last executing test programs: 43m41.5494152s ago: executing program 1 (id=33974): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x640c7000, 0x0, 0x61, 0x0, 0x0, 0x0) 43m41.493822242s ago: executing program 1 (id=33975): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) 43m41.479947753s ago: executing program 1 (id=33977): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f00000002c0)=@v3={0x3000000, [{0x8, 0x10000}, {0xfffffff7, 0x8a7a}], r5}, 0x18, 0x0) 43m41.443368405s ago: executing program 1 (id=33989): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) 43m41.427634206s ago: executing program 1 (id=33982): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 43m41.418032776s ago: executing program 1 (id=33984): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 43m26.415565618s ago: executing program 32 (id=33984): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 38m52.180981178s ago: executing program 4 (id=58810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}], 0x3}, 0x5}], 0x1, 0x2000, 0x0) 38m52.13213499s ago: executing program 4 (id=58811): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x8044040) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 38m52.13176025s ago: executing program 4 (id=58813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) kcmp(r5, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 38m52.13155595s ago: executing program 4 (id=58814): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x40845, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) 38m52.083629722s ago: executing program 4 (id=58816): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) 38m52.083467643s ago: executing program 4 (id=58817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xffefffff}, {0x6, 0x8, 0x6}]}, 0x10) 38m37.082472729s ago: executing program 33 (id=58817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xffefffff}, {0x6, 0x8, 0x6}]}, 0x10) 38m21.215031032s ago: executing program 3 (id=60549): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)=""/75, 0x4b}], 0x1}, 0x4ce0}], 0x1, 0x20, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 38m21.166493964s ago: executing program 3 (id=60553): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x25, 0x0, &(0x7f0000000040)) 38m21.146643286s ago: executing program 3 (id=60556): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f00000001c0), 0x0) 38m21.108082227s ago: executing program 3 (id=60561): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x884) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x1781, 0x0, 0x3, 0x4, 0x80, 0x9}, 0x20) 38m21.059844319s ago: executing program 3 (id=60565): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) 38m21.007240641s ago: executing program 3 (id=60567): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) accept4(r1, 0x0, 0x0, 0x80000) 38m6.025069763s ago: executing program 34 (id=60567): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) accept4(r1, 0x0, 0x0, 0x80000) 21m45.854373009s ago: executing program 5 (id=140645): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x68, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 21m45.853961309s ago: executing program 5 (id=140647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x6, 0x0) 21m45.82792701s ago: executing program 5 (id=140650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 21m45.800074852s ago: executing program 5 (id=140652): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) 21m45.799623342s ago: executing program 5 (id=140654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 21m45.765030463s ago: executing program 5 (id=140656): r0 = getpid() rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) utime(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x400, 0x3}) 21m29.510643542s ago: executing program 35 (id=140656): r0 = getpid() rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) utime(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x400, 0x3}) 11m49.27281129s ago: executing program 6 (id=157642): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) listen(0xffffffffffffffff, 0x0) 11m49.207865773s ago: executing program 6 (id=157644): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) 11m49.207103273s ago: executing program 6 (id=157645): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 11m49.160870615s ago: executing program 6 (id=157647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ptrace(0x10, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000003000)) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 11m49.087298399s ago: executing program 6 (id=157649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 11m49.087056558s ago: executing program 6 (id=157650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) unshare(0x62020680) 11m32.514915361s ago: executing program 36 (id=157650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) unshare(0x62020680) 3.49054501s ago: executing program 0 (id=173234): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x3e, 0x87, 0xde, 0x8, 0x2c7c, 0x512, 0xf5e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x2, 0xff, 0xff, 0xff, 0x48, [], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0xc0, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x8, 0x8, 0x1}}]}}]}}]}}, 0x0) 906.14759ms ago: executing program 2 (id=173309): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffff3) 867.673262ms ago: executing program 2 (id=173310): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f00000000c0), 0x400011d, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, 0x0, 0x0, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 866.885312ms ago: executing program 2 (id=173311): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004) 853.571773ms ago: executing program 2 (id=173312): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 732.586138ms ago: executing program 2 (id=173314): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) 655.130761ms ago: executing program 8 (id=173317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 574.854494ms ago: executing program 8 (id=173318): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffff3) 507.200328ms ago: executing program 8 (id=173319): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 506.786948ms ago: executing program 8 (id=173320): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$inet6(r3, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000880)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x2c, 0x1, '\x00', [@ra={0x5, 0x2, 0x7ff}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}}}], 0x28}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 453.02929ms ago: executing program 8 (id=173321): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(0xffffffffffffffff) 430.565171ms ago: executing program 8 (id=173322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=000000000000000000000']) 380.350903ms ago: executing program 7 (id=173324): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 289.713847ms ago: executing program 2 (id=173325): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x9bb1, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x4}]) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0xb, 0x0, 0x0) syz_clone(0x80020000, 0x0, 0x0, 0x0, 0x0, 0x0) 288.639557ms ago: executing program 7 (id=173326): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4}) 223.07212ms ago: executing program 0 (id=173327): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0xdddd0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x67ffffffffffffff, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 222.67388ms ago: executing program 0 (id=173328): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) 192.764481ms ago: executing program 7 (id=173329): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 123.741054ms ago: executing program 7 (id=173330): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(0xffffffffffffffff) 70.620946ms ago: executing program 0 (id=173331): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f00000000c0), 0x400011d, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500), 0x0, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 49.053097ms ago: executing program 7 (id=173332): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 47.980997ms ago: executing program 0 (id=173333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00", @ANYRES32, @ANYBLOB], 0x398}}, 0x0) 5.570139ms ago: executing program 0 (id=173334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=173335): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000000500), 0x0, 0x4) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffff3) kernel console output (not intermixed with test programs): descriptor?? [ 2686.341206][T29908] usb 8-1: USB disconnect, device number 26 [ 2687.148195][T23543] sit0: entered promiscuous mode [ 2687.165293][T23543] netlink: 'syz.0.165472': attribute type 1 has an invalid length. [ 2687.176928][T23543] netlink: 1 bytes leftover after parsing attributes in process `syz.0.165472'. [ 2687.882931][T23571] sit0: entered promiscuous mode [ 2687.903024][T23571] netlink: 'syz.2.165484': attribute type 1 has an invalid length. [ 2687.911127][T23571] netlink: 1 bytes leftover after parsing attributes in process `syz.2.165484'. [ 2689.278722][T23654] netlink: 'syz.0.165527': attribute type 1 has an invalid length. [ 2689.298149][T23654] netlink: 1 bytes leftover after parsing attributes in process `syz.0.165527'. [ 2691.564139][T23762] netlink: 228 bytes leftover after parsing attributes in process `syz.8.165580'. [ 2691.787353][T23773] overlayfs: failed to resolve './file0': -2 [ 2692.903236][T23871] netlink: 228 bytes leftover after parsing attributes in process `syz.2.165631'. [ 2693.039491][T29908] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2693.210030][T29908] usb 9-1: Using ep0 maxpacket: 8 [ 2693.217372][T29908] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2693.232045][T29908] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2693.253863][T23890] overlayfs: failed to resolve './file0': -2 [ 2693.266473][T29908] usb 9-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2693.295557][T29908] usb 9-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2693.316688][T23895] netlink: 228 bytes leftover after parsing attributes in process `syz.7.165642'. [ 2693.335565][T29908] usb 9-1: config 12 interface 0 has no altsetting 0 [ 2693.357435][T29908] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2693.377458][T29908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.401250][T29908] usb 9-1: Product: syz [ 2693.409648][T29908] usb 9-1: Manufacturer: syz [ 2693.420380][T29908] usb 9-1: SerialNumber: syz [ 2693.603048][T23915] overlayfs: failed to resolve './file0': -2 [ 2693.660620][T29908] usb 9-1: selecting invalid altsetting 0 [ 2693.687588][T29908] usb 9-1: USB disconnect, device number 87 [ 2693.850053][T23945] overlayfs: failed to resolve './file0': -2 [ 2694.008718][T23960] netlink: 'syz.2.165674': attribute type 1 has an invalid length. [ 2694.018273][T23960] netlink: 1 bytes leftover after parsing attributes in process `syz.2.165674'. [ 2694.188068][T23979] overlayfs: failed to resolve './file0': -2 [ 2695.203423][T17210] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 2695.353396][T24041] No source specified [ 2695.386083][T17210] usb 8-1: config 0 has an invalid interface number: 19 but max is 0 [ 2695.403092][T17210] usb 8-1: config 0 has no interface number 0 [ 2695.422530][T17210] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2695.437800][T17210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.456574][T17210] usb 8-1: Product: syz [ 2695.467295][T17210] usb 8-1: Manufacturer: syz [ 2695.478013][T17210] usb 8-1: SerialNumber: syz [ 2695.489054][T17210] usb 8-1: config 0 descriptor?? [ 2695.712895][T17210] usb 8-1: USB disconnect, device number 27 [ 2695.841210][T24069] netlink: 228 bytes leftover after parsing attributes in process `syz.2.165725'. [ 2695.943723][T24073] netlink: 'syz.2.165727': attribute type 1 has an invalid length. [ 2695.970763][T24073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.165727'. [ 2696.543199][T24091] netlink: 'syz.0.165737': attribute type 1 has an invalid length. [ 2696.578385][T24091] netlink: 1 bytes leftover after parsing attributes in process `syz.0.165737'. [ 2697.208318][T24129] netlink: 228 bytes leftover after parsing attributes in process `syz.8.165756'. [ 2697.480731][T24147] overlayfs: failed to resolve './file0': -2 [ 2697.559756][T24151] netlink: 'syz.2.165767': attribute type 1 has an invalid length. [ 2697.573011][T24151] netlink: 1 bytes leftover after parsing attributes in process `syz.2.165767'. [ 2698.626129][T24201] overlayfs: failed to resolve './file0': -2 [ 2699.243205][T17210] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2699.403037][T17210] usb 8-1: device descriptor read/64, error -71 [ 2699.658852][T17210] usb 8-1: device descriptor read/64, error -71 [ 2699.914691][T17210] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2700.057253][T17210] usb 8-1: device descriptor read/64, error -71 [ 2700.319722][T17210] usb 8-1: device descriptor read/64, error -71 [ 2700.447736][T17210] usb usb8-port1: attempt power cycle [ 2700.681792][T24329] netlink: 228 bytes leftover after parsing attributes in process `syz.2.165850'. [ 2700.820705][T17210] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2700.853697][T17210] usb 8-1: device descriptor read/8, error -71 [ 2700.992291][T17210] usb 8-1: device descriptor read/8, error -71 [ 2701.257742][T17210] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2701.289511][T17210] usb 8-1: device descriptor read/8, error -71 [ 2701.379874][T24349] netlink: 228 bytes leftover after parsing attributes in process `syz.0.165862'. [ 2701.429292][T17210] usb 8-1: device descriptor read/8, error -71 [ 2701.546450][T17210] usb usb8-port1: unable to enumerate USB device [ 2703.027267][T24411] netlink: 228 bytes leftover after parsing attributes in process `syz.8.165891'. [ 2703.268329][T24425] sit0: entered promiscuous mode [ 2703.277843][T24425] netlink: 'syz.8.165898': attribute type 1 has an invalid length. [ 2703.285801][T24425] netlink: 1 bytes leftover after parsing attributes in process `syz.8.165898'. [ 2703.613416][T17210] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 2703.816859][T17210] usb 8-1: config 0 has an invalid interface number: 19 but max is 0 [ 2703.824987][T17210] usb 8-1: config 0 has no interface number 0 [ 2703.859995][T17210] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2703.869086][T17210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.897603][T17210] usb 8-1: Product: syz [ 2703.901978][T17210] usb 8-1: Manufacturer: syz [ 2703.906586][T17210] usb 8-1: SerialNumber: syz [ 2703.933549][T17210] usb 8-1: config 0 descriptor?? [ 2704.179534][T17210] usb 8-1: USB disconnect, device number 32 [ 2707.433006][T20299] veth1_macvtap: left promiscuous mode [ 2707.449424][T20299] veth0_vlan: left promiscuous mode [ 2707.585571][T24525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.602221][T24525] bridge0: port 1(bridge_slave_0) entered disabled state [ 2707.632903][T24525] bridge_slave_0: entered allmulticast mode [ 2707.642224][T24525] bridge_slave_0: entered promiscuous mode [ 2707.656279][T24525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.674349][T24525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2707.686052][T24525] bridge_slave_1: entered allmulticast mode [ 2707.699233][T24525] bridge_slave_1: entered promiscuous mode [ 2707.885945][T24525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.893038][T24525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2707.900361][T24525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.907396][T24525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2707.960158][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2707.967743][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2707.979800][T20034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.986874][T20034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2708.006214][T20034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2708.013286][T20034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2708.044163][T24525] veth0_vlan: entered promiscuous mode [ 2708.056879][T24525] veth1_macvtap: entered promiscuous mode [ 2708.175769][ T1372] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2708.367603][ T1372] usb 9-1: Using ep0 maxpacket: 8 [ 2708.373812][ T1372] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2708.388781][ T1372] usb 9-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 2708.398031][ T1372] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2708.407326][ T1372] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2708.633719][ T1372] usb 9-1: USB disconnect, device number 88 [ 2708.828588][T24567] overlayfs: failed to resolve './file0': -2 [ 2710.005468][T24620] netlink: 228 bytes leftover after parsing attributes in process `syz.7.165988'. [ 2710.345874][T24650] overlayfs: failed to resolve './file0': -2 [ 2710.545068][T24682] overlayfs: failed to resolve './file1': -2 [ 2710.949432][T24730] overlayfs: failed to resolve './file1': -2 [ 2711.429393][T24756] netlink: 'syz.0.166056': attribute type 1 has an invalid length. [ 2711.447924][T24756] netlink: 1 bytes leftover after parsing attributes in process `syz.0.166056'. [ 2713.383071][T24844] netlink: 228 bytes leftover after parsing attributes in process `syz.7.166093'. [ 2713.926763][T24884] netlink: 'syz.8.166119': attribute type 1 has an invalid length. [ 2713.942167][T24884] netlink: 1 bytes leftover after parsing attributes in process `syz.8.166119'. [ 2714.950655][ T338] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2715.136157][ T338] usb 3-1: Using ep0 maxpacket: 8 [ 2715.144578][ T338] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2715.163944][ T338] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.196222][ T338] usb 3-1: config 179 has no interface number 0 [ 2715.210732][ T338] usb 3-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2715.253263][ T338] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2715.271022][ T338] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2715.285231][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2715.542549][ T338] usb 3-1: USB disconnect, device number 16 [ 2717.700108][T25091] netlink: 'syz.0.166221': attribute type 1 has an invalid length. [ 2717.708186][T25091] netlink: 1 bytes leftover after parsing attributes in process `syz.0.166221'. [ 2718.014019][ T4701] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2718.185607][ T4701] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 2718.205218][ T4701] usb 3-1: config 0 has no interface number 0 [ 2718.226667][ T4701] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2718.243016][ T4701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.266227][ T4701] usb 3-1: Product: syz [ 2718.277049][ T4701] usb 3-1: Manufacturer: syz [ 2718.287553][ T4701] usb 3-1: SerialNumber: syz [ 2718.298890][ T4701] usb 3-1: config 0 descriptor?? [ 2718.546292][ T4701] usb 3-1: USB disconnect, device number 17 [ 2719.050566][T20034] veth1_macvtap: left promiscuous mode [ 2719.068498][T20034] veth0_vlan: left promiscuous mode [ 2719.240313][T25164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2719.247378][T25164] bridge0: port 1(bridge_slave_0) entered disabled state [ 2719.274295][T25164] bridge_slave_0: entered allmulticast mode [ 2719.280567][T25164] bridge_slave_0: entered promiscuous mode [ 2719.315682][T25164] bridge0: port 2(bridge_slave_1) entered blocking state [ 2719.322746][T25164] bridge0: port 2(bridge_slave_1) entered disabled state [ 2719.357095][T25164] bridge_slave_1: entered allmulticast mode [ 2719.374278][T25164] bridge_slave_1: entered promiscuous mode [ 2719.575124][T20348] bridge0: port 1(bridge_slave_0) entered blocking state [ 2719.582198][T20348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2719.613427][T20034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2719.620502][T20034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2719.671286][T25164] veth0_vlan: entered promiscuous mode [ 2719.677093][ T4701] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2719.700023][T25164] veth1_macvtap: entered promiscuous mode [ 2719.858367][ T4701] usb 9-1: Using ep0 maxpacket: 8 [ 2719.869585][ T4701] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2719.877867][ T4701] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2719.919051][ T4701] usb 9-1: config 179 has no interface number 0 [ 2719.936206][ T4701] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2719.969265][ T4701] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2720.002476][ T4701] usb 9-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2720.058266][ T4701] usb 9-1: config 179 interface 65 has no altsetting 0 [ 2720.076026][ T4701] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2720.098805][ T4701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2720.343657][ T1372] usb 9-1: USB disconnect, device number 89 [ 2720.511667][T25233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2720.518741][T25233] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.543294][T25233] bridge_slave_0: entered allmulticast mode [ 2720.562000][T25233] bridge_slave_0: entered promiscuous mode [ 2720.572934][T25233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2720.592326][T25233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2720.603140][T25233] bridge_slave_1: entered allmulticast mode [ 2720.625046][T25233] bridge_slave_1: entered promiscuous mode [ 2720.753856][T20034] bridge_slave_1: left allmulticast mode [ 2720.759540][T20034] bridge_slave_1: left promiscuous mode [ 2720.774854][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2720.785983][T20034] bridge_slave_0: left allmulticast mode [ 2720.797111][T20034] bridge_slave_0: left promiscuous mode [ 2720.802760][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.988131][T20034] veth1_macvtap: left promiscuous mode [ 2720.993740][T20034] veth0_vlan: left promiscuous mode [ 2721.228695][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2721.235782][T20376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2721.278383][T20348] bridge0: port 2(bridge_slave_1) entered blocking state [ 2721.285433][T20348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2721.312577][T25266] netlink: 228 bytes leftover after parsing attributes in process `syz.7.166298'. [ 2721.398630][T25233] veth0_vlan: entered promiscuous mode [ 2721.447205][T25233] veth1_macvtap: entered promiscuous mode [ 2723.311658][ T338] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2723.482645][ T338] usb 8-1: Using ep0 maxpacket: 8 [ 2723.493745][ T338] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2723.504405][ T338] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2723.516214][ T338] usb 8-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2723.540028][ T338] usb 8-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2723.567520][ T338] usb 8-1: config 12 interface 0 has no altsetting 0 [ 2723.581828][ T338] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2723.595632][ T338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.613637][ T338] usb 8-1: Product: syz [ 2723.622449][ T338] usb 8-1: Manufacturer: syz [ 2723.631698][ T338] usb 8-1: SerialNumber: syz [ 2723.876285][ T338] usb 8-1: selecting invalid altsetting 0 [ 2723.885022][ T338] usb 8-1: USB disconnect, device number 33 [ 2723.911433][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2723.966168][T25398] sit0: entered promiscuous mode [ 2723.977735][T25398] netlink: 'syz.0.166361': attribute type 1 has an invalid length. [ 2723.996516][T25398] netlink: 1 bytes leftover after parsing attributes in process `syz.0.166361'. [ 2724.896218][T25488] sit0: entered promiscuous mode [ 2724.915155][T25488] netlink: 'syz.2.166405': attribute type 1 has an invalid length. [ 2724.942628][T25488] netlink: 1 bytes leftover after parsing attributes in process `syz.2.166405'. [ 2725.391648][T25520] netlink: 'syz.0.166422': attribute type 1 has an invalid length. [ 2725.412913][T25520] netlink: 1 bytes leftover after parsing attributes in process `syz.0.166422'. [ 2725.678002][ T1372] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 2725.838952][ T1372] usb 8-1: config 16 has an invalid interface number: 236 but max is 0 [ 2725.860459][ T1372] usb 8-1: config 16 has no interface number 0 [ 2725.879955][ T1372] usb 8-1: string descriptor 0 read error: -22 [ 2725.894219][ T1372] usb 8-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 2725.923174][ T1372] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2726.171054][ T1372] usb 8-1: USB disconnect, device number 34 [ 2727.320226][T25654] netlink: 228 bytes leftover after parsing attributes in process `syz.2.166486'. [ 2728.550609][T25748] netlink: 228 bytes leftover after parsing attributes in process `syz.2.166532'. [ 2730.112216][ T1372] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2730.282766][ T1372] usb 9-1: Using ep0 maxpacket: 8 [ 2730.292292][ T1372] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2730.317329][ T1372] usb 9-1: config 179 has no interface number 0 [ 2730.345203][ T1372] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2730.389023][ T1372] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2730.410209][ T1372] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2730.432081][ T1372] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2730.458939][ T1372] usb 9-1: config 179 interface 65 has no altsetting 0 [ 2730.473821][ T1372] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2730.492056][ T1372] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2730.725669][ T1372] usb 9-1: USB disconnect, device number 90 [ 2731.441500][T25895] netlink: 228 bytes leftover after parsing attributes in process `syz.0.166604'. [ 2731.723071][T20348] bridge_slave_1: left allmulticast mode [ 2731.728788][T20348] bridge_slave_1: left promiscuous mode [ 2731.735024][T20348] +$<¶: port 2(bridge_slave_1) entered disabled state [ 2731.753177][T20348] bridge_slave_0: left allmulticast mode [ 2731.763508][T20348] bridge_slave_0: left promiscuous mode [ 2731.774293][T20348] +$<¶: port 1(bridge_slave_0) entered disabled state [ 2731.911153][T20348] veth1_macvtap: left promiscuous mode [ 2731.930723][T20348] veth0_vlan: left promiscuous mode [ 2734.060191][T25999] netlink: 'syz.7.166655': attribute type 8 has an invalid length. [ 2735.686962][T28766] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 2735.858305][T28766] usb 8-1: config 0 has an invalid interface number: 19 but max is 0 [ 2735.866480][T28766] usb 8-1: config 0 has no interface number 0 [ 2735.899505][T28766] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2735.920111][T28766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.941561][T28766] usb 8-1: Product: syz [ 2735.943678][T26116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2735.952446][T28766] usb 8-1: Manufacturer: syz [ 2735.963125][T28766] usb 8-1: SerialNumber: syz [ 2735.974445][T28766] usb 8-1: config 0 descriptor?? [ 2736.221998][T28766] usb 8-1: USB disconnect, device number 35 [ 2737.374823][T26171] incfs_lookup_dentry err:-13 [ 2738.437046][T26204] incfs_lookup_dentry err:-13 [ 2740.345032][T28766] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2740.531382][T28766] usb 9-1: Using ep0 maxpacket: 8 [ 2740.552968][T28766] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2740.579107][T28766] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2740.600358][T28766] usb 9-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2740.632752][T28766] usb 9-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2740.654560][T28766] usb 9-1: config 12 interface 0 has no altsetting 0 [ 2740.673458][T28766] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2740.682733][T28766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.707825][T28766] usb 9-1: Product: syz [ 2740.712037][T28766] usb 9-1: Manufacturer: syz [ 2740.738199][T28766] usb 9-1: SerialNumber: syz [ 2740.967928][T28766] usb 9-1: selecting invalid altsetting 0 [ 2740.985377][T28766] usb 9-1: USB disconnect, device number 91 [ 2741.019097][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2744.202474][T26566] overlayfs: missing 'lowerdir' [ 2744.259572][T26572] incfs_lookup_dentry err:-13 [ 2744.337580][T26585] overlayfs: missing 'lowerdir' [ 2744.647708][T26626] overlayfs: missing 'lowerdir' [ 2745.901335][T26743] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2745.926995][T26743] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2746.206961][T26773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2746.226576][T26773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2747.223275][T26817] overlayfs: missing 'lowerdir' [ 2748.169986][T26865] overlayfs: missing 'workdir' [ 2748.531316][T28766] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2748.733835][T28766] usb 3-1: Using ep0 maxpacket: 8 [ 2748.744149][T28766] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2748.775071][T28766] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2748.785384][T28766] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2748.818623][T28766] usb 3-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2748.863865][T28766] usb 3-1: config 12 interface 0 has no altsetting 0 [ 2748.873580][T28766] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2748.882713][T28766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2748.904161][T28766] usb 3-1: Product: syz [ 2748.908561][T28766] usb 3-1: Manufacturer: syz [ 2748.913179][T28766] usb 3-1: SerialNumber: syz [ 2749.144759][T28766] usb 3-1: selecting invalid altsetting 0 [ 2749.173256][T28766] usb 3-1: USB disconnect, device number 18 [ 2749.209596][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2750.953184][T26965] incfs_lookup_dentry err:-13 [ 2751.173603][T26979] input: syz0 as /devices/virtual/input/input81 [ 2751.648908][T27038] input: syz0 as /devices/virtual/input/input83 [ 2751.867665][ T4701] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2751.935349][T20034] bridge_slave_1: left allmulticast mode [ 2751.941018][T20034] bridge_slave_1: left promiscuous mode [ 2751.959444][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2751.967432][T20034] bridge_slave_0: left allmulticast mode [ 2751.973143][T20034] bridge_slave_0: left promiscuous mode [ 2751.979117][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.027514][ T4701] usb 8-1: Using ep0 maxpacket: 8 [ 2752.043262][ T4701] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2752.060225][ T4701] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2752.091751][ T4701] usb 8-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2752.107870][ T4701] usb 8-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2752.120964][T20034] veth1_macvtap: left promiscuous mode [ 2752.126944][T20034] veth0_vlan: left promiscuous mode [ 2752.131620][ T4701] usb 8-1: config 12 interface 0 has no altsetting 0 [ 2752.141068][ T4701] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2752.155514][ T4701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.163643][ T4701] usb 8-1: Product: syz [ 2752.174381][ T4701] usb 8-1: Manufacturer: syz [ 2752.185116][ T4701] usb 8-1: SerialNumber: syz [ 2752.292544][T27050] bridge0: port 1(bridge_slave_0) entered blocking state [ 2752.302369][T27050] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.323896][T27050] bridge_slave_0: entered allmulticast mode [ 2752.330521][T27050] bridge_slave_0: entered promiscuous mode [ 2752.348542][T27050] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.366400][T27050] bridge0: port 2(bridge_slave_1) entered disabled state [ 2752.377211][T27050] bridge_slave_1: entered allmulticast mode [ 2752.388340][T27050] bridge_slave_1: entered promiscuous mode [ 2752.417068][ T4701] usb 8-1: selecting invalid altsetting 0 [ 2752.435984][ T4701] usb 8-1: USB disconnect, device number 36 [ 2752.574247][T27050] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.581318][T27050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2752.588612][T27050] bridge0: port 1(bridge_slave_0) entered blocking state [ 2752.595654][T27050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2752.671222][T20348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.688786][T20348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2752.701953][T20034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2752.709002][T20034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2752.729634][T20348] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.736703][T20348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2752.809479][T27050] veth0_vlan: entered promiscuous mode [ 2752.832793][T27050] veth1_macvtap: entered promiscuous mode [ 2752.951896][T27088] input: syz0 as /devices/virtual/input/input84 [ 2753.146064][T27113] input: syz0 as /devices/virtual/input/input85 [ 2756.130040][T27273] incfs_lookup_dentry err:-13 [ 2756.570681][T27293] incfs_lookup_dentry err:-13 [ 2758.403746][T27347] incfs_lookup_dentry err:-13 [ 2759.235946][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.167325'. [ 2759.254502][T27382] bridge_slave_1: left allmulticast mode [ 2759.265336][T27382] bridge_slave_1: left promiscuous mode [ 2759.278978][T27382] bridge0: port 2(bridge_slave_1) entered disabled state [ 2759.296691][T27382] bridge_slave_0: left allmulticast mode [ 2759.307240][T27382] bridge_slave_0: left promiscuous mode [ 2759.320951][T27382] bridge0: port 1(bridge_slave_0) entered disabled state [ 2761.439597][T17210] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2761.610130][T17210] usb 3-1: Using ep0 maxpacket: 8 [ 2761.616579][T17210] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2761.642813][T17210] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2761.663436][T17210] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2761.695404][T17210] usb 3-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2761.738222][T17210] usb 3-1: config 12 interface 0 has no altsetting 0 [ 2761.749900][T17210] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2761.758967][T17210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.789971][T17210] usb 3-1: Product: syz [ 2761.801991][T17210] usb 3-1: Manufacturer: syz [ 2761.806676][T17210] usb 3-1: SerialNumber: syz [ 2762.035705][T17210] usb 3-1: selecting invalid altsetting 0 [ 2762.055509][T17210] usb 3-1: USB disconnect, device number 19 [ 2762.082249][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2764.010807][T27577] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2764.450779][T27636] loop5: detected capacity change from 0 to 7 [ 2764.689692][T27673] netlink: 888 bytes leftover after parsing attributes in process `syz.8.167464'. [ 2765.254209][T27710] input: syz0 as /devices/virtual/input/input92 [ 2765.579418][T27736] netlink: 888 bytes leftover after parsing attributes in process `syz.0.167494'. [ 2767.024430][T27778] incfs: Backing dir is not set, filesystem can't be mounted. [ 2767.043740][T27778] incfs: mount failed -2 [ 2767.271848][T27796] incfs: Backing dir is not set, filesystem can't be mounted. [ 2767.279375][T27796] incfs: mount failed -2 [ 2767.838065][T27820] input: syz0 as /devices/virtual/input/input94 [ 2767.989285][T27842] input: syz0 as /devices/virtual/input/input95 [ 2768.373538][T23864] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2768.561029][T23864] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2768.586783][T23864] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2768.612105][T23864] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2768.632114][T23864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2768.637234][T27859] netlink: 888 bytes leftover after parsing attributes in process `syz.2.167553'. [ 2768.645257][T23864] usb 8-1: Product: syz [ 2768.664327][T23864] usb 8-1: Manufacturer: syz [ 2768.675052][T23864] usb 8-1: SerialNumber: syz [ 2768.905071][T23864] cdc_ncm 8-1:1.0: bind() failure [ 2768.922387][T23864] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 2768.934940][T23864] cdc_ncm 8-1:1.1: bind() failure [ 2768.950965][T23864] usb 8-1: USB disconnect, device number 37 [ 2769.063421][T27891] input: syz0 as /devices/virtual/input/input96 [ 2769.466313][T27908] netlink: 'syz.7.167575': attribute type 8 has an invalid length. [ 2769.647726][T27925] cgroup: No subsys list or none specified [ 2770.098901][T27965] loop5: detected capacity change from 0 to 7 [ 2770.329750][T17210] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2770.511208][T17210] usb 9-1: Using ep0 maxpacket: 8 [ 2770.526233][T17210] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2770.557579][T17210] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2770.578601][T17210] usb 9-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2770.611017][T17210] usb 9-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2770.638900][T17210] usb 9-1: config 12 interface 0 has no altsetting 0 [ 2770.651061][T17210] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2770.661497][T17210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.669513][T17210] usb 9-1: Product: syz [ 2770.680110][T17210] usb 9-1: Manufacturer: syz [ 2770.690477][T17210] usb 9-1: SerialNumber: syz [ 2770.891641][T28003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167619'. [ 2770.920677][T17210] usb 9-1: selecting invalid altsetting 0 [ 2770.950119][T17210] usb 9-1: USB disconnect, device number 92 [ 2770.973798][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2771.982272][T17210] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2772.152829][T17210] usb 9-1: Using ep0 maxpacket: 8 [ 2772.164677][T17210] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2772.194451][T17210] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2772.226136][T17210] usb 9-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2772.259092][T17210] usb 9-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2772.291401][T17210] usb 9-1: config 12 interface 0 has no altsetting 0 [ 2772.302772][T17210] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2772.311969][T17210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.344129][T17210] usb 9-1: Product: syz [ 2772.354850][T17210] usb 9-1: Manufacturer: syz [ 2772.365612][T17210] usb 9-1: SerialNumber: syz [ 2772.484582][T28079] input: syz0 as /devices/virtual/input/input98 [ 2772.602448][T17210] usb 9-1: selecting invalid altsetting 0 [ 2772.634329][T17210] usb 9-1: USB disconnect, device number 93 [ 2772.647552][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2773.198601][T28126] netlink: 'syz.0.167678': attribute type 8 has an invalid length. [ 2773.517494][T23864] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 2773.528111][T17210] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2773.688047][T17210] usb 9-1: Using ep0 maxpacket: 8 [ 2773.699537][T23864] usb 8-1: config 0 has an invalid interface number: 19 but max is 0 [ 2773.699848][T17210] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2773.726086][T23864] usb 8-1: config 0 has no interface number 0 [ 2773.726792][T17210] usb 9-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2773.752034][T17210] usb 9-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2773.753242][T23864] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2773.782828][T23864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.783966][T17210] usb 9-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2773.791085][T23864] usb 8-1: Product: syz [ 2773.825255][T17210] usb 9-1: config 12 interface 0 has no altsetting 0 [ 2773.844179][T17210] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2773.853465][T17210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.858622][T23864] usb 8-1: Manufacturer: syz [ 2773.866114][T23864] usb 8-1: SerialNumber: syz [ 2773.870728][T17210] usb 9-1: Product: syz [ 2773.877633][T23864] usb 8-1: config 0 descriptor?? [ 2773.879917][T17210] usb 9-1: Manufacturer: syz [ 2773.897998][T17210] usb 9-1: SerialNumber: syz [ 2774.032988][T28156] netlink: 888 bytes leftover after parsing attributes in process `syz.2.167693'. [ 2774.122656][T23864] usb 8-1: USB disconnect, device number 38 [ 2774.126150][T17210] usb 9-1: selecting invalid altsetting 0 [ 2774.154682][T17210] usb 9-1: USB disconnect, device number 94 [ 2774.171032][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2774.692277][T28186] loop5: detected capacity change from 0 to 7 [ 2774.897902][T28204] netlink: 'syz.8.167716': attribute type 8 has an invalid length. [ 2774.922351][T28208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.167718'. [ 2775.081276][T28232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167730'. [ 2775.323533][T28260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.167743'. [ 2776.074717][T28310] loop5: detected capacity change from 0 to 7 [ 2777.310504][T28354] input: syz0 as /devices/virtual/input/input99 [ 2779.004729][T28467] input: syz0 as /devices/virtual/input/input102 [ 2779.029324][ T1372] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2779.215711][ T1372] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 2779.254673][ T1372] usb 3-1: config 0 has no interface number 0 [ 2779.299368][ T1372] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2779.317463][T28482] loop5: detected capacity change from 0 to 7 [ 2779.323628][ T1372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2779.338470][ T1372] usb 3-1: Product: syz [ 2779.345103][ T1372] usb 3-1: Manufacturer: syz [ 2779.364312][ T1372] usb 3-1: SerialNumber: syz [ 2779.375368][ T1372] usb 3-1: config 0 descriptor?? [ 2779.628681][ T1372] usb 3-1: USB disconnect, device number 20 [ 2782.467140][T28561] netlink: 'syz.2.167886': attribute type 8 has an invalid length. [ 2782.598136][T28568] netlink: 888 bytes leftover after parsing attributes in process `syz.0.167888'. [ 2782.922412][T28589] netlink: 888 bytes leftover after parsing attributes in process `syz.7.167898'. [ 2784.243945][T28621] input: syz0 as /devices/virtual/input/input104 [ 2784.455890][ T1372] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2784.605171][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2784.867153][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2784.875219][T28652] loop5: detected capacity change from 0 to 7 [ 2785.138185][ T1372] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2785.287445][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2785.553971][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2785.671339][ T1372] usb usb9-port1: attempt power cycle [ 2786.033727][ T1372] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2786.066714][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2786.155313][T28697] netlink: 888 bytes leftover after parsing attributes in process `syz.7.167950'. [ 2786.205349][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2786.403548][T28711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167956'. [ 2786.451618][T28715] input: syz0 as /devices/virtual/input/input105 [ 2786.470833][ T1372] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2786.503808][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2786.642442][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2786.758816][ T1372] usb usb9-port1: unable to enumerate USB device [ 2787.052991][T28726] netlink: 888 bytes leftover after parsing attributes in process `syz.0.167963'. [ 2787.103138][T28732] netlink: 'syz.0.167966': attribute type 8 has an invalid length. [ 2787.125785][T28734] input: syz0 as /devices/virtual/input/input106 [ 2787.283127][T28750] netlink: 'syz.0.167975': attribute type 8 has an invalid length. [ 2787.524123][T28775] input: syz0 as /devices/virtual/input/input107 [ 2787.824815][ T1372] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2787.963404][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2788.219289][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2788.230994][T28789] netlink: 888 bytes leftover after parsing attributes in process `syz.0.167990'. [ 2788.485808][ T1372] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2788.635064][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2788.791422][T28806] netlink: 888 bytes leftover after parsing attributes in process `syz.2.168001'. [ 2788.886244][T28813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168003'. [ 2788.901595][ T1372] usb 9-1: device descriptor read/64, error -71 [ 2789.030159][ T1372] usb usb9-port1: attempt power cycle [ 2789.413355][ T1372] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2789.467146][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2789.606218][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2789.797466][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.168020'. [ 2789.866412][T28853] netlink: 9 bytes leftover after parsing attributes in process `syz.7.168022'. [ 2789.875549][ T1372] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2789.893270][T28853] gretap0: entered promiscuous mode [ 2789.915427][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2790.064689][ T1372] usb 9-1: device descriptor read/8, error -71 [ 2790.181058][ T1372] usb usb9-port1: unable to enumerate USB device [ 2790.191982][T28874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168031'. [ 2790.594854][T28896] netlink: 888 bytes leftover after parsing attributes in process `syz.0.168042'. [ 2790.949871][T28933] loop5: detected capacity change from 0 to 7 [ 2791.260298][T28949] netlink: 888 bytes leftover after parsing attributes in process `syz.8.168066'. [ 2792.424327][T29019] netlink: 888 bytes leftover after parsing attributes in process `syz.8.168095'. [ 2792.462621][T29021] netlink: 9 bytes leftover after parsing attributes in process `syz.8.168100'. [ 2792.482599][T29021] gretap0: entered promiscuous mode [ 2792.766022][T29032] input: syz0 as /devices/virtual/input/input110 [ 2793.073052][T29042] gretap0: entered promiscuous mode [ 2794.829779][T29127] __nla_validate_parse: 1 callbacks suppressed [ 2794.829797][T29127] netlink: 9 bytes leftover after parsing attributes in process `syz.8.168150'. [ 2794.927399][T29137] netlink: 'syz.8.168156': attribute type 8 has an invalid length. [ 2795.051159][T29146] netlink: 888 bytes leftover after parsing attributes in process `syz.2.168159'. [ 2795.241961][T29160] input: syz0 as /devices/virtual/input/input112 [ 2795.502190][T29166] netlink: 9 bytes leftover after parsing attributes in process `syz.0.168170'. [ 2795.524129][T29166] gretap0: entered promiscuous mode [ 2795.543556][ T4701] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2795.717660][ T4701] usb 8-1: Using ep0 maxpacket: 16 [ 2795.746853][ T4701] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2795.767278][ T4701] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 2795.802717][ T4701] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2795.824630][ T4701] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2795.836263][ T4701] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2795.852706][ T4701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2795.884706][ T4701] usb 8-1: Product: syz [ 2795.888909][ T4701] usb 8-1: Manufacturer: syz [ 2795.915126][ T4701] usb 8-1: SerialNumber: syz [ 2796.024223][T29202] netlink: 9 bytes leftover after parsing attributes in process `syz.0.168186'. [ 2796.152192][ T4701] cdc_ncm 8-1:1.0: bind() failure [ 2796.167379][ T4701] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 2796.197283][ T4701] cdc_ncm 8-1:1.1: bind() failure [ 2796.205898][T29224] netlink: 9 bytes leftover after parsing attributes in process `syz.8.168197'. [ 2796.216060][ T4701] usb 8-1: USB disconnect, device number 39 [ 2796.469294][T29246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29246 comm=syz.2.168207 [ 2796.624701][T29260] netlink: 9 bytes leftover after parsing attributes in process `syz.8.168214'. [ 2796.979657][T29283] futex_wake_op: syz.7.168225 tries to shift op by 32; fix this program [ 2797.729243][T29314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29314 comm=syz.8.168238 [ 2797.991066][T29331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29331 comm=syz.8.168248 [ 2798.169375][T29350] loop5: detected capacity change from 0 to 7 [ 2798.269786][T29356] netlink: 9 bytes leftover after parsing attributes in process `syz.7.168258'. [ 2798.583486][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168274'. [ 2798.790133][T29414] loop5: detected capacity change from 0 to 7 [ 2798.923193][ T4701] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 2799.057978][T29432] input: syz0 as /devices/virtual/input/input113 [ 2799.116120][ T4701] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 2799.124243][ T4701] usb 3-1: config 0 has no interface number 0 [ 2799.148936][ T4701] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2799.158212][ T4701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2799.166231][ T4701] usb 3-1: Product: syz [ 2799.189840][ T4701] usb 3-1: Manufacturer: syz [ 2799.194465][ T4701] usb 3-1: SerialNumber: syz [ 2799.211420][ T4701] usb 3-1: config 0 descriptor?? [ 2799.435023][ T4701] usb 3-1: USB disconnect, device number 21 [ 2799.449439][T29454] netlink: 888 bytes leftover after parsing attributes in process `syz.8.168306'. [ 2799.644300][T29473] netlink: 888 bytes leftover after parsing attributes in process `syz.8.168315'. [ 2799.672140][T29475] loop5: detected capacity change from 0 to 7 [ 2800.284769][T29515] __nla_validate_parse: 1 callbacks suppressed [ 2800.284789][T29515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.168334'. [ 2800.337942][T29524] netlink: 888 bytes leftover after parsing attributes in process `syz.7.168338'. [ 2800.460970][T29538] netlink: 12 bytes leftover after parsing attributes in process `syz.8.168344'. [ 2800.547398][T29548] netlink: 888 bytes leftover after parsing attributes in process `syz.7.168350'. [ 2800.825062][T29569] input: syz0 as /devices/virtual/input/input114 [ 2801.354989][T29591] loop5: detected capacity change from 0 to 7 [ 2802.052301][T29616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29616 comm=syz.8.168382 [ 2802.198715][T29626] loop5: detected capacity change from 0 to 7 [ 2802.420021][T28766] usb 9-1: new full-speed USB device number 103 using dummy_hcd [ 2802.507587][T29642] rust_binder: 1254: no such ref 2 [ 2802.602329][T28766] usb 9-1: config 0 has an invalid interface number: 19 but max is 0 [ 2802.621218][T28766] usb 9-1: config 0 has no interface number 0 [ 2802.644932][T28766] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2802.664761][T28766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.673019][T28766] usb 9-1: Product: syz [ 2802.686534][T28766] usb 9-1: Manufacturer: syz [ 2802.691202][T28766] usb 9-1: SerialNumber: syz [ 2802.702459][T28766] usb 9-1: config 0 descriptor?? [ 2802.926149][T28766] usb 9-1: USB disconnect, device number 103 [ 2803.683600][T20034] bridge_slave_1: left allmulticast mode [ 2803.699356][T20034] bridge_slave_1: left promiscuous mode [ 2803.710156][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2803.739500][T20034] bridge_slave_0: left allmulticast mode [ 2803.752664][T20034] bridge_slave_0: left promiscuous mode [ 2803.774073][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2803.943553][T20034] veth1_macvtap: left promiscuous mode [ 2803.952139][T20034] veth0_vlan: left promiscuous mode [ 2804.188887][T29667] bridge0: port 1(bridge_slave_0) entered blocking state [ 2804.209672][T29667] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.241922][T29667] bridge_slave_0: entered allmulticast mode [ 2804.274472][T29667] bridge_slave_0: entered promiscuous mode [ 2804.307074][T29667] bridge0: port 2(bridge_slave_1) entered blocking state [ 2804.314134][T29667] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.353676][T29667] bridge_slave_1: entered allmulticast mode [ 2804.360088][T29667] bridge_slave_1: entered promiscuous mode [ 2804.546524][T29667] bridge0: port 2(bridge_slave_1) entered blocking state [ 2804.553614][T29667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2804.560884][T29667] bridge0: port 1(bridge_slave_0) entered blocking state [ 2804.568035][T29667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2804.679789][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.687246][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.691466][T29684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29684 comm=syz.0.168409 [ 2804.713104][T20299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2804.720160][T20299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2804.756340][T29686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168412'. [ 2804.772240][T20299] bridge0: port 2(bridge_slave_1) entered blocking state [ 2804.779304][T20299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2804.849922][T29690] loop5: detected capacity change from 0 to 7 [ 2804.863321][T29667] veth0_vlan: entered promiscuous mode [ 2804.896733][T29667] veth1_macvtap: entered promiscuous mode [ 2805.162153][T29713] loop5: detected capacity change from 0 to 7 [ 2805.376832][T29729] netlink: 'syz.0.168431': attribute type 8 has an invalid length. [ 2805.440881][T29733] netlink: 12 bytes leftover after parsing attributes in process `syz.7.168433'. [ 2805.605278][T29758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.168444'. [ 2805.615885][T29760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168445'. [ 2805.705939][T29770] netlink: 'syz.0.168450': attribute type 8 has an invalid length. [ 2805.864250][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.8.168456'. [ 2806.782413][T29814] loop5: detected capacity change from 0 to 7 [ 2806.848740][T29821] bridge0: port 3(ip6gretap0) entered blocking state [ 2806.859069][T29821] bridge0: port 3(ip6gretap0) entered disabled state [ 2806.867963][T29821] ip6gretap0: entered allmulticast mode [ 2806.873992][T29821] ip6gretap0: entered promiscuous mode [ 2806.880130][T29821] bridge0: port 3(ip6gretap0) entered blocking state [ 2806.886831][T29821] bridge0: port 3(ip6gretap0) entered forwarding state [ 2806.896437][T29823] netlink: 9 bytes leftover after parsing attributes in process `syz.2.168475'. [ 2806.917150][T29823] gretap0: entered promiscuous mode [ 2807.015468][T23864] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2807.024982][T29837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29837 comm=syz.8.168482 [ 2807.056925][T29841] netlink: 12 bytes leftover after parsing attributes in process `syz.8.168484'. [ 2807.153653][T29852] netlink: 9 bytes leftover after parsing attributes in process `syz.2.168489'. [ 2807.179196][T29856] syz.8.168491 (29856) used obsolete PPPIOCDETACH ioctl [ 2807.197306][T23864] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2807.218413][T29858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168492'. [ 2807.227551][T23864] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2807.259921][T23864] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2807.287970][T23864] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2807.307882][T23864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.339612][T23864] usb 8-1: config 0 descriptor?? [ 2807.788166][T23864] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 2807.822153][T23864] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2808.093160][ T338] usb 8-1: USB disconnect, device number 40 [ 2808.101153][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168508'. [ 2808.404789][T29913] netlink: 'syz.8.168518': attribute type 8 has an invalid length. [ 2808.541629][T29933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168527'. [ 2808.564769][T29935] netlink: 'syz.0.168528': attribute type 8 has an invalid length. [ 2808.661868][T29945] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2808.661893][T29945] rust_binder: Read failure Err(EFAULT) in pid:1148 [ 2808.727415][T29953] netlink: 'syz.0.168537': attribute type 8 has an invalid length. [ 2808.779990][T23864] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2808.966001][T23864] usb 3-1: Using ep0 maxpacket: 8 [ 2808.983804][T23864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2809.009200][T23864] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2809.041737][T23864] usb 3-1: config 12 interface 0 has no altsetting 0 [ 2809.073374][T23864] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2809.082461][T23864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2809.112084][T23864] usb 3-1: Product: syz [ 2809.122812][T23864] usb 3-1: Manufacturer: syz [ 2809.136573][T23864] usb 3-1: SerialNumber: syz [ 2809.370978][T23864] usb 3-1: selecting invalid altsetting 0 [ 2809.402958][T23864] snd-usb-audio 3-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 2809.414576][T23864] usb 3-1: USB disconnect, device number 22 [ 2809.427842][T16535] udevd[16535]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2810.139147][T30034] __vm_enough_memory: pid: 30034, comm: syz.7.168576, bytes: 18014402804453376 not enough memory for the allocation [ 2811.536619][T30098] __vm_enough_memory: pid: 30098, comm: syz.7.168603, bytes: 18014402804453376 not enough memory for the allocation [ 2812.444949][T30120] __vm_enough_memory: pid: 30120, comm: syz.2.168617, bytes: 18014402804453376 not enough memory for the allocation [ 2812.512500][T30122] loop5: detected capacity change from 0 to 7 [ 2813.797448][T30159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168637'. [ 2815.395368][T30280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.168688'. [ 2815.481630][T30288] netlink: 'syz.7.168698': attribute type 8 has an invalid length. [ 2816.731552][T30334] loop5: detected capacity change from 0 to 7 [ 2816.887817][T30338] netlink: 9 bytes leftover after parsing attributes in process `syz.7.168724'. [ 2816.976505][T30350] __vm_enough_memory: pid: 30350, comm: syz.0.168730, bytes: 18014402804453376 not enough memory for the allocation [ 2817.068538][T30357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30357 comm=syz.0.168732 [ 2817.125384][T30368] netlink: 9 bytes leftover after parsing attributes in process `syz.8.168737'. [ 2817.182879][T30374] __vm_enough_memory: pid: 30374, comm: syz.8.168741, bytes: 18014402804453376 not enough memory for the allocation [ 2817.377470][T30392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.168750'. [ 2817.893908][T20348] veth1_macvtap: left promiscuous mode [ 2817.899458][T20348] veth0_vlan: left promiscuous mode [ 2818.115417][T30412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.122508][T30412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2818.152519][T30412] bridge_slave_0: entered allmulticast mode [ 2818.169722][T30412] bridge_slave_0: entered promiscuous mode [ 2818.188142][T30412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.195202][T30412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2818.217938][T30412] bridge_slave_1: entered allmulticast mode [ 2818.233867][T30412] bridge_slave_1: entered promiscuous mode [ 2818.453960][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.461042][T20376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2818.489130][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.496204][T20376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2818.528837][T30412] veth0_vlan: entered promiscuous mode [ 2818.545809][T30412] veth1_macvtap: entered promiscuous mode [ 2818.803663][T20376] ip6gretap0: left allmulticast mode [ 2818.815933][T20376] ip6gretap0: left promiscuous mode [ 2818.831991][T20376] bridge0: port 3(ip6gretap0) entered disabled state [ 2818.847672][T20376] bridge_slave_1: left allmulticast mode [ 2818.856499][T20376] bridge_slave_1: left promiscuous mode [ 2818.863100][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 2818.875156][T20376] bridge_slave_0: left allmulticast mode [ 2818.888451][T20376] bridge_slave_0: left promiscuous mode [ 2818.894443][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 2818.995955][T20376] veth1_macvtap: left promiscuous mode [ 2819.009715][T20376] veth0_vlan: left promiscuous mode [ 2819.243709][T30471] bridge0: port 1(bridge_slave_0) entered blocking state [ 2819.250781][T30471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.296839][T30471] bridge_slave_0: entered allmulticast mode [ 2819.323797][T30471] bridge_slave_0: entered promiscuous mode [ 2819.351646][T30514] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 2819.361390][T30471] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.361405][ T36] audit: type=1400 audit(2000524551.727:287649): avc: denied { relabelto } for pid=30513 comm="syz.2.168803" name="" dev="pipefs" ino=1676395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 2819.368417][T30471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.470383][T30471] bridge_slave_1: entered allmulticast mode [ 2819.498276][T30471] bridge_slave_1: entered promiscuous mode [ 2819.698901][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2819.706093][T20376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2819.715704][T20034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.722771][T20034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2819.769760][T30471] veth0_vlan: entered promiscuous mode [ 2819.791472][T30471] veth1_macvtap: entered promiscuous mode [ 2819.954222][T30558] __vm_enough_memory: pid: 30558, comm: syz.8.168819, bytes: 18014402804453376 not enough memory for the allocation [ 2820.833038][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.168847'. [ 2821.164842][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.168856'. [ 2821.573035][T30657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30657 comm=syz.2.168865 [ 2822.697718][ T36] audit: type=1400 audit(2000524554.850:287650): avc: denied { relabelfrom } for pid=30683 comm="syz.2.168879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2822.719027][ T36] audit: type=1400 audit(2000524554.869:287651): avc: denied { relabelto } for pid=30683 comm="syz.2.168879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2823.209384][ T4701] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2823.392397][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2823.405840][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2823.416049][ T4701] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2823.429577][ T4701] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2823.438842][ T4701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.449478][ T4701] usb 8-1: config 0 descriptor?? [ 2823.672615][ T4701] usbhid 8-1:0.0: can't add hid device: -71 [ 2823.678947][ T4701] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2823.691002][ T4701] usb 8-1: USB disconnect, device number 41 [ 2823.714314][T30765] __vm_enough_memory: pid: 30765, comm: syz.8.168916, bytes: 18014402804453376 not enough memory for the allocation [ 2823.758693][T30768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30768 comm=syz.8.168918 [ 2823.990134][T30793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30793 comm=syz.2.168930 [ 2825.226789][T30848] __vm_enough_memory: pid: 30848, comm: syz.7.168951, bytes: 18014402804453376 not enough memory for the allocation [ 2825.782506][T30898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30898 comm=syz.2.168973 [ 2827.859980][T31055] __vm_enough_memory: pid: 31055, comm: syz.8.169039, bytes: 18014402804453376 not enough memory for the allocation [ 2828.119381][T31095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31095 comm=syz.8.169051 [ 2828.507687][T31150] __vm_enough_memory: pid: 31150, comm: syz.0.169070, bytes: 18014402804453376 not enough memory for the allocation [ 2828.509282][T31149] netlink: 12 bytes leftover after parsing attributes in process `syz.8.169071'. [ 2828.838507][T31191] netlink: 4 bytes leftover after parsing attributes in process `syz.8.169091'. [ 2829.073087][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.169101'. [ 2829.299018][T31241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.169115'. [ 2829.347310][T31244] __vm_enough_memory: pid: 31244, comm: syz.8.169116, bytes: 18014402804453376 not enough memory for the allocation [ 2831.425359][T31339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31339 comm=syz.0.169156 [ 2831.743146][T31362] netlink: 9 bytes leftover after parsing attributes in process `syz.2.169165'. [ 2833.569581][T31414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.169184'. [ 2833.849480][T31428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169191'. [ 2833.874407][T31430] __vm_enough_memory: pid: 31430, comm: syz.0.169192, bytes: 18014402804453376 not enough memory for the allocation [ 2834.196761][T31450] netlink: 9 bytes leftover after parsing attributes in process `syz.8.169201'. [ 2835.217644][T31469] __vm_enough_memory: pid: 31469, comm: syz.8.169209, bytes: 18014402804453376 not enough memory for the allocation [ 2835.906881][ T1372] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2836.094898][ T1372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2836.120264][ T1372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2836.173124][ T1372] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2836.205467][ T1372] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2836.214529][ T1372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2836.251215][ T1372] usb 3-1: config 0 descriptor?? [ 2836.485495][ T1372] usbhid 3-1:0.0: can't add hid device: -71 [ 2836.506270][ T1372] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2836.545218][ T1372] usb 3-1: USB disconnect, device number 23 [ 2836.912922][T20034] bridge_slave_1: left allmulticast mode [ 2836.918608][T20034] bridge_slave_1: left promiscuous mode [ 2836.935015][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2836.956913][T20034] bridge_slave_0: left allmulticast mode [ 2836.972982][T20034] bridge_slave_0: left promiscuous mode [ 2836.994371][T20034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2837.152556][T20034] veth1_macvtap: left promiscuous mode [ 2837.168320][T20034] veth0_vlan: left promiscuous mode [ 2837.272152][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 2837.301242][T31529] bridge0: port 1(bridge_slave_0) entered disabled state [ 2837.321735][T31529] bridge_slave_0: entered allmulticast mode [ 2837.342406][T31529] bridge_slave_0: entered promiscuous mode [ 2837.368195][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 2837.375258][T31529] bridge0: port 2(bridge_slave_1) entered disabled state [ 2837.399481][T31529] bridge_slave_1: entered allmulticast mode [ 2837.416636][T31529] bridge_slave_1: entered promiscuous mode [ 2837.507102][T31568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169248'. [ 2837.563826][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 2837.570910][T31529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2837.578207][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 2837.585265][T31529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2837.604085][T31574] __vm_enough_memory: pid: 31574, comm: syz.0.169249, bytes: 18014402804453376 not enough memory for the allocation [ 2837.711167][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 2837.740993][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 2837.758523][T20348] bridge0: port 1(bridge_slave_0) entered blocking state [ 2837.765614][T20348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2837.796179][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2837.803245][T20376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2837.885013][T31529] veth0_vlan: entered promiscuous mode [ 2837.912861][T31529] veth1_macvtap: entered promiscuous mode [ 2838.012412][T31597] __vm_enough_memory: pid: 31597, comm: syz.8.169258, bytes: 18014402804453376 not enough memory for the allocation [ 2838.471432][T31610] netlink: 9 bytes leftover after parsing attributes in process `syz.2.169265'. [ 2838.616793][T31620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169269'. [ 2839.103553][T31647] __vm_enough_memory: pid: 31647, comm: syz.8.169278, bytes: 18014402804453376 not enough memory for the allocation [ 2840.855022][T31766] __vm_enough_memory: pid: 31766, comm: syz.0.169342, bytes: 18014402804453376 not enough memory for the allocation [ 2841.107492][T31803] __vm_enough_memory: pid: 31803, comm: syz.0.169351, bytes: 18014402804453376 not enough memory for the allocation [ 2842.282909][T31822] netlink: 9 bytes leftover after parsing attributes in process `syz.0.169360'. [ 2842.293160][T31822] gretap0: entered promiscuous mode [ 2843.396457][T31863] netlink: 9 bytes leftover after parsing attributes in process `syz.2.169370'. [ 2844.837834][T31954] __vm_enough_memory: pid: 31954, comm: syz.8.169403, bytes: 18014402804453376 not enough memory for the allocation [ 2846.049298][T32040] __vm_enough_memory: pid: 32040, comm: syz.7.169423, bytes: 18014402804453376 not enough memory for the allocation [ 2846.194968][T28766] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2846.367446][T28766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2846.386955][T28766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2846.407881][T28766] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2846.432943][T28766] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2846.454222][T28766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2846.474339][T28766] usb 9-1: config 0 descriptor?? [ 2846.707465][T28766] usbhid 9-1:0.0: can't add hid device: -71 [ 2846.718656][T28766] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2846.740450][T28766] usb 9-1: USB disconnect, device number 104 [ 2847.090501][ T1372] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2847.275952][ T1372] usb 3-1: config 0 has no interfaces? [ 2847.283790][ T1372] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2847.292851][ T1372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2847.334066][ T1372] usb 3-1: SerialNumber: syz [ 2847.344933][ T1372] usb 3-1: config 0 descriptor?? [ 2847.594151][T23864] usb 3-1: USB disconnect, device number 24 [ 2850.768608][ T4701] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2850.943085][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2850.975612][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2851.013860][ T4701] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2851.048473][ T4701] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2851.069956][ T4701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2851.102390][ T4701] usb 8-1: config 0 descriptor?? [ 2851.324543][ T4701] usbhid 8-1:0.0: can't add hid device: -71 [ 2851.341290][ T4701] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2851.356249][ T4701] usb 8-1: USB disconnect, device number 42 [ 2852.950957][T32480] netlink: 60 bytes leftover after parsing attributes in process `syz.8.169616'. [ 2853.750358][T32506] __vm_enough_memory: pid: 32506, comm: syz.2.169630, bytes: 18014402804453376 not enough memory for the allocation [ 2854.458623][T32529] __vm_enough_memory: pid: 32529, comm: syz.8.169640, bytes: 18014402804453376 not enough memory for the allocation [ 2855.824134][T32576] netlink: 48 bytes leftover after parsing attributes in process `syz.7.169661'. [ 2855.998411][T32601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.169673'. [ 2858.049665][ T302] __vm_enough_memory: pid: 302, comm: syz.2.169731, bytes: 18014402804453376 not enough memory for the allocation [ 2858.242226][ T314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=314 comm=syz.0.169725 [ 2859.116385][ T368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=368 comm=syz.2.169754 [ 2859.701861][ T441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=441 comm=syz.8.169775 [ 2860.882371][ T550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=550 comm=syz.2.169817 [ 2861.482127][ T593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=593 comm=syz.2.169847 [ 2862.482236][ T669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=669 comm=syz.0.169882 [ 2863.316833][T29908] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2863.499243][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2863.521036][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2863.541644][T29908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2863.576461][T29908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2863.594053][T29908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2863.616155][T29908] usb 9-1: config 0 descriptor?? [ 2863.836445][T29908] usbhid 9-1:0.0: can't add hid device: -71 [ 2863.854245][T29908] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2863.874361][T29908] usb 9-1: USB disconnect, device number 105 [ 2864.769327][ T775] netlink: 52 bytes leftover after parsing attributes in process `syz.2.169926'. [ 2864.908218][ T785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=785 comm=syz.7.169931 [ 2866.625741][ T898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=898 comm=syz.8.169965 [ 2866.717759][T29908] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2866.889409][T29908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2866.911194][T29908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2866.941642][T29908] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2866.981234][T29908] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2867.010222][T29908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2867.034926][T29908] usb 8-1: config 0 descriptor?? [ 2867.483252][T29908] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 2867.529180][T29908] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2867.753975][T23864] usb 8-1: USB disconnect, device number 43 [ 2868.413932][ T956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=956 comm=syz.7.169992 [ 2869.201816][T23864] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2869.394781][T23864] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2869.425692][T23864] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2869.446278][T23864] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2869.486473][T23864] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2869.517186][T23864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2869.543650][T23864] usb 8-1: config 0 descriptor?? [ 2869.654336][ T1032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1032 comm=syz.8.170029 [ 2869.765262][T23864] usbhid 8-1:0.0: can't add hid device: -71 [ 2869.777586][T23864] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2869.797319][T23864] usb 8-1: USB disconnect, device number 44 [ 2870.757726][ T1120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1120 comm=syz.8.170062 [ 2874.211404][ T1300] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1300 comm=syz.2.170134 [ 2874.820262][T29908] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 2874.905549][ T4701] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2875.002518][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2875.022811][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2875.043558][T29908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2875.076148][T29908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2875.078439][ T4701] usb 3-1: config 0 has no interfaces? [ 2875.086997][T29908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.118784][ T4701] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2875.127832][ T4701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2875.136230][T29908] usb 9-1: config 0 descriptor?? [ 2875.161410][ T4701] usb 3-1: SerialNumber: syz [ 2875.166781][ T4701] usb 3-1: config 0 descriptor?? [ 2875.358062][T29908] usbhid 9-1:0.0: can't add hid device: -71 [ 2875.367309][T29908] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2875.388638][T28766] usb 3-1: USB disconnect, device number 25 [ 2875.397678][T29908] usb 9-1: USB disconnect, device number 106 [ 2882.472235][T29908] usb 9-1: new full-speed USB device number 107 using dummy_hcd [ 2882.679854][T29908] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 2882.688063][T29908] usb 9-1: config 0 has no interface number 0 [ 2882.710941][T29908] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2882.741530][T29908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2882.749545][T29908] usb 9-1: Product: syz [ 2882.773510][T29908] usb 9-1: Manufacturer: syz [ 2882.778194][T29908] usb 9-1: SerialNumber: syz [ 2882.795057][T29908] usb 9-1: config 0 descriptor?? [ 2883.026704][T29908] asix 9-1:0.251: probe with driver asix failed with error -71 [ 2883.048587][T29908] usb 9-1: USB disconnect, device number 107 [ 2883.825590][ T1768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 2892.631085][ T2125] input: syz0 as /devices/virtual/input/input117 [ 2893.093645][ T4701] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2893.265210][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2893.290029][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2893.306770][ T4701] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2893.345670][ T4701] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2893.366287][ T4701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2893.392056][ T4701] usb 8-1: config 0 descriptor?? [ 2893.611953][ T4701] usbhid 8-1:0.0: can't add hid device: -71 [ 2893.626497][ T4701] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2893.648216][ T4701] usb 8-1: USB disconnect, device number 45 [ 2894.001644][ T2216] input: syz0 as /devices/virtual/input/input120 [ 2897.017614][ T2357] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2899.500934][T29908] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 2899.661925][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2899.694272][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2899.715187][T29908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2899.753486][T29908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2899.774527][T29908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2899.804510][T29908] usb 9-1: config 0 descriptor?? [ 2900.033538][T29908] usbhid 9-1:0.0: can't add hid device: -71 [ 2900.043129][T29908] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2900.070780][T29908] usb 9-1: USB disconnect, device number 108 [ 2900.260611][ T2544] input: syz0 as /devices/virtual/input/input126 [ 2900.828105][ T2601] input: syz0 as /devices/virtual/input/input128 [ 2901.134657][ T2627] input: syz0 as /devices/virtual/input/input130 [ 2901.631539][ T2670] input: syz0 as /devices/virtual/input/input132 [ 2902.163435][ T2716] input: syz0 as /devices/virtual/input/input133 [ 2902.571078][ T2752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2902.613977][T29908] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 2902.785645][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2902.807418][T29908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2902.827849][T29908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2902.869471][T29908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2902.897737][T29908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.916787][T29908] usb 9-1: config 0 descriptor?? [ 2903.055392][ T2791] input: syz0 as /devices/virtual/input/input134 [ 2903.141340][T29908] usbhid 9-1:0.0: can't add hid device: -71 [ 2903.152766][T29908] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2903.175408][T29908] usb 9-1: USB disconnect, device number 109 [ 2903.624766][T20376] bridge_slave_1: left allmulticast mode [ 2903.630492][T20376] bridge_slave_1: left promiscuous mode [ 2903.638166][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.659351][T20376] bridge_slave_0: left allmulticast mode [ 2903.665025][T20376] bridge_slave_0: left promiscuous mode [ 2903.683678][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.945969][T20376] veth1_macvtap: left promiscuous mode [ 2903.957501][T20376] veth0_vlan: left promiscuous mode [ 2904.140005][ T2809] bridge0: port 1(bridge_slave_0) entered blocking state [ 2904.157863][ T2809] bridge0: port 1(bridge_slave_0) entered disabled state [ 2904.181213][ T2809] bridge_slave_0: entered allmulticast mode [ 2904.187561][ T2809] bridge_slave_0: entered promiscuous mode [ 2904.224635][ T2809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2904.234824][ T2809] bridge0: port 2(bridge_slave_1) entered disabled state [ 2904.241912][ T2809] bridge_slave_1: entered allmulticast mode [ 2904.277140][T28766] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 2904.288199][ T2809] bridge_slave_1: entered promiscuous mode [ 2904.447928][ T2809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2904.454994][ T2809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2904.462300][ T2809] bridge0: port 1(bridge_slave_0) entered blocking state [ 2904.469343][ T2809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2904.499032][T28766] usb 9-1: config 0 has no interfaces? [ 2904.505417][T28766] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2904.522359][T28766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2904.543916][T28766] usb 9-1: SerialNumber: syz [ 2904.565292][T28766] usb 9-1: config 0 descriptor?? [ 2904.629331][ T2809] veth0_vlan: entered promiscuous mode [ 2904.664499][ T2809] veth1_macvtap: entered promiscuous mode [ 2904.790670][T28766] usb 9-1: USB disconnect, device number 110 [ 2904.834072][ T2848] netlink: 268 bytes leftover after parsing attributes in process `syz.2.170790'. [ 2905.643053][ T2895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2906.366722][ T4701] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2906.560485][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2906.590771][ T4701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2906.622704][ T4701] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2906.654580][ T4701] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2906.686575][ T4701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2906.719927][ T4701] usb 8-1: config 0 descriptor?? [ 2906.943452][ T4701] usbhid 8-1:0.0: can't add hid device: -71 [ 2906.963814][ T4701] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2906.994389][ T4701] usb 8-1: USB disconnect, device number 46 [ 2907.303280][ T3000] netlink: 268 bytes leftover after parsing attributes in process `syz.2.170863'. [ 2907.379979][T28766] usb 9-1: new full-speed USB device number 111 using dummy_hcd [ 2907.521776][ T3018] input: syz0 as /devices/virtual/input/input136 [ 2907.562576][T28766] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 2907.581783][T28766] usb 9-1: config 0 has no interface number 0 [ 2907.591061][T28766] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2907.603403][T28766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2907.628619][T28766] usb 9-1: Product: syz [ 2907.632829][T28766] usb 9-1: Manufacturer: syz [ 2907.656974][T28766] usb 9-1: SerialNumber: syz [ 2907.669217][T28766] usb 9-1: config 0 descriptor?? [ 2907.702298][ T3031] netlink: 268 bytes leftover after parsing attributes in process `syz.2.170877'. [ 2907.899915][T28766] asix 9-1:0.251: probe with driver asix failed with error -71 [ 2907.929344][T28766] usb 9-1: USB disconnect, device number 111 [ 2907.997882][T17210] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2908.189994][T17210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2908.221772][T17210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2908.252090][T17210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2908.285766][T17210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2908.294837][T17210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2908.345955][T17210] usb 3-1: config 0 descriptor?? [ 2908.574617][T17210] usbhid 3-1:0.0: can't add hid device: -71 [ 2908.595433][T17210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2908.617254][T17210] usb 3-1: USB disconnect, device number 26 [ 2909.157084][ T4701] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 2909.342262][ T4701] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2909.364179][ T4701] usb 8-1: config 0 has no interface number 0 [ 2909.394282][ T4701] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2909.405133][ T4701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.438160][ T4701] usb 8-1: Product: syz [ 2909.442352][ T4701] usb 8-1: Manufacturer: syz [ 2909.468405][ T4701] usb 8-1: SerialNumber: syz [ 2909.473887][ T4701] usb 8-1: config 0 descriptor?? [ 2909.688258][ T3098] input: syz0 as /devices/virtual/input/input137 [ 2909.695381][ T4701] asix 8-1:0.251: probe with driver asix failed with error -71 [ 2909.720128][ T4701] usb 8-1: USB disconnect, device number 47 [ 2911.640342][ T3171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2911.728705][ T3183] netlink: 268 bytes leftover after parsing attributes in process `syz.8.170944'. [ 2911.782602][T17210] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2911.964901][T17210] usb 8-1: config 0 has no interfaces? [ 2911.971173][T17210] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2911.985158][T17210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2912.002842][T17210] usb 8-1: SerialNumber: syz [ 2912.015571][T17210] usb 8-1: config 0 descriptor?? [ 2912.242575][T17210] usb 8-1: USB disconnect, device number 48 [ 2912.869402][ T3258] netlink: 268 bytes leftover after parsing attributes in process `syz.0.170983'. [ 2913.712897][ T3355] input: syz0 as /devices/virtual/input/input141 [ 2915.328792][ T3397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2915.477692][ T3408] netlink: 268 bytes leftover after parsing attributes in process `syz.8.171049'. [ 2915.639421][ T3422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2916.622093][ T3473] input: syz0 as /devices/virtual/input/input142 [ 2917.113495][T17210] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 2917.308715][T17210] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2917.323463][T17210] usb 8-1: config 0 has no interface number 0 [ 2917.344005][T17210] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2917.357734][T17210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2917.377793][T17210] usb 8-1: Product: syz [ 2917.384067][T17210] usb 8-1: Manufacturer: syz [ 2917.399460][T17210] usb 8-1: SerialNumber: syz [ 2917.423049][T17210] usb 8-1: config 0 descriptor?? [ 2917.438316][ T3514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2917.543723][ T3526] input: syz0 as /devices/virtual/input/input143 [ 2917.651860][T17210] asix 8-1:0.251: probe with driver asix failed with error -71 [ 2917.674787][ T3540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2917.695884][T17210] usb 8-1: USB disconnect, device number 49 [ 2921.134537][ T3663] input: syz0 as /devices/virtual/input/input145 [ 2921.277896][ T3686] input: syz0 as /devices/virtual/input/input147 [ 2921.516270][T23864] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2921.687907][T23864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2921.708338][T23864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2921.729321][T23864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2921.757736][T23864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2921.776857][T23864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2921.799646][T23864] usb 3-1: config 0 descriptor?? [ 2922.011198][ T3717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2922.034736][T23864] usbhid 3-1:0.0: can't add hid device: -71 [ 2922.049345][T23864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2922.071936][T23864] usb 3-1: USB disconnect, device number 27 [ 2925.805579][ T3796] netlink: 68 bytes leftover after parsing attributes in process `syz.2.171216'. [ 2925.823518][ T3799] netlink: 72 bytes leftover after parsing attributes in process `syz.7.171218'. [ 2925.846763][ T3801] overlayfs: missing 'lowerdir' [ 2928.020876][ T3850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2928.406995][ T3868] netlink: 268 bytes leftover after parsing attributes in process `syz.7.171252'. [ 2928.523853][ T3874] netlink: 20 bytes leftover after parsing attributes in process `syz.7.171255'. [ 2929.098072][ T3898] input: syz0 as /devices/virtual/input/input151 [ 2929.256732][ T3918] input: syz0 as /devices/virtual/input/input152 [ 2929.836461][ T3970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171301'. [ 2930.599933][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171331'. [ 2930.811234][ T4048] netlink: 268 bytes leftover after parsing attributes in process `syz.2.171340'. [ 2931.434622][ T4072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.171353'. [ 2931.782440][ T4101] netlink: 20 bytes leftover after parsing attributes in process `syz.8.171366'. [ 2934.449001][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2934.456073][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 2934.479679][ T4250] bridge_slave_0: entered allmulticast mode [ 2934.497059][ T4250] bridge_slave_0: entered promiscuous mode [ 2934.512913][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2934.528409][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 2934.545591][ T4250] bridge_slave_1: entered allmulticast mode [ 2934.551964][ T4250] bridge_slave_1: entered promiscuous mode [ 2934.619003][T20348] bridge_slave_1: left allmulticast mode [ 2934.624678][T20348] bridge_slave_1: left promiscuous mode [ 2934.640233][T20348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2934.653319][T20348] bridge_slave_0: left allmulticast mode [ 2934.658984][T20348] bridge_slave_0: left promiscuous mode [ 2934.682860][T20348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2934.833211][T20348] veth1_macvtap: left promiscuous mode [ 2934.838766][T20348] veth0_vlan: left promiscuous mode [ 2935.028638][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2935.035738][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2935.043056][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2935.050130][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2935.130867][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 2935.138565][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 2935.151964][T20299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2935.159033][T20299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2935.192418][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2935.199505][T20376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2935.283833][ T4250] veth0_vlan: entered promiscuous mode [ 2935.308619][ T4250] veth1_macvtap: entered promiscuous mode [ 2935.409194][ T4280] netlink: 40 bytes leftover after parsing attributes in process `syz.8.171432'. [ 2935.453015][ T4282] netlink: 268 bytes leftover after parsing attributes in process `syz.8.171443'. [ 2935.548480][ T4288] netlink: 9 bytes leftover after parsing attributes in process `syz.8.171446'. [ 2935.561630][ T4288] gretap0: entered promiscuous mode [ 2936.146843][T20299] bridge_slave_1: left allmulticast mode [ 2936.152542][T20299] bridge_slave_1: left promiscuous mode [ 2936.164773][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2936.186582][T20299] bridge_slave_0: left allmulticast mode [ 2936.192263][T20299] bridge_slave_0: left promiscuous mode [ 2936.250068][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2936.495999][T20299] veth1_macvtap: left promiscuous mode [ 2936.501554][T20299] veth0_vlan: left promiscuous mode [ 2936.803121][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2936.821084][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2936.842564][ T4308] bridge_slave_0: entered allmulticast mode [ 2936.868790][ T4308] bridge_slave_0: entered promiscuous mode [ 2936.897628][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2936.928346][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2936.949866][ T4308] bridge_slave_1: entered allmulticast mode [ 2936.964733][ T4308] bridge_slave_1: entered promiscuous mode [ 2936.971073][ T4317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.171458'. [ 2937.130550][ T4324] netlink: 268 bytes leftover after parsing attributes in process `syz.0.171463'. [ 2937.188930][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.196001][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2937.203327][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.210394][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2937.328213][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2937.337586][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2937.372383][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.379453][T20376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2937.391538][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.398602][T20376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2937.463336][ T4308] veth0_vlan: entered promiscuous mode [ 2937.500643][ T4308] veth1_macvtap: entered promiscuous mode [ 2938.276400][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2938.286295][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2938.293476][ T4370] bridge_slave_0: entered allmulticast mode [ 2938.318782][ T4370] bridge_slave_0: entered promiscuous mode [ 2938.328978][T23864] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 2938.350494][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2938.357547][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2938.395708][ T4370] bridge_slave_1: entered allmulticast mode [ 2938.402079][ T4370] bridge_slave_1: entered promiscuous mode [ 2938.447455][T20348] bridge_slave_1: left allmulticast mode [ 2938.453120][T20348] bridge_slave_1: left promiscuous mode [ 2938.478261][T20348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2938.493459][T20348] bridge_slave_0: left allmulticast mode [ 2938.509881][T20348] bridge_slave_0: left promiscuous mode [ 2938.517168][T23864] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2938.531570][T20348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2938.538872][T23864] usb 8-1: config 0 has no interface number 0 [ 2938.552166][T23864] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2938.575634][T23864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2938.594891][T23864] usb 8-1: Product: syz [ 2938.600388][T23864] usb 8-1: Manufacturer: syz [ 2938.605030][T23864] usb 8-1: SerialNumber: syz [ 2938.627060][T23864] usb 8-1: config 0 descriptor?? [ 2938.727293][T20348] veth1_macvtap: left promiscuous mode [ 2938.738552][T20348] veth0_vlan: left promiscuous mode [ 2938.833493][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2938.840567][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2938.847879][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2938.850692][T23864] asix 8-1:0.251: probe with driver asix failed with error -71 [ 2938.854932][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2938.887795][T23864] usb 8-1: USB disconnect, device number 50 [ 2938.893818][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2938.914026][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2938.939633][T20299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2938.946739][T20299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2938.970936][T20299] bridge0: port 2(bridge_slave_1) entered blocking state [ 2938.978032][T20299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2939.024148][ T4370] veth0_vlan: entered promiscuous mode [ 2939.039125][ T4370] veth1_macvtap: entered promiscuous mode [ 2939.459466][ T4414] netlink: 268 bytes leftover after parsing attributes in process `syz.8.171495'. [ 2941.679032][ T4491] netlink: 268 bytes leftover after parsing attributes in process `syz.8.171533'. [ 2946.080396][ T4679] netlink: 9 bytes leftover after parsing attributes in process `syz.8.171625'. [ 2946.551013][ T4714] netlink: 268 bytes leftover after parsing attributes in process `syz.0.171641'. [ 2947.277867][ T4730] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2947.785404][ T1401] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2947.957006][ T1401] usb 3-1: config 0 has no interfaces? [ 2947.963209][ T1401] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2947.977276][ T1401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2947.996046][ T1401] usb 3-1: SerialNumber: syz [ 2948.007509][ T1401] usb 3-1: config 0 descriptor?? [ 2948.182090][ T4771] netlink: 9 bytes leftover after parsing attributes in process `syz.7.171669'. [ 2948.201184][ T4771] gretap0: entered promiscuous mode [ 2948.234287][T23864] usb 3-1: USB disconnect, device number 28 [ 2948.406234][ T4803] netlink: 268 bytes leftover after parsing attributes in process `syz.8.171685'. [ 2948.547243][ T4823] netlink: 268 bytes leftover after parsing attributes in process `syz.8.171695'. [ 2949.280092][ T4881] netlink: 9 bytes leftover after parsing attributes in process `syz.7.171721'. [ 2949.763025][ T4906] fuse: Bad value for 'fd' [ 2949.832366][T32417] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 2950.003994][T32417] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2950.023015][T32417] usb 8-1: config 0 has no interface number 0 [ 2950.035222][T32417] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2950.055136][T32417] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.073955][T32417] usb 8-1: Product: syz [ 2950.078367][T32417] usb 8-1: Manufacturer: syz [ 2950.082962][T32417] usb 8-1: SerialNumber: syz [ 2950.110587][T32417] usb 8-1: config 0 descriptor?? [ 2950.331714][T32417] asix 8-1:0.251: probe with driver asix failed with error -71 [ 2950.356240][T32417] usb 8-1: USB disconnect, device number 51 [ 2952.369691][ T1401] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 2952.541313][ T1401] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2952.560296][ T1401] usb 8-1: config 0 has no interface number 0 [ 2952.568081][ T1401] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2952.582909][ T1401] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.591067][ T1401] usb 8-1: Product: syz [ 2952.595452][ T1401] usb 8-1: Manufacturer: syz [ 2952.600053][ T1401] usb 8-1: SerialNumber: syz [ 2952.605903][ T1401] usb 8-1: config 0 descriptor?? [ 2952.636245][T29908] usb 9-1: new full-speed USB device number 112 using dummy_hcd [ 2952.700505][ T5034] netlink: 9 bytes leftover after parsing attributes in process `syz.0.171795'. [ 2952.720850][ T5034] gretap0: entered promiscuous mode [ 2952.790701][ T5042] netlink: 268 bytes leftover after parsing attributes in process `syz.0.171799'. [ 2952.826863][ T1401] asix 8-1:0.251: probe with driver asix failed with error -71 [ 2952.846565][T29908] usb 9-1: config 0 has an invalid interface number: 19 but max is 0 [ 2952.860093][T29908] usb 9-1: config 0 has no interface number 0 [ 2952.870838][ T1401] usb 8-1: USB disconnect, device number 52 [ 2952.882957][T29908] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2952.902751][T29908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.913411][T29908] usb 9-1: Product: syz [ 2952.917578][T29908] usb 9-1: Manufacturer: syz [ 2952.932924][T29908] usb 9-1: SerialNumber: syz [ 2952.944355][T29908] usb 9-1: config 0 descriptor?? [ 2953.172301][T29908] usb 9-1: USB disconnect, device number 112 [ 2954.516707][ T5130] netlink: 9 bytes leftover after parsing attributes in process `syz.8.171841'. [ 2954.560840][ T5132] netlink: 60 bytes leftover after parsing attributes in process `syz.7.171842'. [ 2957.060616][T29908] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 2957.274889][T29908] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2957.305843][T29908] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2957.327318][T29908] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2957.347249][T29908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2957.369331][T29908] usb 8-1: config 0 descriptor?? [ 2957.378103][T29908] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2957.604014][T32417] usb 8-1: USB disconnect, device number 53 [ 2960.969507][ T5324] netlink: 268 bytes leftover after parsing attributes in process `syz.0.171936'. [ 2962.480224][ T5385] netlink: 9 bytes leftover after parsing attributes in process `syz.2.171964'. [ 2962.498451][ T5385] gretap0: entered promiscuous mode [ 2962.570262][ T5393] pim6reg1: entered promiscuous mode [ 2962.580956][ T5393] pim6reg1: entered allmulticast mode [ 2962.654129][ T5399] netlink: 68 bytes leftover after parsing attributes in process `syz.2.171971'. [ 2962.744570][ T5408] netlink: 9 bytes leftover after parsing attributes in process `syz.2.171976'. [ 2963.372032][T29908] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 2963.573821][T29908] usb 9-1: config 0 has no interfaces? [ 2963.580111][T29908] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2963.599988][T29908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2963.627891][T29908] usb 9-1: SerialNumber: syz [ 2963.649474][T29908] usb 9-1: config 0 descriptor?? [ 2963.874723][T29908] usb 9-1: USB disconnect, device number 113 [ 2964.151314][ T5447] netlink: 9 bytes leftover after parsing attributes in process `syz.7.171995'. [ 2964.293159][ T5464] netlink: 52 bytes leftover after parsing attributes in process `syz.7.172003'. [ 2964.332499][ T5469] netlink: 268 bytes leftover after parsing attributes in process `syz.7.172005'. [ 2964.450640][ T5485] netlink: 52 bytes leftover after parsing attributes in process `syz.0.172013'. [ 2964.501884][ T5493] netlink: 268 bytes leftover after parsing attributes in process `syz.0.172017'. [ 2964.656378][ T5518] netlink: 268 bytes leftover after parsing attributes in process `syz.7.172029'. [ 2965.184422][T29908] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 2965.367269][T29908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2965.387003][T29908] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2965.411712][T29908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2965.430783][T29908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2965.444689][T29908] usb 9-1: config 0 descriptor?? [ 2965.450706][T29908] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2965.669413][T29908] usb 9-1: USB disconnect, device number 114 [ 2966.322564][ T5596] __nla_validate_parse: 1 callbacks suppressed [ 2966.322587][ T5596] netlink: 268 bytes leftover after parsing attributes in process `syz.0.172068'. [ 2966.495108][ T5618] netlink: 268 bytes leftover after parsing attributes in process `syz.8.172078'. [ 2966.530685][ T5622] netlink: 9 bytes leftover after parsing attributes in process `syz.8.172080'. [ 2966.824238][ T5661] netlink: 9 bytes leftover after parsing attributes in process `syz.7.172098'. [ 2967.605078][T29908] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 2967.776157][T29908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2967.814260][T29908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2967.846797][T29908] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2967.870662][T29908] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2967.880037][T29908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.891452][T29908] usb 8-1: config 0 descriptor?? [ 2968.008399][ T5772] fuse: Bad value for 'user_id' [ 2968.013326][ T5772] fuse: Bad value for 'user_id' [ 2968.222169][ T5797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.172164'. [ 2968.325812][T29908] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 2968.345531][T29908] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2968.596536][T32417] usb 8-1: USB disconnect, device number 54 [ 2969.555499][ T1401] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 2969.737843][ T1401] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2969.758057][ T1401] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2969.789302][ T1401] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2969.823798][ T1401] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2969.854005][ T1401] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2969.863028][ T1401] usb 8-1: config 0 descriptor?? [ 2970.052781][ T5861] netlink: 68 bytes leftover after parsing attributes in process `syz.2.172195'. [ 2970.309226][ T1401] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 2970.329053][ T1401] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2970.429732][T23864] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2970.591777][T29908] usb 8-1: USB disconnect, device number 55 [ 2970.624556][T23864] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2970.646737][T23864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2970.664276][T23864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2970.683989][T23864] usb 3-1: config 0 descriptor?? [ 2970.698460][T23864] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2970.915009][T29908] usb 3-1: USB disconnect, device number 29 [ 2971.439005][ T5917] netlink: 268 bytes leftover after parsing attributes in process `syz.7.172221'. [ 2971.669502][ T5940] netlink: 268 bytes leftover after parsing attributes in process `syz.2.172232'. [ 2971.733754][ T5944] pim6reg1: entered promiscuous mode [ 2971.749935][ T5944] pim6reg1: entered allmulticast mode [ 2971.955321][ T5958] netlink: 268 bytes leftover after parsing attributes in process `syz.2.172242'. [ 2972.529788][ T5995] fuse: Unknown parameter '00000000000000000000' [ 2973.146685][ T6026] netlink: 68 bytes leftover after parsing attributes in process `syz.7.172275'. [ 2973.345028][ T6036] netlink: 268 bytes leftover after parsing attributes in process `syz.7.172279'. [ 2974.947719][ T6077] netlink: 9 bytes leftover after parsing attributes in process `syz.0.172300'. [ 2975.184701][ T6086] netlink: 68 bytes leftover after parsing attributes in process `syz.7.172297'. [ 2976.030802][ T6121] netlink: 68 bytes leftover after parsing attributes in process `syz.7.172321'. [ 2976.031741][ T6123] netlink: 9 bytes leftover after parsing attributes in process `syz.8.172315'. [ 2976.346692][ T1401] usb 9-1: new full-speed USB device number 115 using dummy_hcd [ 2976.539606][ T1401] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 2976.550229][ T1401] usb 9-1: config 0 has no interface number 0 [ 2976.570414][ T1401] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2976.580086][ T1401] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.602510][ T1401] usb 9-1: Product: syz [ 2976.611953][ T1401] usb 9-1: Manufacturer: syz [ 2976.628165][ T1401] usb 9-1: SerialNumber: syz [ 2976.645406][ T1401] usb 9-1: config 0 descriptor?? [ 2976.783442][ T6136] pim6reg1: entered promiscuous mode [ 2976.793593][ T6136] pim6reg1: entered allmulticast mode [ 2976.877917][ T1401] asix 9-1:0.251: probe with driver asix failed with error -71 [ 2976.899525][ T1401] usb 9-1: USB disconnect, device number 115 [ 2977.134471][ T6146] netlink: 9 bytes leftover after parsing attributes in process `syz.7.172331'. [ 2978.165181][ T6234] pim6reg1: entered promiscuous mode [ 2978.180955][ T6234] pim6reg1: entered allmulticast mode [ 2978.811374][ T6289] netlink: 9 bytes leftover after parsing attributes in process `syz.2.172396'. [ 2979.446317][ T6331] fuse: Bad value for 'fd' [ 2979.875562][T32417] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 2980.036951][T32417] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2980.045342][T32417] usb 8-1: config 0 has no interface number 0 [ 2980.057650][T32417] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2980.066775][T32417] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.086356][T32417] usb 8-1: Product: syz [ 2980.099375][T32417] usb 8-1: Manufacturer: syz [ 2980.104032][T32417] usb 8-1: SerialNumber: syz [ 2980.115438][T32417] usb 8-1: config 0 descriptor?? [ 2980.333646][ T6382] netlink: 9 bytes leftover after parsing attributes in process `syz.0.172441'. [ 2980.348416][T32417] asix 8-1:0.251: probe with driver asix failed with error -71 [ 2980.369016][T32417] usb 8-1: USB disconnect, device number 56 [ 2980.707092][ T4701] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2980.878739][ T4701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2980.912565][ T4701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2980.930948][ T4701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2980.971223][ T4701] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2981.004953][ T4701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2981.018795][ T4701] usb 3-1: config 0 descriptor?? [ 2981.455384][ T4701] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 2981.479298][ T4701] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2981.529978][ T6441] netlink: 9 bytes leftover after parsing attributes in process `syz.8.172467'. [ 2981.731029][ T4701] usb 3-1: USB disconnect, device number 30 [ 2982.226322][ T6467] netlink: 68 bytes leftover after parsing attributes in process `syz.7.172480'. [ 2983.587797][ T6546] netlink: 112 bytes leftover after parsing attributes in process `syz.8.172517'. [ 2985.144876][ T6640] pim6reg1: entered promiscuous mode [ 2985.163433][ T6640] pim6reg1: entered allmulticast mode [ 2985.670846][ T6662] pim6reg1: entered promiscuous mode [ 2985.684390][ T6662] pim6reg1: entered allmulticast mode [ 2986.896289][ T6715] pim6reg1: entered promiscuous mode [ 2986.906981][ T6715] pim6reg1: entered allmulticast mode [ 2987.306065][T32417] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2987.467293][T32417] usb 3-1: config 0 has no interfaces? [ 2987.473504][T32417] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2987.483708][T32417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2987.492938][T32417] usb 3-1: SerialNumber: syz [ 2987.501176][T32417] usb 3-1: config 0 descriptor?? [ 2987.723272][T32417] usb 3-1: USB disconnect, device number 31 [ 2992.898789][ T6929] netlink: 900 bytes leftover after parsing attributes in process `syz.2.172696'. [ 2994.598584][T23864] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 2994.770223][T23864] usb 8-1: config 0 has an invalid interface number: 19 but max is 0 [ 2994.778337][T23864] usb 8-1: config 0 has no interface number 0 [ 2994.834234][T23864] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 2994.843592][T23864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.873193][T23864] usb 8-1: Product: syz [ 2994.883829][T23864] usb 8-1: Manufacturer: syz [ 2994.894688][T23864] usb 8-1: SerialNumber: syz [ 2994.905989][T23864] usb 8-1: config 0 descriptor?? [ 2995.135644][ T7002] netlink: 68 bytes leftover after parsing attributes in process `syz.8.172732'. [ 2995.138987][T23864] usb 8-1: USB disconnect, device number 57 [ 2995.579396][T32417] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 2995.751022][T32417] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 2995.759314][T32417] usb 3-1: config 0 has no interface number 0 [ 2995.772807][T32417] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2995.786686][T32417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2995.803338][T32417] usb 3-1: Product: syz [ 2995.811043][T32417] usb 3-1: Manufacturer: syz [ 2995.821358][T32417] usb 3-1: SerialNumber: syz [ 2995.832947][T32417] usb 3-1: config 0 descriptor?? [ 2996.060949][T32417] asix 3-1:0.251: probe with driver asix failed with error -71 [ 2996.081982][T32417] usb 3-1: USB disconnect, device number 32 [ 3001.155241][ T1401] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 3001.304553][ T1401] usb 9-1: device descriptor read/64, error -71 [ 3001.570962][ T1401] usb 9-1: device descriptor read/64, error -71 [ 3001.837489][ T1401] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 3001.986779][ T1401] usb 9-1: device descriptor read/64, error -71 [ 3002.076549][ T7345] netlink: 68 bytes leftover after parsing attributes in process `syz.2.172892'. [ 3002.242668][ T1401] usb 9-1: device descriptor read/64, error -71 [ 3002.370664][ T1401] usb usb9-port1: attempt power cycle [ 3002.584488][ T7373] netlink: 900 bytes leftover after parsing attributes in process `syz.2.172905'. [ 3002.743688][ T1401] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 3002.776683][ T1401] usb 9-1: device descriptor read/8, error -71 [ 3002.915821][ T1401] usb 9-1: device descriptor read/8, error -71 [ 3003.170144][ T1401] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 3003.181168][T32417] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 3003.203155][ T1401] usb 9-1: device descriptor read/8, error -71 [ 3003.341692][ T1401] usb 9-1: device descriptor read/8, error -71 [ 3003.352652][T32417] usb 8-1: config 0 has no interfaces? [ 3003.358872][T32417] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3003.367959][T32417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3003.376213][T32417] usb 8-1: SerialNumber: syz [ 3003.381540][T32417] usb 8-1: config 0 descriptor?? [ 3003.467253][ T1401] usb usb9-port1: unable to enumerate USB device [ 3003.602324][ T1401] usb 8-1: USB disconnect, device number 58 [ 3004.117962][ T7398] netlink: 900 bytes leftover after parsing attributes in process `syz.8.172917'. [ 3004.436133][ T7419] netlink: 900 bytes leftover after parsing attributes in process `syz.7.172927'. [ 3004.556102][T28766] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3004.694970][T28766] usb 3-1: device descriptor read/64, error -71 [ 3004.950558][T28766] usb 3-1: device descriptor read/64, error -71 [ 3005.217320][T28766] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3005.366361][ T1401] usb 9-1: new full-speed USB device number 120 using dummy_hcd [ 3005.375361][T28766] usb 3-1: device descriptor read/64, error -71 [ 3005.552109][ T1401] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 3005.566302][ T1401] usb 9-1: config 0 has no interface number 0 [ 3005.579094][ T1401] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 3005.589219][ T1401] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3005.597346][ T1401] usb 9-1: Product: syz [ 3005.601707][ T1401] usb 9-1: Manufacturer: syz [ 3005.606303][ T1401] usb 9-1: SerialNumber: syz [ 3005.611807][ T1401] usb 9-1: config 0 descriptor?? [ 3005.643551][T28766] usb 3-1: device descriptor read/64, error -71 [ 3005.760952][T28766] usb usb3-port1: attempt power cycle [ 3005.833781][ T1401] asix 9-1:0.251: probe with driver asix failed with error -71 [ 3005.848448][ T1401] usb 9-1: USB disconnect, device number 120 [ 3006.123280][T28766] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3006.145629][T28766] usb 3-1: device descriptor read/8, error -71 [ 3006.284249][T28766] usb 3-1: device descriptor read/8, error -71 [ 3006.539373][T28766] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3006.572048][T28766] usb 3-1: device descriptor read/8, error -71 [ 3006.719673][T28766] usb 3-1: device descriptor read/8, error -71 [ 3006.848364][T28766] usb usb3-port1: unable to enumerate USB device [ 3007.083152][ T7476] netlink: 68 bytes leftover after parsing attributes in process `syz.8.172954'. [ 3008.074280][T28766] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3008.223521][T28766] usb 3-1: device descriptor read/64, error -71 [ 3008.479396][T28766] usb 3-1: device descriptor read/64, error -71 [ 3008.698920][ T7561] netlink: 900 bytes leftover after parsing attributes in process `syz.8.172994'. [ 3008.745930][T28766] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3008.916540][T28766] usb 3-1: device descriptor read/64, error -71 [ 3009.195950][T28766] usb 3-1: device descriptor read/64, error -71 [ 3009.236344][ T1401] usb 9-1: new full-speed USB device number 121 using dummy_hcd [ 3009.311047][T28766] usb usb3-port1: attempt power cycle [ 3009.416146][ T1401] usb 9-1: config 0 has an invalid interface number: 19 but max is 0 [ 3009.428237][ T1401] usb 9-1: config 0 has no interface number 0 [ 3009.450600][ T1401] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 3009.469866][ T1401] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.478264][ T1401] usb 9-1: Product: syz [ 3009.488736][ T1401] usb 9-1: Manufacturer: syz [ 3009.499496][ T1401] usb 9-1: SerialNumber: syz [ 3009.509305][ T1401] usb 9-1: config 0 descriptor?? [ 3009.684131][T28766] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3009.727788][T28766] usb 3-1: device descriptor read/8, error -71 [ 3009.741487][ T1401] usb 9-1: USB disconnect, device number 121 [ 3009.866330][T28766] usb 3-1: device descriptor read/8, error -71 [ 3009.876840][ T36] audit: type=1400 audit(2000524730.421:287652): avc: denied { append } for pid=7608 comm="syz.0.173017" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3010.099900][T32417] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 3010.121499][T28766] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3010.143559][T28766] usb 3-1: device descriptor read/8, error -71 [ 3010.260883][T32417] usb 8-1: config 0 has no interfaces? [ 3010.267089][T32417] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3010.276393][T32417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3010.284586][T32417] usb 8-1: SerialNumber: syz [ 3010.284729][T28766] usb 3-1: device descriptor read/8, error -71 [ 3010.289941][T32417] usb 8-1: config 0 descriptor?? [ 3010.430483][T28766] usb usb3-port1: unable to enumerate USB device [ 3010.517040][T32417] usb 8-1: USB disconnect, device number 59 [ 3010.918277][ T7631] netlink: 900 bytes leftover after parsing attributes in process `syz.8.173023'. [ 3011.002431][ T7639] netlink: 68 bytes leftover after parsing attributes in process `syz.0.173031'. [ 3011.778752][ T7669] netlink: 'syz.7.173045': attribute type 4 has an invalid length. [ 3011.816498][ T7669] netlink: 'syz.7.173045': attribute type 5 has an invalid length. [ 3011.824432][ T7669] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.173045'. [ 3012.235405][ T7695] netlink: 68 bytes leftover after parsing attributes in process `syz.2.173057'. [ 3012.471762][ T7723] netlink: 68 bytes leftover after parsing attributes in process `syz.8.173068'. [ 3012.797165][T28766] usb 9-1: new full-speed USB device number 122 using dummy_hcd [ 3013.001782][T28766] usb 9-1: config 0 has an invalid interface number: 19 but max is 0 [ 3013.009938][T28766] usb 9-1: config 0 has no interface number 0 [ 3013.033178][T28766] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 3013.061645][T28766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3013.080497][T28766] usb 9-1: Product: syz [ 3013.084701][T28766] usb 9-1: Manufacturer: syz [ 3013.101983][T28766] usb 9-1: SerialNumber: syz [ 3013.128411][T28766] usb 9-1: config 0 descriptor?? [ 3013.353323][T28766] usb 9-1: USB disconnect, device number 122 [ 3013.842161][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173097'. [ 3014.096906][ T7793] netlink: 68 bytes leftover after parsing attributes in process `syz.2.173101'. [ 3015.321302][ T7851] netlink: 68 bytes leftover after parsing attributes in process `syz.7.173128'. [ 3016.318862][T20299] bridge_slave_1: left allmulticast mode [ 3016.324547][T20299] bridge_slave_1: left promiscuous mode [ 3016.358034][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 3016.371057][T20299] bridge_slave_0: left allmulticast mode [ 3016.376724][T20299] bridge_slave_0: left promiscuous mode [ 3016.397483][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 3016.504282][ T7901] netlink: 'syz.8.173153': attribute type 4 has an invalid length. [ 3016.521380][ T7901] netlink: 'syz.8.173153': attribute type 5 has an invalid length. [ 3016.539888][ T7901] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.173153'. [ 3016.562319][T20299] veth1_macvtap: left promiscuous mode [ 3016.568022][T20299] veth0_vlan: left promiscuous mode [ 3016.788543][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 3016.805735][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 3016.812839][ T7906] bridge_slave_0: entered allmulticast mode [ 3016.832929][ T7906] bridge_slave_0: entered promiscuous mode [ 3016.849248][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 3016.856325][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 3016.863835][ T7906] bridge_slave_1: entered allmulticast mode [ 3016.864382][T28766] usb 9-1: new full-speed USB device number 123 using dummy_hcd [ 3016.870459][ T7906] bridge_slave_1: entered promiscuous mode [ 3017.034156][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 3017.041229][ T7906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3017.048485][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 3017.055534][ T7906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3017.073531][T28766] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 3017.092497][T28766] usb 9-1: config 0 has no interface number 0 [ 3017.100401][T28766] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 3017.114908][T28766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3017.133843][T28766] usb 9-1: Product: syz [ 3017.138642][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 3017.167277][T28766] usb 9-1: Manufacturer: syz [ 3017.172466][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 3017.179800][T28766] usb 9-1: SerialNumber: syz [ 3017.189899][T28766] usb 9-1: config 0 descriptor?? [ 3017.209298][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 3017.216382][T20376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3017.238469][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 3017.245548][T20376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3017.282150][ T7906] veth0_vlan: entered promiscuous mode [ 3017.307511][ T7941] netlink: 'syz.0.173166': attribute type 4 has an invalid length. [ 3017.326325][ T7941] netlink: 'syz.0.173166': attribute type 5 has an invalid length. [ 3017.347851][ T7941] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.173166'. [ 3017.362315][ T7906] veth1_macvtap: entered promiscuous mode [ 3017.430026][T28766] asix 9-1:0.251: probe with driver asix failed with error -71 [ 3017.468491][T28766] usb 9-1: USB disconnect, device number 123 [ 3017.842494][ T7963] netlink: 'syz.7.173175': attribute type 4 has an invalid length. [ 3017.861229][ T7963] netlink: 'syz.7.173175': attribute type 5 has an invalid length. [ 3017.880006][ T7963] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.173175'. [ 3018.153435][ T7973] netlink: 68 bytes leftover after parsing attributes in process `syz.8.173181'. [ 3018.232737][ T7983] netlink: 900 bytes leftover after parsing attributes in process `syz.8.173186'. [ 3018.488676][ T7996] netlink: 68 bytes leftover after parsing attributes in process `syz.8.173191'. [ 3019.930628][ T8055] netlink: 'syz.7.173218': attribute type 4 has an invalid length. [ 3019.950885][ T8055] netlink: 'syz.7.173218': attribute type 5 has an invalid length. [ 3019.969760][ T8055] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.173218'. [ 3021.017601][ T8086] netlink: 900 bytes leftover after parsing attributes in process `syz.0.173233'. [ 3021.847507][ T8130] netlink: 68 bytes leftover after parsing attributes in process `syz.7.173255'. [ 3021.996141][ T8155] netlink: 68 bytes leftover after parsing attributes in process `syz.2.173267'. [ 3022.736199][ T8207] netlink: 68 bytes leftover after parsing attributes in process `syz.8.173292'. [ 3024.507365][ T8295] netlink: 900 bytes leftover after parsing attributes in process `syz.0.173333'. [ 3024.539826][ T4308] ------------[ cut here ]------------ [ 3024.545591][ T4308] WARNING: CPU: 1 PID: 4308 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 3024.553731][ T4308] Modules linked in: [ 3024.557665][ T4308] CPU: 1 UID: 0 PID: 4308 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3024.569426][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3024.579789][ T4308] RIP: 0010:drop_nlink+0xce/0x110 [ 3024.584849][ T4308] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 3024.592181][ T36] audit: type=1400 audit(2000524744.210:287653): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2798]" dev="pipefs" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3024.604484][ T4308] RSP: 0018:ffffc90002bbfc60 EFLAGS: 00010293 [ 3024.633744][ T4308] RAX: ffffffff81ee1a7e RBX: ffff88814796a5a0 RCX: ffff88813a753900 [ 3024.641748][ T4308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3024.649769][ T4308] RBP: ffffc90002bbfc88 R08: 0000000000000003 R09: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3024.657781][ T4308] R10: dffffc0000000000 R11: fffff52000577f7c R12: dffffc0000000000 [ 3024.665890][ T4308] R13: 1ffff11028f2d4bd R14: ffff88814796a5e8 R15: 0000000000000000 [ 3024.674159][ T4308] FS: 0000555584a84500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 3024.683112][ T4308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3024.689742][ T4308] CR2: 00007f4bf17f44a4 CR3: 00000001111a6000 CR4: 00000000003526b0 [ 3024.697757][ T4308] Call Trace: [ 3024.701043][ T4308] [ 3024.703983][ T4308] shmem_rmdir+0x5f/0x90 [ 3024.708260][ T4308] vfs_rmdir+0x3dd/0x560 [ 3024.712589][ T4308] incfs_kill_sb+0x109/0x230 [ 3024.717320][ T4308] deactivate_locked_super+0xd5/0x2a0 [ 3024.722764][ T4308] deactivate_super+0xb8/0xe0 [ 3024.727637][ T4308] cleanup_mnt+0x3f1/0x480 [ 3024.732098][ T4308] __cleanup_mnt+0x1d/0x40 [ 3024.736511][ T4308] task_work_run+0x1e0/0x250 [ 3024.741160][ T4308] ? __cfi_task_work_run+0x10/0x10 [ 3024.746269][ T4308] ? __x64_sys_umount+0x126/0x170 [ 3024.751304][ T4308] ? __cfi___x64_sys_umount+0x10/0x10 [ 3024.756676][ T4308] ? __kasan_check_read+0x15/0x20 [ 3024.761746][ T4308] resume_user_mode_work+0x36/0x50 [ 3024.766860][ T4308] syscall_exit_to_user_mode+0x64/0xb0 [ 3024.772340][ T4308] do_syscall_64+0x64/0xf0 [ 3024.776755][ T4308] ? clear_bhb_loop+0x50/0xa0 [ 3024.781453][ T4308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3024.787342][ T4308] RIP: 0033:0x7f8308990a77 [ 3024.791788][ T4308] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3024.811411][ T4308] RSP: 002b:00007ffe221e6de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3024.819851][ T4308] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8308990a77 [ 3024.827846][ T4308] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe221e6ea0 [ 3024.835849][ T4308] RBP: 00007ffe221e6ea0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.843905][ T4308] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe221e7f30 [ 3024.851901][ T4308] R13: 00007f8308a13d7d R14: 00000000002cb891 R15: 00007ffe221e7f70 [ 3024.859900][ T4308] [ 3024.862915][ T4308] ---[ end trace 0000000000000000 ]--- [ 3024.868608][ T4308] ================================================================== [ 3024.876681][ T4308] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 3024.882928][ T4308] Write of size 4 at addr 0000000000000168 by task syz-executor/4308 [ 3024.891004][ T4308] [ 3024.893337][ T4308] CPU: 1 UID: 0 PID: 4308 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3024.893368][ T4308] Tainted: [W]=WARN [ 3024.893375][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3024.893387][ T4308] Call Trace: [ 3024.893393][ T4308] [ 3024.893401][ T4308] __dump_stack+0x21/0x30 [ 3024.893431][ T4308] dump_stack_lvl+0x10c/0x190 [ 3024.893453][ T4308] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3024.893476][ T4308] print_report+0x3d/0x70 [ 3024.893495][ T4308] kasan_report+0x163/0x1a0 [ 3024.893515][ T4308] ? ihold+0x24/0x70 [ 3024.893534][ T4308] ? _raw_spin_unlock+0x45/0x60 [ 3024.893562][ T4308] ? ihold+0x24/0x70 [ 3024.893580][ T4308] kasan_check_range+0x299/0x2a0 [ 3024.893600][ T4308] __kasan_check_write+0x18/0x20 [ 3024.893624][ T4308] ihold+0x24/0x70 [ 3024.893642][ T4308] vfs_rmdir+0x26a/0x560 [ 3024.893663][ T4308] incfs_kill_sb+0x109/0x230 [ 3024.893688][ T4308] deactivate_locked_super+0xd5/0x2a0 [ 3024.893712][ T4308] deactivate_super+0xb8/0xe0 [ 3024.893735][ T4308] cleanup_mnt+0x3f1/0x480 [ 3024.893757][ T4308] __cleanup_mnt+0x1d/0x40 [ 3024.893777][ T4308] task_work_run+0x1e0/0x250 [ 3024.893801][ T4308] ? __cfi_task_work_run+0x10/0x10 [ 3024.893823][ T4308] ? __x64_sys_umount+0x126/0x170 [ 3024.893848][ T4308] ? __cfi___x64_sys_umount+0x10/0x10 [ 3024.893873][ T4308] ? __kasan_check_read+0x15/0x20 [ 3024.893899][ T4308] resume_user_mode_work+0x36/0x50 [ 3024.893922][ T4308] syscall_exit_to_user_mode+0x64/0xb0 [ 3024.893942][ T4308] do_syscall_64+0x64/0xf0 [ 3024.893964][ T4308] ? clear_bhb_loop+0x50/0xa0 [ 3024.893984][ T4308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3024.894004][ T4308] RIP: 0033:0x7f8308990a77 [ 3024.894021][ T4308] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3024.894038][ T4308] RSP: 002b:00007ffe221e6de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3024.894059][ T4308] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8308990a77 [ 3024.894073][ T4308] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe221e6ea0 [ 3024.894086][ T4308] RBP: 00007ffe221e6ea0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.894099][ T4308] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe221e7f30 [ 3024.894112][ T4308] R13: 00007f8308a13d7d R14: 00000000002cb891 R15: 00007ffe221e7f70 [ 3024.894129][ T4308] [ 3024.894137][ T4308] ================================================================== [ 3025.163152][T20348] bridge_slave_1: left allmulticast mode [ 3025.174733][T20348] bridge_slave_1: left promiscuous mode [ 3025.180397][T20348] bridge0: port 2(bridge_slave_1) entered disabled state [ 3025.197921][ T4308] Disabling lock debugging due to kernel taint [ 3025.204109][ T4308] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 3025.211916][ T4308] #PF: supervisor write access in kernel mode [ 3025.217981][ T4308] #PF: error_code(0x0002) - not-present page [ 3025.223959][ T4308] PGD 800000016619d067 P4D 800000016619d067 PUD 0 [ 3025.230462][ T4308] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 3025.236606][ T4308] CPU: 1 UID: 0 PID: 4308 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3025.249794][ T4308] Tainted: [B]=BAD_PAGE, [W]=WARN [ 3025.254804][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3025.264846][ T4308] RIP: 0010:ihold+0x2a/0x70 [ 3025.269350][ T4308] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 3025.288953][ T4308] RSP: 0018:ffffc90002bbfca0 EFLAGS: 00010246 [ 3025.295020][ T4308] RAX: ffff88813a753900 RBX: 0000000000000000 RCX: ffff88813a753900 [ 3025.302988][ T4308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3025.310943][ T4308] RBP: ffffc90002bbfcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 3025.318898][ T4308] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88814796a5ac [ 3025.326852][ T4308] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 3025.334830][ T4308] FS: 0000555584a84500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 3025.343739][ T4308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3025.350309][ T4308] CR2: 0000000000000168 CR3: 00000001111a6000 CR4: 00000000003526b0 [ 3025.358265][ T4308] Call Trace: [ 3025.361533][ T4308] [ 3025.364449][ T4308] vfs_rmdir+0x26a/0x560 [ 3025.368735][ T4308] incfs_kill_sb+0x109/0x230 [ 3025.373320][ T4308] deactivate_locked_super+0xd5/0x2a0 [ 3025.378682][ T4308] deactivate_super+0xb8/0xe0 [ 3025.383342][ T4308] cleanup_mnt+0x3f1/0x480 [ 3025.387743][ T4308] __cleanup_mnt+0x1d/0x40 [ 3025.392149][ T4308] task_work_run+0x1e0/0x250 [ 3025.396725][ T4308] ? __cfi_task_work_run+0x10/0x10 [ 3025.401827][ T4308] ? __x64_sys_umount+0x126/0x170 [ 3025.406844][ T4308] ? __cfi___x64_sys_umount+0x10/0x10 [ 3025.412207][ T4308] ? __kasan_check_read+0x15/0x20 [ 3025.417223][ T4308] resume_user_mode_work+0x36/0x50 [ 3025.422320][ T4308] syscall_exit_to_user_mode+0x64/0xb0 [ 3025.427774][ T4308] do_syscall_64+0x64/0xf0 [ 3025.432178][ T4308] ? clear_bhb_loop+0x50/0xa0 [ 3025.436841][ T4308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3025.442720][ T4308] RIP: 0033:0x7f8308990a77 [ 3025.447124][ T4308] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3025.466716][ T4308] RSP: 002b:00007ffe221e6de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3025.475127][ T4308] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8308990a77 [ 3025.483085][ T4308] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe221e6ea0 [ 3025.491046][ T4308] RBP: 00007ffe221e6ea0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.499006][ T4308] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe221e7f30 [ 3025.506966][ T4308] R13: 00007f8308a13d7d R14: 00000000002cb891 R15: 00007ffe221e7f70 [ 3025.514925][ T4308] [ 3025.517925][ T4308] Modules linked in: [ 3025.521798][ T4308] CR2: 0000000000000168 [ 3025.525930][ T4308] ---[ end trace 0000000000000000 ]--- [ 3025.531372][ T4308] RIP: 0010:ihold+0x2a/0x70 [ 3025.535866][ T4308] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 3025.555453][ T4308] RSP: 0018:ffffc90002bbfca0 EFLAGS: 00010246 [ 3025.561503][ T4308] RAX: ffff88813a753900 RBX: 0000000000000000 RCX: ffff88813a753900 [ 3025.569458][ T4308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3025.577413][ T4308] RBP: ffffc90002bbfcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 3025.585367][ T4308] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88814796a5ac [ 3025.593323][ T4308] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 3025.601275][ T4308] FS: 0000555584a84500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 3025.610189][ T4308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3025.616757][ T4308] CR2: 0000000000000168 CR3: 00000001111a6000 CR4: 00000000003526b0 [ 3025.624715][ T4308] Kernel panic - not syncing: Fatal exception [ 3025.630989][ T4308] Kernel Offset: disabled [ 3025.635297][ T4308] Rebooting in 86400 seconds..