last executing test programs: 25m20.198575302s ago: executing program 32 (id=531): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0x38, 0x7, 0x0, 0x9, 0x80000000, 0x87}) tkill(r0, 0x7) 24m4.808676508s ago: executing program 33 (id=1305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m1.577345376s ago: executing program 34 (id=1321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xffbff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) r2 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_test_age_hva\x00', r2, 0x0, 0x46c0}, 0x18) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 23m34.699899735s ago: executing program 4 (id=1528): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) umount2(&(0x7f0000000480)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x1ffff, 0x5, 0x0, {0x9, 0x2, 0x48b, 0xa, 0x40000000000000b, 0xd, 0xfff7fffc, 0x4, 0x2000101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m34.456634154s ago: executing program 4 (id=1529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) io_uring_setup(0x7eec, &(0x7f00000000c0)={0x0, 0x3d26, 0x2800, 0x3, 0x2a8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23m34.175859252s ago: executing program 4 (id=1533): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r3, r1, 0x0, 0x4, 0x3c, 0x92a, 0x9, 0xffffffff, 0x9, 0x4, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x5}) 23m33.96348949s ago: executing program 4 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 23m33.847034239s ago: executing program 4 (id=1535): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {0x0}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 23m31.19894994s ago: executing program 4 (id=1544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 23m30.798862898s ago: executing program 35 (id=1544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 21m4.394430767s ago: executing program 6 (id=3323): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x5, 0x0, 0x0) 21m4.171083706s ago: executing program 6 (id=3325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, 0x0, 0x130}, 0x40010) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001300)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m3.986825612s ago: executing program 6 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x2, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e1e, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b105a456f064be0300ffe61e"}, @window={0x3, 0x3, 0x6}]}}, {"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"}}}}, 0xfce) 21m3.549620835s ago: executing program 6 (id=3338): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 21m2.605984988s ago: executing program 6 (id=3357): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 21m2.135039523s ago: executing program 6 (id=3360): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setitimer(0xf4240, 0x0, 0x0) 21m1.528620296s ago: executing program 36 (id=3360): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setitimer(0xf4240, 0x0, 0x0) 19m18.252959921s ago: executing program 9 (id=5023): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x50, &(0x7f0000000000)=0x5, 0x4) 19m18.084389865s ago: executing program 9 (id=5027): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2008, &(0x7f00000007c0)) 19m17.910189694s ago: executing program 9 (id=5032): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x62020680) 19m17.537557701s ago: executing program 9 (id=5040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19m17.408252538s ago: executing program 9 (id=5042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') 19m14.614978931s ago: executing program 9 (id=5063): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 19m14.130473618s ago: executing program 37 (id=5063): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 16m36.188019721s ago: executing program 0 (id=7707): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x7}}}], 0x38}, 0x0) 16m36.016881376s ago: executing program 0 (id=7710): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e5, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16m35.856404913s ago: executing program 0 (id=7715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a001e000500000000000072080003000500000000", 0x39}], 0x1) 16m35.641721604s ago: executing program 0 (id=7722): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 16m34.698550832s ago: executing program 0 (id=7746): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x74}}, 0x0) 16m34.603059868s ago: executing program 0 (id=7748): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 16m34.366296747s ago: executing program 38 (id=7748): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 12m6.850776817s ago: executing program 1 (id=12376): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="00000018030103000400c4"], 0xe6) 12m6.545232034s ago: executing program 1 (id=12383): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 12m6.377088814s ago: executing program 1 (id=12388): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) 12m6.192787878s ago: executing program 1 (id=12391): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 12m5.183036252s ago: executing program 1 (id=12407): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000fd0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000fc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 12m4.614175787s ago: executing program 1 (id=12417): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 12m4.339989366s ago: executing program 39 (id=12417): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 2.226681259s ago: executing program 5 (id=24988): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x60, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000800010109024e00010100900309040100fd02020000052406000005240000000d240f0104000000b6cf00000006241a0500000424020509058103200004fd000905"], 0x0) 1.590823564s ago: executing program 2 (id=25001): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) gettid() madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14) 1.35803724s ago: executing program 8 (id=25004): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.261916647s ago: executing program 3 (id=25005): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0xff7ffffd, 0x20, 0x1, 0x39d}, 0x0, 0x0) 1.141249832s ago: executing program 3 (id=25006): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.133982814s ago: executing program 8 (id=25007): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1.023202377s ago: executing program 7 (id=25008): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) 1.022141069s ago: executing program 8 (id=25009): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x4008000}}], 0x1, 0x0) 980.921388ms ago: executing program 3 (id=25010): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003"], 0xec}}, 0x0) 979.995748ms ago: executing program 2 (id=25011): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 869.30151ms ago: executing program 8 (id=25012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) 868.513628ms ago: executing program 7 (id=25013): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x5, 0xc9}]}) 819.419743ms ago: executing program 8 (id=25014): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4d5, r1, 0x0, 0x0, 0xfffffffffffffff1, 0x0, 0x3}, 0x0) 763.056355ms ago: executing program 3 (id=25015): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c004}, 0x24084084) 762.818286ms ago: executing program 2 (id=25016): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 729.434991ms ago: executing program 7 (id=25017): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x82]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 707.132083ms ago: executing program 5 (id=25018): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, r4, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x40) 638.113623ms ago: executing program 8 (id=25019): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000200)='#', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 615.806714ms ago: executing program 7 (id=25020): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) syz_clone3(&(0x7f0000000000)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 580.067176ms ago: executing program 3 (id=25021): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @private2, 0x2}, 0x1c) 579.163175ms ago: executing program 2 (id=25022): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) 509.874066ms ago: executing program 5 (id=25023): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000500)={0xb, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f000001e800)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4b}}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 351.070322ms ago: executing program 3 (id=25024): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x223, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xac, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x548}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x5, 0x2}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 350.86876ms ago: executing program 2 (id=25025): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x8) 306.475162ms ago: executing program 5 (id=25026): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) 287.173331ms ago: executing program 7 (id=25027): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000) 131.103077ms ago: executing program 5 (id=25028): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x290) 130.759541ms ago: executing program 2 (id=25029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdf602000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r2, 0x7}, &(0x7f0000000140)=0x8) 44.738216ms ago: executing program 7 (id=25030): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000040)={0x4, 0x2, 0x3, 0x90cb, 0x676c54ed, 0x7, 0xc7, 0x4}, 0x0, &(0x7f0000000100)={0x9, 0x0, 0xf, 0x7, 0xffffffffffffff80, 0x3, 0x2, 0x40}, 0x0, 0x0) 0s ago: executing program 5 (id=25031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000480)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb6c70c67f23613c7}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): d value for 'user_id' [ 1316.146128][T17968] fuse: Bad value for 'user_id' [ 1318.649330][T18079] netlink: 'syz.7.19115': attribute type 3 has an invalid length. [ 1318.876236][T18085] netlink: 'syz.3.19117': attribute type 4 has an invalid length. [ 1318.932562][T18085] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19117'. [ 1323.512392][ T5834] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1323.521289][T18226] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19180'. [ 1323.703985][ T5834] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1323.713122][ T5834] usb 4-1: config 0 has no interface number 0 [ 1323.724412][ T5834] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1323.734589][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.754936][ T5834] usb 4-1: Product: syz [ 1323.759145][ T5834] usb 4-1: Manufacturer: syz [ 1323.781930][ T5834] usb 4-1: SerialNumber: syz [ 1323.816240][ T5834] usb 4-1: config 0 descriptor?? [ 1324.047065][ T5834] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1324.075586][ T5834] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1324.112022][ T5834] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1324.119887][ T5834] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1324.153065][ T5834] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1324.183150][ T5834] usb 4-1: USB disconnect, device number 34 [ 1324.200708][ T5834] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1324.218796][ T5834] keyspan 4-1:0.133: device disconnected [ 1325.543603][T18290] netlink: 'syz.3.19211': attribute type 6 has an invalid length. [ 1326.517742][T18322] binder: BINDER_SET_CONTEXT_MGR already set [ 1326.535751][T18325] x_tables: duplicate underflow at hook 2 [ 1326.547496][T18322] binder: 18320:18322 ioctl 40046207 0 returned -16 [ 1327.956920][ T30] audit: type=1326 audit(1763497606.916:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18363 comm="syz.2.19243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827638f6c9 code=0x0 [ 1330.168256][T18482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1330.262368][T18485] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1331.860351][T18537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.968005][T18542] netlink: 104 bytes leftover after parsing attributes in process `syz.7.19328'. [ 1332.619418][T18569] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1333.733322][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19369'. [ 1334.667538][T18677] netdevsim netdevsim3: Direct firmware load for . [ 1334.667538][T18677] failed with error -2 [ 1334.705891][T18677] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1334.705891][T18677] [ 1334.726807][T18676] can: request_module (can-proto-0) failed. [ 1335.032136][T11320] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1335.202066][T11320] usb 9-1: Using ep0 maxpacket: 16 [ 1335.214019][T11320] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.244637][T11320] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1335.285541][T11320] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1335.319466][T11320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.354510][T11320] usb 9-1: config 0 descriptor?? [ 1335.622032][T11307] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1335.773058][T11307] usb 6-1: not running at top speed; connect to a high speed hub [ 1335.792986][T11307] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1335.814391][T11307] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1335.827985][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.842705][T11307] usb 6-1: Product: 䒔伺⬼巺ç¿æ†•æƒ´ì³¯î…¾åž’ꦇƗ⹹ꨟ嘈씆뢚誹Ᲊ熛蹬첩㬶ꦦâｃåµï«„䃜ࣿ⑆㘗툒ã¼æ¨·æ¡‡êŸ”ḅ괶⫅蒃њ㖖༞慺鵔㜎ᯑ첷è—艗îˆä·´è¶£çŽ™è¸°ã¨‘ãž›ï„⎼죪ʗãƒî§¹ç¦›â¯¢ï…‘ã²ì–˜ãµì°¦á½ Ý¸í‡—틻Ȭ粓ê¨Ó·ë»ƒå—­à¼…ގ [ 1335.903097][T11307] usb 6-1: Manufacturer: Ð [ 1335.903813][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19414'. [ 1335.907643][T11307] usb 6-1: SerialNumber: á [ 1336.001363][T11320] usbhid 9-1:0.0: can't add hid device: -71 [ 1336.021641][T11320] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1336.045207][T11320] usb 9-1: USB disconnect, device number 45 [ 1336.196153][T11307] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1336.219495][T11307] usb 6-1: unit 91 not found! [ 1336.242129][T11307] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1336.324745][T11307] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1336.361638][T11307] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1336.389269][T11307] usb 6-1: USB disconnect, device number 61 [ 1336.445048][T29933] udevd[29933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1336.893620][T18759] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19429'. [ 1336.902014][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19430'. [ 1336.916283][T18760] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19430'. [ 1337.118561][T18770] netlink: 100 bytes leftover after parsing attributes in process `syz.3.19434'. [ 1337.324985][T18782] x_tables: duplicate entry at hook 2 [ 1337.887101][T18815] netlink: 48 bytes leftover after parsing attributes in process `syz.7.19454'. [ 1339.861989][T11307] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1340.034845][T11307] usb 4-1: Using ep0 maxpacket: 8 [ 1340.042463][T11307] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1340.051139][T11307] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.090841][T11307] usb 4-1: config 135 has no interface number 0 [ 1340.108184][T11307] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1340.149615][T11307] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1340.177363][T11307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.206611][T11307] usb 4-1: Product: syz [ 1340.218509][T11307] usb 4-1: Manufacturer: syz [ 1340.227035][T11307] usb 4-1: SerialNumber: syz [ 1340.266978][T11307] uvcvideo 4-1:135.230: Found Unit with invalid ID 0 [ 1340.293796][T11307] uvcvideo 4-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 1340.307354][T11307] uvcvideo 4-1:135.230: No valid video chain found. [ 1340.401218][T18913] netlink: 56 bytes leftover after parsing attributes in process `syz.7.19497'. [ 1340.521132][T11307] usb 4-1: USB disconnect, device number 35 [ 1341.831167][T18989] netlink: 'syz.5.19535': attribute type 16 has an invalid length. [ 1341.852714][T18989] netlink: 64130 bytes leftover after parsing attributes in process `syz.5.19535'. [ 1341.934116][T18993] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19537'. [ 1341.998904][T18999] input: syz1 as /devices/virtual/input/input117 [ 1343.045191][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19566'. [ 1344.767494][T19121] netlink: 393 bytes leftover after parsing attributes in process `syz.3.19601'. [ 1346.108740][T16803] tipc: Subscription rejected, illegal request [ 1346.164282][T19189] netlink: 'syz.2.19630': attribute type 4 has an invalid length. [ 1346.192126][T19189] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.19630'. [ 1346.940942][T19232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.584191][T19267] Invalid logical block size (18) [ 1348.467936][T19293] netlink: 60 bytes leftover after parsing attributes in process `syz.8.19680'. [ 1349.585626][T19331] can: request_module (can-proto-0) failed. [ 1351.412595][T19415] netlink: 'syz.5.19741': attribute type 4 has an invalid length. [ 1351.435466][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19740'. [ 1351.438831][T19415] netlink: 'syz.5.19741': attribute type 5 has an invalid length. [ 1351.474722][T19415] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.19741'. [ 1351.984814][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19747'. [ 1352.347874][T19455] netlink: 'syz.7.19758': attribute type 64 has an invalid length. [ 1352.362759][T19455] netlink: 5 bytes leftover after parsing attributes in process `syz.7.19758'. [ 1352.514630][T19463] usb usb9: usbfs: process 19463 (syz.8.19763) did not claim interface 0 before use [ 1352.688641][T19472] fuse: Bad value for 'user_id' [ 1352.708883][T19472] fuse: Bad value for 'user_id' [ 1352.931667][T19487] netem: change failed [ 1353.816868][T19505] netlink: 64 bytes leftover after parsing attributes in process `syz.5.19781'. [ 1354.140493][T19514] sock: sock_timestamping_bind_phc: sock not bind to device [ 1355.531320][ T30] audit: type=1326 audit(1763497634.486:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19568 comm="syz.7.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1355.595441][ T30] audit: type=1326 audit(1763497634.496:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19568 comm="syz.7.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1355.649296][ T30] audit: type=1326 audit(1763497634.496:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19568 comm="syz.7.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1356.091458][T19581] syzkaller0: entered promiscuous mode [ 1356.122036][T19581] syzkaller0: entered allmulticast mode [ 1356.632571][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19828'. [ 1357.691209][T19644] netlink: 56 bytes leftover after parsing attributes in process `syz.5.19844'. [ 1357.713141][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19843'. [ 1359.431219][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19826'. [ 1359.546173][T19666] netlink: 'syz.8.19853': attribute type 4 has an invalid length. [ 1359.556247][T19666] netlink: 'syz.8.19853': attribute type 5 has an invalid length. [ 1359.583963][T19666] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.19853'. [ 1359.788405][T19676] netlink: 'syz.8.19858': attribute type 4 has an invalid length. [ 1359.832924][T19676] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.19858'. [ 1361.175962][T19726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.826438][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19886'. [ 1361.849885][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.859495][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.483027][T19771] input: syz1 as /devices/virtual/input/input119 [ 1363.502187][T11307] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1363.665163][T11307] usb 6-1: Using ep0 maxpacket: 32 [ 1363.676678][T11307] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1363.694068][T11307] usb 6-1: config 0 has no interface number 0 [ 1363.706659][T11307] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1363.727459][T11307] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1363.737991][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.759681][T11307] usb 6-1: Product: syz [ 1363.773801][T11307] usb 6-1: Manufacturer: syz [ 1363.784335][T11307] usb 6-1: SerialNumber: syz [ 1363.821605][T11307] usb 6-1: config 0 descriptor?? [ 1363.841291][T11307] smsc75xx v1.0.0 [ 1363.846255][T11307] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1363.865363][T11307] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1364.044031][T11307] usb 6-1: USB disconnect, device number 62 [ 1365.043462][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19945'. [ 1365.093020][T19874] netlink: 'syz.8.19944': attribute type 1 has an invalid length. [ 1365.146316][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19944'. [ 1365.166884][T19874] bond3 (unregistering): Released all slaves [ 1367.487574][T19940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.012405][T19981] netlink: 'syz.3.19993': attribute type 4 has an invalid length. [ 1369.028346][T19981] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19993'. [ 1369.845030][T20009] netlink: 'syz.3.20003': attribute type 8 has an invalid length. [ 1371.564318][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20028'. [ 1371.639825][T20064] netlink: 'syz.5.20029': attribute type 4 has an invalid length. [ 1371.669096][T20064] netlink: 17 bytes leftover after parsing attributes in process `syz.5.20029'. [ 1372.406047][T20083] netlink: 16 bytes leftover after parsing attributes in process `syz.7.20041'. [ 1372.965573][T26571] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1373.144013][T26571] usb 4-1: Using ep0 maxpacket: 32 [ 1373.180654][T26571] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1373.199853][T26571] usb 4-1: config 0 has no interface number 0 [ 1373.222512][T26571] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1373.265452][T26571] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1373.297109][T26571] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1373.316420][T26571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.342253][T26571] usb 4-1: Product: syz [ 1373.356753][T26571] usb 4-1: Manufacturer: syz [ 1373.361397][T26571] usb 4-1: SerialNumber: syz [ 1373.373549][T26571] usb 4-1: config 0 descriptor?? [ 1373.488563][ T30] audit: type=1326 audit(1763497652.436:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1373.514650][ T30] audit: type=1326 audit(1763497652.436:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1373.538192][ T30] audit: type=1326 audit(1763497652.436:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1373.570493][ T30] audit: type=1326 audit(1763497652.436:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1378df10 code=0x7ffc0000 [ 1373.604699][T26571] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1373.627884][ T30] audit: type=1326 audit(1763497652.436:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f2cb code=0x7ffc0000 [ 1373.644631][T26571] cx231xx 4-1:0.1: Failed to read PCB config [ 1373.654754][ T30] audit: type=1326 audit(1763497652.436:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f2cb code=0x7ffc0000 [ 1373.678561][T26571] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1373.689469][ T30] audit: type=1326 audit(1763497652.446:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f2cb code=0x7ffc0000 [ 1373.702792][T26571] usb 4-1: USB disconnect, device number 36 [ 1373.722336][ T30] audit: type=1326 audit(1763497652.446:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f2cb code=0x7ffc0000 [ 1373.745384][T11308] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1373.792921][ T30] audit: type=1326 audit(1763497652.566:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f2cb code=0x7ffc0000 [ 1373.826345][ T30] audit: type=1326 audit(1763497652.656:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.8.20058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f2cb code=0x7ffc0000 [ 1373.926434][T11308] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.939965][T11308] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.959383][T11308] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1373.969167][T11308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.978460][T11308] usb 9-1: Product: syz [ 1373.992047][T11308] usb 9-1: Manufacturer: syz [ 1373.996823][T11308] usb 9-1: SerialNumber: syz [ 1374.008070][T11308] usb 9-1: config 0 descriptor?? [ 1374.023360][T11308] uvcvideo 9-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 1374.040849][T11308] uvcvideo 9-1:0.0: No valid video chain found. [ 1374.257817][T26571] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1374.307105][T11308] usb 9-1: USB disconnect, device number 46 [ 1374.633307][T26571] usb 4-1: Using ep0 maxpacket: 32 [ 1374.940568][T26571] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.954027][T26571] usb 4-1: config 0 has no interface number 0 [ 1375.042161][T26571] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1375.053045][T26571] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1375.065371][T26571] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1375.074976][T26571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.083097][T26571] usb 4-1: Product: syz [ 1375.115755][T26571] usb 4-1: Manufacturer: syz [ 1375.199217][T26571] usb 4-1: SerialNumber: syz [ 1375.403823][T26571] usb 4-1: config 0 descriptor?? [ 1375.661513][T26571] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1375.704944][T26571] cx231xx 4-1:0.1: Failed to read PCB config [ 1375.733011][T26571] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1375.809418][T26571] usb 4-1: USB disconnect, device number 37 [ 1376.090078][T20159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.120984][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20122'. [ 1381.345237][T20323] mac80211_hwsim hwsim18 wlan1: Caught tx_queue_len zero misconfig [ 1381.490275][T20331] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1381.993077][T20357] usb usb7: usbfs: process 20357 (syz.2.20167) did not claim interface 0 before use [ 1382.132743][T20367] netlink: 104 bytes leftover after parsing attributes in process `syz.8.20171'. [ 1382.254338][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1382.254358][ T30] audit: type=1326 audit(1763497661.226:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20370 comm="syz.8.20174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1382.305477][ T30] audit: type=1326 audit(1763497661.256:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20370 comm="syz.8.20174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1382.333191][ T30] audit: type=1326 audit(1763497661.256:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20370 comm="syz.8.20174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1382.361371][ T30] audit: type=1326 audit(1763497661.256:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20370 comm="syz.8.20174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1382.498478][T20383] pim6reg1: entered promiscuous mode [ 1382.520535][T20383] pim6reg1: entered allmulticast mode [ 1383.195578][T20409] misc userio: No port type given on /dev/userio [ 1386.085231][T20505] tipc: Enabling of bearer rejected, failed to enable media [ 1386.289536][T20512] @: renamed from vlan0 [ 1387.018216][T20537] pim6reg1: entered promiscuous mode [ 1387.025739][T20537] pim6reg1: entered allmulticast mode [ 1389.652777][T11307] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1389.822251][T11307] usb 6-1: Using ep0 maxpacket: 32 [ 1389.829362][T11307] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1389.839995][T11307] usb 6-1: config 0 has no interface number 0 [ 1389.849676][T11307] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1389.873582][T11307] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1389.886225][T11307] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1389.902039][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.938404][T11307] usb 6-1: Product: syz [ 1389.947746][T11307] usb 6-1: Manufacturer: syz [ 1389.953381][T11307] usb 6-1: SerialNumber: syz [ 1389.966502][T11307] usb 6-1: config 0 descriptor?? [ 1390.207177][T11307] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1390.237893][T11307] cx231xx 6-1:0.1: Failed to read PCB config [ 1390.252496][T11307] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 1390.281255][T11307] usb 6-1: USB disconnect, device number 63 [ 1390.752716][T11307] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1390.806978][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20310'. [ 1390.911884][T11307] usb 6-1: Using ep0 maxpacket: 32 [ 1390.934065][T11307] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1390.951921][T11307] usb 6-1: config 0 has no interface number 0 [ 1390.958166][T11307] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1390.981905][T11307] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1390.991220][T11307] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1391.001918][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.009973][T11307] usb 6-1: Product: syz [ 1391.018199][T11307] usb 6-1: Manufacturer: syz [ 1391.023257][T11307] usb 6-1: SerialNumber: syz [ 1391.033212][T11307] usb 6-1: config 0 descriptor?? [ 1391.256094][T20688] binder: 20687:20688 ioctl c0306201 200000004a40 returned -22 [ 1391.280190][T11307] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1391.302163][T11307] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1391.422653][T11307] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1391.441251][T11307] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1391.461915][T11307] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1391.480273][T11307] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1391.500060][T11307] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1391.516825][T11307] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -32 [ 1391.586878][T11307] i2c i2c-2: Added multiplexed i2c bus 4 [ 1391.617143][T11307] i2c i2c-2: Added multiplexed i2c bus 5 [ 1391.633433][T11307] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1391.653308][T11307] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1391.717130][T11307] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 1391.753319][T11307] usb 6-1: USB disconnect, device number 64 [ 1393.375061][ T30] audit: type=1326 audit(1763497672.346:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20789 comm="syz.3.20370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x0 [ 1395.983565][T20892] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.20417'. [ 1396.111942][T11307] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1396.272322][T11307] usb 6-1: Using ep0 maxpacket: 8 [ 1396.290713][T11307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1396.307249][T11307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.332308][T11307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1396.356604][T11307] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1396.382369][T20915] netlink: 'syz.8.20428': attribute type 1 has an invalid length. [ 1396.390764][T20915] netlink: 'syz.8.20428': attribute type 2 has an invalid length. [ 1396.401151][T11307] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1396.425060][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.441946][T11307] usb 6-1: Product: syz [ 1396.452228][T11307] usb 6-1: Manufacturer: syz [ 1396.461449][T11307] usb 6-1: SerialNumber: syz [ 1396.580281][ T30] audit: type=1326 audit(1763497675.546:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20922 comm="syz.8.20433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x0 [ 1396.720844][T11307] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1396.784955][T11307] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1396.829621][T11307] usb 6-1: USB disconnect, device number 65 [ 1396.867035][T29933] udevd[29933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.990158][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20443'. [ 1397.379861][T20957] pim6reg1: entered promiscuous mode [ 1397.409307][T20957] pim6reg1: entered allmulticast mode [ 1398.398467][T21006] netlink: 348 bytes leftover after parsing attributes in process `syz.5.20473'. [ 1398.409508][T21006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.20473'. [ 1399.236398][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20492'. [ 1399.380976][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20496'. [ 1400.009172][T21083] binder: 21081:21083 ioctl f502 0 returned -22 [ 1400.443046][T21105] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1400.790072][T21121] GUP no longer grows the stack in syz.7.20529 (21121): 200000004000-200000005000 (200000001000) [ 1400.818154][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20530'. [ 1400.830177][T21121] CPU: 0 UID: 0 PID: 21121 Comm: syz.7.20529 Not tainted syzkaller #0 PREEMPT(full) [ 1400.830206][T21121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1400.830221][T21121] Call Trace: [ 1400.830230][T21121] [ 1400.830239][T21121] dump_stack_lvl+0x189/0x250 [ 1400.830277][T21121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1400.830303][T21121] ? __pfx__printk+0x10/0x10 [ 1400.830320][T21121] ? find_vma+0xe7/0x160 [ 1400.830361][T21121] __get_user_pages+0x2470/0x2a00 [ 1400.830410][T21121] ? __gup_longterm_locked+0xc63/0x1660 [ 1400.830436][T21121] ? down_read_killable+0x1d1/0x350 [ 1400.830464][T21121] __gup_longterm_locked+0xde4/0x1660 [ 1400.830495][T21121] ? try_grab_folio_fast+0x1bf/0x6a0 [ 1400.830532][T21121] ? gup_fast_fallback+0x1b86/0x22d0 [ 1400.830561][T21121] gup_fast_fallback+0x1d65/0x22d0 [ 1400.830630][T21121] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1400.830654][T21121] ? __mutex_lock+0x335/0x1350 [ 1400.830692][T21121] ? is_valid_gup_args+0x11f/0x200 [ 1400.830720][T21121] ? get_user_pages_fast+0x4d/0xb0 [ 1400.830750][T21121] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 1400.830784][T21121] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1400.830805][T21121] ? wait_for_space+0x248/0x2d0 [ 1400.830826][T21121] iov_iter_get_pages2+0x5e/0xa0 [ 1400.830855][T21121] __se_sys_vmsplice+0x548/0x10d0 [ 1400.830896][T21121] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1400.830921][T21121] ? __pfx_futex_wake+0x10/0x10 [ 1400.831003][T21121] ? do_syscall_64+0xbe/0xfa0 [ 1400.831037][T21121] do_syscall_64+0xfa/0xfa0 [ 1400.831067][T21121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.831086][T21121] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1400.831105][T21121] ? clear_bhb_loop+0x60/0xb0 [ 1400.831128][T21121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.831149][T21121] RIP: 0033:0x7f3ecd78f6c9 [ 1400.831169][T21121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1400.831186][T21121] RSP: 002b:00007f3ece6ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1400.831206][T21121] RAX: ffffffffffffffda RBX: 00007f3ecd9e5fa0 RCX: 00007f3ecd78f6c9 [ 1400.831221][T21121] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 1400.831233][T21121] RBP: 00007f3ecd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1400.831244][T21121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.831256][T21121] R13: 00007f3ecd9e6038 R14: 00007f3ecd9e5fa0 R15: 00007f3ecdb0fa28 [ 1400.831285][T21121] [ 1401.657697][T21152] tipc: Enabled bearer , priority 10 [ 1401.897831][T21159] netlink: 72 bytes leftover after parsing attributes in process `syz.8.20547'. [ 1402.277499][T21169] dns_resolver: Unsupported server list version (0) [ 1403.351954][T11307] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1403.522252][T11307] usb 4-1: Using ep0 maxpacket: 8 [ 1403.544056][T11307] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1403.567865][T11307] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1403.612202][T11307] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1403.636462][T11307] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1403.672121][T11307] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1403.692331][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.942082][T11307] usb 4-1: GET_CAPABILITIES returned 0 [ 1403.947645][T11307] usbtmc 4-1:16.0: can't read capabilities [ 1404.182115][T11307] usb 4-1: USB disconnect, device number 38 [ 1404.443182][T21266] netlink: 56 bytes leftover after parsing attributes in process `syz.8.20598'. [ 1404.544054][T21273] netlink: 'syz.8.20601': attribute type 11 has an invalid length. [ 1404.553126][T21273] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.20601'. [ 1404.683922][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20605'. [ 1404.973229][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20611'. [ 1404.985668][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20611'. [ 1405.119491][T21304] netlink: 64 bytes leftover after parsing attributes in process `syz.7.20616'. [ 1405.153674][T21306] @0Ù: renamed from bond_slave_1 [ 1405.251628][T21309] netlink: 68 bytes leftover after parsing attributes in process `syz.5.20617'. [ 1405.943196][T21352] netlink: 'syz.2.20639': attribute type 4 has an invalid length. [ 1406.329980][ T30] audit: type=1326 audit(1763497685.296:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21372 comm="syz.8.20649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x0 [ 1406.892547][T11307] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1407.342859][T11307] usb 6-1: Using ep0 maxpacket: 8 [ 1407.358558][T11307] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1407.370252][T11307] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1407.380955][T11307] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1407.391964][T11307] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1407.406037][T11307] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1407.434162][T11307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.668728][T11307] usb 6-1: GET_CAPABILITIES returned 0 [ 1407.678368][T11307] usbtmc 6-1:16.0: can't read capabilities [ 1407.914600][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1407.927684][T21381] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1407.945891][T11307] usb 6-1: USB disconnect, device number 66 [ 1408.562828][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20686'. [ 1408.746158][T21457] netlink: 104 bytes leftover after parsing attributes in process `syz.3.20689'. [ 1409.020697][T21473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20696'. [ 1409.047987][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20696'. [ 1409.465039][T26574] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1409.647081][T26574] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1409.655531][T26574] usb 9-1: config 0 has no interface number 0 [ 1409.687383][T26574] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1409.703299][T26574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.711340][T26574] usb 9-1: Product: syz [ 1409.743882][T26574] usb 9-1: Manufacturer: syz [ 1409.748533][T26574] usb 9-1: SerialNumber: syz [ 1409.767253][T26574] usb 9-1: config 0 descriptor?? [ 1409.994335][T26574] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1410.033522][T26574] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1410.072449][T26574] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1410.080530][T26574] usb 9-1: media controller created [ 1410.177542][T26574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1410.206740][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20702'. [ 1410.298450][T26574] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1410.393296][T26574] usb 9-1: USB disconnect, device number 47 [ 1412.056725][T21616] netlink: 44 bytes leftover after parsing attributes in process `syz.7.20763'. [ 1412.102182][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20763'. [ 1412.425424][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20767'. [ 1412.459261][T21631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20770'. [ 1412.628377][ T30] audit: type=1326 audit(1763497691.596:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1412.713741][ T30] audit: type=1326 audit(1763497691.596:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1412.815696][ T30] audit: type=1326 audit(1763497691.626:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1412.868312][ T30] audit: type=1326 audit(1763497691.626:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1412.939659][ T30] audit: type=1326 audit(1763497691.626:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1412.962429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.006244][ T30] audit: type=1326 audit(1763497691.626:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1413.028856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.037096][ T30] audit: type=1326 audit(1763497691.626:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1413.083226][ T30] audit: type=1326 audit(1763497691.626:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1413.156559][ T30] audit: type=1326 audit(1763497691.626:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1413.178962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.214674][ T30] audit: type=1326 audit(1763497691.626:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21634 comm="syz.7.20772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1413.772549][T11307] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1413.941955][T11307] usb 4-1: Using ep0 maxpacket: 32 [ 1413.955611][T11307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1413.983377][T11307] usb 4-1: config 9 has an invalid interface number: 254 but max is 0 [ 1414.001973][T11307] usb 4-1: config 9 has no interface number 0 [ 1414.007408][T21680] netlink: 324 bytes leftover after parsing attributes in process `syz.2.20793'. [ 1414.027979][T11307] usb 4-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 1414.044817][T11307] usb 4-1: config 9 interface 254 has no altsetting 0 [ 1414.051126][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20793'. [ 1414.062303][T11307] usb 4-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 1414.091892][T11307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.121666][T11307] usb 4-1: Product: syz [ 1414.133716][T11307] usb 4-1: Manufacturer: syz [ 1414.142292][T11307] usb 4-1: SerialNumber: syz [ 1414.166586][T21664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1414.385362][T11307] hso 4-1:9.254: Not our interface [ 1414.412840][T11307] usb 4-1: USB disconnect, device number 39 [ 1414.625621][T21705] netlink: 268 bytes leftover after parsing attributes in process `syz.5.20805'. [ 1416.029711][T26574] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1416.182070][T26574] usb 9-1: Using ep0 maxpacket: 16 [ 1416.190498][T26574] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 1416.203187][T26574] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.222158][T26574] usb 9-1: config 0 has no interface number 0 [ 1416.236591][T26574] usb 9-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1416.255931][T26574] usb 9-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1416.298100][T26574] usb 9-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1416.323569][T26574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.363159][T26574] usb 9-1: config 0 descriptor?? [ 1416.396935][T26574] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1416.581665][T26574] snd-usb-audio 9-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 1416.634729][T26574] usb 9-1: USB disconnect, device number 48 [ 1416.669265][T21783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20842'. [ 1416.827395][T21785] x_tables: duplicate underflow at hook 2 [ 1420.212001][T11307] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1420.364520][T11307] usb 9-1: Using ep0 maxpacket: 32 [ 1420.394464][T11307] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1420.404108][T11307] usb 9-1: config 0 has no interface number 0 [ 1420.410343][T11307] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1420.434900][T11307] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1420.452843][T11307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.472093][T11307] usb 9-1: Product: syz [ 1420.476293][T11307] usb 9-1: Manufacturer: syz [ 1420.480981][T11307] usb 9-1: SerialNumber: syz [ 1420.540662][T11307] usb 9-1: config 0 descriptor?? [ 1420.558135][T11307] smsc75xx v1.0.0 [ 1420.960662][T11307] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1420.986485][T11307] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1421.012445][T11307] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1421.044700][T11307] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1421.092368][T11307] usb 9-1: USB disconnect, device number 49 [ 1421.714408][T21959] xt_TCPMSS: Only works on TCP SYN packets [ 1423.289607][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.296122][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.741039][T22052] binder: 22051:22052 ioctl c0306201 200000004a40 returned -22 [ 1424.316019][T22077] netlink: 'syz.7.20980': attribute type 10 has an invalid length. [ 1424.324211][T22077] netlink: 40 bytes leftover after parsing attributes in process `syz.7.20980'. [ 1424.459342][T22077] dummy0: entered promiscuous mode [ 1424.981122][T22098] binder: 22094:22098 ioctl c0306201 2000000001c0 returned -14 [ 1426.043936][T22143] netlink: 'syz.2.21012': attribute type 21 has an invalid length. [ 1427.017539][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1427.017557][ T30] audit: type=1326 audit(1763497705.986:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.098129][ T30] audit: type=1326 audit(1763497705.986:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.184643][ T30] audit: type=1326 audit(1763497705.986:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.254234][ T30] audit: type=1326 audit(1763497705.986:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.341448][ T30] audit: type=1326 audit(1763497705.986:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.411902][ T30] audit: type=1326 audit(1763497705.986:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.502077][ T30] audit: type=1326 audit(1763497705.986:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.536823][ T30] audit: type=1326 audit(1763497705.986:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.564605][ T30] audit: type=1326 audit(1763497705.986:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1427.642320][ T30] audit: type=1326 audit(1763497705.996:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.7.21030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1429.050961][T22243] netlink: 'syz.7.21059': attribute type 4 has an invalid length. [ 1429.107570][T22243] netlink: 17 bytes leftover after parsing attributes in process `syz.7.21059'. [ 1430.743281][T22297] netlink: 'syz.5.21085': attribute type 5 has an invalid length. [ 1431.657983][T22332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21103'. [ 1431.670488][T22332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21103'. [ 1432.445405][T22328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1433.047507][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21125'. [ 1433.324204][T11308] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1433.513833][T11308] usb 4-1: config 0 has no interfaces? [ 1433.536958][T11308] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1433.573791][T11308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.620207][T11308] usb 4-1: config 0 descriptor?? [ 1433.764027][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 1433.835611][T11308] usb 4-1: USB disconnect, device number 40 [ 1434.299021][T22424] dns_resolver: Unsupported content type (6) [ 1435.630707][T22486] binder: 22484:22486 ioctl c0306201 2000000001c0 returned -14 [ 1436.592746][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21189'. [ 1437.165077][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1437.165095][ T30] audit: type=1326 audit(1763497716.136:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.215481][ T30] audit: type=1326 audit(1763497716.136:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.244724][ T30] audit: type=1326 audit(1763497716.166:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.342257][ T30] audit: type=1326 audit(1763497716.166:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.424273][ T30] audit: type=1326 audit(1763497716.166:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.498084][ T30] audit: type=1326 audit(1763497716.176:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.593300][ T30] audit: type=1326 audit(1763497716.176:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.667792][ T30] audit: type=1326 audit(1763497716.176:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.720446][ T30] audit: type=1326 audit(1763497716.176:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1437.795750][ T30] audit: type=1326 audit(1763497716.176:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22535 comm="syz.3.21196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6138f8f6c9 code=0x7ffc0000 [ 1438.420278][T22595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21224'. [ 1439.637510][T22652] netlink: 64 bytes leftover after parsing attributes in process `syz.5.21250'. [ 1440.709456][T22703] netlink: 324 bytes leftover after parsing attributes in process `syz.8.21276'. [ 1440.738274][T22704] binder: 22700:22704 ioctl c0306201 200000000940 returned -14 [ 1442.994054][T22796] veth0_to_team: entered promiscuous mode [ 1442.999925][T22796] veth0_to_team: entered allmulticast mode [ 1443.315289][T22811] netlink: 388 bytes leftover after parsing attributes in process `syz.5.21323'. [ 1443.666529][T22827] openvswitch: netlink: Flow key attr not present in new flow. [ 1444.915941][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1444.915958][ T30] audit: type=1326 audit(1763497723.886:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.5.21356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x0 [ 1444.944484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1444.970911][T22881] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21358'. [ 1445.681668][T22914] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21373'. [ 1445.799202][T22921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.401470][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21391'. [ 1446.492367][T11308] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1446.665275][T11308] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1446.702621][T11308] usb 9-1: can't read configurations, error -71 [ 1446.837522][T22975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21402'. [ 1449.401447][T23056] netlink: 'syz.8.21437': attribute type 1 has an invalid length. [ 1449.459250][T23056] bond3: entered promiscuous mode [ 1449.484816][T23056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1449.541037][T23056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1449.548603][T23056] IPv6: NLM_F_CREATE should be set when creating new route [ 1449.556966][T23056] IPv6: NLM_F_CREATE should be set when creating new route [ 1449.565770][T23056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1449.605924][T23061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1449.623402][T23061] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1449.673857][T23061] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1449.714278][T23061] bond3: (slave wireguard0): making interface the new active one [ 1449.722347][T23061] wireguard0: entered promiscuous mode [ 1449.730293][T23061] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 1449.792689][T23056] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1449.812951][T23056] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 1450.582915][T23110] netlink: 'syz.7.21459': attribute type 1 has an invalid length. [ 1450.607189][T23109] vlan3: entered promiscuous mode [ 1450.737255][T23110] bond3: entered promiscuous mode [ 1450.772300][T23120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1450.772603][T23110] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1450.779868][T23120] IPv6: NLM_F_CREATE should be set when creating new route [ 1450.796697][T23120] IPv6: NLM_F_CREATE should be set when creating new route [ 1450.898691][T23120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1450.954778][ T30] audit: type=1326 audit(1763497729.926:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23128 comm="syz.5.21467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f5918f6c9 code=0x0 [ 1450.984853][T23117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1450.992306][T23117] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1451.003698][T23117] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1451.022926][T23117] bond3: (slave wireguard0): making interface the new active one [ 1451.044181][T23117] wireguard0: entered promiscuous mode [ 1451.056324][T23117] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 1451.099165][T23120] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1451.148004][T23120] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 1453.067808][T23228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21511'. [ 1455.479343][T23297] netlink: 188 bytes leftover after parsing attributes in process `syz.2.21542'. [ 1455.501464][T23299] netlink: 36 bytes leftover after parsing attributes in process `syz.5.21543'. [ 1455.518436][T23299] netlink: 76 bytes leftover after parsing attributes in process `syz.5.21543'. [ 1456.152051][T26571] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1456.314623][T26571] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1456.332666][T26571] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1456.362995][T26571] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1456.383041][T26571] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1456.403896][T26571] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1456.425941][T26571] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1456.436897][T26571] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1456.458177][T23341] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21563'. [ 1456.472174][T26571] usb 9-1: Product: syz [ 1456.476499][T26571] usb 9-1: Manufacturer: syz [ 1456.514470][T26571] cdc_wdm 9-1:1.0: skipping garbage [ 1456.530004][T26571] cdc_wdm 9-1:1.0: skipping garbage [ 1456.547494][T26571] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1456.562695][T26571] cdc_wdm 9-1:1.0: Unknown control protocol [ 1456.660892][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21564'. [ 1456.709416][T26571] usb 9-1: USB disconnect, device number 52 [ 1457.237634][T23372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21578'. [ 1457.478438][T26571] hid-generic 00AB:0804:0005.0030: hidraw0: HID v0.06 Device [syz0] on syz1 [ 1457.504190][T23386] netlink: 9 bytes leftover after parsing attributes in process `syz.7.21583'. [ 1457.521018][T23386] gretap0: entered promiscuous mode [ 1457.551926][T23386] gretap0: left allmulticast mode [ 1457.705940][T23389] fido_id[23389]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1458.380476][T23428] syzkaller0: entered promiscuous mode [ 1458.415902][T23428] syzkaller0: entered allmulticast mode [ 1461.896669][T23445] ip6tnl0: Caught tx_queue_len zero misconfig [ 1462.411370][T23501] netlink: 'syz.5.21634': attribute type 11 has an invalid length. [ 1463.369561][T23527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21646'. [ 1463.457806][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21647'. [ 1463.927683][T23556] netlink: 44 bytes leftover after parsing attributes in process `syz.5.21659'. [ 1463.952003][T23556] netlink: 59 bytes leftover after parsing attributes in process `syz.5.21659'. [ 1463.965640][T23556] netlink: 59 bytes leftover after parsing attributes in process `syz.5.21659'. [ 1463.997063][T23559] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21662'. [ 1465.593851][ T30] audit: type=1804 audit(1763497744.556:1269): pid=23635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.21694" name="/newroot/3974/bus" dev="tmpfs" ino=23582 res=1 errno=0 [ 1465.950302][T23649] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1467.933244][T23734] netlink: 'syz.5.21741': attribute type 1 has an invalid length. [ 1467.961925][T23734] netlink: 1 bytes leftover after parsing attributes in process `syz.5.21741'. [ 1468.397174][T23755] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21751'. [ 1468.701458][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21755'. [ 1469.277864][T23765] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.319590][T23765] .` (unregistering): (slave c@0Ù): Releasing backup interface [ 1469.364228][T23765] .` (unregistering): Released all slaves [ 1469.418139][T23772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21759'. [ 1469.911645][T23804] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21773'. [ 1470.251314][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21784'. [ 1471.082327][T11308] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1471.255472][T11308] usb 9-1: Using ep0 maxpacket: 32 [ 1471.289314][T11308] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1471.307189][T11308] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1471.336410][T11308] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1471.366388][T11308] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1471.401334][T11308] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1471.422250][T11308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.453017][T11308] usb 9-1: Product: syz [ 1471.457240][T11308] usb 9-1: Manufacturer: syz [ 1471.482631][T11308] usb 9-1: SerialNumber: syz [ 1471.612380][T23879] x_tables: duplicate underflow at hook 2 [ 1471.707073][T11308] usb 9-1: 0:2 : does not exist [ 1471.765228][T23885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21812'. [ 1471.776910][T11308] usb 9-1: USB disconnect, device number 53 [ 1471.819981][T23502] udevd[23502]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.304701][T23913] sock: sock_timestamping_bind_phc: sock not bind to device [ 1472.775234][T23930] netlink: 388 bytes leftover after parsing attributes in process `syz.2.21833'. [ 1473.164959][T11308] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1473.299644][T23955] netlink: 536 bytes leftover after parsing attributes in process `syz.8.21845'. [ 1473.315453][T23955] netlink: 124 bytes leftover after parsing attributes in process `syz.8.21845'. [ 1473.332585][T11308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1473.363196][T11308] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1473.392063][T11308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.430789][T11308] usb 6-1: config 0 descriptor?? [ 1473.451646][T23941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1473.953734][T23991] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1474.199612][T24003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21867'. [ 1474.289676][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21870'. [ 1474.299492][T24009] tc_dump_action: action bad kind [ 1475.202389][T11307] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1475.374857][T11307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.385930][T11307] usb 4-1: config 0 has no interfaces? [ 1475.393466][T11307] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1475.413790][T11307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.440540][T11307] usb 4-1: config 0 descriptor?? [ 1475.668953][T11307] usb 4-1: USB disconnect, device number 41 [ 1475.864082][T11308] usbhid 6-1:0.0: can't add hid device: -71 [ 1475.876387][T11308] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1475.985997][T11308] usb 6-1: USB disconnect, device number 67 [ 1478.859937][T24157] netlink: 16 bytes leftover after parsing attributes in process `syz.7.21938'. [ 1479.344503][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21947'. [ 1479.497614][T24186] netlink: 100 bytes leftover after parsing attributes in process `syz.3.21953'. [ 1479.535697][ T30] audit: type=1326 audit(1763497758.506:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1479.622845][ T30] audit: type=1326 audit(1763497758.526:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1479.706936][ T30] audit: type=1326 audit(1763497758.536:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1479.792398][ T30] audit: type=1326 audit(1763497758.536:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1479.852319][ T30] audit: type=1326 audit(1763497758.536:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1479.934900][ T30] audit: type=1326 audit(1763497758.536:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1479.968855][ T30] audit: type=1326 audit(1763497758.536:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1480.031478][ T30] audit: type=1326 audit(1763497758.536:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1480.111362][ T30] audit: type=1326 audit(1763497758.536:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1480.169510][ T30] audit: type=1326 audit(1763497758.536:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.5.21952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1481.345160][T24264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.562129][T24275] netlink: 'syz.8.21995': attribute type 1 has an invalid length. [ 1481.684707][T24275] bond4: entered promiscuous mode [ 1481.690791][T24275] bond4: entered allmulticast mode [ 1481.707073][T24281] ip6gretap2: entered allmulticast mode [ 1481.719789][T24281] bond4: (slave ip6gretap2): making interface the new active one [ 1481.728445][T24281] ip6gretap2: entered promiscuous mode [ 1481.737254][T24281] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1481.775964][T24275] netlink: 28 bytes leftover after parsing attributes in process `syz.8.21995'. [ 1481.788015][T24275] bond4: left promiscuous mode [ 1481.808684][T24275] ip6gretap2: left promiscuous mode [ 1481.855081][T24275] bond4: left allmulticast mode [ 1481.866743][T24275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1483.674031][T24347] netlink: 128 bytes leftover after parsing attributes in process `syz.2.22026'. [ 1483.685258][T24347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22026'. [ 1483.890762][T24358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22031'. [ 1483.914431][T24359] netlink: 'syz.3.22029': attribute type 4 has an invalid length. [ 1483.928152][T24359] netlink: 'syz.3.22029': attribute type 4 has an invalid length. [ 1484.729449][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.736731][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.772675][T24382] netlink: 68 bytes leftover after parsing attributes in process `syz.7.22043'. [ 1484.922755][T24389] netlink: 44 bytes leftover after parsing attributes in process `syz.8.22047'. [ 1485.357472][T24414] netlink: 32 bytes leftover after parsing attributes in process `syz.7.22056'. [ 1485.617021][T24430] netlink: 108 bytes leftover after parsing attributes in process `syz.5.22066'. [ 1485.627365][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22066'. [ 1485.854098][T24442] netlink: 92 bytes leftover after parsing attributes in process `syz.5.22071'. [ 1486.838869][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1486.838887][ T30] audit: type=1800 audit(1763497765.806:1281): pid=24456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.22076" name="/" dev="fuse" ino=3 res=0 errno=0 [ 1486.872652][T26574] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1486.913432][T24486] binder: 24485:24486 ioctl c0306201 0 returned -14 [ 1487.055832][T26574] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.074002][T26574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1487.093914][T26574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1487.125497][T26574] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1487.140025][T26574] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1487.150310][T26574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.233634][T26574] usb 9-1: config 0 descriptor?? [ 1487.421913][T11308] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1487.588241][T11308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1487.623870][T11308] usb 4-1: not running at top speed; connect to a high speed hub [ 1487.640935][T11308] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 1487.650308][T11308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.695527][T11308] usb 4-1: config 1 has no interface number 0 [ 1487.713789][T26574] hid_parser_main: 118 callbacks suppressed [ 1487.713821][T26574] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1487.720273][T11308] usb 4-1: config 1 interface 138 has no altsetting 0 [ 1487.772299][T26574] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1487.776049][T11308] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1487.779833][T26574] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1487.814598][T11308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.841899][T26574] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1487.845263][T11308] usb 4-1: Product: syz [ 1487.849344][T26574] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1487.875196][T11308] usb 4-1: Manufacturer: syz [ 1487.894772][T11308] usb 4-1: SerialNumber: syz [ 1487.932567][T26574] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1488.024582][T26574] usb 9-1: USB disconnect, device number 54 [ 1488.090600][T24527] xt_l2tp: wrong L2TP version: 0 [ 1488.182386][T11308] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1488.198157][T24523] fido_id[24523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1488.281485][T11308] usb 4-1: USB disconnect, device number 42 [ 1489.086327][T24568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1490.053362][T24619] binder: 24618:24619 ioctl c0306201 2000000004c0 returned -22 [ 1490.253692][T24631] x_tables: duplicate underflow at hook 1 [ 1491.556452][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22190'. [ 1493.394518][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22224'. [ 1493.969055][T24798] binder: 24797:24798 ioctl c018620c 0 returned -14 [ 1494.027245][T24805] binder: 24799:24805 ioctl 40046205 0 returned -22 [ 1494.411895][T11307] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1494.585532][T11307] usb 4-1: Using ep0 maxpacket: 16 [ 1494.599734][T11307] usb 4-1: config 1 has an invalid interface number: 64 but max is 0 [ 1494.618618][T11307] usb 4-1: config 1 has no interface number 0 [ 1494.636588][T11307] usb 4-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 1494.675989][T11307] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 1494.693582][T11307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.703170][T11307] usb 4-1: Product: syz [ 1494.707776][T11307] usb 4-1: Manufacturer: syz [ 1494.714340][T11307] usb 4-1: SerialNumber: syz [ 1494.899231][T24847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22262'. [ 1494.936391][T24847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22262'. [ 1494.938031][T11307] option 4-1:1.64: GSM modem (1-port) converter detected [ 1494.981869][T11307] usb 4-1: USB disconnect, device number 43 [ 1495.002872][T11307] option 4-1:1.64: device disconnected [ 1495.329283][ T30] audit: type=1326 audit(1763497774.286:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.7.22269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x0 [ 1497.012107][T24919] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22295'. [ 1497.611474][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22304'. [ 1498.189380][T24972] netlink: 324 bytes leftover after parsing attributes in process `syz.7.22321'. [ 1498.997396][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22341'. [ 1499.484384][T25044] netlink: 'syz.5.22355': attribute type 4 has an invalid length. [ 1499.675955][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22359'. [ 1500.306777][ T30] audit: type=1326 audit(1763497779.276:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25071 comm="syz.3.22369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6138f8f6c9 code=0x0 [ 1504.872499][T26571] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1505.046421][T26571] usb 6-1: config 0 has no interfaces? [ 1505.052210][T26571] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1505.072957][T26571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.115442][T26571] usb 6-1: config 0 descriptor?? [ 1505.213263][T11307] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1505.259349][T11307] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1505.337751][T11307] usb 6-1: USB disconnect, device number 68 [ 1506.574104][T25296] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22474'. [ 1506.813987][T25310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22480'. [ 1506.823779][T26571] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1506.997669][T26571] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 1507.009771][T26571] usb 4-1: config 0 has no interface number 1 [ 1507.038212][T26571] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1507.059001][T26571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.084091][T26571] usb 4-1: config 0 descriptor?? [ 1507.094314][T25320] input: syz0 as /devices/virtual/input/input124 [ 1507.328854][T26571] usb 4-1: USB disconnect, device number 44 [ 1507.850555][T25354] netlink: 188 bytes leftover after parsing attributes in process `syz.8.22501'. [ 1507.997336][T25362] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1510.231952][T26571] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1510.584517][T26571] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1510.593461][T26571] usb 9-1: config 0 has no interface number 0 [ 1510.622109][T26571] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1510.631606][T26571] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.640250][T26571] usb 9-1: Product: syz [ 1510.654918][T26571] usb 9-1: Manufacturer: syz [ 1510.676098][T26571] usb 9-1: SerialNumber: syz [ 1510.695505][T26571] usb 9-1: config 0 descriptor?? [ 1510.953741][T26571] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1510.965010][T26571] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1510.999581][T26571] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1511.031920][T26571] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1511.050874][T26571] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1511.127076][T26571] usb 9-1: USB disconnect, device number 55 [ 1511.154170][T26571] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1511.204525][T26571] keyspan 9-1:0.133: device disconnected [ 1511.468548][T25471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22555'. [ 1512.523557][T25519] syzkaller0: entered promiscuous mode [ 1512.540569][T25519] syzkaller0: entered allmulticast mode [ 1513.183529][T25548] netlink: 272 bytes leftover after parsing attributes in process `syz.3.22592'. [ 1513.311497][T25552] netlink: 720 bytes leftover after parsing attributes in process `syz.8.22594'. [ 1513.356115][T25554] netlink: 24 bytes leftover after parsing attributes in process `syz.7.22596'. [ 1513.794492][T25577] netlink: 'syz.7.22605': attribute type 13 has an invalid length. [ 1514.783113][T25606] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22618'. [ 1514.980947][T25614] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1516.953355][T25695] tipc: Enabling of bearer rejected, failed to enable media [ 1517.755550][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22677'. [ 1519.182216][T25776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22699'. [ 1519.619374][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22710'. [ 1519.730193][T25801] netlink: 156 bytes leftover after parsing attributes in process `syz.8.22711'. [ 1520.724924][T26571] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1520.881924][T26571] usb 6-1: Using ep0 maxpacket: 8 [ 1520.891273][T26571] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 1520.912913][T26571] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 1520.944789][T26571] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.955512][T26571] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1520.967687][T26571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.984954][T26571] usb 6-1: config 0 descriptor?? [ 1521.187713][ T30] audit: type=1326 audit(1763497800.156:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.7.22743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1521.232298][ T30] audit: type=1326 audit(1763497800.156:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.7.22743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1521.245380][T26571] usbhid 6-1:0.0: can't add hid device: -71 [ 1521.285849][ T30] audit: type=1326 audit(1763497800.156:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.7.22743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1521.286322][T26571] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1521.349574][T26571] usb 6-1: USB disconnect, device number 69 [ 1521.394215][ T30] audit: type=1326 audit(1763497800.156:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.7.22743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1521.453078][ T30] audit: type=1326 audit(1763497800.156:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.7.22743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1521.499647][T25873] netlink: 140 bytes leftover after parsing attributes in process `syz.3.22747'. [ 1521.510412][ T30] audit: type=1326 audit(1763497800.156:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.7.22743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1521.588445][T25875] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22748'. [ 1521.660893][T25875] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1521.704368][T16803] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1521.716798][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22748'. [ 1521.742567][T16803] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1521.752733][T16803] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1521.763646][T16803] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1521.776328][T25875] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 1521.856368][T25875] bond5 (unregistering): Released all slaves [ 1521.880056][T16818] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1521.889188][T16818] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1521.907413][T16818] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1521.926770][T16818] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1522.228729][T25904] netlink: 92 bytes leftover after parsing attributes in process `syz.8.22761'. [ 1522.246066][ T30] audit: type=1326 audit(1763497801.216:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25905 comm="syz.5.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1522.296627][ T30] audit: type=1326 audit(1763497801.246:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25905 comm="syz.5.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1522.363134][ T30] audit: type=1326 audit(1763497801.246:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25905 comm="syz.5.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1522.398819][ T30] audit: type=1326 audit(1763497801.246:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25905 comm="syz.5.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1522.622500][T26571] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1522.706453][T25924] netlink: 'syz.2.22770': attribute type 13 has an invalid length. [ 1522.795095][T26571] usb 9-1: config 0 has an invalid interface number: 182 but max is 1 [ 1522.809248][T26571] usb 9-1: config 0 has no interface number 1 [ 1522.819416][T26571] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1522.830949][T26571] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.864887][T26571] usb 9-1: config 0 descriptor?? [ 1523.100523][T26571] usb 9-1: USB disconnect, device number 56 [ 1525.018032][T26024] netlink: 72 bytes leftover after parsing attributes in process `syz.7.22816'. [ 1528.636770][T26174] netlink: 60 bytes leftover after parsing attributes in process `syz.7.22886'. [ 1529.833772][T26222] fuse: Bad value for 'fd' [ 1530.045310][T26231] netlink: 'syz.2.22911': attribute type 4 has an invalid length. [ 1530.067882][T26231] netlink: 'syz.2.22911': attribute type 5 has an invalid length. [ 1530.086706][T26231] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.22911'. [ 1530.259068][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22914'. [ 1530.278415][T26238] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22914'. [ 1530.288546][T26238] netlink: 16 bytes leftover after parsing attributes in process `syz.8.22914'. [ 1530.560885][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1530.560904][ T30] audit: type=1326 audit(1763497809.526:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.650494][ T30] audit: type=1326 audit(1763497809.526:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.679210][ T30] audit: type=1326 audit(1763497809.526:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.702127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1530.769158][ T30] audit: type=1326 audit(1763497809.526:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.811156][ T30] audit: type=1326 audit(1763497809.526:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.845084][ T30] audit: type=1326 audit(1763497809.526:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.871645][ T30] audit: type=1326 audit(1763497809.526:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.910135][ T30] audit: type=1326 audit(1763497809.526:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1530.982717][ T30] audit: type=1326 audit(1763497809.526:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1531.042806][ T30] audit: type=1326 audit(1763497809.526:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26255 comm="syz.8.22923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1532.905866][T26307] input: syz0 as /devices/virtual/input/input126 [ 1533.442707][T26325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22953'. [ 1533.471353][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22953'. [ 1534.023474][T26348] x_tables: duplicate underflow at hook 1 [ 1534.124884][T26351] netlink: 128 bytes leftover after parsing attributes in process `syz.3.22963'. [ 1534.873041][T26378] netlink: 'syz.2.22976': attribute type 1 has an invalid length. [ 1535.628588][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22990'. [ 1537.120931][T26478] netlink: 92 bytes leftover after parsing attributes in process `syz.3.23025'. [ 1538.191448][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23044'. [ 1544.088604][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23113'. [ 1545.018258][T26704] netlink: 'syz.5.23124': attribute type 16 has an invalid length. [ 1545.038587][T26704] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.23124'. [ 1545.085081][T26679] team0 (unregistering): Port device team_slave_0 removed [ 1545.300486][T26679] team0 (unregistering): Port device team_slave_1 removed [ 1545.496667][T26718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23129'. [ 1545.762467][T26719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1546.166909][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.176539][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.447484][T26752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23144'. [ 1546.977245][T26780] netlink: 'syz.7.23158': attribute type 1 has an invalid length. [ 1547.124387][T26787] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1547.134964][T26787] bond4: (slave bond5): making interface the new active one [ 1547.147894][T26787] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1547.156061][T26780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23158'. [ 1547.219828][T26780] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1547.290173][T26780] bond4 (unregistering): Released all slaves [ 1547.323912][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23165'. [ 1548.036504][T26829] syzkaller0: entered promiscuous mode [ 1548.053800][T26829] syzkaller0: entered allmulticast mode [ 1548.174976][T26837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23183'. [ 1549.214178][T26882] pim6reg1: entered promiscuous mode [ 1549.219522][T26882] pim6reg1: entered allmulticast mode [ 1549.366001][T26891] netlink: 9 bytes leftover after parsing attributes in process `syz.3.23207'. [ 1549.419716][T26896] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23207'. [ 1549.520396][T26891] gretap0: entered promiscuous mode [ 1549.533859][T26891] gretap0: left allmulticast mode [ 1549.561192][T26896] 0ªî{X¹¦: renamed from gretap0 [ 1549.584883][T26896] 0ªî{X¹¦: left promiscuous mode [ 1549.607594][T26896] 0ªî{X¹¦: entered allmulticast mode [ 1549.628987][T26896] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1549.699329][T26902] tipc: Enabled bearer , priority 0 [ 1549.723848][T26901] tipc: Disabling bearer [ 1550.645826][T26938] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1550.849062][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23232'. [ 1553.335413][T27041] x_tables: duplicate underflow at hook 1 [ 1554.633547][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1554.633565][ T30] audit: type=1326 audit(1763497833.606:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1554.692167][ T30] audit: type=1326 audit(1763497833.646:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1554.721039][ T30] audit: type=1326 audit(1763497833.646:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1554.753896][ T30] audit: type=1326 audit(1763497833.646:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1554.829116][ T30] audit: type=1326 audit(1763497833.646:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1554.897231][ T30] audit: type=1326 audit(1763497833.646:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1554.931935][ T30] audit: type=1326 audit(1763497833.646:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1555.114364][ T30] audit: type=1326 audit(1763497833.646:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1555.437746][ T30] audit: type=1326 audit(1763497833.646:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1555.622534][ T30] audit: type=1326 audit(1763497833.656:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27100 comm="syz.8.23305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1378f6c9 code=0x7ffc0000 [ 1556.403132][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1557.703835][T27204] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23351'. [ 1557.748639][T27204] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23351'. [ 1557.920322][T27204] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23351'. [ 1557.959529][T27204] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23351'. [ 1558.159912][T27204] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23351'. [ 1558.171439][T27204] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23351'. [ 1558.650477][T27246] netlink: 'syz.3.23368': attribute type 64 has an invalid length. [ 1558.669892][T27246] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23368'. [ 1560.165329][T27306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23393'. [ 1560.374164][T11307] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1560.532208][T11307] usb 6-1: Using ep0 maxpacket: 32 [ 1560.545585][T11307] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1560.555730][T11307] usb 6-1: config 0 has no interface number 0 [ 1560.567139][T11307] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1560.586952][T11307] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1560.597163][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.608492][T11307] usb 6-1: Product: syz [ 1560.613336][T11307] usb 6-1: Manufacturer: syz [ 1560.618030][T11307] usb 6-1: SerialNumber: syz [ 1560.626778][T11307] usb 6-1: config 0 descriptor?? [ 1560.642899][T11307] smsc75xx v1.0.0 [ 1560.652279][T11307] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1560.682468][T11307] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1560.841464][T26574] usb 6-1: USB disconnect, device number 70 [ 1560.918333][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23409'. [ 1561.860645][T27384] netlink: 68 bytes leftover after parsing attributes in process `syz.3.23430'. [ 1563.389886][T26574] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1563.595952][T26574] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1563.631836][T26574] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1563.641214][T26574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.704542][T26574] usb 6-1: config 0 descriptor?? [ 1563.919030][T26574] usbhid 6-1:0.0: can't add hid device: -71 [ 1563.951822][T26574] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1564.029649][T26574] usb 6-1: USB disconnect, device number 71 [ 1564.296347][T27489] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1564.446036][T27497] __nla_validate_parse: 1 callbacks suppressed [ 1564.446056][T27497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23484'. [ 1564.620419][T27503] sctp: [Deprecated]: syz.5.23486 (pid 27503) Use of int in maxseg socket option. [ 1564.620419][T27503] Use struct sctp_assoc_value instead [ 1564.923511][T27517] netlink: 'syz.3.23493': attribute type 2 has an invalid length. [ 1565.272183][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23501'. [ 1565.285570][T27534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23501'. [ 1565.308364][T27534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23501'. [ 1567.460080][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23535'. [ 1567.600189][T27619] netlink: 'syz.2.23538': attribute type 32 has an invalid length. [ 1568.693524][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23559'. [ 1568.886761][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23559'. [ 1569.026581][T27680] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23565'. [ 1569.037163][T27680] openvswitch: netlink: Flow key attr not present in new flow. [ 1569.127428][T27682] netlink: 'syz.7.23566': attribute type 6 has an invalid length. [ 1569.629606][T27704] binder: 27702:27704 ioctl c0306201 200000000100 returned -14 [ 1570.207829][T27722] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1574.311151][T27862] netlink: 132 bytes leftover after parsing attributes in process `syz.8.23650'. [ 1576.025188][T27903] netdevsim netdevsim7: Direct firmware load for . [ 1576.025188][T27903] failed with error -2 [ 1576.117406][T27903] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1576.117406][T27903] [ 1578.231249][T27977] x_tables: duplicate underflow at hook 2 [ 1578.463619][T27988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23704'. [ 1578.777626][T28010] netem: change failed [ 1578.999496][T28018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23719'. [ 1579.047063][T28018] netlink: 43 bytes leftover after parsing attributes in process `syz.3.23719'. [ 1579.056945][T28018] netlink: 'syz.3.23719': attribute type 5 has an invalid length. [ 1579.065663][T28018] netlink: 43 bytes leftover after parsing attributes in process `syz.3.23719'. [ 1579.448611][T28042] netlink: 104 bytes leftover after parsing attributes in process `syz.2.23731'. [ 1579.892074][T28064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1579.898636][T28064] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1579.916827][T28064] vhci_hcd vhci_hcd.0: Device attached [ 1579.924916][T28067] usbip_core: unknown command [ 1579.929634][T28067] vhci_hcd: unknown pdu 0 [ 1579.937479][T28067] usbip_core: unknown command [ 1579.945477][ T13] vhci_hcd: stop threads [ 1579.966871][ T13] vhci_hcd: release socket [ 1579.971399][ T13] vhci_hcd: disconnect device [ 1580.006161][T28071] PM: Enabling pm_trace changes system date and time during resume. [ 1580.006161][T28071] PM: Correct system time has to be restored manually after resume. [ 1580.432598][T26571] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1580.557228][T28090] netlink: 9 bytes leftover after parsing attributes in process `syz.2.23751'. [ 1580.573709][T28090] gretap0: entered promiscuous mode [ 1580.579076][T28090] gretap0: left allmulticast mode [ 1580.606121][T26571] usb 4-1: Using ep0 maxpacket: 16 [ 1580.633860][T26571] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1580.672621][T26571] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1580.692452][T26571] usb 4-1: config 13 has no interface number 0 [ 1580.698707][T26571] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1580.720641][T26571] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1580.732839][T26571] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1580.744117][T26571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.753750][T26571] usb 4-1: Product: syz [ 1580.758052][T26571] usb 4-1: Manufacturer: syz [ 1580.763250][T26571] usb 4-1: SerialNumber: syz [ 1580.784805][T28076] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1580.895156][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23756'. [ 1581.047591][T26571] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1581.072311][T26571] usb 4-1: MIDIStreaming interface descriptor not found [ 1581.181571][T26571] usb 4-1: USB disconnect, device number 45 [ 1582.219871][T28163] fuse: Bad value for 'fd' [ 1582.817609][T28150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1584.090998][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 1585.714550][T28331] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1587.115168][T28369] bond0: Caught tx_queue_len zero misconfig [ 1587.653524][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23892'. [ 1588.029764][T28406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23900'. [ 1588.263350][T28396] dummy0: entered allmulticast mode [ 1588.279311][T28395] dummy0: left allmulticast mode [ 1593.653860][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23961'. [ 1593.666202][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23961'. [ 1594.997922][T28592] binder: 28591:28592 ioctl c0306201 2000000004c0 returned -22 [ 1596.591850][T26571] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1596.763409][T26571] usb 6-1: Using ep0 maxpacket: 8 [ 1596.770598][T26571] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1596.782549][T26571] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1596.812681][T26571] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1596.842269][T26571] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1596.856952][T26571] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1596.866855][T26571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.090448][T26571] usb 6-1: GET_CAPABILITIES returned 0 [ 1597.110225][T26571] usbtmc 6-1:16.0: can't read capabilities [ 1597.314876][T11307] usb 6-1: USB disconnect, device number 72 [ 1597.429369][T28672] xt_CONNSECMARK: invalid mode: 0 [ 1598.332582][T28690] netlink: 28 bytes leftover after parsing attributes in process `syz.8.24026'. [ 1598.575557][T28697] gretap0: left promiscuous mode [ 1598.676842][T28703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.24033'. [ 1598.941931][T26571] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1599.006926][T28709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24037'. [ 1599.164833][T26571] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1599.176964][T26571] usb 9-1: not running at top speed; connect to a high speed hub [ 1599.193533][T26571] usb 9-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.228880][T26571] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1599.249663][T26571] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1599.275920][T26571] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.295348][T26571] usb 9-1: Product: syz [ 1599.299659][T26571] usb 9-1: Manufacturer: syz [ 1599.317238][T26571] usb 9-1: SerialNumber: syz [ 1599.602639][T26571] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1599.643629][T26571] usb 9-1: USB disconnect, device number 57 [ 1602.424066][T28803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24080'. [ 1602.873405][T28815] loop6: detected capacity change from 0 to 2560 [ 1602.911135][T28815] buffer_io_error: 9 callbacks suppressed [ 1602.911153][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1602.984885][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1602.994394][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.002928][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.010956][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.028887][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.043397][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.057273][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.072421][T28815] ldm_validate_partition_table(): Disk read failed. [ 1603.079577][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.100475][T28815] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.171457][T28815] Dev loop6: unable to read RDB block 0 [ 1603.197927][T28815] loop6: unable to read partition table [ 1603.211884][T28815] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1604.471816][T26571] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1604.644986][T26571] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1604.660927][T28863] netlink: 76 bytes leftover after parsing attributes in process `syz.5.24108'. [ 1604.670785][T26571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 235, setting to 64 [ 1604.695569][T26571] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1604.714649][T26571] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1604.731131][T26571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.753550][T26571] usb 4-1: config 0 descriptor?? [ 1604.766415][T26571] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1605.012475][T26571] usb 4-1: USB disconnect, device number 46 [ 1605.302905][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1605.302924][ T30] audit: type=1326 audit(1763497884.276:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.386786][ T30] audit: type=1326 audit(1763497884.306:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.479703][ T30] audit: type=1326 audit(1763497884.306:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.544081][ T30] audit: type=1326 audit(1763497884.306:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.640075][ T30] audit: type=1326 audit(1763497884.306:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.659242][T28888] netlink: 116 bytes leftover after parsing attributes in process `syz.2.24120'. [ 1605.695926][T28888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24120'. [ 1605.697013][ T30] audit: type=1326 audit(1763497884.306:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.809837][ T30] audit: type=1326 audit(1763497884.306:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.880926][ T30] audit: type=1326 audit(1763497884.306:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1605.992118][ T30] audit: type=1326 audit(1763497884.306:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1606.052239][ T30] audit: type=1326 audit(1763497884.306:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28881 comm="syz.5.24117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x50000 [ 1606.916144][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24136'. [ 1607.607410][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.617908][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.837481][T28949] netlink: 'syz.5.24148': attribute type 5 has an invalid length. [ 1607.924593][T28949] ip6erspan0: entered promiscuous mode [ 1609.306876][T29005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.24174'. [ 1609.625305][T29015] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1609.657009][T29015] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 1609.910260][T29032] loop5: detected capacity change from 0 to 7 [ 1610.116709][T29032] Dev loop5: unable to read RDB block 7 [ 1610.135117][T29032] loop5: unable to read partition table [ 1610.159158][T29032] loop5: partition table beyond EOD, truncated [ 1610.188457][T29032] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1610.432310][T29044] netlink: 268 bytes leftover after parsing attributes in process `syz.2.24193'. [ 1610.543419][T29050] fuse: Bad value for 'fd' [ 1610.775847][T29059] netlink: 68 bytes leftover after parsing attributes in process `syz.5.24199'. [ 1612.333202][T29092] IPv6: NLM_F_CREATE should be specified when creating new route [ 1613.970982][T29153] netlink: 92 bytes leftover after parsing attributes in process `syz.5.24241'. [ 1614.002874][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24241'. [ 1614.026304][T29153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24241'. [ 1614.607139][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24250'. [ 1615.344068][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1615.344084][ T30] audit: type=1326 audit(1763497894.316:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.5.24265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1615.389087][ T30] audit: type=1326 audit(1763497894.316:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.5.24265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1615.505093][ T30] audit: type=1326 audit(1763497894.316:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.5.24265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1615.552044][ T30] audit: type=1326 audit(1763497894.316:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29199 comm="syz.5.24265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1615.793819][T29223] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1616.661642][T16803] tipc: Subscription rejected, illegal request [ 1616.833118][ T30] audit: type=1326 audit(1763497895.786:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.24295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1616.908917][ T30] audit: type=1326 audit(1763497895.786:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.24295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1617.024684][ T30] audit: type=1326 audit(1763497895.856:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.24295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1617.112532][ T30] audit: type=1326 audit(1763497895.856:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.24295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1617.200103][ T30] audit: type=1326 audit(1763497895.856:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.24295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1617.268171][ T30] audit: type=1326 audit(1763497895.856:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.24295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ecd78f6c9 code=0x7ffc0000 [ 1617.816815][T29299] netlink: 'syz.5.24311': attribute type 16 has an invalid length. [ 1617.825839][T29299] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.24311'. [ 1618.988409][T29335] netlink: 72 bytes leftover after parsing attributes in process `syz.8.24328'. [ 1619.219056][T29346] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 1619.278114][T29346] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 1619.307005][T29346] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 1620.692243][T29419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24367'. [ 1621.706309][T29463] netlink: 104 bytes leftover after parsing attributes in process `syz.8.24382'. [ 1621.712151][T29464] binder: 29461:29464 ioctl c0306201 200000000940 returned -22 [ 1623.744837][T29557] support for the xor transformation has been removed. [ 1625.758828][T29644] netlink: 'syz.7.24468': attribute type 16 has an invalid length. [ 1625.796915][T29644] netlink: 64122 bytes leftover after parsing attributes in process `syz.7.24468'. [ 1626.328072][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1626.328090][ T30] audit: type=1326 audit(1763497905.296:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.364015][ T30] audit: type=1326 audit(1763497905.296:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.389400][ T30] audit: type=1326 audit(1763497905.336:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.420644][ T30] audit: type=1326 audit(1763497905.336:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.558242][ T30] audit: type=1326 audit(1763497905.336:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.674266][ T30] audit: type=1326 audit(1763497905.356:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.742216][ T30] audit: type=1326 audit(1763497905.356:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.793076][ T30] audit: type=1326 audit(1763497905.356:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.871862][ T30] audit: type=1326 audit(1763497905.386:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1626.956342][ T30] audit: type=1326 audit(1763497905.386:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29672 comm="syz.5.24482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5918f6c9 code=0x7ffc0000 [ 1628.192716][T29727] tipc: Failed to remove unknown binding: 66,1,1/4294967290:3500395515/3500395517 [ 1628.226079][T29727] tipc: Failed to remove unknown binding: 66,1,1/4294967290:3500395515/3500395517 [ 1628.252601][T29727] tipc: Failed to remove unknown binding: 66,1,1/4294967290:3500395515/3500395517 [ 1628.331684][T29740] netlink: 'syz.2.24512': attribute type 1 has an invalid length. [ 1628.434606][T29740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1630.097142][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24536'. [ 1630.108136][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24536'. [ 1630.184587][T29799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24538'. [ 1630.484827][T29815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24545'. [ 1631.675939][T29872] netlink: 44 bytes leftover after parsing attributes in process `syz.2.24570'. [ 1631.685806][T29872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24570'. [ 1632.462864][T29882] netlink: 20 bytes leftover after parsing attributes in process `syz.8.24574'. [ 1633.120016][T29911] netlink: 28 bytes leftover after parsing attributes in process `syz.8.24588'. [ 1633.140801][T29911] netlink: 28 bytes leftover after parsing attributes in process `syz.8.24588'. [ 1637.221205][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24656'. [ 1637.669529][T30064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24659'. [ 1638.480771][T30088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24672'. [ 1639.372087][T11307] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1639.605349][T11307] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1639.613919][T11307] usb 9-1: config 0 has no interface number 0 [ 1639.739358][T11307] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1639.748978][T11307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.757403][T11307] usb 9-1: Product: syz [ 1639.771879][T11307] usb 9-1: Manufacturer: syz [ 1639.782119][T11307] usb 9-1: SerialNumber: syz [ 1639.793936][T11307] usb 9-1: config 0 descriptor?? [ 1640.010763][T11307] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1640.022450][T11307] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1640.042217][T11307] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1640.065190][T11307] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1640.092892][T11307] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1640.435377][T11307] usb 9-1: USB disconnect, device number 58 [ 1640.470136][T11307] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1640.498769][T11307] keyspan 9-1:0.133: device disconnected [ 1641.157893][T30159] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1641.557282][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24718'. [ 1641.615294][T30193] syzkaller1: entered promiscuous mode [ 1641.620809][T30193] syzkaller1: entered allmulticast mode [ 1641.847880][T30203] xt_bpf: check failed: parse error [ 1642.400217][T30224] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1642.406785][T30224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1642.477241][T30224] vhci_hcd vhci_hcd.0: Device attached [ 1642.526242][T30226] vhci_hcd: connection closed [ 1642.526524][ T5185] vhci_hcd: stop threads [ 1642.544538][ T5185] vhci_hcd: release socket [ 1642.559244][ T5185] vhci_hcd: disconnect device [ 1642.686638][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24741'. [ 1643.333078][T30273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24756'. [ 1643.632502][T11307] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1643.794490][T11307] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 1643.816771][T11307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.845933][T11307] usb 6-1: config 1 has no interface number 0 [ 1643.856782][T11307] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1643.881234][T11307] usb 6-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1643.901583][T11307] usb 6-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1643.927968][T11307] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1643.939871][T11307] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 1643.950630][T11307] usb 6-1: Manufacturer: syz [ 1643.986933][T11307] usb 6-1: SerialNumber: syz [ 1644.237688][T26574] usb 6-1: USB disconnect, device number 73 [ 1644.537338][T30325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24781'. [ 1644.582166][T30325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24781'. [ 1644.704374][T30334] syzkaller0: entered promiscuous mode [ 1644.710189][T30334] syzkaller0: entered allmulticast mode [ 1645.678241][T30384] netlink: 'syz.8.24811': attribute type 4 has an invalid length. [ 1645.691850][T30384] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.24811'. [ 1648.428158][T30482] netlink: 'syz.7.24857': attribute type 11 has an invalid length. [ 1648.441253][T30482] netlink: 'syz.7.24857': attribute type 1 has an invalid length. [ 1648.459838][T30482] netlink: 3593 bytes leftover after parsing attributes in process `syz.7.24857'. [ 1649.453745][T30530] netlink: 96 bytes leftover after parsing attributes in process `syz.7.24880'. [ 1650.102281][T26571] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1650.278115][T30563] netlink: 'syz.3.24896': attribute type 11 has an invalid length. [ 1650.292414][T26571] usb 9-1: Using ep0 maxpacket: 16 [ 1650.299728][T26571] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.352284][T26571] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.365306][T26571] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1650.397322][T26571] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1650.417254][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1650.417272][ T30] audit: type=1326 audit(1763497929.386:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.423051][T30568] netlink: 'syz.3.24898': attribute type 4 has an invalid length. [ 1650.445897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.446655][ T30] audit: type=1326 audit(1763497929.396:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.446703][ T30] audit: type=1326 audit(1763497929.396:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.446748][ T30] audit: type=1326 audit(1763497929.396:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.446791][ T30] audit: type=1326 audit(1763497929.396:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.446831][ T30] audit: type=1326 audit(1763497929.396:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.454912][T26571] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.493733][T26571] usb 9-1: config 0 descriptor?? [ 1650.530028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.687553][ T30] audit: type=1326 audit(1763497929.396:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.772308][ T30] audit: type=1326 audit(1763497929.396:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1650.794855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.802330][ T30] audit: type=1326 audit(1763497929.396:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30565 comm="syz.2.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827638f6c9 code=0x7ffc0000 [ 1651.096868][T26571] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0033/input/input132 [ 1651.163241][T26571] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1651.368157][T11308] usb 9-1: USB disconnect, device number 59 [ 1651.392679][T30589] fido_id[30589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1652.317436][T30637] netlink: 'syz.2.24930': attribute type 11 has an invalid length. [ 1652.342641][T30637] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.24930'. [ 1652.609379][T30653] binder: 30651:30653 ioctl 4018620d 0 returned -22 [ 1652.986434][T30674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24946'. [ 1653.413106][T30686] syzkaller1: entered promiscuous mode [ 1653.419453][T30686] syzkaller1: entered allmulticast mode [ 1655.179020][T30771] netlink: 188 bytes leftover after parsing attributes in process `syz.2.24991'. [ 1655.272489][T26571] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1655.454005][T26571] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 1655.469122][T26571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.494833][T26571] usb 6-1: config 1 has no interface number 0 [ 1655.508307][T26571] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1655.539973][T26571] usb 6-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1655.559214][T26571] usb 6-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1655.596406][T26571] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1655.607436][T26571] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 1655.625138][T26571] usb 6-1: Manufacturer: syz [ 1655.631315][T26571] usb 6-1: SerialNumber: syz [ 1655.867333][T26571] usb 6-1: USB disconnect, device number 74 [ 1656.289947][T30813] fuse: Bad value for 'group_id' [ 1656.303969][T30813] fuse: Bad value for 'group_id' [ 1657.142643][T26574] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1657.303616][T30857] [ 1657.305983][T30857] ===================================================== [ 1657.312930][T30857] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1657.320579][T30857] syzkaller #0 Not tainted [ 1657.325007][T30857] ----------------------------------------------------- [ 1657.331947][T30857] syz.8.25019/30857 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1657.339766][T30857] ffff88807650fc90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1657.348507][T30857] [ 1657.348507][T30857] and this task is already holding: [ 1657.355875][T30857] ffff888050f5b468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1657.364425][T30857] which would create a new lock dependency: [ 1657.370321][T30857] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1657.377982][T30857] [ 1657.377982][T30857] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1657.387421][T30857] (kbd_event_lock){..-.}-{3:3} [ 1657.387451][T30857] [ 1657.387451][T30857] ... which became SOFTIRQ-irq-safe at: [ 1657.399965][T30857] lock_acquire+0x120/0x360 [ 1657.404551][T30857] _raw_spin_lock+0x2e/0x40 [ 1657.409136][T30857] kbd_event+0xd2/0x3f70 [ 1657.413465][T30857] input_handle_events_default+0xd4/0x1a0 [ 1657.419273][T30857] input_pass_values+0x288/0x890 [ 1657.424290][T30857] input_event_dispose+0x3e5/0x6b0 [ 1657.429476][T30857] input_event+0x89/0xe0 [ 1657.433790][T30857] hidinput_hid_event+0x145e/0x1dd0 [ 1657.439086][T30857] hid_process_event+0x4be/0x620 [ 1657.444105][T30857] hid_report_raw_event+0xe91/0x16d0 [ 1657.449473][T30857] hid_input_report+0x43e/0x520 [ 1657.454406][T30857] hid_irq_in+0x47e/0x6d0 [ 1657.458813][T30857] __usb_hcd_giveback_urb+0x376/0x540 [ 1657.464265][T30857] dummy_timer+0x85f/0x44c0 [ 1657.468847][T30857] __hrtimer_run_queues+0x52c/0xc60 [ 1657.474122][T30857] hrtimer_run_softirq+0x187/0x2b0 [ 1657.479312][T30857] handle_softirqs+0x286/0x870 [ 1657.484165][T30857] __irq_exit_rcu+0xca/0x1f0 [ 1657.488844][T30857] irq_exit_rcu+0x9/0x30 [ 1657.493175][T30857] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1657.498901][T30857] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1657.504975][T30857] crng_make_state+0x406/0x700 [ 1657.509817][T30857] _get_random_bytes+0xd5/0x210 [ 1657.514745][T30857] nsim_dev_trap_report_work+0x6ac/0xb80 [ 1657.520462][T30857] process_scheduled_works+0xae1/0x17b0 [ 1657.526089][T30857] worker_thread+0x8a0/0xda0 [ 1657.530761][T30857] kthread+0x711/0x8a0 [ 1657.534917][T30857] ret_from_fork+0x4bc/0x870 [ 1657.539596][T30857] ret_from_fork_asm+0x1a/0x30 [ 1657.544449][T30857] [ 1657.544449][T30857] to a SOFTIRQ-irq-unsafe lock: [ 1657.551482][T30857] (tasklist_lock){.+.+}-{3:3} [ 1657.551511][T30857] [ 1657.551511][T30857] ... which became SOFTIRQ-irq-unsafe at: [ 1657.564116][T30857] ... [ 1657.564125][T30857] lock_acquire+0x120/0x360 [ 1657.571281][T30857] _raw_read_lock+0x36/0x50 [ 1657.575872][T30857] __do_wait+0xde/0x740 [ 1657.580122][T30857] do_wait+0x1f8/0x510 [ 1657.584274][T30857] kernel_wait+0xab/0x170 [ 1657.588700][T30857] call_usermodehelper_exec_work+0xbe/0x230 [ 1657.594673][T30857] process_scheduled_works+0xae1/0x17b0 [ 1657.600387][T30857] worker_thread+0x8a0/0xda0 [ 1657.605056][T30857] kthread+0x711/0x8a0 [ 1657.609208][T30857] ret_from_fork+0x4bc/0x870 [ 1657.613878][T30857] ret_from_fork_asm+0x1a/0x30 [ 1657.618723][T30857] [ 1657.618723][T30857] other info that might help us debug this: [ 1657.618723][T30857] [ 1657.628940][T30857] Chain exists of: [ 1657.628940][T30857] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1657.628940][T30857] [ 1657.641721][T30857] Possible interrupt unsafe locking scenario: [ 1657.641721][T30857] [ 1657.650033][T30857] CPU0 CPU1 [ 1657.655520][T30857] ---- ---- [ 1657.660875][T30857] lock(tasklist_lock); [ 1657.665117][T30857] local_irq_disable(); [ 1657.671865][T30857] lock(kbd_event_lock); [ 1657.678713][T30857] lock(&tty->flow.lock); [ 1657.685640][T30857] [ 1657.689085][T30857] lock(kbd_event_lock); [ 1657.693590][T30857] [ 1657.693590][T30857] *** DEADLOCK *** [ 1657.693590][T30857] [ 1657.701720][T30857] 6 locks held by syz.8.25019/30857: [ 1657.706994][T30857] #0: ffff888050f5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1657.716749][T30857] #1: ffff888050f5b2e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 1657.727025][T30857] #2: ffff888050f5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1657.736428][T30857] #3: ffff888050f5b468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1657.745393][T30857] #4: ffff888050f5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1657.754706][T30857] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1657.763762][T30857] [ 1657.763762][T30857] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1657.774155][T30857] -> (kbd_event_lock){..-.}-{3:3} { [ 1657.779450][T30857] IN-SOFTIRQ-W at: [ 1657.783506][T30857] lock_acquire+0x120/0x360 [ 1657.789825][T30857] _raw_spin_lock+0x2e/0x40 [ 1657.796147][T30857] kbd_event+0xd2/0x3f70 [ 1657.802212][T30857] input_handle_events_default+0xd4/0x1a0 [ 1657.809758][T30857] input_pass_values+0x288/0x890 [ 1657.816515][T30857] input_event_dispose+0x3e5/0x6b0 [ 1657.823450][T30857] input_event+0x89/0xe0 [ 1657.829598][T30857] hidinput_hid_event+0x145e/0x1dd0 [ 1657.836623][T30857] hid_process_event+0x4be/0x620 [ 1657.843384][T30857] hid_report_raw_event+0xe91/0x16d0 [ 1657.850492][T30857] hid_input_report+0x43e/0x520 [ 1657.857248][T30857] hid_irq_in+0x47e/0x6d0 [ 1657.863393][T30857] __usb_hcd_giveback_urb+0x376/0x540 [ 1657.870582][T30857] dummy_timer+0x85f/0x44c0 [ 1657.876905][T30857] __hrtimer_run_queues+0x52c/0xc60 [ 1657.883925][T30857] hrtimer_run_softirq+0x187/0x2b0 [ 1657.890867][T30857] handle_softirqs+0x286/0x870 [ 1657.897452][T30857] __irq_exit_rcu+0xca/0x1f0 [ 1657.903860][T30857] irq_exit_rcu+0x9/0x30 [ 1657.909920][T30857] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1657.917384][T30857] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1657.925183][T30857] crng_make_state+0x406/0x700 [ 1657.931774][T30857] _get_random_bytes+0xd5/0x210 [ 1657.938441][T30857] nsim_dev_trap_report_work+0x6ac/0xb80 [ 1657.945893][T30857] process_scheduled_works+0xae1/0x17b0 [ 1657.953255][T30857] worker_thread+0x8a0/0xda0 [ 1657.959758][T30857] kthread+0x711/0x8a0 [ 1657.965652][T30857] ret_from_fork+0x4bc/0x870 [ 1657.972059][T30857] ret_from_fork_asm+0x1a/0x30 [ 1657.978637][T30857] INITIAL USE at: [ 1657.982610][T30857] lock_acquire+0x120/0x360 [ 1657.988840][T30857] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1657.995777][T30857] vt_reset_unicode+0x2b/0x160 [ 1658.002277][T30857] reset_vc+0x68/0x1b0 [ 1658.008078][T30857] vc_init+0x70/0x4a0 [ 1658.013791][T30857] con_init+0x385/0x9c0 [ 1658.019685][T30857] console_init+0x10e/0x430 [ 1658.025922][T30857] start_kernel+0x254/0x410 [ 1658.032166][T30857] x86_64_start_reservations+0x24/0x30 [ 1658.039361][T30857] x86_64_start_kernel+0x143/0x1c0 [ 1658.046209][T30857] common_startup_64+0x13e/0x147 [ 1658.053008][T30857] } [ 1658.055580][T30857] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1658.063564][T30857] -> (&tty->flow.lock){....}-{3:3} { [ 1658.068871][T30857] INITIAL USE at: [ 1658.072767][T30857] lock_acquire+0x120/0x360 [ 1658.078839][T30857] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1658.085693][T30857] start_tty+0x20/0x70 [ 1658.091326][T30857] n_tty_set_termios+0xa7c/0x1090 [ 1658.097905][T30857] tty_set_termios+0xda4/0x17e0 [ 1658.104312][T30857] set_termios+0x516/0x6c0 [ 1658.110371][T30857] tty_mode_ioctl+0x47e/0x740 [ 1658.116605][T30857] tty_ioctl+0x9c6/0xde0 [ 1658.122408][T30857] __se_sys_ioctl+0xfc/0x170 [ 1658.128565][T30857] do_syscall_64+0xfa/0xfa0 [ 1658.134635][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.142088][T30857] } [ 1658.144574][T30857] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1658.153250][T30857] ... acquired at: [ 1658.157039][T30857] lock_acquire+0x120/0x360 [ 1658.161706][T30857] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1658.167078][T30857] stop_tty+0x2f/0x150 [ 1658.171318][T30857] kbd_event+0x2b72/0x3f70 [ 1658.175905][T30857] input_handle_events_default+0xd4/0x1a0 [ 1658.181796][T30857] input_pass_values+0x288/0x890 [ 1658.186898][T30857] input_event_dispose+0x330/0x6b0 [ 1658.192171][T30857] input_inject_event+0x1dd/0x340 [ 1658.197363][T30857] evdev_write+0x2fc/0x480 [ 1658.201952][T30857] vfs_write+0x27e/0xb30 [ 1658.206362][T30857] ksys_write+0x145/0x250 [ 1658.210858][T30857] do_syscall_64+0xfa/0xfa0 [ 1658.215535][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.221596][T30857] [ 1658.223913][T30857] [ 1658.223913][T30857] the dependencies between the lock to be acquired [ 1658.223923][T30857] and SOFTIRQ-irq-unsafe lock: [ 1658.237407][T30857] -> (tasklist_lock){.+.+}-{3:3} { [ 1658.242706][T30857] HARDIRQ-ON-R at: [ 1658.246853][T30857] lock_acquire+0x120/0x360 [ 1658.253344][T30857] _raw_read_lock+0x36/0x50 [ 1658.259843][T30857] __do_wait+0xde/0x740 [ 1658.265994][T30857] do_wait+0x1f8/0x510 [ 1658.272062][T30857] kernel_wait+0xab/0x170 [ 1658.278383][T30857] call_usermodehelper_exec_work+0xbe/0x230 [ 1658.286264][T30857] process_scheduled_works+0xae1/0x17b0 [ 1658.293798][T30857] worker_thread+0x8a0/0xda0 [ 1658.300382][T30857] kthread+0x711/0x8a0 [ 1658.306442][T30857] ret_from_fork+0x4bc/0x870 [ 1658.313023][T30857] ret_from_fork_asm+0x1a/0x30 [ 1658.319772][T30857] SOFTIRQ-ON-R at: [ 1658.323916][T30857] lock_acquire+0x120/0x360 [ 1658.330407][T30857] _raw_read_lock+0x36/0x50 [ 1658.336903][T30857] __do_wait+0xde/0x740 [ 1658.343051][T30857] do_wait+0x1f8/0x510 [ 1658.349140][T30857] kernel_wait+0xab/0x170 [ 1658.355462][T30857] call_usermodehelper_exec_work+0xbe/0x230 [ 1658.363349][T30857] process_scheduled_works+0xae1/0x17b0 [ 1658.370884][T30857] worker_thread+0x8a0/0xda0 [ 1658.377550][T30857] kthread+0x711/0x8a0 [ 1658.383698][T30857] ret_from_fork+0x4bc/0x870 [ 1658.390273][T30857] ret_from_fork_asm+0x1a/0x30 [ 1658.397022][T30857] INITIAL USE at: [ 1658.401078][T30857] lock_acquire+0x120/0x360 [ 1658.407480][T30857] _raw_write_lock_irq+0xa2/0xf0 [ 1658.414340][T30857] copy_process+0x224f/0x3c00 [ 1658.420922][T30857] kernel_clone+0x21e/0x840 [ 1658.427326][T30857] user_mode_thread+0xdd/0x140 [ 1658.434081][T30857] rest_init+0x23/0x300 [ 1658.440142][T30857] start_kernel+0x3ae/0x410 [ 1658.446550][T30857] x86_64_start_reservations+0x24/0x30 [ 1658.454005][T30857] x86_64_start_kernel+0x143/0x1c0 [ 1658.461025][T30857] common_startup_64+0x13e/0x147 [ 1658.467873][T30857] INITIAL READ USE at: [ 1658.472454][T30857] lock_acquire+0x120/0x360 [ 1658.479292][T30857] _raw_read_lock+0x36/0x50 [ 1658.486142][T30857] __do_wait+0xde/0x740 [ 1658.492639][T30857] do_wait+0x1f8/0x510 [ 1658.499048][T30857] kernel_wait+0xab/0x170 [ 1658.505717][T30857] call_usermodehelper_exec_work+0xbe/0x230 [ 1658.513948][T30857] process_scheduled_works+0xae1/0x17b0 [ 1658.521830][T30857] worker_thread+0x8a0/0xda0 [ 1658.528767][T30857] kthread+0x711/0x8a0 [ 1658.535176][T30857] ret_from_fork+0x4bc/0x870 [ 1658.542109][T30857] ret_from_fork_asm+0x1a/0x30 [ 1658.549206][T30857] } [ 1658.551868][T30857] ... key at: [] tasklist_lock+0x18/0x40 [ 1658.559843][T30857] ... acquired at: [ 1658.563806][T30857] lock_acquire+0x120/0x360 [ 1658.568482][T30857] _raw_read_lock+0x36/0x50 [ 1658.573159][T30857] send_sigurg+0x12b/0x420 [ 1658.577737][T30857] sk_send_sigurg+0x6c/0x2e0 [ 1658.582493][T30857] queue_oob+0x420/0x4f0 [ 1658.586905][T30857] unix_stream_sendmsg+0xc3f/0xdf0 [ 1658.592181][T30857] __sock_sendmsg+0x21c/0x270 [ 1658.597024][T30857] ____sys_sendmsg+0x505/0x830 [ 1658.601953][T30857] ___sys_sendmsg+0x21f/0x2a0 [ 1658.606967][T30857] __x64_sys_sendmsg+0x19b/0x260 [ 1658.612079][T30857] do_syscall_64+0xfa/0xfa0 [ 1658.616762][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.622819][T30857] [ 1658.625128][T30857] -> (&f_owner->lock){....}-{3:3} { [ 1658.630432][T30857] INITIAL USE at: [ 1658.634402][T30857] lock_acquire+0x120/0x360 [ 1658.640639][T30857] _raw_write_lock_irq+0xa2/0xf0 [ 1658.647322][T30857] __f_setown+0x67/0x370 [ 1658.653297][T30857] tty_fasync+0x2dc/0x350 [ 1658.659885][T30857] do_fcntl+0x1099/0x1910 [ 1658.665947][T30857] __se_sys_fcntl+0xc8/0x150 [ 1658.672265][T30857] do_syscall_64+0xfa/0xfa0 [ 1658.678506][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.686127][T30857] INITIAL READ USE at: [ 1658.690535][T30857] lock_acquire+0x120/0x360 [ 1658.697197][T30857] _raw_read_lock_irqsave+0xaf/0x100 [ 1658.704648][T30857] send_sigio+0x38/0x370 [ 1658.711142][T30857] kill_fasync+0x24d/0x4d0 [ 1658.717813][T30857] lease_break_callback+0x26/0x30 [ 1658.725002][T30857] __break_lease+0x6a5/0x1620 [ 1658.731938][T30857] do_dentry_open+0x8b7/0x13f0 [ 1658.738869][T30857] vfs_open+0x3b/0x340 [ 1658.745104][T30857] dentry_open+0x61/0xa0 [ 1658.751511][T30857] do_mq_open+0x59e/0x780 [ 1658.758007][T30857] __x64_sys_mq_open+0x16a/0x1c0 [ 1658.765105][T30857] do_syscall_64+0xfa/0xfa0 [ 1658.771779][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.779833][T30857] } [ 1658.782412][T30857] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1658.791344][T30857] ... acquired at: [ 1658.795217][T30857] lock_acquire+0x120/0x360 [ 1658.799879][T30857] _raw_read_lock_irqsave+0xaf/0x100 [ 1658.805331][T30857] send_sigio+0x38/0x370 [ 1658.809741][T30857] kill_fasync+0x24d/0x4d0 [ 1658.814322][T30857] lease_break_callback+0x26/0x30 [ 1658.819508][T30857] __break_lease+0x6a5/0x1620 [ 1658.824354][T30857] do_dentry_open+0x8b7/0x13f0 [ 1658.829279][T30857] vfs_open+0x3b/0x340 [ 1658.833510][T30857] dentry_open+0x61/0xa0 [ 1658.837914][T30857] do_mq_open+0x59e/0x780 [ 1658.842409][T30857] __x64_sys_mq_open+0x16a/0x1c0 [ 1658.847511][T30857] do_syscall_64+0xfa/0xfa0 [ 1658.852185][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.858238][T30857] [ 1658.860546][T30857] -> (&new->fa_lock){....}-{3:3} { [ 1658.865662][T30857] INITIAL USE at: [ 1658.869541][T30857] lock_acquire+0x120/0x360 [ 1658.875601][T30857] _raw_write_lock_irq+0xa2/0xf0 [ 1658.882095][T30857] fasync_remove_entry+0xf1/0x1c0 [ 1658.888677][T30857] tty_fasync+0x13c/0x350 [ 1658.894582][T30857] __fput+0x8a2/0xa70 [ 1658.900119][T30857] task_work_run+0x1d4/0x260 [ 1658.906266][T30857] exit_to_user_mode_loop+0xe9/0x130 [ 1658.913104][T30857] do_syscall_64+0x2bd/0xfa0 [ 1658.919285][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.926745][T30857] INITIAL READ USE at: [ 1658.931068][T30857] lock_acquire+0x120/0x360 [ 1658.937561][T30857] _raw_read_lock_irqsave+0xaf/0x100 [ 1658.944838][T30857] kill_fasync+0x199/0x4d0 [ 1658.951252][T30857] snd_fasync_work_fn+0x162/0x210 [ 1658.958271][T30857] process_scheduled_works+0xae1/0x17b0 [ 1658.965804][T30857] worker_thread+0x8a0/0xda0 [ 1658.972379][T30857] kthread+0x711/0x8a0 [ 1658.978456][T30857] ret_from_fork+0x4bc/0x870 [ 1658.985118][T30857] ret_from_fork_asm+0x1a/0x30 [ 1658.991870][T30857] } [ 1658.994365][T30857] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1659.003039][T30857] ... acquired at: [ 1659.006827][T30857] lock_acquire+0x120/0x360 [ 1659.011501][T30857] _raw_read_lock_irqsave+0xaf/0x100 [ 1659.016963][T30857] kill_fasync+0x199/0x4d0 [ 1659.021545][T30857] __start_tty+0x18c/0x220 [ 1659.026218][T30857] start_tty+0x2b/0x70 [ 1659.030508][T30857] n_tty_set_termios+0xa7c/0x1090 [ 1659.035717][T30857] tty_set_termios+0xda4/0x17e0 [ 1659.040835][T30857] set_termios+0x516/0x6c0 [ 1659.045422][T30857] tty_mode_ioctl+0x47e/0x740 [ 1659.050281][T30857] tty_ioctl+0x9c6/0xde0 [ 1659.054700][T30857] __se_sys_ioctl+0xfc/0x170 [ 1659.059463][T30857] do_syscall_64+0xfa/0xfa0 [ 1659.064136][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.070192][T30857] [ 1659.072504][T30857] [ 1659.072504][T30857] stack backtrace: [ 1659.078381][T30857] CPU: 0 UID: 0 PID: 30857 Comm: syz.8.25019 Not tainted syzkaller #0 PREEMPT(full) [ 1659.078401][T30857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1659.078413][T30857] Call Trace: [ 1659.078421][T30857] [ 1659.078428][T30857] dump_stack_lvl+0x189/0x250 [ 1659.078455][T30857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1659.078476][T30857] ? __pfx__printk+0x10/0x10 [ 1659.078497][T30857] validate_chain+0x1f05/0x2140 [ 1659.078525][T30857] __lock_acquire+0xab9/0xd20 [ 1659.078544][T30857] ? kill_fasync+0x199/0x4d0 [ 1659.078562][T30857] lock_acquire+0x120/0x360 [ 1659.078584][T30857] ? kill_fasync+0x199/0x4d0 [ 1659.078607][T30857] _raw_read_lock_irqsave+0xaf/0x100 [ 1659.078629][T30857] ? kill_fasync+0x199/0x4d0 [ 1659.078648][T30857] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1659.078673][T30857] kill_fasync+0x199/0x4d0 [ 1659.078697][T30857] ? kill_fasync+0x53/0x4d0 [ 1659.078716][T30857] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1659.078735][T30857] __start_tty+0x18c/0x220 [ 1659.078756][T30857] start_tty+0x2b/0x70 [ 1659.078776][T30857] n_tty_set_termios+0xa7c/0x1090 [ 1659.078797][T30857] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1659.078814][T30857] tty_set_termios+0xda4/0x17e0 [ 1659.078835][T30857] ? __pfx_tty_set_termios+0x10/0x10 [ 1659.078861][T30857] set_termios+0x516/0x6c0 [ 1659.078881][T30857] ? __pfx_set_termios+0x10/0x10 [ 1659.078902][T30857] ? tty_ldisc_ref_wait+0x25/0x70 [ 1659.078924][T30857] ? get_signal+0x1150/0x1340 [ 1659.078945][T30857] tty_mode_ioctl+0x47e/0x740 [ 1659.078966][T30857] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1659.078986][T30857] ? tty_ldisc_ref_wait+0x25/0x70 [ 1659.079007][T30857] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1659.079030][T30857] ? n_tty_ioctl_helper+0x8e/0x340 [ 1659.079051][T30857] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1659.079068][T30857] tty_ioctl+0x9c6/0xde0 [ 1659.079090][T30857] ? __pfx_tty_ioctl+0x10/0x10 [ 1659.079112][T30857] __se_sys_ioctl+0xfc/0x170 [ 1659.079133][T30857] do_syscall_64+0xfa/0xfa0 [ 1659.079158][T30857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.079173][T30857] ? __switch_to_asm+0x39/0x70 [ 1659.079187][T30857] ? clear_bhb_loop+0x60/0xb0 [ 1659.079204][T30857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.079221][T30857] RIP: 0033:0x7f3b1378f6c9 [ 1659.079236][T30857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1659.079262][T30857] RSP: 002b:00007f3b146da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.079281][T30857] RAX: ffffffffffffffda RBX: 00007f3b139e6090 RCX: 00007f3b1378f6c9 [ 1659.079294][T30857] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1659.079305][T30857] RBP: 00007f3b13811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1659.079316][T30857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.079326][T30857] R13: 00007f3b139e6128 R14: 00007f3b139e6090 R15: 00007f3b13b0fa28 [ 1659.079345][T30857] [ 1659.471187][T26574] usb 4-1: not running at top speed; connect to a high speed hub [ 1659.482548][T26574] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1659.493990][T26574] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1659.506813][T26574] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1659.515102][T26574] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 1659.524563][T26574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.534002][T26574] usb 4-1: Product: syz [ 1659.538161][T26574] usb 4-1: Manufacturer: syz [ 1659.542762][T26574] usb 4-1: SerialNumber: syz [ 1659.548881][T30842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1659.762775][T26574] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input134 [ 1659.774536][ T5184] bcm5974 4-1:1.0: could not read from device [ 1659.780619][ T5184] bcm5974: mode switch failed [ 1659.808950][T26574] usb 4-1: USB disconnect, device number 47