last executing test programs: 36m59.436440928s ago: executing program 32 (id=242): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000002940)='./file0\x00') mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 36m54.813307646s ago: executing program 33 (id=260): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_mount_image$fuse(&(0x7f0000002240), &(0x7f0000002280)='./file0/file0\x00', 0x40400, &(0x7f0000002640)=ANY=[], 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 34m36.032765353s ago: executing program 37 (id=1480): dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) 32m10.552181618s ago: executing program 38 (id=3350): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000300)=0x5) 28m33.697693776s ago: executing program 9 (id=6900): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x33, @empty, @empty, 0x40, 0x7840, 0x0, 0xa7e}}) 28m33.571648424s ago: executing program 9 (id=6904): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f08001400000002000000fedbdf2505000500320000000a004e200000000e000000f3000000000000ffffac14141909000000000000000800120000000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001fe80000000000000000000eeffffff1705000600002000000a004e21"], 0xa0}}, 0x0) 28m33.467189543s ago: executing program 9 (id=6907): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setreuid(0x0, 0x0) setreuid(0x0, 0x0) 28m33.374737591s ago: executing program 9 (id=6911): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 28m33.254731485s ago: executing program 9 (id=6913): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 28m32.935888348s ago: executing program 9 (id=6919): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = gettid() capset(&(0x7f00000003c0)={0x19980330, r2}, 0x0) 28m32.759418287s ago: executing program 39 (id=6919): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = gettid() capset(&(0x7f00000003c0)={0x19980330, r2}, 0x0) 28m19.650845963s ago: executing program 8 (id=7104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240000001100010000000000fedbdf250700000016"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 28m19.422690184s ago: executing program 8 (id=7110): r0 = syz_open_dev$video(&(0x7f0000000000), 0x80000001, 0x1) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x9, "c422777596e6beb14ea7786950eeac251f4778f4a31ea884f4fd55835a9c7e25", 0x40, 0x6763, 0x9c4, 0x2, 0x3}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0xff}, 0x14) r3 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x30, 0x66, 0x0, 0xc5, 0x1, 0x0, @remote, @rand_addr=0x64010102}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x3, 0x9, 0x66, 0x40, 0x2, 0x1, 0x7, @multicast1, @loopback}}}}}}, 0x0) pipe(0xfffffffffffffffc) 28m19.13515651s ago: executing program 8 (id=7115): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f0000000d80)) 28m18.951183999s ago: executing program 8 (id=7120): r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 28m17.992202539s ago: executing program 8 (id=7130): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 28m17.478022965s ago: executing program 8 (id=7136): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x29, 0x2, 0x0) 28m16.577783172s ago: executing program 40 (id=7136): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x29, 0x2, 0x0) 25m1.807834884s ago: executing program 1 (id=10090): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) 25m1.58792412s ago: executing program 1 (id=10096): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') 25m1.501687905s ago: executing program 1 (id=10100): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001030000"], 0x54}}, 0x0) 25m1.347169682s ago: executing program 1 (id=10105): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 25m0.363386477s ago: executing program 1 (id=10123): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') getdents(r2, &(0x7f0000000f00)=""/4118, 0x1016) 24m59.894679544s ago: executing program 1 (id=10126): rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f0000000680)={'#! ', './file0', [{0x20, 'sched_switch\x00'}]}, 0x19) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 24m59.224435465s ago: executing program 41 (id=10126): rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f0000000680)={'#! ', './file0', [{0x20, 'sched_switch\x00'}]}, 0x19) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21m12.781981544s ago: executing program 6 (id=13526): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x42888580, 0x0, 0x0, 0x0, 0x0, 0x0) 21m11.922971611s ago: executing program 6 (id=13535): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, &(0x7f0000000000)={0x3e, 0xfffffffd, 0x3}) 21m11.502617161s ago: executing program 6 (id=13539): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 21m11.365620554s ago: executing program 6 (id=13543): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) dup2(r2, r0) 21m9.913079483s ago: executing program 6 (id=13559): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x15) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 21m8.76103503s ago: executing program 6 (id=13576): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c000006, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x2040600) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) 21m8.34092636s ago: executing program 42 (id=13576): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c000006, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x2040600) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) 17m38.238548996s ago: executing program 3 (id=16310): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 17m38.110528926s ago: executing program 3 (id=16311): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone3(&(0x7f0000000380)={0x80000, 0x0, 0x0, 0x0, {0x42}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17m37.928514402s ago: executing program 3 (id=16315): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000005, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 17m37.739823135s ago: executing program 3 (id=16317): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 17m36.746117595s ago: executing program 3 (id=16333): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x6, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0xb7, 0xd83f}) 17m36.433553065s ago: executing program 3 (id=16336): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) 17m36.344720192s ago: executing program 43 (id=16336): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) 6.892316866s ago: executing program 7 (id=29331): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) 6.821187085s ago: executing program 7 (id=29332): socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x5c1001, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x940c0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_size', 0x40000, 0x1a) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x92bf, 0x300a}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 5.354385327s ago: executing program 7 (id=29336): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20044005) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8804) shmctl$SHM_LOCK(0x0, 0xb) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.503839661s ago: executing program 7 (id=29344): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r5, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.765808729s ago: executing program 4 (id=29357): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xd3c, [0xffff, 0x5d, 0x8, 0x6, 0x2, 0xc1, 0x3, 0x15f, 0x46, 0x404, 0xd, 0x200, 0xf26, 0x0, 0x240, 0x9, 0xf046, 0x0, 0x1, 0xf000, 0xfffb, 0xf, 0x5, 0x0, 0x1, 0x1000, 0x4efc, 0x8, 0x7f, 0x5, 0x2, 0x6, 0x2, 0x4, 0x1400, 0x13, 0x7, 0xc, 0xb673, 0x40, 0x10, 0x3, 0xf, 0x2, 0x734, 0xd, 0x7a7e, 0xfffc], 0x1c0}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2a020480) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000100)=0xfffffffa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fb7fd, 0x20005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x1, 0x8}, {0x5, 0x6}, 0x320, 0x0, 0x2}) r8 = syz_open_dev$rtc(&(0x7f00000002c0), 0x5, 0xc00) ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f0000000300)={0x0, 0x7, 0x1, 0x12, 0x6, 0x3, 0x6, 0xa5, 0x1}) 2.266344087s ago: executing program 4 (id=29360): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.885666093s ago: executing program 0 (id=29363): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) close_range(r6, 0xffffffffffffffff, 0x0) 1.861625009s ago: executing program 4 (id=29364): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 1.638318809s ago: executing program 4 (id=29366): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone3(&(0x7f0000000380)={0x200000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 1.548086161s ago: executing program 0 (id=29367): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000100), 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.360704544s ago: executing program 7 (id=29370): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.26744178s ago: executing program 0 (id=29371): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x5, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x9}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x80a0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.160553038s ago: executing program 4 (id=29374): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000540)={0x40600, 0x0, 0x0, 0x0, {0x35}, &(0x7f0000000380)=""/129, 0x81, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.149399944s ago: executing program 7 (id=29375): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xda, 0x47, 0x56, 0x8, 0x93b, 0xa102, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0x65, 0xa8}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 901.426182ms ago: executing program 4 (id=29378): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="4006000000003a3d707329279a78e8140819e1ea4b3686514965c60255d4c185a62d60c9adb130b8140ba7f1142bcc94b7e6a1a5"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x38, 0x28, 0xb16, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xd}, {0x3, 0xa}, {0x4, 0x7}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfb={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044810}, 0x814) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 895.135537ms ago: executing program 0 (id=29379): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 851.543791ms ago: executing program 2 (id=29381): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 751.002606ms ago: executing program 0 (id=29382): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0) 706.049235ms ago: executing program 2 (id=29383): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x81) 689.366269ms ago: executing program 5 (id=29384): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, 0x0}}], 0x1, 0x0) 543.753475ms ago: executing program 0 (id=29385): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x9, @pix={0x0, 0x0, 0x32435750}}) syz_usb_disconnect(r0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x0) link(&(0x7f0000000140)='.\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4000000) close(0xffffffffffffffff) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 543.254046ms ago: executing program 2 (id=29386): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone3(&(0x7f0000000380)={0x200000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 515.65391ms ago: executing program 5 (id=29387): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 372.904311ms ago: executing program 5 (id=29388): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 322.323859ms ago: executing program 2 (id=29389): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 266.456265ms ago: executing program 5 (id=29390): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) 170.266317ms ago: executing program 2 (id=29391): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) dup2(r6, r7) 169.554245ms ago: executing program 5 (id=29392): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) 822.689µs ago: executing program 2 (id=29393): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 0s ago: executing program 5 (id=29394): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0xa, 0x81, 0x0, 0x2, 0x20}, 0xe) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x1ff, 0x7f, 0x81, 0x4, 0xde1]}, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) connect$inet6(r0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1847.522982][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.545206][ T5838] usb 6-1: Product: syz [ 1847.558463][ T5838] usb 6-1: Manufacturer: syz [ 1847.574572][ T5838] usb 6-1: SerialNumber: syz [ 1847.594343][ T5838] usb 6-1: config 0 descriptor?? [ 1847.640829][T30294] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1847.885911][ T5838] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 1847.924909][ T5838] etas_es58x 6-1:0.219: could not retrieve the product info string [ 1847.997361][ T5838] usb 6-1: USB disconnect, device number 48 [ 1848.021887][ T5838] etas_es58x 6-1:0.219: Disconnecting syz syz [ 1848.106910][T30330] netlink: 36 bytes leftover after parsing attributes in process `syz.7.23522'. [ 1848.126341][T30330] netlink: 32 bytes leftover after parsing attributes in process `syz.7.23522'. [ 1848.396940][ T30] audit: type=1804 audit(1763109120.394:5218): pid=30332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.23521" name="bus" dev="ramfs" ino=337260 res=1 errno=0 [ 1849.543644][T30345] syzkaller0: entered promiscuous mode [ 1849.575675][T30345] syzkaller0: entered allmulticast mode [ 1849.806824][T30359] tipc: Enabled bearer , priority 0 [ 1849.824566][T30341] tipc: Resetting bearer [ 1849.873228][T30341] tipc: Disabling bearer [ 1852.040315][T30410] binder_alloc: 30407: binder_alloc_buf, no vma [ 1853.157624][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.164100][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.525192][T30463] ptrace attach of "./syz-executor exec"[13204] was attempted by ""[30463] [ 1854.586926][T30517] lo: entered allmulticast mode [ 1854.592380][T30516] lo: left allmulticast mode [ 1856.016990][T30552] binder: 30551:30552 ioctl c0306201 200000000940 returned -22 [ 1856.936842][T30600] fuse: Bad value for 'fd' [ 1857.171480][ T5945] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1857.392343][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 1857.428382][ T5945] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1857.454014][ T5945] usb 3-1: config 1 has no interface number 0 [ 1857.469130][ T5945] usb 3-1: config 1 interface 3 has no altsetting 0 [ 1857.478817][ T5945] usb 3-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1857.490462][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.498900][ T5945] usb 3-1: Product: syz [ 1857.508224][ T5945] usb 3-1: Manufacturer: syz [ 1857.513684][ T5945] usb 3-1: SerialNumber: syz [ 1857.784342][ T5945] usb 3-1: USB disconnect, device number 57 [ 1858.110550][T30640] netlink: 'syz.4.23656': attribute type 4 has an invalid length. [ 1858.816051][T30662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23667'. [ 1858.877316][T30664] netlink: 188 bytes leftover after parsing attributes in process `syz.2.23668'. [ 1859.241136][T21136] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1859.460491][T21136] usb 1-1: Using ep0 maxpacket: 32 [ 1859.471831][T21136] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1859.479966][T21136] usb 1-1: config 1 has no interface number 0 [ 1859.496317][T21136] usb 1-1: config 1 interface 3 has no altsetting 0 [ 1859.507134][T21136] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1859.516887][T21136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.526768][T21136] usb 1-1: Product: syz [ 1859.532458][T21136] usb 1-1: Manufacturer: syz [ 1859.537256][T21136] usb 1-1: SerialNumber: syz [ 1860.093639][T21136] usb 1-1: USB disconnect, device number 84 [ 1861.475540][T30741] @: renamed from vlan0 (while UP) [ 1863.407340][T30775] loop7: detected capacity change from 0 to 7 [ 1863.591683][T30777] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1863.983045][ C0] blk_print_req_error: 10 callbacks suppressed [ 1863.983060][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1863.998972][ C0] buffer_io_error: 11 callbacks suppressed [ 1863.998983][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1865.835185][T30835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1868.600856][T30933] netlink: 44 bytes leftover after parsing attributes in process `syz.5.23780'. [ 1871.131951][ T5945] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1871.449380][ T5945] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 1871.459953][ T5945] usb 6-1: config 0 has no interface number 0 [ 1871.502680][ T5945] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1871.615903][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.662298][ T5945] usb 6-1: Product: syz [ 1871.671636][ T5945] usb 6-1: Manufacturer: syz [ 1871.676263][ T5945] usb 6-1: SerialNumber: syz [ 1871.688470][ T5945] usb 6-1: config 0 descriptor?? [ 1871.697201][ T5945] peak_usb 6-1:0.99: probe with driver peak_usb failed with error 99 [ 1871.769223][T19543] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1872.022699][T19543] usb 1-1: Using ep0 maxpacket: 8 [ 1872.101020][T19543] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1872.110662][T19543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.125399][T19543] usb 1-1: Product: syz [ 1872.139070][T19543] usb 1-1: Manufacturer: syz [ 1872.152368][T19543] usb 1-1: SerialNumber: syz [ 1872.172767][T19543] usb 1-1: config 0 descriptor?? [ 1872.478339][T19543] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1873.184151][T19543] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1873.184580][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23808'. [ 1873.235002][ T5838] usb 1-1: USB disconnect, device number 85 [ 1873.801331][T31031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23818'. [ 1873.930351][ T5838] usb 6-1: USB disconnect, device number 49 [ 1875.267066][T31077] binder: 31076:31077 ioctl 400c620e 200000000100 returned -22 [ 1876.230210][T31095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23846'. [ 1876.248579][T31095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23846'. [ 1876.538557][T31110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23852'. [ 1876.618118][T31112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23855'. [ 1876.634676][T31112] ip6_vti0: left promiscuous mode [ 1876.643275][T31112] ip6_vti0: left allmulticast mode [ 1876.682723][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23857'. [ 1876.694671][T31118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23857'. [ 1876.889285][T19543] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1877.344410][T19543] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1877.357936][T19543] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1877.459906][T19543] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1877.466739][T19543] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1877.476994][T19543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.493740][T19543] usb 6-1: config 0 descriptor?? [ 1878.010676][ T30] audit: type=1326 audit(1763109150.244:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.048234][ T30] audit: type=1326 audit(1763109150.264:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.071983][ T30] audit: type=1326 audit(1763109150.264:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.097390][ T30] audit: type=1326 audit(1763109150.264:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.176749][T31152] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 1878.202179][ T30] audit: type=1326 audit(1763109150.364:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.235467][T31152] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 1878.255126][T31157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23874'. [ 1878.271717][T31152] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 1878.282214][ T30] audit: type=1326 audit(1763109150.364:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.328822][T31152] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1878.346634][T31152] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 1878.362234][ T30] audit: type=1326 audit(1763109150.364:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.391505][ T30] audit: type=1326 audit(1763109150.364:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.417486][T31152] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 1878.419472][T31157] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 1878.433298][T31152] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 1878.443698][T31152] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 1878.462982][T31152] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 1878.471374][T31152] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 1878.487342][ T30] audit: type=1326 audit(1763109150.714:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.510443][ T30] audit: type=1326 audit(1763109150.714:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.5.23856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1878.747926][T31150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1878.793619][T31150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1878.805731][T31150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1878.933402][T19543] usbhid 6-1:0.0: can't add hid device: -71 [ 1878.944618][T19543] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1878.984682][T19543] usb 6-1: USB disconnect, device number 50 [ 1879.574372][T31180] binder: 31179:31180 ioctl c0306201 0 returned -14 [ 1880.023084][T10105] Bluetooth: hci3: command 0x0c1a tx timeout [ 1880.325537][T31208] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1880.820170][T10105] Bluetooth: hci1: command 0x0c1a tx timeout [ 1880.820183][T22604] Bluetooth: hci0: command 0x0406 tx timeout [ 1881.483797][T31230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23905'. [ 1882.532083][T31278] netlink: 104 bytes leftover after parsing attributes in process `syz.7.23926'. [ 1885.466517][T31372] netlink: 'syz.2.23967': attribute type 1 has an invalid length. [ 1885.557904][T31372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1885.677644][T31382] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1885.694375][T31378] bond1: (slave ip6gretap1): making interface the new active one [ 1885.704275][T31378] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1885.968070][T31372] veth7: entered promiscuous mode [ 1885.976453][T31372] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1886.018526][T31385] erspan0: entered allmulticast mode [ 1886.114100][T31385] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 1888.069160][T21136] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1888.211842][T31449] program syz.2.23994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1888.249483][T21136] usb 6-1: Using ep0 maxpacket: 32 [ 1888.297207][T21136] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1888.363749][T31452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23995'. [ 1888.379981][T21136] usb 6-1: config 1 has no interface number 0 [ 1888.386214][T21136] usb 6-1: config 1 interface 3 has no altsetting 0 [ 1888.398351][T21136] usb 6-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1888.408281][T21136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.417261][T21136] usb 6-1: Product: syz [ 1888.422312][T21136] usb 6-1: Manufacturer: syz [ 1888.432705][T21136] usb 6-1: SerialNumber: syz [ 1889.025640][T21136] usb 6-1: USB disconnect, device number 51 [ 1891.274097][T31531] netlink: 36 bytes leftover after parsing attributes in process `syz.5.24030'. [ 1891.809441][T21136] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1891.902641][T31555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24039'. [ 1891.961543][T21136] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1891.970205][T31557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24041'. [ 1891.984687][T21136] usb 3-1: string descriptor 0 read error: -22 [ 1891.991825][T21136] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1892.010252][T21136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.034059][T21136] usb 3-1: config 0 descriptor?? [ 1892.253180][T31569] use of bytesused == 0 is deprecated and will be removed in the future, [ 1892.263442][T31569] use the actual size instead. [ 1892.291960][T31571] netlink: 1 bytes leftover after parsing attributes in process `syz.0.24048'. [ 1892.308003][T31542] block device autoloading is deprecated and will be removed. [ 1892.336234][T21136] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1892.374430][T21136] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1892.389290][T21136] dib0700: firmware download failed at 7 with -22 [ 1892.416038][T21136] usb 3-1: USB disconnect, device number 58 [ 1892.645920][T31580] netlink: 136 bytes leftover after parsing attributes in process `syz.0.24052'. [ 1893.209365][T31596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24059'. [ 1896.334885][T31670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24087'. [ 1898.401578][T31724] netlink: 'syz.7.24110': attribute type 4 has an invalid length. [ 1898.401599][T31724] netlink: 17 bytes leftover after parsing attributes in process `syz.7.24110'. [ 1898.554178][T31728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1898.938235][T31738] binder: 31736:31738 ioctl 80089418 2000000000c0 returned -22 [ 1899.934502][T31793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24140'. [ 1900.421789][T31815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24152'. [ 1902.161405][T31885] syzkaller0: entered promiscuous mode [ 1902.167833][T31885] syzkaller0: entered allmulticast mode [ 1902.188447][T31886] binder: BINDER_SET_CONTEXT_MGR already set [ 1902.204950][T31886] binder: 31882:31886 ioctl 4018620d 200000004a80 returned -16 [ 1902.339127][T21136] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1902.503685][T21136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.560001][T21136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.592873][T21136] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1902.637962][T21136] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1902.667619][T21136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.697987][T21136] usb 6-1: config 0 descriptor?? [ 1903.163348][T21136] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1904.441753][ T5838] usb 6-1: USB disconnect, device number 52 [ 1904.939606][T31941] netlink: 224 bytes leftover after parsing attributes in process `syz.7.24201'. [ 1905.769163][T21136] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1905.874809][T31958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24209'. [ 1905.919247][T21136] usb 6-1: Using ep0 maxpacket: 32 [ 1905.948203][T21136] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1905.969135][T21136] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1905.976749][T21136] usb 6-1: can't read configurations, error -71 [ 1907.888092][ T30] audit: type=1800 audit(1763109180.094:5229): pid=31966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.24211" name="bus" dev="ramfs" ino=346980 res=0 errno=0 [ 1911.492698][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24244'. [ 1914.584978][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.593126][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.630906][T32135] fuse: Bad value for 'group_id' [ 1914.649168][T32135] fuse: Bad value for 'group_id' [ 1914.914759][ T30] audit: type=1326 audit(1763109187.144:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1914.999096][ T30] audit: type=1326 audit(1763109187.144:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.089091][ T30] audit: type=1326 audit(1763109187.144:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.149126][ T30] audit: type=1326 audit(1763109187.144:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.249058][ T30] audit: type=1326 audit(1763109187.144:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.319200][ T30] audit: type=1326 audit(1763109187.144:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.380205][ T30] audit: type=1326 audit(1763109187.144:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.391851][T32155] syzkaller0: entered promiscuous mode [ 1915.419372][ T30] audit: type=1326 audit(1763109187.144:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.449116][ T30] audit: type=1326 audit(1763109187.174:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.455187][T32155] syzkaller0: entered allmulticast mode [ 1915.519073][ T30] audit: type=1326 audit(1763109187.174:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32143 comm="syz.7.24281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6398f6c9 code=0x7ffc0000 [ 1915.731718][T32166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1915.762399][T32169] binder: 32168:32169 ioctl 4018620d 0 returned -22 [ 1916.307845][T32186] netlink: 64 bytes leftover after parsing attributes in process `syz.5.24297'. [ 1918.635517][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24316'. [ 1920.655610][T32291] batadv_slave_1: entered promiscuous mode [ 1920.676291][T32288] batadv_slave_1: left promiscuous mode [ 1921.583486][T32321] netlink: 'syz.5.24349': attribute type 12 has an invalid length. [ 1922.935069][T32343] netlink: 'syz.2.24359': attribute type 6 has an invalid length. [ 1922.991069][T32343] netlink: 'syz.2.24359': attribute type 4 has an invalid length. [ 1923.014069][T32343] netlink: 17 bytes leftover after parsing attributes in process `syz.2.24359'. [ 1923.770737][T32374] netlink: 44 bytes leftover after parsing attributes in process `syz.7.24374'. [ 1924.810324][ T5945] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1924.984713][ T5945] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1925.009214][ T5945] usb 3-1: config 1 has no interface number 0 [ 1925.015342][ T5945] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1925.042964][ T5945] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1925.070355][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.102592][ T5945] usb 3-1: Product: syz [ 1925.119071][ T5945] usb 3-1: Manufacturer: syz [ 1925.123704][ T5945] usb 3-1: SerialNumber: syz [ 1925.359480][ T5945] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 1925.419323][ T5945] usb 3-1: USB disconnect, device number 59 [ 1925.857384][T32467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.24413'. [ 1925.913885][T32467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24413'. [ 1929.330563][T32570] netlink: 52 bytes leftover after parsing attributes in process `syz.5.24457'. [ 1936.823344][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1936.823360][ T30] audit: type=1326 audit(1763109209.054:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1936.954542][ T30] audit: type=1326 audit(1763109209.084:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1936.992817][ T30] audit: type=1326 audit(1763109209.084:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.022989][ T30] audit: type=1326 audit(1763109209.084:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.046028][ T30] audit: type=1326 audit(1763109209.084:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.090697][ T30] audit: type=1326 audit(1763109209.084:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.139470][ T30] audit: type=1326 audit(1763109209.084:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.162617][ T5945] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1937.185969][ T30] audit: type=1326 audit(1763109209.094:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.209584][ T30] audit: type=1326 audit(1763109209.124:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.234916][ T30] audit: type=1326 audit(1763109209.124:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=365 comm="syz.2.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 1937.341076][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.355348][ T5945] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1937.373411][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.436617][ T5945] usb 6-1: config 0 descriptor?? [ 1937.883000][ T5945] steelseries 0003:1038:12B6.0045: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 1938.209295][ T413] netlink: 'syz.2.24588': attribute type 3 has an invalid length. [ 1938.695791][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24596'. [ 1939.337262][ T442] random: crng reseeded on system resumption [ 1940.548628][ T5838] usb 6-1: USB disconnect, device number 55 [ 1942.073711][ T517] netlink: 80 bytes leftover after parsing attributes in process `syz.4.24632'. [ 1942.124451][ T518] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24631'. [ 1942.706456][ T536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1942.877990][ T545] netlink: 20 bytes leftover after parsing attributes in process `syz.7.24645'. [ 1943.061696][ T555] netlink: 68 bytes leftover after parsing attributes in process `syz.7.24650'. [ 1946.880502][ T673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24701'. [ 1950.142755][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1950.142773][ T30] audit: type=1326 audit(1763109222.214:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=787 comm="syz.0.24754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3b8f6c9 code=0x7ffc0000 [ 1950.253905][ T30] audit: type=1326 audit(1763109222.214:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=787 comm="syz.0.24754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3b8f6c9 code=0x7ffc0000 [ 1951.552087][ T829] loop5: detected capacity change from 0 to 7 [ 1951.914303][ T829] Dev loop5: unable to read RDB block 7 [ 1951.939225][ T829] loop5: unable to read partition table [ 1951.951536][ T829] loop5: partition table beyond EOD, truncated [ 1951.975687][ T829] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1952.084466][ T30] audit: type=1800 audit(1763109224.314:5270): pid=835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.24774" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1953.789835][ T874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24790'. [ 1953.840897][ T874] sit0: entered allmulticast mode [ 1954.578268][ T913] netlink: 44 bytes leftover after parsing attributes in process `syz.7.24809'. [ 1954.598778][ T913] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24809'. [ 1955.143287][ T30] audit: type=1326 audit(1763109227.374:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.213378][ T30] audit: type=1326 audit(1763109227.374:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.261107][ T30] audit: type=1326 audit(1763109227.374:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.330486][ T30] audit: type=1326 audit(1763109227.374:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.405417][ T30] audit: type=1326 audit(1763109227.374:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.487312][ T30] audit: type=1326 audit(1763109227.374:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.559071][ T30] audit: type=1326 audit(1763109227.374:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.658022][ T30] audit: type=1326 audit(1763109227.374:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.714490][ T30] audit: type=1326 audit(1763109227.374:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.834690][ T30] audit: type=1326 audit(1763109227.374:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1955.934954][ T30] audit: type=1326 audit(1763109227.374:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=951 comm="syz.4.24824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 1956.441142][ T993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24838'. [ 1956.493270][ T993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24838'. [ 1957.591085][ T1035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.24854'. [ 1957.600211][ T1035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24854'. [ 1957.619177][ T1035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24854'. [ 1959.059167][ T5838] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1959.231361][ T5838] usb 3-1: config 0 has no interfaces? [ 1959.243431][ T5838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1959.263194][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.285872][ T5838] usb 3-1: Product: syz [ 1959.292719][ T5838] usb 3-1: Manufacturer: syz [ 1959.305267][ T5838] usb 3-1: SerialNumber: syz [ 1959.323071][ T5838] usb 3-1: config 0 descriptor?? [ 1959.332279][ T1109] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24882'. [ 1959.358875][ T1109] vlan3: entered promiscuous mode [ 1959.366162][ T1109] team0: entered promiscuous mode [ 1959.371565][ T1109] team_slave_0: entered promiscuous mode [ 1959.378870][ T1109] team_slave_1: entered promiscuous mode [ 1959.538136][ T5838] usb 3-1: USB disconnect, device number 60 [ 1960.514059][ T1124] syzkaller0: entered promiscuous mode [ 1960.523767][ T1124] syzkaller0: entered allmulticast mode [ 1960.649658][ T1129] netlink: 'syz.0.24891': attribute type 3 has an invalid length. [ 1960.657647][ T1129] netlink: 52 bytes leftover after parsing attributes in process `syz.0.24891'. [ 1964.647497][ T1222] netlink: 'syz.4.24930': attribute type 3 has an invalid length. [ 1964.655456][ T1222] netlink: 52 bytes leftover after parsing attributes in process `syz.4.24930'. [ 1967.492352][ T1293] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3421932363/3421932365 [ 1967.529684][ T1293] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3421932363/3421932365 [ 1967.557713][ T1293] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3421932363/3421932365 [ 1967.609433][ T1295] fuse: Bad value for 'group_id' [ 1967.614747][ T1295] fuse: Bad value for 'group_id' [ 1970.640099][ T1390] binder: 1389:1390 ioctl c0306201 0 returned -14 [ 1976.039581][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.045914][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.472556][ T1614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25091'. [ 1977.480254][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25092'. [ 1977.482459][ T1614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25091'. [ 1977.501000][ T1614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25091'. [ 1977.510399][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25092'. [ 1978.722358][ T5897] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1978.763161][ T5897] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1979.308308][ T1676] loop5: detected capacity change from 0 to 7 [ 1979.616596][ T1676] Dev loop5: unable to read RDB block 7 [ 1979.628927][ T1676] loop5: unable to read partition table [ 1979.671499][ T1676] loop5: partition table beyond EOD, truncated [ 1979.685906][ T1676] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1981.964529][ T1767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25157'. [ 1982.552527][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25166'. [ 1982.627768][ T1787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25166'. [ 1982.641004][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25166'. [ 1983.049185][ T1808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1984.766031][ T1858] syzkaller0: entered promiscuous mode [ 1984.796750][ T1858] syzkaller0: entered allmulticast mode [ 1985.931858][ T1885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25210'. [ 1987.674498][ T1952] kvm: pic: non byte read [ 1987.682273][ T1952] kvm: pic: non byte read [ 1987.686895][ T1952] kvm: pic: single mode not supported [ 1987.686913][ T1952] kvm: pic: level sensitive irq not supported [ 1987.705450][ T1952] kvm: pic: non byte read [ 1987.729676][ T1952] kvm: pic: single mode not supported [ 1987.729742][ T1952] kvm: pic: non byte read [ 1987.768883][ T1952] kvm: pic: non byte read [ 1987.790026][ T1952] kvm: pic: non byte read [ 1987.812938][ T1952] kvm: pic: single mode not supported [ 1987.812958][ T1952] kvm: pic: level sensitive irq not supported [ 1987.834027][ T1952] kvm: pic: non byte read [ 1987.854571][ T1952] kvm: pic: single mode not supported [ 1987.854639][ T1952] kvm: pic: non byte read [ 1987.869458][ T1952] kvm: pic: non byte read [ 1988.536802][ T1982] syzkaller0: left promiscuous mode [ 1988.560548][ T1982] syzkaller0: left allmulticast mode [ 1989.913852][ T2035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25275'. [ 1993.929136][ T5897] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1994.125052][ T5897] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1994.353841][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.387832][ T5897] usb 6-1: Product: syz [ 1994.424819][ T5897] usb 6-1: Manufacturer: syz [ 1994.445223][ T5897] usb 6-1: SerialNumber: syz [ 1994.509879][ T5897] usb 6-1: config 0 descriptor?? [ 1994.839032][ T5897] usb 6-1: Firmware version (0.0) predates our first public release. [ 1994.908689][ T5897] usb 6-1: Please update to version 0.2 or newer [ 1995.000781][ T5897] usb 6-1: USB disconnect, device number 56 [ 1995.526112][ T2167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25329'. [ 1996.214537][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1996.214553][ T30] audit: type=1326 audit(1763109268.434:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.247915][ T30] audit: type=1326 audit(1763109268.434:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.275094][ T30] audit: type=1326 audit(1763109268.434:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 1996.299685][ T30] audit: type=1326 audit(1763109268.434:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.370663][ T30] audit: type=1326 audit(1763109268.434:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.435628][ T30] audit: type=1326 audit(1763109268.434:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.459148][ T5945] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1996.606122][ T30] audit: type=1326 audit(1763109268.434:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.677034][ T30] audit: type=1326 audit(1763109268.434:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.699550][ T30] audit: type=1326 audit(1763109268.434:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.722192][ T30] audit: type=1326 audit(1763109268.434:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2189 comm="syz.5.25336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 1996.838549][ T5945] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1996.847343][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.867550][ T5945] usb 6-1: config 0 has no interface number 0 [ 1996.879139][ T5945] usb 6-1: config 0 interface 126 has no altsetting 0 [ 1996.928887][ T5945] usb 6-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 1996.941724][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.967900][ T5945] usb 6-1: Product: syz [ 1996.979303][ T5945] usb 6-1: Manufacturer: syz [ 1996.991284][ T5945] usb 6-1: SerialNumber: syz [ 1997.025181][ T5945] usb 6-1: config 0 descriptor?? [ 1997.053218][ T5945] usb 6-1: bad CDC descriptors [ 1997.272999][ T5945] usb 6-1: USB disconnect, device number 57 [ 2002.409168][ T5945] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2002.589048][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 2002.601276][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2002.628234][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2002.657838][ T5945] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2002.683110][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.730347][ T5945] usb 6-1: Product: syz [ 2002.734546][ T5945] usb 6-1: Manufacturer: syz [ 2002.739878][ T5945] usb 6-1: SerialNumber: syz [ 2002.747699][ T5945] usb 6-1: config 0 descriptor?? [ 2002.757073][ T5945] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2002.767615][ T5945] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2003.422616][ T5945] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2003.429458][ T5945] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2004.075882][ T5945] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 2004.083712][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 2004.094432][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 2004.116482][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 2004.133156][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 2004.554317][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 2004.577657][ T5945] usb 6-1: USB disconnect, device number 58 [ 2004.770583][ T2380] tipc: Failed to remove unknown binding: 66,1,1/4269801488:4047221535/4047221537 [ 2005.466663][ T2411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2006.369844][ T2451] @: renamed from vlan0 [ 2007.423848][ T2495] Invalid logical block size (34372) [ 2008.155175][ T2530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25470'. [ 2008.419115][ T5945] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2008.458531][ T2539] input: syz1 as /devices/virtual/input/input134 [ 2008.591042][ T5945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.601785][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2008.616162][ T5945] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2008.626122][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2008.636020][ T5945] usb 3-1: SerialNumber: syz [ 2008.929423][ T5945] usb 3-1: 0:2 : does not exist [ 2008.940325][ T5945] usb 3-1: unit 255 not found! [ 2008.954972][ T5945] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2008.970011][ T5945] usb 3-1: 5:0: cannot get min/max values for control 6 (id 5) [ 2008.994113][ T5945] usb 3-1: USB disconnect, device number 61 [ 2009.679616][ T2576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.25485'. [ 2009.709710][ T2576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.25485'. [ 2010.593095][ T2582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2010.600019][ T2582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2010.606086][ T2582] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2011.859126][T22604] Bluetooth: hci3: command 0x0c1a tx timeout [ 2012.661608][T22604] Bluetooth: hci0: command 0x0406 tx timeout [ 2012.668129][T22604] Bluetooth: hci1: command 0x0c1a tx timeout [ 2012.973614][ T2687] tipc: Failed to remove unknown binding: 66,1,1/4294967290:3488383289/3488383291 [ 2013.615302][ T2719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25533'. [ 2013.793302][ T2683] tipc: Failed to remove unknown binding: 66,1,1/4294967290:3488383289/3488383291 [ 2013.814309][ T2683] tipc: Failed to remove unknown binding: 66,1,1/4294967290:3488383289/3488383291 [ 2018.837977][ T2863] netlink: 'syz.5.25578': attribute type 27 has an invalid length. [ 2020.648662][ T2901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25596'. [ 2020.695448][ T2901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25596'. [ 2022.065088][ T2933] create_pit_timer: 2 callbacks suppressed [ 2022.065105][ T2933] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2022.468991][ T2951] netlink: 'syz.2.25616': attribute type 1 has an invalid length. [ 2022.663998][ T2951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2022.866198][ T2956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2022.898661][ T2956] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2022.960447][ T2956] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 2023.057922][ T2957] gretap1: entered promiscuous mode [ 2023.088026][ T2957] bond2: (slave gretap1): making interface the new active one [ 2023.148147][ T2957] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2023.243507][ T2951] macvlan2: entered promiscuous mode [ 2023.269181][ T2951] macvlan2: entered allmulticast mode [ 2023.285659][ T2951] bond2: entered promiscuous mode [ 2023.320998][ T2951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2023.438346][ T2951] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2023.516471][ T2951] bond2: left promiscuous mode [ 2027.207231][ T3050] tipc: Enabled bearer , priority 0 [ 2027.231978][ T3050] syzkaller0: entered promiscuous mode [ 2027.237471][ T3050] syzkaller0: entered allmulticast mode [ 2027.485018][ T3050] tipc: Resetting bearer [ 2027.549296][ T3047] tipc: Resetting bearer [ 2027.703149][ T3047] tipc: Disabling bearer [ 2028.512803][ T3099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25675'. [ 2028.521945][ T3099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25675'. [ 2028.531060][ T3099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25675'. [ 2029.024109][ T3124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25690'. [ 2029.044204][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25690'. [ 2030.762504][ T3180] netlink: 16 bytes leftover after parsing attributes in process `syz.7.25711'. [ 2037.463197][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.469664][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.818587][ T3472] tipc: Enabled bearer , priority 0 [ 2037.885427][ T3472] syzkaller0: entered promiscuous mode [ 2037.919566][ T3472] syzkaller0: entered allmulticast mode [ 2038.155006][ T3472] tipc: Resetting bearer [ 2038.199918][ T3471] tipc: Resetting bearer [ 2038.247677][ T3471] tipc: Disabling bearer [ 2039.515720][ T3533] binder: 3531:3533 ioctl c0306201 2000000004c0 returned -22 [ 2039.857287][ T3542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.25813'. [ 2040.006539][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25813'. [ 2040.549165][ T5945] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2040.699057][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 2040.714235][ T5945] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2040.725692][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.743629][ T5945] usb 3-1: Product: syz [ 2040.753612][ T5945] usb 3-1: Manufacturer: syz [ 2040.763938][ T5945] usb 3-1: SerialNumber: syz [ 2040.788466][ T5945] usb 3-1: config 0 descriptor?? [ 2040.961397][ T3562] syzkaller0: entered promiscuous mode [ 2040.967085][ T3562] syzkaller0: entered allmulticast mode [ 2041.012486][ T5945] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2041.744331][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25837'. [ 2041.758003][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25837'. [ 2042.464026][ T5945] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2042.491987][ T5945] usb 3-1: USB disconnect, device number 62 [ 2044.116754][ T3690] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2044.178594][ T3693] lo: Caught tx_queue_len zero misconfig [ 2045.605832][ T3737] tipc: Failed to remove unknown binding: 66,1,1/4294967290:2002413080/2002413082 [ 2045.810880][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25905'. [ 2045.820149][ T3743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25905'. [ 2045.840402][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25905'. [ 2047.270834][ T5945] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2047.439541][ T5838] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2047.493189][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 2047.560682][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2047.626876][ T5945] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2047.637347][ T5945] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2047.654365][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2047.659984][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2047.695948][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2047.735599][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.749636][ T5838] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2047.767465][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.775667][ T5945] usb 1-1: Product: syz [ 2047.775688][ T5945] usb 1-1: Manufacturer: syz [ 2047.775704][ T5945] usb 1-1: SerialNumber: syz [ 2047.825802][ T5838] usb 6-1: Product: syz [ 2047.837348][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25924'. [ 2047.847258][ T3889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25924'. [ 2047.886171][ T5838] usb 6-1: Manufacturer: syz [ 2047.900501][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25924'. [ 2047.915637][ T5838] usb 6-1: SerialNumber: syz [ 2047.943682][ T5838] usb 6-1: config 0 descriptor?? [ 2047.991030][ T5945] usb 1-1: 0:2 : does not exist [ 2048.176615][ T5945] usb 1-1: USB disconnect, device number 86 [ 2050.174661][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25953'. [ 2050.247146][ T5838] usb 6-1: USB disconnect, device number 59 [ 2050.612892][ T3947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2050.619370][ T3947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2050.625603][ T3947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2051.059168][ T5838] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2051.233476][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2051.263079][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2051.288473][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2051.300913][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2051.314614][ T5838] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2051.328464][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.343828][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2051.343844][ T30] audit: type=1326 audit(1763109323.574:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.352458][ T5838] usb 1-1: config 0 descriptor?? [ 2051.394086][ T30] audit: type=1326 audit(1763109323.604:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.488275][ T30] audit: type=1326 audit(1763109323.604:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.556807][ T30] audit: type=1326 audit(1763109323.604:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.677754][ T30] audit: type=1326 audit(1763109323.604:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.761990][ T30] audit: type=1326 audit(1763109323.614:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.808101][ T30] audit: type=1326 audit(1763109323.614:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.809978][ T5838] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2051.857698][ T30] audit: type=1326 audit(1763109323.614:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2051.997453][ T30] audit: type=1326 audit(1763109323.614:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2052.021870][ T2672] Bluetooth: hci3: command 0x0c1a tx timeout [ 2052.065043][ T30] audit: type=1326 audit(1763109323.614:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.5.25974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2052.671659][ T2672] Bluetooth: hci0: command 0x0406 tx timeout [ 2052.674978][T10105] Bluetooth: hci1: command 0x0c1a tx timeout [ 2053.429446][ T5838] usb 1-1: reset high-speed USB device number 87 using dummy_hcd [ 2053.884626][ T4073] netlink: 'syz.2.26003': attribute type 4 has an invalid length. [ 2053.950295][ T4073] netlink: 'syz.2.26003': attribute type 4 has an invalid length. [ 2054.387905][ T4101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26016'. [ 2054.413698][ T4103] fuse: Bad value for 'user_id' [ 2054.418583][ T4103] fuse: Bad value for 'user_id' [ 2054.467899][ T4105] syzkaller0: entered promiscuous mode [ 2054.500036][ T4105] syzkaller0: entered allmulticast mode [ 2054.675300][T21136] usb 1-1: USB disconnect, device number 87 [ 2054.943732][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26028'. [ 2055.304512][ T4140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2058.982884][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26053'. [ 2059.231433][ T4320] netlink: 'syz.5.26064': attribute type 10 has an invalid length. [ 2059.472868][ T4320] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2059.758753][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2059.758770][ T30] audit: type=1326 audit(1763109331.984:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2059.850548][ T30] audit: type=1326 audit(1763109332.024:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2059.894053][ T30] audit: type=1326 audit(1763109332.024:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2059.981596][ T30] audit: type=1326 audit(1763109332.024:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.057450][ T30] audit: type=1326 audit(1763109332.024:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.122823][ T30] audit: type=1326 audit(1763109332.024:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.219283][ T30] audit: type=1326 audit(1763109332.024:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.251478][ T30] audit: type=1326 audit(1763109332.024:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.291212][ T30] audit: type=1326 audit(1763109332.024:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.417719][ T30] audit: type=1326 audit(1763109332.024:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.5.26074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x7ffc0000 [ 2060.719519][ T4367] binder: 4365:4367 ioctl 4018620d 0 returned -22 [ 2066.457368][ T4624] syzkaller0: entered promiscuous mode [ 2066.519510][ T4624] syzkaller0: entered allmulticast mode [ 2066.608233][T21136] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2066.811282][T21136] usb 3-1: Using ep0 maxpacket: 8 [ 2066.825640][T21136] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2066.839324][T21136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.847335][T21136] usb 3-1: Product: syz [ 2066.852054][T21136] usb 3-1: Manufacturer: syz [ 2066.856898][T21136] usb 3-1: SerialNumber: syz [ 2066.870930][T21136] usb 3-1: config 0 descriptor?? [ 2066.880968][T21136] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2066.985333][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26154'. [ 2067.006158][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.7.26154'. [ 2067.016698][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26154'. [ 2067.391070][T21136] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2067.403125][T21136] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2067.467556][T21136] usb 3-1: USB disconnect, device number 63 [ 2068.181158][ T5945] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2068.359053][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 2068.368385][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2068.380823][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2068.403907][ T5945] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2068.413461][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.427275][ T5945] usb 6-1: Product: syz [ 2068.438507][ T5945] usb 6-1: Manufacturer: syz [ 2068.451073][ T5945] usb 6-1: SerialNumber: syz [ 2068.483929][ T5945] usb 6-1: config 0 descriptor?? [ 2068.504058][ T5945] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2068.514018][ T5945] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2068.940635][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26179'. [ 2069.118250][ T5945] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2069.131080][ T5945] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2070.189611][ T5945] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 2070.239490][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 2070.402809][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 2070.451468][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 2070.461331][ T5945] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 2070.623915][ T4710] binder: 4709:4710 ioctl c0306201 0 returned -14 [ 2071.086839][ T5945] usb 6-1: USB disconnect, device number 60 [ 2072.955852][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26234'. [ 2072.968842][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26234'. [ 2072.980906][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26234'. [ 2074.107021][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26259'. [ 2074.116685][ T5945] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2074.125021][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26259'. [ 2074.139047][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26259'. [ 2074.291909][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 2074.302950][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2074.306991][ T4977] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2074.327037][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2074.339581][ T4977] bond0: (slave lo): Error: Device can not be enslaved while up [ 2074.360768][ T5945] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2074.379015][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.388323][ T5945] usb 1-1: Product: syz [ 2074.392796][ T5945] usb 1-1: Manufacturer: syz [ 2074.397688][ T5945] usb 1-1: SerialNumber: syz [ 2074.414512][ T5945] usb 1-1: config 0 descriptor?? [ 2074.431705][ T5945] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2074.464305][ T5945] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2074.717296][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26273'. [ 2074.732020][ T4991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26273'. [ 2074.746233][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26273'. [ 2075.048184][ T5945] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2075.056370][ T5945] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 2075.723451][ T5945] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 2075.735606][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 2075.756425][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 2075.766373][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 2075.789645][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 2075.802665][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 2076.802492][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 2076.808864][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 2076.836104][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 2076.843371][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 2076.852751][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 2076.866572][ T5945] usb 1-1: USB disconnect, device number 88 [ 2078.146930][ T5088] batadv_slave_1: entered promiscuous mode [ 2078.188628][ T5087] batadv_slave_1: left promiscuous mode [ 2078.782158][ T5125] tipc: Enabled bearer , priority 0 [ 2078.822529][ T5125] tipc: Resetting bearer [ 2082.896014][ T5298] binder: 5287:5298 ioctl 400c620e 0 returned -14 [ 2084.376828][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26407'. [ 2084.674844][ T5420] kvm: pic: non byte read [ 2084.692231][ T5420] kvm: pic: non byte read [ 2084.696779][ T5420] kvm: pic: non byte read [ 2084.713366][ T5420] kvm: pic: non byte read [ 2084.717908][ T5420] kvm: pic: non byte read [ 2084.745893][ T5420] kvm: pic: non byte read [ 2084.770115][ T5420] kvm: pic: non byte read [ 2084.780896][ T5420] kvm: pic: non byte read [ 2084.795425][ T5420] kvm: pic: non byte read [ 2084.801115][ T5420] kvm: pic: non byte read [ 2085.565355][ T5472] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2085.571891][ T5472] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2085.595893][ T5472] vhci_hcd vhci_hcd.0: Device attached [ 2085.799056][T21136] vhci_hcd: vhci_device speed not set [ 2085.860694][T21136] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 2086.239728][ T5473] vhci_hcd: connection reset by peer [ 2086.257472][T11490] vhci_hcd: stop threads [ 2086.265182][T11490] vhci_hcd: release socket [ 2086.275377][T11490] vhci_hcd: disconnect device [ 2088.489777][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26467'. [ 2091.019827][T21136] vhci_hcd: vhci_device speed not set [ 2091.202834][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26516'. [ 2091.378574][ T5678] netlink: 'syz.0.26518': attribute type 4 has an invalid length. [ 2091.433092][ T5681] netlink: 'syz.0.26518': attribute type 4 has an invalid length. [ 2093.424213][ T5770] tipc: Enabled bearer , priority 0 [ 2093.446510][ T5770] syzkaller0: entered promiscuous mode [ 2093.452922][ T5770] syzkaller0: entered allmulticast mode [ 2093.582313][ T5781] tipc: Resetting bearer [ 2093.591454][ T5768] tipc: Resetting bearer [ 2093.638503][ T5768] tipc: Disabling bearer [ 2094.054245][ T5792] input: syz1 as /devices/virtual/input/input136 [ 2094.450272][ T5797] syzkaller0: left promiscuous mode [ 2094.455613][ T5797] syzkaller0: left allmulticast mode [ 2095.155255][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26580'. [ 2097.084642][ T5875] binder: 5872:5875 ioctl c0306201 2000000001c0 returned -14 [ 2098.109453][T21136] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2098.754746][ T5915] syzkaller0: entered promiscuous mode [ 2098.769223][ T5915] syzkaller0: entered allmulticast mode [ 2098.905420][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.912818][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.927156][ T6161] tipc: Enabled bearer , priority 0 [ 2100.938547][ T6161] syzkaller0: entered promiscuous mode [ 2100.944492][ T6161] syzkaller0: entered allmulticast mode [ 2101.014980][ T6161] tipc: Resetting bearer [ 2101.026606][ T6161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2101.046832][ T6142] tipc: Resetting bearer [ 2101.062051][ T6167] netlink: 'syz.2.26641': attribute type 6 has an invalid length. [ 2101.095895][ T6142] tipc: Disabling bearer [ 2101.973694][ T6210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2103.205076][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26678'. [ 2105.155021][ T6292] syzkaller0: left promiscuous mode [ 2105.168502][ T6292] syzkaller0: left allmulticast mode [ 2110.433651][ T6533] binder: 6532:6533 ioctl c0306201 0 returned -14 [ 2110.616507][ T6531] kvm: kvm [6530]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc1) = 0x1 [ 2110.644835][ T6531] kvm: kvm [6530]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc2) = 0x1 [ 2110.724609][ T6531] kvm: kvm [6530]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2110.759204][ T6531] kvm: kvm [6530]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x11e) = 0x1 [ 2110.818249][ T6531] kvm: kvm [6530]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x186) = 0x1 [ 2110.871317][ T6531] kvm: kvm [6530]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x187) = 0x1 [ 2110.908403][ T6531] kvm_intel: kvm [6530]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x1d9) = 0x1 [ 2112.187601][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26778'. [ 2112.209111][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26778'. [ 2112.234378][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26778'. [ 2113.411376][ T6718] tipc: Enabled bearer , priority 0 [ 2113.433294][ T6718] tipc: Resetting bearer [ 2114.088748][ T6712] tipc: Disabling bearer [ 2114.187245][ T6716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2114.195013][ T6716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2114.205491][ T6716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2114.803733][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.26816'. [ 2114.834110][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26816'. [ 2114.864856][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26816'. [ 2114.985899][ T6786] tipc: Enabled bearer , priority 0 [ 2115.018660][ T6786] syzkaller0: entered promiscuous mode [ 2115.041487][ T6786] syzkaller0: entered allmulticast mode [ 2115.164501][ T6786] tipc: Resetting bearer [ 2115.208067][ T6783] tipc: Resetting bearer [ 2115.272305][ T6801] input: syz0 as /devices/virtual/input/input137 [ 2115.280718][ T6783] tipc: Disabling bearer [ 2115.459240][T10105] Bluetooth: hci3: command 0x0c1a tx timeout [ 2115.865013][ C0] hrtimer: interrupt took 24770 ns [ 2116.259873][ T2672] Bluetooth: hci1: command 0x0c1a tx timeout [ 2116.265968][T10105] Bluetooth: hci0: command 0x0406 tx timeout [ 2118.483497][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2118.593335][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.078963][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.099186][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.159214][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.271209][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.303741][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.346093][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.364453][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.388952][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: unknown main item tag 0x0 [ 2119.483587][ T5945] hid-generic 0000:36D2AA00:40E31EDF.0048: hidraw0: HID v861414.21 Device [syz1] on [ 2119.797648][ T7033] fido_id[7033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2119.827355][ T7063] tipc: Enabled bearer , priority 0 [ 2119.871853][ T7063] syzkaller0: entered promiscuous mode [ 2119.897861][ T7063] syzkaller0: entered allmulticast mode [ 2120.061027][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26882'. [ 2120.115625][ T7148] tipc: Resetting bearer [ 2120.128635][ T7054] tipc: Resetting bearer [ 2120.163500][ T7054] tipc: Disabling bearer [ 2120.319213][ T7151] syzkaller0: entered promiscuous mode [ 2120.329214][ T7151] syzkaller0: entered allmulticast mode [ 2120.671761][ T7167] tipc: Enabling of bearer rejected, already enabled [ 2120.681574][ T7167] syzkaller0: entered promiscuous mode [ 2120.688534][ T7167] syzkaller0: entered allmulticast mode [ 2120.896944][ T7178] tipc: Enabling of bearer rejected, already enabled [ 2120.905524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.917996][ T7178] syzkaller0: entered promiscuous mode [ 2120.924402][ T7178] syzkaller0: entered allmulticast mode [ 2121.358981][ T5945] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2121.519056][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 2121.525639][ T5945] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2121.536314][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2121.547836][ T5945] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2121.557534][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.565606][ T5945] usb 6-1: Product: syz [ 2121.569797][ T5945] usb 6-1: Manufacturer: syz [ 2121.574371][ T5945] usb 6-1: SerialNumber: syz [ 2121.786869][ T5945] usb 6-1: 0:2 : does not exist [ 2121.802078][ T5945] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2121.831529][ T5945] usb 6-1: USB disconnect, device number 61 [ 2121.875639][T22067] udevd[22067]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2121.876865][ T7204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26908'. [ 2122.205342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.214519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.222682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.230808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.238964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.247052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.350627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.358845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.367011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.137515][ T7339] tipc: Enabling of bearer rejected, already enabled [ 2126.520538][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26976'. [ 2126.600546][ C1] net_ratelimit: 3 callbacks suppressed [ 2126.600565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.614274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.622510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.630666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.638774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.646902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.655036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.139146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.148437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.156713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.919427][ T7493] tipc: Enabling of bearer rejected, already enabled [ 2127.959706][ T7493] netlink: 44 bytes leftover after parsing attributes in process `syz.5.26987'. [ 2129.482744][ T7531] picdev_read: 5 callbacks suppressed [ 2129.482761][ T7531] kvm: pic: non byte read [ 2129.497631][ T7531] kvm: pic: non byte read [ 2129.502666][ T7531] kvm: pic: single mode not supported [ 2129.502684][ T7531] kvm: pic: level sensitive irq not supported [ 2129.508238][ T7531] kvm: pic: non byte read [ 2129.523805][ T7531] kvm: pic: single mode not supported [ 2129.523870][ T7531] kvm: pic: non byte read [ 2129.535118][ T7531] kvm: pic: non byte read [ 2129.540384][ T7531] kvm: pic: non byte read [ 2129.545118][ T7531] kvm: pic: single mode not supported [ 2129.545134][ T7531] kvm: pic: level sensitive irq not supported [ 2129.549087][T21136] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2129.565241][ T7531] kvm: pic: non byte read [ 2129.571897][ T7531] kvm: pic: single mode not supported [ 2129.571961][ T7531] kvm: pic: non byte read [ 2129.589211][ T7531] kvm: pic: non byte read [ 2129.742291][T21136] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.759458][T21136] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2129.771538][T21136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.807529][T21136] usb 3-1: config 0 descriptor?? [ 2129.818443][T21136] pwc: Askey VC010 type 2 USB webcam detected. [ 2130.254109][T21136] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2130.262409][T21136] pwc: recv_control_msg error -32 req 02 val 2700 [ 2130.281940][T21136] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2130.289441][T21136] pwc: recv_control_msg error -32 req 04 val 1000 [ 2130.300162][T21136] pwc: recv_control_msg error -32 req 04 val 1300 [ 2130.317852][T21136] pwc: recv_control_msg error -32 req 04 val 1400 [ 2130.326199][T21136] pwc: recv_control_msg error -32 req 02 val 2000 [ 2130.339841][T21136] pwc: recv_control_msg error -32 req 02 val 2100 [ 2130.354654][T21136] pwc: recv_control_msg error -32 req 04 val 1500 [ 2130.370247][T21136] pwc: recv_control_msg error -32 req 02 val 2500 [ 2130.469600][T21136] pwc: recv_control_msg error -32 req 02 val 2400 [ 2130.491365][T21136] pwc: recv_control_msg error -32 req 02 val 2600 [ 2130.511755][T21136] pwc: recv_control_msg error -32 req 02 val 2900 [ 2130.750436][T21136] pwc: recv_control_msg error -71 req 04 val 1100 [ 2130.758575][T21136] pwc: recv_control_msg error -71 req 04 val 1200 [ 2130.769733][T21136] pwc: Registered as video103. [ 2130.778431][T21136] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input138 [ 2130.807962][T21136] usb 3-1: USB disconnect, device number 65 [ 2132.928676][ T7608] tipc: Enabled bearer , priority 0 [ 2132.945378][ T7611] syzkaller0: entered promiscuous mode [ 2132.951143][ T7611] syzkaller0: entered allmulticast mode [ 2133.037585][ T7601] tipc: Resetting bearer [ 2133.043982][ T7601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.053011][ T7601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.125678][ T7600] tipc: Resetting bearer [ 2133.159717][ T7600] tipc: Disabling bearer [ 2133.310284][ T7620] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 2133.405956][ T7620] kvm: pic: level sensitive irq not supported [ 2133.406010][ T7620] kvm: pic: non byte read [ 2133.439263][ T7620] kvm: pic: level sensitive irq not supported [ 2133.439482][ T7620] kvm: pic: level sensitive irq not supported [ 2135.319610][ T7780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 2136.201875][ T5945] hid_parser_main: 1014 callbacks suppressed [ 2136.201896][ T5945] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2136.323739][ T5945] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2136.970053][ T7920] openvswitch: netlink: Flow key attr not present in new flow. [ 2136.981391][ T7920] ip6tnl0: Caught tx_queue_len zero misconfig [ 2139.022910][ T8159] netlink: 32 bytes leftover after parsing attributes in process `syz.7.27095'. [ 2139.535898][ T8175] tipc: Enabling of bearer rejected, already enabled [ 2140.170725][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27117'. [ 2140.209134][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27117'. [ 2144.140532][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27163'. [ 2145.026467][ T8758] netlink: 'syz.5.27177': attribute type 27 has an invalid length. [ 2147.143222][ T9021] netlink: 'syz.0.27201': attribute type 4 has an invalid length. [ 2147.509849][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27208'. [ 2147.548108][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27212'. [ 2147.772477][ T9053] binder: BINDER_SET_CONTEXT_MGR already set [ 2147.778497][ T9053] binder: 9052:9053 ioctl 4018620d 200000004a80 returned -16 [ 2148.132198][ T9173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2148.148415][ T9173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2148.588626][ T9183] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 2153.349829][ T9485] tipc: Enabling of bearer rejected, already enabled [ 2153.391344][ T9485] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27269'. [ 2153.727320][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27273'. [ 2153.737062][ T9495] caif0: left allmulticast mode [ 2153.831863][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27275'. [ 2155.268340][ T9638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.27292'. [ 2155.279767][ T9638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27292'. [ 2157.966940][ T9712] tipc: Failed to remove unknown binding: 66,1,1/4294967290:2631264902/2631264904 [ 2158.042146][ T9717] tipc: Failed to remove unknown binding: 66,1,1/4294967290:2631264902/2631264904 [ 2158.061620][ T9717] tipc: Failed to remove unknown binding: 66,1,1/4294967290:2631264902/2631264904 [ 2158.849485][T21136] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2159.010430][T21136] usb 3-1: Using ep0 maxpacket: 8 [ 2159.038832][T21136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.070504][T21136] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 2159.092268][T21136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.105805][T21136] usb 3-1: config 0 descriptor?? [ 2159.370202][T21136] usbhid 3-1:0.0: can't add hid device: -71 [ 2159.387639][T21136] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2159.410044][T21136] usb 3-1: USB disconnect, device number 66 [ 2160.061131][ T9790] tipc: Enabling of bearer rejected, already enabled [ 2160.351662][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.357992][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.187870][ T9847] syzkaller0: entered promiscuous mode [ 2161.193639][ T9847] syzkaller0: entered allmulticast mode [ 2161.789173][ T9977] team0: Device gtp0 is of different type [ 2163.247414][T10116] tipc: Enabled bearer , priority 0 [ 2163.274098][T10116] syzkaller0: entered promiscuous mode [ 2163.293455][T10116] syzkaller0: entered allmulticast mode [ 2163.412989][T10116] tipc: Resetting bearer [ 2163.434804][T10114] tipc: Resetting bearer [ 2163.498680][T10114] tipc: Disabling bearer [ 2163.894720][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27423'. [ 2163.958038][T10244] netlink: 'syz.2.27425': attribute type 1 has an invalid length. [ 2164.148244][T10244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2164.178459][T10244] bond3: (slave bond4): making interface the new active one [ 2164.200718][T10244] bond3: (slave bond4): Enslaving as an active interface with an up link [ 2164.242151][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27425'. [ 2164.285099][T10251] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 2164.296777][T10254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2164.638034][T10238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2164.645047][T10238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2164.652268][T10275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27433'. [ 2164.670355][T10238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2164.969411][T21136] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2165.181659][T21136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.195048][T21136] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2165.226497][T21136] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2165.249256][T21136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2165.271010][T21136] usb 3-1: SerialNumber: syz [ 2165.774551][T21136] usb 3-1: 0:2 : does not exist [ 2165.791796][T21136] usb 3-1: unit 255 not found! [ 2165.869465][T21136] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2165.939301][T10105] Bluetooth: hci3: command 0x0c1a tx timeout [ 2165.947022][T21136] usb 3-1: USB disconnect, device number 67 [ 2166.074378][T22067] udevd[22067]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2166.659447][T10105] Bluetooth: hci1: command 0x0c1a tx timeout [ 2166.739580][T10105] Bluetooth: hci0: command 0x0406 tx timeout [ 2167.963900][T10363] binder: 10362:10363 ioctl 4018620d 0 returned -22 [ 2171.640479][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27506'. [ 2178.105075][T11204] 0: reclassify loop, rule prio 0, protocol 800 [ 2178.666180][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27582'. [ 2178.926903][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27584'. [ 2178.979745][T11227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27584'. [ 2179.714942][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27595'. [ 2181.803434][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2181.803451][ T30] audit: type=1326 audit(1763109454.034:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2181.917715][ T30] audit: type=1326 audit(1763109454.034:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2181.937698][T11427] netlink: 52 bytes leftover after parsing attributes in process `syz.4.27628'. [ 2182.013048][ T30] audit: type=1326 audit(1763109454.034:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.081029][ T30] audit: type=1326 audit(1763109454.034:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.138683][ T30] audit: type=1326 audit(1763109454.034:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.171646][ T30] audit: type=1326 audit(1763109454.034:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.248099][ T30] audit: type=1326 audit(1763109454.034:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.277782][ T30] audit: type=1326 audit(1763109454.034:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.309672][T11439] batadv_slave_1: entered promiscuous mode [ 2182.318358][T11438] batadv_slave_1: left promiscuous mode [ 2182.350644][ T30] audit: type=1326 audit(1763109454.034:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2182.393340][ T30] audit: type=1326 audit(1763109454.034:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.4.27626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6feb8f6c9 code=0x7ffc0000 [ 2184.485485][T11651] all (unregistering): Released all slaves [ 2185.913860][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27711'. [ 2186.015089][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27713'. [ 2186.309916][T21136] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2186.474367][T21136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2186.503802][T21136] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2186.537619][T21136] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2186.565235][T21136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2186.591527][T21136] usb 3-1: SerialNumber: syz [ 2186.817577][T21136] usb 3-1: 0:2 : does not exist [ 2186.833962][T21136] usb 3-1: unit 255 not found! [ 2186.864505][T21136] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2186.930025][T21136] usb 3-1: USB disconnect, device number 68 [ 2187.028212][T22067] udevd[22067]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2187.089197][T11748] netlink: 'syz.0.27729': attribute type 6 has an invalid length. [ 2188.649642][T21136] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2188.819529][T21136] usb 6-1: Using ep0 maxpacket: 8 [ 2188.832348][T21136] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2188.842865][T21136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.917735][T21136] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2189.184052][T21136] pvrusb2: ********** [ 2189.194410][T21136] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2189.206060][T21136] pvrusb2: Important functionality might not be entirely working. [ 2189.234988][T21136] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2189.263200][T21136] pvrusb2: ********** [ 2190.105248][ T2345] pvrusb2: Invalid write control endpoint [ 2190.108400][T21136] usb 6-1: USB disconnect, device number 62 [ 2190.391611][ T2345] pvrusb2: Invalid write control endpoint [ 2190.442169][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2190.475170][T12040] tipc: Enabled bearer , priority 0 [ 2190.510265][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2190.518321][T12040] syzkaller0: entered promiscuous mode [ 2190.529156][T12040] syzkaller0: entered allmulticast mode [ 2190.542282][T12040] tipc: Resetting bearer [ 2190.548526][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2190.589427][ T2345] pvrusb2: Device being rendered inoperable [ 2190.590747][T12039] tipc: Resetting bearer [ 2190.609806][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2190.624375][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2190.658067][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2190.665717][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2190.678328][T12039] tipc: Disabling bearer [ 2190.691129][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2195.190197][T12430] binder: 12427:12430 unknown command 0 [ 2195.218244][T12430] binder: 12427:12430 ioctl c0306201 200000000080 returned -22 [ 2195.287212][T12430] binder: 12427:12430 ioctl c0306201 200000000300 returned -11 [ 2195.875905][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27859'. [ 2196.127593][T12532] binder: 12531:12532 ioctl c0306201 0 returned -14 [ 2196.899107][ T5897] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2197.083405][ T5897] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2197.127972][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.153276][ T5897] usb 6-1: Product: syz [ 2197.164150][ T5897] usb 6-1: Manufacturer: syz [ 2197.176061][ T5897] usb 6-1: SerialNumber: syz [ 2197.210813][ T5897] usb 6-1: config 0 descriptor?? [ 2197.873678][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.884152][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.953166][ T5897] mos7840 6-1:0.0: required endpoints missing [ 2197.970503][ T5897] usb 6-1: USB disconnect, device number 63 [ 2198.552549][T12725] netlink: 'syz.0.27890': attribute type 3 has an invalid length. [ 2198.589343][T12725] netlink: 52 bytes leftover after parsing attributes in process `syz.0.27890'. [ 2203.020291][T13012] netlink: 'syz.0.27926': attribute type 1 has an invalid length. [ 2203.174279][T13012] bond0: entered promiscuous mode [ 2203.210473][T13012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2205.678085][T13169] batadv_slave_1: entered promiscuous mode [ 2205.689933][T13168] batadv_slave_1: left promiscuous mode [ 2209.731441][T13915] tipc: Enabling of bearer rejected, already enabled [ 2218.407394][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28112'. [ 2219.245526][T14511] loop5: detected capacity change from 0 to 7 [ 2219.268362][T14512] binder: 14506:14512 ioctl c0306201 200000000180 returned -14 [ 2219.588309][T14511] Dev loop5: unable to read RDB block 7 [ 2219.596347][T14511] loop5: unable to read partition table [ 2219.603055][T14511] loop5: partition table beyond EOD, truncated [ 2219.612883][T14511] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 2219.923986][ T5202] Dev loop5: unable to read RDB block 7 [ 2219.939213][ T5202] loop5: unable to read partition table [ 2219.955408][ T5202] loop5: partition table beyond EOD, truncated [ 2220.249177][ T5945] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2220.420852][ T5945] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2220.448929][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.461238][ T5945] usb 3-1: config 0 descriptor?? [ 2221.117648][T14748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 2221.879637][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.886006][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.651014][ T5945] pegasus 3-1:0.0: setup Pegasus II specific registers [ 2222.782214][ T5945] pegasus 3-1:0.0: can't locate MII phy, using default [ 2222.816770][ T5945] pegasus 3-1:0.0: eth21, ELECOM USB Ethernet LD-USB20, 5e:cf:27:00:d1:33 [ 2222.831648][ T5945] usb 3-1: USB disconnect, device number 69 [ 2223.395302][T14900] tipc: Enabled bearer , priority 10 [ 2224.632355][T15022] all (unregistering): Released all slaves [ 2228.803989][T15543] netlink: 'syz.4.28222': attribute type 17 has an invalid length. [ 2229.785522][T15581] picdev_read: 2 callbacks suppressed [ 2229.785541][T15581] kvm: pic: non byte read [ 2229.830159][T15581] kvm: pic: non byte read [ 2229.842046][T15581] kvm: pic: single mode not supported [ 2229.842065][T15581] kvm: pic: level sensitive irq not supported [ 2229.872672][T15581] kvm: pic: non byte read [ 2229.906681][T15581] kvm: pic: single mode not supported [ 2229.906749][T15581] kvm: pic: non byte read [ 2229.929936][T15581] kvm: pic: non byte read [ 2229.941738][T15581] kvm: pic: non byte read [ 2229.956524][T15581] kvm: pic: single mode not supported [ 2229.956546][T15581] kvm: pic: level sensitive irq not supported [ 2229.965071][T15581] kvm: pic: non byte read [ 2229.988159][T15581] kvm: pic: single mode not supported [ 2229.988316][T15581] kvm: pic: non byte read [ 2230.001689][T15581] kvm: pic: non byte read [ 2231.658274][T15754] netlink: 'syz.0.28274': attribute type 1 has an invalid length. [ 2232.421825][T15885] batadv_slave_0: entered allmulticast mode [ 2232.746337][T15898] binder: 15894:15898 ioctl c0306201 0 returned -14 [ 2234.053812][ T5945] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2234.157021][T15963] binder: 15960:15963 ioctl c0306201 0 returned -14 [ 2234.249220][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 2234.256672][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2234.296698][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2234.326729][ T5945] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2234.337461][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.350525][ T5945] usb 1-1: Product: syz [ 2234.354712][ T5945] usb 1-1: Manufacturer: syz [ 2234.366370][ T5945] usb 1-1: SerialNumber: syz [ 2234.383069][ T5945] usb 1-1: config 0 descriptor?? [ 2234.393398][ T5945] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2234.446391][ T5945] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2235.030503][ T5945] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2235.051121][ T5945] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 2235.783968][ T5945] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 2235.794352][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 2235.869198][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 2235.899614][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 2235.920917][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 2235.950356][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 2235.996172][T16009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.28337'. [ 2236.088661][T16009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.28337'. [ 2236.412914][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 2236.420303][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 2236.426625][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 2236.448892][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 2236.476318][ T5945] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 2236.519247][ T5945] usb 1-1: USB disconnect, device number 89 [ 2242.865337][T16392] netlink: 'syz.7.28416': attribute type 4 has an invalid length. [ 2242.893631][T16392] netlink: 'syz.7.28416': attribute type 4 has an invalid length. [ 2244.093122][T16449] binder: 16448:16449 ioctl c0306201 2000000001c0 returned -14 [ 2244.141617][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28440'. [ 2247.024702][T16725] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2248.789747][T16754] binder: 16753:16754 ioctl c0306201 0 returned -14 [ 2250.611509][ T5838] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2250.791193][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 2250.801427][ T5838] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2250.833584][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.863524][ T5945] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2251.457743][ T5838] usb 3-1: Product: syz [ 2251.467464][ T5838] usb 3-1: Manufacturer: syz [ 2251.480730][ T5838] usb 3-1: SerialNumber: syz [ 2251.632250][ T5838] usb 3-1: config 0 descriptor?? [ 2251.640851][ T5945] usb 6-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 2251.651997][ T5945] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.675766][ T5838] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2251.809683][ T5945] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.843794][ T5945] usb 6-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 2251.899354][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2251.905997][ T5945] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 2251.936417][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.985688][ T5945] usb 6-1: config 0 descriptor?? [ 2252.289471][ T5838] gspca_ov534_9: reg_w failed -71 [ 2252.579564][ T5838] gspca_ov534_9: Unknown sensor 0000 [ 2252.579660][ T5838] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2252.604115][ T5838] usb 3-1: USB disconnect, device number 70 [ 2252.830154][ T5945] uclogic 0003:5543:004D.004A: failed retrieving Huion firmware version: -71 [ 2252.858150][ T5945] uclogic 0003:5543:004D.004A: failed probing parameters: -71 [ 2252.870218][ T5945] uclogic 0003:5543:004D.004A: probe with driver uclogic failed with error -71 [ 2252.885020][ T5945] usb 6-1: USB disconnect, device number 64 [ 2253.768540][T17127] kvm: kvm [17093]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 2253.811303][T17127] kvm: kvm [17093]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x20 [ 2253.854550][T17127] kvm: kvm [17093]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2253.864195][T17127] kvm: kvm [17093]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2253.979690][ T5838] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2254.139382][ T5838] usb 6-1: Using ep0 maxpacket: 8 [ 2254.151347][ T5838] usb 6-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 2254.176711][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.195645][ T5838] usb 6-1: Product: syz [ 2254.202089][ T5838] usb 6-1: Manufacturer: syz [ 2254.206877][ T5838] usb 6-1: SerialNumber: syz [ 2254.220612][ T5838] usb 6-1: config 0 descriptor?? [ 2254.234096][ T5838] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 2254.504592][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28545'. [ 2254.551757][T17198] bond_slave_1: entered promiscuous mode [ 2254.558406][T17198] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 2254.594516][T17198] macvtap1: entered promiscuous mode [ 2254.625606][T17198] bond0: entered promiscuous mode [ 2254.655029][T17198] bond_slave_0: entered promiscuous mode [ 2254.714652][T17198] macvtap1: entered allmulticast mode [ 2254.738712][T17198] bond0: entered allmulticast mode [ 2254.759482][T17198] bond_slave_0: entered allmulticast mode [ 2254.798329][T17198] bond_slave_1: entered allmulticast mode [ 2254.818584][T17198] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 2254.839826][T17198] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2254.882117][T17325] bond0: left allmulticast mode [ 2254.887226][T17325] bond_slave_0: left allmulticast mode [ 2254.893448][T17325] bond_slave_1: left allmulticast mode [ 2254.900158][T17325] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 2254.917353][T17325] bond0: left promiscuous mode [ 2254.928467][T17325] bond_slave_0: left promiscuous mode [ 2254.939561][T17325] bond_slave_1: left promiscuous mode [ 2254.946120][T17325] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 2255.151362][T21136] usb 6-1: USB disconnect, device number 65 [ 2255.463881][T17355] netlink: 'syz.0.28570': attribute type 3 has an invalid length. [ 2255.999397][T21136] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2256.161340][T21136] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.172213][T21136] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2256.181800][T21136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.193183][T21136] usb 6-1: config 0 descriptor?? [ 2256.207715][T21136] pwc: Askey VC010 type 2 USB webcam detected. [ 2256.613221][T21136] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2256.630129][T21136] pwc: recv_control_msg error -32 req 02 val 2700 [ 2256.652227][T21136] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2256.670575][T21136] pwc: recv_control_msg error -32 req 04 val 1000 [ 2256.684860][T21136] pwc: recv_control_msg error -32 req 04 val 1300 [ 2256.694559][T21136] pwc: recv_control_msg error -32 req 04 val 1400 [ 2256.709449][T21136] pwc: recv_control_msg error -32 req 02 val 2000 [ 2256.716578][T21136] pwc: recv_control_msg error -32 req 02 val 2100 [ 2256.736948][T21136] pwc: recv_control_msg error -32 req 04 val 1500 [ 2256.754635][T21136] pwc: recv_control_msg error -32 req 02 val 2500 [ 2256.779958][T21136] pwc: recv_control_msg error -32 req 02 val 2400 [ 2256.787002][T21136] pwc: recv_control_msg error -32 req 02 val 2600 [ 2256.800190][T21136] pwc: recv_control_msg error -32 req 02 val 2900 [ 2256.807221][T21136] pwc: recv_control_msg error -32 req 02 val 2800 [ 2256.884211][T17607] tipc: Enabled bearer , priority 0 [ 2256.894068][T17607] syzkaller0: entered promiscuous mode [ 2256.901245][T17607] syzkaller0: entered allmulticast mode [ 2256.933140][T17607] tipc: Resetting bearer [ 2256.943101][T17606] tipc: Resetting bearer [ 2256.965159][T17606] tipc: Disabling bearer [ 2257.021490][T21136] pwc: recv_control_msg error -71 req 04 val 1200 [ 2257.032885][T21136] pwc: Registered as video103. [ 2257.049561][T21136] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input140 [ 2257.087842][T21136] usb 6-1: USB disconnect, device number 66 [ 2257.730777][T21136] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2257.909436][T21136] usb 3-1: Using ep0 maxpacket: 8 [ 2257.935891][T21136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2257.947494][T21136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2257.977533][T21136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2258.035743][T21136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2258.110177][T21136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2258.137492][T21136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.397063][T21136] usb 3-1: GET_CAPABILITIES returned 0 [ 2258.451525][T21136] usbtmc 3-1:16.0: can't read capabilities [ 2259.173890][T17764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28619'. [ 2260.124807][T17899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 2260.166546][T17899] kvm: pic: level sensitive irq not supported [ 2260.166622][T17899] kvm: pic: non byte read [ 2260.193429][T17899] kvm: pic: level sensitive irq not supported [ 2260.193497][T17899] kvm: pic: non byte read [ 2260.209446][T17899] kvm: pic: level sensitive irq not supported [ 2260.209528][T17899] kvm: pic: non byte read [ 2260.386278][T17906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 2260.429201][ T5945] usb 3-1: USB disconnect, device number 71 [ 2260.484721][T17907] kvm: pic: level sensitive irq not supported [ 2260.484794][T17907] kvm: pic: non byte read [ 2260.520569][T17907] kvm: pic: level sensitive irq not supported [ 2260.520637][T17907] kvm: pic: non byte read [ 2260.563741][T17907] kvm: pic: level sensitive irq not supported [ 2260.563810][T17907] kvm: pic: non byte read [ 2261.260976][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2261.260994][ T30] audit: type=1326 audit(1763109533.494:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17941 comm="syz.5.28656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f301518f6c9 code=0x0 [ 2261.629288][T17967] netlink: 'syz.0.28666': attribute type 1 has an invalid length. [ 2261.691091][T17967] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2263.163163][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28686'. [ 2263.185590][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28686'. [ 2263.472714][T18331] binder: 18330:18331 ioctl 4018620d 0 returned -22 [ 2263.503884][T18331] binder: 18330:18331 ioctl c0306201 0 returned -14 [ 2268.210857][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.28734'. [ 2268.233653][T18442] kvm: pic: non byte read [ 2268.238331][T18442] kvm: pic: non byte read [ 2268.244274][T18442] kvm: pic: single mode not supported [ 2268.244293][T18442] kvm: pic: level sensitive irq not supported [ 2268.257208][T18442] kvm: pic: non byte read [ 2268.280701][T18442] kvm: pic: single mode not supported [ 2268.280766][T18442] kvm: pic: non byte read [ 2268.308299][T18442] kvm: pic: non byte read [ 2268.315120][T18442] kvm: pic: non byte read [ 2268.323030][T18442] kvm: pic: single mode not supported [ 2268.323048][T18442] kvm: pic: level sensitive irq not supported [ 2268.337199][T18442] kvm: pic: non byte read [ 2268.354848][T18442] kvm: pic: single mode not supported [ 2268.354912][T18442] kvm: pic: non byte read [ 2268.368199][T18442] kvm: pic: non byte read [ 2268.985668][T18469] syzkaller0: left promiscuous mode [ 2268.991634][T18469] syzkaller0: left allmulticast mode [ 2269.173860][T18474] ip6tnl1: entered promiscuous mode [ 2269.228305][T18474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28754'. [ 2269.242570][T18478] syzkaller0: entered promiscuous mode [ 2269.248070][T18478] syzkaller0: entered allmulticast mode [ 2272.119303][ T5897] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2272.280764][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 2272.292782][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 2272.307799][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.333356][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2272.367534][ T5897] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 2272.396528][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.447760][ T5897] usb 6-1: config 0 descriptor?? [ 2272.886492][ T5897] hid-alps 0003:044E:120C.004B: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 2273.650188][T18768] binder_alloc: 18767: binder_alloc_buf, no vma [ 2273.668017][ T5897] usb 6-1: USB disconnect, device number 67 [ 2273.868391][T19033] netlink: 96 bytes leftover after parsing attributes in process `syz.7.28820'. [ 2275.413723][T19175] misc userio: Begin command sent, but we're already running [ 2275.452024][T19175] misc userio: Begin command sent, but we're already running [ 2275.624865][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.28845'. [ 2275.711225][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.28845'. [ 2275.844687][T19192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28847'. [ 2275.898477][T19192] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2281.953888][T19663] syzkaller0: entered promiscuous mode [ 2281.969415][T19663] syzkaller0: entered allmulticast mode [ 2282.516745][T19684] syzkaller0: left promiscuous mode [ 2282.547775][T19684] syzkaller0: left allmulticast mode [ 2283.224025][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.230538][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2286.149657][T19780] cgroup: fork rejected by pids controller in /syz7 [ 2287.167627][T19900] team0 (unregistering): Port device team_slave_0 removed [ 2287.204130][T19900] team0 (unregistering): Port device team_slave_1 removed [ 2287.247043][T19900] team0 (unregistering): Port device geneve0 removed [ 2287.258404][T20012] input: syz1 as /devices/virtual/input/input142 [ 2290.764322][T20256] syzkaller0: entered promiscuous mode [ 2290.776319][T20256] syzkaller0: entered allmulticast mode [ 2292.078995][ T5897] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2292.269591][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 2292.284996][ T5897] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2292.294763][ T5897] usb 1-1: config 0 has no interface number 0 [ 2292.303144][ T5897] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2292.321741][ T5897] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2292.332075][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.347521][ T5897] usb 1-1: Product: syz [ 2292.363747][ T5897] usb 1-1: Manufacturer: syz [ 2292.385117][ T5897] usb 1-1: SerialNumber: syz [ 2292.417263][ T5897] usb 1-1: config 0 descriptor?? [ 2293.216144][ T30] audit: type=1326 audit(1763109565.444:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.242848][ T30] audit: type=1326 audit(1763109565.444:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.278582][ T30] audit: type=1326 audit(1763109565.474:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.309594][ T30] audit: type=1326 audit(1763109565.474:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.334802][ T30] audit: type=1326 audit(1763109565.474:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.422348][ T30] audit: type=1326 audit(1763109565.474:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.449124][ T30] audit: type=1326 audit(1763109565.474:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.534757][ T30] audit: type=1326 audit(1763109565.474:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.597546][ T30] audit: type=1326 audit(1763109565.474:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.652103][ T30] audit: type=1326 audit(1763109565.474:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.2.29083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cb18f6c9 code=0x7ffc0000 [ 2293.900440][T20301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2293.918578][T20301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2293.948093][T20301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2293.967455][T20301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2294.231653][ T5897] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 2294.240235][ T5897] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 2294.296478][ T5897] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2294.325400][ T5897] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 2294.377941][ T5897] usb 1-1: USB disconnect, device number 90 [ 2299.770859][T20926] syzkaller0: entered promiscuous mode [ 2299.781206][T20926] syzkaller0: entered allmulticast mode [ 2300.265351][T21043] tipc: Failed to remove unknown binding: 66,1,1/0:3950520424/3950520426 [ 2300.350536][T21048] tipc: Failed to remove unknown binding: 66,1,1/0:3950520424/3950520426 [ 2300.384808][T21048] tipc: Failed to remove unknown binding: 66,1,1/0:3950520424/3950520426 [ 2302.499821][T21205] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 2302.715867][T21205] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 2302.726749][T21205] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 2302.821465][T21205] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 2302.935988][T21205] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 2303.001720][T21205] kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 2303.051686][T21205] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 2303.062907][T21205] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 2303.073583][T21205] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 2305.502615][T21478] syzkaller0: entered promiscuous mode [ 2305.508216][T21478] syzkaller0: entered allmulticast mode [ 2306.086946][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29216'. [ 2306.186721][T21495] netlink: 'syz.0.29216': attribute type 10 has an invalid length. [ 2306.709781][T21136] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2306.757169][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2306.757185][ T30] audit: type=1800 audit(1763109578.984:5467): pid=21620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.29229" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2306.870817][T21136] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.881344][T21136] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2306.902892][T21136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.931528][T21136] usb 6-1: config 0 descriptor?? [ 2307.023706][ T30] audit: type=1800 audit(1763109579.254:5468): pid=21625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29229" name="nullb0" dev="devtmpfs" ino=4715 res=0 errno=0 [ 2307.025177][T21136] pwc: Askey VC010 type 2 USB webcam detected. [ 2307.424850][T21136] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2307.469733][T21136] pwc: recv_control_msg error -32 req 02 val 2700 [ 2307.483705][T21136] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2307.522242][T21136] pwc: recv_control_msg error -32 req 04 val 1000 [ 2307.549322][T21136] pwc: recv_control_msg error -32 req 04 val 1300 [ 2307.575969][T21136] pwc: recv_control_msg error -32 req 04 val 1400 [ 2307.601652][T21136] pwc: recv_control_msg error -32 req 02 val 2000 [ 2307.622799][T21136] pwc: recv_control_msg error -32 req 02 val 2100 [ 2307.637023][T21136] pwc: recv_control_msg error -32 req 04 val 1500 [ 2307.663055][T21136] pwc: recv_control_msg error -32 req 02 val 2500 [ 2307.680367][T21136] pwc: recv_control_msg error -32 req 02 val 2400 [ 2307.694054][T21136] pwc: recv_control_msg error -32 req 02 val 2600 [ 2307.710818][T21136] pwc: recv_control_msg error -32 req 02 val 2900 [ 2307.732283][T21136] pwc: recv_control_msg error -32 req 02 val 2800 [ 2307.770335][T21136] pwc: recv_control_msg error -32 req 04 val 1100 [ 2307.790364][T21136] pwc: Registered as video103. [ 2307.819141][T21136] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input143 [ 2308.093153][T32431] usb 6-1: USB disconnect, device number 68 [ 2309.575472][T21895] binder: 21894:21895 ioctl c0306201 0 returned -14 [ 2311.368910][T32431] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2311.547832][T32431] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2311.557786][T32431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.579708][T32431] usb 3-1: Product: syz [ 2311.595162][T32431] usb 3-1: Manufacturer: syz [ 2311.609740][T32431] usb 3-1: SerialNumber: syz [ 2311.654819][T32431] usb 3-1: config 0 descriptor?? [ 2311.808715][T21956] tipc: Enabled bearer , priority 0 [ 2311.838735][T21956] syzkaller0: entered promiscuous mode [ 2311.855924][T21956] syzkaller0: entered allmulticast mode [ 2311.900432][ T5897] usb 3-1: USB disconnect, device number 72 [ 2311.944466][T21956] tipc: Resetting bearer [ 2311.955360][T21955] tipc: Resetting bearer [ 2312.007867][T21955] tipc: Disabling bearer [ 2312.079042][T32431] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 2312.269725][T32431] usb 6-1: not running at top speed; connect to a high speed hub [ 2312.279965][T32431] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2312.289186][T32431] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2312.312732][T32431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.330939][T32431] usb 6-1: Product: ​ [ 2312.335105][T32431] usb 6-1: Manufacturer: Ѕ [ 2312.339854][T32431] usb 6-1: SerialNumber: Ⰱ [ 2312.714991][T22085] netlink: 'syz.7.29297': attribute type 63 has an invalid length. [ 2312.726143][T22085] netlink: 5 bytes leftover after parsing attributes in process `syz.7.29297'. [ 2313.174148][T32431] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 2313.254970][T32431] usb 6-1: USB disconnect, device number 69 [ 2313.306363][T32431] usblp0: removed [ 2314.328702][T22242] kvm: kvm [22218]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 2314.376668][T22242] kvm: kvm [22218]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x900000000000 [ 2314.420360][T22242] kvm: kvm [22218]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x100000000000 [ 2314.432677][T22242] kvm: kvm [22218]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000800 [ 2315.335945][T22347] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 2315.369374][T22347] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 2315.377759][T22347] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 2315.390496][T22347] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 2315.415438][T22347] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 2315.426218][T22347] kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 2315.463835][T22347] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 2315.497290][T22347] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 2315.516773][T22347] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 2315.529133][T32431] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2315.714220][T32431] usb 6-1: config 0 has no interfaces? [ 2315.742933][T32431] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2315.763796][T32431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.785317][T22360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 2315.837264][T32431] usb 6-1: Product: syz [ 2315.848680][T22363] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 2315.856725][T32431] usb 6-1: Manufacturer: syz [ 2315.869621][T32431] usb 6-1: SerialNumber: syz [ 2315.913121][T32431] usb 6-1: config 0 descriptor?? [ 2316.738747][T22345] team0: Port device netdevsim0 removed [ 2316.747864][T22345] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2316.995140][ T5838] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2317.149147][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 2317.155991][ T5838] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 2317.164991][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.419483][ T5838] usb 1-1: config 0 has no interfaces? [ 2317.451121][T22345] netdevsim netdevsim5 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2317.472030][ T5838] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2317.482127][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.557959][ T5838] usb 1-1: Product: syz [ 2317.567289][ T5838] usb 1-1: Manufacturer: syz [ 2317.573400][ T5838] usb 1-1: SerialNumber: syz [ 2317.640231][ T5838] usb 1-1: config 0 descriptor?? [ 2318.078238][ T5838] usb 1-1: USB disconnect, device number 91 [ 2318.883136][T32431] usb 6-1: USB disconnect, device number 70 [ 2321.084301][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29357'. [ 2321.882984][ T5497] netdevsim netdevsim5 dev0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2322.503506][T22800] tipc: Failed to remove unknown binding: 66,1,1/2130706433:841620340/841620342 [ 2322.512984][T22800] tipc: Failed to remove unknown binding: 66,1,1/2130706433:841620340/841620342 [ 2323.348958][ T5838] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2323.501103][ T5838] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2323.520157][ T5838] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2323.540723][ T5838] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2323.559792][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2323.577297][ T5838] usb 1-1: Product: syz [ 2323.589771][ T5838] usb 1-1: Manufacturer: syz [ 2323.603736][ T5838] usb 1-1: SerialNumber: syz [ 2323.629324][ T5838] usb 1-1: config 0 descriptor?? [ 2323.648253][ T5838] usb 1-1: selecting invalid altsetting 0 [ 2428.708760][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2428.715397][ C1] rcu: 1-...!: (10499 ticks this GP) idle=b7fc/1/0x4000000000000000 softirq=485705/485705 fqs=0 [ 2428.727585][ C1] rcu: (t=10500 jiffies g=376105 q=68 ncpus=2) [ 2428.733832][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g376105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2428.746237][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=203842 [ 2428.754202][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g376105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 2428.765646][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2428.775607][ C1] rcu: RCU grace-period kthread stack dump: [ 2428.781489][ C1] task:rcu_preempt state:I stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2428.793396][ C1] Call Trace: [ 2428.796672][ C1] [ 2428.799608][ C1] __schedule+0x1798/0x4cc0 [ 2428.804154][ C1] ? __lock_acquire+0xab9/0xd20 [ 2428.809003][ C1] ? __pfx___schedule+0x10/0x10 [ 2428.813873][ C1] ? schedule+0x91/0x360 [ 2428.818124][ C1] schedule+0x165/0x360 [ 2428.822281][ C1] schedule_timeout+0x12b/0x270 [ 2428.827130][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2428.832499][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2428.837792][ C1] ? prepare_to_swait_event+0x341/0x380 [ 2428.843345][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 2428.848202][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2428.853134][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.858333][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2428.863613][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2428.868813][ C1] ? finish_swait+0xcd/0x1f0 [ 2428.873406][ C1] rcu_gp_kthread+0x99/0x390 [ 2428.877996][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2428.883191][ C1] ? __kthread_parkme+0x7b/0x200 [ 2428.888130][ C1] ? __kthread_parkme+0x1a1/0x200 [ 2428.893159][ C1] kthread+0x711/0x8a0 [ 2428.897239][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2428.902436][ C1] ? __pfx_kthread+0x10/0x10 [ 2428.907033][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2428.912228][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.917435][ C1] ? __pfx_kthread+0x10/0x10 [ 2428.922026][ C1] ret_from_fork+0x4bc/0x870 [ 2428.926618][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2428.931732][ C1] ? __switch_to_asm+0x39/0x70 [ 2428.936488][ C1] ? __switch_to_asm+0x33/0x70 [ 2428.941243][ C1] ? __pfx_kthread+0x10/0x10 [ 2428.945833][ C1] ret_from_fork_asm+0x1a/0x30 [ 2428.950609][ C1] [ 2428.953842][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2428.953869][ C0] NMI backtrace for cpu 0 [ 2428.953895][ C0] CPU: 0 UID: 0 PID: 3898 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 2428.953930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2428.953948][ C0] RIP: 0010:rcu_read_lock_bh_held+0xb8/0xe0 [ 2428.953969][ C0] Code: 75 18 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 31 db f6 44 24 21 02 0f 94 c3 48 c7 04 24 0e 36 e0 45 4b c7 04 3e 00 00 00 00 <65> 48 8b 05 a0 2d c9 10 48 3b 44 24 50 75 12 89 d8 48 8d 65 e8 5b [ 2428.953982][ C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000206 [ 2428.953996][ C0] RAX: 0000000000000301 RBX: 0000000000000001 RCX: c0d7d32275d43300 [ 2428.954008][ C0] RDX: ffff88802f368000 RSI: ffffffff8bbf0740 RDI: ffff8880b883b028 [ 2428.954019][ C0] RBP: ffffc90000007460 R08: 0000000000000000 R09: 0000000000000004 [ 2428.954029][ C0] R10: 0000000000000008 R11: 0000000000000100 R12: ffff88806b03781c [ 2428.954039][ C0] R13: ffff888055c7d100 R14: 1ffff92000000e7c R15: dffffc0000000000 [ 2428.954051][ C0] FS: 00007fae4ec83880(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 2428.954064][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2428.954074][ C0] CR2: 000020000057eff8 CR3: 000000007d032000 CR4: 00000000003526f0 [ 2428.954088][ C0] Call Trace: [ 2428.954095][ C0] [ 2428.954102][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 2428.954120][ C0] ? tcf_action_exec+0x77c/0x8e0 [ 2428.954140][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 2428.954160][ C0] tcf_classify+0x563/0x1140 [ 2428.954186][ C0] hfsc_enqueue+0x323/0xf20 [ 2428.954206][ C0] ? __pfx_hfsc_enqueue+0x10/0x10 [ 2428.954220][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2428.954240][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2428.954260][ C0] dev_qdisc_enqueue+0x4e/0x260 [ 2428.954281][ C0] __dev_queue_xmit+0xe83/0x3b50 [ 2428.954299][ C0] ? register_lock_class+0x51/0x320 [ 2428.954316][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 2428.954337][ C0] ? neigh_resolve_output+0x438/0x750 [ 2428.954357][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2428.954374][ C0] ? read_seqbegin+0x122/0x250 [ 2428.954392][ C0] ? neigh_resolve_output+0x438/0x750 [ 2428.954410][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.954429][ C0] ? read_seqbegin+0x1ac/0x250 [ 2428.954447][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 2428.954464][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2428.954479][ C0] ? eth_header+0x11b/0x200 [ 2428.954495][ C0] ? __asan_memcpy+0x40/0x70 [ 2428.954526][ C0] ip_finish_output2+0xd40/0x1160 [ 2428.954545][ C0] ? ip_skb_dst_mtu+0x18d/0xb70 [ 2428.954565][ C0] ? ip_finish_output2+0x452/0x1160 [ 2428.954584][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 2428.954604][ C0] ? ip_skb_dst_mtu+0x18d/0xb70 [ 2428.954621][ C0] ? ip_skb_dst_mtu+0x917/0xb70 [ 2428.954639][ C0] ? ip_finish_output+0x33a/0x3f0 [ 2428.954657][ C0] ip_output+0x29f/0x450 [ 2428.954680][ C0] ? ip_output+0x5b/0x450 [ 2428.954698][ C0] igmp_ifc_timer_expire+0xbb6/0xde0 [ 2428.954717][ C0] ? igmp_ifc_timer_expire+0x26/0xde0 [ 2428.954736][ C0] call_timer_fn+0x17e/0x5f0 [ 2428.954750][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 2428.954766][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2428.954779][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2428.954797][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2428.954815][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.954832][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 2428.954849][ C0] __run_timer_base+0x61a/0x860 [ 2428.954875][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2428.954893][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 2428.954919][ C0] run_timer_softirq+0xb7/0x180 [ 2428.954938][ C0] handle_softirqs+0x286/0x870 [ 2428.954955][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 2428.954973][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2428.954992][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2428.955007][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2428.955027][ C0] irq_exit_rcu+0x9/0x30 [ 2428.955041][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2428.955060][ C0] [ 2428.955065][ C0] [ 2428.955071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2428.955087][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 2428.955101][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 eb ea d0 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 2428.955113][ C0] RSP: 0018:ffffc9000432fa68 EFLAGS: 00000206 [ 2428.955126][ C0] RAX: c0d7d32275d43300 RBX: 0000000000000202 RCX: c0d7d32275d43300 [ 2428.955137][ C0] RDX: 0000000000000002 RSI: ffffffff8d8f4c01 RDI: ffffffff8bbf0760 [ 2428.955147][ C0] RBP: ffff88802f368b80 R08: 742e38343a343163 R09: 742e38343a343163 [ 2428.955158][ C0] R10: 0000000000000000 R11: 000000000000706d R12: 0000000000000002 [ 2428.955167][ C0] R13: 0000000000000002 R14: ffffffff8df3d6e0 R15: ffff88802f368000 [ 2428.955187][ C0] ? take_dentry_name_snapshot+0x29/0x500 [ 2428.955203][ C0] ? take_dentry_name_snapshot+0x29/0x500 [ 2428.955217][ C0] take_dentry_name_snapshot+0x4eb/0x500 [ 2428.955234][ C0] ? take_dentry_name_snapshot+0x29/0x500 [ 2428.955253][ C0] vfs_rename+0x5ac/0xe80 [ 2428.955279][ C0] ? __pfx_vfs_rename+0x10/0x10 [ 2428.955302][ C0] ? bpf_lsm_path_rename+0x9/0x20 [ 2428.955321][ C0] ? security_path_rename+0x17d/0x490 [ 2428.955338][ C0] do_renameat2+0x6a2/0xa50 [ 2428.955364][ C0] ? __pfx_do_renameat2+0x10/0x10 [ 2428.955391][ C0] ? getname_flags+0x1e5/0x540 [ 2428.955407][ C0] __x64_sys_rename+0x82/0x90 [ 2428.955421][ C0] do_syscall_64+0xfa/0xfa0 [ 2428.955441][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.955459][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2428.955474][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2428.955490][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2428.955505][ C0] RIP: 0033:0x7fae4e47acc7 [ 2428.955527][ C0] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 2428.955540][ C0] RSP: 002b:00007ffc68d8ed88 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 [ 2428.955555][ C0] RAX: ffffffffffffffda RBX: 0000556fa6c8dfd0 RCX: 00007fae4e47acc7 [ 2428.955566][ C0] RDX: 0000556fa6c69010 RSI: 00007ffc68d8eda0 RDI: 00007ffc68d8f1a0 [ 2428.955577][ C0] RBP: 0000556fa6c900d0 R08: 00000000000001e0 R09: 0000000000000000 [ 2428.955587][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 00007ffc68d8eda0 [ 2428.955598][ C0] R13: 00007ffc68d8f1a0 R14: 0000556f86bf2100 R15: 0000556f86bf2140 [ 2428.955616][ C0] [ 2428.955868][ C1] CPU: 1 UID: 0 PID: 5838 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 2428.955911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2428.955935][ C1] Workqueue: mld mld_ifc_work [ 2428.955957][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2428.955978][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2428.955993][ C1] RSP: 0018:ffffc9000413ef78 EFLAGS: 000002d3 [ 2428.956008][ C1] RAX: ffffffff8172bd9d RBX: 0000000000000003 RCX: ffff8880326c0000 [ 2428.956021][ C1] RDX: 0000000000000000 RSI: ffffffff8d70e033 RDI: ffffffff8bbf0760 [ 2428.956033][ C1] RBP: ffffc9000413f050 R08: ffffffff8f7ce977 R09: 1ffffffff1ef9d2e [ 2428.956046][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9d2f R12: dffffc0000000000 [ 2428.956060][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000827df4 [ 2428.956072][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 2428.956086][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2428.956098][ C1] CR2: 00007ffc68d856d8 CR3: 000000005d0d0000 CR4: 00000000003526f0 [ 2428.956113][ C1] Call Trace: [ 2428.956120][ C1] [ 2428.956126][ C1] kvm_wait+0x232/0x290 [ 2428.956145][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.956169][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 2428.956203][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 2428.956237][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 2428.956265][ C1] ? __lock_acquire+0xab9/0xd20 [ 2428.956289][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 2428.956313][ C1] do_raw_spin_lock+0x21f/0x290 [ 2428.956333][ C1] ? __dev_queue_xmit+0xd70/0x3b50 [ 2428.956355][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2428.956374][ C1] ? do_raw_spin_lock+0x121/0x290 [ 2428.956406][ C1] __dev_queue_xmit+0xd70/0x3b50 [ 2428.956430][ C1] ? register_lock_class+0x51/0x320 [ 2428.956454][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 2428.956489][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2428.956510][ C1] ? read_seqbegin+0x122/0x250 [ 2428.956530][ C1] ? neigh_resolve_output+0x438/0x750 [ 2428.956552][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.956576][ C1] ? read_seqbegin+0x1ac/0x250 [ 2428.956597][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 2428.956618][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2428.956635][ C1] ? eth_header+0x11b/0x200 [ 2428.956653][ C1] ? __asan_memcpy+0x40/0x70 [ 2428.956700][ C1] ip6_finish_output2+0xfb3/0x1480 [ 2428.956737][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2428.956761][ C1] ? ip6_mtu+0x7d/0x490 [ 2428.956781][ C1] ? ip6_mtu+0x38c/0x490 [ 2428.956803][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 2428.956825][ C1] ? ip6_output+0x126/0x550 [ 2428.956847][ C1] ip6_output+0x340/0x550 [ 2428.956875][ C1] NF_HOOK+0x9e/0x380 [ 2428.956898][ C1] ? NF_HOOK+0x101/0x380 [ 2428.956920][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2428.956946][ C1] ? __pfx_dst_output+0x10/0x10 [ 2428.956967][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 2428.956991][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 2428.957017][ C1] mld_sendpack+0x8d4/0xe60 [ 2428.957056][ C1] ? mld_sendpack+0x1e7/0xe60 [ 2428.957079][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 2428.957122][ C1] mld_ifc_work+0x83e/0xd60 [ 2428.957146][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2428.957167][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2428.957189][ C1] process_scheduled_works+0xae1/0x17b0 [ 2428.957235][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2428.957271][ C1] worker_thread+0x8a0/0xda0 [ 2428.957316][ C1] kthread+0x711/0x8a0 [ 2428.957338][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2428.957355][ C1] ? __pfx_kthread+0x10/0x10 [ 2428.957378][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2428.957413][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2428.957438][ C1] ? __pfx_kthread+0x10/0x10 [ 2428.957459][ C1] ret_from_fork+0x4bc/0x870 [ 2428.957480][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2428.957506][ C1] ? __switch_to_asm+0x39/0x70 [ 2428.957519][ C1] ? __switch_to_asm+0x33/0x70 [ 2428.957533][ C1] ? __pfx_kthread+0x10/0x10 [ 2428.957556][ C1] ret_from_fork_asm+0x1a/0x30 [ 2428.957588][ C1]