420 [ 831.260384][T20186] ? __fget_files+0x3a0/0x420 [ 831.265066][T20186] ? __fget_files+0x2a/0x420 [ 831.269663][T20186] ? bpf_lsm_file_ioctl+0x9/0x20 [ 831.274607][T20186] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 831.279819][T20186] __se_sys_ioctl+0xfc/0x170 [ 831.284420][T20186] do_syscall_64+0xfa/0x3b0 [ 831.288925][T20186] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.294133][T20186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.300212][T20186] ? clear_bhb_loop+0x60/0xb0 [ 831.304896][T20186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.310786][T20186] RIP: 0033:0x7fdd24b8e929 [ 831.315200][T20186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.334819][T20186] RSP: 002b:00007fdd25a76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.343241][T20186] RAX: ffffffffffffffda RBX: 00007fdd24db5fa0 RCX: 00007fdd24b8e929 [ 831.351222][T20186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 831.359194][T20186] RBP: 00007fdd24c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 831.367165][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.375134][T20186] R13: 0000000000000000 R14: 00007fdd24db5fa0 R15: 00007fdd24edfa28 [ 831.383124][T20186] [ 831.386539][T20186] Kernel Offset: disabled [ 831.390880][T20186] Rebooting in 86400 seconds..