last executing test programs: 40m8.383487361s ago: executing program 32 (id=23041): syz_usb_connect(0x2, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf0, 0x42, 0xa4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) 39m53.775659634s ago: executing program 33 (id=23674): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) 39m48.53749867s ago: executing program 34 (id=23814): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 39m47.54008877s ago: executing program 35 (id=23850): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141141) 39m47.173142156s ago: executing program 36 (id=23860): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$inet6(r3, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="5f2269782a5f6e1e2ece8440", 0xc}], 0x1, &(0x7f0000000880)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0xb638fcbd7d2b2b19, 0x5, 0x0, [@rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7ff}, @generic={0xd8}]}}}], 0x48}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 39m46.823375012s ago: executing program 37 (id=23866): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) copy_file_range(r2, &(0x7f0000000000)=0x8, r2, 0x0, 0x4, 0x0) 39m46.313194023s ago: executing program 38 (id=23874): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) 39m43.768160888s ago: executing program 39 (id=23959): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 39m43.319338203s ago: executing program 40 (id=23969): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 39m42.810160984s ago: executing program 41 (id=23980): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 39m41.244493961s ago: executing program 42 (id=24019): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 39m39.475250958s ago: executing program 43 (id=24043): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 39m38.745886141s ago: executing program 44 (id=24052): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 39m37.480613198s ago: executing program 45 (id=24107): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 39m37.080341448s ago: executing program 46 (id=24116): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 39m33.026583345s ago: executing program 47 (id=24241): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4042841) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 39m31.797652668s ago: executing program 48 (id=24259): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 39m31.096183218s ago: executing program 49 (id=24268): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 39m29.298003708s ago: executing program 50 (id=24340): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) 33m33.900378249s ago: executing program 51 (id=34416): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) 33m25.864026714s ago: executing program 52 (id=34651): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) 33m21.232706819s ago: executing program 53 (id=34740): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) 33m16.012945022s ago: executing program 54 (id=34945): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 33m13.84086096s ago: executing program 55 (id=34983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0xff, 0x0, 0x5}, 0xc) 33m13.83847571s ago: executing program 6 (id=34986): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 33m13.802808384s ago: executing program 6 (id=34987): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53e", 0x2c}, {0x0}, {&(0x7f0000000700)}, {0x0}], 0x5) 33m13.73717858s ago: executing program 6 (id=34988): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$inet6(r3, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="5f2269782a5f6e1e2ece8440", 0xc}], 0x1, &(0x7f0000000880)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0xb638fcbd7d2b2b19, 0x5, 0x0, [@rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7ff}, @generic={0xd8}]}}}], 0x48}}], 0x1, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 33m13.656773068s ago: executing program 6 (id=34989): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 33m13.611690673s ago: executing program 6 (id=34990): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 33m13.429261811s ago: executing program 6 (id=34991): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 33m13.405367973s ago: executing program 56 (id=34991): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 33m11.54866485s ago: executing program 1 (id=35037): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 33m11.536596941s ago: executing program 1 (id=35039): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 33m11.477055127s ago: executing program 1 (id=35041): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 33m11.466239918s ago: executing program 1 (id=35042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 33m11.44597785s ago: executing program 1 (id=35043): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000200)="c6d9", 0x2}], 0x3) 33m11.328853621s ago: executing program 2 (id=35047): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4042841) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 33m11.325992472s ago: executing program 1 (id=35048): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 33m11.255803949s ago: executing program 57 (id=35048): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 33m11.253027359s ago: executing program 2 (id=35051): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 33m11.148143119s ago: executing program 2 (id=35053): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$inet6(r3, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="5f2269782a5f6e1e2ece8440", 0xc}], 0x1, &(0x7f0000000880)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0xb638fcbd7d2b2b19, 0x5, 0x0, [@rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7ff}, @generic={0xd8}]}}}], 0x48}}], 0x1, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 33m11.049977649s ago: executing program 2 (id=35054): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 33m11.037201121s ago: executing program 2 (id=35055): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 33m10.917199633s ago: executing program 2 (id=35056): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 33m10.914818953s ago: executing program 58 (id=35056): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 33m8.118463363s ago: executing program 5 (id=35152): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 33m7.929183703s ago: executing program 5 (id=35153): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 33m7.192544526s ago: executing program 5 (id=35166): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) 33m6.991454396s ago: executing program 5 (id=35173): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 33m6.96096147s ago: executing program 5 (id=35174): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 33m6.86018871s ago: executing program 5 (id=35177): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 33m6.786178127s ago: executing program 59 (id=35177): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 32m53.173305262s ago: executing program 3 (id=35570): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 32m52.683112571s ago: executing program 3 (id=35578): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 32m52.682671151s ago: executing program 8 (id=35579): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 32m52.617067748s ago: executing program 8 (id=35581): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53e", 0x2c}, {0x0}, {&(0x7f0000000700)}, {0x0}], 0x5) 32m52.600756949s ago: executing program 8 (id=35582): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) 32m52.415099728s ago: executing program 3 (id=35583): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r5, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000200)="c6d9", 0x2}], 0x3) 32m52.366111253s ago: executing program 3 (id=35585): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) 32m52.334913256s ago: executing program 3 (id=35587): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 32m52.213242878s ago: executing program 3 (id=35590): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 32m52.213055108s ago: executing program 60 (id=35590): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 32m51.849106565s ago: executing program 8 (id=35595): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) 32m51.59297916s ago: executing program 8 (id=35599): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 32m51.487199871s ago: executing program 8 (id=35600): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x8, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x247}}], 0x18}}], 0x2, 0x4044800) 32m51.408749489s ago: executing program 61 (id=35600): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x8, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x247}}], 0x18}}], 0x2, 0x4044800) 15.616870527s ago: executing program 9 (id=101751): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010003000000fcdbdf2514004a00ff010200001f29"], 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc6, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c6, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x6aea], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.616653287s ago: executing program 9 (id=101752): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k\r', 0x2}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 15.616330527s ago: executing program 9 (id=101753): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) 15.601393028s ago: executing program 9 (id=101754): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ptrace(0x10, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) 15.571663912s ago: executing program 9 (id=101755): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',']) 15.571127681s ago: executing program 9 (id=101757): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xb7f}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 10.513159218s ago: executing program 4 (id=102098): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 10.499070529s ago: executing program 4 (id=102099): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='k\r', 0x2}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 10.48481221s ago: executing program 4 (id=102100): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) 10.444589475s ago: executing program 4 (id=102103): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00"], 0x28}}, 0x0) 10.406084958s ago: executing program 4 (id=102105): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 10.39377937s ago: executing program 4 (id=102107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 4.173132912s ago: executing program 0 (id=102127): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) 2.964594723s ago: executing program 0 (id=102129): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYBLOB='\b\x00'], 0x58}}, 0x0) 1.654001644s ago: executing program 0 (id=102131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 243.882686ms ago: executing program 7 (id=102132): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4042841) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) 230.126597ms ago: executing program 62 (id=101757): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xb7f}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 222.260747ms ago: executing program 0 (id=102134): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYBLOB='\b'], 0x58}}, 0x0) 194.47073ms ago: executing program 7 (id=102135): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) 118.269908ms ago: executing program 0 (id=102136): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) 101.596889ms ago: executing program 7 (id=102137): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x60000000000, 0x36003) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ptrace(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)) 61.881594ms ago: executing program 0 (id=102138): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000200), 0x1, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) 46.642115ms ago: executing program 7 (id=102139): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 20.151858ms ago: executing program 7 (id=102140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x3818000, &(0x7f00000001c0)=ANY=[]) 0s ago: executing program 7 (id=102141): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) kernel console output (not intermixed with test programs): e [ 3102.349272][ T8573] binder: Unknown parameter 'defcontex' [ 3102.373323][ T8494] veth1_macvtap: entered promiscuous mode [ 3102.513184][ T8598] netlink: 'syz.0.95268': attribute type 4 has an invalid length. [ 3102.530940][ T8598] netlink: 'syz.0.95268': attribute type 5 has an invalid length. [ 3102.657193][ T8621] netlink: 'syz.7.95280': attribute type 4 has an invalid length. [ 3102.665834][ T8621] netlink: 'syz.7.95280': attribute type 5 has an invalid length. [ 3102.783460][ T8643] netlink: 'syz.4.95292': attribute type 4 has an invalid length. [ 3102.798379][ T8643] netlink: 'syz.4.95292': attribute type 5 has an invalid length. [ 3102.890261][ T8657] binder: Unknown parameter '&' [ 3104.675158][ T8838] nla_validate_range_unsigned: 22 callbacks suppressed [ 3104.675180][ T8838] netlink: 'syz.7.95383': attribute type 11 has an invalid length. [ 3104.710290][ T8838] __nla_validate_parse: 29 callbacks suppressed [ 3104.710310][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95383'. [ 3104.766415][ T8840] netlink: 'syz.7.95390': attribute type 11 has an invalid length. [ 3104.775191][T29976] bridge_slave_1: left allmulticast mode [ 3104.788549][T29976] bridge_slave_1: left promiscuous mode [ 3104.801330][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95390'. [ 3104.810558][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3104.831203][T29976] bridge_slave_0: left allmulticast mode [ 3104.836992][T29976] bridge_slave_0: left promiscuous mode [ 3104.848145][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3104.935467][ T8843] netlink: 'syz.0.95391': attribute type 11 has an invalid length. [ 3104.943611][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95391'. [ 3105.003510][T29976] veth1_macvtap: left promiscuous mode [ 3105.020827][T29976] veth0_vlan: left promiscuous mode [ 3105.179720][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 3105.195567][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 3105.210807][ T8841] bridge_slave_0: entered allmulticast mode [ 3105.217182][ T8841] bridge_slave_0: entered promiscuous mode [ 3105.228852][ T8862] netlink: 'syz.0.95400': attribute type 11 has an invalid length. [ 3105.247580][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 3105.254740][ T8862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95400'. [ 3105.270861][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 3105.277955][ T8841] bridge_slave_1: entered allmulticast mode [ 3105.301401][ T8841] bridge_slave_1: entered promiscuous mode [ 3105.451487][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 3105.458582][ T8841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3105.465902][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 3105.472954][ T8841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3105.505894][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3105.513940][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3105.541066][T26016] bridge0: port 1(bridge_slave_0) entered blocking state [ 3105.548123][T26016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3105.562167][ T8884] netlink: 'syz.0.95408': attribute type 11 has an invalid length. [ 3105.570103][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95408'. [ 3105.581081][T26016] bridge0: port 2(bridge_slave_1) entered blocking state [ 3105.588173][T26016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3105.646669][ T8841] veth0_vlan: entered promiscuous mode [ 3105.669228][ T8841] veth1_macvtap: entered promiscuous mode [ 3105.999429][ T8902] netlink: 'syz.7.95415': attribute type 11 has an invalid length. [ 3106.017879][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95415'. [ 3106.101401][ T8906] netlink: 'syz.7.95417': attribute type 11 has an invalid length. [ 3106.127373][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95417'. [ 3106.375751][ T8916] netlink: 'syz.4.95418': attribute type 11 has an invalid length. [ 3106.396382][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95418'. [ 3106.457042][ T8922] netlink: 'syz.4.95427': attribute type 11 has an invalid length. [ 3106.475451][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95427'. [ 3107.354037][ T8940] netlink: 'syz.7.95436': attribute type 11 has an invalid length. [ 3107.370680][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95436'. [ 3108.983554][T29976] bridge_slave_1: left allmulticast mode [ 3108.995870][T29976] bridge_slave_1: left promiscuous mode [ 3109.014687][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3109.033713][T29976] bridge_slave_0: left allmulticast mode [ 3109.046503][T29976] bridge_slave_0: left promiscuous mode [ 3109.052297][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3109.145419][ T9046] validate_nla: 4 callbacks suppressed [ 3109.145438][ T9046] netlink: 'syz.0.95487': attribute type 4 has an invalid length. [ 3109.160631][ T9046] netlink: 'syz.0.95487': attribute type 5 has an invalid length. [ 3109.195235][T29976] veth1_macvtap: left promiscuous mode [ 3109.205419][T29976] veth0_vlan: left promiscuous mode [ 3109.345398][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 3109.352522][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 3109.361928][ T9038] bridge_slave_0: entered allmulticast mode [ 3109.368328][ T9038] bridge_slave_0: entered promiscuous mode [ 3109.375518][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 3109.382790][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 3109.389859][ T9038] bridge_slave_1: entered allmulticast mode [ 3109.397029][ T9038] bridge_slave_1: entered promiscuous mode [ 3109.444536][ T9072] netlink: 'syz.4.95498': attribute type 4 has an invalid length. [ 3109.452925][ T9072] netlink: 'syz.4.95498': attribute type 5 has an invalid length. [ 3109.512903][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 3109.519989][ T9038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3109.527364][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 3109.534435][ T9038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3109.610886][ T9038] veth0_vlan: entered promiscuous mode [ 3109.629924][ T9038] veth1_macvtap: entered promiscuous mode [ 3109.926467][T29976] bridge_slave_1: left allmulticast mode [ 3109.932214][T29976] bridge_slave_1: left promiscuous mode [ 3109.937880][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3109.960783][T29976] bridge_slave_0: left allmulticast mode [ 3109.965227][ T9117] nla_validate_range_unsigned: 12 callbacks suppressed [ 3109.965245][ T9117] netlink: 'syz.7.95517': attribute type 11 has an invalid length. [ 3109.970048][T29976] bridge_slave_0: left promiscuous mode [ 3109.973360][ T9117] __nla_validate_parse: 14 callbacks suppressed [ 3109.973373][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95517'. [ 3110.000588][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3110.044399][ T9119] FAULT_INJECTION: forcing a failure. [ 3110.044399][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.057186][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.9.95518 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3110.057220][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3110.057232][ T9119] Call Trace: [ 3110.057239][ T9119] [ 3110.057247][ T9119] __dump_stack+0x21/0x30 [ 3110.057276][ T9119] dump_stack_lvl+0x10c/0x190 [ 3110.057300][ T9119] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3110.057323][ T9119] ? __kasan_check_write+0x18/0x20 [ 3110.057349][ T9119] ? proc_fail_nth_write+0x17e/0x210 [ 3110.057372][ T9119] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3110.057396][ T9119] dump_stack+0x19/0x20 [ 3110.057418][ T9119] should_fail_ex+0x3d9/0x530 [ 3110.057438][ T9119] should_failslab+0xac/0x100 [ 3110.057458][ T9119] kmem_cache_alloc_noprof+0x42/0x430 [ 3110.057477][ T9119] ? getname_flags+0xc6/0x710 [ 3110.057496][ T9119] getname_flags+0xc6/0x710 [ 3110.057522][ T9119] ? build_open_flags+0x487/0x600 [ 3110.057545][ T9119] getname+0x1b/0x30 [ 3110.057562][ T9119] do_sys_openat2+0xcb/0x1c0 [ 3110.057585][ T9119] ? fput+0x1a5/0x240 [ 3110.057606][ T9119] ? do_sys_open+0x100/0x100 [ 3110.057627][ T9119] ? ksys_write+0x1ef/0x250 [ 3110.057645][ T9119] ? __cfi_ksys_write+0x10/0x10 [ 3110.057663][ T9119] __x64_sys_openat+0x13a/0x170 [ 3110.057687][ T9119] x64_sys_call+0xe69/0x2ee0 [ 3110.057712][ T9119] do_syscall_64+0x58/0xf0 [ 3110.057735][ T9119] ? clear_bhb_loop+0x50/0xa0 [ 3110.057755][ T9119] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3110.057775][ T9119] RIP: 0033:0x7f70a6d8df10 [ 3110.057793][ T9119] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 3110.057810][ T9119] RSP: 002b:00007f70a7bd8f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3110.057831][ T9119] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f70a6d8df10 [ 3110.057846][ T9119] RDX: 0000000000000002 RSI: 00007f70a7bd8fa0 RDI: 00000000ffffff9c [ 3110.057859][ T9119] RBP: 00007f70a7bd8fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.057871][ T9119] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3110.057883][ T9119] R13: 00007f70a6fe6038 R14: 00007f70a6fe5fa0 R15: 00007ffc6759c758 [ 3110.057900][ T9119] [ 3110.334206][ T9124] FAULT_INJECTION: forcing a failure. [ 3110.334206][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3110.347317][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.7.95521 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3110.347349][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3110.347362][ T9124] Call Trace: [ 3110.347369][ T9124] [ 3110.347377][ T9124] __dump_stack+0x21/0x30 [ 3110.347407][ T9124] dump_stack_lvl+0x10c/0x190 [ 3110.347431][ T9124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3110.347465][ T9124] ? check_stack_object+0x12c/0x140 [ 3110.347485][ T9124] dump_stack+0x19/0x20 [ 3110.347506][ T9124] should_fail_ex+0x3d9/0x530 [ 3110.347526][ T9124] should_fail+0xf/0x20 [ 3110.347550][ T9124] should_fail_usercopy+0x1e/0x30 [ 3110.347569][ T9124] _copy_to_user+0x24/0xa0 [ 3110.347592][ T9124] simple_read_from_buffer+0xed/0x160 [ 3110.347616][ T9124] proc_fail_nth_read+0x19e/0x210 [ 3110.347640][ T9124] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3110.347664][ T9124] ? bpf_lsm_file_permission+0xd/0x20 [ 3110.347688][ T9124] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3110.347711][ T9124] vfs_read+0x27d/0xc70 [ 3110.347727][ T9124] ? __x64_sys_newfstat+0x80/0x80 [ 3110.347750][ T9124] ? __cfi_vfs_read+0x10/0x10 [ 3110.347767][ T9124] ? __kasan_check_write+0x18/0x20 [ 3110.347793][ T9124] ? mutex_lock+0x92/0x1c0 [ 3110.347812][ T9124] ? __cfi_mutex_lock+0x10/0x10 [ 3110.347829][ T9124] ? __fget_files+0x2c5/0x340 [ 3110.347851][ T9124] ksys_read+0x141/0x250 [ 3110.347868][ T9124] ? __cfi_ksys_read+0x10/0x10 [ 3110.347885][ T9124] ? __kasan_check_read+0x15/0x20 [ 3110.347911][ T9124] __x64_sys_read+0x7f/0x90 [ 3110.347936][ T9124] x64_sys_call+0x2638/0x2ee0 [ 3110.347962][ T9124] do_syscall_64+0x58/0xf0 [ 3110.347986][ T9124] ? clear_bhb_loop+0x50/0xa0 [ 3110.348006][ T9124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3110.348026][ T9124] RIP: 0033:0x7f3ba9d8e0dc [ 3110.348044][ T9124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3110.348062][ T9124] RSP: 002b:00007f3baab51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3110.348082][ T9124] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8e0dc [ 3110.348097][ T9124] RDX: 000000000000000f RSI: 00007f3baab510a0 RDI: 0000000000000007 [ 3110.348110][ T9124] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3110.348123][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3110.348135][ T9124] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3110.348152][ T9124] [ 3110.636210][ T9134] netlink: 'syz.9.95524': attribute type 11 has an invalid length. [ 3110.644271][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.9.95524'. [ 3110.658303][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 3110.665414][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 3110.672747][ T9111] bridge_slave_0: entered allmulticast mode [ 3110.679094][ T9111] bridge_slave_0: entered promiscuous mode [ 3110.686168][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 3110.693262][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3110.700333][ T9111] bridge_slave_1: entered allmulticast mode [ 3110.706820][ T9111] bridge_slave_1: entered promiscuous mode [ 3110.730134][T29976] veth1_macvtap: left promiscuous mode [ 3110.744480][T29976] veth0_vlan: left promiscuous mode [ 3110.752231][ T9138] netlink: 'syz.7.95525': attribute type 11 has an invalid length. [ 3110.763880][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95525'. [ 3110.922593][ T9157] netlink: 'syz.7.95534': attribute type 11 has an invalid length. [ 3110.932945][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 3110.940004][ T9111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3110.947337][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 3110.954399][ T9111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3110.964805][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95534'. [ 3111.014888][T26016] bridge0: port 1(bridge_slave_0) entered disabled state [ 3111.024004][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3111.034679][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3111.041761][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3111.051641][T26016] bridge0: port 2(bridge_slave_1) entered blocking state [ 3111.058682][T26016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3111.111576][ T9111] veth0_vlan: entered promiscuous mode [ 3111.137737][ T9111] veth1_macvtap: entered promiscuous mode [ 3111.187175][ T9176] netlink: 'syz.4.95512': attribute type 11 has an invalid length. [ 3111.195635][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95512'. [ 3111.206303][ T9181] netlink: 'syz.0.95543': attribute type 11 has an invalid length. [ 3111.226127][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95543'. [ 3111.242938][ T9187] netlink: 'syz.4.95547': attribute type 11 has an invalid length. [ 3111.251198][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95547'. [ 3111.351841][ T9198] FAULT_INJECTION: forcing a failure. [ 3111.351841][ T9198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3111.390433][ T9198] CPU: 0 UID: 0 PID: 9198 Comm: syz.0.95552 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3111.390466][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3111.390478][ T9198] Call Trace: [ 3111.390484][ T9198] [ 3111.390492][ T9198] __dump_stack+0x21/0x30 [ 3111.390522][ T9198] dump_stack_lvl+0x10c/0x190 [ 3111.390545][ T9198] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3111.390570][ T9198] ? selinux_inode_getattr+0x2b1/0x3c0 [ 3111.390591][ T9198] dump_stack+0x19/0x20 [ 3111.390613][ T9198] should_fail_ex+0x3d9/0x530 [ 3111.390633][ T9198] should_fail+0xf/0x20 [ 3111.390650][ T9198] should_fail_usercopy+0x1e/0x30 [ 3111.390670][ T9198] _copy_to_user+0x24/0xa0 [ 3111.390693][ T9198] __se_sys_newfstat+0x352/0x3e0 [ 3111.390715][ T9198] ? __x64_sys_newfstat+0x80/0x80 [ 3111.390737][ T9198] ? mutex_unlock+0x8b/0x240 [ 3111.390755][ T9198] ? __cfi_mutex_unlock+0x10/0x10 [ 3111.390771][ T9198] ? __fget_files+0x2c5/0x340 [ 3111.390793][ T9198] ? __cfi_ksys_write+0x10/0x10 [ 3111.390811][ T9198] ? __kasan_check_read+0x15/0x20 [ 3111.390838][ T9198] __x64_sys_newfstat+0x5f/0x80 [ 3111.390858][ T9198] x64_sys_call+0x25c0/0x2ee0 [ 3111.390883][ T9198] do_syscall_64+0x58/0xf0 [ 3111.390906][ T9198] ? clear_bhb_loop+0x50/0xa0 [ 3111.390926][ T9198] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3111.390946][ T9198] RIP: 0033:0x7f7588b8f6c9 [ 3111.390963][ T9198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3111.390980][ T9198] RSP: 002b:00007f75899e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 3111.391002][ T9198] RAX: ffffffffffffffda RBX: 00007f7588de5fa0 RCX: 00007f7588b8f6c9 [ 3111.391017][ T9198] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000008 [ 3111.391030][ T9198] RBP: 00007f75899e1090 R08: 0000000000000000 R09: 0000000000000000 [ 3111.391043][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3111.391055][ T9198] R13: 00007f7588de6038 R14: 00007f7588de5fa0 R15: 00007fffbfdbc698 [ 3111.391072][ T9198] [ 3111.623184][ T9203] netlink: 'syz.0.95554': attribute type 11 has an invalid length. [ 3111.643644][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95554'. [ 3111.703468][ T9209] netlink: 'syz.4.95558': attribute type 11 has an invalid length. [ 3111.730865][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95558'. [ 3111.872314][ T9223] netlink: 'syz.7.95557': attribute type 11 has an invalid length. [ 3111.880257][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95557'. [ 3112.819826][ T9253] FAULT_INJECTION: forcing a failure. [ 3112.819826][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 3112.851491][ T9253] CPU: 1 UID: 0 PID: 9253 Comm: syz.7.95579 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3112.851526][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3112.851538][ T9253] Call Trace: [ 3112.851545][ T9253] [ 3112.851553][ T9253] __dump_stack+0x21/0x30 [ 3112.851581][ T9253] dump_stack_lvl+0x10c/0x190 [ 3112.851605][ T9253] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3112.851628][ T9253] ? vfs_write+0x93e/0xf30 [ 3112.851647][ T9253] dump_stack+0x19/0x20 [ 3112.851669][ T9253] should_fail_ex+0x3d9/0x530 [ 3112.851688][ T9253] should_failslab+0xac/0x100 [ 3112.851710][ T9253] kmem_cache_alloc_noprof+0x42/0x430 [ 3112.851727][ T9253] ? prepare_creds+0x48/0x6b0 [ 3112.851752][ T9253] ? __cfi_make_kuid+0x10/0x10 [ 3112.851777][ T9253] ? fput+0x1a5/0x240 [ 3112.851798][ T9253] prepare_creds+0x48/0x6b0 [ 3112.851817][ T9253] __sys_setreuid+0x106/0xb00 [ 3112.851840][ T9253] ? __kasan_check_read+0x15/0x20 [ 3112.851866][ T9253] __x64_sys_setreuid+0x5e/0x70 [ 3112.851887][ T9253] x64_sys_call+0x1132/0x2ee0 [ 3112.851912][ T9253] do_syscall_64+0x58/0xf0 [ 3112.851935][ T9253] ? clear_bhb_loop+0x50/0xa0 [ 3112.851955][ T9253] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3112.851975][ T9253] RIP: 0033:0x7f3ba9d8f6c9 [ 3112.851992][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3112.852009][ T9253] RSP: 002b:00007f3baab51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 3112.852032][ T9253] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8f6c9 [ 3112.852048][ T9253] RDX: 0000000000000000 RSI: 000000000000c1ff RDI: 0000000000000000 [ 3112.852061][ T9253] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3112.852075][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3112.852087][ T9253] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3112.852104][ T9253] [ 3113.740882][ T9319] netlink: 'syz.0.95612': attribute type 4 has an invalid length. [ 3113.748829][ T9319] netlink: 'syz.0.95612': attribute type 5 has an invalid length. [ 3113.959534][ T9346] FAULT_INJECTION: forcing a failure. [ 3113.959534][ T9346] name failslab, interval 1, probability 0, space 0, times 0 [ 3113.976877][ T9346] CPU: 0 UID: 0 PID: 9346 Comm: syz.7.95624 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3113.976912][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3113.976925][ T9346] Call Trace: [ 3113.976931][ T9346] [ 3113.976939][ T9346] __dump_stack+0x21/0x30 [ 3113.976969][ T9346] dump_stack_lvl+0x10c/0x190 [ 3113.976993][ T9346] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3113.977016][ T9346] ? vfs_write+0x93e/0xf30 [ 3113.977042][ T9346] dump_stack+0x19/0x20 [ 3113.977065][ T9346] should_fail_ex+0x3d9/0x530 [ 3113.977085][ T9346] should_failslab+0xac/0x100 [ 3113.977106][ T9346] kmem_cache_alloc_noprof+0x42/0x430 [ 3113.977124][ T9346] ? prepare_creds+0x48/0x6b0 [ 3113.977143][ T9346] ? __cfi_make_kuid+0x10/0x10 [ 3113.977167][ T9346] ? fput+0x1a5/0x240 [ 3113.977188][ T9346] prepare_creds+0x48/0x6b0 [ 3113.977211][ T9346] __sys_setreuid+0x106/0xb00 [ 3113.977232][ T9346] ? __kasan_check_read+0x15/0x20 [ 3113.977258][ T9346] __x64_sys_setreuid+0x5e/0x70 [ 3113.977278][ T9346] x64_sys_call+0x1132/0x2ee0 [ 3113.977303][ T9346] do_syscall_64+0x58/0xf0 [ 3113.977326][ T9346] ? clear_bhb_loop+0x50/0xa0 [ 3113.977345][ T9346] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3113.977365][ T9346] RIP: 0033:0x7f3ba9d8f6c9 [ 3113.977382][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3113.977398][ T9346] RSP: 002b:00007f3baab51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 3113.977419][ T9346] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8f6c9 [ 3113.977434][ T9346] RDX: 0000000000000000 RSI: 000000000000c1ff RDI: 0000000000000000 [ 3113.977447][ T9346] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3113.977459][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3113.977472][ T9346] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3113.977489][ T9346] [ 3114.789906][ T9418] netlink: 'syz.9.95660': attribute type 4 has an invalid length. [ 3114.808200][ T9418] netlink: 'syz.9.95660': attribute type 5 has an invalid length. [ 3115.007225][ T9430] nla_validate_range_unsigned: 22 callbacks suppressed [ 3115.007249][ T9430] netlink: 'syz.4.95666': attribute type 11 has an invalid length. [ 3115.040741][ T9430] __nla_validate_parse: 24 callbacks suppressed [ 3115.040761][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95666'. [ 3115.111508][ T9434] netlink: 'syz.4.95668': attribute type 11 has an invalid length. [ 3115.129739][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95668'. [ 3115.190684][ T9436] netlink: 'syz.4.95669': attribute type 11 has an invalid length. [ 3115.209953][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95669'. [ 3115.315779][ T9442] netlink: 'syz.4.95673': attribute type 11 has an invalid length. [ 3115.332917][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95673'. [ 3115.356918][ T9444] netlink: 'syz.4.95675': attribute type 11 has an invalid length. [ 3115.365035][ T9444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95675'. [ 3115.403108][ T9448] netlink: 'syz.4.95677': attribute type 11 has an invalid length. [ 3115.411155][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95677'. [ 3115.691279][ T9464] netlink: 'syz.7.95684': attribute type 11 has an invalid length. [ 3115.720353][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95684'. [ 3115.780890][ T9470] netlink: 'syz.7.95687': attribute type 11 has an invalid length. [ 3115.815082][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95687'. [ 3115.838243][ T9474] netlink: 'syz.9.95683': attribute type 11 has an invalid length. [ 3115.850169][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.9.95683'. [ 3115.900666][ T9478] netlink: 'syz.9.95690': attribute type 4 has an invalid length. [ 3115.909311][ T9478] netlink: 'syz.9.95690': attribute type 5 has an invalid length. [ 3115.911287][ T9481] netlink: 'syz.7.95691': attribute type 11 has an invalid length. [ 3115.924168][ T9478] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.95690'. [ 3116.388890][ T9526] netlink: 'syz.4.95714': attribute type 4 has an invalid length. [ 3116.412606][ T9526] netlink: 'syz.4.95714': attribute type 5 has an invalid length. [ 3116.750825][ T9554] FAULT_INJECTION: forcing a failure. [ 3116.750825][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.780420][ T9554] CPU: 1 UID: 0 PID: 9554 Comm: syz.9.95723 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3116.780452][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3116.780465][ T9554] Call Trace: [ 3116.780471][ T9554] [ 3116.780479][ T9554] __dump_stack+0x21/0x30 [ 3116.780508][ T9554] dump_stack_lvl+0x10c/0x190 [ 3116.780531][ T9554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3116.780554][ T9554] ? vfs_write+0x93e/0xf30 [ 3116.780573][ T9554] dump_stack+0x19/0x20 [ 3116.780594][ T9554] should_fail_ex+0x3d9/0x530 [ 3116.780613][ T9554] should_failslab+0xac/0x100 [ 3116.780632][ T9554] kmem_cache_alloc_noprof+0x42/0x430 [ 3116.780649][ T9554] ? prepare_creds+0x48/0x6b0 [ 3116.780667][ T9554] ? __cfi_make_kuid+0x10/0x10 [ 3116.780699][ T9554] ? fput+0x1a5/0x240 [ 3116.780718][ T9554] prepare_creds+0x48/0x6b0 [ 3116.780735][ T9554] __sys_setreuid+0x106/0xb00 [ 3116.780753][ T9554] ? __kasan_check_read+0x15/0x20 [ 3116.780773][ T9554] __x64_sys_setreuid+0x5e/0x70 [ 3116.780790][ T9554] x64_sys_call+0x1132/0x2ee0 [ 3116.780814][ T9554] do_syscall_64+0x58/0xf0 [ 3116.780835][ T9554] ? clear_bhb_loop+0x50/0xa0 [ 3116.780854][ T9554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3116.780873][ T9554] RIP: 0033:0x7f70a6d8f6c9 [ 3116.780890][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3116.780906][ T9554] RSP: 002b:00007f70a7bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 3116.780927][ T9554] RAX: ffffffffffffffda RBX: 00007f70a6fe5fa0 RCX: 00007f70a6d8f6c9 [ 3116.780942][ T9554] RDX: 0000000000000000 RSI: 000000000000c1ff RDI: 0000000000000000 [ 3116.780955][ T9554] RBP: 00007f70a7bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3116.780967][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3116.780978][ T9554] R13: 00007f70a6fe6038 R14: 00007f70a6fe5fa0 R15: 00007ffc6759c758 [ 3116.780991][ T9554] [ 3118.880929][ T9647] FAULT_INJECTION: forcing a failure. [ 3118.880929][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3118.920031][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.9.95775 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3118.920068][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3118.920080][ T9647] Call Trace: [ 3118.920086][ T9647] [ 3118.920094][ T9647] __dump_stack+0x21/0x30 [ 3118.920124][ T9647] dump_stack_lvl+0x10c/0x190 [ 3118.920148][ T9647] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3118.920172][ T9647] ? kstrtoull+0x13b/0x1e0 [ 3118.920197][ T9647] dump_stack+0x19/0x20 [ 3118.920219][ T9647] should_fail_ex+0x3d9/0x530 [ 3118.920238][ T9647] should_fail+0xf/0x20 [ 3118.920255][ T9647] should_fail_usercopy+0x1e/0x30 [ 3118.920275][ T9647] _copy_from_user+0x22/0xb0 [ 3118.920297][ T9647] ___sys_sendmsg+0x159/0x2a0 [ 3118.920324][ T9647] ? __sys_sendmsg+0x280/0x280 [ 3118.920349][ T9647] ? proc_fail_nth_write+0x17e/0x210 [ 3118.920373][ T9647] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3118.920403][ T9647] __x64_sys_sendmsg+0x1eb/0x2c0 [ 3118.920427][ T9647] ? fput+0x1a5/0x240 [ 3118.920448][ T9647] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 3118.920473][ T9647] ? ksys_write+0x1ef/0x250 [ 3118.920491][ T9647] ? __kasan_check_read+0x15/0x20 [ 3118.920518][ T9647] x64_sys_call+0x2a4c/0x2ee0 [ 3118.920543][ T9647] do_syscall_64+0x58/0xf0 [ 3118.920566][ T9647] ? clear_bhb_loop+0x50/0xa0 [ 3118.920587][ T9647] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3118.920606][ T9647] RIP: 0033:0x7f70a6d8f6c9 [ 3118.920624][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3118.920640][ T9647] RSP: 002b:00007f70a7bd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3118.920661][ T9647] RAX: ffffffffffffffda RBX: 00007f70a6fe5fa0 RCX: 00007f70a6d8f6c9 [ 3118.920676][ T9647] RDX: 0000000004000894 RSI: 0000200000000300 RDI: 0000000000000009 [ 3118.920690][ T9647] RBP: 00007f70a7bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3118.920703][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3118.920716][ T9647] R13: 00007f70a6fe6038 R14: 00007f70a6fe5fa0 R15: 00007ffc6759c758 [ 3118.920732][ T9647] [ 3119.190535][ T9657] netlink: 'syz.4.95781': attribute type 4 has an invalid length. [ 3119.209588][ T9657] netlink: 'syz.4.95781': attribute type 4 has an invalid length. [ 3119.419839][ T9677] binder: Unknown parameter 'fsmagic' [ 3120.045187][ T9758] nla_validate_range_unsigned: 34 callbacks suppressed [ 3120.045210][ T9758] netlink: 'syz.9.95830': attribute type 11 has an invalid length. [ 3120.072986][ T9761] netlink: 'syz.7.95831': attribute type 4 has an invalid length. [ 3120.079957][ T9758] __nla_validate_parse: 36 callbacks suppressed [ 3120.079976][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.9.95830'. [ 3120.090000][ T9761] netlink: 'syz.7.95831': attribute type 5 has an invalid length. [ 3120.114131][ T9761] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.95831'. [ 3120.338755][ T9777] netlink: 'syz.9.95840': attribute type 11 has an invalid length. [ 3120.360666][ T9781] netlink: 'syz.4.95835': attribute type 11 has an invalid length. [ 3120.361868][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.9.95840'. [ 3120.368756][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95835'. [ 3120.620247][ T9801] netlink: 'syz.7.95852': attribute type 11 has an invalid length. [ 3120.622018][ T9803] netlink: 'syz.4.95853': attribute type 11 has an invalid length. [ 3120.640532][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.7.95852'. [ 3120.656359][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95853'. [ 3121.020461][ T9839] netlink: 'syz.7.95871': attribute type 4 has an invalid length. [ 3121.038607][ T9839] netlink: 'syz.7.95871': attribute type 5 has an invalid length. [ 3121.056789][ T9839] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.95871'. [ 3121.200235][ T9853] netlink: 'syz.9.95877': attribute type 11 has an invalid length. [ 3121.218565][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.9.95877'. [ 3121.461064][ T9867] netlink: 'syz.9.95885': attribute type 11 has an invalid length. [ 3121.479212][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.9.95885'. [ 3121.617515][ T9877] netlink: 'syz.4.95889': attribute type 11 has an invalid length. [ 3121.629917][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95889'. [ 3121.649899][ T9875] netlink: 'syz.9.95888': attribute type 11 has an invalid length. [ 3121.801491][ T9885] netlink: 'syz.9.95894': attribute type 11 has an invalid length. [ 3121.865533][ T9893] netlink: 'syz.9.95897': attribute type 4 has an invalid length. [ 3121.874959][ T9893] netlink: 'syz.9.95897': attribute type 5 has an invalid length. [ 3122.199898][ T9941] netlink: 'syz.7.95921': attribute type 4 has an invalid length. [ 3122.310393][ T9947] netlink: 'syz.7.95923': attribute type 4 has an invalid length. [ 3122.329883][ T9947] netlink: 'syz.7.95923': attribute type 5 has an invalid length. [ 3123.114427][T10021] netlink: 'syz.0.95961': attribute type 4 has an invalid length. [ 3125.083532][T10101] nla_validate_range_unsigned: 13 callbacks suppressed [ 3125.083565][T10101] netlink: 'syz.9.96002': attribute type 11 has an invalid length. [ 3125.129656][T10101] __nla_validate_parse: 20 callbacks suppressed [ 3125.129678][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.9.96002'. [ 3125.176846][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.96000'. [ 3125.287893][T10125] netlink: 'syz.4.96014': attribute type 11 has an invalid length. [ 3125.301018][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96014'. [ 3125.349702][T10129] netlink: 60 bytes leftover after parsing attributes in process `syz.0.96016'. [ 3125.432037][T10143] netlink: 'syz.4.96022': attribute type 11 has an invalid length. [ 3125.440048][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96022'. [ 3125.464131][T10145] netlink: 'syz.4.96023': attribute type 11 has an invalid length. [ 3125.472153][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96023'. [ 3125.510228][T10155] netlink: 'syz.9.96028': attribute type 11 has an invalid length. [ 3125.518165][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.9.96028'. [ 3125.553341][T10161] netlink: 'syz.7.96031': attribute type 11 has an invalid length. [ 3125.561671][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.96031'. [ 3125.597021][T10170] netlink: 'syz.0.96035': attribute type 11 has an invalid length. [ 3125.610247][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96035'. [ 3125.617240][T10173] netlink: 'syz.7.96037': attribute type 11 has an invalid length. [ 3125.639639][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz.7.96037'. [ 3125.654960][T10181] netlink: 'syz.0.96039': attribute type 11 has an invalid length. [ 3125.669769][T10178] netlink: 'syz.9.96041': attribute type 11 has an invalid length. [ 3127.860678][T10387] netlink: 'syz.4.96146': attribute type 4 has an invalid length. [ 3130.145705][T10547] nla_validate_range_unsigned: 39 callbacks suppressed [ 3130.145729][T10547] netlink: 'syz.0.96224': attribute type 11 has an invalid length. [ 3130.179397][T10547] __nla_validate_parse: 55 callbacks suppressed [ 3130.179418][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96224'. [ 3130.502135][T10557] netlink: 'syz.7.96229': attribute type 11 has an invalid length. [ 3130.539391][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.96229'. [ 3130.816153][T10569] netlink: 'syz.7.96236': attribute type 11 has an invalid length. [ 3130.839464][T10569] netlink: 32 bytes leftover after parsing attributes in process `syz.7.96236'. [ 3130.941685][T10577] netlink: 'syz.4.96239': attribute type 11 has an invalid length. [ 3130.989329][T10577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96239'. [ 3132.114926][T10609] netlink: 'syz.4.96255': attribute type 4 has an invalid length. [ 3132.187026][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.96257'. [ 3132.667892][T10629] netlink: 'syz.7.96266': attribute type 11 has an invalid length. [ 3132.696193][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.96266'. [ 3132.708873][T10631] netlink: 'syz.9.96265': attribute type 11 has an invalid length. [ 3132.717207][T10631] netlink: 20 bytes leftover after parsing attributes in process `syz.9.96265'. [ 3133.144373][T10657] netlink: 'syz.0.96276': attribute type 11 has an invalid length. [ 3133.162578][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96276'. [ 3133.277923][T10667] netlink: 'syz.4.96284': attribute type 11 has an invalid length. [ 3133.285992][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96284'. [ 3133.718527][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.9.96289'. [ 3133.796849][T10691] netlink: 'syz.9.96297': attribute type 11 has an invalid length. [ 3134.325589][T10749] netlink: 'syz.0.96325': attribute type 11 has an invalid length. [ 3135.194805][T10860] __nla_validate_parse: 22 callbacks suppressed [ 3135.194826][T10860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.96381'. [ 3135.235874][T10863] nla_validate_range_unsigned: 7 callbacks suppressed [ 3135.235895][T10863] netlink: 'syz.7.96382': attribute type 11 has an invalid length. [ 3135.257775][T10863] netlink: 20 bytes leftover after parsing attributes in process `syz.7.96382'. [ 3135.277657][T10867] netlink: 'syz.9.96384': attribute type 11 has an invalid length. [ 3135.285821][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.9.96384'. [ 3135.350694][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.7.96390'. [ 3135.393057][T10887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.96394'. [ 3135.421509][T10889] netlink: 'syz.7.96396': attribute type 11 has an invalid length. [ 3135.445498][T10889] netlink: 32 bytes leftover after parsing attributes in process `syz.7.96396'. [ 3135.458185][T10895] netlink: 'syz.0.96399': attribute type 11 has an invalid length. [ 3135.471067][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96399'. [ 3135.632773][T10919] netlink: 'syz.9.96410': attribute type 11 has an invalid length. [ 3135.647272][T10919] netlink: 32 bytes leftover after parsing attributes in process `syz.9.96410'. [ 3136.071074][T10949] netlink: 'syz.9.96425': attribute type 11 has an invalid length. [ 3136.089076][T10949] netlink: 32 bytes leftover after parsing attributes in process `syz.9.96425'. [ 3136.694887][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.96438'. [ 3136.729047][T10980] netlink: 'syz.4.96441': attribute type 11 has an invalid length. [ 3136.873924][T11010] netlink: 'syz.7.96455': attribute type 11 has an invalid length. [ 3137.015980][T11039] netlink: 'syz.0.96470': attribute type 11 has an invalid length. [ 3137.140948][T11059] netlink: 'syz.4.96480': attribute type 11 has an invalid length. [ 3139.618930][T11359] netlink: 'syz.7.96630': attribute type 4 has an invalid length. [ 3139.897054][T11389] netlink: 'syz.9.96645': attribute type 4 has an invalid length. [ 3140.213015][T11417] __nla_validate_parse: 29 callbacks suppressed [ 3140.213045][T11417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96660'. [ 3140.393714][T11437] netlink: 60 bytes leftover after parsing attributes in process `syz.7.96669'. [ 3140.418744][T11439] netlink: 'syz.7.96670': attribute type 4 has an invalid length. [ 3140.455322][T11441] netlink: 'syz.4.96671': attribute type 4 has an invalid length. [ 3140.565706][T11456] nla_validate_range_unsigned: 2 callbacks suppressed [ 3140.565728][T11456] netlink: 'syz.7.96678': attribute type 11 has an invalid length. [ 3140.588809][T11456] netlink: 32 bytes leftover after parsing attributes in process `syz.7.96678'. [ 3140.791157][T11481] netlink: 'syz.9.96691': attribute type 11 has an invalid length. [ 3140.801678][T11481] netlink: 32 bytes leftover after parsing attributes in process `syz.9.96691'. [ 3140.824905][T11483] netlink: 60 bytes leftover after parsing attributes in process `syz.7.96693'. [ 3140.968940][T11503] netlink: 'syz.4.96702': attribute type 11 has an invalid length. [ 3140.978761][T11503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.96702'. [ 3141.288774][T11527] netlink: 'syz.7.96714': attribute type 11 has an invalid length. [ 3141.308765][T11527] netlink: 32 bytes leftover after parsing attributes in process `syz.7.96714'. [ 3141.386045][T11531] netlink: 60 bytes leftover after parsing attributes in process `syz.7.96716'. [ 3141.651145][T11545] netlink: 60 bytes leftover after parsing attributes in process `syz.7.96725'. [ 3141.658331][T11549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.96726'. [ 3141.800913][T11569] netlink: 'syz.9.96735': attribute type 4 has an invalid length. [ 3141.956822][T11585] netlink: 'syz.9.96742': attribute type 11 has an invalid length. [ 3142.368620][T11606] netlink: 'syz.4.96754': attribute type 11 has an invalid length. [ 3142.494526][T11621] netlink: 'syz.7.96752': attribute type 11 has an invalid length. [ 3142.540682][T11626] netlink: 'syz.7.96764': attribute type 11 has an invalid length. [ 3142.650790][T11639] netlink: 'syz.7.96770': attribute type 11 has an invalid length. [ 3142.875652][T11659] netlink: 'syz.7.96780': attribute type 11 has an invalid length. [ 3144.059936][T11757] netlink: 'syz.9.96829': attribute type 4 has an invalid length. [ 3145.091827][T11844] netlink: 'syz.4.96873': attribute type 4 has an invalid length. [ 3145.191883][T11867] netlink: 'syz.9.96884': attribute type 4 has an invalid length. [ 3145.267917][T11884] __nla_validate_parse: 34 callbacks suppressed [ 3145.267939][T11884] netlink: 68 bytes leftover after parsing attributes in process `syz.0.96892'. [ 3145.288328][T11887] netlink: 68 bytes leftover after parsing attributes in process `syz.9.96894'. [ 3145.379209][T11905] netlink: 68 bytes leftover after parsing attributes in process `syz.4.96903'. [ 3145.386656][T11907] netlink: 68 bytes leftover after parsing attributes in process `syz.0.96904'. [ 3145.411486][T11910] netlink: 68 bytes leftover after parsing attributes in process `syz.7.96905'. [ 3145.456316][T11918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.96910'. [ 3145.501476][T11927] netlink: 68 bytes leftover after parsing attributes in process `syz.0.96914'. [ 3145.540791][T11931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96916'. [ 3145.602646][T11937] netlink: 68 bytes leftover after parsing attributes in process `syz.0.96919'. [ 3145.636744][T11941] netlink: 68 bytes leftover after parsing attributes in process `syz.7.96921'. [ 3146.560561][T12007] nla_validate_range_unsigned: 4 callbacks suppressed [ 3146.560582][T12007] netlink: 'syz.9.96954': attribute type 11 has an invalid length. [ 3146.865078][T12035] netlink: 'syz.9.96969': attribute type 11 has an invalid length. [ 3148.317646][T12121] netlink: 'syz.0.97011': attribute type 4 has an invalid length. [ 3149.905087][T12191] FAULT_INJECTION: forcing a failure. [ 3149.905087][T12191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3149.938299][T12191] CPU: 0 UID: 0 PID: 12191 Comm: syz.9.97047 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3149.938333][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3149.938345][T12191] Call Trace: [ 3149.938352][T12191] [ 3149.938360][T12191] __dump_stack+0x21/0x30 [ 3149.938393][T12191] dump_stack_lvl+0x10c/0x190 [ 3149.938417][T12191] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3149.938441][T12191] ? check_stack_object+0x12c/0x140 [ 3149.938460][T12191] dump_stack+0x19/0x20 [ 3149.938482][T12191] should_fail_ex+0x3d9/0x530 [ 3149.938501][T12191] should_fail+0xf/0x20 [ 3149.938518][T12191] should_fail_usercopy+0x1e/0x30 [ 3149.938537][T12191] _copy_to_user+0x24/0xa0 [ 3149.938568][T12191] simple_read_from_buffer+0xed/0x160 [ 3149.938592][T12191] proc_fail_nth_read+0x19e/0x210 [ 3149.938615][T12191] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3149.938639][T12191] ? bpf_lsm_file_permission+0xd/0x20 [ 3149.938663][T12191] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3149.938686][T12191] vfs_read+0x27d/0xc70 [ 3149.938704][T12191] ? __cfi_vfs_read+0x10/0x10 [ 3149.938720][T12191] ? __kasan_check_write+0x18/0x20 [ 3149.938746][T12191] ? mutex_lock+0x92/0x1c0 [ 3149.938764][T12191] ? __cfi_mutex_lock+0x10/0x10 [ 3149.938781][T12191] ? __fget_files+0x2c5/0x340 [ 3149.938802][T12191] ksys_read+0x141/0x250 [ 3149.938819][T12191] ? __cfi_ksys_read+0x10/0x10 [ 3149.938836][T12191] ? __kasan_check_read+0x15/0x20 [ 3149.938861][T12191] __x64_sys_read+0x7f/0x90 [ 3149.938879][T12191] x64_sys_call+0x2638/0x2ee0 [ 3149.938904][T12191] do_syscall_64+0x58/0xf0 [ 3149.938927][T12191] ? clear_bhb_loop+0x50/0xa0 [ 3149.938947][T12191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3149.938967][T12191] RIP: 0033:0x7f70a6d8e0dc [ 3149.938983][T12191] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3149.938999][T12191] RSP: 002b:00007f70a7bd9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3149.939020][T12191] RAX: ffffffffffffffda RBX: 00007f70a6fe5fa0 RCX: 00007f70a6d8e0dc [ 3149.939035][T12191] RDX: 000000000000000f RSI: 00007f70a7bd90a0 RDI: 0000000000000009 [ 3149.939049][T12191] RBP: 00007f70a7bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3149.939061][T12191] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3149.939073][T12191] R13: 00007f70a6fe6038 R14: 00007f70a6fe5fa0 R15: 00007ffc6759c758 [ 3149.939091][T12191] [ 3151.236644][T12250] __nla_validate_parse: 14 callbacks suppressed [ 3151.236672][T12250] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97070'. [ 3151.294853][T12252] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97077'. [ 3151.462718][T12264] netlink: 'syz.0.97083': attribute type 4 has an invalid length. [ 3151.555929][T12271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97085'. [ 3151.608393][T12273] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97086'. [ 3151.692850][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97088'. [ 3152.321021][T12297] netlink: 68 bytes leftover after parsing attributes in process `syz.7.97098'. [ 3152.604696][T12315] FAULT_INJECTION: forcing a failure. [ 3152.604696][T12315] name failslab, interval 1, probability 0, space 0, times 0 [ 3152.629793][T12315] CPU: 0 UID: 0 PID: 12315 Comm: syz.0.97103 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3152.629826][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3152.629839][T12315] Call Trace: [ 3152.629845][T12315] [ 3152.629854][T12315] __dump_stack+0x21/0x30 [ 3152.629882][T12315] dump_stack_lvl+0x10c/0x190 [ 3152.629904][T12315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3152.629928][T12315] ? __kasan_check_write+0x18/0x20 [ 3152.629954][T12315] ? proc_fail_nth_write+0x17e/0x210 [ 3152.629975][T12315] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3152.629995][T12315] dump_stack+0x19/0x20 [ 3152.630013][T12315] should_fail_ex+0x3d9/0x530 [ 3152.630031][T12315] should_failslab+0xac/0x100 [ 3152.630056][T12315] kmem_cache_alloc_noprof+0x42/0x430 [ 3152.630073][T12315] ? getname_flags+0xc6/0x710 [ 3152.630090][T12315] getname_flags+0xc6/0x710 [ 3152.630106][T12315] ? build_open_flags+0x487/0x600 [ 3152.630129][T12315] getname+0x1b/0x30 [ 3152.630144][T12315] do_sys_openat2+0xcb/0x1c0 [ 3152.630165][T12315] ? fput+0x1a5/0x240 [ 3152.630186][T12315] ? do_sys_open+0x100/0x100 [ 3152.630206][T12315] ? ksys_write+0x1ef/0x250 [ 3152.630221][T12315] ? __cfi_ksys_write+0x10/0x10 [ 3152.630245][T12315] __x64_sys_openat+0x13a/0x170 [ 3152.630267][T12315] x64_sys_call+0xe69/0x2ee0 [ 3152.630290][T12315] do_syscall_64+0x58/0xf0 [ 3152.630310][T12315] ? clear_bhb_loop+0x50/0xa0 [ 3152.630329][T12315] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3152.630348][T12315] RIP: 0033:0x7f7588b8df10 [ 3152.630363][T12315] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 3152.630378][T12315] RSP: 002b:00007f75899e0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3152.630398][T12315] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7588b8df10 [ 3152.630410][T12315] RDX: 0000000000000002 RSI: 00007f75899e0fa0 RDI: 00000000ffffff9c [ 3152.630422][T12315] RBP: 00007f75899e0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3152.630433][T12315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3152.630444][T12315] R13: 00007f7588de6038 R14: 00007f7588de5fa0 R15: 00007fffbfdbc698 [ 3152.630460][T12315] [ 3153.300832][T12349] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97123'. [ 3153.735691][T12373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97137'. [ 3153.828463][T12377] netlink: 68 bytes leftover after parsing attributes in process `syz.7.97131'. [ 3153.889183][T12384] netlink: 60 bytes leftover after parsing attributes in process `syz.9.97139'. [ 3154.018723][T12399] FAULT_INJECTION: forcing a failure. [ 3154.018723][T12399] name failslab, interval 1, probability 0, space 0, times 0 [ 3154.048089][T12399] CPU: 1 UID: 0 PID: 12399 Comm: syz.9.97148 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3154.048122][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3154.048133][T12399] Call Trace: [ 3154.048140][T12399] [ 3154.048148][T12399] __dump_stack+0x21/0x30 [ 3154.048175][T12399] dump_stack_lvl+0x10c/0x190 [ 3154.048207][T12399] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3154.048228][T12399] ? kernel_text_address+0xa9/0xe0 [ 3154.048251][T12399] dump_stack+0x19/0x20 [ 3154.048273][T12399] should_fail_ex+0x3d9/0x530 [ 3154.048292][T12399] should_failslab+0xac/0x100 [ 3154.048313][T12399] __kmalloc_node_noprof+0x6c/0x520 [ 3154.048331][T12399] ? __kvmalloc_node_noprof+0x11d/0x300 [ 3154.048357][T12399] __kvmalloc_node_noprof+0x11d/0x300 [ 3154.048381][T12399] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 3154.048407][T12399] traverse+0xf5/0x720 [ 3154.048426][T12399] ? __cfi_mutex_lock+0x10/0x10 [ 3154.048442][T12399] ? selinux_file_permission+0x309/0xb30 [ 3154.048465][T12399] seq_read_iter+0xe55/0xfe0 [ 3154.048485][T12399] ? __kasan_check_write+0x18/0x20 [ 3154.048509][T12399] ? proc_fail_nth_write+0x17e/0x210 [ 3154.048534][T12399] vfs_read+0x62b/0xc70 [ 3154.048551][T12399] ? __cfi_vfs_read+0x10/0x10 [ 3154.048570][T12399] ksys_pread64+0x170/0x270 [ 3154.048587][T12399] ? __cfi_ksys_pread64+0x10/0x10 [ 3154.048605][T12399] __x64_sys_pread64+0x9f/0xb0 [ 3154.048623][T12399] x64_sys_call+0x2a34/0x2ee0 [ 3154.048646][T12399] do_syscall_64+0x58/0xf0 [ 3154.048668][T12399] ? clear_bhb_loop+0x50/0xa0 [ 3154.048688][T12399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3154.048707][T12399] RIP: 0033:0x7f70a6d8f6c9 [ 3154.048722][T12399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3154.048737][T12399] RSP: 002b:00007f70a7bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3154.048757][T12399] RAX: ffffffffffffffda RBX: 00007f70a6fe5fa0 RCX: 00007f70a6d8f6c9 [ 3154.048771][T12399] RDX: 0000000000000ff7 RSI: 0000200000000200 RDI: 0000000000000008 [ 3154.048785][T12399] RBP: 00007f70a7bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3154.048797][T12399] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3154.048810][T12399] R13: 00007f70a6fe6038 R14: 00007f70a6fe5fa0 R15: 00007ffc6759c758 [ 3154.048826][T12399] [ 3154.529134][T12422] FAULT_INJECTION: forcing a failure. [ 3154.529134][T12422] name failslab, interval 1, probability 0, space 0, times 0 [ 3154.563521][T12422] CPU: 0 UID: 0 PID: 12422 Comm: syz.4.97159 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3154.563557][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3154.563569][T12422] Call Trace: [ 3154.563576][T12422] [ 3154.563585][T12422] __dump_stack+0x21/0x30 [ 3154.563614][T12422] dump_stack_lvl+0x10c/0x190 [ 3154.563638][T12422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3154.563662][T12422] ? kernel_text_address+0xa9/0xe0 [ 3154.563686][T12422] dump_stack+0x19/0x20 [ 3154.563704][T12422] should_fail_ex+0x3d9/0x530 [ 3154.563722][T12422] should_failslab+0xac/0x100 [ 3154.563740][T12422] __kmalloc_node_noprof+0x6c/0x520 [ 3154.563754][T12422] ? __kvmalloc_node_noprof+0x11d/0x300 [ 3154.563780][T12422] __kvmalloc_node_noprof+0x11d/0x300 [ 3154.563802][T12422] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 3154.563826][T12422] traverse+0xf5/0x720 [ 3154.563844][T12422] ? __cfi_mutex_lock+0x10/0x10 [ 3154.563860][T12422] ? selinux_file_permission+0x309/0xb30 [ 3154.563882][T12422] seq_read_iter+0xe55/0xfe0 [ 3154.563903][T12422] ? __kasan_check_write+0x18/0x20 [ 3154.563928][T12422] ? proc_fail_nth_write+0x17e/0x210 [ 3154.563954][T12422] vfs_read+0x62b/0xc70 [ 3154.563972][T12422] ? __cfi_vfs_read+0x10/0x10 [ 3154.563992][T12422] ksys_pread64+0x170/0x270 [ 3154.564010][T12422] ? __cfi_ksys_pread64+0x10/0x10 [ 3154.564037][T12422] __x64_sys_pread64+0x9f/0xb0 [ 3154.564054][T12422] x64_sys_call+0x2a34/0x2ee0 [ 3154.564078][T12422] do_syscall_64+0x58/0xf0 [ 3154.564100][T12422] ? clear_bhb_loop+0x50/0xa0 [ 3154.564120][T12422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3154.564139][T12422] RIP: 0033:0x7fb1c098f6c9 [ 3154.564153][T12422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3154.564168][T12422] RSP: 002b:00007fb1c1894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3154.564190][T12422] RAX: ffffffffffffffda RBX: 00007fb1c0be5fa0 RCX: 00007fb1c098f6c9 [ 3154.564205][T12422] RDX: 0000000000000ff7 RSI: 0000200000000200 RDI: 0000000000000008 [ 3154.564218][T12422] RBP: 00007fb1c1894090 R08: 0000000000000000 R09: 0000000000000000 [ 3154.564231][T12422] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3154.564243][T12422] R13: 00007fb1c0be6038 R14: 00007fb1c0be5fa0 R15: 00007ffc8ebb64b8 [ 3154.564260][T12422] [ 3155.778878][T12472] TCP: TCP_TX_DELAY enabled [ 3155.849015][T12476] FAULT_INJECTION: forcing a failure. [ 3155.849015][T12476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3155.862679][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.7.97185 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3155.862713][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3155.862725][T12476] Call Trace: [ 3155.862732][T12476] [ 3155.862740][T12476] __dump_stack+0x21/0x30 [ 3155.862770][T12476] dump_stack_lvl+0x10c/0x190 [ 3155.862799][T12476] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3155.862824][T12476] ? check_stack_object+0x12c/0x140 [ 3155.862843][T12476] dump_stack+0x19/0x20 [ 3155.862865][T12476] should_fail_ex+0x3d9/0x530 [ 3155.862885][T12476] should_fail+0xf/0x20 [ 3155.862902][T12476] should_fail_usercopy+0x1e/0x30 [ 3155.862921][T12476] _copy_to_user+0x24/0xa0 [ 3155.862944][T12476] simple_read_from_buffer+0xed/0x160 [ 3155.862967][T12476] proc_fail_nth_read+0x19e/0x210 [ 3155.862991][T12476] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3155.863015][T12476] ? bpf_lsm_file_permission+0xd/0x20 [ 3155.863039][T12476] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3155.863066][T12476] vfs_read+0x27d/0xc70 [ 3155.863091][T12476] ? ip_setsockopt+0xa7/0x100 [ 3155.863118][T12476] ? __cfi_vfs_read+0x10/0x10 [ 3155.863134][T12476] ? __kasan_check_write+0x18/0x20 [ 3155.863160][T12476] ? mutex_lock+0x92/0x1c0 [ 3155.863185][T12476] ? __cfi_mutex_lock+0x10/0x10 [ 3155.863201][T12476] ? __fget_files+0x2c5/0x340 [ 3155.863222][T12476] ksys_read+0x141/0x250 [ 3155.863239][T12476] ? __cfi_ksys_read+0x10/0x10 [ 3155.863255][T12476] ? __kasan_check_write+0x18/0x20 [ 3155.863281][T12476] ? __kasan_check_read+0x15/0x20 [ 3155.863307][T12476] __x64_sys_read+0x7f/0x90 [ 3155.863324][T12476] x64_sys_call+0x2638/0x2ee0 [ 3155.863349][T12476] do_syscall_64+0x58/0xf0 [ 3155.863371][T12476] ? clear_bhb_loop+0x50/0xa0 [ 3155.863391][T12476] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3155.863411][T12476] RIP: 0033:0x7f3ba9d8e0dc [ 3155.863428][T12476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3155.863445][T12476] RSP: 002b:00007f3baab51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3155.863466][T12476] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8e0dc [ 3155.863480][T12476] RDX: 000000000000000f RSI: 00007f3baab510a0 RDI: 0000000000000007 [ 3155.863493][T12476] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3155.863506][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3155.863518][T12476] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3155.863535][T12476] [ 3156.152384][T21908] hid-generic 0005:0006:09C3.0009: unknown main item tag 0x5 [ 3156.170442][T21908] hid-generic 0005:0006:09C3.0009: unexpected long global item [ 3156.188210][T21908] hid-generic 0005:0006:09C3.0009: probe with driver hid-generic failed with error -22 [ 3156.229099][T12486] netlink: 'syz.4.97190': attribute type 11 has an invalid length. [ 3156.247355][T12486] __nla_validate_parse: 3 callbacks suppressed [ 3156.247375][T12486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.97190'. [ 3156.523337][T12497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97192'. [ 3156.779172][T12528] FAULT_INJECTION: forcing a failure. [ 3156.779172][T12528] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.822323][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.7.97210 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3156.822356][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3156.822369][T12528] Call Trace: [ 3156.822375][T12528] [ 3156.822384][T12528] __dump_stack+0x21/0x30 [ 3156.822413][T12528] dump_stack_lvl+0x10c/0x190 [ 3156.822436][T12528] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3156.822459][T12528] ? vfs_write+0x93e/0xf30 [ 3156.822478][T12528] dump_stack+0x19/0x20 [ 3156.822500][T12528] should_fail_ex+0x3d9/0x530 [ 3156.822519][T12528] should_failslab+0xac/0x100 [ 3156.822540][T12528] kmem_cache_alloc_noprof+0x42/0x430 [ 3156.822558][T12528] ? prepare_creds+0x48/0x6b0 [ 3156.822578][T12528] ? __cfi_make_kuid+0x10/0x10 [ 3156.822602][T12528] ? fput+0x1a5/0x240 [ 3156.822624][T12528] prepare_creds+0x48/0x6b0 [ 3156.822643][T12528] __sys_setreuid+0x106/0xb00 [ 3156.822663][T12528] ? __kasan_check_read+0x15/0x20 [ 3156.822689][T12528] __x64_sys_setreuid+0x5e/0x70 [ 3156.822709][T12528] x64_sys_call+0x1132/0x2ee0 [ 3156.822734][T12528] do_syscall_64+0x58/0xf0 [ 3156.822765][T12528] ? clear_bhb_loop+0x50/0xa0 [ 3156.822786][T12528] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3156.822806][T12528] RIP: 0033:0x7f3ba9d8f6c9 [ 3156.822827][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3156.822844][T12528] RSP: 002b:00007f3baab51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 3156.822865][T12528] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8f6c9 [ 3156.822880][T12528] RDX: 0000000000000000 RSI: 000000000000c1ff RDI: 0000000000000000 [ 3156.822893][T12528] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3156.822906][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3156.822918][T12528] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3156.822935][T12528] [ 3157.290585][T12540] FAULT_INJECTION: forcing a failure. [ 3157.290585][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.317868][T12540] CPU: 1 UID: 0 PID: 12540 Comm: syz.7.97216 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3157.317901][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3157.317913][T12540] Call Trace: [ 3157.317920][T12540] [ 3157.317927][T12540] __dump_stack+0x21/0x30 [ 3157.317955][T12540] dump_stack_lvl+0x10c/0x190 [ 3157.317978][T12540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3157.318000][T12540] ? kernel_text_address+0xa9/0xe0 [ 3157.318023][T12540] dump_stack+0x19/0x20 [ 3157.318045][T12540] should_fail_ex+0x3d9/0x530 [ 3157.318064][T12540] should_failslab+0xac/0x100 [ 3157.318084][T12540] __kmalloc_node_noprof+0x6c/0x520 [ 3157.318101][T12540] ? __kvmalloc_node_noprof+0x11d/0x300 [ 3157.318128][T12540] __kvmalloc_node_noprof+0x11d/0x300 [ 3157.318152][T12540] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 3157.318179][T12540] traverse+0xf5/0x720 [ 3157.318198][T12540] ? __cfi_mutex_lock+0x10/0x10 [ 3157.318214][T12540] ? selinux_file_permission+0x309/0xb30 [ 3157.318237][T12540] seq_read_iter+0xe55/0xfe0 [ 3157.318257][T12540] ? __kasan_check_write+0x18/0x20 [ 3157.318281][T12540] ? proc_fail_nth_write+0x17e/0x210 [ 3157.318306][T12540] vfs_read+0x62b/0xc70 [ 3157.318323][T12540] ? __cfi_vfs_read+0x10/0x10 [ 3157.318341][T12540] ksys_pread64+0x170/0x270 [ 3157.318358][T12540] ? __cfi_ksys_pread64+0x10/0x10 [ 3157.318376][T12540] __x64_sys_pread64+0x9f/0xb0 [ 3157.318393][T12540] x64_sys_call+0x2a34/0x2ee0 [ 3157.318417][T12540] do_syscall_64+0x58/0xf0 [ 3157.318438][T12540] ? clear_bhb_loop+0x50/0xa0 [ 3157.318458][T12540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3157.318476][T12540] RIP: 0033:0x7f3ba9d8f6c9 [ 3157.318492][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3157.318507][T12540] RSP: 002b:00007f3baab51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3157.318527][T12540] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8f6c9 [ 3157.318541][T12540] RDX: 0000000000000ff7 RSI: 0000200000000200 RDI: 0000000000000008 [ 3157.318553][T12540] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3157.318565][T12540] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3157.318576][T12540] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3157.318592][T12540] [ 3157.546218][T12546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97220'. [ 3157.845237][T12582] FAULT_INJECTION: forcing a failure. [ 3157.845237][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.859323][T12582] CPU: 0 UID: 0 PID: 12582 Comm: syz.7.97237 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3157.859353][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3157.859365][T12582] Call Trace: [ 3157.859372][T12582] [ 3157.859380][T12582] __dump_stack+0x21/0x30 [ 3157.859407][T12582] dump_stack_lvl+0x10c/0x190 [ 3157.859430][T12582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3157.859452][T12582] ? __kasan_check_write+0x18/0x20 [ 3157.859477][T12582] ? proc_fail_nth_write+0x17e/0x210 [ 3157.859501][T12582] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3157.859523][T12582] dump_stack+0x19/0x20 [ 3157.859544][T12582] should_fail_ex+0x3d9/0x530 [ 3157.859564][T12582] should_failslab+0xac/0x100 [ 3157.859584][T12582] kmem_cache_alloc_noprof+0x42/0x430 [ 3157.859600][T12582] ? getname_flags+0xc6/0x710 [ 3157.859619][T12582] getname_flags+0xc6/0x710 [ 3157.859636][T12582] ? build_open_flags+0x487/0x600 [ 3157.859659][T12582] getname+0x1b/0x30 [ 3157.859674][T12582] do_sys_openat2+0xcb/0x1c0 [ 3157.859695][T12582] ? fput+0x1a5/0x240 [ 3157.859714][T12582] ? do_sys_open+0x100/0x100 [ 3157.859734][T12582] ? ksys_write+0x1ef/0x250 [ 3157.859750][T12582] ? __cfi_ksys_write+0x10/0x10 [ 3157.859766][T12582] __x64_sys_openat+0x13a/0x170 [ 3157.859789][T12582] x64_sys_call+0xe69/0x2ee0 [ 3157.859811][T12582] do_syscall_64+0x58/0xf0 [ 3157.859832][T12582] ? clear_bhb_loop+0x50/0xa0 [ 3157.859851][T12582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3157.859869][T12582] RIP: 0033:0x7f3ba9d8df10 [ 3157.859885][T12582] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 3157.859901][T12582] RSP: 002b:00007f3baab50f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3157.859922][T12582] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3ba9d8df10 [ 3157.859945][T12582] RDX: 0000000000000002 RSI: 00007f3baab50fa0 RDI: 00000000ffffff9c [ 3157.859959][T12582] RBP: 00007f3baab50fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.859971][T12582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3157.859982][T12582] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3157.859999][T12582] [ 3157.918568][T12596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97244'. [ 3157.939633][T12598] FAULT_INJECTION: forcing a failure. [ 3157.939633][T12598] name failslab, interval 1, probability 0, space 0, times 0 [ 3158.107170][T12598] CPU: 1 UID: 0 PID: 12598 Comm: syz.7.97245 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3158.107198][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3158.107210][T12598] Call Trace: [ 3158.107216][T12598] [ 3158.107224][T12598] __dump_stack+0x21/0x30 [ 3158.107252][T12598] dump_stack_lvl+0x10c/0x190 [ 3158.107275][T12598] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3158.107299][T12598] ? kernel_text_address+0xa9/0xe0 [ 3158.107322][T12598] dump_stack+0x19/0x20 [ 3158.107344][T12598] should_fail_ex+0x3d9/0x530 [ 3158.107363][T12598] should_failslab+0xac/0x100 [ 3158.107384][T12598] __kmalloc_node_noprof+0x6c/0x520 [ 3158.107400][T12598] ? __kvmalloc_node_noprof+0x11d/0x300 [ 3158.107426][T12598] __kvmalloc_node_noprof+0x11d/0x300 [ 3158.107450][T12598] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 3158.107475][T12598] traverse+0xf5/0x720 [ 3158.107496][T12598] ? __cfi_mutex_lock+0x10/0x10 [ 3158.107512][T12598] ? selinux_file_permission+0x309/0xb30 [ 3158.107536][T12598] seq_read_iter+0xe55/0xfe0 [ 3158.107556][T12598] ? __kasan_check_write+0x18/0x20 [ 3158.107581][T12598] ? proc_fail_nth_write+0x17e/0x210 [ 3158.107606][T12598] vfs_read+0x62b/0xc70 [ 3158.107622][T12598] ? __cfi_vfs_read+0x10/0x10 [ 3158.107641][T12598] ksys_pread64+0x170/0x270 [ 3158.107659][T12598] ? __cfi_ksys_pread64+0x10/0x10 [ 3158.107677][T12598] __x64_sys_pread64+0x9f/0xb0 [ 3158.107695][T12598] x64_sys_call+0x2a34/0x2ee0 [ 3158.107719][T12598] do_syscall_64+0x58/0xf0 [ 3158.107740][T12598] ? clear_bhb_loop+0x50/0xa0 [ 3158.107763][T12598] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3158.107782][T12598] RIP: 0033:0x7f3ba9d8f6c9 [ 3158.107796][T12598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3158.107813][T12598] RSP: 002b:00007f3baab51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3158.107833][T12598] RAX: ffffffffffffffda RBX: 00007f3ba9fe5fa0 RCX: 00007f3ba9d8f6c9 [ 3158.107848][T12598] RDX: 0000000000000ff7 RSI: 0000200000000200 RDI: 000000000000000a [ 3158.107869][T12598] RBP: 00007f3baab51090 R08: 0000000000000000 R09: 0000000000000000 [ 3158.107881][T12598] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3158.107893][T12598] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3158.107909][T12598] [ 3158.380063][T12615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97255'. [ 3158.392523][T12618] netlink: 'syz.4.97256': attribute type 4 has an invalid length. [ 3158.500775][T12639] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97264'. [ 3158.520175][T12636] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97260'. [ 3158.539105][T12641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97265'. [ 3158.627619][T12654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97270'. [ 3158.730857][T12667] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97276'. [ 3158.877834][T12686] netlink: 'syz.9.97287': attribute type 4 has an invalid length. [ 3158.966097][ T36] audit: type=1326 audit(2000000115.136:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3158.999498][ T36] audit: type=1326 audit(2000000115.136:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.024122][ T36] audit: type=1326 audit(2000000115.136:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.027515][T12706] netlink: 'syz.7.97296': attribute type 11 has an invalid length. [ 3159.047755][ T36] audit: type=1326 audit(2000000115.136:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.080711][ T36] audit: type=1326 audit(2000000115.136:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.085769][T12708] netlink: 'syz.9.97297': attribute type 4 has an invalid length. [ 3159.105699][ T36] audit: type=1326 audit(2000000115.136:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.112482][T12708] netlink: 'syz.9.97297': attribute type 5 has an invalid length. [ 3159.136016][ T36] audit: type=1326 audit(2000000115.136:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.189755][ T36] audit: type=1326 audit(2000000115.136:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.213771][ T36] audit: type=1326 audit(2000000115.136:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.237985][ T36] audit: type=1326 audit(2000000115.136:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12701 comm="syz.0.97292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7588b8f6c9 code=0x7ffc0000 [ 3159.818986][T12770] netlink: 'syz.0.97327': attribute type 4 has an invalid length. [ 3159.898230][T12778] netlink: 'syz.4.97330': attribute type 11 has an invalid length. [ 3160.132144][T12796] FAULT_INJECTION: forcing a failure. [ 3160.132144][T12796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3160.165037][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.4.97340 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3160.165068][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3160.165081][T12796] Call Trace: [ 3160.165088][T12796] [ 3160.165095][T12796] __dump_stack+0x21/0x30 [ 3160.165125][T12796] dump_stack_lvl+0x10c/0x190 [ 3160.165149][T12796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3160.165172][T12796] ? check_stack_object+0x12c/0x140 [ 3160.165192][T12796] dump_stack+0x19/0x20 [ 3160.165214][T12796] should_fail_ex+0x3d9/0x530 [ 3160.165234][T12796] should_fail+0xf/0x20 [ 3160.165251][T12796] should_fail_usercopy+0x1e/0x30 [ 3160.165270][T12796] _copy_to_user+0x24/0xa0 [ 3160.165292][T12796] simple_read_from_buffer+0xed/0x160 [ 3160.165316][T12796] proc_fail_nth_read+0x19e/0x210 [ 3160.165350][T12796] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3160.165382][T12796] ? __bad_area_nosemaphore+0xb4/0x670 [ 3160.165409][T12796] ? bpf_lsm_file_permission+0xd/0x20 [ 3160.165433][T12796] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3160.165456][T12796] vfs_read+0x27d/0xc70 [ 3160.165473][T12796] ? __cfi_vfs_read+0x10/0x10 [ 3160.165489][T12796] ? __kasan_check_write+0x18/0x20 [ 3160.165514][T12796] ? mutex_lock+0x92/0x1c0 [ 3160.165532][T12796] ? __cfi_mutex_lock+0x10/0x10 [ 3160.165553][T12796] ? __fget_files+0x2c5/0x340 [ 3160.165574][T12796] ksys_read+0x141/0x250 [ 3160.165591][T12796] ? __cfi_ksys_read+0x10/0x10 [ 3160.165607][T12796] ? __sys_socketpair+0xfb/0x5c0 [ 3160.165629][T12796] ? __kasan_check_read+0x15/0x20 [ 3160.165654][T12796] __x64_sys_read+0x7f/0x90 [ 3160.165672][T12796] x64_sys_call+0x2638/0x2ee0 [ 3160.165697][T12796] do_syscall_64+0x58/0xf0 [ 3160.165719][T12796] ? clear_bhb_loop+0x50/0xa0 [ 3160.165740][T12796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3160.165760][T12796] RIP: 0033:0x7fb1c098e0dc [ 3160.165776][T12796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3160.165793][T12796] RSP: 002b:00007fb1c1894030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3160.165814][T12796] RAX: ffffffffffffffda RBX: 00007fb1c0be5fa0 RCX: 00007fb1c098e0dc [ 3160.165830][T12796] RDX: 000000000000000f RSI: 00007fb1c18940a0 RDI: 0000000000000008 [ 3160.165843][T12796] RBP: 00007fb1c1894090 R08: 0000000000000000 R09: 0000000000000000 [ 3160.165855][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3160.165867][T12796] R13: 00007fb1c0be6038 R14: 00007fb1c0be5fa0 R15: 00007ffc8ebb64b8 [ 3160.165884][T12796] [ 3160.827707][ T3766] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 3160.988700][ T3766] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3161.000988][ T3766] usb 8-1: config 0 has no interfaces? [ 3161.010681][ T3766] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3161.020507][ T3766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3161.037649][ T3766] usb 8-1: Product: syz [ 3161.047846][ T3766] usb 8-1: Manufacturer: syz [ 3161.057811][ T3766] usb 8-1: SerialNumber: syz [ 3161.068022][ T3766] usb 8-1: config 0 descriptor?? [ 3161.279620][ T3766] usb 8-1: USB disconnect, device number 35 [ 3161.597196][T12880] netlink: 'syz.0.97378': attribute type 4 has an invalid length. [ 3161.838366][T12925] netlink: 'syz.9.97400': attribute type 4 has an invalid length. [ 3162.064260][T12978] __nla_validate_parse: 8 callbacks suppressed [ 3162.064281][T12978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97418'. [ 3162.131717][T12995] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97425'. [ 3162.176254][T13005] FAULT_INJECTION: forcing a failure. [ 3162.176254][T13005] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.189054][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.4.97430 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3162.189086][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3162.189098][T13005] Call Trace: [ 3162.189105][T13005] [ 3162.189113][T13005] __dump_stack+0x21/0x30 [ 3162.189139][T13005] dump_stack_lvl+0x10c/0x190 [ 3162.189159][T13005] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3162.189179][T13005] ? kernel_text_address+0xa9/0xe0 [ 3162.189201][T13005] dump_stack+0x19/0x20 [ 3162.189231][T13005] should_fail_ex+0x3d9/0x530 [ 3162.189250][T13005] should_failslab+0xac/0x100 [ 3162.189269][T13005] __kmalloc_node_noprof+0x6c/0x520 [ 3162.189288][T13005] ? __kvmalloc_node_noprof+0x11d/0x300 [ 3162.189315][T13005] __kvmalloc_node_noprof+0x11d/0x300 [ 3162.189340][T13005] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 3162.189366][T13005] traverse+0xf5/0x720 [ 3162.189386][T13005] ? __cfi_mutex_lock+0x10/0x10 [ 3162.189403][T13005] ? selinux_file_permission+0x309/0xb30 [ 3162.189425][T13005] seq_read_iter+0xe55/0xfe0 [ 3162.189445][T13005] ? __kasan_check_write+0x18/0x20 [ 3162.189469][T13005] ? proc_fail_nth_write+0x17e/0x210 [ 3162.189490][T13005] vfs_read+0x62b/0xc70 [ 3162.189505][T13005] ? __cfi_vfs_read+0x10/0x10 [ 3162.189522][T13005] ksys_pread64+0x170/0x270 [ 3162.189538][T13005] ? __cfi_ksys_pread64+0x10/0x10 [ 3162.189555][T13005] __x64_sys_pread64+0x9f/0xb0 [ 3162.189570][T13005] x64_sys_call+0x2a34/0x2ee0 [ 3162.189593][T13005] do_syscall_64+0x58/0xf0 [ 3162.189615][T13005] ? clear_bhb_loop+0x50/0xa0 [ 3162.189634][T13005] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3162.189653][T13005] RIP: 0033:0x7fb1c098f6c9 [ 3162.189669][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3162.189686][T13005] RSP: 002b:00007fb1c1894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 3162.189707][T13005] RAX: ffffffffffffffda RBX: 00007fb1c0be5fa0 RCX: 00007fb1c098f6c9 [ 3162.189722][T13005] RDX: 0000000000000ff7 RSI: 0000200000000200 RDI: 0000000000000007 [ 3162.189735][T13005] RBP: 00007fb1c1894090 R08: 0000000000000000 R09: 0000000000000000 [ 3162.189748][T13005] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3162.189761][T13005] R13: 00007fb1c0be6038 R14: 00007fb1c0be5fa0 R15: 00007ffc8ebb64b8 [ 3162.189777][T13005] [ 3162.539530][T13033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97443'. [ 3162.718117][T13053] netlink: 60 bytes leftover after parsing attributes in process `syz.9.97451'. [ 3162.840478][T13070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97461'. [ 3162.886144][T13076] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97465'. [ 3163.004813][T13088] FAULT_INJECTION: forcing a failure. [ 3163.004813][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.023861][T13088] CPU: 0 UID: 0 PID: 13088 Comm: syz.9.97471 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3163.023892][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3163.023904][T13088] Call Trace: [ 3163.023910][T13088] [ 3163.023918][T13088] __dump_stack+0x21/0x30 [ 3163.023944][T13088] dump_stack_lvl+0x10c/0x190 [ 3163.023966][T13088] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3163.023988][T13088] ? release_sock+0x171/0x1f0 [ 3163.024008][T13088] dump_stack+0x19/0x20 [ 3163.024028][T13088] should_fail_ex+0x3d9/0x530 [ 3163.024047][T13088] should_failslab+0xac/0x100 [ 3163.024076][T13088] kmem_cache_alloc_node_noprof+0x45/0x440 [ 3163.024093][T13088] ? netlink_data_ready+0x20/0x20 [ 3163.024115][T13088] ? __alloc_skb+0x10c/0x370 [ 3163.024135][T13088] __alloc_skb+0x10c/0x370 [ 3163.024155][T13088] netlink_alloc_large_skb+0xf7/0x1b0 [ 3163.024176][T13088] netlink_sendmsg+0x586/0xaf0 [ 3163.024199][T13088] ? __kasan_check_write+0x18/0x20 [ 3163.024223][T13088] ? __cfi_netlink_sendmsg+0x10/0x10 [ 3163.024246][T13088] ? __fget_files+0x2c5/0x340 [ 3163.024267][T13088] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 3163.024287][T13088] ? security_socket_sendmsg+0x33/0xd0 [ 3163.024304][T13088] __sys_sendto+0x66d/0x6f0 [ 3163.024326][T13088] ? __cfi___sys_sendto+0x10/0x10 [ 3163.024349][T13088] ? __kasan_check_write+0x18/0x20 [ 3163.024373][T13088] ? __cfi_ksys_write+0x10/0x10 [ 3163.024391][T13088] __x64_sys_sendto+0xe9/0x100 [ 3163.024413][T13088] x64_sys_call+0x2c2c/0x2ee0 [ 3163.024436][T13088] do_syscall_64+0x58/0xf0 [ 3163.024457][T13088] ? clear_bhb_loop+0x50/0xa0 [ 3163.024476][T13088] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3163.024495][T13088] RIP: 0033:0x7f70a6d8f6c9 [ 3163.024510][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3163.024525][T13088] RSP: 002b:00007f70a7bd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3163.024544][T13088] RAX: ffffffffffffffda RBX: 00007f70a6fe5fa0 RCX: 00007f70a6d8f6c9 [ 3163.024559][T13088] RDX: 0000000000000013 RSI: 0000200000000100 RDI: 0000000000000008 [ 3163.024571][T13088] RBP: 00007f70a7bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3163.024583][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3163.024594][T13088] R13: 00007f70a6fe6038 R14: 00007f70a6fe5fa0 R15: 00007ffc6759c758 [ 3163.024610][T13088] [ 3163.643231][T13172] FAULT_INJECTION: forcing a failure. [ 3163.643231][T13172] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.657647][T13172] CPU: 1 UID: 0 PID: 13172 Comm: syz.7.97510 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3163.657680][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3163.657692][T13172] Call Trace: [ 3163.657698][T13172] [ 3163.657706][T13172] __dump_stack+0x21/0x30 [ 3163.657736][T13172] dump_stack_lvl+0x10c/0x190 [ 3163.657758][T13172] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3163.657782][T13172] ? __kasan_check_write+0x18/0x20 [ 3163.657806][T13172] ? proc_fail_nth_write+0x17e/0x210 [ 3163.657830][T13172] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3163.657853][T13172] dump_stack+0x19/0x20 [ 3163.657871][T13172] should_fail_ex+0x3d9/0x530 [ 3163.657889][T13172] should_failslab+0xac/0x100 [ 3163.657908][T13172] kmem_cache_alloc_noprof+0x42/0x430 [ 3163.657924][T13172] ? getname_flags+0xc6/0x710 [ 3163.657942][T13172] getname_flags+0xc6/0x710 [ 3163.657957][T13172] ? build_open_flags+0x487/0x600 [ 3163.657989][T13172] getname+0x1b/0x30 [ 3163.658005][T13172] do_sys_openat2+0xcb/0x1c0 [ 3163.658024][T13172] ? fput+0x1a5/0x240 [ 3163.658043][T13172] ? do_sys_open+0x100/0x100 [ 3163.658064][T13172] ? ksys_write+0x1ef/0x250 [ 3163.658080][T13172] ? __cfi_ksys_write+0x10/0x10 [ 3163.658097][T13172] __x64_sys_openat+0x13a/0x170 [ 3163.658119][T13172] x64_sys_call+0xe69/0x2ee0 [ 3163.658144][T13172] do_syscall_64+0x58/0xf0 [ 3163.658165][T13172] ? clear_bhb_loop+0x50/0xa0 [ 3163.658185][T13172] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3163.658203][T13172] RIP: 0033:0x7f3ba9d8df10 [ 3163.658218][T13172] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 3163.658234][T13172] RSP: 002b:00007f3baab50f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3163.658255][T13172] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3ba9d8df10 [ 3163.658269][T13172] RDX: 0000000000000002 RSI: 00007f3baab50fa0 RDI: 00000000ffffff9c [ 3163.658282][T13172] RBP: 00007f3baab50fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3163.658294][T13172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3163.658305][T13172] R13: 00007f3ba9fe6038 R14: 00007f3ba9fe5fa0 R15: 00007ffc8f47df78 [ 3163.658321][T13172] [ 3163.903273][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.9.97514'. [ 3164.005364][T13191] netlink: 'syz.9.97518': attribute type 4 has an invalid length. [ 3164.200166][T13217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97530'. [ 3164.229402][T13223] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97534'. [ 3164.255437][T13229] netlink: 'syz.4.97535': attribute type 4 has an invalid length. [ 3164.321553][T13243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97543'. [ 3165.329638][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 3165.329656][ T36] audit: type=1400 audit(2000000121.506:687): avc: denied { name_bind } for pid=13366 comm="syz.9.97603" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 3165.377426][ T36] audit: type=1400 audit(2000000121.516:688): avc: denied { execute } for pid=13368 comm="syz.7.97604" path="/525/blkio.bfq.group_wait_time" dev="tmpfs" ino=3173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3165.597409][ T7145] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 3165.748426][ T7145] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3165.777412][ T7145] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3165.788016][ T7145] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3165.807485][ T7145] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3165.826487][ T7145] usb 10-1: config 0 descriptor?? [ 3166.243336][ T7145] wacom 0003:056A:032C.000A: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.9-1/input0 [ 3166.856302][T29976] bridge_slave_1: left allmulticast mode [ 3166.862098][T29976] bridge_slave_1: left promiscuous mode [ 3166.877591][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3166.885292][T29976] bridge_slave_0: left allmulticast mode [ 3166.898346][T29976] bridge_slave_0: left promiscuous mode [ 3166.907571][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3167.013596][T12879] usb 10-1: USB disconnect, device number 31 [ 3167.022247][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.044250][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 3167.052871][T13448] bridge_slave_0: entered allmulticast mode [ 3167.059215][T13448] bridge_slave_0: entered promiscuous mode [ 3167.065865][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.073135][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 3167.080293][T13448] bridge_slave_1: entered allmulticast mode [ 3167.086634][T13448] bridge_slave_1: entered promiscuous mode [ 3167.097368][T29976] veth1_macvtap: left promiscuous mode [ 3167.107343][T29976] veth0_vlan: left promiscuous mode [ 3167.346972][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.354081][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3167.361420][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.368481][T13448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3167.425524][T13467] __nla_validate_parse: 10 callbacks suppressed [ 3167.425545][T13467] netlink: 68 bytes leftover after parsing attributes in process `syz.7.97647'. [ 3167.441110][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 3167.457949][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 3167.511837][T13471] netlink: 60 bytes leftover after parsing attributes in process `syz.7.97649'. [ 3167.521596][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.528782][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3167.540807][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.547895][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3167.591297][T13448] veth0_vlan: entered promiscuous mode [ 3167.618923][T13448] veth1_macvtap: entered promiscuous mode [ 3168.324847][T13487] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97656'. [ 3168.599196][T13491] netlink: 60 bytes leftover after parsing attributes in process `syz.7.97657'. [ 3168.675749][T13500] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97663'. [ 3169.006505][T13507] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97666'. [ 3170.237492][T13566] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97695'. [ 3170.457220][T13575] netlink: 'syz.4.97701': attribute type 4 has an invalid length. [ 3170.482057][T13577] netlink: 60 bytes leftover after parsing attributes in process `syz.7.97699'. [ 3170.497206][ T7145] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 3170.668151][ T7145] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3170.687099][ T7145] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3170.707107][ T7145] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3170.726468][ T7145] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.748882][ T7145] usb 10-1: config 0 descriptor?? [ 3170.756920][T13599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97706'. [ 3170.777903][T13597] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97712'. [ 3170.958703][ T7145] usbhid 10-1:0.0: can't add hid device: -71 [ 3170.964780][ T7145] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3170.985143][ T7145] usb 10-1: USB disconnect, device number 32 [ 3171.131370][T13629] netlink: 'syz.4.97727': attribute type 4 has an invalid length. [ 3172.413940][ T2076] bridge_slave_1: left allmulticast mode [ 3172.425045][ T2076] bridge_slave_1: left promiscuous mode [ 3172.442849][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 3172.450667][ T2076] bridge_slave_0: left allmulticast mode [ 3172.456326][ T2076] bridge_slave_0: left promiscuous mode [ 3172.470604][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 3172.593915][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 3172.601259][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 3172.608549][T13792] bridge_slave_0: entered allmulticast mode [ 3172.614889][T13792] bridge_slave_0: entered promiscuous mode [ 3172.622760][ T2076] veth1_macvtap: left promiscuous mode [ 3172.638862][ T2076] veth0_vlan: left promiscuous mode [ 3172.683341][T13805] __nla_validate_parse: 1 callbacks suppressed [ 3172.683363][T13805] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97813'. [ 3172.761185][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 3172.769269][T13792] bridge0: port 2(bridge_slave_1) entered disabled state [ 3172.776659][T13792] bridge_slave_1: entered allmulticast mode [ 3172.803995][T13792] bridge_slave_1: entered promiscuous mode [ 3172.971099][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 3172.978203][T13792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3172.985491][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 3172.992584][T13792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3173.038419][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3173.047355][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3173.065207][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3173.072311][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3173.079967][T13827] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97817'. [ 3173.096287][T29976] bridge0: port 2(bridge_slave_1) entered blocking state [ 3173.103392][T29976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3173.149442][T13792] veth0_vlan: entered promiscuous mode [ 3173.174432][T13792] veth1_macvtap: entered promiscuous mode [ 3173.335545][T13850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97831'. [ 3173.591270][T13869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97841'. [ 3173.828499][T13889] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97851'. [ 3174.019967][T13912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97860'. [ 3174.096951][ T7145] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 3174.258017][ T7145] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3174.281141][ T7145] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3174.301356][ T7145] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3174.331641][ T7145] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3174.351929][ T7145] usb 10-1: config 0 descriptor?? [ 3174.570488][ T7145] usbhid 10-1:0.0: can't add hid device: -71 [ 3174.578218][ T7145] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3174.600652][ T7145] usb 10-1: USB disconnect, device number 33 [ 3175.077831][T13936] netlink: 'syz.7.97872': attribute type 4 has an invalid length. [ 3175.207325][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 3175.214467][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 3175.221658][T13941] bridge_slave_0: entered allmulticast mode [ 3175.230164][T13941] bridge_slave_0: entered promiscuous mode [ 3175.237300][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 3175.244536][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 3175.251662][T13941] bridge_slave_1: entered allmulticast mode [ 3175.258090][T13941] bridge_slave_1: entered promiscuous mode [ 3175.264155][T26016] bridge_slave_1: left allmulticast mode [ 3175.270294][T26016] bridge_slave_1: left promiscuous mode [ 3175.275955][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3175.283850][T26016] bridge_slave_0: left allmulticast mode [ 3175.296078][T26016] bridge_slave_0: left promiscuous mode [ 3175.315373][T26016] bridge0: port 1(bridge_slave_0) entered disabled state [ 3175.488471][T13966] netlink: 68 bytes leftover after parsing attributes in process `syz.7.97887'. [ 3175.497959][T26016] veth1_macvtap: left promiscuous mode [ 3175.503485][T26016] veth0_vlan: left promiscuous mode [ 3175.671405][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 3175.678502][T13941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3175.685800][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 3175.692884][T13941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3175.752788][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 3175.761029][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 3175.783138][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3175.790251][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3175.815252][T29976] bridge0: port 2(bridge_slave_1) entered blocking state [ 3175.822344][T29976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3175.887501][T13941] veth0_vlan: entered promiscuous mode [ 3175.914015][T13941] veth1_macvtap: entered promiscuous mode [ 3176.841857][T14019] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97907'. [ 3177.178109][T14033] netlink: 'syz.4.97916': attribute type 4 has an invalid length. [ 3177.249670][T14039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97918'. [ 3177.390008][T14047] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97922'. [ 3177.879499][T26016] bridge_slave_1: left allmulticast mode [ 3177.885196][T26016] bridge_slave_1: left promiscuous mode [ 3177.891146][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3177.902624][T26016] bridge_slave_0: left allmulticast mode [ 3177.908516][T26016] bridge_slave_0: left promiscuous mode [ 3177.914242][T26016] bridge0: port 1(bridge_slave_0) entered disabled state [ 3177.923101][T14068] __nla_validate_parse: 1 callbacks suppressed [ 3177.923120][T14068] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97932'. [ 3178.029412][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 3178.036476][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 3178.056750][T14066] bridge_slave_0: entered allmulticast mode [ 3178.062909][T14075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97933'. [ 3178.063102][T14066] bridge_slave_0: entered promiscuous mode [ 3178.078281][T14073] netlink: 'syz.9.97934': attribute type 4 has an invalid length. [ 3178.089246][T26016] veth1_macvtap: left promiscuous mode [ 3178.094789][T26016] veth0_vlan: left promiscuous mode [ 3178.131449][T14077] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97935'. [ 3178.170183][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 3178.183597][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 3178.196426][T14066] bridge_slave_1: entered allmulticast mode [ 3178.203021][T14066] bridge_slave_1: entered promiscuous mode [ 3178.242660][T14081] netlink: 60 bytes leftover after parsing attributes in process `syz.9.97937'. [ 3178.338234][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 3178.345330][T14066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3178.352685][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 3178.359755][T14066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3178.386688][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 3178.398901][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 3178.415416][T29976] bridge0: port 1(bridge_slave_0) entered blocking state [ 3178.422514][T29976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3178.439901][T14105] netlink: 60 bytes leftover after parsing attributes in process `syz.9.97947'. [ 3178.450757][T29976] bridge0: port 2(bridge_slave_1) entered blocking state [ 3178.457832][T29976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3178.517448][T14066] veth0_vlan: entered promiscuous mode [ 3178.539596][T14066] veth1_macvtap: entered promiscuous mode [ 3178.603389][T14125] netlink: 'syz.0.97955': attribute type 4 has an invalid length. [ 3178.727627][T14156] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97968'. [ 3178.969963][T14203] netlink: 68 bytes leftover after parsing attributes in process `syz.9.97991'. [ 3179.181864][T14232] netlink: 68 bytes leftover after parsing attributes in process `syz.7.98005'. [ 3179.565180][T14277] netlink: 'syz.4.98025': attribute type 4 has an invalid length. [ 3179.987910][T14317] netlink: 'syz.0.98045': attribute type 4 has an invalid length. [ 3180.136849][T21908] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 3180.297769][T21908] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3180.318275][T21908] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3180.325321][T21908] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3180.335623][T21908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3180.348184][T21908] usb 10-1: config 0 descriptor?? [ 3180.494304][T14377] netlink: 68 bytes leftover after parsing attributes in process `syz.4.98074'. [ 3180.556949][T21908] usbhid 10-1:0.0: can't add hid device: -71 [ 3180.566124][T21908] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3180.584784][T21908] usb 10-1: USB disconnect, device number 34 [ 3180.596165][T14400] netlink: 68 bytes leftover after parsing attributes in process `syz.7.98086'. [ 3183.018049][T14565] netlink: 'syz.0.98169': attribute type 4 has an invalid length. [ 3183.426630][ T7145] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 3183.607417][ T7145] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3183.626383][ T7145] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3183.636409][ T7145] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3183.655767][ T7145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.674864][ T7145] usb 8-1: config 0 descriptor?? [ 3184.068203][T14613] netlink: 68 bytes leftover after parsing attributes in process `syz.0.98186'. [ 3184.090293][ T7145] wacom 0003:056A:032C.000B: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.7-1/input0 [ 3184.428943][T14656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98210'. [ 3184.845115][ T7145] usb 8-1: USB disconnect, device number 36 [ 3185.158051][T14781] netlink: 'syz.4.98271': attribute type 4 has an invalid length. [ 3185.568743][T14815] netlink: 68 bytes leftover after parsing attributes in process `syz.7.98288'. [ 3185.779034][T14833] netlink: 68 bytes leftover after parsing attributes in process `syz.7.98299'. [ 3185.910584][T14845] netlink: 68 bytes leftover after parsing attributes in process `syz.4.98294'. [ 3186.768635][T14899] netlink: 68 bytes leftover after parsing attributes in process `syz.0.98323'. [ 3187.255782][T14941] netlink: 'syz.7.98350': attribute type 4 has an invalid length. [ 3187.452764][T14964] netlink: 'syz.4.98360': attribute type 4 has an invalid length. [ 3187.836157][ T7145] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 3188.026650][ T7145] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3188.047535][ T7145] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3188.054181][ T7145] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3188.077254][ T7145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3188.106144][ T7145] usb 5-1: config 0 descriptor?? [ 3188.326544][ T7145] usbhid 5-1:0.0: can't add hid device: -71 [ 3188.332641][ T7145] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3188.366143][ T7145] usb 5-1: USB disconnect, device number 43 [ 3188.863057][T15066] netlink: 'syz.9.98410': attribute type 4 has an invalid length. [ 3189.667431][T15177] netlink: 'syz.4.98462': attribute type 4 has an invalid length. [ 3189.804516][T15198] netlink: 'syz.9.98473': attribute type 4 has an invalid length. [ 3190.015622][T15227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98484'. [ 3190.247156][T15247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98495'. [ 3190.805983][T32015] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 3190.967028][T32015] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3190.985968][T32015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3191.008823][T32015] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3191.025963][T32015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.045611][T32015] usb 5-1: config 0 descriptor?? [ 3191.269656][T32015] usbhid 5-1:0.0: can't add hid device: -71 [ 3191.275721][T32015] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3191.287029][T32015] usb 5-1: USB disconnect, device number 44 [ 3191.445978][ T7145] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 3191.607012][ T7145] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3191.630150][ T7145] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3191.645936][ T7145] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3191.665314][ T7145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.681623][ T7145] usb 8-1: config 0 descriptor?? [ 3191.932972][T15354] netlink: 'syz.4.98545': attribute type 4 has an invalid length. [ 3192.059182][T15373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.98554'. [ 3192.104008][ T7145] wacom 0003:056A:032C.000C: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.7-1/input0 [ 3192.606003][T15435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.98585'. [ 3192.837660][T12879] usb 8-1: USB disconnect, device number 37 [ 3192.946548][ T7145] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 3193.118789][ T7145] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3193.142118][ T7145] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3193.150409][ T7145] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3193.164938][ T7145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3193.174948][ T7145] usb 5-1: config 0 descriptor?? [ 3193.586358][ T7145] wacom 0003:056A:032C.000D: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 3194.366055][ T3766] usb 5-1: USB disconnect, device number 45 [ 3194.828735][T15610] netlink: 'syz.9.98665': attribute type 4 has an invalid length. [ 3195.135913][T15638] netlink: 'syz.0.98682': attribute type 4 has an invalid length. [ 3195.240837][T15644] netlink: 'syz.0.98685': attribute type 8 has an invalid length. [ 3195.258897][T15644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98685'. [ 3195.401775][T15648] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98687'. [ 3196.275689][T12879] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 3196.446684][T12879] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3196.469902][T12879] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3196.485680][T12879] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3196.505273][T12879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3196.524465][T12879] usb 10-1: config 0 descriptor?? [ 3196.732709][T12879] usbhid 10-1:0.0: can't add hid device: -71 [ 3196.744044][T12879] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3196.766652][T12879] usb 10-1: USB disconnect, device number 35 [ 3198.119311][T15783] netlink: 'syz.4.98749': attribute type 4 has an invalid length. [ 3198.177690][T15790] netlink: 60 bytes leftover after parsing attributes in process `syz.9.98756'. [ 3198.229966][T15795] netlink: 60 bytes leftover after parsing attributes in process `syz.9.98758'. [ 3198.557964][T15823] netlink: 'syz.0.98764': attribute type 4 has an invalid length. [ 3198.582525][T15828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98775'. [ 3199.456952][T15883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98802'. [ 3199.836500][T15924] netlink: 'syz.9.98820': attribute type 8 has an invalid length. [ 3199.845587][T15926] netlink: 'syz.0.98821': attribute type 4 has an invalid length. [ 3199.875494][T15924] netlink: 60 bytes leftover after parsing attributes in process `syz.9.98820'. [ 3200.176821][T15945] netlink: 'syz.9.98831': attribute type 4 has an invalid length. [ 3200.465606][T15970] netlink: 'syz.4.98842': attribute type 4 has an invalid length. [ 3200.596486][T15981] netlink: 60 bytes leftover after parsing attributes in process `syz.9.98849'. [ 3200.615275][T15983] netlink: 'syz.4.98847': attribute type 8 has an invalid length. [ 3200.655495][T15983] netlink: 60 bytes leftover after parsing attributes in process `syz.4.98847'. [ 3201.700978][T16041] netlink: 60 bytes leftover after parsing attributes in process `syz.9.98875'. [ 3202.018210][T16062] netlink: 60 bytes leftover after parsing attributes in process `syz.7.98881'. [ 3202.135360][T20056] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 3202.205628][T12879] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 3202.240980][T16098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.98902'. [ 3202.286470][T20056] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3202.315354][T20056] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3202.325345][T20056] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3202.345016][T20056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3202.364667][T20056] usb 10-1: config 0 descriptor?? [ 3202.374188][T12879] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3202.405330][T12879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3202.415329][T12879] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3202.434809][T12879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3202.453910][T12879] usb 1-1: config 0 descriptor?? [ 3202.599687][T20056] usbhid 10-1:0.0: can't add hid device: -71 [ 3202.607986][T20056] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3202.628307][T20056] usb 10-1: USB disconnect, device number 36 [ 3202.839732][T16132] netlink: 'syz.7.98919': attribute type 8 has an invalid length. [ 3202.847619][T16132] netlink: 60 bytes leftover after parsing attributes in process `syz.7.98919'. [ 3202.869272][T12879] wacom 0003:056A:032C.000E: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.0-1/input0 [ 3202.921703][T16147] netlink: 'syz.7.98924': attribute type 8 has an invalid length. [ 3202.929601][T16147] netlink: 60 bytes leftover after parsing attributes in process `syz.7.98924'. [ 3202.951464][T16153] netlink: 60 bytes leftover after parsing attributes in process `syz.7.98928'. [ 3202.974799][T16157] netlink: 'syz.7.98930': attribute type 8 has an invalid length. [ 3202.982960][T16157] netlink: 60 bytes leftover after parsing attributes in process `syz.7.98930'. [ 3203.050002][T16175] netlink: 60 bytes leftover after parsing attributes in process `syz.7.98939'. [ 3203.076668][T16177] netlink: 'syz.7.98940': attribute type 4 has an invalid length. [ 3203.118572][T16183] netlink: 'syz.9.98943': attribute type 8 has an invalid length. [ 3203.615574][ T3766] usb 1-1: USB disconnect, device number 38 [ 3205.517244][T16437] validate_nla: 6 callbacks suppressed [ 3205.517266][T16437] netlink: 'syz.7.99064': attribute type 8 has an invalid length. [ 3205.632112][T16453] netlink: 'syz.7.99071': attribute type 8 has an invalid length. [ 3205.653559][T16453] __nla_validate_parse: 14 callbacks suppressed [ 3205.653580][T16453] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99071'. [ 3205.956853][T16489] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99088'. [ 3206.556098][T16532] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99109'. [ 3206.893751][T16557] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99121'. [ 3207.086711][T16578] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99130'. [ 3207.288319][T16599] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99141'. [ 3207.381664][T16611] netlink: 'syz.9.99147': attribute type 4 has an invalid length. [ 3207.515811][T16626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99153'. [ 3208.977639][T16695] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99186'. [ 3209.159192][T16716] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99198'. [ 3209.233367][T16726] netlink: 'syz.7.99203': attribute type 4 has an invalid length. [ 3209.426345][T16760] netlink: 'syz.7.99218': attribute type 8 has an invalid length. [ 3209.444932][T16760] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99218'. [ 3209.704963][T20056] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 3209.866287][T20056] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3209.889387][T20056] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3209.909657][T20056] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3209.941749][T20056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.961410][T20056] usb 1-1: config 0 descriptor?? [ 3210.186358][T20056] usbhid 1-1:0.0: can't add hid device: -71 [ 3210.200779][T20056] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3210.218183][T20056] usb 1-1: USB disconnect, device number 39 [ 3210.347341][T16820] netlink: 'syz.9.99249': attribute type 8 has an invalid length. [ 3210.817427][T16878] netlink: 'syz.4.99276': attribute type 4 has an invalid length. [ 3211.105635][T16905] __nla_validate_parse: 1 callbacks suppressed [ 3211.105658][T16905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99288'. [ 3211.106820][T16904] netlink: 'syz.9.99287': attribute type 4 has an invalid length. [ 3211.246536][T16913] netlink: 'syz.9.99293': attribute type 8 has an invalid length. [ 3211.262169][T16913] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99293'. [ 3211.392505][T16924] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99297'. [ 3211.474517][T16934] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99302'. [ 3211.564879][T16943] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99306'. [ 3211.714934][T16955] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99312'. [ 3211.807463][T16959] netlink: 'syz.9.99315': attribute type 4 has an invalid length. [ 3211.895272][T32015] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 3211.963511][T16973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99321'. [ 3212.045882][T32015] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3212.064337][T32015] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3212.071351][T32015] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3212.081465][T32015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.094630][T32015] usb 8-1: config 0 descriptor?? [ 3212.111039][ T36] audit: type=1400 audit(2000000168.289:689): avc: denied { mounton } for pid=17001 comm="syz.0.99335" path="/432/file0" dev="tmpfs" ino=2626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3212.515360][T32015] wacom 0003:056A:032C.000F: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.7-1/input0 [ 3213.004748][T32015] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 3213.064189][T17064] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 3213.087802][T17067] netlink: 'syz.0.99365': attribute type 4 has an invalid length. [ 3213.123894][T17071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99367'. [ 3213.147627][T17073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99368'. [ 3213.165779][T32015] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3213.194736][T32015] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3213.201578][T32015] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3213.220896][T32015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3213.236622][T32015] usb 10-1: config 0 descriptor?? [ 3213.265978][ T3766] usb 8-1: USB disconnect, device number 38 [ 3213.333142][T17081] FAULT_INJECTION: forcing a failure. [ 3213.333142][T17081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3213.347603][T17081] CPU: 0 UID: 0 PID: 17081 Comm: syz.7.99372 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3213.347639][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3213.347651][T17081] Call Trace: [ 3213.347659][T17081] [ 3213.347668][T17081] __dump_stack+0x21/0x30 [ 3213.347699][T17081] dump_stack_lvl+0x10c/0x190 [ 3213.347722][T17081] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3213.347747][T17081] ? check_stack_object+0x12c/0x140 [ 3213.347766][T17081] dump_stack+0x19/0x20 [ 3213.347789][T17081] should_fail_ex+0x3d9/0x530 [ 3213.347808][T17081] should_fail+0xf/0x20 [ 3213.347826][T17081] should_fail_usercopy+0x1e/0x30 [ 3213.347846][T17081] _copy_to_user+0x24/0xa0 [ 3213.347868][T17081] simple_read_from_buffer+0xed/0x160 [ 3213.347892][T17081] proc_fail_nth_read+0x19e/0x210 [ 3213.347916][T17081] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3213.347939][T17081] ? bpf_lsm_file_permission+0xd/0x20 [ 3213.347963][T17081] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3213.347986][T17081] vfs_read+0x27d/0xc70 [ 3213.348004][T17081] ? ip_setsockopt+0xa7/0x100 [ 3213.348029][T17081] ? __cfi_vfs_read+0x10/0x10 [ 3213.348045][T17081] ? __kasan_check_write+0x18/0x20 [ 3213.348070][T17081] ? mutex_lock+0x92/0x1c0 [ 3213.348088][T17081] ? __cfi_mutex_lock+0x10/0x10 [ 3213.348105][T17081] ? __fget_files+0x2c5/0x340 [ 3213.348127][T17081] ksys_read+0x141/0x250 [ 3213.348144][T17081] ? __cfi_ksys_read+0x10/0x10 [ 3213.348161][T17081] ? __kasan_check_write+0x18/0x20 [ 3213.348186][T17081] ? __kasan_check_read+0x15/0x20 [ 3213.348211][T17081] __x64_sys_read+0x7f/0x90 [ 3213.348228][T17081] x64_sys_call+0x2638/0x2ee0 [ 3213.348254][T17081] do_syscall_64+0x58/0xf0 [ 3213.348277][T17081] ? clear_bhb_loop+0x50/0xa0 [ 3213.348303][T17081] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3213.348322][T17081] RIP: 0033:0x7ffae718e0dc [ 3213.348340][T17081] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3213.348356][T17081] RSP: 002b:00007ffae8072030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3213.348377][T17081] RAX: ffffffffffffffda RBX: 00007ffae73e5fa0 RCX: 00007ffae718e0dc [ 3213.348393][T17081] RDX: 000000000000000f RSI: 00007ffae80720a0 RDI: 0000000000000007 [ 3213.348406][T17081] RBP: 00007ffae8072090 R08: 0000000000000000 R09: 0000000000000000 [ 3213.348427][T17081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3213.348440][T17081] R13: 00007ffae73e6038 R14: 00007ffae73e5fa0 R15: 00007ffe3d36fc18 [ 3213.348457][T17081] [ 3213.646310][T32015] usbhid 10-1:0.0: can't add hid device: -71 [ 3213.652414][T32015] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3213.661262][T32015] usb 10-1: USB disconnect, device number 37 [ 3213.821990][T17093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99379'. [ 3214.453115][T17109] FAULT_INJECTION: forcing a failure. [ 3214.453115][T17109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3214.476444][T17109] CPU: 0 UID: 0 PID: 17109 Comm: syz.7.99386 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3214.476479][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3214.476491][T17109] Call Trace: [ 3214.476498][T17109] [ 3214.476506][T17109] __dump_stack+0x21/0x30 [ 3214.476535][T17109] dump_stack_lvl+0x10c/0x190 [ 3214.476559][T17109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3214.476583][T17109] ? check_stack_object+0x12c/0x140 [ 3214.476602][T17109] dump_stack+0x19/0x20 [ 3214.476624][T17109] should_fail_ex+0x3d9/0x530 [ 3214.476644][T17109] should_fail+0xf/0x20 [ 3214.476661][T17109] should_fail_usercopy+0x1e/0x30 [ 3214.476681][T17109] _copy_to_user+0x24/0xa0 [ 3214.476704][T17109] simple_read_from_buffer+0xed/0x160 [ 3214.476727][T17109] proc_fail_nth_read+0x19e/0x210 [ 3214.476751][T17109] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3214.476774][T17109] ? bpf_lsm_file_permission+0xd/0x20 [ 3214.476797][T17109] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3214.476820][T17109] vfs_read+0x27d/0xc70 [ 3214.476837][T17109] ? __cfi_vfs_read+0x10/0x10 [ 3214.476853][T17109] ? __kasan_check_write+0x18/0x20 [ 3214.476878][T17109] ? mutex_lock+0x92/0x1c0 [ 3214.476896][T17109] ? __cfi_mutex_lock+0x10/0x10 [ 3214.476912][T17109] ? __fget_files+0x2c5/0x340 [ 3214.476934][T17109] ksys_read+0x141/0x250 [ 3214.476950][T17109] ? __cfi_ksys_read+0x10/0x10 [ 3214.476967][T17109] ? __kasan_check_read+0x15/0x20 [ 3214.476992][T17109] __x64_sys_read+0x7f/0x90 [ 3214.477010][T17109] x64_sys_call+0x2638/0x2ee0 [ 3214.477034][T17109] do_syscall_64+0x58/0xf0 [ 3214.477064][T17109] ? clear_bhb_loop+0x50/0xa0 [ 3214.477084][T17109] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3214.477104][T17109] RIP: 0033:0x7ffae718e0dc [ 3214.477121][T17109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3214.477137][T17109] RSP: 002b:00007ffae8072030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3214.477159][T17109] RAX: ffffffffffffffda RBX: 00007ffae73e5fa0 RCX: 00007ffae718e0dc [ 3214.477174][T17109] RDX: 000000000000000f RSI: 00007ffae80720a0 RDI: 000000000000000b [ 3214.477188][T17109] RBP: 00007ffae8072090 R08: 0000000000000000 R09: 0000000000000000 [ 3214.477201][T17109] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3214.477214][T17109] R13: 00007ffae73e6038 R14: 00007ffae73e5fa0 R15: 00007ffe3d36fc18 [ 3214.477231][T17109] [ 3215.008094][T17140] netlink: 'syz.0.99401': attribute type 8 has an invalid length. [ 3215.027677][T17142] netlink: 'syz.9.99402': attribute type 8 has an invalid length. [ 3215.101655][T17154] netlink: 'syz.9.99407': attribute type 4 has an invalid length. [ 3215.112621][T17154] netlink: 'syz.9.99407': attribute type 5 has an invalid length. [ 3215.162415][T17162] netlink: 'syz.0.99412': attribute type 8 has an invalid length. [ 3215.407898][T17206] FAULT_INJECTION: forcing a failure. [ 3215.407898][T17206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3215.422491][T17206] CPU: 0 UID: 0 PID: 17206 Comm: syz.9.99433 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3215.422524][T17206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3215.422535][T17206] Call Trace: [ 3215.422542][T17206] [ 3215.422549][T17206] __dump_stack+0x21/0x30 [ 3215.422578][T17206] dump_stack_lvl+0x10c/0x190 [ 3215.422600][T17206] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3215.422624][T17206] ? check_stack_object+0x12c/0x140 [ 3215.422642][T17206] dump_stack+0x19/0x20 [ 3215.422664][T17206] should_fail_ex+0x3d9/0x530 [ 3215.422683][T17206] should_fail+0xf/0x20 [ 3215.422699][T17206] should_fail_usercopy+0x1e/0x30 [ 3215.422719][T17206] _copy_to_user+0x24/0xa0 [ 3215.422741][T17206] simple_read_from_buffer+0xed/0x160 [ 3215.422764][T17206] proc_fail_nth_read+0x19e/0x210 [ 3215.422787][T17206] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3215.422810][T17206] ? bpf_lsm_file_permission+0xd/0x20 [ 3215.422834][T17206] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3215.422857][T17206] vfs_read+0x27d/0xc70 [ 3215.422873][T17206] ? __cfi_vfs_read+0x10/0x10 [ 3215.422889][T17206] ? __kasan_check_write+0x18/0x20 [ 3215.422915][T17206] ? mutex_lock+0x92/0x1c0 [ 3215.422933][T17206] ? __cfi_mutex_lock+0x10/0x10 [ 3215.422950][T17206] ? __fget_files+0x2c5/0x340 [ 3215.422970][T17206] ksys_read+0x141/0x250 [ 3215.422987][T17206] ? __cfi_ksys_read+0x10/0x10 [ 3215.423005][T17206] ? __kasan_check_read+0x15/0x20 [ 3215.423030][T17206] __x64_sys_read+0x7f/0x90 [ 3215.423054][T17206] x64_sys_call+0x2638/0x2ee0 [ 3215.423088][T17206] do_syscall_64+0x58/0xf0 [ 3215.423110][T17206] ? clear_bhb_loop+0x50/0xa0 [ 3215.423129][T17206] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3215.423148][T17206] RIP: 0033:0x7f3fbc38e0dc [ 3215.423164][T17206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3215.423180][T17206] RSP: 002b:00007f3fbd235030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3215.423200][T17206] RAX: ffffffffffffffda RBX: 00007f3fbc5e5fa0 RCX: 00007f3fbc38e0dc [ 3215.423220][T17206] RDX: 000000000000000f RSI: 00007f3fbd2350a0 RDI: 000000000000000c [ 3215.423233][T17206] RBP: 00007f3fbd235090 R08: 0000000000000000 R09: 0000000000000000 [ 3215.423246][T17206] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 3215.423258][T17206] R13: 00007f3fbc5e6038 R14: 00007f3fbc5e5fa0 R15: 00007ffd4ae7d848 [ 3215.423273][T17206] [ 3215.794575][T21908] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 3215.884119][T17243] validate_nla: 5 callbacks suppressed [ 3215.884138][T17243] netlink: 'syz.4.99446': attribute type 8 has an invalid length. [ 3215.914164][ T36] audit: type=1400 audit(2000000172.089:690): avc: denied { execute_no_trans } for pid=17244 comm="syz.4.99451" path="/358/file0" dev="tmpfs" ino=2176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3215.964618][T17249] netlink: 'syz.0.99454': attribute type 4 has an invalid length. [ 3215.972706][T17249] netlink: 'syz.0.99454': attribute type 5 has an invalid length. [ 3215.982040][T21908] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3216.004810][T21908] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3216.014817][T21908] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3216.023885][T21908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3216.055245][T21908] usb 8-1: config 0 descriptor?? [ 3216.185504][T17272] __nla_validate_parse: 19 callbacks suppressed [ 3216.185526][T17272] netlink: 40 bytes leftover after parsing attributes in process `syz.9.99464'. [ 3216.264494][T21908] usbhid 8-1:0.0: can't add hid device: -71 [ 3216.270706][T21908] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3216.293572][T21908] usb 8-1: USB disconnect, device number 39 [ 3216.339933][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99472'. [ 3216.376753][T17292] netlink: 'syz.9.99474': attribute type 8 has an invalid length. [ 3216.384925][T17292] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99474'. [ 3216.519149][T17309] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99483'. [ 3216.817464][T17330] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99492'. [ 3217.314929][T17368] netlink: 'syz.0.99511': attribute type 4 has an invalid length. [ 3217.318778][T17370] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99501'. [ 3217.406990][T17382] netlink: 'syz.0.99517': attribute type 8 has an invalid length. [ 3217.414969][T17382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99517'. [ 3217.438677][T17384] netlink: 'syz.0.99518': attribute type 4 has an invalid length. [ 3217.446733][T17384] netlink: 'syz.0.99518': attribute type 5 has an invalid length. [ 3217.454826][T17384] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.99518'. [ 3217.509510][T17390] netlink: 'syz.0.99522': attribute type 4 has an invalid length. [ 3217.531132][T17392] netlink: 'syz.0.99523': attribute type 8 has an invalid length. [ 3217.539099][T17392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99523'. [ 3217.562378][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99524'. [ 3217.624506][T21908] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 3217.775559][T21908] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3217.798759][T21908] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3217.814608][T21908] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3217.834067][T21908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3217.853113][T21908] usb 10-1: config 0 descriptor?? [ 3218.228823][T17433] 9pnet_fd: Insufficient options for proto=fd [ 3218.266253][T21908] wacom 0003:056A:032C.0010: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.9-1/input0 [ 3219.034546][T12879] usb 10-1: USB disconnect, device number 38 [ 3219.214399][T21908] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 3219.385425][T21908] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3219.419435][T21908] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3219.434383][T21908] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3219.453631][T21908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3219.474634][T21908] usb 8-1: config 0 descriptor?? [ 3219.884659][T21908] wacom 0003:056A:032C.0011: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.7-1/input0 [ 3220.035412][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 3220.045439][T17758] bridge_slave_0 (unregistering): left allmulticast mode [ 3220.052553][T17758] bridge_slave_0 (unregistering): left promiscuous mode [ 3220.059880][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 3220.144359][ T45] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 3220.295423][ T45] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3220.308899][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3220.315810][ T45] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3220.325136][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3220.334836][ T45] usb 10-1: config 0 descriptor?? [ 3220.609785][ T3766] usb 8-1: USB disconnect, device number 40 [ 3220.745222][ T45] wacom 0003:056A:032C.0012: hidraw0: USB HID v1.01 Device [HID 056a:032c] on usb-dummy_hcd.9-1/input0 [ 3220.943717][T32015] usb 10-1: USB disconnect, device number 39 [ 3221.007975][T17832] validate_nla: 18 callbacks suppressed [ 3221.007998][T17832] netlink: 'syz.7.99638': attribute type 8 has an invalid length. [ 3221.918590][T17931] netlink: 'syz.0.99674': attribute type 8 has an invalid length. [ 3221.936795][T17931] __nla_validate_parse: 23 callbacks suppressed [ 3221.936819][T17931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99674'. [ 3221.976760][T17934] netlink: 'syz.4.99686': attribute type 4 has an invalid length. [ 3221.994345][T17934] netlink: 'syz.4.99686': attribute type 5 has an invalid length. [ 3222.004249][T17934] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.99686'. [ 3222.117493][T17942] netlink: 'syz.4.99690': attribute type 4 has an invalid length. [ 3222.134424][T17942] netlink: 'syz.4.99690': attribute type 5 has an invalid length. [ 3222.142802][T17944] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 3222.152479][T17942] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.99690'. [ 3222.221873][T18048] netlink: 'syz.4.99693': attribute type 4 has an invalid length. [ 3222.240064][T18048] netlink: 'syz.4.99693': attribute type 5 has an invalid length. [ 3222.254259][T18048] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.99693'. [ 3222.335495][T18052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99695'. [ 3222.385578][T18054] netlink: 'syz.4.99697': attribute type 4 has an invalid length. [ 3222.403700][T18054] netlink: 'syz.4.99697': attribute type 5 has an invalid length. [ 3222.411828][T18054] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.99697'. [ 3222.630008][T18169] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99704'. [ 3222.666246][T18173] netlink: 60 bytes leftover after parsing attributes in process `syz.7.99706'. [ 3222.686705][T18176] netlink: 60 bytes leftover after parsing attributes in process `syz.9.99698'. [ 3222.742668][T18187] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.99711'. [ 3222.864767][T18202] binder: Unknown parameter 'ma' [ 3223.025894][T18231] FAULT_INJECTION: forcing a failure. [ 3223.025894][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 3223.039002][T18229] overlayfs: regular lower layers cannot follow data lower layers [ 3223.047086][T18231] CPU: 1 UID: 0 PID: 18231 Comm: syz.0.99733 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3223.047119][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3223.047130][T18231] Call Trace: [ 3223.047136][T18231] [ 3223.047144][T18231] __dump_stack+0x21/0x30 [ 3223.047172][T18231] dump_stack_lvl+0x10c/0x190 [ 3223.047194][T18231] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3223.047218][T18231] ? proc_fail_nth_write+0x17e/0x210 [ 3223.047242][T18231] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3223.047266][T18231] dump_stack+0x19/0x20 [ 3223.047287][T18231] should_fail_ex+0x3d9/0x530 [ 3223.047307][T18231] should_failslab+0xac/0x100 [ 3223.047327][T18231] kmem_cache_alloc_noprof+0x42/0x430 [ 3223.047345][T18231] ? getname_flags+0xc6/0x710 [ 3223.047365][T18231] getname_flags+0xc6/0x710 [ 3223.047382][T18231] ? __fget_files+0x2c5/0x340 [ 3223.047403][T18231] user_path_at+0x2b/0x60 [ 3223.047423][T18231] __se_sys_mount+0x288/0x480 [ 3223.047441][T18231] ? ksys_write+0x1ef/0x250 [ 3223.047458][T18231] ? __x64_sys_mount+0xf0/0xf0 [ 3223.047477][T18231] __x64_sys_mount+0xc3/0xf0 [ 3223.047494][T18231] x64_sys_call+0x2021/0x2ee0 [ 3223.047519][T18231] do_syscall_64+0x58/0xf0 [ 3223.047542][T18231] ? clear_bhb_loop+0x50/0xa0 [ 3223.047562][T18231] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3223.047581][T18231] RIP: 0033:0x7f393af8f6c9 [ 3223.047598][T18231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3223.047614][T18231] RSP: 002b:00007f393bd59038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3223.047635][T18231] RAX: ffffffffffffffda RBX: 00007f393b1e5fa0 RCX: 00007f393af8f6c9 [ 3223.047650][T18231] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 3223.047663][T18231] RBP: 00007f393bd59090 R08: 0000000000000000 R09: 0000000000000000 [ 3223.047675][T18231] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 3223.047687][T18231] R13: 00007f393b1e6038 R14: 00007f393b1e5fa0 R15: 00007fff36d81e88 [ 3223.047704][T18231] [ 3223.397093][T18357] binder: Unknown parameter 'ma' [ 3223.493345][T18481] binder: Bad value for 'max' [ 3223.799708][T18644] binder: Bad value for 'max' [ 3224.300929][T18696] binder: Bad value for 'max' [ 3224.622460][T18933] FAULT_INJECTION: forcing a failure. [ 3224.622460][T18933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3224.635856][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.9.99835 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3224.635890][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3224.635902][T18933] Call Trace: [ 3224.635909][T18933] [ 3224.635916][T18933] __dump_stack+0x21/0x30 [ 3224.635947][T18933] dump_stack_lvl+0x10c/0x190 [ 3224.635969][T18933] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3224.635992][T18933] ? check_stack_object+0x12c/0x140 [ 3224.636011][T18933] dump_stack+0x19/0x20 [ 3224.636032][T18933] should_fail_ex+0x3d9/0x530 [ 3224.636057][T18933] should_fail+0xf/0x20 [ 3224.636075][T18933] should_fail_usercopy+0x1e/0x30 [ 3224.636093][T18933] _copy_to_user+0x24/0xa0 [ 3224.636122][T18933] simple_read_from_buffer+0xed/0x160 [ 3224.636145][T18933] proc_fail_nth_read+0x19e/0x210 [ 3224.636174][T18933] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3224.636209][T18933] ? bpf_lsm_file_permission+0xd/0x20 [ 3224.636233][T18933] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3224.636253][T18933] vfs_read+0x27d/0xc70 [ 3224.636268][T18933] ? __cfi_vfs_read+0x10/0x10 [ 3224.636283][T18933] ? __kasan_check_write+0x18/0x20 [ 3224.636312][T18933] ? mutex_lock+0x92/0x1c0 [ 3224.636328][T18933] ? __cfi_mutex_lock+0x10/0x10 [ 3224.636344][T18933] ? __fget_files+0x2c5/0x340 [ 3224.636365][T18933] ksys_read+0x141/0x250 [ 3224.636382][T18933] ? __cfi_ksys_read+0x10/0x10 [ 3224.636399][T18933] ? __kasan_check_read+0x15/0x20 [ 3224.636425][T18933] __x64_sys_read+0x7f/0x90 [ 3224.636442][T18933] x64_sys_call+0x2638/0x2ee0 [ 3224.636465][T18933] do_syscall_64+0x58/0xf0 [ 3224.636485][T18933] ? clear_bhb_loop+0x50/0xa0 [ 3224.636505][T18933] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3224.636523][T18933] RIP: 0033:0x7f3fbc38e0dc [ 3224.636538][T18933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3224.636553][T18933] RSP: 002b:00007f3fbd235030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3224.636579][T18933] RAX: ffffffffffffffda RBX: 00007f3fbc5e5fa0 RCX: 00007f3fbc38e0dc [ 3224.636593][T18933] RDX: 000000000000000f RSI: 00007f3fbd2350a0 RDI: 0000000000000007 [ 3224.636605][T18933] RBP: 00007f3fbd235090 R08: 0000000000000000 R09: 0000000000000000 [ 3224.636617][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3224.636628][T18933] R13: 00007f3fbc5e6038 R14: 00007f3fbc5e5fa0 R15: 00007ffd4ae7d848 [ 3224.636645][T18933] [ 3224.954767][T18954] binder: Bad value for 'max' [ 3225.651142][T19085] FAULT_INJECTION: forcing a failure. [ 3225.651142][T19085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3225.675219][T19085] CPU: 1 UID: 0 PID: 19085 Comm: syz.9.99859 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3225.675254][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3225.675266][T19085] Call Trace: [ 3225.675273][T19085] [ 3225.675282][T19085] __dump_stack+0x21/0x30 [ 3225.675311][T19085] dump_stack_lvl+0x10c/0x190 [ 3225.675335][T19085] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3225.675359][T19085] ? do_vfs_ioctl+0xeda/0x1e30 [ 3225.675382][T19085] dump_stack+0x19/0x20 [ 3225.675405][T19085] should_fail_ex+0x3d9/0x530 [ 3225.675424][T19085] should_fail+0xf/0x20 [ 3225.675442][T19085] should_fail_usercopy+0x1e/0x30 [ 3225.675462][T19085] _copy_from_user+0x22/0xb0 [ 3225.675485][T19085] kvm_vm_ioctl+0x305/0xb80 [ 3225.675509][T19085] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 3225.675533][T19085] ? ioctl_has_perm+0x1aa/0x4d0 [ 3225.675554][T19085] ? __asan_memcpy+0x5a/0x80 [ 3225.675572][T19085] ? ioctl_has_perm+0x3e0/0x4d0 [ 3225.675593][T19085] ? has_cap_mac_admin+0xd0/0xd0 [ 3225.675615][T19085] ? proc_fail_nth_write+0x17e/0x210 [ 3225.675639][T19085] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3225.675663][T19085] ? selinux_file_ioctl+0x6e0/0x1360 [ 3225.675684][T19085] ? vfs_write+0x93e/0xf30 [ 3225.675701][T19085] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 3225.675721][T19085] ? __cfi_vfs_write+0x10/0x10 [ 3225.675738][T19085] ? __kasan_check_write+0x18/0x20 [ 3225.675763][T19085] ? mutex_unlock+0x8b/0x240 [ 3225.675781][T19085] ? __cfi_mutex_unlock+0x10/0x10 [ 3225.675798][T19085] ? __fget_files+0x2c5/0x340 [ 3225.675818][T19085] ? __fget_files+0x2c5/0x340 [ 3225.675838][T19085] ? bpf_lsm_file_ioctl+0xd/0x20 [ 3225.675862][T19085] ? security_file_ioctl+0x34/0xd0 [ 3225.675882][T19085] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 3225.675906][T19085] __se_sys_ioctl+0x135/0x1b0 [ 3225.675926][T19085] __x64_sys_ioctl+0x7f/0xa0 [ 3225.675945][T19085] x64_sys_call+0x1878/0x2ee0 [ 3225.675977][T19085] do_syscall_64+0x58/0xf0 [ 3225.676000][T19085] ? clear_bhb_loop+0x50/0xa0 [ 3225.676020][T19085] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3225.676039][T19085] RIP: 0033:0x7f3fbc38f6c9 [ 3225.676056][T19085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3225.676072][T19085] RSP: 002b:00007f3fbd235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3225.676094][T19085] RAX: ffffffffffffffda RBX: 00007f3fbc5e5fa0 RCX: 00007f3fbc38f6c9 [ 3225.676109][T19085] RDX: 0000200000000140 RSI: 00000000c00caee0 RDI: 000000000000000a [ 3225.676122][T19085] RBP: 00007f3fbd235090 R08: 0000000000000000 R09: 0000000000000000 [ 3225.676134][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3225.676146][T19085] R13: 00007f3fbc5e6038 R14: 00007f3fbc5e5fa0 R15: 00007ffd4ae7d848 [ 3225.676163][T19085] [ 3226.054865][T19096] validate_nla: 29 callbacks suppressed [ 3226.054888][T19096] netlink: 'syz.7.99865': attribute type 8 has an invalid length. [ 3226.078800][T19098] netlink: 'syz.0.99864': attribute type 8 has an invalid length. [ 3226.225435][T19211] FAULT_INJECTION: forcing a failure. [ 3226.225435][T19211] name failslab, interval 1, probability 0, space 0, times 0 [ 3226.260712][T19211] CPU: 0 UID: 0 PID: 19211 Comm: syz.7.99869 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3226.260746][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3226.260759][T19211] Call Trace: [ 3226.260766][T19211] [ 3226.260774][T19211] __dump_stack+0x21/0x30 [ 3226.260803][T19211] dump_stack_lvl+0x10c/0x190 [ 3226.260827][T19211] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3226.260852][T19211] dump_stack+0x19/0x20 [ 3226.260874][T19211] should_fail_ex+0x3d9/0x530 [ 3226.260894][T19211] should_failslab+0xac/0x100 [ 3226.260922][T19211] kmem_cache_alloc_node_noprof+0x45/0x440 [ 3226.260941][T19211] ? dup_task_struct+0xbc/0xc50 [ 3226.260962][T19211] dup_task_struct+0xbc/0xc50 [ 3226.260984][T19211] ? copy_process+0x3220/0x3220 [ 3226.261004][T19211] ? __kasan_check_write+0x18/0x20 [ 3226.261032][T19211] copy_process+0x538/0x3220 [ 3226.261055][T19211] ? __cfi_copy_process+0x10/0x10 [ 3226.261076][T19211] ? proc_fail_nth_write+0x17e/0x210 [ 3226.261101][T19211] kernel_clone+0x23f/0x830 [ 3226.261124][T19211] ? __cfi_kernel_clone+0x10/0x10 [ 3226.261147][T19211] __x64_sys_clone+0x18c/0x1f0 [ 3226.261169][T19211] ? __cfi___x64_sys_clone+0x10/0x10 [ 3226.261194][T19211] ? __kasan_check_read+0x15/0x20 [ 3226.261220][T19211] x64_sys_call+0x2b3c/0x2ee0 [ 3226.261245][T19211] do_syscall_64+0x58/0xf0 [ 3226.261268][T19211] ? clear_bhb_loop+0x50/0xa0 [ 3226.261288][T19211] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3226.261308][T19211] RIP: 0033:0x7ffae718f6c9 [ 3226.261324][T19211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3226.261341][T19211] RSP: 002b:00007ffae8071fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3226.261362][T19211] RAX: ffffffffffffffda RBX: 00007ffae73e5fa0 RCX: 00007ffae718f6c9 [ 3226.261378][T19211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080020000 [ 3226.261391][T19211] RBP: 00007ffae8072090 R08: 0000000000000000 R09: 0000000000000000 [ 3226.261403][T19211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 3226.261416][T19211] R13: 00007ffae73e6038 R14: 00007ffae73e5fa0 R15: 00007ffe3d36fc18 [ 3226.261433][T19211] [ 3226.467539][T19220] FAULT_INJECTION: forcing a failure. [ 3226.467539][T19220] name failslab, interval 1, probability 0, space 0, times 0 [ 3226.492375][T19220] CPU: 1 UID: 0 PID: 19220 Comm: syz.9.99875 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3226.492407][T19220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3226.492419][T19220] Call Trace: [ 3226.492426][T19220] [ 3226.492434][T19220] __dump_stack+0x21/0x30 [ 3226.492463][T19220] dump_stack_lvl+0x10c/0x190 [ 3226.492486][T19220] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3226.492510][T19220] dump_stack+0x19/0x20 [ 3226.492532][T19220] should_fail_ex+0x3d9/0x530 [ 3226.492550][T19220] should_failslab+0xac/0x100 [ 3226.492568][T19220] kmem_cache_alloc_node_noprof+0x45/0x440 [ 3226.492584][T19220] ? dup_task_struct+0xbc/0xc50 [ 3226.492602][T19220] dup_task_struct+0xbc/0xc50 [ 3226.492621][T19220] ? copy_process+0x3220/0x3220 [ 3226.492639][T19220] ? __kasan_check_write+0x18/0x20 [ 3226.492661][T19220] copy_process+0x538/0x3220 [ 3226.492681][T19220] ? __cfi_copy_process+0x10/0x10 [ 3226.492698][T19220] ? proc_fail_nth_write+0x17e/0x210 [ 3226.492722][T19220] kernel_clone+0x23f/0x830 [ 3226.492741][T19220] ? __cfi_kernel_clone+0x10/0x10 [ 3226.492761][T19220] __x64_sys_clone+0x18c/0x1f0 [ 3226.492780][T19220] ? __cfi___x64_sys_clone+0x10/0x10 [ 3226.492802][T19220] ? __kasan_check_read+0x15/0x20 [ 3226.492826][T19220] x64_sys_call+0x2b3c/0x2ee0 [ 3226.492849][T19220] do_syscall_64+0x58/0xf0 [ 3226.492871][T19220] ? clear_bhb_loop+0x50/0xa0 [ 3226.492890][T19220] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3226.492910][T19220] RIP: 0033:0x7f3fbc38f6c9 [ 3226.492926][T19220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3226.492942][T19220] RSP: 002b:00007f3fbd234fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3226.492972][T19220] RAX: ffffffffffffffda RBX: 00007f3fbc5e5fa0 RCX: 00007f3fbc38f6c9 [ 3226.492987][T19220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080020000 [ 3226.492999][T19220] RBP: 00007f3fbd235090 R08: 0000000000000000 R09: 0000000000000000 [ 3226.493012][T19220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 3226.493023][T19220] R13: 00007f3fbc5e6038 R14: 00007f3fbc5e5fa0 R15: 00007ffd4ae7d848 [ 3226.493039][T19220] [ 3226.883960][T19344] FAULT_INJECTION: forcing a failure. [ 3226.883960][T19344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3226.918636][T19344] CPU: 0 UID: 0 PID: 19344 Comm: syz.9.99887 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3226.918671][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3226.918683][T19344] Call Trace: [ 3226.918690][T19344] [ 3226.918699][T19344] __dump_stack+0x21/0x30 [ 3226.918728][T19344] dump_stack_lvl+0x10c/0x190 [ 3226.918754][T19344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3226.918779][T19344] ? check_stack_object+0x12c/0x140 [ 3226.918798][T19344] dump_stack+0x19/0x20 [ 3226.918820][T19344] should_fail_ex+0x3d9/0x530 [ 3226.918846][T19344] should_fail+0xf/0x20 [ 3226.918864][T19344] should_fail_usercopy+0x1e/0x30 [ 3226.918884][T19344] _copy_to_user+0x24/0xa0 [ 3226.918907][T19344] simple_read_from_buffer+0xed/0x160 [ 3226.918931][T19344] proc_fail_nth_read+0x19e/0x210 [ 3226.918955][T19344] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3226.918978][T19344] ? bpf_lsm_file_permission+0xd/0x20 [ 3226.919003][T19344] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3226.919027][T19344] vfs_read+0x27d/0xc70 [ 3226.919043][T19344] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 3226.919067][T19344] ? __cfi_vfs_read+0x10/0x10 [ 3226.919083][T19344] ? __kasan_check_write+0x18/0x20 [ 3226.919109][T19344] ? mutex_lock+0x92/0x1c0 [ 3226.919126][T19344] ? __cfi_mutex_lock+0x10/0x10 [ 3226.919143][T19344] ? __fget_files+0x2c5/0x340 [ 3226.919165][T19344] ksys_read+0x141/0x250 [ 3226.919182][T19344] ? __cfi_ksys_read+0x10/0x10 [ 3226.919199][T19344] ? __kasan_check_read+0x15/0x20 [ 3226.919227][T19344] __x64_sys_read+0x7f/0x90 [ 3226.919244][T19344] x64_sys_call+0x2638/0x2ee0 [ 3226.919269][T19344] do_syscall_64+0x58/0xf0 [ 3226.919293][T19344] ? clear_bhb_loop+0x50/0xa0 [ 3226.919314][T19344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3226.919333][T19344] RIP: 0033:0x7f3fbc38e0dc [ 3226.919350][T19344] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3226.919367][T19344] RSP: 002b:00007f3fbd235030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3226.919388][T19344] RAX: ffffffffffffffda RBX: 00007f3fbc5e5fa0 RCX: 00007f3fbc38e0dc [ 3226.919403][T19344] RDX: 000000000000000f RSI: 00007f3fbd2350a0 RDI: 0000000000000009 [ 3226.919416][T19344] RBP: 00007f3fbd235090 R08: 0000000000000000 R09: 0000000000000000 [ 3226.919429][T19344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3226.919442][T19344] R13: 00007f3fbc5e6038 R14: 00007f3fbc5e5fa0 R15: 00007ffd4ae7d848 [ 3226.919459][T19344] [ 3227.019789][T19355] __nla_validate_parse: 29 callbacks suppressed [ 3227.019808][T19355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99893'. [ 3227.248435][T19474] FAULT_INJECTION: forcing a failure. [ 3227.248435][T19474] name failslab, interval 1, probability 0, space 0, times 0 [ 3227.261362][T19474] CPU: 0 UID: 0 PID: 19474 Comm: syz.9.99901 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3227.261395][T19474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3227.261407][T19474] Call Trace: [ 3227.261413][T19474] [ 3227.261421][T19474] __dump_stack+0x21/0x30 [ 3227.261449][T19474] dump_stack_lvl+0x10c/0x190 [ 3227.261471][T19474] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3227.261494][T19474] ? __kasan_check_write+0x18/0x20 [ 3227.261519][T19474] ? proc_fail_nth_write+0x17e/0x210 [ 3227.261542][T19474] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 3227.261564][T19474] dump_stack+0x19/0x20 [ 3227.261587][T19474] should_fail_ex+0x3d9/0x530 [ 3227.261606][T19474] should_failslab+0xac/0x100 [ 3227.261626][T19474] kmem_cache_alloc_noprof+0x42/0x430 [ 3227.261643][T19474] ? getname_flags+0xc6/0x710 [ 3227.261662][T19474] getname_flags+0xc6/0x710 [ 3227.261679][T19474] ? build_open_flags+0x487/0x600 [ 3227.261699][T19474] getname+0x1b/0x30 [ 3227.261715][T19474] do_sys_openat2+0xcb/0x1c0 [ 3227.261734][T19474] ? fput+0x1a5/0x240 [ 3227.261754][T19474] ? do_sys_open+0x100/0x100 [ 3227.261775][T19474] ? ksys_write+0x1ef/0x250 [ 3227.261800][T19474] ? __cfi_ksys_write+0x10/0x10 [ 3227.261819][T19474] __x64_sys_openat+0x13a/0x170 [ 3227.261842][T19474] x64_sys_call+0xe69/0x2ee0 [ 3227.261868][T19474] do_syscall_64+0x58/0xf0 [ 3227.261891][T19474] ? clear_bhb_loop+0x50/0xa0 [ 3227.261913][T19474] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3227.261932][T19474] RIP: 0033:0x7f3fbc38f6c9 [ 3227.261950][T19474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3227.261967][T19474] RSP: 002b:00007f3fbd235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3227.261988][T19474] RAX: ffffffffffffffda RBX: 00007f3fbc5e5fa0 RCX: 00007f3fbc38f6c9 [ 3227.262004][T19474] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 3227.262018][T19474] RBP: 00007f3fbd235090 R08: 0000000000000000 R09: 0000000000000000 [ 3227.262030][T19474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3227.262043][T19474] R13: 00007f3fbc5e6038 R14: 00007f3fbc5e5fa0 R15: 00007ffd4ae7d848 [ 3227.262060][T19474] [ 3227.502178][T19576] netlink: 'syz.0.99903': attribute type 4 has an invalid length. [ 3227.518575][T19576] netlink: 'syz.0.99903': attribute type 5 has an invalid length. [ 3227.529009][T19576] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.99903'. [ 3227.599352][T19590] netlink: 'syz.4.99909': attribute type 4 has an invalid length. [ 3227.613932][ T342] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 3227.613978][T19590] netlink: 'syz.4.99909': attribute type 5 has an invalid length. [ 3227.643947][T19590] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.99909'. [ 3227.764931][ T342] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3227.777892][ T342] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3227.788223][ T342] usb 8-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 3227.807466][ T342] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3227.824560][ T342] usb 8-1: config 0 descriptor?? [ 3228.047221][ T342] usbhid 8-1:0.0: can't add hid device: -71 [ 3228.053272][ T342] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3228.076640][ T342] usb 8-1: USB disconnect, device number 41 [ 3228.293701][T19602] netlink: 'syz.9.99916': attribute type 4 has an invalid length. [ 3228.301971][T19602] netlink: 'syz.9.99916': attribute type 5 has an invalid length. [ 3228.310294][T19602] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.99916'. [ 3228.492742][T19618] netlink: 'syz.4.99923': attribute type 8 has an invalid length. [ 3228.508836][T19618] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99923'. [ 3228.643459][T19629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99928'. [ 3228.701561][T19623] bridge0: port 1(bridge_slave_0) entered blocking state [ 3228.711638][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.718828][T19623] bridge_slave_0: entered allmulticast mode [ 3228.725331][T19623] bridge_slave_0: entered promiscuous mode [ 3228.731931][T19623] bridge0: port 2(bridge_slave_1) entered blocking state [ 3228.739067][T19623] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.749001][T19623] bridge_slave_1: entered allmulticast mode [ 3228.755417][T19623] bridge_slave_1: entered promiscuous mode [ 3228.839176][T19643] netlink: 'syz.4.99933': attribute type 8 has an invalid length. [ 3228.858331][T19643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99933'. [ 3228.919412][T19623] bridge0: port 2(bridge_slave_1) entered blocking state [ 3228.926497][T19623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3228.933781][T19623] bridge0: port 1(bridge_slave_0) entered blocking state [ 3228.940862][T19623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3228.984656][T26016] bridge_slave_1: left allmulticast mode [ 3228.990398][T26016] bridge_slave_1: left promiscuous mode [ 3228.998770][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3229.010175][T26016] bridge_slave_0: left allmulticast mode [ 3229.024669][T26016] bridge_slave_0: left promiscuous mode [ 3229.033942][T26016] bridge0: port 1(bridge_slave_0) entered disabled state [ 3229.048879][T19662] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99939'. [ 3229.155987][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 3229.169201][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 3229.187433][T26016] veth1_macvtap: left promiscuous mode [ 3229.203353][T26016] veth0_vlan: left promiscuous mode [ 3229.331050][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3229.338183][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3229.375121][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 3229.382292][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3229.417158][T19623] veth0_vlan: entered promiscuous mode [ 3229.433641][T19623] veth1_macvtap: entered promiscuous mode [ 3229.553817][ T3766] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 3229.566839][T19785] overlayfs: failed to clone upperpath [ 3229.715370][ T3766] usb 10-1: Using ep0 maxpacket: 8 [ 3229.726452][ T3766] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 3229.735954][ T3766] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3229.747442][ T3766] usb 10-1: config 0 has no interface number 0 [ 3229.753811][ T3766] usb 10-1: config 0 interface 20 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3229.767217][ T3766] usb 10-1: config 0 interface 20 has no altsetting 0 [ 3229.777536][ T3766] usb 10-1: New USB device found, idVendor=0421, idProduct=e596, bcdDevice=57.40 [ 3229.793812][ T3766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3229.804231][ T3766] usb 10-1: Product: syz [ 3229.808510][ T3766] usb 10-1: Manufacturer: syz [ 3229.813334][ T3766] usb 10-1: SerialNumber: syz [ 3229.823114][ T3766] usb 10-1: config 0 descriptor?? [ 3229.888918][ T36] audit: type=1400 audit(2000000186.070:691): avc: denied { bind } for pid=19908 comm="syz.4.99961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3230.033243][T21908] usb 10-1: USB disconnect, device number 40 [ 3230.244060][ T36] audit: type=1400 audit(2000000186.430:692): avc: denied { compute_member } for pid=19958 comm="syz.0.99984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3230.271993][T19961] loop5: detected capacity change from 0 to 7 [ 3230.550772][T19989] No source specified [ 3230.860798][T20048] tipc: Started in network mode [ 3230.865753][T20048] tipc: Node identity 7f000001, cluster identity 4711 [ 3230.872537][T20048] tipc: Enabling of bearer rejected, failed to enable media [ 3230.916761][T20057] overlayfs: missing 'workdir' [ 3230.963759][T12879] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 3231.026630][ T36] audit: type=1400 audit(2000000000.630:693): avc: denied { mount } for pid=20068 comm="syz.4.100037" name="/" dev="ramfs" ino=1572308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 3231.049863][ T36] audit: type=1400 audit(2000000000.640:694): avc: denied { execute } for pid=20068 comm="syz.4.100037" path="/file1" dev="ramfs" ino=1572309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 3231.113744][T12879] usb 10-1: Using ep0 maxpacket: 32 [ 3231.123003][T12879] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 3231.134520][T12879] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3231.147434][T12879] usb 10-1: config 0 has no interface number 0 [ 3231.153624][T12879] usb 10-1: config 0 interface 1 has no altsetting 0 [ 3231.164167][T12879] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3231.173426][T12879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3231.184541][T12879] usb 10-1: Product: syz [ 3231.189036][T12879] usb 10-1: Manufacturer: syz [ 3231.195760][T12879] usb 10-1: SerialNumber: syz [ 3231.201033][T12879] usb 10-1: config 0 descriptor?? [ 3231.264315][ T36] audit: type=1326 audit(2000000000.870:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20092 comm="syz.7.100049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae718f6c9 code=0x7ffc0000 [ 3231.287982][ T36] audit: type=1326 audit(2000000000.870:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20092 comm="syz.7.100049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae718f6c9 code=0x7ffc0000 [ 3231.313218][ T36] audit: type=1326 audit(2000000000.870:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20092 comm="syz.7.100049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ffae718f6c9 code=0x7ffc0000 [ 3231.337945][ T36] audit: type=1326 audit(2000000000.870:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20092 comm="syz.7.100049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae718f6c9 code=0x7ffc0000 [ 3231.339486][T20095] No source specified [ 3231.389698][T20099] overlayfs: missing 'workdir' [ 3231.416177][ T3766] usb 10-1: USB disconnect, device number 41 [ 3231.434799][ T36] audit: type=1400 audit(2000000001.040:699): avc: denied { read write } for pid=14066 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3231.459807][ T36] audit: type=1400 audit(2000000001.040:700): avc: denied { open } for pid=14066 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3231.510867][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100058'. [ 3231.540049][T20116] No source specified [ 3231.652420][T20138] loop5: detected capacity change from 0 to 7 [ 3231.728810][T20146] overlayfs: failed to resolve './file1': -2 [ 3231.895548][T20274] overlayfs: failed to clone upperpath [ 3232.207033][T20443] overlayfs: missing 'workdir' [ 3232.316451][T20466] overlayfs: missing 'workdir' [ 3232.342435][T20472] No source specified [ 3232.378585][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100138'. [ 3232.408823][T20489] overlayfs: missing 'workdir' [ 3232.433707][ T3766] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3232.448673][T20495] No source specified [ 3232.603653][ T3766] usb 1-1: Using ep0 maxpacket: 32 [ 3232.616070][ T3766] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3232.643626][ T3766] usb 1-1: config 0 has no interface number 0 [ 3232.675700][ T3766] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3232.695360][ T3766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.706422][ T3766] usb 1-1: Product: syz [ 3232.711131][ T3766] usb 1-1: Manufacturer: syz [ 3232.716038][ T3766] usb 1-1: SerialNumber: syz [ 3232.734132][ T3766] usb 1-1: config 0 descriptor?? [ 3232.744048][ T3766] smsc95xx v2.0.0 [ 3232.748721][T20513] bridge0: port 1(bridge_slave_0) entered blocking state [ 3232.755839][T20513] bridge0: port 1(bridge_slave_0) entered disabled state [ 3232.762967][T20513] bridge_slave_0: entered allmulticast mode [ 3232.769418][T20513] bridge_slave_0: entered promiscuous mode [ 3232.778086][T20513] bridge0: port 2(bridge_slave_1) entered blocking state [ 3232.781548][T20522] No source specified [ 3232.785186][T20513] bridge0: port 2(bridge_slave_1) entered disabled state [ 3232.796264][T20513] bridge_slave_1: entered allmulticast mode [ 3232.802635][T20513] bridge_slave_1: entered promiscuous mode [ 3232.808767][T26016] bridge_slave_1: left allmulticast mode [ 3232.814529][T26016] bridge_slave_1: left promiscuous mode [ 3232.820167][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3232.837159][T20526] 9pnet_fd: Insufficient options for proto=fd [ 3232.975977][T26016] tipc: Left network mode [ 3232.987590][T26016] veth1_macvtap: left promiscuous mode [ 3232.993107][T26016] veth0_vlan: left promiscuous mode [ 3233.035934][T20644] overlayfs: missing 'lowerdir' [ 3233.104553][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3233.111623][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3233.129261][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 3233.136370][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3233.145606][ T3766] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3233.156689][ T3766] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3233.170600][T20513] veth0_vlan: entered promiscuous mode [ 3233.181775][T20513] veth1_macvtap: entered promiscuous mode [ 3233.497413][T26016] bridge_slave_1: left allmulticast mode [ 3233.503117][T26016] bridge_slave_1: left promiscuous mode [ 3233.509653][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3233.518181][T26016] bridge_slave_0: left allmulticast mode [ 3233.524577][T26016] bridge_slave_0: left promiscuous mode [ 3233.530223][T26016] bridge0: port 1(bridge_slave_0) entered disabled state [ 3233.574263][T20440] can: request_module (can-proto-6) failed. [ 3233.580734][ T3766] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3233.591571][ T3766] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 3233.604419][ T3766] usb 1-1: USB disconnect, device number 40 [ 3233.623049][T20679] bridge0: port 1(bridge_slave_0) entered blocking state [ 3233.630252][T20679] bridge0: port 1(bridge_slave_0) entered disabled state [ 3233.638149][T20679] bridge_slave_0: entered allmulticast mode [ 3233.643587][T21908] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 3233.650072][T20679] bridge_slave_0: entered promiscuous mode [ 3233.654853][T20698] overlayfs: missing 'workdir' [ 3233.658831][T20679] bridge0: port 2(bridge_slave_1) entered blocking state [ 3233.669551][T20679] bridge0: port 2(bridge_slave_1) entered disabled state [ 3233.676886][T20679] bridge_slave_1: entered allmulticast mode [ 3233.684391][T20679] bridge_slave_1: entered promiscuous mode [ 3233.692978][T26016] veth1_macvtap: left promiscuous mode [ 3233.698820][T26016] veth0_vlan: left promiscuous mode [ 3233.807245][T20679] bridge0: port 2(bridge_slave_1) entered blocking state [ 3233.814316][T20679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3233.816921][T21908] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3233.821581][T20679] bridge0: port 1(bridge_slave_0) entered blocking state [ 3233.832091][T21908] usb 8-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 3233.838799][T20679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3233.857792][T21908] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3233.866996][T21908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.875174][T19665] bridge0: port 1(bridge_slave_0) entered disabled state [ 3233.875924][T21908] usb 8-1: Product: syz [ 3233.886528][T21908] usb 8-1: Manufacturer: syz [ 3233.886606][T19665] bridge0: port 2(bridge_slave_1) entered disabled state [ 3233.891120][T21908] usb 8-1: SerialNumber: syz [ 3233.905893][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 3233.912969][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3233.924015][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 3233.931098][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3233.966741][T20679] veth0_vlan: entered promiscuous mode [ 3233.981652][T20679] veth1_macvtap: entered promiscuous mode [ 3234.125540][T21908] usb 8-1: USB disconnect, device number 42 [ 3234.257572][T20759] overlayfs: missing 'workdir' [ 3234.350900][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100220'. [ 3234.372953][T20780] bridge0: port 1(bridge_slave_0) entered disabled state [ 3234.385232][T20780] bridge_slave_0 (unregistering): left allmulticast mode [ 3234.394561][T20780] bridge_slave_0 (unregistering): left promiscuous mode [ 3234.401531][T20780] bridge0: port 1(bridge_slave_0) entered disabled state [ 3234.493091][T20808] No source specified [ 3234.511293][T20810] validate_nla: 1 callbacks suppressed [ 3234.511313][T20810] netlink: 'syz.4.100234': attribute type 4 has an invalid length. [ 3234.536697][T20814] overlayfs: missing 'workdir' [ 3234.615581][T20830] No source specified [ 3234.668603][T20844] Bluetooth: hci0: Frame reassembly failed (-84) [ 3234.686640][T26016] Bluetooth: hci0: Frame reassembly failed (-84) [ 3234.943526][T21908] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3235.093927][T21908] usb 5-1: Using ep0 maxpacket: 16 [ 3235.100243][T21908] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 3235.108459][T21908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3235.118622][T21908] usb 5-1: config 0 has no interface number 0 [ 3235.126119][T21908] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3235.135279][T21908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3235.143263][T21908] usb 5-1: Product: syz [ 3235.147572][T21908] usb 5-1: Manufacturer: syz [ 3235.152165][T21908] usb 5-1: SerialNumber: syz [ 3235.157351][T21908] usb 5-1: config 0 descriptor?? [ 3235.364940][T21908] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 3235.371417][T21908] usb 5-1: No valid video chain found. [ 3235.503883][T20859] overlayfs: missing 'workdir' [ 3235.566317][T21908] usb 5-1: USB disconnect, device number 46 [ 3235.726145][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 3235.726163][ T36] audit: type=1400 audit(2000000005.330:777): avc: denied { write } for pid=20871 comm="syz.0.100261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3235.796201][T20878] No source specified [ 3235.814814][T20880] overlayfs: missing 'workdir' [ 3236.208893][ T36] audit: type=1400 audit(2000000005.810:778): avc: denied { create } for pid=20912 comm="syz.4.100280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3236.229122][ T36] audit: type=1400 audit(2000000005.820:779): avc: denied { setopt } for pid=20912 comm="syz.4.100280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3236.335985][T20922] overlayfs: missing 'workdir' [ 3236.693410][T20847] Bluetooth: hci0: command 0x1003 tx timeout [ 3236.693809][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3236.839415][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100294'. [ 3236.856122][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 3236.871516][T20945] bridge_slave_0 (unregistering): left allmulticast mode [ 3236.874738][T20949] overlayfs: missing 'workdir' [ 3236.894633][T20945] bridge_slave_0 (unregistering): left promiscuous mode [ 3236.909879][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 3237.192789][T20995] /dev/loop0: Can't lookup blockdev [ 3237.359203][T21001] loop2: detected capacity change from 0 to 7 [ 3237.576309][T21007] fuse: Bad value for 'fd' [ 3237.783514][T21033] No source specified [ 3238.019913][ T36] audit: type=1400 audit(2000000007.620:780): avc: denied { remount } for pid=21051 comm="syz.9.100344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3238.056658][T21050] netlink: 'syz.0.100343': attribute type 4 has an invalid length. [ 3238.071372][T21050] netlink: 'syz.0.100343': attribute type 4 has an invalid length. [ 3238.174258][T21070] /dev/loop0: Can't lookup blockdev [ 3238.192886][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100354'. [ 3238.266094][T21077] fuse: Bad value for 'fd' [ 3238.475102][T21103] netlink: 12 bytes leftover after parsing attributes in process `syz.9.100369'. [ 3238.495358][T21103] bridge0: port 1(bridge_slave_0) entered disabled state [ 3238.515317][T21103] bridge_slave_0 (unregistering): left allmulticast mode [ 3238.522390][T21103] bridge_slave_0 (unregistering): left promiscuous mode [ 3238.543351][T21103] bridge0: port 1(bridge_slave_0) entered disabled state [ 3238.685049][ T36] audit: type=1400 audit(2000000008.290:781): avc: denied { create } for pid=21125 comm="syz.0.100378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3238.735082][ T36] audit: type=1400 audit(2000000008.290:782): avc: denied { write } for pid=21125 comm="syz.0.100378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3238.777307][T21136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.100382'. [ 3238.799988][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 3238.819632][T21136] bridge_slave_0 (unregistering): left allmulticast mode [ 3238.833330][T21136] bridge_slave_0 (unregistering): left promiscuous mode [ 3238.850889][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 3239.008445][T21138] fuse: Bad value for 'fd' [ 3239.036980][T21145] /dev/loop0: Can't lookup blockdev [ 3239.136615][T21153] overlayfs: failed to resolve './file0': -2 [ 3239.164624][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.100392'. [ 3239.225746][T21163] loop2: detected capacity change from 0 to 7 [ 3239.423924][T21186] loop2: detected capacity change from 0 to 7 [ 3239.541994][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100403'. [ 3239.590284][T21210] loop5: detected capacity change from 0 to 7 [ 3239.836277][T21212] loop2: detected capacity change from 0 to 7 [ 3240.227306][T21229] /dev/loop0: Can't lookup blockdev [ 3240.510179][ T36] audit: type=1400 audit(2000000010.110:783): avc: denied { write } for pid=21243 comm="syz.4.100435" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 3240.615223][T21254] overlayfs: missing 'workdir' [ 3240.880970][ T36] audit: type=1400 audit(2000000010.480:784): avc: denied { read } for pid=21272 comm="syz.4.100447" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3240.933699][ T36] audit: type=1400 audit(2000000010.480:785): avc: denied { open } for pid=21272 comm="syz.4.100447" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3240.982811][ T36] audit: type=1400 audit(2000000010.520:786): avc: denied { ioctl } for pid=21272 comm="syz.4.100447" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3241.076061][T21280] No source specified [ 3241.453508][T21302] No source specified [ 3241.499992][ T36] audit: type=1400 audit(2000000011.100:787): avc: denied { mounton } for pid=21305 comm="syz.9.100463" path="/58/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 3242.054843][T21347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100482'. [ 3242.938187][T21405] /dev/loop0: Can't lookup blockdev [ 3243.483034][T12879] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3243.654059][T12879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3243.665304][T12879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3243.675711][T12879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3243.689032][T12879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3243.698672][T12879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3243.712370][T12879] usb 1-1: config 0 descriptor?? [ 3243.745723][T21551] loop5: detected capacity change from 0 to 7 [ 3243.956655][ T36] audit: type=1400 audit(2000000013.560:788): avc: denied { ioctl } for pid=21559 comm="syz.4.100531" path="socket:[1579755]" dev="sockfs" ino=1579755 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3243.989961][ T36] audit: type=1400 audit(2000000013.590:789): avc: denied { bind } for pid=21559 comm="syz.4.100531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3244.012060][ T36] audit: type=1400 audit(2000000013.590:790): avc: denied { write } for pid=21559 comm="syz.4.100531" path="socket:[1579755]" dev="sockfs" ino=1579755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3244.025110][T21562] /dev/loop0: Can't lookup blockdev [ 3244.121643][T12879] usbhid 1-1:0.0: can't add hid device: -71 [ 3244.133470][T12879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3244.154226][T12879] usb 1-1: USB disconnect, device number 41 [ 3244.489324][T21574] loop5: detected capacity change from 0 to 7 [ 3244.610549][T21582] /dev/loop0: Can't lookup blockdev [ 3244.768560][T21597] overlayfs: missing 'workdir' [ 3244.804351][T21601] netlink: 'syz.9.100554': attribute type 4 has an invalid length. [ 3244.822971][ T36] audit: type=1326 audit(2000000014.420:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.0.100555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3dd8f6c9 code=0x7ffc0000 [ 3244.857883][ T36] audit: type=1326 audit(2000000014.420:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.0.100555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3dd8f6c9 code=0x7ffc0000 [ 3244.882027][ T36] audit: type=1326 audit(2000000014.430:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.0.100555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3dd8f6c9 code=0x7ffc0000 [ 3244.907034][T21605] /dev/loop0: Can't lookup blockdev [ 3245.058046][T21615] overlayfs: missing 'workdir' [ 3245.182954][T12879] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3245.202944][T32015] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 3245.305682][T21630] No source specified [ 3245.319345][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100569'. [ 3245.344555][T12879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3245.349474][T21636] overlayfs: missing 'workdir' [ 3245.355696][T12879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3245.364120][T32015] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3245.370243][T12879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3245.390848][T32015] usb 10-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 3245.393654][T12879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3245.406866][T32015] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3245.414073][T12879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3245.422755][T32015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.437167][T32015] usb 10-1: Product: syz [ 3245.439901][T12879] usb 1-1: config 0 descriptor?? [ 3245.441450][T32015] usb 10-1: Manufacturer: syz [ 3245.441468][T32015] usb 10-1: SerialNumber: syz [ 3245.662591][T32015] usb 10-1: USB disconnect, device number 42 [ 3245.863270][T12879] usbhid 1-1:0.0: can't add hid device: -71 [ 3245.869607][T12879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3245.881996][T12879] usb 1-1: USB disconnect, device number 42 [ 3246.395682][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100590'. [ 3246.542873][T20056] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 3246.694591][T20056] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3246.705046][T20056] usb 10-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 3246.716143][T20056] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3246.725353][T20056] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3246.735550][T20056] usb 10-1: Product: syz [ 3246.739825][T20056] usb 10-1: Manufacturer: syz [ 3246.744709][T20056] usb 10-1: SerialNumber: syz [ 3246.954470][T20056] usb 10-1: USB disconnect, device number 43 [ 3246.992880][ T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3247.047404][T21701] loop2: detected capacity change from 0 to 7 [ 3247.143965][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3247.155191][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3247.165369][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3247.178765][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3247.188003][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3247.203072][ T45] usb 1-1: config 0 descriptor?? [ 3247.495990][T21711] /dev/loop0: Can't lookup blockdev [ 3247.615262][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 3247.621332][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3247.657010][ T45] usb 1-1: USB disconnect, device number 43 [ 3248.203022][T21860] fuseblk: Bad value for 'fd' [ 3248.662534][T19665] bridge_slave_1: left allmulticast mode [ 3248.672787][T19665] bridge_slave_1: left promiscuous mode [ 3248.688635][T19665] bridge0: port 2(bridge_slave_1) entered disabled state [ 3248.812953][T21877] bridge0: port 1(bridge_slave_0) entered blocking state [ 3248.820145][T21877] bridge0: port 1(bridge_slave_0) entered disabled state [ 3248.858045][T21877] bridge_slave_0: entered allmulticast mode [ 3248.878661][T21877] bridge_slave_0: entered promiscuous mode [ 3248.889113][T21877] bridge0: port 2(bridge_slave_1) entered blocking state [ 3248.902707][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 3248.920004][T21877] bridge_slave_1: entered allmulticast mode [ 3248.930514][T21877] bridge_slave_1: entered promiscuous mode [ 3248.943617][T19665] veth1_macvtap: left promiscuous mode [ 3248.949156][T19665] veth0_vlan: left promiscuous mode [ 3249.264097][T21877] bridge0: port 2(bridge_slave_1) entered blocking state [ 3249.271182][T21877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3249.278490][T21877] bridge0: port 1(bridge_slave_0) entered blocking state [ 3249.285547][T21877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3249.302990][T21906] fuseblk: Bad value for 'fd' [ 3249.364754][T19665] bridge0: port 1(bridge_slave_0) entered disabled state [ 3249.382347][T19665] bridge0: port 2(bridge_slave_1) entered disabled state [ 3249.413994][T20666] bridge0: port 1(bridge_slave_0) entered blocking state [ 3249.421096][T20666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3249.453003][T19665] bridge0: port 2(bridge_slave_1) entered blocking state [ 3249.460078][T19665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3249.511971][T21877] veth0_vlan: entered promiscuous mode [ 3249.537967][T21877] veth1_macvtap: entered promiscuous mode [ 3250.548106][T21964] overlayfs: missing 'workdir' [ 3252.402819][T22008] loop2: detected capacity change from 0 to 7 [ 3253.184865][T22020] loop5: detected capacity change from 0 to 7 [ 3253.329550][T22022] fuseblk: Bad value for 'fd' [ 3253.387357][T22028] loop2: detected capacity change from 0 to 7 [ 3253.569260][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.100715'. [ 3253.620609][T22048] 9pnet_fd: Insufficient options for proto=fd [ 3253.954959][T22068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100726'. [ 3254.144560][T22078] netlink: 'syz.4.100731': attribute type 4 has an invalid length. [ 3254.163191][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 3254.163209][ T36] audit: type=1400 audit(2000000023.771:800): avc: denied { compute_member } for pid=22079 comm="syz.0.100727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3254.444876][T22098] No source specified [ 3254.662008][T22116] loop2: detected capacity change from 0 to 7 [ 3255.513505][T22148] fuseblk: Bad value for 'fd' [ 3255.592499][ T36] audit: type=1400 audit(2000000025.191:801): avc: denied { write } for pid=22157 comm="syz.7.100769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3256.546174][T22185] /dev/loop0: Can't lookup blockdev [ 3256.962556][T22213] overlayfs: failed to resolve './file1': -2 [ 3257.781527][T22265] overlayfs: failed to resolve './file0': -2 [ 3257.830251][T22273] loop2: detected capacity change from 0 to 7 [ 3257.952129][T22288] overlayfs: failed to resolve './file0': -2 [ 3258.283515][T22303] /dev/loop0: Can't lookup blockdev [ 3260.218791][T22394] loop2: detected capacity change from 0 to 7 [ 3260.723288][T22424] fuseblk: Bad value for 'fd' [ 3261.384611][T22444] loop5: detected capacity change from 0 to 7 [ 3261.585171][T22460] overlayfs: missing 'workdir' [ 3261.663095][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100918'. [ 3261.687473][T22476] loop5: detected capacity change from 0 to 7 [ 3261.762079][T22481] fuseblk: Bad value for 'fd' [ 3261.803436][T22487] No source specified [ 3261.981492][T22511] No source specified [ 3262.003329][T22513] loop5: detected capacity change from 0 to 7 [ 3262.644487][T22540] loop5: detected capacity change from 0 to 7 [ 3262.937826][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100961'. [ 3265.060371][T22635] fuseblk: Bad value for 'fd' [ 3265.663963][T22654] overlayfs: missing 'workdir' [ 3265.833473][T22665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101008'. [ 3265.848356][T22667] loop5: detected capacity change from 0 to 7 [ 3265.869066][T22671] /dev/loop0: Can't lookup blockdev [ 3265.894357][T22673] netlink: 'syz.4.101011': attribute type 4 has an invalid length. [ 3265.946162][T22681] fuseblk: Bad value for 'fd' [ 3266.002951][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101018'. [ 3266.058775][T22695] netlink: 'syz.4.101022': attribute type 4 has an invalid length. [ 3266.089967][T22699] loop5: detected capacity change from 0 to 7 [ 3267.033793][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.9.101048'. [ 3267.501690][ T3766] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3267.662709][ T3766] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3267.683912][ T3766] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 3267.713078][ T3766] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3267.722528][ T3766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3267.730883][ T3766] usb 1-1: Product: syz [ 3267.735815][ T3766] usb 1-1: Manufacturer: syz [ 3267.740823][ T3766] usb 1-1: SerialNumber: syz [ 3267.748617][T22826] overlayfs: missing 'workdir' [ 3267.949870][ T3766] usb 1-1: USB disconnect, device number 44 [ 3268.085378][T22854] netlink: 'syz.4.101095': attribute type 4 has an invalid length. [ 3268.121802][T22858] loop2: detected capacity change from 0 to 7 [ 3268.367671][T22871] loop5: detected capacity change from 0 to 7 [ 3269.198217][T22899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.101118'. [ 3269.223487][T22899] bridge0: port 1(bridge_slave_0) entered disabled state [ 3269.252647][T22899] bridge_slave_0 (unregistering): left allmulticast mode [ 3269.270410][T22899] bridge_slave_0 (unregistering): left promiscuous mode [ 3269.293356][T22899] bridge0: port 1(bridge_slave_0) entered disabled state [ 3269.640995][T22919] fuseblk: Bad value for 'fd' [ 3270.426666][T22939] overlayfs: missing 'workdir' [ 3270.428942][T22938] loop5: detected capacity change from 0 to 7 [ 3271.410291][ T36] audit: type=1400 audit(2000000041.012:802): avc: denied { write } for pid=22964 comm="syz.4.101148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3271.564483][T22973] /dev/loop0: Can't lookup blockdev [ 3271.942915][ T36] audit: type=1400 audit(2000000041.554:803): avc: denied { setopt } for pid=22990 comm="syz.9.101160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3271.970386][T22993] fuseblk: Bad value for 'fd' [ 3272.626221][T23014] fuseblk: Bad value for 'fd' [ 3272.824606][T23045] loop5: detected capacity change from 0 to 7 [ 3272.932843][T23059] /dev/loop0: Can't lookup blockdev [ 3272.968964][ T36] audit: type=1400 audit(2000000042.574:804): avc: denied { getopt } for pid=23064 comm="syz.0.101194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3273.094132][T23075] binder: Bad value for 'context' [ 3273.245622][ T36] audit: type=1400 audit(2000000042.854:805): avc: denied { wake_alarm } for pid=23094 comm="syz.4.101209" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3273.411081][T23114] /dev/loop0: Can't lookup blockdev [ 3273.611304][ T36] audit: type=1400 audit(2000000043.204:806): avc: denied { getopt } for pid=23119 comm="syz.9.101221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3273.943821][T23131] netlink: 'syz.9.101227': attribute type 4 has an invalid length. [ 3275.318238][T23151] overlayfs: missing 'workdir' [ 3276.401307][T23199] netlink: 156 bytes leftover after parsing attributes in process `syz.4.101257'. [ 3276.506238][T23217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101266'. [ 3276.529320][ T36] audit: type=1400 audit(2000000046.134:807): avc: denied { setopt } for pid=23219 comm="syz.0.101267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3276.607952][T23226] netlink: 'syz.0.101270': attribute type 4 has an invalid length. [ 3276.717411][T23246] /dev/loop0: Can't lookup blockdev [ 3276.787325][ T36] audit: type=1400 audit(2000000046.394:808): avc: denied { create } for pid=23260 comm="syz.9.101287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3276.807635][ T36] audit: type=1400 audit(2000000046.394:809): avc: denied { write } for pid=23260 comm="syz.9.101287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3276.883442][T23269] /dev/loop0: Can't lookup blockdev [ 3277.029916][T23287] rust_binder: Write failure EFAULT in pid:543 [ 3277.044960][T23289] /dev/loop0: Can't lookup blockdev [ 3277.098730][T23295] overlayfs: missing 'workdir' [ 3277.473714][T23326] overlayfs: missing 'workdir' [ 3277.520715][T23336] No source specified [ 3277.529527][T23338] loop5: detected capacity change from 0 to 7 [ 3277.542200][T23340] netlink: 'syz.0.101326': attribute type 4 has an invalid length. [ 3278.148732][T23389] netlink: 'syz.0.101349': attribute type 4 has an invalid length. [ 3278.224968][T23399] No source specified [ 3278.452360][T23415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 3278.921469][ T342] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3279.041476][ T45] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 3279.076405][ T342] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 3279.101464][ T342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3279.111460][ T342] usb 5-1: Product: syz [ 3279.115654][ T342] usb 5-1: Manufacturer: syz [ 3279.131487][ T342] usb 5-1: SerialNumber: syz [ 3279.142096][ T342] usb 5-1: config 0 descriptor?? [ 3279.192549][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3279.211483][ T45] usb 10-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3279.231075][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3279.254735][ T45] usb 10-1: config 0 descriptor?? [ 3279.662096][ T45] hid (null): global environment stack underflow [ 3279.671879][ T45] logitech-djreceiver 0003:046D:C71F.0013: global environment stack underflow [ 3279.680833][ T45] logitech-djreceiver 0003:046D:C71F.0013: item 0 4 1 11 parsing failed [ 3279.689595][ T45] logitech-djreceiver 0003:046D:C71F.0013: logi_dj_probe: parse failed [ 3279.698147][ T45] logitech-djreceiver 0003:046D:C71F.0013: probe with driver logitech-djreceiver failed with error -22 [ 3279.870524][ T45] usb 10-1: USB disconnect, device number 44 [ 3280.564050][T23483] loop5: detected capacity change from 0 to 7 [ 3280.581459][ T45] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 3280.732669][ T45] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3280.742982][ T45] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 3280.753492][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3280.762577][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3280.770736][ T45] usb 1-1: Product: syz [ 3280.774923][ T45] usb 1-1: Manufacturer: syz [ 3280.779523][ T45] usb 1-1: SerialNumber: syz [ 3280.874904][T23497] netlink: 'syz.9.101397': attribute type 4 has an invalid length. [ 3280.895268][T23499] overlayfs: missing 'workdir' [ 3280.922697][ T36] audit: type=1400 audit(2000000050.534:810): avc: denied { connect } for pid=23502 comm="syz.9.101400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3280.990880][ T45] usb 1-1: USB disconnect, device number 45 [ 3281.568690][T23514] fuseblk: Bad value for 'fd' [ 3281.642427][T23528] loop5: detected capacity change from 0 to 7 [ 3281.699807][T20056] usb 5-1: USB disconnect, device number 47 [ 3281.785506][T23547] netlink: 'syz.0.101421': attribute type 4 has an invalid length. [ 3281.982659][T23574] /dev/loop0: Can't lookup blockdev [ 3282.003663][T23576] netlink: 'syz.4.101435': attribute type 4 has an invalid length. [ 3282.269315][ T36] audit: type=1400 audit(2000000051.874:811): avc: denied { bind } for pid=23587 comm="syz.9.101439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3282.290012][ T36] audit: type=1400 audit(2000000051.884:812): avc: denied { setopt } for pid=23587 comm="syz.9.101439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3282.357016][T23593] loop5: detected capacity change from 0 to 7 [ 3282.450906][T23599] netlink: 'syz.9.101445': attribute type 4 has an invalid length. [ 3282.944043][T23640] overlayfs: missing 'lowerdir' [ 3282.964407][T23642] netlink: 'syz.4.101466': attribute type 4 has an invalid length. [ 3283.104978][T23658] fuseblk: Bad value for 'fd' [ 3283.113005][T23662] netlink: 'syz.0.101475': attribute type 4 has an invalid length. [ 3283.374942][T23675] overlayfs: missing 'lowerdir' [ 3283.447839][T23684] fuseblk: Bad value for 'fd' [ 3283.482235][ T36] audit: type=1400 audit(2000000053.094:813): avc: denied { setcheckreqprot } for pid=23685 comm="syz.7.101486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3283.594611][T23692] overlayfs: missing 'lowerdir' [ 3283.620574][T23694] fuse: Bad value for 'fd' [ 3283.791656][T23709] overlayfs: missing 'lowerdir' [ 3283.853087][T23717] /dev/loop0: Can't lookup blockdev [ 3283.903808][T23725] loop5: detected capacity change from 0 to 7 [ 3284.005819][T23733] overlayfs: missing 'lowerdir' [ 3284.252972][T23755] loop5: detected capacity change from 0 to 7 [ 3284.534427][T23764] overlay: filesystem on ./file0 not supported as upperdir [ 3284.747814][T23786] /dev/loop0: Can't lookup blockdev [ 3284.801482][T32015] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3284.952684][T32015] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3284.963186][T32015] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 3284.974068][T32015] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3284.983457][T32015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3284.991668][T32015] usb 1-1: Product: syz [ 3284.995967][T32015] usb 1-1: Manufacturer: syz [ 3285.000642][T32015] usb 1-1: SerialNumber: syz [ 3285.098743][T23800] fuseblk: Unknown parameter '0xffffffffffffffff' [ 3285.125809][T23804] loop5: detected capacity change from 0 to 7 [ 3285.211635][T32015] usb 1-1: USB disconnect, device number 46 [ 3285.411399][T23815] netlink: 'syz.4.101547': attribute type 4 has an invalid length. [ 3285.816804][T23835] netlink: 'syz.7.101556': attribute type 4 has an invalid length. [ 3285.968351][ T36] audit: type=1400 audit(2000000055.574:814): avc: denied { create } for pid=23845 comm="syz.9.101561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 3286.662924][T23879] netlink: 'syz.4.101575': attribute type 4 has an invalid length. [ 3286.690934][T23883] loop5: detected capacity change from 0 to 7 [ 3286.829690][T23891] fuseblk: Unknown parameter '0xffffffffffffffff' [ 3287.065724][T23929] overlayfs: missing 'workdir' [ 3287.095535][T23934] netlink: 'syz.0.101601': attribute type 4 has an invalid length. [ 3287.149361][T23943] fuseblk: Bad value for 'fd' [ 3287.186250][T23952] overlayfs: missing 'workdir' [ 3287.221265][T23956] netlink: 'syz.0.101612': attribute type 4 has an invalid length. [ 3287.228364][T23960] overlayfs: missing 'workdir' [ 3287.465778][ T36] audit: type=1400 audit(2000000057.074:815): avc: denied { bind } for pid=23973 comm="syz.9.101620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3288.016327][ T36] audit: type=1400 audit(2000000057.564:816): avc: denied { create } for pid=23994 comm="syz.4.101630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3288.036727][ T36] audit: type=1400 audit(2000000057.564:817): avc: denied { bind } for pid=23994 comm="syz.4.101630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3288.057836][ T36] audit: type=1400 audit(2000000057.564:818): avc: denied { connect } for pid=23994 comm="syz.4.101630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3288.065976][T24009] fuseblk: Bad value for 'fd' [ 3288.128699][ T36] audit: type=1404 audit(2000000057.734:819): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 3288.170838][ T36] audit: type=1400 audit(2000000057.744:820): avc: denied { execute } for pid=24013 comm="syz.0.101638" path="/450/blkio.bfq.group_wait_time" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3288.196202][ T36] audit: type=1400 audit(2000000057.744:821): avc: denied { execute } for pid=24018 comm="syz.7.101643" path="/176/cpuacct.usage_percpu" dev="tmpfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3288.222164][ T36] audit: type=1400 audit(2000000057.744:822): avc: denied { read } for pid=24018 comm="syz.7.101643" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 3288.243933][ T36] audit: type=1400 audit(2000000057.754:823): avc: denied { execute } for pid=24015 comm="syz.4.101641" path="/456/blkio.bfq.group_wait_time" dev="tmpfs" ino=3000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3288.272853][ T36] audit: type=1400 audit(2000000057.754:825): avc: denied { mounton } for pid=24015 comm="syz.4.101641" path="/456/bus" dev="tmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 3288.405432][T24068] netlink: 'syz.4.101666': attribute type 4 has an invalid length. [ 3291.036893][T24476] tun0: tun_chr_ioctl cmd 1074025675 [ 3291.042501][T24476] tun0: persist enabled [ 3291.047634][T24476] tun0: tun_chr_ioctl cmd 1074025675 [ 3291.052967][T24476] tun0: persist disabled [ 3291.109443][T24486] netlink: 'syz.7.101871': attribute type 4 has an invalid length. [ 3291.687593][T24571] netlink: 'syz.0.101913': attribute type 4 has an invalid length. [ 3292.471511][ T36] kauditd_printk_skb: 766 callbacks suppressed [ 3292.471529][ T36] audit: type=1400 audit(2000000062.074:1591): avc: denied { execute } for pid=24682 comm="syz.0.101967" path="/536/blkio.bfq.group_wait_time" dev="tmpfs" ino=3503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3292.502570][ T36] audit: type=1400 audit(2000000062.094:1592): avc: denied { read } for pid=24682 comm="syz.0.101967" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 3292.525477][ T36] audit: type=1400 audit(2000000062.124:1593): avc: denied { execute } for pid=24684 comm="syz.0.101968" path="/537/blkio.bfq.group_wait_time" dev="tmpfs" ino=3512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3292.550987][ T36] audit: type=1400 audit(2000000062.124:1594): avc: denied { mounton } for pid=24684 comm="syz.0.101968" path="/537/bus" dev="tmpfs" ino=3510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 3292.573789][ T36] audit: type=1400 audit(2000000062.134:1595): avc: denied { execute } for pid=24686 comm="syz.0.101969" path="/538/blkio.bfq.group_wait_time" dev="tmpfs" ino=3518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3292.598749][ T36] audit: type=1400 audit(2000000062.134:1596): avc: denied { create } for pid=24686 comm="syz.0.101969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=0 [ 3292.619509][ T36] audit: type=1400 audit(2000000062.134:1597): avc: denied { create } for pid=24686 comm="syz.0.101969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 3292.640422][ T36] audit: type=1400 audit(2000000062.134:1598): avc: denied { write } for pid=24686 comm="syz.0.101969" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 3292.663661][ T36] audit: type=1400 audit(2000000062.154:1599): avc: denied { read write } for pid=20513 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 3292.688094][ T36] audit: type=1400 audit(2000000062.154:1600): avc: denied { execute } for pid=24688 comm="syz.0.101970" path="/539/blkio.bfq.group_wait_time" dev="tmpfs" ino=3524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3293.728767][T24796] netlink: 'syz.4.102022': attribute type 4 has an invalid length. [ 3294.845277][T19665] bridge_slave_1: left allmulticast mode [ 3294.850926][T19665] bridge_slave_1: left promiscuous mode [ 3294.856597][T19665] bridge0: port 2(bridge_slave_1) entered disabled state [ 3294.963569][T19665] veth1_macvtap: left promiscuous mode [ 3294.969136][T19665] veth0_vlan: left promiscuous mode [ 3297.847435][ T36] kauditd_printk_skb: 385 callbacks suppressed [ 3297.847453][ T36] audit: type=1400 audit(2000000067.454:1986): avc: denied { execmem } for pid=25001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 3297.873164][ T36] audit: type=1400 audit(2000000067.454:1987): avc: denied { execute } for pid=25003 comm="syz.0.102120" path="/601/blkio.bfq.group_wait_time" dev="tmpfs" ino=3898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3297.898019][ T36] audit: type=1400 audit(2000000067.454:1988): avc: denied { create } for pid=25003 comm="syz.0.102120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 3297.918915][ T36] audit: type=1400 audit(2000000067.454:1989): avc: denied { create } for pid=25003 comm="syz.0.102120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 3297.939691][ T36] audit: type=1400 audit(2000000067.464:1990): avc: denied { read write } for pid=25002 comm="syz.7.102119" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 3298.367966][ T36] audit: type=1400 audit(2000000067.974:1991): avc: denied { read write } for pid=21877 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 3298.754651][ T36] audit: type=1400 audit(2000000068.364:1992): avc: denied { execmem } for pid=25006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 3298.777515][ T36] audit: type=1400 audit(2000000068.364:1993): avc: denied { mounton } for pid=25007 comm="syz.0.102122" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 3298.801810][ T36] audit: type=1400 audit(2000000068.364:1994): avc: denied { execute } for pid=25011 comm="syz.0.102123" path="/603/blkio.bfq.group_wait_time" dev="tmpfs" ino=3910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3298.826537][ T36] audit: type=1400 audit(2000000068.364:1995): avc: denied { create } for pid=25011 comm="syz.0.102123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 3303.416571][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 3303.416590][ T36] audit: type=1400 audit(2000000073.024:2014): avc: denied { execmem } for pid=25029 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 3303.442354][ T36] audit: type=1400 audit(2000000073.024:2015): avc: denied { execute } for pid=25031 comm="syz.0.102131" path="/607/blkio.bfq.group_wait_time" dev="tmpfs" ino=3934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3303.467127][ T36] audit: type=1400 audit(2000000073.034:2016): avc: denied { execute } for pid=25030 comm="syz.7.102130" path="/323/blkio.bfq.group_wait_time" dev="tmpfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3303.491854][ T36] audit: type=1400 audit(2000000073.034:2017): avc: denied { read write } for pid=25030 comm="syz.7.102130" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 3303.927761][ T36] audit: type=1400 audit(2000000073.534:2018): avc: denied { read write } for pid=21877 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 3304.830979][ T36] audit: type=1400 audit(2000000074.434:2019): avc: denied { execute } for pid=25035 comm="syz.7.102132" path="/324/blkio.bfq.group_wait_time" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3304.879256][ T36] audit: type=1400 audit(2000000074.434:2020): avc: denied { execmem } for pid=25034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 3304.899734][ T36] audit: type=1400 audit(2000000074.434:2021): avc: denied { read write } for pid=21877 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 3304.941464][ T36] audit: type=1400 audit(2000000074.434:2022): avc: denied { execmem } for pid=25037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 3304.967494][ T36] audit: type=1400 audit(2000000074.464:2023): avc: denied { execute } for pid=25039 comm="syz.0.102134" path="/608/blkio.bfq.group_wait_time" dev="tmpfs" ino=3940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 3305.031247][ T2076] bridge_slave_1: left allmulticast mode [ 3305.037608][ T2076] bridge_slave_1: left promiscuous mode [ 3305.044673][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 3305.173661][ T2076] veth1_macvtap: left promiscuous mode [ 3305.179394][ T2076] veth0_vlan: left promiscuous mode [ 3305.582222][ T2076] bridge_slave_1: left allmulticast mode [ 3305.587874][ T2076] bridge_slave_1: left promiscuous mode [ 3305.593528][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 3305.723694][ T2076] veth1_macvtap: left promiscuous mode [ 3305.729215][ T2076] veth0_vlan: left promiscuous mode