last executing test programs: 24m30.232548574s ago: executing program 32 (id=1778): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 24m23.484824548s ago: executing program 33 (id=1819): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x45, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1, {0x2}}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 24m22.770182173s ago: executing program 34 (id=1823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x5c, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf00}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffffffffffe9e, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0x72, 0x8, 0x10, 0x80}}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xffff}, {0x10, 0x0, 0x1, "f18d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 24m16.756332855s ago: executing program 5 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0xffee, 0x7}, {0x0, 0x2}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 24m16.477156853s ago: executing program 5 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x404, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x1, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m15.469864924s ago: executing program 5 (id=1845): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8000046, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b801000000000000"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 24m15.199956021s ago: executing program 5 (id=1846): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 24m14.700673949s ago: executing program 35 (id=1846): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 20m33.7355576s ago: executing program 6 (id=4462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futimesat(0xffffffffffffffff, 0x0, 0x0) 20m33.319825575s ago: executing program 6 (id=4467): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SCHED_CORE(0x18, 0x1, 0x0, 0x2, 0x0) 20m33.186216971s ago: executing program 6 (id=4469): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x28, 0x4, 0x0) 20m32.987585158s ago: executing program 6 (id=4472): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 20m31.966969233s ago: executing program 6 (id=4484): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0) 20m29.69897855s ago: executing program 6 (id=4506): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 20m28.853931414s ago: executing program 36 (id=4506): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 16m4.38623012s ago: executing program 7 (id=8640): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5456, 0x10000, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) shutdown(r0, 0x1) 16m3.975859984s ago: executing program 7 (id=8643): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) 16m0.739033394s ago: executing program 7 (id=8679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5}) 15m59.374588439s ago: executing program 7 (id=8694): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 15m59.305143497s ago: executing program 3 (id=8695): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 15m59.165242339s ago: executing program 7 (id=8698): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 15m59.087424582s ago: executing program 3 (id=8700): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc010000190001000000000003000000fe880000000000000000000000000001fe8000000000000000000000000000aa00020000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000002000000000000000000000401050020010000000000000000000000000002000004d63c00000002000000e00000010000000000000000000000000735000004030700080000000400000001000000fe80000000000000000000000000000c000004d32b00000002000000fc000000000000000000000000000001013500000200730009000000050000000700000000000000000000000000000000000001000004d43200000002000000ff0100000000000000000000000000010035000000010700050000000300000007000000fe800000000000000000000000000012800000012b0000000a8ae42eab1414bb0000000000000000000000000000000001"], 0x1bc}}, 0x0) 15m58.888222462s ago: executing program 3 (id=8702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r0, 0x141601) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x38bf, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xd6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 15m58.775803345s ago: executing program 7 (id=8705): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000031c0)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf250800000001000000ed"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 15m58.381770924s ago: executing program 37 (id=8705): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000031c0)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf250800000001000000ed"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 15m58.346760056s ago: executing program 3 (id=8708): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 15m58.165425893s ago: executing program 3 (id=8710): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) 15m57.667791247s ago: executing program 3 (id=8714): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="8300d1c4c9036e8866400fe2de0fae4e0afaf2466ff00fc01e63df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) 15m56.892047939s ago: executing program 38 (id=8714): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="8300d1c4c9036e8866400fe2de0fae4e0afaf2466ff00fc01e63df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) 4m44.240713772s ago: executing program 4 (id=18555): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m43.91205738s ago: executing program 4 (id=18558): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) 4m43.727515102s ago: executing program 4 (id=18560): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 4m43.419143136s ago: executing program 4 (id=18564): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 4m42.452462762s ago: executing program 4 (id=18582): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioprio_get$pid(0x0, 0x0) 4m40.516404917s ago: executing program 4 (id=18609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x7, 0x0, 0x1, r4}]) 4m39.983372277s ago: executing program 39 (id=18609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x7, 0x0, 0x1, r4}]) 1.95185322s ago: executing program 1 (id=22768): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.951532094s ago: executing program 8 (id=22769): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) 1.889018354s ago: executing program 9 (id=22771): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc4a82, 0x0) 1.807212476s ago: executing program 8 (id=22772): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, r5, 0xfffff26a, 0x80000001, 0xb, 0x1fd, 0x1}) 1.771147579s ago: executing program 9 (id=22774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) 1.660785367s ago: executing program 8 (id=22776): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x8004, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) 1.633887537s ago: executing program 9 (id=22777): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.583698301s ago: executing program 8 (id=22779): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) 1.502058639s ago: executing program 9 (id=22780): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) futex(0x0, 0xb, 0x4, 0x0, 0x0, 0x0) 1.423901527s ago: executing program 0 (id=22782): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) 1.309078026s ago: executing program 8 (id=22784): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fcntl$setownex(r0, 0xf, &(0x7f0000000040)) 1.308168911s ago: executing program 0 (id=22785): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x6) 1.230688275s ago: executing program 9 (id=22787): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000140)=0x7, 0x4) 1.094407337s ago: executing program 1 (id=22789): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003040000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 1.076400255s ago: executing program 2 (id=22790): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) 1.028320093s ago: executing program 1 (id=22791): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 971.878834ms ago: executing program 2 (id=22792): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x71ee18750e7abfcf, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r2, 0x4004743c, 0x0) 891.3478ms ago: executing program 1 (id=22793): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) 775.909441ms ago: executing program 2 (id=22794): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 760.109024ms ago: executing program 1 (id=22795): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 711.912038ms ago: executing program 2 (id=22796): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1c, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 636.18194ms ago: executing program 0 (id=22797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x4, @empty, 0x82}, 0x1c) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 571.944795ms ago: executing program 2 (id=22798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x5b, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x1589, {{0xa, 0x4e24, 0x7e987149, @mcast2, 0x2}}, {{0xa, 0x4c22, 0x400, @private0}}}, 0x108) 452.439295ms ago: executing program 2 (id=22799): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 443.776302ms ago: executing program 8 (id=22800): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r3}, "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="75c6c1015909d4338683df9486bbc81e43f13e4926c27c2f82f846633ae45dde55cd4aa48598dfcbe26577ac059a9420bca1c94427a6d7872a1b30832e91813fe7e1af1f00f4587326ea389615a22b9b665a4b77d6cd3efb7c7ef750596fd9d755e7c9200af5a208abf303434848890294b53f279f4390b8cba0f4c94ad8b0815e520566857afa936aea2e23f24e936f8f9b2e7aafcabd0f1fdc885b32e9dcf5eddf7cd4445f872327973e0789fe437e6201e32297c99c6be42731a056ed21fee6df04daae244d4164b1f27764dc0d3b38d824461b54c9b7f13dba393b8e2029454f5174b5a59a35970316b38de13bd00db37eb9029abcf71c734e0a865ce878284540125caad33853dc11039bda8f0fb6bb9f67065a858d9d13aa1e8a79727b376ac3b5e25f688821e19fa5573034c50882e3fcbd111e137b80b428f6986d9d8cdb2a2476fbebf22de118e27f0fc48bcfb54fccde391238eea73f5a9fbe2138ae958f44fcfe66845acb714d9b49bfba663b6fe29e09f58ff81d65abe5516378bc176bf7212ed988d1e306b36a37d35ca97a62fa5c70e76829b3f63b3deaa7b98b67fc19586cc60541fadf4b6c5da31a083e57a34399348f53b9c5ab83579ce5ea883195be71b8383cbc6e6227054f1867bcb321d9da7eff2a93f0487ecf6bd2ae805d95be46bea30d267f52ace8c21410b357fef133ace7eba38a326dae7c708a25320c70f229c555289cd8703b680d78b9c6eac6bc99c8abfe8e656f6054a7cede6330f335e9c43d88f1f31380e575fec7e04b1c8cb7b43288849dc0e1ec01e259a15986e23a501ce360a25ec565e0d7d12a20513e82c89fd4f89774ad4b395191b6a9d6b26c99bccd3bc61668dd642aeddeb506782ee87da02eab31f8281587b0dff57a7dd4d8f470c96b467a711f19855c939ef8b503a302673545eb77ba3e599962eeb4e30d5261490bde68860d14d7dfd2e797674384394a39ba4635f902d15e6198e6a2df8357fd0ef40c5a309a2aafd0d94f2983d83086b93ad787ae6b6c22389cd36ee9e958b6e297123ffa6dddfa0d5f7c56de809681b23b89ddb0f38c889c5d7957d47e2aaa1330b12cde716d47c9d60c5e0ded86c8f3c592394eec7c94740e14fdfe799d75f2417c9c8d7ff3247e85bcecda02f7c22d8133a92bc44f3c96f1b7c24fb8493b117efbb2fab56013a4f442da56c46beee7ff473e8e2618e387cb2576d6a4b1d8937203bd01f5f1f8bc035c4009ac67ebc53f88e314ceeda2c1156e0150ca1c4686db66be31986aac9d0799905058a998bf04b417fefa43a9d28e89eae3e5bce4e645097646708d26789c01ecd2b592bce9caffa134a2a31bdbd14d1cc20ef586e6827a009b3472b3fc6b8e759afce903e35f588416480621d1ffb3d7fb66dfe4f0f00e343128cd677ea9833c979cdf94f3cc3eccca626af6537a268297d860e1ee10dfa3e6ee4b30cc369208ab8d44d52e6bcc961766a303053a8e459bc95be9f0f815aba00a9f9e6d4f8c13289169e6f4c2ad4f4a0ddd88e3c54460fa01814a6e154447bade1c4d2dc99d9eadf2427ba9bffb6c3c1fe76d83971d082f7f60435f226754b647ed02aa4364ed22d4331647f4c7aa8bdf5822ecf2ec217d929e5aff4625fee1dcaf38bf4dcd2233d84eba0667c868a18a39c4337f41e9ac33b94bf7856994efcf2564fb1111518ab8dd5459939043c8d72636fc2b089aa99ff158d252a864cb2281592154ff3699623da1b8dfab8f874c14672e7a3f676a0bc654495dd1779e9ba599bfcab5b77bfdce1429dc68c8738ac23056328c918ff8e6eb735c524ce0a1413cdeebe26906d123999c3445d8a6b74dadc9b2d8718c028b52ca3bc5fd30411673dd5564111dcb4f1423c880c3160d2dd83a41bd76fc80474b7e0601a8bd2708ebe85f1b23e190833485f7f3f43b4767b9aba721711dd79d55ac5aecd9ddaa66b04490f52bf6b6475309f15bb64132dc6111be416267c04a2658c490542a7e04d6a7a9dec7237555cbdb32f051c33018452976101cda7d145f39011ac31d019dddb8755998ad1721a04b3fc3f7bb07b3ac2f2087e8f63c9070c65c509238b9d0e33a596b1247108bb7985b35bc33b9c4426e90554f00b6a9c37d1e9ddc27f2f8b16ec70a8fbf13a48659fd75cf71e245772848b4999d37e1b45a3253ae3900b03acd571f5f4621b5d0b672fd87ee83bc1c0d2c08a478fb57091c1634e10d196b4a185728736e75066eb222bfdb463762e773912d5f78fcaf400531fcb2ebe375ab81be7e5412dc153b18bdd3cb0a271e5c650ee2b3fb41727144659bd9e3867733ef3dafccff61adcbc079f0034080ad6cebd2d591f5519f374c1e9cfcc1e1d149b19ed169f3d0a63ee80513db620807e89ceb0ad9c8a5bfc3e1207aab30df7e460fc715bd0e1cf8bd1f346d56e2046f2174d67e89180e5b80c2b3947a3fa80a5def940eaabd2a53d8658d07dc7290dbbdd5277ae9a5e66a8afdbe591798e2f283903bb389274e70af2b45863e6660b62b31b0b0b7c3785f9b0cc292659f97464089399a3f517a8b3b48eb751b855f37ad65d5f2c8ff377a87225ed7c9a970dcde700c62a107b59d10e8c7a6bc2d218099c457be927e35ca4fcc839a5e77ebd022b12848a85c4611d81c6dfa703dae14cbde0e4f0d4df9c888976b09b36d4b63fd474777e8841fda0fa58a3d4291303440e5c7af3ccf8bb478068577214556f48bc14fe4f25c4566c300cde1b20aeeb90c8b6e14ceea3b1c2545e9add0036af3ef47b70eeb6a4bd945bbd514b6f297992aed30393295ac72a5170b0e4b0048b4b4b16a0174405f6165721e69d5ac1c0a1b1c31f6756a0750ab9cf5e1325b77678266b4ee9e5efab246bdee0f1d48b1281cfaa0578e063caeaab14508a340043e6ea18b495ecfe518aadbd0ba4e6d534376611121917ce1eb5197997daed456437207d1e83ad98aee13e3581b0a826eb34a6ec65b6258b0791a2e86a3cdae26d3ef60cfe77ea622bc234d42530c40bc63f86a66c2e6df3efb6b0b6f1c3370eee8e123fe6d952f03ca7ffb94f2f837296771294febf0e4dc28f626da6b4a5bfc7b4c980e3a1eb2d5fa669bc661be59a73d681cefae5def0b866bf4fd7fcd967f9a3bca09c327aaff7635e218b5b7f822c759fd2a6a0a2ddcbd1daa57aef73d69ca88679dfd39934377321e080f4fccaeb5a08786fbf7c6df97ae830f1b2ab77e66bbb9ed9aea46114638b1afd0443a625f0a6e708db7431ebd946638993ffcc7f837e30f5e66abfff9cddf1f9ceba7b025b2452014616c2a66db5d6f4afaf678b1330a70bbdfbbcfb950df9f75f03eb013189982ba8d204315ecd13d70b3ed75f14386224f83b0c95fa45fb4c40a2e655204a01187aaf705bec8e6dfa8f3a387fded3205a613606b794356818ba193a89c4eb716c66ccda98becddd25e9b681307d87d8bf1f3a581ec11becc96996cdc953fa357a1b9537c25c7ea3524d8a929caef9165970aa400e4a2d9ef6dbd7bab4a79491916112073880da0ebcc22035c1f0ea07512ef2908ec62a8e7993f2871aab05016d9cdc548bb7eb8962a54a5c13977ef6b79573d2ca2977b65c22519708af129cebc852563368c225f80d4ae2e51a7bb7d5cf7031c6379697bef8bd696f1e5671d41f4121da411d9ed6a9c345c64d71c469454c1ce8fd8f9c745f6160093cd6400e625e60b7b5646c1d1d167a63379cc87201987d28ad3dae05ab8651591ece4ddb055bf5f7310ea6858040f6cd4f38fea70568f10b09a98a12d1546e7fd5efe549622f54bbc10dcd42f60f8d61aa31fa050a0f7bcbc6e45f9dce0091b5e769ed9ed4aa31e9c1b97619945c03fccf60f8bd547dc0fa072093e4265940d223555534b77489f6cef12f523deab648d6e77b7af4614eaf283a292e3034c6bcd485e8c65f7cc52ff123d1432f53ca3bd42be8b348ba3bfaf57451a5483fce32956669ec96863c3989794fb3359a4b4ac54fbedf566859b9818a5d71779f676874fd126888ad4c03a0dd018732cf5a11e58836556d5378a50c31ae83c364ae9fdeb5e183e5b34587c13e814f2fc757cbb4dbbffeb2d362d442d0617050c33c6aaa1ea593f63374566f10b741f57805d4c74fb43435b54b92c532f865300b4351e1913a34cdc80f5eb0e09e29b248df71a08cfb93351f2af9c9cb052c46d100beeb326d92d70e40da88eabb5acca56fb5fe498ee5d9e1302c3fbd05c6bc7ab12446d089635cd4d9ad88752b131e6ec91fa553afb66ace2c2e3c3709d97b68647b244843e247cf09fd7d056002e4c1754434bd4507f0b79b964bddfd3ad9ed1d1e361995f448808c886998d69f2feadc6d2babcfda86e694866728701b8ae04ef2df56d11fe16da0da9390371fa1ad5158528c5e316b292c123e3f56a579b9e9f516e6f5d321b1df3080959443ce2f88460ec57d7707b87d7f0f878aa3a0c6dff6de51b778410906cb9668c86ebb43a856d651f475142809abecf6cfafff6ed7143b4923d375678f9cb05409a23875d180c3b60a8f80dab10cee5d54fd9b12521c47e09b5df1a5c6d05e25d81232c144385bb3b46f2b5436ee0836e066d12dfe7e844c249431dfd8713ae6428607a337f06d35778ecc5ddfe3470287fc777cde9f0f8aad11e5bf89fd3c097a0fd8f8da1ebd1e4d4de1b39ad0d1cc933e1386875cae224c29a232a15d4fc1e79196ede9ec8f2ec6fa72098a93b90d8cfce870bcffc270e0874f10dd5387867aadf6413925da4ad1d581201cc914bcbe7754685a25ee3b52bdbe20491d460f7275f943f5be210faa4e9d5dbcd4a4e23adc739c521dbc78a2040d33f206e85f3ac04dfc0195368d211de09ab29855f3ea400e12ac2d43f8ca8d12502bba88fe8e027f5970ccac619e9136ee0c9bce5ee7dd16d715a046a539e042c662723b7fac74c4e2de06f7f7ef4e31648a19b0bf9628d57f3bee570147aaa29faaa60ecf78e5eee6f2b5ce48706a498d72ada4334b82815af52991a77a3546dbbc80c3e53c3a4546fe7f1c0b2dd22100a943b83125c0d0e9a7c5412aa1245c228e13bb9d176fd3734c75963d18260ae25ee11a4588a41c480220bd089223cf5bb70318d4109b5ba190525362374b457b4f198a916ff6066acc5d6e1e3d19a48b2d89ce74cf9338c9ac9ed32343536549b694eb334a5c6316522bd7c703e2df29e6266d7b715ab740098dc98c4338ea91ca592f686ac5b09ceed0fc17ad127b817556289d039bed5f7afeb9922a25a64e6259e9dfa407bc595e97b3a234c053061e9d216292b60c9f2d2465b42c31a8b0357209c6134d3b94d9bc68af60204738301072792e416c8dc612405b766bc2bc4b97acde6f6844b5fb2dfee21be5c1d91a2301bdd5740852ebc8df9c36fb1ff7d8aaee18e2c75c9763366fa7692f87f7d1076980436892251203790599dc789310964a9c03f88dc1f1c0b1cac159f5e36399c75cdb805744486f5624876e81af3f0e1590d098183a40afecf0841d0acf687b13049148eed079796bbb6c1edd3f5c0f5661a2d329b0165ac12f5cf58606970656d2c4d13a4cf2e15aaec175fc59bd9f23ea7869db744fcc0eba039259c7e541efaa066106e9b2c92bdded3e42884a8a02e71457f44775692a1c4fd845ff5ba8595c55ad4bb2177f975de0d22e0feac37f5c3f16426ebcd99d17c829759ac72dc1448661394d3a104999cd40cb09d086146cc92c6408ab1a0b0ad898cbfe76d4962ad0eec1c572a78f9d7342c3de64e881e99afc5b1df3227e198c79c1727a141a8a9da7ba3aae5b3e4ee59a84020191b70fa928d7ce136904c0b03c6c13391f55b381e2df7087b00932251ad7688117cd02ef5ceb5c7dda16d069de3a3e3ff2e341db15df06a96cab1ad2a51db41310ac48d572229695ca941cdfc8416b4307ac6dc176566635bc87d94557e7e4f7a14bdf86d1293c6dafe9ecc280d1a36cc6734485d41b6bd6a33e3605591d98e17fd34f901cdbc33710d768f791b9600218fed28a5d21a0e6589c7d6fb5120c8446eba3a8c8b39dddff369b30cffc0426484ef0b6f6664bec8655e040b2bb3fe3f6863c0a36fe182e3627f6ac38d23050092327f8b67beef764bc35207ed73e4850b43a229d48105d3649c45dc658e27b964b149f978b884268e69a4b353a06e473da3dc7d94c93f7070aae7f3cd2b422840ae55105a6ade053b47b2c72f8b7bad5edc52bc6a8daae76922517e6e3f19b82c5a286e7bfc7254d764ddb79c612e91e1bc61927ad424d1914043a6aacfecb7c90ffb16797349a1ec02de9585b51f19da3a0665f484826f77759234b4b4b7ebf0e176fde2571abc3d4714b543000a1726743dc9e0e6c0bc393b25300287603f47464988eed454ca2dc4377c4c1056f688aa1b5a40d380ba787e962f5cbb902db29a084e305b68f289df8112d19b9a34a32b76a827aa607eb306982aa8aa071c3909c9d1120a0e15a041524eeb12cba62e0378ffcfdf14821710c0d767e32e6a1bd09e76e4f6f9fe4843a967bd633a5fae28a3ae1f64861df70aec3c0cff134a5c8609f011686a430a0c7ef3a36a34a36e0d401b51e51c7eb6e8d13e8616f8c40f0bea3ed9c2b722e141567dbb558da1d7c509ee205b2e9936702b79cec40270398b97dc3525bad7b6809aece6cbe80728c4a188935aaad9edf706a557b84614741259345dfcff830299c640ab3cc534bc1ed744b3a935bb2943e4f8582600394b43269bb94b7c8b6de766770c43b96b04d59d6bb15831fe0bfbc0bb930141d0bd64c280c0a42f49380dd315adab35a4ebaa081ae1f736669156088e2d07670169ec89b85fe4149362135b290336c20451330a968e457c1c8b30ba6ee5ec335b9356a84a19dd459d49ed0b12f730289c24565d2ab0c1d5ed68fb4fa92800c8be4eba970913dd2cec7cfc1617ef0b3f7cae1d2979d2944bcdc375cf0c16a86ac6d5ed98a8d9405b674108f0bfb16b9c0408b134bec0df951bbf261ebc0be30ef15321bf82a6a482bc02db237e1a3d0c401316082ba674962a819d73671829f329b67dd5fcf3715fe6219fbf3631d265a5f0c7cfc3c107e469a55318357fc4f5f28fe48c534025fe0c1f06fa815987b7e1f5acd5a16fdd1c0dccb18d1047f8fb837affeb16dffbf91e01ea904571b21a1c0ac3cab6054314a7becb4188c96596258661a8eb71fcb374ada50b4c8e381f8e76a6b56a9e20a04ecf87445eb164760a4b9abcf96be310a9e0c2ac067f3be2bc05aeb0e91e9998bd1be01c68ce885edb372ca48d8518b45ecce90e2144c2356ceac563bfb4735ce0f21427bec2f728798578ef3c83e0a9ec0e16c4bb1ee24e99ca4dec6888eec3727702e058a3e0d5b8d5a72819b5b9dedd5e698ddb1f4542bd19f6cfdfe62cc179c7ee17307d2d8868c61d061a9310b8a037009017d24dcc6137f79926e20ff015cef3de464c2a9774b1db06a885782ac5abfcd1d48a0d65cdb898d3acaf6fbe347d4a80c9455cf7f16d8c890bc629b5d28d669e74db300023471c887f718ad5e7150890e7fdb8c78f2e63f727b205c71640840bedc58f9a52445ea55b95a6b7ddb7919e64728f716ad19c416fb51bac0e3535ff50a16acf7bdfe8066d519ce21ca4a17e4008c00b9f21c72f718d4de2d0cbeff5ca13032d498540478685bc7e45b4d5773c28acc39e58737dc2a3c907bef44e3e2af584fc7aac8f0e7d82fffc341cc984a9a7523de2ef72970646ce8b0d608315d888cc7cfa0f32d1d8da8aa646d9ad12b5dbe8049178b1ffe3bd13183d76dd06073cbca93685f096d8aedfde7c16060ca6bf3d14a24fcfa073673d77321ebfb290b2e92ea026e69ac6881a94e9ebc9b8ddb799ffb8ee771b7951312cc110a1c99a06529c0a0775b830805c54367001ceb69dcf5ab6a11d197bf1d170f686d53ec1b9635db856fd27b92e966f6c6a59ba8bb1ba812937d1b1e68193b3d7e4b213f7eb2a716717a73db04dd22878bfc34646499ded4a7acbffe6694bbae40635e6f0f322dc1662eb7e34b5a1f4a19c0c77bf2faa29b4aa2e2bb88238302cebc0210674473a3a440ddd1ce34317d74638acef8f6b8e471568887a6192a9ddf7c9d003e4890e4390a05bb5a0de8ca6ee7cebe360e6a7b326b3bf56f08fe8732fe8cf56781054ee56db70b45719f40b529d9cc9ff65362fae742c19b958cced92dac22a880ed6def03c3729612bb0ee34ff18557087a103474eff4f8066f8f25379a4d823f95718afbe5601a613abf3af27d247c88fba62280e904c4038fd8b370018a103693091ad3a44fb8be1e73fe9651c8beb51d70f945ca6ac32585b1a693b2d4598178839c10a7e60553fc83122647c5853e31bdef3a1b304da02a5b6df5d37217749c03467024a70703e32d0ec971ce4a8bab10b7a5a12303a7db83526a7fa3c4ec9fc6e125089c05f3a16e7be89249495e5b20cd6857c93378f524d0c46894e595ee76e301bd6da1743ae4e7e750ad8c4f0282f0bbf12e90383af5796e447fee78e302cf46e3a45126fd59d49a624f7033caeac61d49e147d5ed8e85a90c8914efbdfe2bebdf2ae19b58ce9b61684697dc6f0c65088437df7ec3810724ad7a021ec82b0351826dad927acd1a0662f7fc0278bcfcaafa11315bf5121d1b62f0f0471c54052bee73f2b1fb4139243a6d8de170c80604eadab39021306ff9cf5ce751af1fef52e232fc7c64247e32119e4de98d076b0dc84cf918100d8d3ebff83abefee2353acd133612e3815b8ae14d4f0d1006152807e3b42e035b9a62b58d64706730809a21440c7a9ea228ee033abf7cff2343fc4360b541311fa9ad18110be064ccab41436ca6560081111528dd2eb46a961392f024026d127b5836466fdfba1078b1a89f4c88bf8244b640da376a81142db5b1f27bc7e429cc15e6bad993f3d76f2ba3ff0815895361f20067f57fddd43f44b47375340c39283b3871a68f28b0a8166ac3ee35c8393278d5d2d3887c8a0a964f56f1769c29adbba6fbca7901415e2ab3b63f82d09caa3bf6e7f2e743aa073b57ed8a097f80c47ee546e2fe7b4f6fcbc98770fd7e9f1480517f26656171d394cf47ea395bfb995c087f93cde36b07f3507de2ae23d75b000a532c71265521631e4f8126c5eb96f15d04f183e2162ad9c967c0a1c291f1f1fc2b644271f160764af4e469823c3535ebb25cbc37f09b43fbd258b4a1d45335f162ad5f3d9e5406b671811cc0a16e76f4874041bac7b116483a0727f59a2144ca0490fb8acac82e62cba2e45442d4bf35e49f240a57f542be5df86f6942a5a4b82ff437ff2494c7837d22711aae24265a954d8b6e44b731022214e97ef1111f9bd5fde591bba1541799641670bdb290bd45c15c6b7f594179e3a81873f60e382de67bfe33ec177b64950e05706f1243388ffce2a541c5f30a72cf25623e1c35e72bdebf6d87b4684ff156efb10f96392ddb71353d8c8535173ce57ca41905afbef07ba646a067b2fd71bf3e9335e47672fb43639d7a6a4d51923243121724cb3bca92d304ba2c3fc4942b50c302f1ebb15902c5e191d0b3588df150ddb6aa67477a0046394f6ba91c38cb70d4bf5181e5e99d5c5e1fc39ed3c9b793f0520cf96831d65d51b0ecd92e3bee353b413483fa57690152bb4b524fa6d81d82f66bc2b260a40c232dabe1962f0349a078ec42ccc93bd4acbbcfe61af01388719bcf395f27c401f604684a312624820bfa594755fba5a7f61a7d59f364122398b573f37af4b0526099350b43e5bb8c42300be4f2f78a7fd5a317cb6a7cba8758d25122bb3e0fdab6d4968a668fb6db5e9a7944a78dbb0760059e1f3c2e372f28f3787c1c0163fdcf4812c48c08a381a651d4acab89797cf7a4cb1b792d049fdb4d61eb5e65e2870d94b5b23adbabb1c3e6860a021ec90e226475e5b7358199ffe783536ad7be7437b536affb32c74d5c7702b2d6eb47f3b14132bc270ee6ff482fcf6bd5125ac3b17f72e1de54f07d8f97535a0e59c5b8738c9aa630eeddb0c72d3320bf6e99eaf2b321965734106a49b82c57851f2cdbfcbe7197c3eee3a51e03beedb57a186972f0c276579c0cd429e012b3c09f697ec9a71aa074385e1a1c3d3f235bf6e72072be48d025965866667d64a9d80a18baba65ebf3594c5514dee7e4b414e72f79a47a6aab389cfdc5258d08bbb808c97e1f6e0598bc8b7935dc6faa051a95635cc31169b5b8a044a7ecdb9435b1dd5dcf7d28998cb834212777b49a02932787bd690f102fb0772284feed90aa7b5b4887c8d397c0350a010dffe01c6d35e0de2685e6dcc5e71e1542998610b12eec1cebf0bcfa4ddce0bf7b666216c1a352818e941904203dd64d7a253c9632672885e83e2bccd48410a80294a4628f24913cca629fbc5f4a5c4fa0c3c918f479c2247b8cd3768a144894ee10f41f73d18555661b68679dc09f6fb8647f85a4c752d66679468f96400f300d2636e97af596fccb3fa68038ec626d896b40b1297ab4f849dbbe109886fdb3db6cd230271a8c164be8565772125c86059dcb3aa18d40cbcc356450859b5c157f60f4c657d38c0abf8287a836ced10d852025b70000b04d6977306b5d19cac3ed6d50cf0f2a623fce68a233dd6263c0635783998d0a2da76d5080ca8aac7afe8b5750004be87b260f5c6f6dfe4ffbe55fa86924b3fae0f84e2c23f608f41e4d4e4611f22cb282d9ec2413817656806265cd4b0ec24b2ccf79235f348d5d327618c79717f4a849bf838ce3edf7b02fc27bf92abe64aded9f6f2ee8857384dbf63f88471c73cc28366c30b37361ccdb95e16523a6f65f198906b75e148e9ca78ea7e823db6ab7221697e5fc285dfb308ccfa47980e7c4bb4f6047da4cb127ba2334b6ae616098149ffb0cfd5467dc97580d838929b5363768030a59ee1b60f60194094ca8f02ba5aa3eccf7eab811a8204f6f73a886f74d0ac4669d282c7f1cfb29b26f4902f6f7e0b027b01090f362313a5ad20aa719432cea2444959d19c7889f5b3c37ae7439974bd7cb2c03279a402418600bc854b1f9456d62081a89c931b1bf427e3f495e4dcb6f85d9beb948c62a19ea47b40a00525704bda039ba87a7ea1a674da1e9d2da3878438ef4f48fb764f65841934fe0d1886714a422f1b13db25c0587f4557c042545fbae6c91aa2e9fc5a8f84b5fe90427192b0140527c56fc437be55a48d0a82d2fbb8e5254da21a3d48e5632933d1a54b3a2c0bc7ea34321640708a5790185b1f00439971d676ae6fddf92db22bc801cce738768b0618578f192fcfb4a9b9d736b61f7aeaac0ae76039ee17052f20c23754c9e3ab751a5567648eeae2de4183a7ae6d6149eeca6566a7388c3c7ff41bc7e3858978ea73dae0c9af915232f9f05308bb6b7f99fcd265a95edc4ff3ff5ccb02840c75f4d19a118deb7ef445f617bcd15a8c6fb975e51e776527eff86c7b50bcae2e3797d26237ae8e9722639decaf9489b12ad7aeaff6db3e447df91302ac942de2b6ff30b1eb506a43a0e65f02de7d512f41ee700d62b70b982d55dca30494c04a28adee874a1c7c", 0x2000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000700)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0xf, 0x7, 0x6d8, 0x7, 0x5, 0x1, 0x4, 0x3a45}}) 408.096256ms ago: executing program 9 (id=22801): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x0, 0x0) 295.942473ms ago: executing program 0 (id=22802): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) 189.664642ms ago: executing program 0 (id=22803): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013"], 0x120}}, 0x0) 75.846078ms ago: executing program 0 (id=22804): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000740), 0x0, &(0x7f00000007c0)={0x2, 0x48, @b}, 0x48, 0xffffffffffffffff) 0s ago: executing program 1 (id=22805): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)={0x3, 'wg0\x00', {0x9}, 0x6cd7}) kernel console output (not intermixed with test programs): ag 0xc [ 1426.821169][T25622] hid (null): nested delimiters [ 1426.830503][T25622] hid (null): unknown global tag 0xc [ 1426.838361][T25622] hid (null): unknown global tag 0xd [ 1426.847440][T25622] hid (null): unknown global tag 0xe [ 1426.893521][T25622] usb 2-1: USB disconnect, device number 40 [ 1426.914382][ T30] audit: type=1326 audit(1763226570.691:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.17999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1427.051829][ T30] audit: type=1326 audit(1763226570.691:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.8.17999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1427.720920][T15503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1427.860884][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18014'. [ 1428.327478][T15517] binder: 15516:15517 ioctl c0306201 200000000000 returned -22 [ 1429.249072][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18028'. [ 1432.324376][T15631] binder: 15627:15631 ioctl c0306201 2000000001c0 returned -14 [ 1432.481356][T15637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18072'. [ 1432.512947][T15637] netlink: 40 bytes leftover after parsing attributes in process `syz.8.18072'. [ 1434.717559][T15707] netlink: 260 bytes leftover after parsing attributes in process `syz.2.18101'. [ 1435.087592][T15721] fuse: Unknown parameter '&' [ 1435.201599][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18109'. [ 1435.314868][T15727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18110'. [ 1436.275965][T15759] netlink: 96 bytes leftover after parsing attributes in process `syz.8.18124'. [ 1436.456390][T15760] syzkaller0: entered promiscuous mode [ 1436.467069][T15760] syzkaller0: entered allmulticast mode [ 1436.503228][T15770] netlink: 388 bytes leftover after parsing attributes in process `syz.8.18129'. [ 1438.328876][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18139'. [ 1439.611308][T15807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18145'. [ 1439.635221][T15809] netlink: 'syz.1.18147': attribute type 7 has an invalid length. [ 1439.677015][T15809] netlink: 'syz.1.18147': attribute type 8 has an invalid length. [ 1440.175553][T15828] binder: 15827:15828 ioctl c00c620f 0 returned -14 [ 1440.261166][T15834] trusted_key: encrypted_key: master key parameter is missing [ 1440.522619][T15849] netlink: 'syz.4.18166': attribute type 13 has an invalid length. [ 1440.960370][T15865] binder: 15862:15865 ioctl 400c620e 0 returned -14 [ 1441.303744][ T30] audit: type=1326 audit(1763226585.321:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.2.18181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1441.353586][ T30] audit: type=1326 audit(1763226585.321:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.2.18181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1441.377471][ T30] audit: type=1326 audit(1763226585.321:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.2.18181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1441.401730][ T30] audit: type=1326 audit(1763226585.321:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.2.18181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1441.424730][ T30] audit: type=1326 audit(1763226585.321:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.2.18181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1441.980925][T15908] netlink: 100 bytes leftover after parsing attributes in process `syz.8.18193'. [ 1443.185162][T25617] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1443.370108][T25617] usb 9-1: Using ep0 maxpacket: 32 [ 1443.379207][T25617] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 1443.395692][T25617] usb 9-1: config 0 has no interface number 0 [ 1443.401946][T25617] usb 9-1: config 0 interface 148 has no altsetting 0 [ 1443.437423][T25617] usb 9-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 1443.454994][T25617] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.463147][T25617] usb 9-1: Product: syz [ 1443.473127][T25617] usb 9-1: Manufacturer: syz [ 1443.488069][T25617] usb 9-1: SerialNumber: syz [ 1443.530491][T25617] usb 9-1: config 0 descriptor?? [ 1443.553679][T25617] pl2303 9-1:0.148: required interrupt-in endpoint missing [ 1443.801149][T25602] usb 9-1: USB disconnect, device number 61 [ 1443.851436][T15986] xt_TCPMSS: Only works on TCP SYN packets [ 1445.240822][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18258'. [ 1445.256127][T16040] bridge_slave_1: left allmulticast mode [ 1445.262187][T16040] bridge_slave_1: left promiscuous mode [ 1445.268988][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.299834][T16040] bridge_slave_0: left allmulticast mode [ 1445.315418][T16040] bridge_slave_0: left promiscuous mode [ 1445.327903][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.473648][T16053] bridge0: entered allmulticast mode [ 1447.494207][T16110] binder: 16109:16110 ioctl c0306201 200000000940 returned -22 [ 1447.601736][T16112] fuse: Invalid rootmode [ 1447.990050][T16133] xt_limit: Overflow, try lower: 1207959552/384 [ 1449.029183][T16178] tap0: tun_chr_ioctl cmd 1074025675 [ 1449.034547][T16178] tap0: persist enabled [ 1449.622763][T16207] tipc: Enabled bearer , priority 0 [ 1449.642538][T16207] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1449.660919][T16207] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1449.678937][T16212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18339'. [ 1449.690523][T16207] tipc: Resetting bearer [ 1450.105565][ T9273] tipc: Resetting bearer [ 1451.248667][T16264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1453.293809][T16310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18382'. [ 1453.597063][ T30] audit: type=1326 audit(1763226597.621:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.2.18386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x0 [ 1454.026574][T16330] binder: 16329:16330 ioctl c0306201 2000000001c0 returned -14 [ 1455.455154][T16376] netlink: 32 bytes leftover after parsing attributes in process `syz.9.18415'. [ 1458.052916][T16464] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1458.314447][T16475] netlink: 'syz.9.18460': attribute type 13 has an invalid length. [ 1458.335554][T16475] netlink: 'syz.9.18460': attribute type 27 has an invalid length. [ 1460.585077][ T30] audit: type=1326 audit(1763226604.601:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.1.18495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1460.661697][ T30] audit: type=1326 audit(1763226604.631:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.1.18495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1460.706281][ T30] audit: type=1326 audit(1763226604.671:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.1.18495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1460.775051][ T30] audit: type=1326 audit(1763226604.671:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.1.18495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1460.865142][ T30] audit: type=1326 audit(1763226604.671:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.1.18495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb5201c1f85 code=0x7ffc0000 [ 1460.918986][ T30] audit: type=1326 audit(1763226604.831:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.1.18495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1461.702441][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18509'. [ 1461.978767][ T30] audit: type=1326 audit(1763226606.001:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.8.18515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x0 [ 1463.115707][T16628] netlink: 'syz.9.18529': attribute type 4 has an invalid length. [ 1463.148381][T16632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18532'. [ 1463.357057][T16639] netlink: 'syz.1.18534': attribute type 4 has an invalid length. [ 1463.515096][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18549'. [ 1463.524353][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18549'. [ 1463.528122][T16646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18538'. [ 1463.536125][T16650] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18549'. [ 1466.784105][T16746] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1466.797072][T16746] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1466.832246][T16746] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1466.845662][T16746] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1467.438860][T16773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18593'. [ 1467.624823][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.824312][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.875713][T10461] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1468.011587][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.057356][T10461] usb 2-1: Using ep0 maxpacket: 32 [ 1468.094414][T10461] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1468.126343][T10461] usb 2-1: config 0 has no interface number 0 [ 1468.132518][T10461] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1468.147204][T10461] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1468.180851][T10461] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1468.198791][T10461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.215225][T10461] usb 2-1: Product: syz [ 1468.219458][T10461] usb 2-1: Manufacturer: syz [ 1468.259516][T10461] usb 2-1: SerialNumber: syz [ 1468.277420][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.281425][T10461] usb 2-1: config 0 descriptor?? [ 1468.569181][T10461] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1468.613051][T10461] cx231xx 2-1:0.1: Failed to read PCB config [ 1468.648855][T10461] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1468.681734][T10461] usb 2-1: USB disconnect, device number 41 [ 1468.746969][ T12] hsr0: left allmulticast mode [ 1468.751807][ T12] hsr_slave_0: left allmulticast mode [ 1468.800019][ T12] hsr_slave_1: left allmulticast mode [ 1468.816877][ T12] hsr0: left promiscuous mode [ 1468.822561][ T12] bridge0: port 1(hsr0) entered disabled state [ 1469.164575][T10461] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1469.349130][T10461] usb 2-1: Using ep0 maxpacket: 32 [ 1469.370378][T10461] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1469.396067][T10461] usb 2-1: config 0 has no interface number 0 [ 1469.424555][T10461] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1469.461904][T10461] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1469.484132][T10461] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1469.517638][T10461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.535859][T10461] usb 2-1: Product: syz [ 1469.545878][T10461] usb 2-1: Manufacturer: syz [ 1469.550604][T10461] usb 2-1: SerialNumber: syz [ 1469.596061][T10461] usb 2-1: config 0 descriptor?? [ 1469.822736][T10461] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1469.849497][ T12] bridge0 (unregistering): left allmulticast mode [ 1469.865546][T10461] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1469.995412][T10461] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1470.015298][T10461] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1470.047556][T10461] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1470.063902][T10461] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1470.095624][T26701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1470.095904][T10461] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1470.113056][T26701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1470.126518][T26701] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1470.137888][T26701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1470.157801][T26701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1470.164998][T10461] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -71 [ 1470.179716][T23258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1470.193843][T23258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1470.211970][T23258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1470.230539][T23258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1470.253180][T23258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1470.343578][T10461] i2c i2c-2: Added multiplexed i2c bus 4 [ 1470.397860][T10461] i2c i2c-2: Added multiplexed i2c bus 5 [ 1470.418352][T10461] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1470.482254][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.484462][T10461] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1470.531953][ T12] bond0 (unregistering): Released all slaves [ 1470.599437][T10461] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1470.663670][T10461] usb 2-1: USB disconnect, device number 42 [ 1470.782823][ T12] tipc: Disabling bearer [ 1470.790815][ T12] tipc: Left network mode [ 1470.979315][T16829] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18619'. [ 1472.054491][T16859] vlan3: entered promiscuous mode [ 1472.111035][T16859] bridge0: entered promiscuous mode [ 1472.112083][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.9.18629'. [ 1472.151616][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18629'. [ 1472.172369][T16817] chnl_net:caif_netlink_parms(): no params data found [ 1472.203892][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18630'. [ 1472.358853][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18629'. [ 1472.361748][T26701] Bluetooth: hci4: command tx timeout [ 1472.724486][T16876] syzkaller0: entered promiscuous mode [ 1472.735340][T16876] syzkaller0: entered allmulticast mode [ 1472.787334][T16882] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1474.338239][T25604] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1474.445079][T26701] Bluetooth: hci4: command tx timeout [ 1474.497535][T25604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.508415][T25604] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1474.518593][T25604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.548854][T25604] usb 9-1: config 0 descriptor?? [ 1474.562196][T25604] pwc: Askey VC010 type 2 USB webcam detected. [ 1474.988552][T25604] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1475.003366][T25604] pwc: recv_control_msg error -32 req 02 val 2700 [ 1475.011445][T25604] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1475.019561][T25604] pwc: recv_control_msg error -32 req 04 val 1000 [ 1475.027128][T25604] pwc: recv_control_msg error -32 req 04 val 1300 [ 1475.034608][T25604] pwc: recv_control_msg error -32 req 04 val 1400 [ 1475.042202][T25604] pwc: recv_control_msg error -32 req 02 val 2000 [ 1475.049969][T25604] pwc: recv_control_msg error -32 req 02 val 2100 [ 1475.262471][T25604] pwc: recv_control_msg error -71 req 02 val 2500 [ 1475.281972][T25604] pwc: recv_control_msg error -71 req 02 val 2400 [ 1475.291749][T25604] pwc: recv_control_msg error -71 req 02 val 2600 [ 1475.306471][T25604] pwc: recv_control_msg error -71 req 02 val 2900 [ 1475.322346][T25604] pwc: recv_control_msg error -71 req 02 val 2800 [ 1475.335275][T25604] pwc: recv_control_msg error -71 req 04 val 1100 [ 1475.348219][T25604] pwc: recv_control_msg error -71 req 04 val 1200 [ 1475.379836][T25604] pwc: Registered as video103. [ 1475.399179][T25604] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input120 [ 1475.447205][T25604] usb 9-1: USB disconnect, device number 62 [ 1476.516110][T26701] Bluetooth: hci4: command tx timeout [ 1476.637329][T16817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.644528][T16817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.652263][T16817] bridge_slave_0: entered allmulticast mode [ 1476.660729][T16817] bridge_slave_0: entered promiscuous mode [ 1476.670590][T16817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.685521][T16817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.703442][T16817] bridge_slave_1: entered allmulticast mode [ 1476.716944][T16817] bridge_slave_1: entered promiscuous mode [ 1476.743981][ T12] hsr_slave_0: left promiscuous mode [ 1476.760476][ T12] hsr_slave_1: left promiscuous mode [ 1476.777333][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.791803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.803849][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.813705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.846193][ T12] veth1_macvtap: left promiscuous mode [ 1476.851890][ T12] veth0_macvtap: left promiscuous mode [ 1476.858725][ T12] veth1_vlan: left promiscuous mode [ 1476.864115][ T12] veth0_vlan: left promiscuous mode [ 1477.852849][ T12] lo (unregistering): left allmulticast mode [ 1477.866671][T16902] netlink: 96 bytes leftover after parsing attributes in process `syz.9.18639'. [ 1477.999612][T16817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.079157][T16817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.263576][T16817] team0: Port device team_slave_0 added [ 1478.290958][T16817] team0: Port device team_slave_1 added [ 1478.512170][T16817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.533126][T16817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.570893][T16817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.610100][T26701] Bluetooth: hci4: command tx timeout [ 1478.622449][T16817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.629905][T16817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.659147][T16817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.849016][T16817] hsr_slave_0: entered promiscuous mode [ 1478.886754][T16817] hsr_slave_1: entered promiscuous mode [ 1478.893210][T16817] debugfs: 'hsr0' already exists in 'hsr' [ 1478.915007][T16817] Cannot create hsr debugfs directory [ 1479.595142][T17024] binder: 17021:17024 ioctl f502 0 returned -22 [ 1480.045042][T25604] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1480.205930][T25604] usb 10-1: Using ep0 maxpacket: 16 [ 1480.224061][T25604] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1480.264015][T25604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.298196][T25604] usb 10-1: config 0 descriptor?? [ 1480.329547][T25604] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1481.728394][T16817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1481.773735][T16817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1481.807696][T16817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1481.873833][T16817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1482.170188][T16817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.225978][T16817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.243653][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.250946][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.303507][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.310961][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.575884][T16817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.605309][T25604] gspca_sonixj: i2c_w8 err -71 [ 1482.610230][T25604] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 1482.636880][T25604] usb 10-1: USB disconnect, device number 35 [ 1482.742991][T16817] veth0_vlan: entered promiscuous mode [ 1482.746286][ T30] audit: type=1326 audit(1763226626.761:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17081 comm="syz.8.18711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1482.797022][T16817] veth1_vlan: entered promiscuous mode [ 1482.906601][T16817] veth0_macvtap: entered promiscuous mode [ 1482.923103][T16817] veth1_macvtap: entered promiscuous mode [ 1482.990549][T16817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1483.018376][T16817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.040885][ T9273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.068033][ T9273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.093554][ T9273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.252032][ T9273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.624635][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.659384][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.676128][T10461] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1483.852386][T10461] usb 2-1: Using ep0 maxpacket: 16 [ 1483.859821][T10461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.871058][T10461] usb 2-1: config 0 has no interfaces? [ 1483.885269][T10461] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1483.895511][T10461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.916918][T10461] usb 2-1: config 0 descriptor?? [ 1483.933548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.003663][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.140574][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18717'. [ 1484.173685][T10461] usb 2-1: USB disconnect, device number 43 [ 1484.600177][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.606782][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.992753][T17151] program syz.8.18731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1485.119460][T17157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18732'. [ 1485.234289][T17163] netlink: 'syz.1.18735': attribute type 2 has an invalid length. [ 1485.253016][T17163] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18735'. [ 1486.725347][T25603] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1486.895066][T25603] usb 9-1: Using ep0 maxpacket: 16 [ 1486.914121][T25603] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1486.946810][T25603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1486.973715][T25603] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1487.005465][T25603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.013549][T25603] usb 9-1: Product: syz [ 1487.035345][T25603] usb 9-1: Manufacturer: syz [ 1487.040156][T25603] usb 9-1: SerialNumber: syz [ 1487.076546][T25603] usb 9-1: config 0 descriptor?? [ 1487.119601][T25603] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1487.137411][T25603] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1487.950408][T25603] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1487.997122][T25603] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1488.175398][T10461] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1488.350489][T10461] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 1488.366240][T10461] usb 10-1: config 0 has no interface number 0 [ 1488.451074][T10461] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1488.481199][T10461] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.505084][T10461] usb 10-1: Product: syz [ 1488.585068][T10461] usb 10-1: Manufacturer: syz [ 1488.589833][T10461] usb 10-1: SerialNumber: syz [ 1488.643871][T10461] usb 10-1: config 0 descriptor?? [ 1488.655596][T25603] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1488.699626][T25603] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1488.861327][T25603] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1488.890292][T25603] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1488.901550][T10461] keyspan 10-1:0.133: Keyspan 1 port adapter converter detected [ 1488.989771][T10461] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 81 [ 1489.029071][T10461] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 1 [ 1489.053450][T10461] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 2 [ 1489.072331][T25603] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1489.089113][T10461] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1489.124825][T25603] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1489.155383][T10461] usb 10-1: USB disconnect, device number 36 [ 1489.212105][T10461] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1489.251947][T25603] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1489.267069][T10461] keyspan 10-1:0.133: device disconnected [ 1489.288100][T17272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18768'. [ 1489.305607][T25603] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1489.335438][T25603] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1489.365275][T25603] usb 9-1: USB disconnect, device number 63 [ 1492.683648][T17400] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18808'. [ 1492.720616][T17401] netlink: 'syz.1.18809': attribute type 13 has an invalid length. [ 1492.923295][T17405] input: syz1 as /devices/virtual/input/input121 [ 1493.162171][T17401] tipc: Resetting bearer [ 1493.478979][T23258] Bluetooth: hci4: command 0x0406 tx timeout [ 1494.060573][T17443] netlink: 'syz.0.18823': attribute type 11 has an invalid length. [ 1494.086960][T17443] netlink: 'syz.0.18823': attribute type 1 has an invalid length. [ 1494.145181][T17443] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.18823'. [ 1494.340756][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18828'. [ 1494.386059][T17456] netlink: 56 bytes leftover after parsing attributes in process `syz.9.18828'. [ 1494.418845][T17463] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18830'. [ 1494.432290][T17456] geneve2: entered promiscuous mode [ 1494.439974][T17456] geneve2: entered allmulticast mode [ 1494.455538][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.489665][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.524648][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.771756][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18831'. [ 1494.969935][T17485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18835'. [ 1495.277300][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18841'. [ 1495.416700][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18842'. [ 1495.429389][T17506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.449058][T17506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.496291][T17506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.509341][T17506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.037245][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18862'. [ 1497.501070][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18866'. [ 1498.125632][T17607] netlink: 'syz.1.18876': attribute type 16 has an invalid length. [ 1499.564054][T17673] netlink: 'syz.0.18899': attribute type 13 has an invalid length. [ 1499.614546][T17678] loop5: detected capacity change from 0 to 7 [ 1499.641330][ C1] blk_print_req_error: 10 callbacks suppressed [ 1499.641362][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.656863][ C1] buffer_io_error: 9 callbacks suppressed [ 1499.656883][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.684455][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.693745][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.709442][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.718738][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.745258][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.754479][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.776397][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.785629][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.805752][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.815023][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.825660][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.834921][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.843193][T17678] ldm_validate_partition_table(): Disk read failed. [ 1499.852768][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.862172][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.871480][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.880719][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.895771][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1499.904988][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1499.925742][T17678] Dev loop5: unable to read RDB block 0 [ 1499.942119][T17678] loop5: unable to read partition table [ 1499.960872][T17678] loop5: partition table beyond EOD, truncated [ 1500.008201][T17678] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1502.190908][T17750] netlink: 'syz.2.18923': attribute type 13 has an invalid length. [ 1503.084226][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18932'. [ 1503.540839][T17785] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1503.564382][T17785] kvm: pic: non byte read [ 1503.569788][T17785] kvm: pic: level sensitive irq not supported [ 1503.569860][T17785] kvm: pic: non byte read [ 1503.583679][T17785] kvm: pic: level sensitive irq not supported [ 1503.583863][T17785] kvm: pic: non byte read [ 1503.596359][T17785] kvm: pic: level sensitive irq not supported [ 1503.596598][T17785] kvm: pic: non byte read [ 1504.234756][T17810] tipc: Resetting bearer [ 1504.339650][T17818] lo: Caught tx_queue_len zero misconfig [ 1504.580054][T17375] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1504.684638][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18953'. [ 1504.755808][T17375] usb 9-1: Using ep0 maxpacket: 8 [ 1504.763172][T17375] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1504.782146][T17375] usb 9-1: config 179 has no interface number 0 [ 1504.835421][T17375] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1504.856209][T17375] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1504.886167][T17375] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1504.886203][T17375] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1504.886229][T17375] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1504.886258][T17375] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1504.886301][T17375] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1504.886328][T17375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.973187][T17375] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input123 [ 1505.159165][T17375] usb 9-1: USB disconnect, device number 64 [ 1506.706745][T17893] netlink: 188 bytes leftover after parsing attributes in process `syz.8.18979'. [ 1506.731270][T17895] binder: 17894:17895 ioctl 4018620d 0 returned -22 [ 1507.213745][T17903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18984'. [ 1507.885898][T17928] binder: 17927:17928 ioctl c0306201 200000004a40 returned -22 [ 1509.432759][T17997] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19027'. [ 1511.543671][T18074] netlink: 96 bytes leftover after parsing attributes in process `syz.9.19056'. [ 1514.026280][T18165] binder: 18164:18165 ioctl 40046629 0 returned -22 [ 1514.341591][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19108'. [ 1515.485264][T18207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19120'. [ 1518.443825][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19158'. [ 1521.105520][T18413] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1521.112199][T18413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1521.140520][T18413] vhci_hcd vhci_hcd.0: Device attached [ 1521.154811][T18414] vhci_hcd: connection closed [ 1521.159238][ T1162] vhci_hcd: stop threads [ 1521.195109][ T1162] vhci_hcd: release socket [ 1521.199631][ T1162] vhci_hcd: disconnect device [ 1521.565724][T17871] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1521.735132][T17871] usb 2-1: Using ep0 maxpacket: 16 [ 1521.752791][T17871] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1521.764955][T17871] usb 2-1: config 0 has no interface number 0 [ 1521.771118][T17871] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1521.805266][T17871] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1521.830050][T17871] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1521.845966][T17871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.865500][T17871] usb 2-1: Product: syz [ 1521.869729][T17871] usb 2-1: Manufacturer: syz [ 1521.874361][T17871] usb 2-1: SerialNumber: syz [ 1521.898619][T17871] usb 2-1: config 0 descriptor?? [ 1521.945267][T18421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1521.952564][T18421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1521.994759][T18436] @: renamed from vlan0 (while UP) [ 1522.192637][T18421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1522.200704][T18421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1522.456861][T17871] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1522.516462][T17871] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1522.565507][T17871] asix 2-1:0.251: probe with driver asix failed with error -5 [ 1522.624606][T17871] usb 2-1: USB disconnect, device number 44 [ 1524.211764][T18510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19240'. [ 1524.334475][T18516] pim6reg: left allmulticast mode [ 1526.246468][T18603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19284'. [ 1526.579869][T18620] netlink: 188 bytes leftover after parsing attributes in process `syz.2.19294'. [ 1527.062304][ T30] audit: type=1326 audit(1763226671.081:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.19300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7fc00000 [ 1527.768274][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19319'. [ 1528.557770][T25622] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1528.736601][T25622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.747687][T25622] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1528.760699][T25622] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1528.785334][T25622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.809042][T25622] usb 2-1: config 0 descriptor?? [ 1529.050380][T25622] usb 2-1: string descriptor 0 read error: -71 [ 1529.083170][T25622] usb 2-1: USB disconnect, device number 45 [ 1529.228173][T18705] vivid-000: disconnect [ 1529.233392][T18704] vivid-000: reconnect [ 1529.356201][ T30] audit: type=1326 audit(1763226673.381:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.0.19333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x0 [ 1529.478145][ T30] audit: type=1326 audit(1763226673.501:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1529.526373][ T30] audit: type=1326 audit(1763226673.501:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1529.575961][ T30] audit: type=1326 audit(1763226673.541:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1529.753076][ T30] audit: type=1326 audit(1763226673.541:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1529.820825][ T30] audit: type=1326 audit(1763226673.541:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1529.857705][T18725] fuse: Bad value for 'fd' [ 1529.893654][ T30] audit: type=1326 audit(1763226673.551:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1529.919546][ T30] audit: type=1326 audit(1763226673.571:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1530.005064][ T30] audit: type=1326 audit(1763226673.571:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.8.19335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1530.341301][T18739] bond0: Caught tx_queue_len zero misconfig [ 1531.145666][T25603] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1531.315560][T25603] usb 10-1: Using ep0 maxpacket: 16 [ 1531.322829][T25603] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1531.355299][T25603] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1531.422669][T25603] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1531.432451][T25603] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.458166][T25603] usb 10-1: Product: syz [ 1531.462570][T25603] usb 10-1: Manufacturer: syz [ 1531.475357][T25603] usb 10-1: SerialNumber: syz [ 1531.506942][T25603] usb 10-1: config 0 descriptor?? [ 1531.534236][T25603] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1531.567741][T25603] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1532.120395][T25603] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1532.142938][T25603] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1532.783742][T25603] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1532.795948][T25603] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1533.015127][T25603] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1533.022859][T25603] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1533.035719][T25603] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1533.051142][T25603] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1533.078886][T25603] usb 10-1: USB disconnect, device number 37 [ 1534.084442][T18882] binder: 18877:18882 ioctl c0306201 200000004a40 returned -22 [ 1534.265476][T18878] binder: BINDER_SET_CONTEXT_MGR already set [ 1534.347144][T18878] binder: 18877:18878 ioctl 4018620d 200000000100 returned -16 [ 1534.422629][T18857] netlink: 76 bytes leftover after parsing attributes in process `syz.8.19401'. [ 1535.061415][T18895] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19418'. [ 1535.303371][T18902] trusted_key: encrypted_key: insufficient parameters specified [ 1536.285139][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19448'. [ 1536.734016][T18975] warn_alloc: 1 callbacks suppressed [ 1536.734039][T18975] syz.9.19458: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1536.776467][T18975] CPU: 1 UID: 0 PID: 18975 Comm: syz.9.19458 Not tainted syzkaller #0 PREEMPT(full) [ 1536.776499][T18975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1536.776513][T18975] Call Trace: [ 1536.776523][T18975] [ 1536.776534][T18975] dump_stack_lvl+0x189/0x250 [ 1536.776574][T18975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1536.776604][T18975] ? __pfx__printk+0x10/0x10 [ 1536.776626][T18975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1536.776656][T18975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1536.776686][T18975] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1536.776719][T18975] warn_alloc+0x214/0x310 [ 1536.776751][T18975] ? stack_depot_save_flags+0x40/0x860 [ 1536.776788][T18975] ? __pfx_warn_alloc+0x10/0x10 [ 1536.776820][T18975] ? kasan_save_track+0x3e/0x80 [ 1536.776847][T18975] ? __kasan_kmalloc+0x93/0xb0 [ 1536.776877][T18975] ? xsk_setsockopt+0x4dc/0x8d0 [ 1536.776901][T18975] ? do_sock_setsockopt+0x17c/0x1b0 [ 1536.776920][T18975] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1536.776940][T18975] ? do_syscall_64+0xfa/0xfa0 [ 1536.776968][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.777007][T18975] __vmalloc_node_range_noprof+0x125/0x12d0 [ 1536.777071][T18975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1536.777107][T18975] ? __kasan_kmalloc+0x93/0xb0 [ 1536.777143][T18975] vmalloc_user_noprof+0xad/0xf0 [ 1536.777174][T18975] ? xskq_create+0xbf/0x170 [ 1536.777203][T18975] xskq_create+0xbf/0x170 [ 1536.777234][T18975] xsk_init_queue+0xb0/0x110 [ 1536.777265][T18975] xsk_setsockopt+0x4dc/0x8d0 [ 1536.777294][T18975] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1536.777325][T18975] ? __pfx_aa_sk_perm+0x10/0x10 [ 1536.777356][T18975] ? aa_sock_opt_perm+0xff/0x1b0 [ 1536.777390][T18975] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1536.777411][T18975] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1536.777438][T18975] do_sock_setsockopt+0x17c/0x1b0 [ 1536.777465][T18975] __x64_sys_setsockopt+0x13f/0x1b0 [ 1536.777493][T18975] do_syscall_64+0xfa/0xfa0 [ 1536.777522][T18975] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.777550][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.777569][T18975] ? clear_bhb_loop+0x60/0xb0 [ 1536.777594][T18975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.777613][T18975] RIP: 0033:0x7f096f38f6c9 [ 1536.777647][T18975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.777666][T18975] RSP: 002b:00007f0970163038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1536.777688][T18975] RAX: ffffffffffffffda RBX: 00007f096f5e5fa0 RCX: 00007f096f38f6c9 [ 1536.777728][T18975] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1536.777758][T18975] RBP: 00007f096f411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1536.777772][T18975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.777785][T18975] R13: 00007f096f5e6038 R14: 00007f096f5e5fa0 R15: 00007f096f70fa28 [ 1536.777820][T18975] [ 1536.777829][T18975] Mem-Info: [ 1537.086550][T18975] active_anon:27423 inactive_anon:0 isolated_anon:0 [ 1537.086550][T18975] active_file:22902 inactive_file:3192 isolated_file:0 [ 1537.086550][T18975] unevictable:768 dirty:655 writeback:0 [ 1537.086550][T18975] slab_reclaimable:11019 slab_unreclaimable:108715 [ 1537.086550][T18975] mapped:30551 shmem:18320 pagetables:3218 [ 1537.086550][T18975] sec_pagetables:0 bounce:0 [ 1537.086550][T18975] kernel_misc_reclaimable:0 [ 1537.086550][T18975] free:1299532 free_pcp:11837 free_cma:0 [ 1537.145489][T18975] Node 0 active_anon:109692kB inactive_anon:0kB active_file:91564kB inactive_file:12632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122160kB dirty:2616kB writeback:0kB shmem:71744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14668kB pagetables:12760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1537.184814][T18975] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1537.219945][T18975] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.251170][T18975] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1537.257554][T18975] Node 0 DMA32 free:1281036kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109692kB inactive_anon:0kB active_file:91564kB inactive_file:12632kB unevictable:1536kB writepending:2616kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:34360kB local_pcp:13588kB free_cma:0kB [ 1537.328290][T18975] lowmem_reserve[]: 0 0 0 0 0 [ 1537.333095][T18975] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.363532][T18975] lowmem_reserve[]: 0 0 0 0 0 [ 1537.412589][T18975] Node 1 Normal free:3901732kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12716kB local_pcp:12716kB free_cma:0kB [ 1537.460613][T18975] lowmem_reserve[]: 0 0 0 0 0 [ 1537.516956][T18975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1537.575899][T18975] Node 0 DMA32: 1883*4kB (UME) 1876*8kB (UME) 922*16kB (UME) 817*32kB (UME) 481*64kB (UM) 728*128kB (UME) 342*256kB (UME) 205*512kB (UME) 87*1024kB (UM) 14*2048kB (UM) 191*4096kB (UM) = 1280012kB [ 1537.655777][T18975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1537.678842][T18975] Node 1 Normal: 193*4kB (UME) 50*8kB (UME) 45*16kB (UME) 228*32kB (UME) 103*64kB (UME) 27*128kB (UME) 6*256kB (UM) 2*512kB (ME) 1*1024kB (U) 4*2048kB (UME) 945*4096kB (UM) = 3901732kB [ 1537.698284][T18975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.708024][T18975] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1537.717606][T18975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.727863][T18975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1537.737573][T18975] 44410 total pagecache pages [ 1537.742374][T18975] 0 pages in swap cache [ 1537.746743][T18975] Free swap = 124996kB [ 1537.751005][T18975] Total swap = 124996kB [ 1537.755786][T18975] 2097051 pages RAM [ 1537.759697][T18975] 0 pages HighMem/MovableOnly [ 1537.764465][T18975] 424121 pages reserved [ 1537.768942][T18975] 0 pages cma reserved [ 1538.056091][T19005] netlink: 'syz.0.19471': attribute type 10 has an invalid length. [ 1538.088267][T19005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19471'. [ 1538.098415][T19005] dummy0: entered promiscuous mode [ 1540.348312][T19109] tipc: Enabling of bearer rejected, failed to enable media [ 1540.925730][T25603] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1541.096440][T25603] usb 9-1: Using ep0 maxpacket: 16 [ 1541.128298][T25603] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 1541.144956][T25603] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.175608][T25603] usb 9-1: config 0 has no interface number 0 [ 1541.192017][T25603] usb 9-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1541.214096][T25603] usb 9-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1541.243874][T25603] usb 9-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1541.260938][T25603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.285665][T25603] usb 9-1: config 0 descriptor?? [ 1541.310347][T25603] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1541.462761][T10279] udevd[10279]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.498254][T25603] snd-usb-audio 9-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 1541.539735][T25603] usb 9-1: USB disconnect, device number 65 [ 1542.718224][T19187] binder: BINDER_SET_CONTEXT_MGR already set [ 1542.774496][T19187] binder: 19185:19187 ioctl 40046207 0 returned -16 [ 1546.039906][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.050783][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.441542][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19602'. [ 1547.818671][T19303] random: crng reseeded on system resumption [ 1548.720931][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19620'. [ 1549.426784][T19366] netlink: 9 bytes leftover after parsing attributes in process `syz.9.19635'. [ 1552.689609][T19506] fuse: Invalid rootmode [ 1553.548010][T19542] netlink: 248 bytes leftover after parsing attributes in process `syz.1.19714'. [ 1553.594328][T19547] binder: 19546:19547 ioctl 400c620e 200000000100 returned -22 [ 1554.220911][T19569] netlink: 'syz.0.19727': attribute type 13 has an invalid length. [ 1554.266350][T19569] erspan0: refused to change device tx_queue_len [ 1554.755710][T19585] netlink: 'syz.0.19736': attribute type 21 has an invalid length. [ 1554.976454][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19738'. [ 1555.025753][T19597] netlink: 104 bytes leftover after parsing attributes in process `syz.8.19741'. [ 1555.685444][T17871] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1555.701219][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19757'. [ 1555.855688][T17871] usb 2-1: Using ep0 maxpacket: 32 [ 1555.868074][T17871] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1555.877718][T17871] usb 2-1: config 0 has no interface number 0 [ 1555.894480][T17871] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1555.907504][T17871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.927336][T17871] usb 2-1: Product: syz [ 1555.944429][T17871] usb 2-1: Manufacturer: syz [ 1555.956596][T17871] usb 2-1: SerialNumber: syz [ 1555.982726][T17871] usb 2-1: config 0 descriptor?? [ 1556.003011][T17871] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1556.209464][T17871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1556.222812][T17871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1556.630171][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1556.630649][T10461] usb 2-1: USB disconnect, device number 46 [ 1556.687471][T10461] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1556.768318][T10461] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1556.810040][T10461] quatech2 2-1:0.51: device disconnected [ 1557.845604][T19684] netlink: 40 bytes leftover after parsing attributes in process `syz.9.19779'. [ 1558.124791][T19697] wireguard: wg2: Could not create IPv4 socket [ 1558.915209][T10461] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1558.951094][T19743] netlink: 80 bytes leftover after parsing attributes in process `syz.8.19811'. [ 1559.085267][T10461] usb 10-1: Using ep0 maxpacket: 32 [ 1559.099647][T10461] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1559.111728][T10461] usb 10-1: config 0 has no interface number 0 [ 1559.139339][T10461] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1559.160436][T10461] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1559.180285][T10461] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.191597][T10461] usb 10-1: Product: syz [ 1559.196377][T10461] usb 10-1: Manufacturer: syz [ 1559.201193][T10461] usb 10-1: SerialNumber: syz [ 1559.212405][T10461] usb 10-1: config 0 descriptor?? [ 1559.231087][T19727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1559.468936][T19727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1560.257126][T19793] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.19835'. [ 1560.433498][T19802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19839'. [ 1560.461430][T19802] netlink: 59 bytes leftover after parsing attributes in process `syz.1.19839'. [ 1560.496006][T19802] netlink: 59 bytes leftover after parsing attributes in process `syz.1.19839'. [ 1560.716386][T17871] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1560.878553][T17871] usb 9-1: Using ep0 maxpacket: 8 [ 1560.902793][T17871] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1560.923176][T17871] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1560.944995][T17871] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1560.968358][T17871] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1560.982132][T17871] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1560.991600][T17871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.228066][T17871] usb 9-1: GET_CAPABILITIES returned 0 [ 1561.233668][T17871] usbtmc 9-1:16.0: can't read capabilities [ 1561.345314][T19843] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19859'. [ 1561.359227][T19843] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19859'. [ 1561.533869][T10461] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1561.560007][T10461] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1561.596013][T10461] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1561.621335][T10461] usb 10-1: USB disconnect, device number 38 [ 1562.590060][T19875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.649668][T19875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.863399][T19875] veth1_macvtap: left allmulticast mode [ 1563.145624][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.157308][T19903] tipc: New replicast peer: 0.0.0.0 [ 1563.173306][T19903] tipc: Enabled bearer , priority 10 [ 1563.193739][ T1162] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.213102][ T1162] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.240189][ T1162] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.464960][T25603] usb 9-1: USB disconnect, device number 66 [ 1565.021628][T19981] netlink: 64 bytes leftover after parsing attributes in process `syz.8.19926'. [ 1565.418523][T20002] netlink: 52 bytes leftover after parsing attributes in process `syz.8.19936'. [ 1567.427582][T20104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1567.482022][T20109] netlink: 260 bytes leftover after parsing attributes in process `syz.1.19987'. [ 1568.435079][T25604] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1568.595548][T25604] usb 10-1: Using ep0 maxpacket: 16 [ 1568.607060][T25604] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.631338][T25604] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1568.662541][T25604] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1568.677020][T25604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.689065][T25604] usb 10-1: config 0 descriptor?? [ 1568.703505][T25604] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1568.911677][T20139] netlink: 'syz.9.20000': attribute type 49 has an invalid length. [ 1568.996353][T25604] usb 10-1: USB disconnect, device number 39 [ 1569.629582][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1569.629601][ T30] audit: type=1326 audit(1763226713.651:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.705012][ T30] audit: type=1326 audit(1763226713.651:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.744283][ T30] audit: type=1326 audit(1763226713.651:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.818975][ T30] audit: type=1326 audit(1763226713.651:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.868852][ T30] audit: type=1326 audit(1763226713.651:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.903634][ T30] audit: type=1326 audit(1763226713.651:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.928986][ T30] audit: type=1326 audit(1763226713.651:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1569.953543][ T30] audit: type=1326 audit(1763226713.651:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1570.012765][ T30] audit: type=1326 audit(1763226713.651:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1570.043120][ T30] audit: type=1326 audit(1763226713.651:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20175 comm="syz.9.20018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f096f38f6c9 code=0x7ffc0000 [ 1570.901873][T20222] netlink: 136 bytes leftover after parsing attributes in process `syz.8.20038'. [ 1570.945797][T20222] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1572.490606][T20254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1575.182220][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20094'. [ 1575.881722][T20374] netlink: 156 bytes leftover after parsing attributes in process `syz.2.20110'. [ 1575.925320][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20110'. [ 1575.934414][T20374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20110'. [ 1576.524737][T20402] pim6reg1: entered promiscuous mode [ 1576.581289][T20402] pim6reg1: entered allmulticast mode [ 1576.693393][T20407] netlink: 'syz.1.20126': attribute type 16 has an invalid length. [ 1576.721433][T20407] netlink: 64114 bytes leftover after parsing attributes in process `syz.1.20126'. [ 1577.036626][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1577.036643][ T30] audit: type=1326 audit(1763226721.061:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.8.20133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x0 [ 1578.642517][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20168'. [ 1578.678255][T20492] tc_dump_action: action bad kind [ 1578.738046][T17860] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1578.767620][T17860] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1578.985446][T25622] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1579.146756][T25622] usb 10-1: config 0 has no interfaces? [ 1579.156497][T25622] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1579.182269][T25622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1579.205989][T25622] usb 10-1: SerialNumber: syz [ 1579.222629][T25622] usb 10-1: config 0 descriptor?? [ 1581.721979][T25622] usb 10-1: USB disconnect, device number 40 [ 1581.911818][T20574] binder: binder_mmap: 20573 2000004cd000-2000004ce000 bad vm_flags failed -1 [ 1581.969378][T20578] binder: 20577:20578 ioctl 4018620d 0 returned -22 [ 1582.295091][T20589] fuse: Bad value for 'group_id' [ 1582.300096][T20589] fuse: Bad value for 'group_id' [ 1582.656347][T20601] Invalid logical block size (34372) [ 1585.135225][T25604] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1585.515234][T25604] usb 10-1: Using ep0 maxpacket: 16 [ 1585.555614][T25604] usb 10-1: config 1 has an invalid interface number: 64 but max is 0 [ 1585.565413][T25604] usb 10-1: config 1 has no interface number 0 [ 1585.584934][T25604] usb 10-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 1585.630833][T25604] usb 10-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 1585.641485][T25604] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.693110][T25604] usb 10-1: Product: syz [ 1585.710454][T25604] usb 10-1: Manufacturer: syz [ 1585.729803][T25604] usb 10-1: SerialNumber: syz [ 1585.980380][T25604] option 10-1:1.64: GSM modem (1-port) converter detected [ 1586.066692][T25604] usb 10-1: USB disconnect, device number 41 [ 1586.109076][T25604] option 10-1:1.64: device disconnected [ 1586.498469][T20684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20249'. [ 1586.565189][T20684] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20249'. [ 1587.826350][T20734] binder: 20733:20734 ioctl c0306201 2000000001c0 returned -14 [ 1589.450427][T20806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.458297][T20806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.665842][T20817] netlink: 36 bytes leftover after parsing attributes in process `syz.8.20311'. [ 1590.383298][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20308'. [ 1590.419132][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.473376][ T61] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.510419][ T61] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.569146][ T61] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.779344][T20850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20327'. [ 1590.877902][T20852] tc_dump_action: action bad kind [ 1591.322493][T20871] pim6reg1: entered promiscuous mode [ 1591.349244][T20871] pim6reg1: entered allmulticast mode [ 1591.476181][T25603] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1591.647271][T25603] usb 9-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1591.695218][T25603] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1591.704356][T25603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.751823][T25603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.765677][T25603] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1591.798961][T25603] usb 9-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1591.834878][T25603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.878051][T25603] usb 9-1: config 0 descriptor?? [ 1591.930229][T20894] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1591.945327][T20894] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1592.213995][T20905] netlink: 96 bytes leftover after parsing attributes in process `syz.9.20354'. [ 1592.319540][T25603] input: HID 28bd:0909 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:0909.0034/input/input127 [ 1592.443612][T25603] uclogic 0003:28BD:0909.0034: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.8-1/input0 [ 1592.687877][T25603] usb 9-1: USB disconnect, device number 67 [ 1592.731879][T20914] fido_id[20914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1593.476349][T20948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20375'. [ 1593.887272][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20386'. [ 1593.995362][T25603] usb 9-1: new low-speed USB device number 68 using dummy_hcd [ 1594.197528][T23258] Bluetooth: hci4: command 0x0406 tx timeout [ 1594.198225][T25603] usb 9-1: config 16 has an invalid interface number: 175 but max is 0 [ 1594.222957][T25603] usb 9-1: config 16 has no interface number 0 [ 1594.246439][T25603] usb 9-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 1594.295289][T25603] usb 9-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 1594.315170][T25603] usb 9-1: config 16 interface 175 has no altsetting 0 [ 1594.328610][T25603] usb 9-1: string descriptor 0 read error: -22 [ 1594.335727][T25603] usb 9-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 1594.353380][T25603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.397412][T25603] usb 9-1: bad CDC descriptors [ 1594.616067][T25603] usb 9-1: USB disconnect, device number 68 [ 1594.781654][T21005] netlink: 260 bytes leftover after parsing attributes in process `syz.1.20402'. [ 1594.793263][T21005] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20402'. [ 1594.824962][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20402'. [ 1596.027153][T21056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20427'. [ 1596.878609][T21096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1597.509519][ T30] audit: type=1326 audit(1763226741.531:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21127 comm="syz.2.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1597.593586][ T30] audit: type=1326 audit(1763226741.531:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21127 comm="syz.2.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1597.684949][ T30] audit: type=1326 audit(1763226741.551:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21127 comm="syz.2.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1597.756231][ T30] audit: type=1326 audit(1763226741.551:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21127 comm="syz.2.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1598.482928][T21164] syzkaller0: entered promiscuous mode [ 1598.488670][T21164] syzkaller0: entered allmulticast mode [ 1604.100180][T21276] netlink: 'syz.1.20524': attribute type 7 has an invalid length. [ 1604.265035][T21276] netlink: 'syz.1.20524': attribute type 8 has an invalid length. [ 1604.406866][ T30] audit: type=1326 audit(1763226748.431:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1604.474504][ T30] audit: type=1326 audit(1763226748.431:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1604.553703][ T30] audit: type=1326 audit(1763226748.431:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1604.627768][ T30] audit: type=1326 audit(1763226748.431:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1604.693837][ T30] audit: type=1326 audit(1763226748.461:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1604.814326][ T30] audit: type=1326 audit(1763226748.461:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893618df10 code=0x7ffc0000 [ 1604.948203][ T30] audit: type=1326 audit(1763226748.461:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f2cb code=0x7ffc0000 [ 1605.026622][ T30] audit: type=1326 audit(1763226748.461:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f2cb code=0x7ffc0000 [ 1605.079355][ T30] audit: type=1326 audit(1763226748.461:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f2cb code=0x7ffc0000 [ 1605.102884][ T30] audit: type=1326 audit(1763226748.461:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.2.20529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f2cb code=0x7ffc0000 [ 1607.478331][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.485019][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.492175][T21362] syzkaller1: entered promiscuous mode [ 1607.541998][T21362] syzkaller1: entered allmulticast mode [ 1607.565783][T21368] netlink: 252 bytes leftover after parsing attributes in process `syz.2.20564'. [ 1609.745719][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1609.745737][ T30] audit: type=1326 audit(1763226753.771:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1609.853752][ T30] audit: type=1326 audit(1763226753.801:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1609.913246][ T30] audit: type=1326 audit(1763226753.811:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1609.942066][ T30] audit: type=1326 audit(1763226753.811:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.014962][ T30] audit: type=1326 audit(1763226753.811:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.115082][ T30] audit: type=1326 audit(1763226753.811:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.167916][ T30] audit: type=1326 audit(1763226753.811:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.225081][ T30] audit: type=1326 audit(1763226753.811:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.301636][ T30] audit: type=1326 audit(1763226753.811:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.361563][ T30] audit: type=1326 audit(1763226753.811:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21437 comm="syz.1.20599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1610.736660][T21478] syzkaller0: entered promiscuous mode [ 1610.742197][T21478] syzkaller0: entered allmulticast mode [ 1611.129973][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20628'. [ 1611.153818][T21500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20628'. [ 1612.149713][T21538] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1613.005163][T25603] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1613.176882][T25603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.200394][T25603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.232059][T25603] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1613.251503][T25603] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1613.270502][T25603] usb 2-1: Manufacturer: syz [ 1613.288347][T25603] usb 2-1: config 0 descriptor?? [ 1613.415318][T21581] netlink: 156 bytes leftover after parsing attributes in process `syz.2.20665'. [ 1613.424301][T21583] netlink: 388 bytes leftover after parsing attributes in process `syz.0.20666'. [ 1614.010141][T21603] netlink: 'syz.0.20676': attribute type 5 has an invalid length. [ 1614.127973][T25603] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input129 [ 1614.199758][T25603] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input130 [ 1614.229291][T25603] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input131 [ 1614.314722][T25603] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input132 [ 1614.442523][T25603] uclogic 0003:256C:006D.0035: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1615.013431][T25603] usb 2-1: USB disconnect, device number 47 [ 1615.825544][T21629] fuse: Bad value for 'group_id' [ 1615.830554][T21629] fuse: Bad value for 'group_id' [ 1620.065571][T25603] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1620.215494][T25603] usb 9-1: Using ep0 maxpacket: 8 [ 1620.230558][T25603] usb 9-1: config 135 has an invalid interface number: 230 but max is 0 [ 1620.255742][T21802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20763'. [ 1620.257636][T25603] usb 9-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.321620][T25603] usb 9-1: config 135 has no interface number 0 [ 1620.347740][T25603] usb 9-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1620.379720][T25603] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1620.393069][T25603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.407174][T25603] usb 9-1: Product: syz [ 1620.415904][T25603] usb 9-1: Manufacturer: syz [ 1620.423045][T25603] usb 9-1: SerialNumber: syz [ 1620.446829][T25603] uvcvideo 9-1:135.230: Found Unit with invalid ID 0 [ 1620.464095][T25603] uvcvideo 9-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 1620.483463][T25603] uvcvideo 9-1:135.230: No valid video chain found. [ 1620.671064][T25603] usb 9-1: USB disconnect, device number 69 [ 1621.536936][T25603] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1621.708918][T25603] usb 10-1: Using ep0 maxpacket: 16 [ 1621.727737][T25603] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.749885][T25603] usb 10-1: config 0 has no interfaces? [ 1621.768111][T25603] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1621.783045][T25603] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.793196][T25603] usb 10-1: Product: syz [ 1621.801521][T25603] usb 10-1: Manufacturer: syz [ 1621.811652][T25603] usb 10-1: SerialNumber: syz [ 1621.827747][T25603] usb 10-1: config 0 descriptor?? [ 1622.068177][T25603] usb 10-1: USB disconnect, device number 42 [ 1622.262160][T21882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20802'. [ 1623.162278][T21917] netlink: 'syz.9.20818': attribute type 16 has an invalid length. [ 1623.170366][T21917] netlink: 64122 bytes leftover after parsing attributes in process `syz.9.20818'. [ 1623.853426][T21945] usb usb8: usbfs: process 21945 (syz.8.20832) did not claim interface 0 before use [ 1623.990954][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1623.990974][ T30] audit: type=1326 audit(1763226768.011:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21950 comm="syz.1.20835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x0 [ 1624.930469][T21990] veth0_to_team: entered promiscuous mode [ 1624.955131][T21990] veth0_to_team: entered allmulticast mode [ 1625.783063][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20871'. [ 1625.979410][T22033] x_tables: unsorted underflow at hook 1 [ 1626.645405][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20886'. [ 1626.954952][T17860] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1627.117480][T17860] usb 10-1: config 0 has an invalid interface number: 231 but max is 0 [ 1627.127317][T17860] usb 10-1: config 0 has no interface number 0 [ 1627.133557][T17860] usb 10-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1627.177656][T17860] usb 10-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1627.196686][T17860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.205300][T17860] usb 10-1: Product: syz [ 1627.209600][T17860] usb 10-1: Manufacturer: syz [ 1627.214311][T17860] usb 10-1: SerialNumber: syz [ 1627.238944][T17860] usb 10-1: config 0 descriptor?? [ 1627.251403][T22062] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1627.284320][T17860] plusb 10-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.9-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, a6:fd:66:a3:a6:c5 [ 1627.501150][T17860] usb 10-1: USB disconnect, device number 43 [ 1627.512086][T17860] plusb 10-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.9-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1627.884196][ T30] audit: type=1326 audit(1763226771.901:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.2.20907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1627.950255][ T30] audit: type=1326 audit(1763226771.931:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.2.20907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1628.008748][ T30] audit: type=1326 audit(1763226771.931:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.2.20907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1628.139847][T22118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20911'. [ 1628.560226][T22138] batadv_slave_1: entered promiscuous mode [ 1628.604018][T22136] batadv_slave_1: left promiscuous mode [ 1629.505489][T22186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20937'. [ 1629.825436][ T30] audit: type=1326 audit(1763226773.831:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22200 comm="syz.1.20944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x0 [ 1631.152325][T22223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1632.455205][ T30] audit: type=1326 audit(1763226776.471:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1632.788297][ T30] audit: type=1326 audit(1763226776.471:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1632.811640][ T30] audit: type=1326 audit(1763226776.471:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1632.872729][ T30] audit: type=1326 audit(1763226776.471:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1632.946032][ T30] audit: type=1326 audit(1763226776.471:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1633.055701][ T30] audit: type=1326 audit(1763226776.471:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1633.109066][ T30] audit: type=1326 audit(1763226776.471:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1633.215305][ T30] audit: type=1326 audit(1763226776.481:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1633.275158][ T30] audit: type=1326 audit(1763226776.481:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.8.20965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7fc00000 [ 1634.073149][T10461] hid-generic 00AB:0804:0005.0036: unknown main item tag 0x7 [ 1634.081439][T10461] hid-generic 00AB:0804:0005.0036: item fetching failed at offset 2/4 [ 1634.113104][T10461] hid-generic 00AB:0804:0005.0036: probe with driver hid-generic failed with error -22 [ 1635.330866][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1635.330881][ T30] audit: type=1326 audit(1763226779.351:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22370 comm="syz.2.21020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x0 [ 1638.290163][ T30] audit: type=1800 audit(1763226782.311:4061): pid=22411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.21038" name="bus" dev="ramfs" ino=273978 res=0 errno=0 [ 1638.692117][T22440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21049'. [ 1639.178417][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21053'. [ 1639.439148][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21053'. [ 1639.618400][T22450] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1639.733664][T22451] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 1639.871545][T22451] bond3 (unregistering): Released all slaves [ 1640.325704][T22482] netlink: 'syz.9.21069': attribute type 64 has an invalid length. [ 1640.343973][T22482] netlink: 5 bytes leftover after parsing attributes in process `syz.9.21069'. [ 1642.662369][T22573] netlink: 'syz.0.21106': attribute type 64 has an invalid length. [ 1642.691653][T22573] netlink: 5 bytes leftover after parsing attributes in process `syz.0.21106'. [ 1642.714198][T22573] gretap0: entered allmulticast mode [ 1642.753997][T22573] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1644.291122][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21131'. [ 1650.023105][T22768] netlink: 76 bytes leftover after parsing attributes in process `syz.0.21194'. [ 1650.124033][T22770] tipc: Enabling of bearer rejected, failed to enable media [ 1650.150324][T22773] fuse: Bad value for 'user_id' [ 1650.155291][T22773] fuse: Bad value for 'user_id' [ 1650.974935][ T30] audit: type=1326 audit(1763226794.991:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22800 comm="syz.8.21209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1651.029508][ T30] audit: type=1326 audit(1763226794.991:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22800 comm="syz.8.21209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1651.053226][ T30] audit: type=1326 audit(1763226794.991:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22800 comm="syz.8.21209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1651.138843][ T30] audit: type=1326 audit(1763226794.991:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22800 comm="syz.8.21209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1651.167462][ T30] audit: type=1326 audit(1763226794.991:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22800 comm="syz.8.21209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x7ffc0000 [ 1651.258170][ T30] audit: type=1326 audit(1763226795.281:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.8.21214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3faf8f6c9 code=0x0 [ 1652.652552][T22878] netlink: 76 bytes leftover after parsing attributes in process `syz.2.21247'. [ 1652.859918][T22887] netlink: 'syz.0.21250': attribute type 15 has an invalid length. [ 1652.881710][T22887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21250'. [ 1653.044920][T17860] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1653.217598][T17860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.235374][T17860] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1653.244565][T17860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.292237][T17860] usb 10-1: config 0 descriptor?? [ 1653.537738][T17860] usbhid 10-1:0.0: can't add hid device: -71 [ 1653.552521][T17860] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1653.584447][T17860] usb 10-1: USB disconnect, device number 44 [ 1653.647607][ T30] audit: type=1326 audit(1763226797.661:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.0.21271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x0 [ 1654.025434][T17860] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1654.185110][T17860] usb 10-1: Using ep0 maxpacket: 32 [ 1654.198430][T17860] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.210274][T17860] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1654.220307][T17860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.237523][T17860] usb 10-1: config 0 descriptor?? [ 1654.259936][T17860] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1654.289561][T17860] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1655.128891][T25603] usb 10-1: USB disconnect, device number 45 [ 1655.149770][T25603] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1655.703977][ T30] audit: type=1326 audit(1763226799.721:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.2.21294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1655.757936][ T30] audit: type=1326 audit(1763226799.751:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22981 comm="syz.2.21294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1657.141616][T23023] netlink: 20 bytes leftover after parsing attributes in process `syz.9.21311'. [ 1658.312791][T23083] netlink: 52 bytes leftover after parsing attributes in process `syz.8.21337'. [ 1658.553705][T23093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1663.093063][T23221] netlink: 104 bytes leftover after parsing attributes in process `syz.8.21400'. [ 1664.153640][ T30] audit: type=1326 audit(1763226808.161:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.229987][ T30] audit: type=1326 audit(1763226808.161:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.653682][ T30] audit: type=1326 audit(1763226808.661:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.717556][ T30] audit: type=1326 audit(1763226808.661:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.744717][ T30] audit: type=1326 audit(1763226808.731:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.835709][ T30] audit: type=1326 audit(1763226808.731:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.909662][ T30] audit: type=1326 audit(1763226808.731:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893618f6c9 code=0x7ffc0000 [ 1664.946741][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1664.960026][T23270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1664.975445][T23270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1665.006184][ T30] audit: type=1326 audit(1763226808.731:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893618df10 code=0x7ffc0000 [ 1665.050752][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1665.060204][ T1162] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.076454][ T1162] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.086007][ T30] audit: type=1326 audit(1763226808.731:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f2cb code=0x7ffc0000 [ 1665.113228][T23270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1665.116282][ T1162] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.148419][ T1162] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.157980][ T30] audit: type=1326 audit(1763226808.731:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23242 comm="syz.2.21410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893618f2cb code=0x7ffc0000 [ 1665.168968][T23270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1667.630961][T23362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21464'. [ 1668.559504][T23362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.688605][T23362] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1668.787240][T23362] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1668.823524][T23362] bond0 (unregistering): Released all slaves [ 1668.923853][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.945251][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.656695][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21501'. [ 1675.548902][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1675.548920][ T30] audit: type=1326 audit(1763226819.571:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.618270][ T30] audit: type=1326 audit(1763226819.571:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.673284][ T30] audit: type=1326 audit(1763226819.571:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.731840][ T30] audit: type=1326 audit(1763226819.571:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.795992][ T30] audit: type=1326 audit(1763226819.571:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.833716][ T30] audit: type=1326 audit(1763226819.571:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.860699][ T30] audit: type=1326 audit(1763226819.571:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.917158][ T30] audit: type=1326 audit(1763226819.571:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.943139][ T30] audit: type=1326 audit(1763226819.571:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1675.972928][ T30] audit: type=1326 audit(1763226819.571:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.0.21569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1676.616305][T23642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21593'. [ 1676.828998][T23651] binder: 23648:23651 ioctl c0306201 200000000940 returned -22 [ 1677.770697][T23656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1679.074936][T26701] Bluetooth: hci4: command 0x0406 tx timeout [ 1679.505374][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21642'. [ 1679.650139][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21647'. [ 1679.894067][T23767] fuse: Invalid rootmode [ 1680.438418][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21666'. [ 1680.511285][T23800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21665'. [ 1680.702625][T23813] lo: Caught tx_queue_len zero misconfig [ 1681.498067][T23835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21682'. [ 1681.913561][T23845] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1681.920146][T23845] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1681.935258][T23845] vhci_hcd vhci_hcd.0: Device attached [ 1681.949917][T23846] usbip_core: unknown command [ 1681.954662][T23846] vhci_hcd: unknown pdu 0 [ 1681.961457][T23846] usbip_core: unknown command [ 1681.976119][ T50] vhci_hcd: stop threads [ 1681.985095][ T50] vhci_hcd: release socket [ 1681.989562][ T50] vhci_hcd: disconnect device [ 1682.129373][T23853] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21691'. [ 1682.233128][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1682.233932][ T30] audit: type=1326 audit(1763226826.251:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.303263][ T30] audit: type=1326 audit(1763226826.251:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.362020][ T30] audit: type=1326 audit(1763226826.251:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.385737][ T30] audit: type=1326 audit(1763226826.251:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.410285][ T30] audit: type=1326 audit(1763226826.251:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.432996][ T30] audit: type=1326 audit(1763226826.291:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.456386][ T30] audit: type=1326 audit(1763226826.321:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.480447][ T30] audit: type=1326 audit(1763226826.321:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1682.520976][ T30] audit: type=1326 audit(1763226826.321:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23863 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdebb3c1f85 code=0x7ffc0000 [ 1682.563539][ T30] audit: type=1326 audit(1763226826.321:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23860 comm="syz.0.21694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fdebb38f6c9 code=0x7ffc0000 [ 1685.925683][T23989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21763'. [ 1687.958544][T25604] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1688.126843][T25604] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1688.144408][T25604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 235, setting to 64 [ 1688.166290][T25604] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1688.194913][T25604] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1688.214523][T25604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.235847][T25604] usb 2-1: config 0 descriptor?? [ 1688.251737][T25604] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1688.476793][T17860] usb 2-1: USB disconnect, device number 48 [ 1689.796168][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21818'. [ 1690.555168][T25604] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1690.735080][T25604] usb 9-1: Using ep0 maxpacket: 32 [ 1690.805260][T25604] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1690.864488][T25604] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1690.922116][T25604] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1690.934145][T25604] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1690.953269][T25604] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1690.965511][T25604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.973627][T25604] usb 9-1: Product: syz [ 1691.015146][T25604] usb 9-1: Manufacturer: syz [ 1691.021962][T25604] usb 9-1: SerialNumber: syz [ 1691.384180][T24180] syzkaller0: entered promiscuous mode [ 1691.392081][T24180] syzkaller0: entered allmulticast mode [ 1691.435985][T25604] usb 9-1: 0:2 : does not exist [ 1691.484061][T25604] usb 9-1: USB disconnect, device number 70 [ 1691.549487][T21644] udevd[21644]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1693.258938][T24232] netlink: 'syz.2.21867': attribute type 16 has an invalid length. [ 1693.274839][T24232] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.21867'. [ 1693.596892][T24245] team_slave_0: Caught tx_queue_len zero misconfig [ 1693.830416][T24259] netlink: 348 bytes leftover after parsing attributes in process `syz.0.21880'. [ 1693.851661][T24259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21880'. [ 1696.079608][T24332] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1698.401293][T24433] fuse: Bad value for 'fd' [ 1699.903037][T24482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21979'. [ 1700.617657][T24507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21990'. [ 1701.464937][T25604] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1701.685207][T25604] usb 2-1: Using ep0 maxpacket: 8 [ 1701.694129][T25604] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1701.703363][T25604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.711565][T25604] usb 2-1: Product: syz [ 1701.716212][T25604] usb 2-1: Manufacturer: syz [ 1701.720842][T25604] usb 2-1: SerialNumber: syz [ 1701.728626][T25604] usb 2-1: config 0 descriptor?? [ 1701.744292][T25604] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1701.960892][T24525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.974466][T24525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.255401][T25604] gspca_sonixj: reg_w1 err -110 [ 1702.260531][T25604] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1702.351402][T25604] usb 2-1: USB disconnect, device number 49 [ 1703.441504][T24607] netlink: 'syz.1.22039': attribute type 4 has an invalid length. [ 1703.450407][T24607] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.22039'. [ 1706.897746][T17860] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1707.079131][T17860] usb 2-1: Using ep0 maxpacket: 32 [ 1707.090210][T17860] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1707.101439][T17860] usb 2-1: config 0 has no interface number 0 [ 1707.108884][T17860] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1707.124626][T17860] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1707.135677][T17860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.145930][T17860] usb 2-1: Product: syz [ 1707.150132][T17860] usb 2-1: Manufacturer: syz [ 1707.154885][T17860] usb 2-1: SerialNumber: syz [ 1707.162467][T17860] usb 2-1: config 0 descriptor?? [ 1707.168726][T24750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1707.392298][T24750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1707.657821][T24793] netlink: 32 bytes leftover after parsing attributes in process `syz.8.22128'. [ 1707.878353][T10461] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1708.050351][T10461] usb 10-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1708.063156][T10461] usb 10-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 1708.073793][T10461] usb 10-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 1708.084176][T10461] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1708.126106][T10461] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1708.136379][T10461] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.145266][T10461] usb 10-1: Product: syz [ 1708.160909][T10461] usb 10-1: Manufacturer: syz [ 1708.165923][T10461] usb 10-1: SerialNumber: syz [ 1708.174172][T10461] usb 10-1: config 0 descriptor?? [ 1708.193392][T10461] ir_toy 10-1:0.0: required endpoints not found [ 1709.582919][T24840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.22149'. [ 1709.631256][T17860] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1709.658703][T17860] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1709.695260][T17860] usb 2-1: USB disconnect, device number 50 [ 1710.751309][T25604] usb 10-1: USB disconnect, device number 46 [ 1710.890144][T24885] mac80211_hwsim hwsim31 wlan1: Caught tx_queue_len zero misconfig [ 1712.569464][T24964] fuse: Unknown parameter '0x0000000000000005' [ 1713.065423][T24985] fuse: Bad value for 'group_id' [ 1713.070883][T24985] fuse: Bad value for 'group_id' [ 1713.631223][T24998] xt_CT: No such helper "pptp" [ 1716.405081][T25091] trusted_key: encrypted_key: insufficient parameters specified [ 1719.770077][T25195] netlink: 'syz.2.22310': attribute type 64 has an invalid length. [ 1719.778203][T25195] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22310'. [ 1719.788527][T25195] gretap0: left promiscuous mode [ 1719.793494][T25195] gretap0: entered allmulticast mode [ 1719.850493][T25199] netlink: 'syz.2.22311': attribute type 12 has an invalid length. [ 1719.947446][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22312'. [ 1721.335263][T25252] bond0: Caught tx_queue_len zero misconfig [ 1721.791777][T25273] binder: 25272:25273 ioctl 4018620d 0 returned -22 [ 1722.265301][T25602] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1722.436022][T25602] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1722.446399][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.455934][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.468766][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.486797][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.498370][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.509639][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.518169][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.527598][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.538586][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.546600][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.558145][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.569133][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.582122][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.604969][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.622508][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.630388][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.645199][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.671945][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.683265][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.693057][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.704487][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.715828][T25602] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.727218][T25602] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1722.739403][T25602] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.760009][T25602] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1722.774874][T25602] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1722.783261][T25602] usb 9-1: Product: syz [ 1722.805059][T25602] usb 9-1: Manufacturer: syz [ 1722.809805][T25602] usb 9-1: SerialNumber: syz [ 1722.828023][T25602] usb 9-1: config 0 descriptor?? [ 1722.852953][T25602] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1723.084480][T10461] usb 9-1: USB disconnect, device number 71 [ 1723.093757][T10461] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1723.205549][T25329] binder: 25328:25329 ioctl c0306201 200000000100 returned -14 [ 1723.370938][T25336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.22375'. [ 1723.899959][T25363] fuse: Bad value for 'group_id' [ 1723.905163][T25363] fuse: Bad value for 'group_id' [ 1725.263760][T25435] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22422'. [ 1726.837099][T25602] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1726.995589][T25602] usb 2-1: Using ep0 maxpacket: 8 [ 1727.003194][T25602] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 1727.012080][T25602] usb 2-1: config 0 has no interface number 0 [ 1727.018802][T25602] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1727.031085][T25602] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1727.043285][T25602] usb 2-1: config 0 interface 200 has no altsetting 0 [ 1727.053808][T25602] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1727.066875][T25602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.075293][T25602] usb 2-1: Product: syz [ 1727.104195][T25602] usb 2-1: Manufacturer: syz [ 1727.109104][T25602] usb 2-1: SerialNumber: syz [ 1727.130356][T25602] usb 2-1: config 0 descriptor?? [ 1727.354279][T25602] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input134 [ 1727.389426][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 1727.391063][T25602] usb 2-1: USB disconnect, device number 51 [ 1727.396631][ C0] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19 [ 1727.927937][T25521] syzkaller0: entered promiscuous mode [ 1727.933563][T25521] syzkaller0: entered allmulticast mode [ 1728.035439][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22464'. [ 1728.609823][T25558] trusted_key: encrypted_key: insufficient parameters specified [ 1728.762759][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22480'. [ 1728.777710][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22480'. [ 1728.805121][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22480'. [ 1729.287527][T25593] fuse: Bad value for 'fd' [ 1729.711725][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22504'. [ 1729.958027][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1729.958047][ T30] audit: type=1326 audit(1763226873.981:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.22509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1730.042067][ T30] audit: type=1326 audit(1763226873.981:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.22509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1730.082556][ T30] audit: type=1326 audit(1763226873.981:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.22509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1730.136704][ T30] audit: type=1326 audit(1763226873.981:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.22509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1730.188235][T25640] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1730.200846][ T30] audit: type=1326 audit(1763226873.981:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.22509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1730.224574][T25640] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 1730.239610][T25640] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 1730.376639][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.383122][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.621599][T25667] x_tables: duplicate underflow at hook 1 [ 1732.755374][T17860] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1732.887527][T25757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22562'. [ 1732.958792][T17860] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1732.971696][T17860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1732.983564][T17860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1733.022666][T17860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1733.046825][T17860] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1733.068855][T17860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.097187][T17860] usb 2-1: config 0 descriptor?? [ 1733.556213][T17860] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1733.851213][T25788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22577'. [ 1733.922590][T17860] usb 2-1: USB disconnect, device number 52 [ 1734.255207][T25797] input: syz1 as /devices/virtual/input/input137 [ 1734.944592][T25818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22590'. [ 1735.161065][T25830] netlink: 'syz.0.22596': attribute type 4 has an invalid length. [ 1735.282827][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22598'. [ 1735.292449][T25836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22598'. [ 1735.379631][ T9273] tipc: Subscription rejected, illegal request [ 1735.513118][T25844] usb usb7: usbfs: process 25844 (syz.0.22604) did not claim interface 0 before use [ 1736.040060][T25864] netlink: 'syz.8.22612': attribute type 1 has an invalid length. [ 1736.054019][T25864] netlink: 1 bytes leftover after parsing attributes in process `syz.8.22612'. [ 1736.245157][T10461] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1736.405211][T10461] usb 2-1: Using ep0 maxpacket: 8 [ 1736.440354][T10461] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1736.462570][T10461] usb 2-1: config 0 has no interface number 0 [ 1736.502705][T10461] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1736.598139][T10461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.616843][T10461] usb 2-1: config 0 descriptor?? [ 1736.736009][T10461] viperboard 2-1:0.143: version 0.00 found at bus 002 address 053 [ 1736.854827][T10461] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1736.868620][T10461] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1737.046738][T25888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22620'. [ 1737.168346][T25888] bridge_slave_1: left allmulticast mode [ 1737.187836][T25888] bridge_slave_1: left promiscuous mode [ 1737.193709][T25888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.348841][T25888] bridge_slave_0: left allmulticast mode [ 1737.355276][T25888] bridge_slave_0: left promiscuous mode [ 1737.362924][T25888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.492834][T25905] pim6reg1: entered promiscuous mode [ 1738.498360][T25905] pim6reg1: entered allmulticast mode [ 1739.556360][T25602] usb 2-1: USB disconnect, device number 53 [ 1740.473582][T25971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22659'. [ 1740.956700][T25602] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1740.964800][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1741.095614][T25602] usb 10-1: device descriptor read/64, error -32 [ 1741.335419][T25602] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1741.497056][T25602] usb 10-1: Using ep0 maxpacket: 16 [ 1741.517777][T25602] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1741.526116][T25602] usb 10-1: config 0 has no interface number 0 [ 1741.575335][T25602] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1741.584710][T25602] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.592946][T25602] usb 10-1: Product: syz [ 1741.607020][T25602] usb 10-1: Manufacturer: syz [ 1741.611948][T25602] usb 10-1: SerialNumber: syz [ 1741.637996][T25602] usb 10-1: config 0 descriptor?? [ 1741.666943][T25602] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1741.699037][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22673'. [ 1742.618712][T26047] netlink: 37 bytes leftover after parsing attributes in process `syz.0.22692'. [ 1743.853734][T26091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1745.011705][T25604] usb 10-1: USB disconnect, device number 48 [ 1745.720071][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22742'. [ 1746.308332][T26156] team0 (unregistering): Port device team_slave_0 removed [ 1746.327174][T26156] team0 (unregistering): Port device team_slave_1 removed [ 1746.354196][T26170] mac80211_hwsim hwsim30 syzkaller0: Caught tx_queue_len zero misconfig [ 1746.540728][T26179] netlink: 664 bytes leftover after parsing attributes in process `syz.2.22750'. [ 1746.590054][T26184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22752'. [ 1746.788329][T26197] netlink: 'syz.1.22759': attribute type 7 has an invalid length. [ 1747.234189][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22770'. [ 1748.174309][T26266] syz.2.22792 (26266) used obsolete PPPIOCDETACH ioctl [ 1748.878271][ T30] audit: type=1326 audit(1763226892.881:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26272 comm="syz.1.22795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1748.929987][T26288] netlink: 248 bytes leftover after parsing attributes in process `syz.0.22803'. [ 1748.963834][ T30] audit: type=1326 audit(1763226892.881:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26272 comm="syz.1.22795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1749.037255][ T30] audit: type=1326 audit(1763226892.881:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26272 comm="syz.1.22795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1749.068477][ T30] audit: type=1326 audit(1763226892.881:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26272 comm="syz.1.22795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb52018f6c9 code=0x7ffc0000 [ 1749.094292][T26289] [ 1749.096678][T26289] ===================================================== [ 1749.103609][T26289] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1749.111067][T26289] syzkaller #0 Not tainted [ 1749.115483][T26289] ----------------------------------------------------- [ 1749.122419][T26289] syz.2.22799/26289 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1749.130230][T26289] ffff888077c4af30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1749.138945][T26289] [ 1749.138945][T26289] and this task is already holding: [ 1749.146400][T26289] ffff888058cb9468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1749.154966][T26289] which would create a new lock dependency: [ 1749.160856][T26289] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1749.168537][T26289] [ 1749.168537][T26289] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1749.178071][T26289] (kbd_event_lock){..-.}-{3:3} [ 1749.178095][T26289] [ 1749.178095][T26289] ... which became SOFTIRQ-irq-safe at: [ 1749.190643][T26289] lock_acquire+0x120/0x360 [ 1749.195239][T26289] _raw_spin_lock+0x2e/0x40 [ 1749.199862][T26289] kbd_event+0xd2/0x3f70 [ 1749.204208][T26289] input_handle_events_default+0xd4/0x1a0 [ 1749.210023][T26289] input_pass_values+0x288/0x890 [ 1749.215065][T26289] input_event_dispose+0x3e5/0x6b0 [ 1749.220274][T26289] input_event+0x89/0xe0 [ 1749.224598][T26289] hidinput_hid_event+0x145e/0x1dd0 [ 1749.229896][T26289] hid_process_event+0x4be/0x620 [ 1749.234930][T26289] hid_report_raw_event+0xe91/0x16d0 [ 1749.240317][T26289] hid_input_report+0x43e/0x520 [ 1749.245351][T26289] hid_irq_in+0x47e/0x6d0 [ 1749.249779][T26289] __usb_hcd_giveback_urb+0x376/0x540 [ 1749.255258][T26289] dummy_timer+0x85f/0x44c0 [ 1749.259863][T26289] __hrtimer_run_queues+0x52c/0xc60 [ 1749.265157][T26289] hrtimer_run_softirq+0x187/0x2b0 [ 1749.270364][T26289] handle_softirqs+0x286/0x870 [ 1749.275214][T26289] __irq_exit_rcu+0xca/0x1f0 [ 1749.279901][T26289] irq_exit_rcu+0x9/0x30 [ 1749.284236][T26289] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1749.290051][T26289] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1749.296119][T26289] folios_put_refs+0x261/0x670 [ 1749.300982][T26289] free_pages_and_swap_cache+0x277/0x520 [ 1749.306705][T26289] tlb_flush_mmu+0x3a0/0x680 [ 1749.311383][T26289] unmap_page_range+0x3b37/0x4370 [ 1749.316494][T26289] unmap_vmas+0x399/0x580 [ 1749.320915][T26289] exit_mmap+0x240/0xb40 [ 1749.325255][T26289] __mmput+0x118/0x430 [ 1749.329412][T26289] exit_mm+0x1da/0x2c0 [ 1749.333577][T26289] do_exit+0x648/0x2300 [ 1749.337829][T26289] do_group_exit+0x21c/0x2d0 [ 1749.342516][T26289] get_signal+0x1285/0x1340 [ 1749.347112][T26289] arch_do_signal_or_restart+0xa0/0x790 [ 1749.352765][T26289] exit_to_user_mode_loop+0x72/0x130 [ 1749.358257][T26289] do_syscall_64+0x2bd/0xfa0 [ 1749.362976][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.368961][T26289] [ 1749.368961][T26289] to a SOFTIRQ-irq-unsafe lock: [ 1749.375987][T26289] (tasklist_lock){.+.+}-{3:3} [ 1749.376018][T26289] [ 1749.376018][T26289] ... which became SOFTIRQ-irq-unsafe at: [ 1749.388646][T26289] ... [ 1749.388656][T26289] lock_acquire+0x120/0x360 [ 1749.395907][T26289] _raw_read_lock+0x36/0x50 [ 1749.400510][T26289] __do_wait+0xde/0x740 [ 1749.404762][T26289] do_wait+0x1f8/0x510 [ 1749.408936][T26289] kernel_wait+0xab/0x170 [ 1749.413364][T26289] call_usermodehelper_exec_work+0xbe/0x230 [ 1749.419349][T26289] process_scheduled_works+0xae1/0x17b0 [ 1749.424987][T26289] worker_thread+0x8a0/0xda0 [ 1749.429664][T26289] kthread+0x711/0x8a0 [ 1749.433831][T26289] ret_from_fork+0x4bc/0x870 [ 1749.438605][T26289] ret_from_fork_asm+0x1a/0x30 [ 1749.443473][T26289] [ 1749.443473][T26289] other info that might help us debug this: [ 1749.443473][T26289] [ 1749.453710][T26289] Chain exists of: [ 1749.453710][T26289] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1749.453710][T26289] [ 1749.466517][T26289] Possible interrupt unsafe locking scenario: [ 1749.466517][T26289] [ 1749.474877][T26289] CPU0 CPU1 [ 1749.480270][T26289] ---- ---- [ 1749.485654][T26289] lock(tasklist_lock); [ 1749.489935][T26289] local_irq_disable(); [ 1749.496700][T26289] lock(kbd_event_lock); [ 1749.503567][T26289] lock(&tty->flow.lock); [ 1749.510517][T26289] [ 1749.513977][T26289] lock(kbd_event_lock); [ 1749.518488][T26289] [ 1749.518488][T26289] *** DEADLOCK *** [ 1749.518488][T26289] [ 1749.526653][T26289] 6 locks held by syz.2.22799/26289: [ 1749.532057][T26289] #0: ffff888058cb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1749.541838][T26289] #1: ffff888058cb92e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 1749.552307][T26289] #2: ffff888058cb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1749.561640][T26289] #3: ffff888058cb9468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1749.570630][T26289] #4: ffff888058cb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1749.580046][T26289] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1749.589110][T26289] [ 1749.589110][T26289] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1749.599513][T26289] -> (kbd_event_lock){..-.}-{3:3} { [ 1749.604826][T26289] IN-SOFTIRQ-W at: [ 1749.608896][T26289] lock_acquire+0x120/0x360 [ 1749.615257][T26289] _raw_spin_lock+0x2e/0x40 [ 1749.621588][T26289] kbd_event+0xd2/0x3f70 [ 1749.627664][T26289] input_handle_events_default+0xd4/0x1a0 [ 1749.635217][T26289] input_pass_values+0x288/0x890 [ 1749.641986][T26289] input_event_dispose+0x3e5/0x6b0 [ 1749.648954][T26289] input_event+0x89/0xe0 [ 1749.655029][T26289] hidinput_hid_event+0x145e/0x1dd0 [ 1749.662071][T26289] hid_process_event+0x4be/0x620 [ 1749.668845][T26289] hid_report_raw_event+0xe91/0x16d0 [ 1749.675989][T26289] hid_input_report+0x43e/0x520 [ 1749.682671][T26289] hid_irq_in+0x47e/0x6d0 [ 1749.688829][T26289] __usb_hcd_giveback_urb+0x376/0x540 [ 1749.696037][T26289] dummy_timer+0x85f/0x44c0 [ 1749.702383][T26289] __hrtimer_run_queues+0x52c/0xc60 [ 1749.709425][T26289] hrtimer_run_softirq+0x187/0x2b0 [ 1749.716395][T26289] handle_softirqs+0x286/0x870 [ 1749.722990][T26289] __irq_exit_rcu+0xca/0x1f0 [ 1749.729405][T26289] irq_exit_rcu+0x9/0x30 [ 1749.735474][T26289] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1749.742949][T26289] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1749.750755][T26289] folios_put_refs+0x261/0x670 [ 1749.757386][T26289] free_pages_and_swap_cache+0x277/0x520 [ 1749.764850][T26289] tlb_flush_mmu+0x3a0/0x680 [ 1749.771264][T26289] unmap_page_range+0x3b37/0x4370 [ 1749.778110][T26289] unmap_vmas+0x399/0x580 [ 1749.784260][T26289] exit_mmap+0x240/0xb40 [ 1749.790332][T26289] __mmput+0x118/0x430 [ 1749.796229][T26289] exit_mm+0x1da/0x2c0 [ 1749.802127][T26289] do_exit+0x648/0x2300 [ 1749.808109][T26289] do_group_exit+0x21c/0x2d0 [ 1749.814524][T26289] get_signal+0x1285/0x1340 [ 1749.820947][T26289] arch_do_signal_or_restart+0xa0/0x790 [ 1749.828374][T26289] exit_to_user_mode_loop+0x72/0x130 [ 1749.835487][T26289] do_syscall_64+0x2bd/0xfa0 [ 1749.841914][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.849632][T26289] INITIAL USE at: [ 1749.853621][T26289] lock_acquire+0x120/0x360 [ 1749.859878][T26289] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1749.866819][T26289] vt_reset_unicode+0x2b/0x160 [ 1749.873335][T26289] reset_vc+0x68/0x1b0 [ 1749.879147][T26289] vc_init+0x70/0x4a0 [ 1749.884877][T26289] con_init+0x385/0x9c0 [ 1749.890779][T26289] console_init+0x10e/0x430 [ 1749.897025][T26289] start_kernel+0x254/0x410 [ 1749.903263][T26289] x86_64_start_reservations+0x24/0x30 [ 1749.910466][T26289] x86_64_start_kernel+0x143/0x1c0 [ 1749.917323][T26289] common_startup_64+0x13e/0x147 [ 1749.924003][T26289] } [ 1749.926583][T26289] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1749.934478][T26289] -> (&tty->flow.lock){....}-{3:3} { [ 1749.939787][T26289] INITIAL USE at: [ 1749.943687][T26289] lock_acquire+0x120/0x360 [ 1749.949754][T26289] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1749.956543][T26289] start_tty+0x20/0x70 [ 1749.962185][T26289] n_tty_set_termios+0xa7c/0x1090 [ 1749.968780][T26289] tty_set_termios+0xda4/0x17e0 [ 1749.975200][T26289] set_termios+0x516/0x6c0 [ 1749.981189][T26289] tty_mode_ioctl+0x47e/0x740 [ 1749.987429][T26289] tty_ioctl+0x9c6/0xde0 [ 1749.993333][T26289] __se_sys_ioctl+0xfc/0x170 [ 1749.999494][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.005580][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.013039][T26289] } [ 1750.015535][T26289] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1750.024231][T26289] ... acquired at: [ 1750.028032][T26289] lock_acquire+0x120/0x360 [ 1750.032711][T26289] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1750.038095][T26289] stop_tty+0x2f/0x150 [ 1750.042344][T26289] kbd_event+0x2b72/0x3f70 [ 1750.046943][T26289] input_handle_events_default+0xd4/0x1a0 [ 1750.052842][T26289] input_pass_values+0x288/0x890 [ 1750.057958][T26289] input_event_dispose+0x330/0x6b0 [ 1750.063256][T26289] input_inject_event+0x1dd/0x340 [ 1750.068451][T26289] evdev_write+0x2fc/0x480 [ 1750.073049][T26289] vfs_write+0x27e/0xb30 [ 1750.077476][T26289] ksys_write+0x145/0x250 [ 1750.081988][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.086678][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.092747][T26289] [ 1750.095078][T26289] [ 1750.095078][T26289] the dependencies between the lock to be acquired [ 1750.095088][T26289] and SOFTIRQ-irq-unsafe lock: [ 1750.108610][T26289] -> (tasklist_lock){.+.+}-{3:3} { [ 1750.113919][T26289] HARDIRQ-ON-R at: [ 1750.118084][T26289] lock_acquire+0x120/0x360 [ 1750.124582][T26289] _raw_read_lock+0x36/0x50 [ 1750.131095][T26289] __do_wait+0xde/0x740 [ 1750.137354][T26289] do_wait+0x1f8/0x510 [ 1750.143430][T26289] kernel_wait+0xab/0x170 [ 1750.149779][T26289] call_usermodehelper_exec_work+0xbe/0x230 [ 1750.157670][T26289] process_scheduled_works+0xae1/0x17b0 [ 1750.165222][T26289] worker_thread+0x8a0/0xda0 [ 1750.171809][T26289] kthread+0x711/0x8a0 [ 1750.177880][T26289] ret_from_fork+0x4bc/0x870 [ 1750.184464][T26289] ret_from_fork_asm+0x1a/0x30 [ 1750.191225][T26289] SOFTIRQ-ON-R at: [ 1750.195383][T26289] lock_acquire+0x120/0x360 [ 1750.201893][T26289] _raw_read_lock+0x36/0x50 [ 1750.208399][T26289] __do_wait+0xde/0x740 [ 1750.214564][T26289] do_wait+0x1f8/0x510 [ 1750.220647][T26289] kernel_wait+0xab/0x170 [ 1750.226982][T26289] call_usermodehelper_exec_work+0xbe/0x230 [ 1750.234871][T26289] process_scheduled_works+0xae1/0x17b0 [ 1750.242411][T26289] worker_thread+0x8a0/0xda0 [ 1750.249003][T26289] kthread+0x711/0x8a0 [ 1750.255077][T26289] ret_from_fork+0x4bc/0x870 [ 1750.261668][T26289] ret_from_fork_asm+0x1a/0x30 [ 1750.268515][T26289] INITIAL USE at: [ 1750.272586][T26289] lock_acquire+0x120/0x360 [ 1750.279002][T26289] _raw_write_lock_irq+0xa2/0xf0 [ 1750.285866][T26289] copy_process+0x224f/0x3c00 [ 1750.292468][T26289] kernel_clone+0x21e/0x840 [ 1750.298897][T26289] user_mode_thread+0xdd/0x140 [ 1750.305574][T26289] rest_init+0x23/0x300 [ 1750.311651][T26289] start_kernel+0x3ae/0x410 [ 1750.318089][T26289] x86_64_start_reservations+0x24/0x30 [ 1750.325480][T26289] x86_64_start_kernel+0x143/0x1c0 [ 1750.332529][T26289] common_startup_64+0x13e/0x147 [ 1750.339410][T26289] INITIAL READ USE at: [ 1750.343922][T26289] lock_acquire+0x120/0x360 [ 1750.350788][T26289] _raw_read_lock+0x36/0x50 [ 1750.357679][T26289] __do_wait+0xde/0x740 [ 1750.364222][T26289] do_wait+0x1f8/0x510 [ 1750.370660][T26289] kernel_wait+0xab/0x170 [ 1750.377385][T26289] call_usermodehelper_exec_work+0xbe/0x230 [ 1750.385738][T26289] process_scheduled_works+0xae1/0x17b0 [ 1750.393652][T26289] worker_thread+0x8a0/0xda0 [ 1750.400608][T26289] kthread+0x711/0x8a0 [ 1750.407040][T26289] ret_from_fork+0x4bc/0x870 [ 1750.413991][T26289] ret_from_fork_asm+0x1a/0x30 [ 1750.421216][T26289] } [ 1750.423902][T26289] ... key at: [] tasklist_lock+0x18/0x40 [ 1750.431814][T26289] ... acquired at: [ 1750.435800][T26289] lock_acquire+0x120/0x360 [ 1750.440491][T26289] _raw_read_lock+0x36/0x50 [ 1750.445191][T26289] send_sigurg+0x12b/0x420 [ 1750.449801][T26289] sk_send_sigurg+0x6c/0x2e0 [ 1750.454588][T26289] queue_oob+0x420/0x4f0 [ 1750.459018][T26289] unix_stream_sendmsg+0xc3f/0xdf0 [ 1750.464309][T26289] __sock_sendmsg+0x21c/0x270 [ 1750.469169][T26289] ____sys_sendmsg+0x505/0x830 [ 1750.474200][T26289] ___sys_sendmsg+0x21f/0x2a0 [ 1750.479056][T26289] __x64_sys_sendmsg+0x19b/0x260 [ 1750.484170][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.488889][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.494963][T26289] [ 1750.497291][T26289] -> (&f_owner->lock){....}-{3:3} { [ 1750.502616][T26289] INITIAL USE at: [ 1750.506611][T26289] lock_acquire+0x120/0x360 [ 1750.512868][T26289] _raw_write_lock_irq+0xa2/0xf0 [ 1750.519658][T26289] __f_setown+0x67/0x370 [ 1750.525645][T26289] fcntl_dirnotify+0x3fa/0x6a0 [ 1750.532204][T26289] do_fcntl+0x6d0/0x1910 [ 1750.538198][T26289] __se_sys_fcntl+0xc8/0x150 [ 1750.544633][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.550904][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.558553][T26289] INITIAL READ USE at: [ 1750.562983][T26289] lock_acquire+0x120/0x360 [ 1750.569659][T26289] _raw_read_lock_irqsave+0xaf/0x100 [ 1750.577162][T26289] send_sigio+0x38/0x370 [ 1750.583614][T26289] kill_fasync+0x24d/0x4d0 [ 1750.590208][T26289] lease_break_callback+0x26/0x30 [ 1750.597417][T26289] __break_lease+0x6a5/0x1620 [ 1750.604273][T26289] do_dentry_open+0x8b7/0x13f0 [ 1750.611210][T26289] vfs_open+0x3b/0x340 [ 1750.617449][T26289] path_openat+0x2ee5/0x3830 [ 1750.624308][T26289] do_filp_open+0x1fa/0x410 [ 1750.630993][T26289] do_sys_openat2+0x121/0x1c0 [ 1750.637856][T26289] __x64_sys_open+0x11e/0x150 [ 1750.644707][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.651409][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.659566][T26289] } [ 1750.662159][T26289] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1750.671101][T26289] ... acquired at: [ 1750.674998][T26289] lock_acquire+0x120/0x360 [ 1750.679686][T26289] _raw_read_lock_irqsave+0xaf/0x100 [ 1750.685156][T26289] send_sigio+0x38/0x370 [ 1750.689579][T26289] kill_fasync+0x24d/0x4d0 [ 1750.694174][T26289] lease_break_callback+0x26/0x30 [ 1750.699385][T26289] __break_lease+0x6a5/0x1620 [ 1750.704241][T26289] do_dentry_open+0x8b7/0x13f0 [ 1750.709183][T26289] vfs_open+0x3b/0x340 [ 1750.713432][T26289] path_openat+0x2ee5/0x3830 [ 1750.718208][T26289] do_filp_open+0x1fa/0x410 [ 1750.722891][T26289] do_sys_openat2+0x121/0x1c0 [ 1750.727743][T26289] __x64_sys_open+0x11e/0x150 [ 1750.732602][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.737298][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.743389][T26289] [ 1750.745717][T26289] -> (&new->fa_lock){....}-{3:3} { [ 1750.750853][T26289] INITIAL USE at: [ 1750.754750][T26289] lock_acquire+0x120/0x360 [ 1750.760829][T26289] _raw_write_lock_irq+0xa2/0xf0 [ 1750.767335][T26289] fasync_remove_entry+0xf1/0x1c0 [ 1750.774013][T26289] sock_fasync+0x85/0xf0 [ 1750.779824][T26289] __fput+0x8a2/0xa70 [ 1750.785374][T26289] task_work_run+0x1d4/0x260 [ 1750.791534][T26289] get_signal+0x11ec/0x1340 [ 1750.797601][T26289] arch_do_signal_or_restart+0xa0/0x790 [ 1750.804720][T26289] exit_to_user_mode_loop+0x72/0x130 [ 1750.811577][T26289] do_syscall_64+0x2bd/0xfa0 [ 1750.817736][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.825186][T26289] INITIAL READ USE at: [ 1750.829520][T26289] lock_acquire+0x120/0x360 [ 1750.836021][T26289] _raw_read_lock_irqsave+0xaf/0x100 [ 1750.843310][T26289] kill_fasync+0x199/0x4d0 [ 1750.849748][T26289] sock_wake_async+0x137/0x160 [ 1750.856521][T26289] af_alg_wmem_wakeup+0x3c0/0x440 [ 1750.863550][T26289] aead_recvmsg+0x1340/0x13b0 [ 1750.870235][T26289] sock_recvmsg+0x22c/0x270 [ 1750.876745][T26289] ____sys_recvmsg+0x1c9/0x460 [ 1750.883502][T26289] ___sys_recvmsg+0x1b5/0x510 [ 1750.890182][T26289] do_recvmmsg+0x307/0x770 [ 1750.896616][T26289] __x64_sys_recvmmsg+0x190/0x240 [ 1750.903643][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.910157][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.918049][T26289] } [ 1750.920543][T26289] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1750.929231][T26289] ... acquired at: [ 1750.933030][T26289] lock_acquire+0x120/0x360 [ 1750.937706][T26289] _raw_read_lock_irqsave+0xaf/0x100 [ 1750.943171][T26289] kill_fasync+0x199/0x4d0 [ 1750.947762][T26289] __start_tty+0x18c/0x220 [ 1750.952357][T26289] start_tty+0x2b/0x70 [ 1750.956618][T26289] n_tty_set_termios+0xa7c/0x1090 [ 1750.961819][T26289] tty_set_termios+0xda4/0x17e0 [ 1750.966845][T26289] set_termios+0x516/0x6c0 [ 1750.971448][T26289] tty_mode_ioctl+0x47e/0x740 [ 1750.976313][T26289] tty_ioctl+0x9c6/0xde0 [ 1750.980735][T26289] __se_sys_ioctl+0xfc/0x170 [ 1750.985504][T26289] do_syscall_64+0xfa/0xfa0 [ 1750.990188][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.996256][T26289] [ 1750.998583][T26289] [ 1750.998583][T26289] stack backtrace: [ 1751.004480][T26289] CPU: 0 UID: 0 PID: 26289 Comm: syz.2.22799 Not tainted syzkaller #0 PREEMPT(full) [ 1751.004500][T26289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1751.004511][T26289] Call Trace: [ 1751.004518][T26289] [ 1751.004525][T26289] dump_stack_lvl+0x189/0x250 [ 1751.004551][T26289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1751.004573][T26289] ? __pfx__printk+0x10/0x10 [ 1751.004594][T26289] validate_chain+0x1f05/0x2140 [ 1751.004623][T26289] __lock_acquire+0xab9/0xd20 [ 1751.004641][T26289] ? kill_fasync+0x199/0x4d0 [ 1751.004660][T26289] lock_acquire+0x120/0x360 [ 1751.004675][T26289] ? kill_fasync+0x199/0x4d0 [ 1751.004700][T26289] _raw_read_lock_irqsave+0xaf/0x100 [ 1751.004723][T26289] ? kill_fasync+0x199/0x4d0 [ 1751.004743][T26289] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1751.004774][T26289] kill_fasync+0x199/0x4d0 [ 1751.004797][T26289] ? kill_fasync+0x53/0x4d0 [ 1751.004821][T26289] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1751.004843][T26289] __start_tty+0x18c/0x220 [ 1751.004870][T26289] start_tty+0x2b/0x70 [ 1751.004894][T26289] n_tty_set_termios+0xa7c/0x1090 [ 1751.004920][T26289] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1751.004940][T26289] tty_set_termios+0xda4/0x17e0 [ 1751.004968][T26289] ? __pfx_tty_set_termios+0x10/0x10 [ 1751.004999][T26289] set_termios+0x516/0x6c0 [ 1751.005025][T26289] ? __pfx_set_termios+0x10/0x10 [ 1751.005051][T26289] ? tty_ldisc_ref_wait+0x25/0x70 [ 1751.005082][T26289] tty_mode_ioctl+0x47e/0x740 [ 1751.005104][T26289] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1751.005123][T26289] ? tty_ldisc_ref_wait+0x25/0x70 [ 1751.005145][T26289] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1751.005169][T26289] ? n_tty_ioctl_helper+0x8e/0x340 [ 1751.005190][T26289] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1751.005207][T26289] tty_ioctl+0x9c6/0xde0 [ 1751.005230][T26289] ? __pfx_tty_ioctl+0x10/0x10 [ 1751.005258][T26289] __se_sys_ioctl+0xfc/0x170 [ 1751.005279][T26289] do_syscall_64+0xfa/0xfa0 [ 1751.005303][T26289] ? lockdep_hardirqs_on+0x9c/0x150 [ 1751.005326][T26289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.005347][T26289] ? clear_bhb_loop+0x60/0xb0 [ 1751.005365][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.005381][T26289] RIP: 0033:0x7f893618f6c9 [ 1751.005398][T26289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1751.005412][T26289] RSP: 002b:00007f8936f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.005436][T26289] RAX: ffffffffffffffda RBX: 00007f89363e6090 RCX: 00007f893618f6c9 [ 1751.005449][T26289] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1751.005460][T26289] RBP: 00007f8936211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1751.005471][T26289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.005481][T26289] R13: 00007f89363e6128 R14: 00007f89363e6090 R15: 00007f893650fa28 [ 1751.005499][T26289]