last executing test programs: 28m53.325625654s ago: executing program 32 (id=1014): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="c1b0ad27d26172a2282808a63b3666a169a53df2d890fb5a415426c6ff9bb87f8efb6ea14cfe80e636e7de7e2b18b78f80a1e4c84f02ecfed07902492c1d761451483d0b9c75d1bce9e4a0d1f8a9bb1a22b951653bbce82561c6ac0fc2eaeb3fcd942b78b746455913dbea328ce1088f52d7cb35aefac657784f2cdd576c15bb8db65205430d6a1cd094d749955b73eacfddece7cb849c1554eebb88d05d597b840ebac50de06d2efcc88cb3bbdaf6388332964078936c035bd3e3f56e545ba683f4523df2d6034d5086890db8e3922638a6196fe0a1a026ef632f8c6c6ac3e66228e9c15abaa010f956968240f31f97ef8da03d671ad3d48e135c880c8e096e0f39cdaf38d0203a20362c985b38cefac182d22fb4b709c8c1b5dea4eb5e6dde7af7793b120ba2eadcb892c53de7ce0ab712ef33721121fcf841fa1d35f7a2e9ff1b054adf64e6e2261e015c9a0dd0b8d8fd363ae1bd8ffc28d41b681ece5c4568cf6adf2815b618e8308dbd1c2e664c178a4504e0a362291ac5dfa1115709d42fe8bfc92f109d60c12d43fc204a8f3458b199adab770d51eacae9eeaa4cd1569f05dde2f71e2819dc64c2c62441e4cf281acc54f88741ed1329343e0dbfb356ab7fd3732a93b2a15fac46ef120745cd49b7e65421595fd81fabaee29a28bab508c95fa74d8884c4edd6bdea3c71e8d230c8e666aeaadf6f4c67846ad43a3f458123508c77df0b13c25b3414220600e35dd2d44bbd78d7902f767dfcfb6001674106a6a952f3a47e78758893cae3bfff8d053842642c3f9eb512e12ef09313b2a823e1c31dd45b236824b057992101016204d48e1d3f7f42503b20f549371f92688624089b5460b724307b569f8570c5eba6c243702370f76c0ef78d59d5aef447852c9102618a9811f8440abac9e78a7613b00ecc1b0f6dd9c477701a975fe07c95bc35237d33f7368b9be2986566f310f16a189fe0438ae0887384b10f80b2635493839b3de154c8fe5bc020164e062d77b4826df0eb2af18c8a9e5b28c3d2849bbd29628c76306cf7f4433e0d128a93f5b12a2bea9ed9b3a85e8e4896ec6ce0ea8ef4471cd9db37d91b3f45cb72c2781864c820e4e267e6a650a3687eac83d7b010c621c1c52717b98335df8e87390e5a76874bf31993e1a801f4fe8dc9222877c693fc043d38f54b9422210f2a023f496149def0a9e936c4adbce6a290113b2fb40c5e3e79a0797cd37c2e1731e0143bb5d8bfa51c226d02d567b50c63ebbc64e1d44e120e4cb0fed4347528df660736b99ea3235e83da0c167a015cb3e7a57c5e9072b2fd358cdb20127deb4f37deb2d09ef2b2795ccb52f3bab0f5abcfc37bd0932e55f92cba6e468fb3175b983ca8597327fe67fc1aa89f6d1829ea7eeeec41e3920a51ac583489abe8eb5c1c841d4969a06fde61fa56e59f8f0f64b19071d8a84853047a3d766e82cf2c651586ac3f877c8909ed056b1828fff9211e414b8b8f5cd38542132d9562abae4bf63bbd0532208199e4d2c59b1e5d9a438f026d01c40fd0b8076a9e933e65e65ff9ea0fde753edc738aa079b6695c6055ac2690d6d928e9046c446bd9d0c3e685eee30f7a718436cfa917f678cfdc2f7f72e7bbe508cc64239597f5969f4a750cf1f0f5a646018eb1c35f912cc4c888da888ae8fad773fe47c6a78a63af9b035e15eb790a7ccff2f44d70acd069499d7db8bd02bb6bf252699d8d46a8923f21ba967585be41b79e4d653ab2fba065610ca31e683a5cd5b29678f45eb2593700b361919efb0dffa1782b70d0a4a34247cbd9b240536ce6d46615ec96387e05f60375a2fb8977898cdee503b1fa20924fdec96a1930dac55dddd2eb612c383e4eff4e95f6cdf88047fe76ce9dcbf18a6f81d091f8e767be97b105dbc709d92c6f25d785b4972cafaea96bafc82cdbd4525340e37903259117b8ab63bbb9fb34cf23cdc48b59f7bd0b50ea12950e424e706a5d9ef4d69b334a5de6629b2b585d64688dcd5d4230fbe6f8043e99e9942d13973568b789a34a3ec7a70ff4b34ed4f28a1ad2eb31d8c81ce77d8b554749522c149944a08669ba48926dca4429fe817a7d91f373db7a100f74d6a062ad5e9ea20c77fb575a0c54c5eafd640ee770c844c813d9d807dd80333571840bd8b4b6eae859ddef2f6dbffcd7040691e2228f927faa8c82de451e60303267df50e973b0c6c7f0738eb8cc82b899534a41ae37ede81b72c38d57d82c59f87a8acf456229cced3bd6da6003d1f456ab5849b4dce78b05eddb6188d69cf8ac5bc16799e99021b5485d5ce080b328e7e11e4bfc083a68d9ec22007fae9b04bd167ce4b8f455ed6419501ab6ca434d6418a8f8baf09a66a51ba426f61ccc2f30acfeb988f3a1f36bface215200b3ed62a3d2d74f7b8c0c8244472cc77fbec96721c55d10ae299fb1aba8c45ac1cc882ce964250b30d81bf8a8be110b9f8af1aa644313052e00ed644dd87ca7df34a50ccc3602f7d3ab93fd6ca19d5b9a06894a8f91d3aff8a3cd52fcd3af7adcc7f9ddfce8bb74b714ffd4d2e76cfe60b44a47b1d7fb2bbf0c4a3dac47edd09888fdbe781071900a2e473b4daeb545561ae8f34b4eeaa60f44900684ac1f620a6fa54e562de40645158a5d8c36e3d9027bfc65274ffc8bfca8c03d464047485c3db1e54294406d90ed05c3b0d2d4e66d5e992b99dc3ede4be703d2f31dfdc5dc8c6ef01f43b42306f4a4825be7499afdc8ba1c02e3998329726af89e030be58ecdd20bf8b5d7e5f81878791f92fbd000aa1f9c2bd0aeaba2cecdeffb476dbedf37692d23dac191dfd2f7633d04a0826512b79bc1f8a6737b9b36baec7f5a4555fc7054458f9c7169968ebac29009778dd739e3a5b6cb2f0a6ae0fcb4f545e89a61ad993e42dfa7a283bd9f3d2eac7797c345843244320da0ccad437458512747f321158cdad67ca63d9e3eb187c2fee00d5f9e20266e103317a54293a7ba090b40174d0232bfb2ebd8576adf8c8a9f963fe12a592fe19af02d6f684dbba4a2d6d98003f60a728b1e7b524cbf248666a88d6f19c4937db31e56b4f5373f8aa16926f7ec75da8a76cc340376958175d6f23585e97bee88164cd2e2df5835474c6cf21f65754b98766ab47857d3008be18186792ecc604fc17519cec1d67c727c84299201ba77ccb7e60aa7b912fcc61b5ae4f580a90892b6e7cc3610b357ba6ac5b377cf43bab2970ee240525e12767611842d1d52fe188f125d018889e3e2092b7a39ddb57c0546bb17ec2443e1bdc5a763c9ce5f9b528ed14134694802886d4420f02ee9574f62e6bcc456028663f0b1399d86599fe0047d93a2eb162d2fa13385192bd4221e41bcc61511e43103550f958ba6dfd5e1b855b82a543e8e0766678f1cdd1214a399aeef014150baba0556212132dbf135319868b9ff93adf51eefa64be829362388e2659101a3ec85e0bb5119423b60819aba5c3b8823b5e37f469783db165ff4cd2cd7306f163c0e4ac8695747b571d7941e2bf1be981a48e71f336bbcc20ccddfae7bdc7f94ab62dfda1d552bdef955189eeadc9bd710c2a3a8c9d414c45d2b99ab8b4e92f8fcf2b83380d079b3dd3ddb0978dadf5569f70444e48f26d32ae410a88bd7201a84b4e3b44a1764ad6428a8148907e86bb0a09cfc1191eda8202d3160c8a4716de885ee80fbbbb2278fcbcbfd1c76b1d55ccbb9ed228de215f5104a9a0b4d647b1fa4bc786c68bee29f5229ab9cc3ca0729199eb7bd2ec9e9be7d833b13586882ea069e2aac144f22442244655c33759aa1e101f87836ad0cb16ddc6e36a66a8755acd52b4e446c0e974756a087a725a95ef59121d39f1c75fa136d7212c71a14ad5579be27c1dd0af8f9e4fb9b407e2bbbdee423486c4d5127fcf5107177b1e21e81f1758f4c304f40c0eb35627113be1e4dcb06d209ca06696f214ca260721c4ce7b4d82db24f024c74786c8d6ba7c73f495eab53e545c44b53a78f82d0aedfe04b798bbe125c8622eb5a2a764cae9c8d01380d464bd2dc7a1b0eb2bc431ae432ccfa81f2913af53bd714fe97d958c928534aa2f7caff6cd926daad3e6ed4c44bd3dd3e1a3fe0e12e8423a79c93d7475e29d036b2491e3ae7e50e4098c107abc4eec102808c8d643c4d4ec5707ca06a0b584bbf1bdbfda771a708002ab235fbfe91923b95fe8f4decb6ea6f1022bd98b6f7df5b457a198f2dd8031db5998c56acb30526ac7a7ef157b269259d6606a91b13bc09db05d4f1ae91a8d4fddd9038e5c03506447a483f8759945ec9700b5ed83c7097c177756773c8a250c76415ff43ff091d2015452b8803297e882a832700cb2d4c5c09c9aff61aa04f9cfc81e3d68911c7029a9ab79bdf72d2814068c828c86aadf77bd56953019ad507f5e059ff6ddb5562722acb3193baf88f571a2aa6d575c35506569720d4829f4d29d155bbe186cb72707eddaab43052871ec43dbc5018c1ce41120bc53f2cae7ebcae5bfb42dd1a4d17f782638ffa9747802cb74c61ebd2936d35ae926dae166ae2ea88effad9467bcd028d733da52576db8892c7b77fb5c97814845e3651f5bd759edd3c72704cc3035cb9e15684a0e17fa0b5704a6ac35576643d6fdbee7c7d05e9f0b0ba3e691e2a281913f2f705077277311ae7b8ae3cf287faac63c8cb0534f8610aae68bfdc2e860dafca682af8ec0d73f5d521dcbd3c8b403ef5763c46a23f307c798a550d3a14c1a9db153c8f1b273cc2bbad5a3450ebc2b391f0e44a3223864a193df9fa27ca15293e36fd461bb4ffa6ca73ae5f2d79933b53e05c59017367125aaea376a509a20c9840100af4f1119f1a8cdab0b835c9315144b22335fda48835dbd7d32ac735f71f69a3fb2c593b5c344f23661ff3729e7142b6da61645f8446e2de64cd637186a66c45efc3ab13db3a9cd0117a3adbb44deae4944a9fd466a4f69af5a959430981deed8994bdfd060da92395e23e449eef961d61e82a65a4314ceb4fe3daa08bbda05ef91d70f549fb7959441cd19ac01cf221b83d6e75c3ad224eadcc3f74b097d2d9edc2ccae58ea09ad3af5bdb3e6b3e81ec38542b927fbfcce573b2ee2f2a71b14a24c4b5a443983665be22bc25251af121920540dfcf8c1f2d57d8f721b48efb9555690fbc3bab0fe71708f3edecc8ffd615b1af7feb0e893c3a458019764d16887dc2973333fa70aac3f5400bcace8dd0c8cd8c79bb1e28e744b6fd1a9a424c5f38cfe256df3e3d252a8941a3691f57098dc8658a93889b29690eb2406586ad10df48c0a34f90a37e5ba6583450946b96fc01867f462050f419058e490e5a0720258885b247f65c4db08b41f8236305daa37f0b83fe327f73a8d65a1d49986de9d8ea076c69003df5984926d0e39d30a41e4a660ef2242f42747a944d7664169fd41d0352d4362ebc6c2519dab028d904e8ca00921c936cdb197ae9f096a53c99d643ab30492be5144bb799dbde12499198c3cfb1483a2a29083fb3fb54957b68590526ef4b5a7fde45c773cd5e414f4ee4db79ba92c7a8c2cf77d3e0847f788ea6fcf10cd208ca5d04ee496f70ea0170bc60da6edbd95b444c100fddbd2e878f934c89b82480b16df600d236299886ff71612493eaaedddfa1dbebe596c8e3b8b4cdc2d231ce7e8df0f242677e6b5c3d2815b9e65e29c80ddee5c711c861950ae60d1b882803cb6c776598936d498c3a800fd1091005638efa23dab3eecd92c8a03734dec8f078e172d000313164f613f02ee24bda86e67adbcf618137a7ec3cdecf7829a8bf2546f62235d92c14ad5b39c1536d923dd579520055b1f89ef17240b89a616caeccbaff0db4d8fa087b5b2c7cadfe4507e0d351f5b045a5e401db68a8186f78edce6be621dbc5ba76b0ff3f406161b170354ca24d128d3a8bd02b7bafc1085b3dab482eaab63f1f165bb0d2d28f70bc9eee4e1fe31d73d12224363562152df7123f1977083534f8ae502984d41c593433be1936ed3296c5153dec58811d603efa95e4d895b9c8ae96af097a644dbdd0bb0aa8d3711bb8b494f3da0fcf48ede0ced49c031ee191e056426dd86276d69640fb1013747022d5b998b4fa7256a0474d2a9e183bd733d335d7208105b1c8676419d1f0252065c7de75c55cb0d221dc8e0532112403c215933ee84e654ebe4a09b34e4c747b34232344c2d3bf83ab53ee7b85f4a3f88914fe79a4f15c4c98a3ec126591591b0e6167e2544523e9070e830d792c78c693d2e6981015dea70a83982042d67a7f5229d106851c32933597e03ca171bc27c2a61380b8e58c41dd9bb808b4b308ab5ce45ba022048e02d89ca1a329f5a9cefb861ab3cd0a05236d58113b47592b0389ca6416b92ebbb367a3a41203d0baba90e8046412b7c23bb027e7cd656cbc864e38272545f66b712fb6ab080f972cd09c92c615a04ada2e24c74c1320ac02fc9ec077e5d5ba621aab5747bee120f5aaa9cb6ca91a162f06415f152cdc79f4117e0cc6fe9bfe53e7e396d5f21ad4328caec1141baddb16a7305ba49bd427e835dc23baae24e559ed66c215662ab3d517d87daf6dc4d2b4c8a3a0c77d65a9df67e756b7b719dc262b15891ccd9545919a5c63577be273276fc39df50dd9388e09fe3bcf1366df9df85fc9b8ef26651c439b76d73c40566fa035736d598ea1d77e1051a785d1717fedae7c687307b277e195555fa6ccaea28c57e07d84f51fb5ef64df87f62c651264ac4b268d116924f0ce008b6355f9901d74d7e8f0b440f337e51cb83fefc278da96edc32fec1012eb955493d8081885ec3dbe94e927f2b490b1bec6fc4b125008153706559a38e147e54d20917ab9d6bb5edf0550f5de539c7fbef949019b339f454be50a056223ccb014bbc078f04c01c8aea18ec58befeb4143c4fe2b6d23f487ff30309ef30986876c2073b7cd3589af3407ed921654683739551fe0cb65959181033b2d2de8482f9dfe9279a2febdba75f7523ae92cd89345494c41a3371f0d4c501f817aa751dc2e4c42597cf72baad04076cebbaa100fea0b0423eee35e32aa60831edb4c772dbe08918a9ede0450dd76430d47b3ebe097b99adaedf6b17dd649c25b77a81c0b1c1cf8447b69638be8872a9f17007f988cc5a555048a727078b5de08ad71156c0446764ef687e2f4bb6fcfe104c5dc862b5e78df61beeec1b1a026dc7283f65035cd5026624daec53c7b025953d9c0266d3e6f02f11931a088e47484230c00c3d6f3b72d095a66b1f87204e739f1b6d4716bb863b6b125e26c7c8e07596538f59b48cbd41250eca1efa85a9e185bc2d8a20787cb66be568f59ddc34a3b207a874d7aa4351da7df89a2ff1ff22bb9d69c177195686bcdc2f04724c8764696f7ef4a75a4e0dd875f07431883da3f9f9cbbc9950e57cfa7bb00b2b8ce162c807cc4d88dabdb91549d2d9a91b74ad5e518a2efae1b0e582423a5fb29e9aa792a2703505b578fd8c73f4f77c485916ede77a9f36be6a12391de7fdf73fdf1db6766ef38c23902be933c49ee8917858e8ee29559a2c2dec20e4a5ad650c52f97d1648f12733ef65466ce94b1268fbec2aef918c4d20886a373b6d3b5fa8b9dcca9c35033e2165803b55a34d87e012cb402ce79ae6de18a4cf57a89ad8dc698bf321a4cb0af1a4d5cdea3da832e3b44f3a47798fda07fc229ac89dde9d4f57b2f8305999400e69d2c5c8caa1bc98ccc833ccbae1682c6993f131a03466303cbc294ba22add02036f73149b2db98688d6462041be3d274d5217c7a6891694af9e2a626f8ec4d4ccb8d4946ef18904ad47a84c7a619e87e773126f61e30d5ced5232e14b6abfb4d44ad05ee999d4d54d2c751cd7c5c9cacfac6f7d47b9f97560038b0baa5e635b553a84f3cbeb04632a9abeb6740ea4ce627f60cd5e6aa71a7e2c205bc90adeb3d61bcd66f17d1296e0cd383b1fc38ad4e2cfd05d4a4ee7371f756eeaa0525bd1673f0070f9f5ae099a29e4c325015d9372ae27635d2eab686be9dd96ec2c014acd8123fea35f97d7ecb5e9bc8359b397e8c0c3b90658aa9fabdc8f9f4bd565dd6e20fc871b658fc3e5944efa972d80303d7a66dfd159e904dbfd894009291ddafdfe3a5c502755b5a3dbd89792b8e5633d6f81d23b63f599fc1f29d679f64afa697260e1e6a10ec075355b58ed9007408a379d3c890bcdbea8604e51c0520be1d8c1f10b0a91d40d7ea9ef9ca2c283153b902700635ce65c3ab69cf3107e2017d8a72160f1794136185afd57c743af49d84fb535fef777e6c6f2a18a04fce9618778c832a608861bc7dd7eab315644f998595d07c5a41bac3e7270a871257802d26f42c454c797414e0d5de88ad611c5e3a05ce76df1348e26509f52b7b125eebe5ce1ec0245bf2e715f2abe2626a42f37ed65c8ac086be9d169cc31adab8da3fc2e2dad0519c0a68cd6cb202c99f5ee48a65c6ac27b0d489faf3083fed64ee5b078d0092d5939fcd01b2a71dbf007367fcc56e2f62904be4097fd7c639caa8a390a59be7a6e46aae93667a26654fe461c043bfec083f065726e66b5f12d9e7013500068de45a49a87dc2d0933287e7575c9f3914071c110c9a8f492c67fc48784aea5c22d1ce26f3281d6deb14da66d69ef6ec8e9080ef0d543bc6ce58b177c01ade4232688fb252d6f3e1ceba283d1d59ae82a15b464746df9bec915f00a184469b846a19a7968d9b38e476e3aef47ae41ed8a7d4d3cf744da190747ee3266ff689428d372545f28e40713615b7f886e1f294056a95f3e50e1afa211ca3a2f4a04535646bf9f4cb709a5ecf437807072cc8b77fbed51e01bfac16c73876a5d2d4916555f7084a772847356855c69c193d8db2d37d8c1a5e6adb2169ddd3bd5b7a2cbf9418d00f174295381d51733924bfdc46017250df28679d6b378cc316c67198b57634f46d5f9c169fde3715ddbeb792fd2c1c74a7f97101d373351037c73af2643b8952665eca13f874aace302f60681e12523b6de8f5c5750d4fb480fe0cad1546af7c88426319baafceccca2b49fe96d2ff446a4867cc0ff6ef7845c93c6a6f2bbeac1e31d5d95618c990646a86b691ba387f6b31f75a69fc68e52c7efd0a1de03be8455514231e04bf7370ab6b49d931f4b581b52ca6e0b104bbd07013651d048dcc5271bce8de0f855c4d289a70b19fa616cddbe27b217116d3a52dfb590df3f932e9fee79e34b42844d4efe8a31844694ffaaf811d72b07ab4a281d75c4dd73f7fc82f9beb49e9ef70c72c31c6b7802ad77d25b405a002d63ba30c078aac97ad8cb9ac85299024c6dba7912c3844ed27097e6852a4567d332560e54bb835d2bfbc31a9bc181f8273b878349c9921c6cbd5466fdea1da224f5361c0c50c5fb4f6ccd9f15f6febea4d24265131cc991d85a5d3bf28ce78dd79a5ddff2b507c8b3d38ece81b386f428ed6cf9258657e7647dfa8a8b0aef5ce051208bf44e2d973885f72835f55458ed6cfcbcb75d998be7110859990eae176c637439b79ad8c41b1b71858a90e65aae941d92a2e9616784ad513321da97a2d1036d083c41eeacb374ca45904d6f205101b5e894cd3f0e2d7b8a737a07802a3a74eb4db792b204f69bf3278fff2538878634b84746b51a87d3364c64a860c568d82757761773b137a1f92fdb012c4f38add32dfd4cf0a6b6ccb8e7958abf0d8ab7cbe7c32919e3bf5618096af980cac33df3eae62fe9bb36eda0aac74dd81fd562113e2515c3d4aa6daec990506bf3b958888119d0b1dc215d5e5418eba9778bd53faa7e9f732ce01f3056fd5b89cafe357648592287c990fd5326df9eebb9452b69e0a94cca107d8ae2e72bca993a08c3531791762f52baef6486848d462854357cdd8788b20383b095d58a35b9ab04380629d8a10707b862bff7024b90555233f0b05848dc1c5145906e90b63b243bd7491673a55d9234a928e9bb37ed35afa3c9a4b936ac42ccb1d1dcb5abe7cc21717fa1025525d24f4eb745f1fe0b3584448e35ef9916fef74cfa511bf189591b2cabb0ff81306d13a37eb8578d183ebc7200b3e28d2c2f39e56ba76078d60192d806c972f4ad6077be01111b412587760e65105faa0d5cb2326f99687ceb7617e2d4d45b918dc581223f0909eb519856748849fac49a2bb4edf727a7b2edf6e4454f526d02ed459d7805b68142c25dfc5544ca04dc7fb3c45418eee7609712f5cdaeb3aa3c6936cdd1f1e0d1486dbe2f3ee05f6856727ebe888e797d834beafb969a90f950198b5ee0ec876172c290466118f8dee069bbdb463040ab8840b842bf2d1637b03040994ccf1b8180131c755c623e65a03c96172bd15ddf0f90dba2ac60800252c193547b0b6beb63c3542f95aa373bda1941edc0d441d6d758bac9a1d7301f51009aab487f1b2cb3935a5c8935e8f2ee2ee3e2dee90f06c6ae693f715b9480219c59abc458e6aee1a210767d26bd5c24f8a4fc6be59011417aac0eaac7ad5715c5942fe87fd341c842544f3e394bebce42c5667a511a0a363a89462aa18595ea6b51f86dd48db166c078adaf2d127b87e6ac9cb6826fb0010d869bf03f2afaee97b6a064fedf3cc0806d75060cd4c86d1014a47b9b81303d3c2716b8c0fa30193393dc1ddda76426fad6c03a41192f6c7cfaaa8e37e9e3eb3cc0c6bdaa721b66a9fab82e6c0fdf964286e4aca0d66201c0adca7c33fae61bba1be0c874f3b495f3f7857cb156ea2538e4101f89e708b4554444e95096a0a40fc78c35be82d843e2d2a3adb8d78d662cabedba523079fb6d52df3bb710d268d7cf32a6a0a88d4f80628c0ac8a447f3fc5e0d091514ca2c64680b7da00d9196adc481f61e281381f748f3b3b0d78f1c77fef19ce0b7466e14bde12a3a9bc5cb225d81fbef39cc1b3c5668e533a8a82375f6fb46dd8413c119a4366314350587685250b3799f0629e75e6a9ec79db0d589849401019fd5074a4ae910fd665c2736974f4ada686655329136e385a46c82d6929b9e01babecb45e780d444855a521ddf1c0f8dae1c1db21a72af45b82ca64939150a87af4e9b1a6d4ed11d547076a93853935f4a12cb388d7fbc5c054353d9ea5ac028dc4a2613b28014f52eda3610347babb083372240b4253071b20862355629a52e9d6342febd19d4ed645fcd1e6f6a1ad089e0a93c079eaf573890e5844d2c94e40549cae5988d5e68a7b4d7ce9f0a6d8917678cc0b9e416e88c7155eadd5a2b2d5a032dc2e409c7f587aee7d641a0c9cdff084708c0066045674e59267ee7b6e3e127fbfe1f3451f4396f568cb46856da5ea6af1bc5698e49c216a897dfd07771d5c4ffcee4ca502fd8df2b81972e5cae58b59b9c7a3368e43f2f9e7c86d68995c536a91b990c87fe90dba70b1cbd3d2396a4291c3d555561f5ec1acbca8f4922083603c94fd0f41ef5b9392ce42a5535829de651bad14cb05914f0e31e3e606728b823dfdc091a3d8d427f7aefa21bbb59f67dbaf0d05ebb5a55d50dd06fbcc5dfefb41cea425c19559d4423fb13d3174a040c3cb7ec86e4cdfaa253031c0af1328ba1570684d2aa3d534a016416a18800", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27m28.382117622s ago: executing program 33 (id=1907): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 25m17.958005643s ago: executing program 34 (id=3358): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 24m59.067557199s ago: executing program 35 (id=3558): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x8) 24m53.682728866s ago: executing program 36 (id=3591): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2b34, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 24m35.345073477s ago: executing program 37 (id=3735): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xb66c3409bf854d4a) 16m55.600677903s ago: executing program 38 (id=11227): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c"], 0x24}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) 14m57.604305613s ago: executing program 39 (id=13091): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000200)={0x2b, 0x3}) 14m44.429947649s ago: executing program 5 (id=13216): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$inet6(r2, 0x0, &(0x7f0000000540)) 14m44.284413423s ago: executing program 5 (id=13219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2c) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x2000000) 14m39.661954162s ago: executing program 8 (id=13275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) 14m35.54504295s ago: executing program 8 (id=13313): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 14m35.297064168s ago: executing program 9 (id=13317): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) 14m34.870577721s ago: executing program 5 (id=13322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 14m34.837588196s ago: executing program 9 (id=13323): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) 14m34.736386979s ago: executing program 8 (id=13325): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 14m34.606016884s ago: executing program 9 (id=13326): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f0000008f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 14m34.35632251s ago: executing program 5 (id=13330): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 14m34.344886151s ago: executing program 8 (id=13331): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m34.311153088s ago: executing program 9 (id=13332): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r2, 0x409, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r2, 0xf38ae000) 14m33.375904366s ago: executing program 5 (id=13346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14m33.334092167s ago: executing program 8 (id=13347): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 14m33.190112623s ago: executing program 9 (id=13349): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4b04600, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14m30.507329284s ago: executing program 9 (id=13370): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) 14m28.727419688s ago: executing program 8 (id=13371): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) 14m26.838262895s ago: executing program 5 (id=13374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0) 14m14.15824324s ago: executing program 40 (id=13370): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) 14m13.438943008s ago: executing program 41 (id=13371): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) 14m11.360482698s ago: executing program 42 (id=13374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0) 14m10.40466726s ago: executing program 4 (id=13395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r3, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 14m8.377417069s ago: executing program 4 (id=13400): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="11022dbdf8007ddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 14m8.208482797s ago: executing program 4 (id=13402): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x12}}, 0x20}}, 0x0) 14m8.07358612s ago: executing program 6 (id=13403): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 14m7.661490768s ago: executing program 4 (id=13404): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 14m7.285790724s ago: executing program 4 (id=13405): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000800)={0x2, 0x0, [{0x8080000, 0xe2, &(0x7f0000000880)=""/226}, {0x1000, 0x48, &(0x7f0000000780)=""/72}]}) 14m7.275729717s ago: executing program 6 (id=13406): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 14m6.352500272s ago: executing program 6 (id=13407): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 14m6.171407622s ago: executing program 6 (id=13408): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x208000, 0x1}, 0x18) 14m5.99889123s ago: executing program 6 (id=13409): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 14m5.64490034s ago: executing program 6 (id=13410): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23004a) close(r2) 14m5.288745203s ago: executing program 4 (id=13411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x4b70, 0x10100, 0x2, 0x40003, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) 13m44.516610819s ago: executing program 43 (id=13411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x4b70, 0x10100, 0x2, 0x40003, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) 13m43.280199338s ago: executing program 44 (id=13410): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23004a) close(r2) 8.231155632s ago: executing program 7 (id=26813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) inotify_add_watch(r1, 0x0, 0x12000000) 6.680873699s ago: executing program 7 (id=26825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r3, 0x5501) 5.642579794s ago: executing program 7 (id=26838): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x84, 0xad, 0xb5, 0x20, 0xb95, 0x7720, 0xb93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8a, 0x0, 0x2, 0x40, 0xa5, 0x3c, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 3.534400743s ago: executing program 1 (id=26871): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0]) 2.779636549s ago: executing program 1 (id=26886): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) 2.678310452s ago: executing program 0 (id=26889): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) 2.620910564s ago: executing program 0 (id=26892): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80) 2.443170065s ago: executing program 0 (id=26896): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf25200100000000000000000000000000007f000001000000000000000000000000000000004e210002020000003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000040000fe32000000ffffffff00000000000000000000000000000000000000000000000000003900000000000000000099000000000000000000000000000000000000000000001000000090b20167c04fc40800000000000900000000000000ffffffffffffff7f00000000000000000000000400000000fdffffff000000000000000026bd7000003500000a00000000000000000000004c0012"], 0x13c}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) 2.342687644s ago: executing program 0 (id=26898): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x0, 0x100000}}, "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", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x10, 0x0, 0x7, 0x83, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.086385641s ago: executing program 1 (id=26905): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) 1.921243388s ago: executing program 7 (id=26911): modify_ldt$write2(0x11, &(0x7f0000000200)={0x1, 0x20000800, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.723637912s ago: executing program 1 (id=26915): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r3, 0x800454e0, &(0x7f0000000140)=0xffffffff) 1.621186635s ago: executing program 2 (id=26917): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 1.486458776s ago: executing program 2 (id=26920): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 1.377534864s ago: executing program 7 (id=26922): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r3, 0x0, 0x0) 1.200628085s ago: executing program 1 (id=26924): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.067094796s ago: executing program 7 (id=26927): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 947.580096ms ago: executing program 2 (id=26929): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) inotify_init1(0x100800) 891.240491ms ago: executing program 0 (id=26931): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{}, 0x10000, 0x5, 0x2}) 889.829806ms ago: executing program 3 (id=26932): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) 829.678136ms ago: executing program 2 (id=26933): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 783.42387ms ago: executing program 2 (id=26934): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = open(&(0x7f0000000040)='./bus\x00', 0xc0d40, 0x20) sendfile(r4, r4, 0x0, 0x1000000201005) 629.403347ms ago: executing program 3 (id=26935): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) 628.238605ms ago: executing program 2 (id=26936): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 552.052582ms ago: executing program 1 (id=26937): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000803"]) 421.878565ms ago: executing program 3 (id=26938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0x10}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000148c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 262.447877ms ago: executing program 3 (id=26939): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) 177.440795ms ago: executing program 3 (id=26940): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) 29.566622ms ago: executing program 3 (id=26941): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xa0, 0x99, 0x53, 0x10, 0x19d2, 0xffbf, 0x6878, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x40, 0x6, [{{0x9, 0x4, 0x40, 0x0, 0x1, 0xff, 0xff, 0xff, 0x60, [], [{{0x9, 0x5, 0xf, 0x5, 0x40, 0x79, 0xd, 0x3}}]}}]}}]}}, 0x0) 0s ago: executing program 0 (id=26942): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x100) kernel console output (not intermixed with test programs): de [ 1601.317642][T25469] bridge0: port 3(erspan0) entered disabled state [ 1601.368203][T25469] bridge_slave_1: left allmulticast mode [ 1601.379539][T25469] bridge_slave_1: left promiscuous mode [ 1601.392210][T25469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.518083][T25469] bridge_slave_0: left allmulticast mode [ 1601.523832][T25469] bridge_slave_0: left promiscuous mode [ 1601.533894][T25469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.575542][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21457'. [ 1601.592518][T25448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1601.795974][T25486] netlink: 'syz.1.21459': attribute type 4 has an invalid length. [ 1602.490962][T25513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21474'. [ 1602.657668][ T30] audit: type=1326 audit(1763280635.870:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25519 comm="syz.3.21477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x50000 [ 1602.686915][ T30] audit: type=1326 audit(1763280635.870:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25519 comm="syz.3.21477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x50000 [ 1602.709796][ T30] audit: type=1326 audit(1763280635.870:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25519 comm="syz.3.21477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x50000 [ 1602.756636][ T30] audit: type=1326 audit(1763280635.870:10219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25519 comm="syz.3.21477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x50000 [ 1602.782124][ T30] audit: type=1326 audit(1763280635.870:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25519 comm="syz.3.21477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x50000 [ 1603.465288][T11775] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1603.628557][T11775] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1603.638264][T11775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.654786][T11775] usb 2-1: config 0 descriptor?? [ 1603.800351][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21484'. [ 1604.020218][T26443] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1604.030539][T26443] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1604.042160][T26443] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1604.053644][T26443] usb 1-1: USB disconnect, device number 14 [ 1605.314404][T25562] netlink: 348 bytes leftover after parsing attributes in process `syz.2.21495'. [ 1605.337670][T25562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21495'. [ 1606.120648][T11775] usb 2-1: Cannot set autoneg [ 1606.125710][T11775] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1606.179974][T11775] usb 2-1: USB disconnect, device number 122 [ 1606.281986][T25597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21513'. [ 1607.211275][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21532'. [ 1607.523023][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.529388][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.354429][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1609.354460][ T30] audit: type=1326 audit(1763280642.570:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.441963][ T30] audit: type=1326 audit(1763280642.570:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.464592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.484331][ T30] audit: type=1326 audit(1763280642.610:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.509854][ T30] audit: type=1326 audit(1763280642.610:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.546252][ T30] audit: type=1326 audit(1763280642.610:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.570834][ T30] audit: type=1326 audit(1763280642.610:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.593515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.602465][ T30] audit: type=1326 audit(1763280642.610:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.633553][ T30] audit: type=1326 audit(1763280642.610:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.716110][ T30] audit: type=1326 audit(1763280642.610:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.770856][ T30] audit: type=1326 audit(1763280642.620:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25730 comm="syz.3.21574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1609.793385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.122599][T25751] x_tables: unsorted underflow at hook 1 [ 1612.165615][T25822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21614'. [ 1612.640422][T25839] netlink: 324 bytes leftover after parsing attributes in process `syz.3.21622'. [ 1612.722897][T25841] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1612.729460][T25841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1612.766756][T25841] vhci_hcd vhci_hcd.0: Device attached [ 1612.799614][T25849] netlink: 'syz.7.21626': attribute type 17 has an invalid length. [ 1612.806729][T25845] vhci_hcd: connection closed [ 1612.809342][ T7495] vhci_hcd: stop threads [ 1612.818705][ T7495] vhci_hcd: release socket [ 1612.823143][ T7495] vhci_hcd: disconnect device [ 1614.400524][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1614.400541][ T30] audit: type=1326 audit(1763280647.620:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25899 comm="syz.1.21647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x0 [ 1614.428799][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.622142][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21654'. [ 1615.837089][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1617.246814][T11775] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1617.429594][T11775] usb 2-1: Using ep0 maxpacket: 8 [ 1617.446336][T11775] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1617.464943][T11775] usb 2-1: config 0 has no interface number 0 [ 1617.471401][T11775] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1617.487150][T11775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.497800][T11775] usb 2-1: config 0 descriptor?? [ 1617.622259][T11775] viperboard 2-1:0.143: version 0.00 found at bus 002 address 123 [ 1617.650665][T11775] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1617.687859][T11775] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1618.441297][T26041] blkio.reset_stats is deprecated [ 1620.067384][ T8083] usb 2-1: USB disconnect, device number 123 [ 1620.421211][T26095] netlink: 'syz.1.21735': attribute type 4 has an invalid length. [ 1620.429617][T26095] netlink: 17 bytes leftover after parsing attributes in process `syz.1.21735'. [ 1621.715466][T26124] binder: 26119:26124 ioctl 40046210 0 returned -14 [ 1622.691550][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21756'. [ 1624.816308][T26205] netlink: 164 bytes leftover after parsing attributes in process `syz.3.21783'. [ 1626.204499][T26238] binder: 26237:26238 ioctl 40046205 0 returned -22 [ 1626.740745][T26263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21812'. [ 1626.761757][T26263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21812'. [ 1626.946821][T11775] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1627.124629][T11775] usb 2-1: config 0 has no interfaces? [ 1627.130313][T11775] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1627.139802][T11775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.151066][T11775] usb 2-1: config 0 descriptor?? [ 1627.628734][ T8082] usb 2-1: USB disconnect, device number 124 [ 1628.570562][T26309] netlink: 'syz.2.21833': attribute type 8 has an invalid length. [ 1628.663184][T26311] netlink: 128 bytes leftover after parsing attributes in process `syz.7.21832'. [ 1630.016211][T26344] netlink: 720 bytes leftover after parsing attributes in process `syz.1.21839'. [ 1630.069099][T26352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21841'. [ 1630.152352][T26344] veth3: entered promiscuous mode [ 1630.172697][T26356] usb usb8: usbfs: process 26356 (syz.3.21850) did not claim interface 0 before use [ 1630.952614][T26352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.095675][T26352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.119038][T26352] bond0 (unregistering): Released all slaves [ 1632.084620][T26417] netlink: 172 bytes leftover after parsing attributes in process `syz.3.21881'. [ 1633.059536][T26459] netlink: 148 bytes leftover after parsing attributes in process `syz.7.21899'. [ 1633.068828][T26459] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1633.466911][T11775] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1633.627688][T11775] usb 4-1: Using ep0 maxpacket: 8 [ 1633.634598][T11775] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 1633.646328][T11775] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 1633.661767][T11775] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1633.669543][T11775] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1633.680244][T11775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.706955][T11775] usb 4-1: config 0 descriptor?? [ 1633.800185][T26498] fuse: Invalid rootmode [ 1633.944155][T11775] usbhid 4-1:0.0: can't add hid device: -71 [ 1633.982522][T11775] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1634.004794][T11775] usb 4-1: USB disconnect, device number 69 [ 1634.507147][T26527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21931'. [ 1634.517138][T26527] hsr0: left allmulticast mode [ 1634.522749][T26527] hsr_slave_0: left allmulticast mode [ 1634.617697][T26527] hsr_slave_1: left allmulticast mode [ 1634.657874][T26527] hsr0: left promiscuous mode [ 1634.676373][T26527] bridge0: port 3(hsr0) entered disabled state [ 1634.755235][T26527] bridge_slave_1: left allmulticast mode [ 1634.767935][T26527] bridge_slave_1: left promiscuous mode [ 1634.783343][T26527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.825759][T26527] bridge_slave_0: left allmulticast mode [ 1634.831537][T26527] bridge_slave_0: left promiscuous mode [ 1634.849809][T26527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.955093][T26535] netlink: 104 bytes leftover after parsing attributes in process `syz.2.21935'. [ 1635.291913][T26570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21951'. [ 1635.341706][T26569] can: request_module (can-proto-0) failed. [ 1635.708882][T26595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.305407][ T30] audit: type=1326 audit(1763280669.520:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.7.21972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1636.339338][ T30] audit: type=1326 audit(1763280669.520:10354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.7.21972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1636.367560][ T30] audit: type=1326 audit(1763280669.520:10355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.7.21972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1636.394736][ T30] audit: type=1326 audit(1763280669.520:10356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.7.21972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1636.418140][ T30] audit: type=1326 audit(1763280669.520:10357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.7.21972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1636.472134][T26623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21974'. [ 1636.488595][T26623] sit0: left promiscuous mode [ 1636.493352][T26623] sit0: left allmulticast mode [ 1636.975299][T26652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21988'. [ 1638.766512][T26742] bridge0: port 4(erspan0) entered blocking state [ 1638.773602][T26742] bridge0: port 4(erspan0) entered disabled state [ 1638.780293][T26742] erspan0: entered allmulticast mode [ 1638.790125][T26742] erspan0: entered promiscuous mode [ 1638.812366][T26742] bridge0: port 4(erspan0) entered blocking state [ 1638.818961][T26742] bridge0: port 4(erspan0) entered forwarding state [ 1639.176207][T26759] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22038'. [ 1639.235663][T26763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22041'. [ 1640.466878][ T8082] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1640.619109][ T8082] usb 1-1: Using ep0 maxpacket: 32 [ 1640.628114][ T8082] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1640.636396][ T8082] usb 1-1: config 0 has no interface number 0 [ 1640.649677][ T8082] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1640.681477][ T8082] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1640.690788][ T8082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.700182][ T8082] usb 1-1: Product: syz [ 1640.704819][ T8082] usb 1-1: Manufacturer: syz [ 1640.710117][ T8082] usb 1-1: SerialNumber: syz [ 1640.725394][ T8082] usb 1-1: config 0 descriptor?? [ 1640.750340][ T8082] smsc75xx v1.0.0 [ 1640.894616][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22077'. [ 1641.006797][ T8083] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1641.176745][ T8083] usb 2-1: Using ep0 maxpacket: 16 [ 1641.188126][ T8083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.216876][ T8083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.239973][ T8083] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1641.263322][ T8083] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1641.279588][ T8083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.294784][ T8083] usb 2-1: config 0 descriptor?? [ 1641.352167][ T8082] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1641.368043][ T8082] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1641.475539][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22085'. [ 1641.486705][T26861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22085'. [ 1641.496268][T26861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22085'. [ 1641.860747][T26838] random: crng reseeded on system resumption [ 1642.062208][ T8083] input: HID 0955:7214 Haptics as /devices/virtual/input/input159 [ 1642.113130][ T8083] shield 0003:0955:7214.004E: Registered Thunderstrike controller [ 1642.156875][ T8083] shield 0003:0955:7214.004E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1642.433252][T26862] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1642.447964][T26443] usb 2-1: USB disconnect, device number 125 [ 1642.457890][T26862] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1642.482778][T26862] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1642.494657][T26862] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1643.228072][ T8082] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 1643.245953][ T8082] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 1643.272117][ T8082] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1643.303823][ T8082] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1643.324363][ T8082] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1643.346162][ T8082] usb 1-1: USB disconnect, device number 15 [ 1644.492959][T26989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22144'. [ 1644.786308][T27004] Cannot find add_set index 4 as target [ 1645.069122][T27019] netlink: 100 bytes leftover after parsing attributes in process `syz.0.22158'. [ 1645.415493][T27038] fuse: Bad value for 'fd' [ 1646.436764][T11775] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1646.600731][T11775] usb 8-1: Using ep0 maxpacket: 16 [ 1646.611231][T11775] usb 8-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1646.628507][T11775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.651108][T11775] usb 8-1: Product: syz [ 1646.656418][T11775] usb 8-1: Manufacturer: syz [ 1646.662845][T11775] usb 8-1: SerialNumber: syz [ 1646.672925][T11775] usb 8-1: config 0 descriptor?? [ 1646.705712][T11775] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1646.740608][T27108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22197'. [ 1646.756053][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22197'. [ 1646.786749][ T8082] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1646.934043][T11775] gspca_sn9c2028: read1 error -32 [ 1646.948510][ T8082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.965274][ T8082] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1646.976200][ T8082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.000684][ T8082] usb 4-1: config 0 descriptor?? [ 1647.030860][ T8082] pwc: Askey VC010 type 2 USB webcam detected. [ 1647.634744][ T8082] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1647.644838][ T8082] pwc: recv_control_msg error -32 req 02 val 2700 [ 1647.652934][ T8082] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1647.677434][ T8082] pwc: recv_control_msg error -32 req 04 val 1000 [ 1647.684694][ T8082] pwc: recv_control_msg error -32 req 04 val 1300 [ 1647.693058][ T8082] pwc: recv_control_msg error -32 req 04 val 1400 [ 1647.700529][ T8082] pwc: recv_control_msg error -32 req 02 val 2000 [ 1647.711854][ T8082] pwc: recv_control_msg error -32 req 02 val 2100 [ 1647.719206][ T8082] pwc: recv_control_msg error -32 req 04 val 1500 [ 1647.786549][T11775] usb 8-1: USB disconnect, device number 12 [ 1648.010639][ T8082] pwc: recv_control_msg error -71 req 02 val 2400 [ 1648.022632][ T8082] pwc: recv_control_msg error -71 req 02 val 2600 [ 1648.029888][ T8082] pwc: recv_control_msg error -71 req 02 val 2900 [ 1648.036699][ T8082] pwc: recv_control_msg error -71 req 02 val 2800 [ 1648.043816][ T8082] pwc: recv_control_msg error -71 req 04 val 1100 [ 1648.050801][ T8082] pwc: recv_control_msg error -71 req 04 val 1200 [ 1648.070561][ T8082] pwc: Registered as video103. [ 1648.090870][ T8082] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input160 [ 1648.135191][ T8082] usb 4-1: USB disconnect, device number 70 [ 1649.454321][T27178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22223'. [ 1650.133054][T27221] netlink: 'syz.3.22244': attribute type 27 has an invalid length. [ 1650.697858][T27246] lo: Caught tx_queue_len zero misconfig [ 1650.803999][T27254] binder: 27251:27254 ioctl 400c620e 0 returned -14 [ 1650.837814][T27256] netlink: 37 bytes leftover after parsing attributes in process `syz.7.22260'. [ 1650.893339][T27260] fuse: Bad value for 'user_id' [ 1650.898500][T27260] fuse: Bad value for 'user_id' [ 1651.046758][T11775] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1651.199415][T11775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1651.217743][T11775] usb 2-1: not running at top speed; connect to a high speed hub [ 1651.233640][T11775] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 1651.242573][T11775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.277440][T11775] usb 2-1: config 1 has no interface number 0 [ 1651.284119][T11775] usb 2-1: config 1 interface 138 has no altsetting 0 [ 1651.315965][T11775] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1651.329020][T11775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.339151][T11775] usb 2-1: Product: syz [ 1651.343339][T11775] usb 2-1: Manufacturer: syz [ 1651.348825][T11775] usb 2-1: SerialNumber: syz [ 1651.418777][T27289] fuse: Bad value for 'group_id' [ 1651.424168][T27289] fuse: Bad value for 'group_id' [ 1651.523893][T27296] netlink: 'syz.2.22279': attribute type 4 has an invalid length. [ 1651.575778][T11775] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1651.663696][T11775] usb 2-1: USB disconnect, device number 126 [ 1652.083269][T27314] input: syz1 as /devices/virtual/input/input161 [ 1652.627039][T27328] netlink: 'syz.0.22291': attribute type 11 has an invalid length. [ 1654.664008][T27413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22334'. [ 1654.808728][ T30] audit: type=1326 audit(1763280688.030:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.3.22336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x0 [ 1656.743376][T27468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.977352][ T30] audit: type=1326 audit(1763280690.190:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.3.22366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x0 [ 1657.107467][T27488] netlink: 'syz.1.22361': attribute type 11 has an invalid length. [ 1657.149862][T27488] netlink: 'syz.1.22361': attribute type 1 has an invalid length. [ 1657.157767][T27488] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.22361'. [ 1657.606953][ T8078] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1657.825885][ T8078] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1657.869500][ T8078] usb 4-1: not running at top speed; connect to a high speed hub [ 1657.886843][ T8078] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 1657.895100][ T8078] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.905480][ T8078] usb 4-1: config 1 has no interface number 0 [ 1657.911898][ T8078] usb 4-1: config 1 interface 138 has no altsetting 0 [ 1657.948245][ T8078] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1657.958129][ T8078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.966151][ T8078] usb 4-1: Product: syz [ 1657.972174][ T8078] usb 4-1: Manufacturer: syz [ 1657.978227][ T8078] usb 4-1: SerialNumber: syz [ 1658.261107][ T8078] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1658.297915][ T8078] usb 4-1: USB disconnect, device number 71 [ 1658.985583][ T30] audit: type=1326 audit(1763280692.200:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27527 comm="syz.2.22383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x0 [ 1659.053666][T27530] netlink: 48 bytes leftover after parsing attributes in process `syz.7.22384'. [ 1659.336345][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22390'. [ 1659.766908][T26443] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1659.930118][T26443] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 1659.939468][T26443] usb 4-1: config 0 has no interface number 1 [ 1659.945613][T26443] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1659.964569][T26443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.977335][T26443] usb 4-1: config 0 descriptor?? [ 1660.207504][T11775] usb 4-1: USB disconnect, device number 72 [ 1660.856741][T26443] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1661.016949][T26443] usb 2-1: Using ep0 maxpacket: 8 [ 1661.029676][T26443] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1661.041020][T26443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.054182][T26443] usb 2-1: Product: syz [ 1661.060041][T26443] usb 2-1: Manufacturer: syz [ 1661.064660][T26443] usb 2-1: SerialNumber: syz [ 1661.083079][T26443] usb 2-1: config 0 descriptor?? [ 1661.092561][T26443] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1662.609824][T27685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22456'. [ 1662.620408][ T8082] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1662.628363][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22456'. [ 1662.640349][T27685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22456'. [ 1662.771930][T27689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22457'. [ 1662.818035][ T8082] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1662.830328][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.840125][ T8082] usb 4-1: Product: syz [ 1662.844337][ T8082] usb 4-1: Manufacturer: syz [ 1662.849477][ T8082] usb 4-1: SerialNumber: syz [ 1663.305322][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1663.321494][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1663.551277][T26443] gspca_sonixj: reg_w1 err -71 [ 1663.580357][T27714] netlink: 96 bytes leftover after parsing attributes in process `syz.7.22469'. [ 1663.604285][T26443] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1663.630669][T26443] usb 2-1: USB disconnect, device number 127 [ 1664.400134][T27759] netlink: 44 bytes leftover after parsing attributes in process `syz.2.22491'. [ 1664.411065][T27759] netlink: 43 bytes leftover after parsing attributes in process `syz.2.22491'. [ 1664.420850][T27759] netlink: 'syz.2.22491': attribute type 5 has an invalid length. [ 1664.430230][T27759] netlink: 43 bytes leftover after parsing attributes in process `syz.2.22491'. [ 1664.764760][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1664.988553][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1665.002044][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1665.016744][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1665.026389][ T8082] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1665.038138][ T8082] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1665.050303][ T8082] usb 4-1: USB disconnect, device number 73 [ 1665.249055][ T30] audit: type=1326 audit(1763280698.470:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.272616][ T30] audit: type=1326 audit(1763280698.500:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.307881][ T30] audit: type=1326 audit(1763280698.530:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.333195][ T30] audit: type=1326 audit(1763280698.560:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.358315][ T30] audit: type=1326 audit(1763280698.580:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.434780][ T30] audit: type=1326 audit(1763280698.650:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.484092][ T30] audit: type=1326 audit(1763280698.650:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.542302][ T30] audit: type=1326 audit(1763280698.650:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.584995][ T30] audit: type=1326 audit(1763280698.650:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1665.608912][ T30] audit: type=1326 audit(1763280698.650:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.7.22504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1666.145957][T27808] loop2: detected capacity change from 0 to 3 [ 1666.156371][T14026] Dev loop2: unable to read RDB block 3 [ 1666.175198][T14026] loop2: AHDI p1 p2 p3 [ 1666.179556][T14026] loop2: partition table partially beyond EOD, truncated [ 1666.198058][T14026] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1666.205102][T14026] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1666.213817][T27808] Dev loop2: unable to read RDB block 3 [ 1666.220156][T27808] loop2: AHDI p1 p2 p3 [ 1666.224384][T27808] loop2: partition table partially beyond EOD, truncated [ 1666.234399][T27808] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1666.241906][T27808] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1667.876005][T27880] syzkaller1: entered promiscuous mode [ 1667.889102][T27880] syzkaller1: entered allmulticast mode [ 1668.964236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.973320][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.194763][T27936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22568'. [ 1669.220022][ T8078] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1669.347245][ T8082] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1669.376796][ T8078] usb 4-1: Using ep0 maxpacket: 32 [ 1669.390137][ T8078] usb 4-1: config 0 has no interfaces? [ 1669.405915][ T8078] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1669.427858][ T8078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.468469][ T8078] usb 4-1: config 0 descriptor?? [ 1669.518936][ T8082] usb 1-1: Using ep0 maxpacket: 16 [ 1669.525952][ T8082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.540436][ T8082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.551586][ T8082] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1669.564425][ T8082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.577750][ T8082] usb 1-1: config 0 descriptor?? [ 1669.688241][T27946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22574'. [ 1669.708951][T26443] usb 4-1: USB disconnect, device number 74 [ 1670.151532][ T8082] usbhid 1-1:0.0: can't add hid device: -71 [ 1670.157983][ T8082] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1670.169530][ T8082] usb 1-1: USB disconnect, device number 16 [ 1673.271536][T28093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22641'. [ 1673.517712][T28105] netlink: 17 bytes leftover after parsing attributes in process `syz.2.22647'. [ 1674.418819][T28152] netlink: 96 bytes leftover after parsing attributes in process `syz.0.22667'. [ 1674.587336][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22676'. [ 1674.596408][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22676'. [ 1674.630100][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22677'. [ 1675.081055][T28193] loop5: detected capacity change from 0 to 7 [ 1675.340620][T28193] Dev loop5: unable to read RDB block 7 [ 1675.356523][T28193] loop5: unable to read partition table [ 1675.373841][T28193] loop5: partition table beyond EOD, truncated [ 1675.389946][T28193] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1675.450317][T28199] Invalid logical block size (1) [ 1675.595655][T28219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22700'. [ 1676.463655][T28267] batadv_slave_1: entered promiscuous mode [ 1676.477968][T28266] batadv_slave_1: left promiscuous mode [ 1677.379704][T28320] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22746'. [ 1680.069225][T28365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22765'. [ 1680.371572][T28376] kvm: pic: non byte read [ 1680.430322][T28376] kvm: pic: non byte read [ 1680.790545][T28393] binder: 28392:28393 ioctl c0306201 200000000500 returned -14 [ 1683.070594][T28499] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22819'. [ 1684.244263][T28546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22845'. [ 1684.316906][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1684.340276][T28551] netlink: 'syz.2.22848': attribute type 64 has an invalid length. [ 1684.351263][T28551] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22848'. [ 1686.661348][T28622] fuse: Bad value for 'fd' [ 1687.216401][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22894'. [ 1687.414967][T28670] netlink: 44 bytes leftover after parsing attributes in process `syz.7.22899'. [ 1687.603194][T28678] syzkaller1: entered promiscuous mode [ 1687.614260][T28678] syzkaller1: entered allmulticast mode [ 1687.678444][T28680] IPv6: A: Disabled Multicast RS [ 1687.739192][T28684] binder: 28683:28684 ioctl c0306201 200000000640 returned -22 [ 1687.940588][T28698] netlink: 140 bytes leftover after parsing attributes in process `syz.2.22916'. [ 1689.996467][T28776] batadv_slave_1: entered promiscuous mode [ 1690.004662][T28775] batadv_slave_1: left promiscuous mode [ 1690.036767][ T8082] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1690.200424][ T8082] usb 1-1: Using ep0 maxpacket: 16 [ 1690.217626][ T8082] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1690.236979][ T8082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1690.263833][ T8082] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1690.275049][ T8082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.289211][ T8082] usb 1-1: Product: syz [ 1690.293468][ T8082] usb 1-1: Manufacturer: syz [ 1690.301465][ T8082] usb 1-1: SerialNumber: syz [ 1690.332839][ T8082] usb 1-1: config 0 descriptor?? [ 1690.354667][ T8082] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1690.446895][ T8082] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1690.929207][T28803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22961'. [ 1690.979045][T11775] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1691.179228][T11775] usb 2-1: Using ep0 maxpacket: 16 [ 1691.331294][T11775] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1691.353225][ T8082] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1691.356952][T11775] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1691.369190][ T8082] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1691.386066][T11775] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1691.393355][T11775] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1691.403617][T11775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.420804][T11775] usb 2-1: config 0 descriptor?? [ 1691.714181][T11775] usbhid 2-1:0.0: can't add hid device: -71 [ 1691.727421][T11775] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1691.754548][T11775] usb 2-1: USB disconnect, device number 2 [ 1691.933526][T28844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22980'. [ 1692.460052][ T8082] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1692.953325][T28885] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23000'. [ 1692.963839][T28885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23000'. [ 1692.973638][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23000'. [ 1693.062281][ T8082] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1693.077072][ T8082] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1693.094112][ T8082] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1693.104903][ T8082] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1693.136806][ T8082] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1693.151183][ T8082] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1693.178540][ T8082] usb 1-1: USB disconnect, device number 17 [ 1693.317072][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1693.317089][ T30] audit: type=1326 audit(1763280726.540:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28895 comm="syz.1.23006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x0 [ 1693.444521][T28897] netlink: 20 bytes leftover after parsing attributes in process `syz.7.23003'. [ 1693.948937][ T30] audit: type=1326 audit(1763280727.160:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.006991][ T30] audit: type=1326 audit(1763280727.160:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.049814][ T30] audit: type=1326 audit(1763280727.170:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.106766][ T30] audit: type=1326 audit(1763280727.170:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.143763][ T30] audit: type=1326 audit(1763280727.170:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.167459][ T30] audit: type=1326 audit(1763280727.170:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.190393][ T30] audit: type=1326 audit(1763280727.170:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.214878][ T30] audit: type=1326 audit(1763280727.170:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.251094][ T30] audit: type=1326 audit(1763280727.170:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28919 comm="syz.1.23016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff59318f6c9 code=0x7ffc0000 [ 1694.339336][T28933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23025'. [ 1694.674609][T28952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23033'. [ 1695.259541][T28952] team0 (unregistering): Port device team_slave_0 removed [ 1695.309581][T28975] netlink: 68 bytes leftover after parsing attributes in process `syz.3.23044'. [ 1695.367649][T28952] team0 (unregistering): Port device team_slave_1 removed [ 1695.975352][T29014] netlink: 116 bytes leftover after parsing attributes in process `syz.0.23051'. [ 1697.076245][T29057] tipc: Enabling of bearer rejected, failed to enable media [ 1697.149449][T29059] sctp: [Deprecated]: syz.3.23083 (pid 29059) Use of int in max_burst socket option deprecated. [ 1697.149449][T29059] Use struct sctp_assoc_value instead [ 1697.902942][T29096] netlink: 64 bytes leftover after parsing attributes in process `syz.3.23098'. [ 1698.655664][T29130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23113'. [ 1700.134665][T29177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23132'. [ 1700.949026][T29200] create_pit_timer: 2 callbacks suppressed [ 1700.949045][T29200] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1700.983828][T29200] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 1700.993965][T29200] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 1701.008034][T29200] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 1701.016443][T29200] kvm: requested 171809 ns i8254 timer period limited to 200000 ns [ 1701.033211][T29200] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1701.044072][T29200] kvm: requested 76266 ns i8254 timer period limited to 200000 ns [ 1701.052887][T29200] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 1701.900959][T29241] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.23159' sets config #0 [ 1704.122732][T29358] fuse: Bad value for 'group_id' [ 1704.127808][T29358] fuse: Bad value for 'group_id' [ 1704.651818][T29386] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23228'. [ 1704.697210][T29390] binder: 29389:29390 ioctl 4018620d 0 returned -22 [ 1704.986067][T29406] netlink: 164 bytes leftover after parsing attributes in process `syz.0.23238'. [ 1705.207306][ T8082] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1705.216004][T29418] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 1705.258710][T29420] binder: 29419:29420 ioctl c0306201 200000000100 returned -14 [ 1705.358281][ T8082] usb 4-1: Using ep0 maxpacket: 16 [ 1705.365769][ T8082] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1705.377560][ T8082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1705.394094][ T8082] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1705.403342][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.411435][ T8082] usb 4-1: Product: syz [ 1705.415613][ T8082] usb 4-1: Manufacturer: syz [ 1705.420568][ T8082] usb 4-1: SerialNumber: syz [ 1705.427330][ T8082] usb 4-1: config 0 descriptor?? [ 1705.434951][ T8082] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1705.444388][ T8082] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1706.084408][ T8082] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1706.091556][ T8082] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1706.365049][T29455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.23260'. [ 1706.695217][T29468] fuse: Bad value for 'user_id' [ 1706.700268][T29468] fuse: Bad value for 'user_id' [ 1706.706038][ T8082] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1707.321442][ T8082] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1707.328512][ T8082] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1707.335480][ T8082] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1707.345878][ T8082] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1707.360860][ T8082] usb 4-1: USB disconnect, device number 75 [ 1708.301527][T29508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23284'. [ 1709.258175][T29555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23304'. [ 1709.566431][T29569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23308'. [ 1710.662641][T29629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.935346][T29635] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 1711.115950][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23340'. [ 1712.002253][T29664] fuseblk: Bad value for 'fd' [ 1712.190737][T11775] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1712.269924][T29680] netlink: 80 bytes leftover after parsing attributes in process `syz.1.23361'. [ 1712.348440][T11775] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1712.358797][T11775] usb 4-1: config 0 has no interface number 0 [ 1712.367926][T11775] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1712.377421][T11775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.385420][T11775] usb 4-1: Product: syz [ 1712.391294][T11775] usb 4-1: Manufacturer: syz [ 1712.396312][T11775] usb 4-1: SerialNumber: syz [ 1712.404099][T11775] usb 4-1: config 0 descriptor?? [ 1712.620021][T11775] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1712.631123][T11775] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1712.646780][T11775] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1712.654766][T11775] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1712.665146][T11775] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1712.677216][T11775] usb 4-1: USB disconnect, device number 76 [ 1712.688372][T11775] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1712.698951][T11775] keyspan 4-1:0.133: device disconnected [ 1713.378966][T29725] netlink: 72 bytes leftover after parsing attributes in process `syz.2.23381'. [ 1714.468026][T29792] netlink: 'syz.3.23415': attribute type 12 has an invalid length. [ 1714.475970][T29792] netlink: 248 bytes leftover after parsing attributes in process `syz.3.23415'. [ 1714.929971][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23428'. [ 1714.948272][T29819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23428'. [ 1716.065961][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23453'. [ 1716.075972][T29877] bridge_slave_1: left promiscuous mode [ 1716.082670][T29877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.091532][T29874] input: syz1 as /devices/virtual/input/input163 [ 1716.118146][T29877] bridge_slave_0: left promiscuous mode [ 1716.124111][T29877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.939353][T29911] trusted_key: encrypted_key: insufficient parameters specified [ 1718.995349][T29998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23501'. [ 1720.167035][T30039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23522'. [ 1720.184588][T30039] tipc: Enabling of bearer rejected, failed to enable media [ 1722.341747][T30100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1722.429187][T30103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23556'. [ 1722.449494][ T8090] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1722.477362][ T8090] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1722.580815][T30107] fido_id[30107]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1724.000022][T30171] netlink: 108 bytes leftover after parsing attributes in process `syz.0.23582'. [ 1724.049730][T30171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23582'. [ 1724.776208][T30211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23604'. [ 1727.815441][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1727.815459][ T30] audit: type=1326 audit(1763280761.020:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30287 comm="syz.2.23638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e4bf8f6c9 code=0x0 [ 1728.120287][T30301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23643'. [ 1728.766194][T30325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.23653'. [ 1728.980588][T30338] netlink: 'syz.3.23660': attribute type 4 has an invalid length. [ 1728.989884][T30338] netlink: 'syz.3.23660': attribute type 5 has an invalid length. [ 1729.002728][T30338] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.23660'. [ 1729.096695][T26862] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1729.277046][T26862] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1729.285437][T26862] usb 2-1: config 0 has no interface number 0 [ 1729.294828][T26862] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1729.304328][T26862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.312899][T26862] usb 2-1: Product: syz [ 1729.319620][T26862] usb 2-1: Manufacturer: syz [ 1729.325116][T26862] usb 2-1: SerialNumber: syz [ 1729.341909][T26862] usb 2-1: config 0 descriptor?? [ 1729.450546][T30356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23668'. [ 1729.590035][T26862] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1729.617795][T26862] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1729.639152][T26862] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1729.657608][T26862] usb 2-1: media controller created [ 1729.710655][T26862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1729.796192][T26862] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1729.952119][T26862] usb 2-1: USB disconnect, device number 3 [ 1730.169625][T30391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23684'. [ 1730.179854][T30391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23684'. [ 1730.190285][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23684'. [ 1730.210307][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.210541][T30391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23684'. [ 1730.219612][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.228621][T30391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23684'. [ 1730.246347][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.247697][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23684'. [ 1730.265865][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1730.403935][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.410842][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.107285][T30429] netlink: 182 bytes leftover after parsing attributes in process `syz.7.23702'. [ 1731.388808][T30448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23713'. [ 1731.447717][T30451] fuse: Bad value for 'fd' [ 1731.938238][T30481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23728'. [ 1732.006362][ T30] audit: type=1326 audit(1763280765.220:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30482 comm="syz.2.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1732.030883][ T30] audit: type=1326 audit(1763280765.220:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30482 comm="syz.2.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1732.094343][ T30] audit: type=1326 audit(1763280765.260:10460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30482 comm="syz.2.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1732.117936][ T30] audit: type=1326 audit(1763280765.260:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30482 comm="syz.2.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1732.142177][ T30] audit: type=1326 audit(1763280765.260:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30482 comm="syz.2.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1733.161354][T30553] binder: 30551:30553 ioctl 4018620d 0 returned -22 [ 1736.846726][T26862] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1737.017750][T26862] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1737.031127][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.040654][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.071943][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.087972][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.097272][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.119296][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.137423][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.146790][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.160827][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.227829][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.236775][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.247692][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.257850][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.266979][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.277908][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.286390][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.295624][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.306522][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.314547][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.323739][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.334626][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.342738][T26862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1737.351932][T26862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1737.362823][T26862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.372435][T26862] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1737.382739][T26862] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1737.391820][T26862] usb 4-1: Product: syz [ 1737.396082][T26862] usb 4-1: Manufacturer: syz [ 1737.400970][T26862] usb 4-1: SerialNumber: syz [ 1737.415452][T26862] usb 4-1: config 0 descriptor?? [ 1737.423769][T26862] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1737.514045][T30711] __nla_validate_parse: 4 callbacks suppressed [ 1737.514062][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23828'. [ 1737.520911][T30709] netlink: 'syz.0.23829': attribute type 16 has an invalid length. [ 1737.688118][T11775] usb 4-1: USB disconnect, device number 77 [ 1737.700635][T11775] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1737.845968][T30709] netlink: 'syz.0.23829': attribute type 2 has an invalid length. [ 1737.866278][T30709] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.23829'. [ 1739.256959][ T30] audit: type=1326 audit(1763280772.480:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30747 comm="syz.7.23844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7fc00000 [ 1739.785439][T30772] netlink: 'syz.3.23856': attribute type 4 has an invalid length. [ 1740.067439][T30784] netlink: 100 bytes leftover after parsing attributes in process `syz.0.23862'. [ 1740.313800][T30794] netlink: 20 bytes leftover after parsing attributes in process `syz.7.23865'. [ 1740.998134][T30831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23885'. [ 1741.038625][T30833] netlink: 348 bytes leftover after parsing attributes in process `syz.3.23886'. [ 1741.066246][T30833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23886'. [ 1742.927199][T30879] netlink: 'syz.3.23909': attribute type 4 has an invalid length. [ 1742.935622][T30879] netlink: 'syz.3.23909': attribute type 4 has an invalid length. [ 1743.776720][ T8082] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1743.932729][ T8082] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1743.942002][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.950560][ T8082] usb 4-1: Product: syz [ 1743.954884][ T8082] usb 4-1: Manufacturer: syz [ 1743.960407][ T8082] usb 4-1: SerialNumber: syz [ 1743.998108][ T8082] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1744.015234][T26862] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1744.175961][T30920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1744.264263][ T8090] usb 4-1: USB disconnect, device number 78 [ 1744.564825][T30937] netlink: 100 bytes leftover after parsing attributes in process `syz.2.23933'. [ 1744.881397][ T30] audit: type=1326 audit(1763280778.100:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1744.916232][ T30] audit: type=1326 audit(1763280778.100:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1744.946859][ T30] audit: type=1326 audit(1763280778.100:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1744.970424][ T30] audit: type=1326 audit(1763280778.100:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1744.995186][ T30] audit: type=1326 audit(1763280778.100:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1745.019930][ T30] audit: type=1326 audit(1763280778.100:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1745.096396][ T30] audit: type=1326 audit(1763280778.100:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1745.121281][ T30] audit: type=1326 audit(1763280778.100:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1745.129134][T26862] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1745.144484][ T30] audit: type=1326 audit(1763280778.100:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1745.177572][T26862] ath9k_htc: Failed to initialize the device [ 1745.194224][ T30] audit: type=1326 audit(1763280778.100:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.0.23939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1745.217379][ T8090] usb 4-1: ath9k_htc: USB layer deinitialized [ 1745.409973][T30973] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23947'. [ 1745.835310][T31000] netlink: 'syz.0.23954': attribute type 13 has an invalid length. [ 1745.950975][T31007] netlink: 76 bytes leftover after parsing attributes in process `syz.3.23967'. [ 1746.960900][T31074] netlink: 'syz.2.23996': attribute type 4 has an invalid length. [ 1747.634891][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24005'. [ 1747.634915][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24005'. [ 1748.087023][ T8090] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1748.272033][ T8090] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.272061][ T8090] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1748.272081][ T8090] usb 1-1: config 1 has no interface number 0 [ 1748.272118][ T8090] usb 1-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1748.298380][ T8090] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1748.298411][ T8090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.298430][ T8090] usb 1-1: Product: syz [ 1748.298444][ T8090] usb 1-1: Manufacturer: syz [ 1748.298468][ T8090] usb 1-1: SerialNumber: syz [ 1748.322460][ T8090] usb 1-1: selecting invalid altsetting 1 [ 1748.659668][ T8090] cdc_ncm 1-1:1.1: bind() failure [ 1748.669635][ T8090] usb 1-1: USB disconnect, device number 18 [ 1748.808129][T31145] netlink: 'syz.2.24025': attribute type 4 has an invalid length. [ 1749.797747][T31175] netlink: 104 bytes leftover after parsing attributes in process `syz.3.24042'. [ 1750.655081][T31202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24054'. [ 1750.813586][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24059'. [ 1751.045839][ T30] audit: type=1326 audit(1763280784.260:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31224 comm="syz.2.24067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x0 [ 1751.419119][T31238] netlink: 148 bytes leftover after parsing attributes in process `syz.7.24071'. [ 1751.436708][T31238] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1751.865527][T31255] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24081'. [ 1752.335343][T31274] netlink: 165 bytes leftover after parsing attributes in process `syz.7.24086'. [ 1752.762244][T31305] netlink: 92 bytes leftover after parsing attributes in process `syz.2.24104'. [ 1752.894590][T31313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.24107'. [ 1752.897541][T31315] netlink: 'syz.2.24108': attribute type 6 has an invalid length. [ 1752.904262][T31313] netlink: 51 bytes leftover after parsing attributes in process `syz.3.24107'. [ 1752.930505][T31313] netlink: 'syz.3.24107': attribute type 4 has an invalid length. [ 1752.938133][T31317] netlink: 'syz.7.24102': attribute type 7 has an invalid length. [ 1754.380378][T31373] ptrace attach of "./syz-executor exec"[31374] was attempted by "./syz-executor exec"[31373] [ 1756.970644][T31474] binder: 31473:31474 ioctl c0306201 0 returned -14 [ 1757.230938][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24189'. [ 1758.845819][T31545] netlink: 'syz.1.24209': attribute type 17 has an invalid length. [ 1759.566957][T31563] netlink: 188 bytes leftover after parsing attributes in process `syz.1.24216'. [ 1760.305588][T31578] binder: 31576:31578 ioctl c0306201 200000000100 returned -14 [ 1760.767280][T31597] binder: 31596:31597 ioctl 40046205 0 returned -22 [ 1760.926324][T31610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24237'. [ 1761.027951][T26862] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 1761.107054][ T30] audit: type=1326 audit(1763280794.330:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.160230][ T30] audit: type=1326 audit(1763280794.360:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.212396][ T30] audit: type=1326 audit(1763280794.360:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.263027][ T30] audit: type=1326 audit(1763280794.360:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.276392][T26862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1761.304466][T26862] usb 4-1: config 0 has no interface number 0 [ 1761.313513][T26862] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1761.314944][ T30] audit: type=1326 audit(1763280794.360:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.330407][T26862] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1761.361255][T26862] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1761.372378][T26862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.383449][T26862] usb 4-1: config 0 descriptor?? [ 1761.408180][T31599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1761.420902][T26862] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1761.438252][ T30] audit: type=1326 audit(1763280794.360:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.527043][ T30] audit: type=1326 audit(1763280794.360:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.596874][ T30] audit: type=1326 audit(1763280794.360:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.640739][ T30] audit: type=1326 audit(1763280794.360:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.684132][T26862] usb 4-1: USB disconnect, device number 79 [ 1761.690244][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1761.696753][ T30] audit: type=1326 audit(1763280794.360:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.7.24239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fac52b8f6c9 code=0x7ffc0000 [ 1761.986294][T31634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24250'. [ 1763.351239][T31674] syzkaller0: entered promiscuous mode [ 1763.369849][T31674] syzkaller0: entered allmulticast mode [ 1763.757145][ T8090] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1763.909392][ T8090] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1763.917999][ T8090] usb 4-1: config 0 has no interface number 0 [ 1763.926323][ T8090] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1763.938256][ T8090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.947447][ T8090] usb 4-1: Product: syz [ 1763.951689][ T8090] usb 4-1: Manufacturer: syz [ 1763.962734][ T8090] usb 4-1: SerialNumber: syz [ 1763.971459][ T8090] usb 4-1: config 0 descriptor?? [ 1764.095878][T31703] netlink: 36 bytes leftover after parsing attributes in process `syz.0.24275'. [ 1764.186436][ T8090] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1764.217837][ T8090] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1764.226434][ T8090] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1764.245931][ T8090] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1764.260490][ T8090] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1764.652825][ T8090] usb 4-1: USB disconnect, device number 80 [ 1764.666488][ T8090] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1764.690234][ T8090] keyspan 4-1:0.133: device disconnected [ 1766.001355][T31766] input: syz1 as /devices/virtual/input/input165 [ 1766.075773][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24306'. [ 1766.091335][T31770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.24306'. [ 1766.101945][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24306'. [ 1766.115686][T31770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.24306'. [ 1766.874710][T31811] netlink: 188 bytes leftover after parsing attributes in process `syz.3.24325'. [ 1768.266752][T31850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24344'. [ 1768.469518][T31857] fuse: Bad value for 'group_id' [ 1768.474513][T31857] fuse: Bad value for 'group_id' [ 1768.968702][T31885] netlink: 28 bytes leftover after parsing attributes in process `syz.7.24360'. [ 1769.209790][ T8090] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1769.375064][ T8090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1769.387799][ T8090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.398579][ T8090] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1769.412060][ T8090] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1769.422985][ T8090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.449004][ T8090] usb 1-1: config 0 descriptor?? [ 1769.478774][T31914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24372'. [ 1769.550651][T31917] netlink: 108 bytes leftover after parsing attributes in process `syz.1.24375'. [ 1769.559990][T31917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24375'. [ 1769.886690][T26862] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1769.895819][ T8090] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1770.038365][T26862] usb 2-1: Using ep0 maxpacket: 16 [ 1770.046365][T26862] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1770.055674][T26862] usb 2-1: config 0 has no interface number 0 [ 1770.071739][T26862] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1770.101199][T26862] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1770.123823][T26862] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1770.133052][T26862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.141360][T26862] usb 2-1: Product: syz [ 1770.145660][T26862] usb 2-1: Manufacturer: syz [ 1770.150474][T26862] usb 2-1: SerialNumber: syz [ 1770.162259][T26862] usb 2-1: config 0 descriptor?? [ 1770.169032][T31925] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1770.247158][T31887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.261641][T31925] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1770.307102][T31887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.390942][ T8082] usb 1-1: USB disconnect, device number 19 [ 1770.729617][T31969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24397'. [ 1770.839612][T26862] asix 2-1:0.251: probe with driver asix failed with error -71 [ 1770.921926][T26862] usb 2-1: USB disconnect, device number 4 [ 1771.875561][T32011] fuse: Bad value for 'rootmode' [ 1773.152962][T32067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24445'. [ 1773.915358][T32092] netlink: 272 bytes leftover after parsing attributes in process `syz.0.24454'. [ 1775.356681][T26862] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1775.519823][T26862] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1775.529224][T26862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.543048][T26862] usb 4-1: config 0 descriptor?? [ 1775.567393][T26862] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1776.104079][T32196] netlink: 'syz.0.24500': attribute type 4 has an invalid length. [ 1777.592904][T26862] usb 4-1: USB disconnect, device number 81 [ 1778.162057][T32233] netlink: 140 bytes leftover after parsing attributes in process `syz.3.24518'. [ 1779.022580][T32255] trusted_key: encrypted_key: master key parameter '' is invalid [ 1779.764089][T32298] trusted_key: encrypted_key: insufficient parameters specified [ 1780.594283][T32336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24568'. [ 1780.610552][T32336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24568'. [ 1780.644559][T32341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24569'. [ 1781.287696][T32377] netlink: 'syz.2.24585': attribute type 4 has an invalid length. [ 1781.820542][T32401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24598'. [ 1782.702777][T32437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1785.131829][T32527] x_tables: duplicate underflow at hook 1 [ 1786.389983][T32571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24673'. [ 1788.039322][T32665] trusted_key: encrypted_key: master key parameter is missing [ 1789.458644][T32718] netlink: 324 bytes leftover after parsing attributes in process `syz.3.24740'. [ 1789.468517][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24740'. [ 1790.525687][T32756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24758'. [ 1791.542375][ T328] netlink: 72 bytes leftover after parsing attributes in process `syz.1.24775'. [ 1791.844143][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.851165][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.579517][ T376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24798'. [ 1792.841644][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24805'. [ 1792.853860][ T390] netlink: 52 bytes leftover after parsing attributes in process `syz.3.24805'. [ 1792.864789][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24805'. [ 1792.874219][ T390] netlink: 52 bytes leftover after parsing attributes in process `syz.3.24805'. [ 1792.952094][ T392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24807'. [ 1794.142844][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24838'. [ 1794.889088][ T492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.24851'. [ 1794.965971][ T502] netlink: 'syz.0.24859': attribute type 4 has an invalid length. [ 1794.974653][ T502] netlink: 'syz.0.24859': attribute type 5 has an invalid length. [ 1795.021844][ T502] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.24859'. [ 1796.434498][ T590] netlink: 'syz.3.24902': attribute type 10 has an invalid length. [ 1799.018111][ T709] loop5: detected capacity change from 0 to 7 [ 1799.250860][ T709] Dev loop5: unable to read RDB block 7 [ 1799.259563][ T709] loop5: unable to read partition table [ 1799.265992][ T709] loop5: partition table beyond EOD, truncated [ 1799.274523][ T709] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1799.618445][ T739] lo: left allmulticast mode [ 1799.630841][ T739] tunl0: left allmulticast mode [ 1799.635918][ T739] gre0: left allmulticast mode [ 1799.648070][ T739] gretap0: left allmulticast mode [ 1799.653647][ T739] ip_vti0: left allmulticast mode [ 1799.659232][ T739] ip6_vti0: left allmulticast mode [ 1799.664627][ T739] sit0: left allmulticast mode [ 1799.670092][ T739] ip6tnl0: left allmulticast mode [ 1799.675395][ T739] ip6gre0: left allmulticast mode [ 1799.680930][ T739] bond0: left allmulticast mode [ 1799.686265][ T739] caif0: left allmulticast mode [ 1799.691433][ T739] batadv0: left allmulticast mode [ 1799.697134][ T739] veth0: left allmulticast mode [ 1799.703841][ T739] veth1: left allmulticast mode [ 1799.709092][ T739] wg0: left allmulticast mode [ 1799.714006][ T739] wg1: left allmulticast mode [ 1799.720779][ T739] wg2: left allmulticast mode [ 1799.725661][ T739] veth0_to_bridge: left allmulticast mode [ 1799.733500][ T739] bridge_slave_0: left allmulticast mode [ 1799.741007][ T739] veth1_to_bridge: left allmulticast mode [ 1799.747096][ T739] bridge_slave_1: left allmulticast mode [ 1799.752913][ T739] veth0_to_bond: left allmulticast mode [ 1799.761467][ T739] bond_slave_0: left allmulticast mode [ 1799.767226][ T739] veth1_to_bond: left allmulticast mode [ 1799.773088][ T739] bond_slave_1: left allmulticast mode [ 1799.779154][ T739] veth0_to_team: left allmulticast mode [ 1799.786211][ T739] veth1_to_team: left allmulticast mode [ 1799.792416][ T739] veth0_to_batadv: left allmulticast mode [ 1799.798526][ T739] batadv_slave_0: left allmulticast mode [ 1799.804354][ T739] xfrm0: left allmulticast mode [ 1799.813918][ T739] veth0_to_hsr: left allmulticast mode [ 1799.820118][ T739] veth1_to_hsr: left allmulticast mode [ 1799.828032][ T739] hsr0: left allmulticast mode [ 1799.832916][ T739] hsr_slave_0: left allmulticast mode [ 1799.838563][ T739] hsr_slave_1: left allmulticast mode [ 1799.844238][ T739] veth1_virt_wifi: left allmulticast mode [ 1799.850543][ T739] veth0_virt_wifi: left allmulticast mode [ 1799.857256][ T739] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1799.864466][ T739] veth1_macvtap: left allmulticast mode [ 1799.871370][ T739] veth0_macvtap: left allmulticast mode [ 1799.877873][ T739] macvtap0: left allmulticast mode [ 1799.883251][ T739] macsec0: left allmulticast mode [ 1799.888819][ T739] geneve0: left allmulticast mode [ 1799.894443][ T739] geneve1: left allmulticast mode [ 1799.899874][ T739] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1799.907789][ T739] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1799.915113][ T739] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 1799.927076][ T739] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1799.934527][ T739] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 1799.941898][ T739] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 1799.949825][ T739] geneve2: left allmulticast mode [ 1799.955067][ T739] bond1: left allmulticast mode [ 1799.960303][ T739] erspan0.768: left allmulticast mode [ 1799.965693][ T739] erspan0: left allmulticast mode [ 1799.971903][ T739] gre1: left allmulticast mode [ 1799.976966][ T739] veth2: left allmulticast mode [ 1799.982082][ T739] veth3: left allmulticast mode [ 1799.987183][ T739] M: left allmulticast mode [ 1799.992916][ T739] sit1: left allmulticast mode [ 1800.006012][ T739] bridge1: left allmulticast mode [ 1800.011351][ T739] syzkaller0: left allmulticast mode [ 1800.016987][ T739] syztnl1: left allmulticast mode [ 1800.022154][ T739] syztnl0: left allmulticast mode [ 1800.027742][ T739] ): left allmulticast mode [ 1800.032433][ T739] syztnl2: left allmulticast mode [ 1801.205854][ T834] __nla_validate_parse: 1 callbacks suppressed [ 1801.205873][ T834] netlink: 84 bytes leftover after parsing attributes in process `syz.3.25014'. [ 1802.218427][ T882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25035'. [ 1802.649767][ T903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25043'. [ 1802.745425][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1802.745441][ T30] audit: type=1326 audit(1763280835.960:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.2.25046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1802.786897][ T30] audit: type=1326 audit(1763280835.960:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.2.25046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1802.810964][ T30] audit: type=1326 audit(1763280835.960:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.2.25046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1802.834590][ T30] audit: type=1326 audit(1763280835.960:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.2.25046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1802.857662][ T30] audit: type=1326 audit(1763280835.960:10532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.2.25046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1803.123142][ T932] binder: 930:932 ioctl c0306201 0 returned -14 [ 1804.416077][ T979] netlink: 92 bytes leftover after parsing attributes in process `syz.0.25072'. [ 1805.010182][ T1012] syzkaller0: entered promiscuous mode [ 1805.015866][ T1012] syzkaller0: entered allmulticast mode [ 1805.211909][ T1024] sit0: entered promiscuous mode [ 1805.228059][ T1024] netlink: 'syz.2.25093': attribute type 1 has an invalid length. [ 1805.235914][ T1024] netlink: 1 bytes leftover after parsing attributes in process `syz.2.25093'. [ 1805.700477][ T1059] netlink: 76 bytes leftover after parsing attributes in process `syz.7.25099'. [ 1805.894555][ T30] audit: type=1326 audit(1763280839.110:10533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1069 comm="syz.0.25108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7fc00000 [ 1805.936352][ T1079] fuse: Bad value for 'user_id' [ 1805.942328][ T1079] fuse: Bad value for 'user_id' [ 1805.986657][T26443] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1806.146749][T26443] usb 4-1: Using ep0 maxpacket: 32 [ 1806.169224][T26443] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1806.199810][T26443] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1806.218711][T26443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.246794][T26443] usb 4-1: Product: syz [ 1806.251002][T26443] usb 4-1: Manufacturer: syz [ 1806.255597][T26443] usb 4-1: SerialNumber: syz [ 1806.275239][T26443] usb 4-1: config 0 descriptor?? [ 1806.288054][ T1068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1806.299789][T26443] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1806.318111][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25122'. [ 1806.508953][ T8090] usb 4-1: USB disconnect, device number 82 [ 1806.639135][ T1113] netlink: 108 bytes leftover after parsing attributes in process `syz.2.25128'. [ 1806.659440][ T1113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25128'. [ 1806.738157][ T1068] input: syz0 as /devices/virtual/input/input168 [ 1807.832675][ T1183] netlink: 72 bytes leftover after parsing attributes in process `syz.0.25161'. [ 1807.921840][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25164'. [ 1807.932124][ T1189] erspan0: default FDB implementation only supports local addresses [ 1807.987216][T30939] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1808.166681][T30939] usb 4-1: Using ep0 maxpacket: 8 [ 1808.183913][T30939] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1808.203361][T30939] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1808.218802][T30939] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1808.225447][T30939] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1808.237969][T30939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.263999][T30939] usb 4-1: config 0 descriptor?? [ 1808.687294][ T1178] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1808.711082][T30939] playstation 0003:054C:09CC.0051: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 1808.903748][T30939] playstation 0003:054C:09CC.0051: Failed to retrieve feature with reportID 18: -71 [ 1808.913827][T30939] playstation 0003:054C:09CC.0051: Failed to retrieve DualShock4 pairing info: -71 [ 1808.924659][T30939] playstation 0003:054C:09CC.0051: Failed to get MAC address from DualShock4 [ 1808.948447][T30939] playstation 0003:054C:09CC.0051: Failed to create dualshock4. [ 1808.968234][T30939] playstation 0003:054C:09CC.0051: probe with driver playstation failed with error -71 [ 1808.982138][T30939] usb 4-1: USB disconnect, device number 83 [ 1809.113565][ T1248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1810.356045][ T1293] mac80211_hwsim hwsim45 syzkaller0: Caught tx_queue_len zero misconfig [ 1811.475830][ T30] audit: type=1326 audit(1763280844.690:10534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.526730][ T30] audit: type=1326 audit(1763280844.720:10535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585703][ T30] audit: type=1326 audit(1763280844.720:10536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585751][ T30] audit: type=1326 audit(1763280844.720:10537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585790][ T30] audit: type=1326 audit(1763280844.720:10538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585828][ T30] audit: type=1326 audit(1763280844.720:10539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585874][ T30] audit: type=1326 audit(1763280844.720:10540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585911][ T30] audit: type=1326 audit(1763280844.720:10541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585950][ T30] audit: type=1326 audit(1763280844.720:10542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.585989][ T30] audit: type=1326 audit(1763280844.720:10543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1366 comm="syz.2.25244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x7ffc0000 [ 1811.614114][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25245'. [ 1813.273800][ T1457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1813.874115][T30939] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1814.036667][T30939] usb 2-1: Using ep0 maxpacket: 16 [ 1814.055775][T30939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1814.068003][T30939] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1814.075727][T30939] usb 2-1: can't read configurations, error -71 [ 1814.327177][ T1507] netlink: 80 bytes leftover after parsing attributes in process `syz.3.25306'. [ 1815.901026][ T1540] netlink: 96 bytes leftover after parsing attributes in process `syz.2.25321'. [ 1816.302397][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25329'. [ 1816.504858][ T1565] loop5: detected capacity change from 0 to 7 [ 1816.810142][ T1571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25336'. [ 1816.951567][ T1565] Dev loop5: unable to read RDB block 7 [ 1816.976981][ T1565] loop5: unable to read partition table [ 1816.992262][ T1565] loop5: partition table beyond EOD, truncated [ 1817.006697][ T1565] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1818.113877][ T1634] fuse: Bad value for 'fd' [ 1818.381722][ T1651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25374'. [ 1822.450870][ T1859] batadv_slave_1: entered promiscuous mode [ 1822.472214][ T1858] batadv_slave_1: left promiscuous mode [ 1822.826645][ T8082] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1822.989795][ T8082] usb 4-1: Using ep0 maxpacket: 32 [ 1823.018368][ T8082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1823.027629][ T8082] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1823.046681][ T8082] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1823.076436][ T8082] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1823.114705][ T8082] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1823.124228][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.132719][ T8082] usb 4-1: Product: syz [ 1823.142554][ T8082] usb 4-1: Manufacturer: syz [ 1823.152680][ T8082] usb 4-1: SerialNumber: syz [ 1823.386099][ T8082] usb 4-1: 0:2 : does not exist [ 1823.435883][ T8082] usb 4-1: USB disconnect, device number 84 [ 1823.499763][ T1902] udevd[1902]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1823.621758][ T1910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25497'. [ 1823.880639][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1823.880655][ T30] audit: type=1326 audit(1763280857.090:10591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1823.978814][ T30] audit: type=1326 audit(1763280857.090:10592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.011735][ T30] audit: type=1326 audit(1763280857.090:10593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.129823][ T30] audit: type=1326 audit(1763280857.090:10594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.211908][ T30] audit: type=1326 audit(1763280857.090:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.259205][ T30] audit: type=1326 audit(1763280857.090:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.306815][ T30] audit: type=1326 audit(1763280857.090:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.420829][ T30] audit: type=1326 audit(1763280857.090:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.448278][ T30] audit: type=1326 audit(1763280857.090:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1824.477088][ T30] audit: type=1326 audit(1763280857.090:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.0.25499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1827.353996][ T1991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25533'. [ 1827.400862][ T1991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1827.466701][ T1991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.475167][ T1991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1827.511727][ T1991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.524829][ T1991] batman_adv: batadv0: Interface deactivated: gretap1 [ 1827.559616][ T1998] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1827.601287][ T1991] batman_adv: batadv0: Removing interface: gretap1 [ 1827.676791][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1827.818765][ T2003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25540'. [ 1827.881451][ T2006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25541'. [ 1827.944760][ T2006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25541'. [ 1827.975637][ T2006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25541'. [ 1829.083031][ T2044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25560'. [ 1829.350476][ T1964] syz.3.25518 (1964): drop_caches: 1 [ 1829.960959][ T2074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25574'. [ 1829.983125][ T2075] binder: 2073:2075 ioctl c0306201 2000000004c0 returned -22 [ 1830.009084][ T2077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.036225][ T2077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.047188][ T2077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1830.491139][ T2101] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1831.002705][ T2122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25598'. [ 1831.094570][ T2126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25600'. [ 1831.429793][ T2142] netlink: 76 bytes leftover after parsing attributes in process `syz.2.25607'. [ 1831.786685][ T2164] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1833.887109][ T2232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25649'. [ 1834.013531][ T2235] input: syz1 as /devices/virtual/input/input169 [ 1834.548122][ T2268] tc_dump_action: action bad kind [ 1836.199091][ T2325] x_tables: duplicate underflow at hook 2 [ 1836.464000][ T2337] binder: 2335:2337 ioctl c0306201 200000000440 returned -14 [ 1836.547054][ T2340] netlink: 'syz.1.25702': attribute type 27 has an invalid length. [ 1837.605643][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1837.605659][ T30] audit: type=1326 audit(1763280870.820:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2384 comm="syz.0.25722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x0 [ 1837.705800][ T2392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25724'. [ 1838.095542][ T30] audit: type=1326 audit(1763280871.310:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.142520][ T30] audit: type=1326 audit(1763280871.310:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.176827][ T30] audit: type=1326 audit(1763280871.350:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.202627][ T30] audit: type=1326 audit(1763280871.350:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.225711][ T30] audit: type=1326 audit(1763280871.350:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.252677][ T30] audit: type=1326 audit(1763280871.350:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.275445][ T8078] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1838.287880][ T30] audit: type=1326 audit(1763280871.350:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.311810][ T30] audit: type=1326 audit(1763280871.350:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.335249][ T30] audit: type=1326 audit(1763280871.350:10623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2423 comm="syz.0.25738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1838.468444][ T8078] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1838.488630][ T8078] usb 4-1: config 1 has no interface number 0 [ 1838.495380][ T8078] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1838.529008][ T8078] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1838.538918][ T8078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.548774][ T8078] usb 4-1: Product: syz [ 1838.552960][ T8078] usb 4-1: Manufacturer: syz [ 1838.560994][ T8078] usb 4-1: SerialNumber: syz [ 1838.777744][ T8078] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1838.810052][ T8078] usb 4-1: USB disconnect, device number 85 [ 1839.010419][ T2479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25759'. [ 1839.125672][ T2479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25759'. [ 1839.130878][ T2485] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 1839.159756][ T2479] bond0 (unregistering): (slave geneve4): Releasing backup interface [ 1839.203505][ T2479] bond0 (unregistering): Released all slaves [ 1839.560001][ T2499] netlink: 'syz.1.25765': attribute type 4 has an invalid length. [ 1839.596977][ T2499] netlink: 17 bytes leftover after parsing attributes in process `syz.1.25765'. [ 1840.032640][ T2521] netlink: 'syz.7.25774': attribute type 19 has an invalid length. [ 1841.186674][ T8078] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1841.226661][ T8082] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1841.349054][ T8078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.359845][ T8078] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1841.373193][ T8078] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1841.382353][ T8078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.386777][ T8082] usb 1-1: Using ep0 maxpacket: 32 [ 1841.396876][ T8078] usb 4-1: config 0 descriptor?? [ 1841.409414][ T8082] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1841.418048][ T8082] usb 1-1: config 0 has no interface number 0 [ 1841.424482][ T8082] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1841.435987][ T8082] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1841.444810][ T8082] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1841.453930][ T8082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.462195][ T8082] usb 1-1: Product: syz [ 1841.466371][ T8082] usb 1-1: Manufacturer: syz [ 1841.471036][ T8082] usb 1-1: SerialNumber: syz [ 1841.478492][ T8082] usb 1-1: config 0 descriptor?? [ 1841.611726][ T2560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.620760][ T2560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.652861][ T8078] usb 4-1: USB disconnect, device number 86 [ 1841.665956][ T2581] udevd[2581]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1842.186091][ T8082] appletouch 1-1:0.85: Geyser mode initialized. [ 1842.209294][ T8082] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input170 [ 1842.463581][ T2598] netlink: 84 bytes leftover after parsing attributes in process `syz.3.25799'. [ 1842.487537][ T2598] netlink: 72 bytes leftover after parsing attributes in process `syz.3.25799'. [ 1842.673523][ T2609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25803'. [ 1842.714199][ T8078] usb 1-1: USB disconnect, device number 20 [ 1842.745906][ T8078] appletouch 1-1:0.85: input: appletouch disconnected [ 1842.922174][ T2627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25811'. [ 1843.403422][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1843.403439][ T30] audit: type=1326 audit(1763280876.620:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2646 comm="syz.0.25818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1843.457613][ T30] audit: type=1326 audit(1763280876.650:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2646 comm="syz.0.25818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1843.480753][ T30] audit: type=1326 audit(1763280876.650:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2646 comm="syz.0.25818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1843.524766][ T30] audit: type=1326 audit(1763280876.650:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2646 comm="syz.0.25818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1843.571432][ T30] audit: type=1326 audit(1763280876.650:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2646 comm="syz.0.25818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abdd8f6c9 code=0x7ffc0000 [ 1844.704256][ T30] audit: type=1800 audit(1763280877.920:10671): pid=2713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25844" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1847.806672][ T8082] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1847.988371][ T8082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.026636][ T8082] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1848.056644][ T8082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.086979][ T8082] usb 2-1: config 0 descriptor?? [ 1848.306030][ T8082] usbhid 2-1:0.0: can't add hid device: -71 [ 1848.325842][ T8082] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1848.357668][ T8082] usb 2-1: USB disconnect, device number 7 [ 1848.867044][ T8082] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1849.069391][ T8082] usb 2-1: Using ep0 maxpacket: 32 [ 1849.123773][ T8082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.145266][ T8082] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1849.177185][ T8082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.219804][ T8082] usb 2-1: config 0 descriptor?? [ 1849.259415][ T8082] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1849.306936][ T8082] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1849.949295][ T8078] usb 2-1: USB disconnect, device number 8 [ 1849.965664][ T8078] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1851.857188][ T8082] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1852.018617][ T8082] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1852.038483][ T8082] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 1852.071840][ T8082] usb 1-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 1852.110873][ T8082] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1852.138470][ T8082] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1852.150100][ T8082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.171210][ T8082] usb 1-1: Product: syz [ 1852.194295][ T8082] usb 1-1: Manufacturer: syz [ 1852.216670][ T8082] usb 1-1: SerialNumber: syz [ 1852.243327][ T8082] usb 1-1: config 0 descriptor?? [ 1852.265468][ T8082] ir_toy 1-1:0.0: required endpoints not found [ 1853.281616][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.291401][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.573198][ T8082] usb 1-1: USB disconnect, device number 21 [ 1855.235296][ T3108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26010'. [ 1856.073547][ T3144] netlink: 9 bytes leftover after parsing attributes in process `syz.1.26026'. [ 1856.116763][ T3144] gretap0: entered promiscuous mode [ 1856.138072][ T3144] netlink: 5 bytes leftover after parsing attributes in process `syz.1.26026'. [ 1856.166812][ T3144] 0ªî{X¹¦: renamed from gretap0 [ 1856.201308][ T3144] 0ªî{X¹¦: left promiscuous mode [ 1856.206384][ T3144] 0ªî{X¹¦: entered allmulticast mode [ 1856.235132][ T3144] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1856.453332][ T3163] netlink: 128 bytes leftover after parsing attributes in process `syz.1.26037'. [ 1856.928601][ T3196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.26051'. [ 1856.949523][ T3199] netlink: 108 bytes leftover after parsing attributes in process `syz.2.26052'. [ 1859.217986][ T3269] netlink: 9 bytes leftover after parsing attributes in process `syz.3.26081'. [ 1859.243669][ T3269] gretap0: entered promiscuous mode [ 1859.546876][ T3281] pim6reg1: entered promiscuous mode [ 1859.572738][ T3281] pim6reg1: entered allmulticast mode [ 1861.167099][ T3357] fuse: Unknown parameter '0x0000000000000005' [ 1861.886433][ T3371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26121'. [ 1861.916477][ T3371] syzkaller1: entered promiscuous mode [ 1861.928552][ T3371] syzkaller1: entered allmulticast mode [ 1861.989265][ T3373] netlink: 104 bytes leftover after parsing attributes in process `syz.7.26122'. [ 1862.328494][ T3413] netdevsim netdevsim2: Direct firmware load for . [ 1862.328494][ T3413] failed with error -2 [ 1862.341193][ T3413] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1862.341193][ T3413] [ 1864.044591][ T3516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26184'. [ 1865.300954][ T3565] input: syz1 as /devices/virtual/input/input171 [ 1865.398295][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26206'. [ 1865.805946][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.816172][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.826741][ T3568] bond0 (unregistering): Released all slaves [ 1866.450564][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26217'. [ 1867.323791][ T3631] netlink: 44 bytes leftover after parsing attributes in process `syz.7.26235'. [ 1868.564592][ T30] audit: type=1326 audit(1763280901.780:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3698 comm="syz.3.26269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x0 [ 1868.782852][ T3710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26272'. [ 1868.942632][ T3725] binder: BINDER_SET_CONTEXT_MGR already set [ 1868.949765][ T3725] binder: 3724:3725 ioctl 40046207 0 returned -16 [ 1869.090257][ T3732] netlink: 'syz.7.26282': attribute type 11 has an invalid length. [ 1869.098767][ T3732] netlink: 32 bytes leftover after parsing attributes in process `syz.7.26282'. [ 1869.332133][ T3744] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26288'. [ 1870.417760][ T3811] binder: 3810:3811 ioctl c0306201 200000000100 returned -14 [ 1870.528794][ T3815] veth0: entered promiscuous mode [ 1870.536659][ T3815] veth0: left promiscuous mode [ 1870.971419][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26335'. [ 1871.150774][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26338'. [ 1871.446660][T26443] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1871.608623][T26443] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1871.617086][T26443] usb 4-1: config 0 has no interface number 0 [ 1871.635842][T26443] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1871.645322][T26443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.653659][T26443] usb 4-1: Product: syz [ 1871.658222][T26443] usb 4-1: Manufacturer: syz [ 1871.662831][T26443] usb 4-1: SerialNumber: syz [ 1871.670576][T26443] usb 4-1: config 0 descriptor?? [ 1871.880391][T26443] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1871.903600][T26443] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1871.917140][T26443] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1871.924991][T26443] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1871.943496][T26443] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1871.971325][T26443] usb 4-1: USB disconnect, device number 87 [ 1871.991678][T26443] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1872.013429][T26443] keyspan 4-1:0.133: device disconnected [ 1872.117286][ T3874] netlink: 120 bytes leftover after parsing attributes in process `syz.0.26348'. [ 1872.129020][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26348'. [ 1872.139483][ T3874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26348'. [ 1872.524159][ T3884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26355'. [ 1872.546593][ T3884] netlink: 59 bytes leftover after parsing attributes in process `syz.3.26355'. [ 1872.555664][ T3884] netlink: 59 bytes leftover after parsing attributes in process `syz.3.26355'. [ 1872.869772][ T30] audit: type=1326 audit(1763280906.090:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3899 comm="syz.2.26363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e4bf8f6c9 code=0x0 [ 1876.591699][ T4046] x_tables: duplicate underflow at hook 1 [ 1876.681945][ T4051] binder: 4050:4051 ioctl c018620c 200000000000 returned -1 [ 1876.807753][ T4061] netlink: 'syz.3.26438': attribute type 4 has an invalid length. [ 1876.816320][ T4061] netlink: 'syz.3.26438': attribute type 5 has an invalid length. [ 1876.825662][ T4061] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.26438'. [ 1877.850458][ T30] audit: type=1326 audit(1763280911.060:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4107 comm="syz.3.26461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1877.882798][ T30] audit: type=1326 audit(1763280911.060:10675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4107 comm="syz.3.26461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1877.945170][ T4113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26462'. [ 1878.213591][ T4122] netlink: 'syz.3.26467': attribute type 7 has an invalid length. [ 1878.221652][ T4122] netlink: 'syz.3.26467': attribute type 8 has an invalid length. [ 1878.882476][ T4149] loop2: detected capacity change from 0 to 7 [ 1878.889671][ T4149] Dev loop2: unable to read RDB block 7 [ 1878.896316][ T4149] loop2: AHDI p1 p2 p3 [ 1878.901113][ T4149] loop2: partition table partially beyond EOD, truncated [ 1878.910275][ T4149] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1878.936879][ T4149] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1879.908387][ T4179] netlink: 188 bytes leftover after parsing attributes in process `syz.2.26493'. [ 1880.280794][ T4186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26496'. [ 1880.908871][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26510'. [ 1880.930160][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26510'. [ 1883.502368][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26556'. [ 1885.096764][T30939] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1885.256848][T30939] usb 4-1: Using ep0 maxpacket: 32 [ 1885.263916][T30939] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 1885.272427][T30939] usb 4-1: config 0 has no interface number 0 [ 1885.279303][T30939] usb 4-1: config 0 interface 148 has no altsetting 0 [ 1885.291618][T30939] usb 4-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 1885.301242][T30939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.312926][T30939] usb 4-1: Product: syz [ 1885.317386][T30939] usb 4-1: Manufacturer: syz [ 1885.322082][T30939] usb 4-1: SerialNumber: syz [ 1885.338539][T30939] usb 4-1: config 0 descriptor?? [ 1885.346507][T30939] pl2303 4-1:0.148: required endpoints missing [ 1885.548099][T30939] usb 4-1: USB disconnect, device number 88 [ 1886.888659][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26593'. [ 1887.570974][ T4424] loop5: detected capacity change from 0 to 7 [ 1887.576939][T30939] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1887.726693][T30939] usb 4-1: Using ep0 maxpacket: 32 [ 1887.734097][T30939] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1887.743145][T30939] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1887.752310][T30939] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1887.762188][T30939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1887.772701][T30939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1887.782972][T30939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1887.792969][ T4424] Dev loop5: unable to read RDB block 7 [ 1887.799062][T30939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1887.809360][T30939] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1887.823015][T30939] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1887.832460][T30939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.850171][T30939] usb 4-1: config 0 descriptor?? [ 1887.868305][ T4424] loop5: unable to read partition table [ 1887.884585][ T4424] loop5: partition table beyond EOD, truncated [ 1887.946081][ T4424] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1888.103764][T30939] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1888.121940][T30939] usb 4-1: USB disconnect, device number 89 [ 1888.131552][T30939] usblp0: removed [ 1888.331578][ T4432] tap1: tun_chr_ioctl cmd 1074025677 [ 1888.339930][ T4432] tap1: linktype set to 825 [ 1888.556696][T30939] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1888.699639][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26615'. [ 1888.719707][T30939] usb 4-1: Using ep0 maxpacket: 32 [ 1888.727343][T30939] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1888.735961][T30939] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1888.744706][T30939] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1888.754360][T30939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1888.764486][T30939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1888.774350][T30939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1888.784958][T30939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1888.795040][T30939] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1888.808417][T30939] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1888.817701][T30939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.837420][T30939] usb 4-1: config 0 descriptor?? [ 1889.057639][T30939] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1889.091330][T30939] usb 4-1: USB disconnect, device number 90 [ 1889.103674][T30939] usblp0: removed [ 1893.291560][ T4623] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1893.621086][ T4651] netlink: 276 bytes leftover after parsing attributes in process `syz.2.26712'. [ 1898.081983][ T4813] veth0_to_batadv: entered allmulticast mode [ 1898.944389][ T4862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26808'. [ 1898.955221][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26808'. [ 1900.052643][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26817'. [ 1900.076919][ T4886] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1900.666668][ T4902] binder: 4901:4902 ioctl 4008ae9c 0 returned -22 [ 1901.561125][ T4925] +$<¶: renamed from bridge0 [ 1901.586386][ T4910] input: syz1 as /devices/virtual/input/input172 [ 1902.351690][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26841'. [ 1904.112939][ T5008] fuse: Bad value for 'fd' [ 1904.266019][ T5016] netlink: 536 bytes leftover after parsing attributes in process `syz.0.26873'. [ 1904.299246][ T5016] netlink: 124 bytes leftover after parsing attributes in process `syz.0.26873'. [ 1905.203040][ T5058] input: syz0 as /devices/virtual/input/input173 [ 1906.729514][ T30] audit: type=1326 audit(1763280939.950:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.754751][ T30] audit: type=1326 audit(1763280939.950:10677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.777261][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.791172][ T30] audit: type=1326 audit(1763280939.980:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.815425][ T30] audit: type=1326 audit(1763280939.980:10679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.850873][ T30] audit: type=1326 audit(1763280939.980:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.873401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.880092][ T30] audit: type=1326 audit(1763280940.010:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.903732][ T30] audit: type=1326 audit(1763280940.010:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1906.926246][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.973322][ T30] audit: type=1326 audit(1763280940.010:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1907.012409][ T30] audit: type=1326 audit(1763280940.010:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1907.035823][ T30] audit: type=1326 audit(1763280940.010:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.3.26932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e478f6c9 code=0x7ffc0000 [ 1907.058381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.549879][ T5169] [ 1907.552250][ T5169] ===================================================== [ 1907.559187][ T5169] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1907.566663][ T5169] syzkaller #0 Not tainted [ 1907.571099][ T5169] ----------------------------------------------------- [ 1907.578568][ T5169] syz.2.26936/5169 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1907.586393][ T5169] ffff88803254d750 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1907.595120][ T5169] [ 1907.595120][ T5169] and this task is already holding: [ 1907.602491][ T5169] ffff888050951468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1907.611137][ T5169] which would create a new lock dependency: [ 1907.617023][ T5169] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1907.624681][ T5169] [ 1907.624681][ T5169] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1907.634116][ T5169] (kbd_event_lock){..-.}-{3:3} [ 1907.634141][ T5169] [ 1907.634141][ T5169] ... which became SOFTIRQ-irq-safe at: [ 1907.646686][ T5169] lock_acquire+0x120/0x360 [ 1907.651267][ T5169] _raw_spin_lock+0x2e/0x40 [ 1907.655847][ T5169] kbd_event+0xd2/0x3f70 [ 1907.660264][ T5169] input_handle_events_default+0xd4/0x1a0 [ 1907.666146][ T5169] input_pass_values+0x288/0x890 [ 1907.671159][ T5169] input_event_dispose+0x3e5/0x6b0 [ 1907.676399][ T5169] input_event+0x89/0xe0 [ 1907.680716][ T5169] hidinput_hid_event+0x145e/0x1dd0 [ 1907.685998][ T5169] hid_process_event+0x4be/0x620 [ 1907.691013][ T5169] hid_report_raw_event+0xe91/0x16d0 [ 1907.696377][ T5169] hid_input_report+0x43e/0x520 [ 1907.701307][ T5169] hid_irq_in+0x47e/0x6d0 [ 1907.705801][ T5169] __usb_hcd_giveback_urb+0x376/0x540 [ 1907.711287][ T5169] dummy_timer+0x85f/0x44c0 [ 1907.715868][ T5169] __hrtimer_run_queues+0x52c/0xc60 [ 1907.721139][ T5169] hrtimer_run_softirq+0x187/0x2b0 [ 1907.726360][ T5169] handle_softirqs+0x286/0x870 [ 1907.731200][ T5169] __irq_exit_rcu+0xca/0x1f0 [ 1907.735873][ T5169] irq_exit_rcu+0x9/0x30 [ 1907.740201][ T5169] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1907.745919][ T5169] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1907.751989][ T5169] __sanitizer_cov_trace_pc+0x43/0x70 [ 1907.757469][ T5169] __update_page_owner_handle+0x19a/0x570 [ 1907.763280][ T5169] __set_page_owner+0x10b/0x4c0 [ 1907.768215][ T5169] post_alloc_hook+0x240/0x2a0 [ 1907.773065][ T5169] get_page_from_freelist+0x2365/0x2440 [ 1907.778687][ T5169] __alloc_frozen_pages_noprof+0x181/0x370 [ 1907.784570][ T5169] alloc_pages_mpol+0x232/0x4a0 [ 1907.789585][ T5169] alloc_pages_noprof+0xa9/0x190 [ 1907.794599][ T5169] get_free_pages_noprof+0xf/0x80 [ 1907.799704][ T5169] packet_set_ring+0x6be/0x2120 [ 1907.804727][ T5169] packet_setsockopt+0xc5a/0x12c0 [ 1907.809872][ T5169] do_sock_setsockopt+0x17c/0x1b0 [ 1907.814978][ T5169] __x64_sys_setsockopt+0x13f/0x1b0 [ 1907.820248][ T5169] do_syscall_64+0xfa/0xfa0 [ 1907.824830][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.830798][ T5169] [ 1907.830798][ T5169] to a SOFTIRQ-irq-unsafe lock: [ 1907.837806][ T5169] (tasklist_lock){.+.+}-{3:3} [ 1907.837831][ T5169] [ 1907.837831][ T5169] ... which became SOFTIRQ-irq-unsafe at: [ 1907.850477][ T5169] ... [ 1907.850484][ T5169] lock_acquire+0x120/0x360 [ 1907.857631][ T5169] _raw_read_lock+0x36/0x50 [ 1907.862216][ T5169] __do_wait+0xde/0x740 [ 1907.866453][ T5169] do_wait+0x1f8/0x510 [ 1907.870601][ T5169] kernel_wait+0xab/0x170 [ 1907.875007][ T5169] call_usermodehelper_exec_work+0xbe/0x230 [ 1907.880978][ T5169] process_scheduled_works+0xae1/0x17b0 [ 1907.886683][ T5169] worker_thread+0x8a0/0xda0 [ 1907.891344][ T5169] kthread+0x711/0x8a0 [ 1907.895492][ T5169] ret_from_fork+0x4bc/0x870 [ 1907.900153][ T5169] ret_from_fork_asm+0x1a/0x30 [ 1907.904989][ T5169] [ 1907.904989][ T5169] other info that might help us debug this: [ 1907.904989][ T5169] [ 1907.915202][ T5169] Chain exists of: [ 1907.915202][ T5169] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1907.915202][ T5169] [ 1907.927967][ T5169] Possible interrupt unsafe locking scenario: [ 1907.927967][ T5169] [ 1907.936271][ T5169] CPU0 CPU1 [ 1907.941617][ T5169] ---- ---- [ 1907.946966][ T5169] lock(tasklist_lock); [ 1907.951200][ T5169] local_irq_disable(); [ 1907.957942][ T5169] lock(kbd_event_lock); [ 1907.964780][ T5169] lock(&tty->flow.lock); [ 1907.971743][ T5169] [ 1907.975192][ T5169] lock(kbd_event_lock); [ 1907.979689][ T5169] [ 1907.979689][ T5169] *** DEADLOCK *** [ 1907.979689][ T5169] [ 1907.987826][ T5169] 6 locks held by syz.2.26936/5169: [ 1907.993027][ T5169] #0: ffff8880509510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1908.002862][ T5169] #1: ffff8880509512e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 1908.013131][ T5169] #2: ffff8880509510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1908.022435][ T5169] #3: ffff888050951468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1908.031508][ T5169] #4: ffff8880509510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1908.040813][ T5169] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1908.049855][ T5169] [ 1908.049855][ T5169] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1908.060257][ T5169] -> (kbd_event_lock){..-.}-{3:3} { [ 1908.065557][ T5169] IN-SOFTIRQ-W at: [ 1908.069608][ T5169] lock_acquire+0x120/0x360 [ 1908.075928][ T5169] _raw_spin_lock+0x2e/0x40 [ 1908.082245][ T5169] kbd_event+0xd2/0x3f70 [ 1908.088302][ T5169] input_handle_events_default+0xd4/0x1a0 [ 1908.095837][ T5169] input_pass_values+0x288/0x890 [ 1908.102584][ T5169] input_event_dispose+0x3e5/0x6b0 [ 1908.109521][ T5169] input_event+0x89/0xe0 [ 1908.115580][ T5169] hidinput_hid_event+0x145e/0x1dd0 [ 1908.122594][ T5169] hid_process_event+0x4be/0x620 [ 1908.129358][ T5169] hid_report_raw_event+0xe91/0x16d0 [ 1908.136462][ T5169] hid_input_report+0x43e/0x520 [ 1908.143129][ T5169] hid_irq_in+0x47e/0x6d0 [ 1908.149273][ T5169] __usb_hcd_giveback_urb+0x376/0x540 [ 1908.156461][ T5169] dummy_timer+0x85f/0x44c0 [ 1908.162777][ T5169] __hrtimer_run_queues+0x52c/0xc60 [ 1908.169795][ T5169] hrtimer_run_softirq+0x187/0x2b0 [ 1908.176735][ T5169] handle_softirqs+0x286/0x870 [ 1908.183315][ T5169] __irq_exit_rcu+0xca/0x1f0 [ 1908.189731][ T5169] irq_exit_rcu+0x9/0x30 [ 1908.195791][ T5169] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1908.203242][ T5169] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1908.211035][ T5169] __sanitizer_cov_trace_pc+0x43/0x70 [ 1908.218225][ T5169] __update_page_owner_handle+0x19a/0x570 [ 1908.225764][ T5169] __set_page_owner+0x10b/0x4c0 [ 1908.232441][ T5169] post_alloc_hook+0x240/0x2a0 [ 1908.239034][ T5169] get_page_from_freelist+0x2365/0x2440 [ 1908.246401][ T5169] __alloc_frozen_pages_noprof+0x181/0x370 [ 1908.254017][ T5169] alloc_pages_mpol+0x232/0x4a0 [ 1908.260680][ T5169] alloc_pages_noprof+0xa9/0x190 [ 1908.267426][ T5169] get_free_pages_noprof+0xf/0x80 [ 1908.274260][ T5169] packet_set_ring+0x6be/0x2120 [ 1908.280920][ T5169] packet_setsockopt+0xc5a/0x12c0 [ 1908.287768][ T5169] do_sock_setsockopt+0x17c/0x1b0 [ 1908.294616][ T5169] __x64_sys_setsockopt+0x13f/0x1b0 [ 1908.301625][ T5169] do_syscall_64+0xfa/0xfa0 [ 1908.307942][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.315643][ T5169] INITIAL USE at: [ 1908.319610][ T5169] lock_acquire+0x120/0x360 [ 1908.325839][ T5169] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1908.332764][ T5169] vt_reset_unicode+0x2b/0x160 [ 1908.339267][ T5169] reset_vc+0x68/0x1b0 [ 1908.345065][ T5169] vc_init+0x70/0x4a0 [ 1908.350774][ T5169] con_init+0x385/0x9c0 [ 1908.356658][ T5169] console_init+0x10e/0x430 [ 1908.362890][ T5169] start_kernel+0x254/0x410 [ 1908.369118][ T5169] x86_64_start_reservations+0x24/0x30 [ 1908.376305][ T5169] x86_64_start_kernel+0x143/0x1c0 [ 1908.383147][ T5169] common_startup_64+0x13e/0x147 [ 1908.389816][ T5169] } [ 1908.392389][ T5169] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1908.400267][ T5169] -> (&tty->flow.lock){....}-{3:3} { [ 1908.405556][ T5169] INITIAL USE at: [ 1908.409436][ T5169] lock_acquire+0x120/0x360 [ 1908.415490][ T5169] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1908.422249][ T5169] start_tty+0x20/0x70 [ 1908.427959][ T5169] n_tty_set_termios+0xa7c/0x1090 [ 1908.434534][ T5169] tty_set_termios+0xda4/0x17e0 [ 1908.440940][ T5169] set_termios+0x516/0x6c0 [ 1908.446911][ T5169] tty_mode_ioctl+0x47e/0x740 [ 1908.453144][ T5169] tty_ioctl+0x9c6/0xde0 [ 1908.458949][ T5169] __se_sys_ioctl+0xfc/0x170 [ 1908.465092][ T5169] do_syscall_64+0xfa/0xfa0 [ 1908.471152][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.478596][ T5169] } [ 1908.481081][ T5169] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1908.489746][ T5169] ... acquired at: [ 1908.493534][ T5169] lock_acquire+0x120/0x360 [ 1908.498196][ T5169] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1908.503558][ T5169] stop_tty+0x2f/0x150 [ 1908.507787][ T5169] kbd_event+0x2b72/0x3f70 [ 1908.512365][ T5169] input_handle_events_default+0xd4/0x1a0 [ 1908.518248][ T5169] input_pass_values+0x288/0x890 [ 1908.523345][ T5169] input_event_dispose+0x330/0x6b0 [ 1908.528619][ T5169] input_inject_event+0x1dd/0x340 [ 1908.533799][ T5169] evdev_write+0x2fc/0x480 [ 1908.538379][ T5169] vfs_write+0x27e/0xb30 [ 1908.542784][ T5169] ksys_write+0x145/0x250 [ 1908.547277][ T5169] do_syscall_64+0xfa/0xfa0 [ 1908.551943][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.557999][ T5169] [ 1908.560307][ T5169] [ 1908.560307][ T5169] the dependencies between the lock to be acquired [ 1908.560316][ T5169] and SOFTIRQ-irq-unsafe lock: [ 1908.573803][ T5169] -> (tasklist_lock){.+.+}-{3:3} { [ 1908.579095][ T5169] HARDIRQ-ON-R at: [ 1908.583233][ T5169] lock_acquire+0x120/0x360 [ 1908.589721][ T5169] _raw_read_lock+0x36/0x50 [ 1908.596212][ T5169] __do_wait+0xde/0x740 [ 1908.602355][ T5169] do_wait+0x1f8/0x510 [ 1908.608411][ T5169] kernel_wait+0xab/0x170 [ 1908.614728][ T5169] call_usermodehelper_exec_work+0xbe/0x230 [ 1908.622604][ T5169] process_scheduled_works+0xae1/0x17b0 [ 1908.630307][ T5169] worker_thread+0x8a0/0xda0 [ 1908.636882][ T5169] kthread+0x711/0x8a0 [ 1908.642935][ T5169] ret_from_fork+0x4bc/0x870 [ 1908.649507][ T5169] ret_from_fork_asm+0x1a/0x30 [ 1908.656255][ T5169] SOFTIRQ-ON-R at: [ 1908.660412][ T5169] lock_acquire+0x120/0x360 [ 1908.666897][ T5169] _raw_read_lock+0x36/0x50 [ 1908.673383][ T5169] __do_wait+0xde/0x740 [ 1908.679526][ T5169] do_wait+0x1f8/0x510 [ 1908.685585][ T5169] kernel_wait+0xab/0x170 [ 1908.691902][ T5169] call_usermodehelper_exec_work+0xbe/0x230 [ 1908.699776][ T5169] process_scheduled_works+0xae1/0x17b0 [ 1908.707303][ T5169] worker_thread+0x8a0/0xda0 [ 1908.713875][ T5169] kthread+0x711/0x8a0 [ 1908.719929][ T5169] ret_from_fork+0x4bc/0x870 [ 1908.726507][ T5169] ret_from_fork_asm+0x1a/0x30 [ 1908.733263][ T5169] INITIAL USE at: [ 1908.737316][ T5169] lock_acquire+0x120/0x360 [ 1908.743717][ T5169] _raw_write_lock_irq+0xa2/0xf0 [ 1908.750558][ T5169] copy_process+0x224f/0x3c00 [ 1908.757262][ T5169] kernel_clone+0x21e/0x840 [ 1908.763665][ T5169] user_mode_thread+0xdd/0x140 [ 1908.770324][ T5169] rest_init+0x23/0x300 [ 1908.776374][ T5169] start_kernel+0x3ae/0x410 [ 1908.782776][ T5169] x86_64_start_reservations+0x24/0x30 [ 1908.790135][ T5169] x86_64_start_kernel+0x143/0x1c0 [ 1908.797149][ T5169] common_startup_64+0x13e/0x147 [ 1908.803986][ T5169] INITIAL READ USE at: [ 1908.808472][ T5169] lock_acquire+0x120/0x360 [ 1908.815306][ T5169] _raw_read_lock+0x36/0x50 [ 1908.822139][ T5169] __do_wait+0xde/0x740 [ 1908.828626][ T5169] do_wait+0x1f8/0x510 [ 1908.835034][ T5169] kernel_wait+0xab/0x170 [ 1908.841699][ T5169] call_usermodehelper_exec_work+0xbe/0x230 [ 1908.849926][ T5169] process_scheduled_works+0xae1/0x17b0 [ 1908.857801][ T5169] worker_thread+0x8a0/0xda0 [ 1908.864721][ T5169] kthread+0x711/0x8a0 [ 1908.871124][ T5169] ret_from_fork+0x4bc/0x870 [ 1908.878045][ T5169] ret_from_fork_asm+0x1a/0x30 [ 1908.885151][ T5169] } [ 1908.887822][ T5169] ... key at: [] tasklist_lock+0x18/0x40 [ 1908.895716][ T5169] ... acquired at: [ 1908.899682][ T5169] lock_acquire+0x120/0x360 [ 1908.904348][ T5169] _raw_read_lock+0x36/0x50 [ 1908.909013][ T5169] send_sigurg+0x12b/0x420 [ 1908.913588][ T5169] sk_send_sigurg+0x6c/0x2e0 [ 1908.918340][ T5169] queue_oob+0x420/0x4f0 [ 1908.922827][ T5169] unix_stream_sendmsg+0xc3f/0xdf0 [ 1908.928099][ T5169] __sock_sendmsg+0x21c/0x270 [ 1908.932940][ T5169] ____sys_sendmsg+0x52d/0x830 [ 1908.937860][ T5169] ___sys_sendmsg+0x21f/0x2a0 [ 1908.942695][ T5169] __sys_sendmmsg+0x227/0x430 [ 1908.947540][ T5169] __x64_sys_sendmmsg+0xa0/0xc0 [ 1908.952566][ T5169] do_syscall_64+0xfa/0xfa0 [ 1908.957243][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.963304][ T5169] [ 1908.965612][ T5169] -> (&f_owner->lock){....}-{3:3} { [ 1908.970899][ T5169] INITIAL USE at: [ 1908.974864][ T5169] lock_acquire+0x120/0x360 [ 1908.981089][ T5169] _raw_write_lock_irq+0xa2/0xf0 [ 1908.987754][ T5169] __f_setown+0x67/0x370 [ 1908.993720][ T5169] fcntl_dirnotify+0x3fa/0x6a0 [ 1909.000209][ T5169] do_fcntl+0x6d0/0x1910 [ 1909.006174][ T5169] __se_sys_fcntl+0xc8/0x150 [ 1909.012489][ T5169] do_syscall_64+0xfa/0xfa0 [ 1909.018722][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.026339][ T5169] INITIAL READ USE at: [ 1909.030739][ T5169] lock_acquire+0x120/0x360 [ 1909.037403][ T5169] _raw_read_lock_irqsave+0xaf/0x100 [ 1909.044850][ T5169] send_sigio+0x38/0x370 [ 1909.051257][ T5169] dnotify_handle_event+0x169/0x440 [ 1909.058611][ T5169] fsnotify+0x1671/0x1a80 [ 1909.065098][ T5169] __fsnotify_parent+0x3fe/0x540 [ 1909.072193][ T5169] vfs_readv+0x6e2/0x850 [ 1909.078592][ T5169] __x64_sys_preadv+0x197/0x2a0 [ 1909.085604][ T5169] do_syscall_64+0xfa/0xfa0 [ 1909.092270][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.100321][ T5169] } [ 1909.102892][ T5169] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1909.111815][ T5169] ... acquired at: [ 1909.115689][ T5169] lock_acquire+0x120/0x360 [ 1909.120356][ T5169] _raw_read_lock_irqsave+0xaf/0x100 [ 1909.125809][ T5169] send_sigio+0x38/0x370 [ 1909.130213][ T5169] kill_fasync+0x24d/0x4d0 [ 1909.134790][ T5169] sock_wake_async+0x137/0x160 [ 1909.139717][ T5169] sock_def_readable+0x3bb/0x550 [ 1909.144816][ T5169] queue_oob+0x452/0x4f0 [ 1909.149222][ T5169] unix_stream_sendmsg+0xc3f/0xdf0 [ 1909.154496][ T5169] __sock_sendmsg+0x21c/0x270 [ 1909.159335][ T5169] ____sys_sendmsg+0x52d/0x830 [ 1909.164260][ T5169] ___sys_sendmsg+0x21f/0x2a0 [ 1909.169090][ T5169] __sys_sendmmsg+0x227/0x430 [ 1909.173931][ T5169] __x64_sys_sendmmsg+0xa0/0xc0 [ 1909.178944][ T5169] do_syscall_64+0xfa/0xfa0 [ 1909.183615][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.189668][ T5169] [ 1909.192024][ T5169] -> (&new->fa_lock){...-}-{3:3} { [ 1909.197141][ T5169] IN-SOFTIRQ-R at: [ 1909.201107][ T5169] lock_acquire+0x120/0x360 [ 1909.207247][ T5169] _raw_read_lock_irqsave+0xaf/0x100 [ 1909.214171][ T5169] kill_fasync+0x199/0x4d0 [ 1909.220226][ T5169] sock_wake_async+0x137/0x160 [ 1909.226628][ T5169] sock_def_readable+0x3bb/0x550 [ 1909.233206][ T5169] tcp_data_queue+0x201e/0x64a0 [ 1909.239781][ T5169] tcp_rcv_established+0x1335/0x2670 [ 1909.246706][ T5169] tcp_v4_do_rcv+0xa90/0x1430 [ 1909.253064][ T5169] tcp_v4_rcv+0x2675/0x2f20 [ 1909.259205][ T5169] ip_protocol_deliver_rcu+0x221/0x440 [ 1909.266300][ T5169] ip_local_deliver_finish+0x3bb/0x6f0 [ 1909.273395][ T5169] NF_HOOK+0x30c/0x3a0 [ 1909.279100][ T5169] NF_HOOK+0x30c/0x3a0 [ 1909.284805][ T5169] __netif_receive_skb+0x143/0x380 [ 1909.291623][ T5169] process_backlog+0x60e/0x14f0 [ 1909.298151][ T5169] __napi_poll+0xc7/0x360 [ 1909.304119][ T5169] net_rx_action+0x5f7/0xdf0 [ 1909.310350][ T5169] handle_softirqs+0x286/0x870 [ 1909.316754][ T5169] do_softirq+0xec/0x180 [ 1909.322630][ T5169] __local_bh_enable_ip+0x17d/0x1c0 [ 1909.329464][ T5169] sk_stream_wait_memory+0x71f/0xf70 [ 1909.336475][ T5169] tcp_sendmsg_locked+0x1fc2/0x5540 [ 1909.343318][ T5169] tcp_sendmsg+0x2f/0x50 [ 1909.349205][ T5169] __sock_sendmsg+0x19c/0x270 [ 1909.355520][ T5169] __sys_sendto+0x3bd/0x520 [ 1909.361658][ T5169] __x64_sys_sendto+0xde/0x100 [ 1909.368058][ T5169] do_syscall_64+0xfa/0xfa0 [ 1909.374201][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.381731][ T5169] INITIAL USE at: [ 1909.385615][ T5169] lock_acquire+0x120/0x360 [ 1909.391664][ T5169] _raw_write_lock_irq+0xa2/0xf0 [ 1909.398157][ T5169] fasync_remove_entry+0xf1/0x1c0 [ 1909.404732][ T5169] pipe_fasync+0xa9/0x1e0 [ 1909.410606][ T5169] __fput+0x8a2/0xa70 [ 1909.416136][ T5169] task_work_run+0x1d4/0x260 [ 1909.422281][ T5169] exit_to_user_mode_loop+0xe9/0x130 [ 1909.429114][ T5169] do_syscall_64+0x2bd/0xfa0 [ 1909.435258][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.442699][ T5169] INITIAL READ USE at: [ 1909.447016][ T5169] lock_acquire+0x120/0x360 [ 1909.453503][ T5169] _raw_read_lock_irqsave+0xaf/0x100 [ 1909.460773][ T5169] kill_fasync+0x199/0x4d0 [ 1909.467173][ T5169] pipe_release+0x19c/0x330 [ 1909.473659][ T5169] __fput+0x44c/0xa70 [ 1909.479623][ T5169] task_work_run+0x1d4/0x260 [ 1909.486198][ T5169] exit_to_user_mode_loop+0xe9/0x130 [ 1909.493477][ T5169] do_syscall_64+0x2bd/0xfa0 [ 1909.500056][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.507934][ T5169] } [ 1909.510417][ T5169] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1909.519085][ T5169] ... acquired at: [ 1909.522873][ T5169] lock_acquire+0x120/0x360 [ 1909.527531][ T5169] _raw_read_lock_irqsave+0xaf/0x100 [ 1909.532979][ T5169] kill_fasync+0x199/0x4d0 [ 1909.537555][ T5169] __start_tty+0x18c/0x220 [ 1909.542147][ T5169] start_tty+0x2b/0x70 [ 1909.546376][ T5169] n_tty_set_termios+0xa7c/0x1090 [ 1909.551558][ T5169] tty_set_termios+0xda4/0x17e0 [ 1909.556567][ T5169] set_termios+0x516/0x6c0 [ 1909.561143][ T5169] tty_mode_ioctl+0x47e/0x740 [ 1909.565979][ T5169] tty_ioctl+0x9c6/0xde0 [ 1909.570381][ T5169] __se_sys_ioctl+0xfc/0x170 [ 1909.575134][ T5169] do_syscall_64+0xfa/0xfa0 [ 1909.579801][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.585870][ T5169] [ 1909.588181][ T5169] [ 1909.588181][ T5169] stack backtrace: [ 1909.594064][ T5169] CPU: 0 UID: 0 PID: 5169 Comm: syz.2.26936 Not tainted syzkaller #0 PREEMPT(full) [ 1909.594081][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1909.594091][ T5169] Call Trace: [ 1909.594099][ T5169] [ 1909.594107][ T5169] dump_stack_lvl+0x189/0x250 [ 1909.594129][ T5169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1909.594145][ T5169] ? __pfx__printk+0x10/0x10 [ 1909.594162][ T5169] validate_chain+0x1f05/0x2140 [ 1909.594185][ T5169] __lock_acquire+0xab9/0xd20 [ 1909.594200][ T5169] ? kill_fasync+0x199/0x4d0 [ 1909.594214][ T5169] lock_acquire+0x120/0x360 [ 1909.594227][ T5169] ? kill_fasync+0x199/0x4d0 [ 1909.594245][ T5169] _raw_read_lock_irqsave+0xaf/0x100 [ 1909.594263][ T5169] ? kill_fasync+0x199/0x4d0 [ 1909.594277][ T5169] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1909.594296][ T5169] kill_fasync+0x199/0x4d0 [ 1909.594311][ T5169] ? kill_fasync+0x53/0x4d0 [ 1909.594325][ T5169] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1909.594345][ T5169] __start_tty+0x18c/0x220 [ 1909.594362][ T5169] start_tty+0x2b/0x70 [ 1909.594377][ T5169] n_tty_set_termios+0xa7c/0x1090 [ 1909.594393][ T5169] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1909.594407][ T5169] tty_set_termios+0xda4/0x17e0 [ 1909.594424][ T5169] ? __pfx_tty_set_termios+0x10/0x10 [ 1909.594443][ T5169] set_termios+0x516/0x6c0 [ 1909.594460][ T5169] ? __pfx_set_termios+0x10/0x10 [ 1909.594476][ T5169] ? tty_ldisc_ref_wait+0x25/0x70 [ 1909.594492][ T5169] ? get_signal+0x1150/0x1340 [ 1909.594509][ T5169] tty_mode_ioctl+0x47e/0x740 [ 1909.594526][ T5169] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1909.594541][ T5169] ? tty_ldisc_ref_wait+0x25/0x70 [ 1909.594556][ T5169] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1909.594575][ T5169] ? n_tty_ioctl_helper+0x8e/0x340 [ 1909.594591][ T5169] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1909.594604][ T5169] tty_ioctl+0x9c6/0xde0 [ 1909.594621][ T5169] ? __pfx_tty_ioctl+0x10/0x10 [ 1909.594638][ T5169] __se_sys_ioctl+0xfc/0x170 [ 1909.594654][ T5169] do_syscall_64+0xfa/0xfa0 [ 1909.594672][ T5169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.594685][ T5169] ? __switch_to_asm+0x39/0x70 [ 1909.594695][ T5169] ? clear_bhb_loop+0x60/0xb0 [ 1909.594709][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.594723][ T5169] RIP: 0033:0x7f6e4bf8f6c9 [ 1909.594745][ T5169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1909.594758][ T5169] RSP: 002b:00007f6e4a1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.594773][ T5169] RAX: ffffffffffffffda RBX: 00007f6e4c1e6090 RCX: 00007f6e4bf8f6c9 [ 1909.594784][ T5169] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1909.594794][ T5169] RBP: 00007f6e4c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1909.594803][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1909.594811][ T5169] R13: 00007f6e4c1e6128 R14: 00007f6e4c1e6090 R15: 00007f6e4c30fa28 [ 1909.594826][ T5169] [ 1910.176803][T30939] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1910.337767][T30939] usb 4-1: Using ep0 maxpacket: 16 [ 1910.345876][T30939] usb 4-1: config 1 has an invalid interface number: 64 but max is 0 [ 1910.354050][T30939] usb 4-1: config 1 has no interface number 0 [ 1910.360188][T30939] usb 4-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 1910.373408][T30939] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 1910.382604][T30939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.390809][T30939] usb 4-1: Product: syz [ 1910.394994][T30939] usb 4-1: Manufacturer: syz [ 1910.399904][T30939] usb 4-1: SerialNumber: syz [ 1910.614211][T30939] option 4-1:1.64: GSM modem (1-port) converter detected [ 1910.623519][T30939] usb 4-1: USB disconnect, device number 91 [ 1910.630209][T30939] option 4-1:1.64: device disconnected [ 1914.718495][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.724837][ T1302] ieee802154 phy1 wpan1: encryption failed: -22