last executing test programs: 16m18.264927206s ago: executing program 32 (id=698): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xf, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 15m37.84052472s ago: executing program 33 (id=1058): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000200)={[{@auto_da_alloc}, {@test_dummy_encryption}, {@bh}, {@barrier}, {@dax_never}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}], [{@fsname={'fsname', 0x3d, '*!-'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x38) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) chdir(&(0x7f00000001c0)='./file0\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000002020000000000000805c000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYRES16=r7, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000000000)=0x1) 15m20.89738231s ago: executing program 34 (id=1136): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12m36.909697131s ago: executing program 4 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) 12m36.721120129s ago: executing program 4 (id=3076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x28400) ioctl$BLKRRPART(r2, 0x125f, 0x0) 12m36.516215438s ago: executing program 4 (id=3081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x7, 0x0, &(0x7f0000000180)) 12m36.353018465s ago: executing program 4 (id=3084): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x1a0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x121) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 12m35.817256308s ago: executing program 4 (id=3093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x3}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 12m35.557612479s ago: executing program 4 (id=3098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x18, 0x0, 0x101}}) 12m35.144647707s ago: executing program 35 (id=3098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x18, 0x0, 0x101}}) 8m5.330873099s ago: executing program 2 (id=6422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fstat(r1, &(0x7f0000000380)) 8m5.112300078s ago: executing program 2 (id=6423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000041c0), 0x1, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000004200)) 8m4.921806457s ago: executing program 2 (id=6425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 8m4.739624825s ago: executing program 2 (id=6427): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x46, &(0x7f0000000040)={[{@grpid}, {@jqfmt_vfsv0}, {@auto_da_alloc_val}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0xa) io_setup(0x202, &(0x7f0000000200)=0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000016c0)="5fa5daa236", 0x5}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000001, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035f47c6780820d1cbf7966da2dc499b060000002ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00002f00", "f28359738e229a4c66810000000000d300e6d602000004000000000000000001", [0x81, 0x1]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x4000}]) 8m3.833760294s ago: executing program 2 (id=6435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) 8m3.270149518s ago: executing program 2 (id=6439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)='k', 0x1, 0xfffffffffffffffb) 8m2.719308102s ago: executing program 36 (id=6439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)='k', 0x1, 0xfffffffffffffffb) 8m0.757762367s ago: executing program 0 (id=6460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 7m59.645237105s ago: executing program 0 (id=6468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x14000000000, r2, 0x0, 0x0, 0x0) 7m59.533642989s ago: executing program 0 (id=6469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) request_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0xfffffffffffffffb) 7m59.122194268s ago: executing program 0 (id=6470): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x46, &(0x7f0000000040)={[{@grpid}, {@jqfmt_vfsv0}, {@auto_da_alloc_val}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0xa) io_setup(0x202, &(0x7f0000000200)=0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000016c0)="5fa5daa236", 0x5}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000001, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035f47c6780820d1cbf7966da2dc499b060000002ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00002f00", "f28359738e229a4c66810000000000d300e6d602000004000000000000000001", [0x81, 0x1]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x4000}]) 7m57.877023251s ago: executing program 0 (id=6477): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9c9046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 7m57.20996421s ago: executing program 0 (id=6478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000190001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) 7m56.798341207s ago: executing program 37 (id=6478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000190001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) 3m54.361867189s ago: executing program 6 (id=9136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) 3m54.34170517s ago: executing program 6 (id=9138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @ioapic={0xf000, 0x1, 0x6, 0x4, 0x0, [{0x6, 0xf9, 0x2, '\x00', 0x7}, {0xd, 0x4, 0x6, '\x00', 0x5}, {0x1, 0x8, 0x3, '\x00', 0x8}, {0xfd, 0x4c, 0x80, '\x00', 0x3}, {0x0, 0x80, 0xa8, '\x00', 0x7}, {0x2, 0x5, 0x1, '\x00', 0x4}, {0xc, 0xc, 0xfe, '\x00', 0x9f}, {0x7b, 0x8, 0x10, '\x00', 0xf9}, {0x3, 0x4, 0xe, '\x00', 0xff}, {0x2c, 0xfc, 0xf8}, {0x1a, 0x80, 0x80, '\x00', 0xef}, {0x6, 0x9, 0xfd, '\x00', 0xc}, {0xfd, 0xe, 0x9}, {0x1, 0x8, 0x1, '\x00', 0x3}, {0x7, 0xfc, 0xee, '\x00', 0x1d}, {0x81, 0x5, 0x6, '\x00', 0x1}, {0x0, 0xc, 0x82, '\x00', 0x5}, {0xd6, 0xc, 0x2}, {0x5f, 0x8, 0x4, '\x00', 0x9}, {0x6, 0x6, 0x80, '\x00', 0x1}, {0x14, 0x4, 0x8, '\x00', 0x7}, {0x7f, 0xff, 0x3, '\x00', 0xbc}, {0x1, 0xb7, 0x9, '\x00', 0x9}, {0x9, 0x9, 0xb, '\x00', 0x9}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 3m53.838480892s ago: executing program 6 (id=9141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) 3m52.926385891s ago: executing program 6 (id=9145): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000ac0)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80222a}}, {@delalloc}, {@test_dummy_encryption}]}, 0xfd, 0x461, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) chdir(0x0) 3m52.440079942s ago: executing program 6 (id=9151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) 3m51.057769523s ago: executing program 6 (id=9161): bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580), 0x1, 0x4ee, &(0x7f0000000d40)="$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") chdir(0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x280808a, &(0x7f0000001c40)=ANY=[], 0x16, 0x2b4, &(0x7f00000001c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401}) 3m50.825215223s ago: executing program 38 (id=9161): bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580), 0x1, 0x4ee, &(0x7f0000000d40)="$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") chdir(0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x280808a, &(0x7f0000001c40)=ANY=[], 0x16, 0x2b4, &(0x7f00000001c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401}) 2m44.47764362s ago: executing program 3 (id=9901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=' ', 0x1}, {0x0}], 0x2, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x8000) 2m44.362521535s ago: executing program 3 (id=9903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x90) 2m44.160788714s ago: executing program 3 (id=9906): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r1, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) 2m43.828860058s ago: executing program 3 (id=9910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',wf']) 2m43.452128794s ago: executing program 3 (id=9914): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) 2m42.894546379s ago: executing program 3 (id=9921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000b80)=[{&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf8536da9e0b81bf7dd3e4c938677040c8cddf", 0x4b}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd72254557dd7959f8627e2274301d346beb9887e01583a5ab92ef23b6fb80be5edc6324845b1b", 0xa5}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd878349b4b9a50ca7a17dcd1a99aa5b30f493871a313f4350e87b960063f6f726", 0x8d}, {&(0x7f0000000880)="1dfda5b80cb90832bf7cb077130ab731fe0fa5969adc03b465c883b86969debbfc1deaa4273a7d1e116dbd7c04c0afba5ca62c61e1fa758cd705e53263d421f77ac5c2366628a6ad455b841bc8afc9ce1d48e3b9667be8cfe56c18476d47a154315281a9ffb2a81f18be39b5100c12b9710bd151ef51d66f02fe3bf916b5cad2de879e26300f58fa039539e196354f", 0x8f}], 0x4) 2m27.768651732s ago: executing program 39 (id=9921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000b80)=[{&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf8536da9e0b81bf7dd3e4c938677040c8cddf", 0x4b}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd72254557dd7959f8627e2274301d346beb9887e01583a5ab92ef23b6fb80be5edc6324845b1b", 0xa5}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd878349b4b9a50ca7a17dcd1a99aa5b30f493871a313f4350e87b960063f6f726", 0x8d}, {&(0x7f0000000880)="1dfda5b80cb90832bf7cb077130ab731fe0fa5969adc03b465c883b86969debbfc1deaa4273a7d1e116dbd7c04c0afba5ca62c61e1fa758cd705e53263d421f77ac5c2366628a6ad455b841bc8afc9ce1d48e3b9667be8cfe56c18476d47a154315281a9ffb2a81f18be39b5100c12b9710bd151ef51d66f02fe3bf916b5cad2de879e26300f58fa039539e196354f", 0x8f}], 0x4) 2m10.517562138s ago: executing program 7 (id=10245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 2m9.965456372s ago: executing program 7 (id=10251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) process_mrelease(r1, 0x0) 2m9.457717404s ago: executing program 7 (id=10255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2m9.07653952s ago: executing program 7 (id=10260): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 2m8.525726474s ago: executing program 7 (id=10266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) 2m6.174215936s ago: executing program 7 (id=10288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 2m5.400742749s ago: executing program 40 (id=10288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 3.961747169s ago: executing program 1 (id=11302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="2ca2", 0x2}], 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2.966383972s ago: executing program 1 (id=11313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x18, 0x0, 0x0) 2.909806954s ago: executing program 9 (id=11314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@stats}]}) 2.725666572s ago: executing program 1 (id=11317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)) 2.645802716s ago: executing program 9 (id=11318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) 2.504946951s ago: executing program 1 (id=11320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 2.277959411s ago: executing program 1 (id=11323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 1.961863305s ago: executing program 8 (id=11325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) setuid(0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.961730185s ago: executing program 1 (id=11326): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.884775778s ago: executing program 5 (id=11327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4d5, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x7, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 1.555881833s ago: executing program 8 (id=11328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) 1.402945439s ago: executing program 9 (id=11329): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 1.297793974s ago: executing program 5 (id=11330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 1.202451608s ago: executing program 8 (id=11331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) 1.034052915s ago: executing program 5 (id=11332): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x8000000000000001, 0x3, 0x0, 0xfffffffb}) 959.195879ms ago: executing program 9 (id=11333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x1) 777.830456ms ago: executing program 5 (id=11334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) 777.610236ms ago: executing program 8 (id=11335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x39, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0x8, "3aba454f6dc5"}, {0x0, 0x5, "91ec92"}, {0x0, 0x6, "0683fa3f"}]}]}}}}}}}, 0x0) 712.866479ms ago: executing program 9 (id=11336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 545.291926ms ago: executing program 5 (id=11337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)={0x8000000000000001, 0x3, 0x0, 0xfffffffb}) 361.661534ms ago: executing program 8 (id=11338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 358.603294ms ago: executing program 9 (id=11339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigpending(0x0, 0x0) 225.3116ms ago: executing program 5 (id=11340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) 0s ago: executing program 8 (id=11341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) kernel console output (not intermixed with test programs): 898.268745][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 898.391691][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.402608][T21664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.539673][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.534710][T14622] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 899.716003][ T1328] bond0 (unregistering): Released all slaves [ 899.745493][T14622] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.755807][T14622] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 899.765859][T14622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.777659][T14622] usb 8-1: config 0 descriptor?? [ 899.792799][T14622] pwc: Askey VC010 type 2 USB webcam detected. [ 899.826300][T27869] netlink: 188 bytes leftover after parsing attributes in process `syz.6.9063'. [ 900.210879][T14622] pwc: recv_control_msg error -32 req 02 val 2b00 [ 900.278860][T27916] loop9: detected capacity change from 0 to 512 [ 900.291322][T14622] pwc: recv_control_msg error -32 req 02 val 2700 [ 900.303086][T14622] pwc: recv_control_msg error -32 req 02 val 2c00 [ 900.320770][T14622] pwc: recv_control_msg error -32 req 04 val 1000 [ 900.345205][T14622] pwc: recv_control_msg error -32 req 04 val 1300 [ 900.365852][T27916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 900.401288][T14622] pwc: recv_control_msg error -32 req 04 val 1400 [ 900.436089][T27916] System zones: 1-12 [ 900.450149][ T968] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 900.456545][T14622] pwc: recv_control_msg error -32 req 02 val 2000 [ 900.468614][T27916] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.9080: Directory hole found for htree index block 0 [ 900.488030][T14622] pwc: recv_control_msg error -32 req 02 val 2100 [ 900.499752][T27916] EXT4-fs (loop9): Remounting filesystem read-only [ 900.535100][T27916] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 900.564899][T27916] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 900.619148][T27916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.640095][ T968] usb 7-1: device descriptor read/64, error -71 [ 900.735728][T14622] pwc: recv_control_msg error -71 req 02 val 2500 [ 900.775704][T14622] pwc: recv_control_msg error -71 req 02 val 2400 [ 900.792661][T14622] pwc: recv_control_msg error -71 req 02 val 2600 [ 900.831654][T14622] pwc: recv_control_msg error -71 req 02 val 2900 [ 900.846364][T14622] pwc: recv_control_msg error -71 req 02 val 2800 [ 900.880092][T14622] pwc: recv_control_msg error -71 req 04 val 1100 [ 900.902712][ T28] audit: type=1326 audit(899.844:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.8.9083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 900.910375][T14622] pwc: recv_control_msg error -71 req 04 val 1200 [ 900.939784][ T968] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 900.953711][T14622] pwc: Registered as video103. [ 900.964394][T27916] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 900.993178][T14622] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 901.071108][T14622] usb 8-1: USB disconnect, device number 35 [ 901.128520][ T968] usb 7-1: device descriptor read/64, error -71 [ 901.147425][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.270279][ T968] usb usb7-port1: attempt power cycle [ 901.455246][T27943] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 902.459985][ T968] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 902.502803][ T968] usb 7-1: device descriptor read/8, error -71 [ 902.518832][T27952] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9088'. [ 902.789894][ T968] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 902.829718][ T968] usb 7-1: device descriptor read/8, error -71 [ 902.941915][T27964] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9092'. [ 902.950548][ T968] usb usb7-port1: unable to enumerate USB device [ 903.072202][T27969] loop9: detected capacity change from 0 to 512 [ 903.106833][T27969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 903.165053][T27969] System zones: 1-12 [ 903.185235][T27969] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.9093: Directory hole found for htree index block 0 [ 903.285070][T27969] EXT4-fs (loop9): Remounting filesystem read-only [ 903.338581][T27969] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 903.394925][T27969] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 903.434450][T27969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.832263][T27969] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 903.967953][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.360089][T14633] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 904.569791][T14633] usb 8-1: Using ep0 maxpacket: 32 [ 904.575164][ T9037] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 904.602480][T14633] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 904.630757][T14633] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 904.646603][T14633] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 904.688407][T14633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 904.699480][T14633] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 904.731448][T14633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 904.771935][T14633] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 904.787139][T28014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 904.801463][ T9037] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.819730][T14633] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 904.840684][ T9037] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.865381][T28014] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 904.875271][T14633] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 904.891537][T28014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 904.891627][ T9037] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.914091][T14633] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.917996][T28014] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 904.937753][ T9037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 904.946450][ T9037] usb 7-1: SerialNumber: syz [ 904.952684][T14633] usb 8-1: config 0 descriptor?? [ 904.971490][ T9037] cdc_acm 7-1:1.0: skipping garbage [ 905.039041][T28014] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 905.051141][T28014] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 905.078930][T28027] loop9: detected capacity change from 0 to 512 [ 905.088044][T28014] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 905.098028][T28014] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 905.108550][T28014] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 905.118385][T28014] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 905.129605][T28027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 905.137837][T28027] System zones: 1-12 [ 905.151947][T28027] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.9109: Directory hole found for htree index block 0 [ 905.166997][T28027] EXT4-fs (loop9): Remounting filesystem read-only [ 905.176001][T28027] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 905.184513][T28027] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 905.194363][T28027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.210144][ T9037] usb 7-1: USB disconnect, device number 41 [ 905.256245][T14633] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 905.326790][T14633] usb 8-1: USB disconnect, device number 36 [ 905.361305][T14633] usblp0: removed [ 905.371157][T28027] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 905.424438][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.889821][T14633] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 906.089949][T14633] usb 8-1: Using ep0 maxpacket: 32 [ 906.120140][T14633] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 906.128726][T14633] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 906.189661][T14633] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 906.198758][T14633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 906.259621][T14633] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 906.300147][T14633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 906.310952][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9118'. [ 906.331898][T14633] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 906.359904][T14633] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 906.410060][T14633] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 906.419199][T14633] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.467370][T14633] usb 8-1: config 0 descriptor?? [ 906.721582][T14633] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 906.779955][T14633] usb 8-1: USB disconnect, device number 37 [ 906.806893][T14633] usblp0: removed [ 906.916168][T28078] netlink: 256 bytes leftover after parsing attributes in process `syz.9.9124'. [ 907.527923][T28100] loop8: detected capacity change from 0 to 512 [ 907.609826][T28100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 907.618973][T28100] System zones: 1-12 [ 907.637474][T28100] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.9132: Directory hole found for htree index block 0 [ 907.734104][T28100] EXT4-fs (loop8): Remounting filesystem read-only [ 907.775761][T28100] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 907.817249][T28100] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 907.833344][T28100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.163918][T28100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 908.319930][T28100] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 908.770918][T21590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.320552][T28142] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9146'. [ 909.378569][T28145] loop6: detected capacity change from 0 to 512 [ 909.420892][T28145] EXT4-fs: Ignoring removed mblk_io_submit option [ 909.479213][ T5805] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 909.684658][T28156] loop8: detected capacity change from 0 to 512 [ 909.718065][T28156] EXT4-fs: Ignoring removed mblk_io_submit option [ 909.735811][T28156] EXT4-fs: inline encryption not supported [ 909.779633][T28156] EXT4-fs: Ignoring removed mblk_io_submit option [ 909.830898][T28156] EXT4-fs (loop8): Test dummy encryption mode enabled [ 909.837751][T28156] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 909.908122][T28156] EXT4-fs (loop8): 1 truncate cleaned up [ 909.963952][T28156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.267970][T21590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.591391][T28175] binder: 28174:28175 ioctl c0306201 200000000b80 returned -14 [ 911.582217][T28201] loop8: detected capacity change from 0 to 512 [ 911.662606][T28201] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: comm syz.8.9168: Parent and EA inode have the same ino 15 [ 911.790826][T28201] EXT4-fs (loop8): 1 orphan inode deleted [ 911.798961][T28201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.971286][T21590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.133717][T18391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 912.155245][T18391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 912.165623][T18391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 912.193779][T18391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 912.219192][T18391] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 912.226874][T18391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 912.784071][T28218] chnl_net:caif_netlink_parms(): no params data found [ 913.200699][T28218] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.211353][T28218] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.248945][T28218] bridge_slave_0: entered allmulticast mode [ 913.277122][T28218] bridge_slave_0: entered promiscuous mode [ 913.314988][T28218] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.347348][T28218] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.380422][T28218] bridge_slave_1: entered allmulticast mode [ 913.387899][T28218] bridge_slave_1: entered promiscuous mode [ 913.561548][T28218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.617044][T28218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.800794][T28218] team0: Port device team_slave_0 added [ 913.860599][T28218] team0: Port device team_slave_1 added [ 913.973087][T28218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.996834][T28218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.045850][T28218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.078120][T28218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.104842][T28218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.195668][T28218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.317811][T18391] Bluetooth: hci1: command tx timeout [ 914.435224][T28218] hsr_slave_0: entered promiscuous mode [ 914.472196][T28218] hsr_slave_1: entered promiscuous mode [ 915.624636][T28340] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9216'. [ 916.149382][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 916.351462][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 916.377098][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 916.391444][T18391] Bluetooth: hci1: command tx timeout [ 916.409236][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 916.449306][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 916.458378][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 916.475447][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 916.487388][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 916.522561][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 916.546286][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 916.584572][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 916.617992][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.642085][ T9] usb 9-1: config 0 descriptor?? [ 916.894259][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 916.946028][ T9] usb 9-1: USB disconnect, device number 12 [ 916.992081][ T9] usblp0: removed [ 917.225937][T28218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 917.237390][T28218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 917.283028][T28218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 917.319978][T28218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 917.529841][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 917.648713][T28218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.729239][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 917.745537][T28218] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.755263][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 917.786963][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.794351][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.811583][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 917.823990][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 917.838853][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.846103][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.854340][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 917.876800][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 917.906335][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 917.942074][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 917.956190][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 917.985026][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 917.997770][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.024723][ T9] usb 9-1: config 0 descriptor?? [ 918.271918][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 918.337193][ T9] usb 9-1: USB disconnect, device number 13 [ 918.362782][ T9] usblp0: removed [ 918.469101][T18391] Bluetooth: hci1: command tx timeout [ 918.565907][T28218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.737691][T28428] netlink: 'syz.7.9241': attribute type 4 has an invalid length. [ 918.779078][T28218] veth0_vlan: entered promiscuous mode [ 918.826499][T28218] veth1_vlan: entered promiscuous mode [ 918.942543][T28218] veth0_macvtap: entered promiscuous mode [ 918.988116][T28218] veth1_macvtap: entered promiscuous mode [ 919.077736][T28218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.109053][T28218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.137306][T28218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.160813][T28218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.200420][T28218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.243255][T28218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.284985][T28218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.318973][T28218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.333645][T28218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.345815][T28218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.374455][T28445] loop8: detected capacity change from 0 to 512 [ 919.384994][T28218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.407595][T28218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.417038][T28445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 919.425440][T28445] System zones: 1-12 [ 919.430601][T28218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.440883][T28218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.440902][ T5841] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 919.526268][T28445] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.9247: Directory hole found for htree index block 0 [ 919.628742][T28445] EXT4-fs (loop8): Remounting filesystem read-only [ 919.651685][T28445] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 919.704158][ T5841] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.733425][T28445] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 919.763833][ T5841] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 919.795147][T28445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.798865][ T5841] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.867640][ T5841] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 919.878632][T27748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.918435][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.932271][T27748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.944507][ T5841] usb 10-1: SerialNumber: syz [ 919.972843][ T5841] cdc_acm 10-1:1.0: skipping garbage [ 920.044265][T27748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.057295][T27748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.138454][T28445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 920.181284][T28445] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 920.188857][ T5841] usb 10-1: USB disconnect, device number 12 [ 920.251061][T21590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.495313][T28469] Bluetooth: MGMT ver 1.22 [ 920.549114][ T51] Bluetooth: hci1: command tx timeout [ 920.557139][T18391] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 922.599210][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 922.629958][T18391] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 922.920813][ T28] audit: type=1326 audit(921.785:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28495 comm="syz.3.9261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6b578f749 code=0x0 [ 924.631478][T18391] Bluetooth: hci0: command 0x0406 tx timeout [ 925.121201][T14636] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 925.319119][T14636] usb 10-1: Using ep0 maxpacket: 32 [ 925.334355][T14636] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.350651][T14636] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.374841][T14636] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 925.401932][T14636] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.430265][T14636] usb 10-1: config 0 descriptor?? [ 925.449803][T14636] hub 10-1:0.0: USB hub found [ 925.660061][T14636] hub 10-1:0.0: 1 port detected [ 925.879258][T14636] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 925.897736][T14636] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 925.940143][T14636] usbhid 10-1:0.0: can't add hid device: -71 [ 925.946302][T14636] usbhid: probe of 10-1:0.0 failed with error -71 [ 926.004206][T14636] usb 10-1: USB disconnect, device number 13 [ 926.517878][T28622] loop8: detected capacity change from 0 to 256 [ 926.592165][T28622] exFAT-fs (loop8): failed to load upcase table (idx : 0x000103c2, chksum : 0xe64499b9, utbl_chksum : 0xe619d30d) [ 928.086897][T28682] overlayfs: unescaped trailing colons in lowerdir mount option. [ 928.523547][T14622] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 928.740816][T14622] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.769978][T14622] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 928.800485][T14622] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.849453][T14622] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.861029][T14622] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 928.869770][T14622] usb 8-1: SerialNumber: syz [ 928.890294][T14622] cdc_acm 8-1:1.0: skipping garbage [ 929.105573][T14617] usb 8-1: USB disconnect, device number 38 [ 930.219002][T28763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9346'. [ 930.578112][T28780] loop7: detected capacity change from 0 to 164 [ 930.893562][T28780] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 932.854339][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.862561][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.189331][T28845] binder_alloc: 28844: binder_alloc_buf, no vma [ 934.961484][T14622] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 935.165012][T14622] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 935.191333][T14622] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 935.212045][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9388'. [ 935.223107][T14622] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.238573][T14622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 935.254087][T14622] usb 4-1: SerialNumber: syz [ 935.258847][T28888] bridge_slave_1: left allmulticast mode [ 935.278053][T28888] bridge_slave_1: left promiscuous mode [ 935.281402][T14622] cdc_acm 4-1:1.0: skipping garbage [ 935.283949][T28888] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.365547][T28888] bridge_slave_0: left allmulticast mode [ 935.372653][T28888] bridge_slave_0: left promiscuous mode [ 935.390408][T28888] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.624401][ T5834] usb 4-1: USB disconnect, device number 8 [ 937.592176][T28974] loop3: detected capacity change from 0 to 256 [ 937.638944][T28974] exfat: Bad value for 'uid' [ 938.295787][T29006] loop7: detected capacity change from 0 to 512 [ 938.350836][T29006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 938.374685][T29006] System zones: 1-12 [ 938.437702][T29006] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.9424: Directory hole found for htree index block 0 [ 938.537283][T29010] loop9: detected capacity change from 0 to 256 [ 938.544972][T29006] EXT4-fs (loop7): Remounting filesystem read-only [ 938.560353][T29006] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 938.570891][T29010] exfat: Bad value for 'uid' [ 938.577042][T29006] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 938.610503][T29006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.648515][ T5806] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 938.917331][T29006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 938.975017][T29006] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 939.091921][T21664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.577541][T29043] loop9: detected capacity change from 0 to 256 [ 939.609329][T29043] exfat: Bad value for 'uid' [ 939.644968][ T5806] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 939.671237][ T28] audit: type=1326 audit(938.616:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29047 comm="syz.8.9441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x0 [ 940.652740][T29078] loop7: detected capacity change from 0 to 256 [ 940.679457][T29078] exfat: Bad value for 'uid' [ 941.826324][T29125] batadv_slave_1: entered promiscuous mode [ 941.868531][T29124] batadv_slave_1: left promiscuous mode [ 941.920149][T29128] loop8: detected capacity change from 0 to 128 [ 941.955916][T29128] FAT-fs (loop8): Directory bread(block 414) failed [ 941.976999][T29128] FAT-fs (loop8): Directory bread(block 415) failed [ 941.993276][T29128] FAT-fs (loop8): Directory bread(block 416) failed [ 942.028067][T29128] FAT-fs (loop8): Directory bread(block 417) failed [ 942.034755][T29128] FAT-fs (loop8): Directory bread(block 418) failed [ 942.077040][T29128] FAT-fs (loop8): Directory bread(block 419) failed [ 942.102764][T29128] FAT-fs (loop8): Directory bread(block 420) failed [ 942.114956][T29137] binder: 29136:29137 ioctl c0306201 2000000002c0 returned -14 [ 942.127696][T29128] FAT-fs (loop8): Directory bread(block 421) failed [ 943.243755][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9486'. [ 943.609941][ T28] audit: type=1326 audit(942.556:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29184 comm="syz.9.9491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x0 [ 943.793419][T14622] IPVS: starting estimator thread 0... [ 943.818695][T29191] sit0: entered promiscuous mode [ 943.852254][T29191] netlink: 'syz.8.9494': attribute type 1 has an invalid length. [ 943.912212][T29190] IPVS: using max 17 ests per chain, 40800 per kthread [ 943.936969][T29191] netlink: 1 bytes leftover after parsing attributes in process `syz.8.9494'. [ 943.980351][T29198] loop8: detected capacity change from 0 to 136 [ 944.081838][ T5806] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 944.277666][T14636] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 944.544536][T14636] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 944.596093][T14636] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 944.633636][T14636] usb 4-1: config 220 interface 0 has no altsetting 0 [ 944.661347][T14636] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 944.688239][T14636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.703178][T14636] usb 4-1: Product: syz [ 944.711143][T14636] usb 4-1: Manufacturer: syz [ 944.722891][T14636] usb 4-1: SerialNumber: syz [ 945.366728][T14636] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 945.389588][T14636] usb 4-1: No valid video chain found. [ 945.444256][T14636] usb 4-1: USB disconnect, device number 9 [ 947.689834][T29321] loop3: detected capacity change from 0 to 512 [ 947.730462][T29321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 947.777656][T29321] System zones: 1-12 [ 947.804107][T29329] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9542'. [ 947.832201][T29321] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.9539: Directory hole found for htree index block 0 [ 947.926661][T29321] EXT4-fs (loop3): Remounting filesystem read-only [ 947.953896][T29321] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 948.024217][T29321] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 948.091050][T29321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.395289][T29321] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 948.421688][T29321] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 948.494579][T28218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.148865][T29375] bridge0: port 3(erspan0) entered blocking state [ 949.175701][T29375] bridge0: port 3(erspan0) entered disabled state [ 949.202476][T29375] erspan0: entered allmulticast mode [ 949.220978][T29375] erspan0: entered promiscuous mode [ 949.233458][T29375] bridge0: port 3(erspan0) entered blocking state [ 949.241075][T29375] bridge0: port 3(erspan0) entered forwarding state [ 949.469084][T29383] syz_tun: entered allmulticast mode [ 949.506592][T29382] syz_tun: left allmulticast mode [ 949.813532][T29389] loop3: detected capacity change from 0 to 8192 [ 950.374542][T29418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9569'. [ 950.407393][T29418] erspan0: left allmulticast mode [ 950.441894][T29418] erspan0: left promiscuous mode [ 950.463623][T29418] bridge0: port 3(erspan0) entered disabled state [ 950.494857][T29418] bridge_slave_1: left allmulticast mode [ 950.504378][T29418] bridge_slave_1: left promiscuous mode [ 950.517880][T29418] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.588809][T29418] bridge_slave_0: left allmulticast mode [ 950.594531][T29418] bridge_slave_0: left promiscuous mode [ 950.615216][T29418] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.973872][T29431] loop7: detected capacity change from 0 to 128 [ 950.985438][T29431] FAT-fs (loop7): Directory bread(block 414) failed [ 951.027369][T29431] FAT-fs (loop7): Directory bread(block 415) failed [ 951.086517][T29431] FAT-fs (loop7): Directory bread(block 416) failed [ 951.127604][T29431] FAT-fs (loop7): Directory bread(block 417) failed [ 951.134414][T29431] FAT-fs (loop7): Directory bread(block 418) failed [ 951.164063][T29431] FAT-fs (loop7): Directory bread(block 419) failed [ 951.174413][T29431] FAT-fs (loop7): Directory bread(block 420) failed [ 951.184542][T29431] FAT-fs (loop7): Directory bread(block 421) failed [ 951.442208][T29445] binfmt_misc: register: failed to install interpreter file ./cgroup [ 952.233150][T29473] loop9: detected capacity change from 0 to 512 [ 952.299151][T29473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 952.308397][T29473] System zones: 1-12 [ 952.312750][T29473] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.9591: Directory hole found for htree index block 0 [ 952.338176][T29473] EXT4-fs (loop9): Remounting filesystem read-only [ 952.347988][T29473] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 952.356524][T29473] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 952.367108][T29473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.526184][T29473] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 952.571912][T29473] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 952.714772][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.480882][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9599'. [ 953.492810][T29506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9599'. [ 955.133736][T29570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9622'. [ 955.149808][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9622'. [ 957.854167][T29672] loop3: detected capacity change from 0 to 512 [ 957.956414][T29672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 958.011195][T29672] System zones: 1-12 [ 958.067144][T29672] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.9658: Directory hole found for htree index block 0 [ 958.190436][T29672] EXT4-fs (loop3): Remounting filesystem read-only [ 958.244604][T29672] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 958.273324][T29672] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 958.305678][T29672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.608627][T29672] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 958.657076][T29672] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 958.788489][T28218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.307916][T29710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 959.649248][T29727] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9676'. [ 959.668119][T29727] bridge_slave_1: left allmulticast mode [ 959.685740][T29727] bridge_slave_1: left promiscuous mode [ 959.695682][T29727] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.003446][T29727] bridge_slave_0: left allmulticast mode [ 960.039084][T29727] bridge_slave_0: left promiscuous mode [ 960.045070][T29727] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.228747][T29739] loop3: detected capacity change from 0 to 128 [ 960.254286][T29739] FAT-fs (loop3): Directory bread(block 414) failed [ 960.265449][T29739] FAT-fs (loop3): Directory bread(block 415) failed [ 960.281002][T29739] FAT-fs (loop3): Directory bread(block 416) failed [ 960.286661][T29740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9677'. [ 960.288020][T29739] FAT-fs (loop3): Directory bread(block 417) failed [ 960.311203][T29739] FAT-fs (loop3): Directory bread(block 418) failed [ 960.324051][T29739] FAT-fs (loop3): Directory bread(block 419) failed [ 960.340128][T29739] FAT-fs (loop3): Directory bread(block 420) failed [ 960.351104][T29739] FAT-fs (loop3): Directory bread(block 421) failed [ 961.105530][T29768] overlayfs: failed to resolve '/./file0': -2 [ 961.138005][T29771] loop3: detected capacity change from 0 to 128 [ 961.218422][T29771] FAT-fs (loop3): Directory bread(block 414) failed [ 961.225134][T29771] FAT-fs (loop3): Directory bread(block 415) failed [ 961.245658][T29771] FAT-fs (loop3): Directory bread(block 416) failed [ 961.279103][T29771] FAT-fs (loop3): Directory bread(block 417) failed [ 961.311157][T29771] FAT-fs (loop3): Directory bread(block 418) failed [ 961.340633][T29771] FAT-fs (loop3): Directory bread(block 419) failed [ 961.375559][T29771] FAT-fs (loop3): Directory bread(block 420) failed [ 961.406794][T29771] FAT-fs (loop3): Directory bread(block 421) failed [ 962.068682][T29807] loop8: detected capacity change from 0 to 128 [ 962.108371][T29807] FAT-fs (loop8): Directory bread(block 414) failed [ 962.124692][T29807] FAT-fs (loop8): Directory bread(block 415) failed [ 962.133991][T29807] FAT-fs (loop8): Directory bread(block 416) failed [ 962.151475][T29807] FAT-fs (loop8): Directory bread(block 417) failed [ 962.166054][T29807] FAT-fs (loop8): Directory bread(block 418) failed [ 962.183560][T29807] FAT-fs (loop8): Directory bread(block 419) failed [ 962.197530][T29807] FAT-fs (loop8): Directory bread(block 420) failed [ 962.213142][T29807] FAT-fs (loop8): Directory bread(block 421) failed [ 963.082710][T29839] loop9: detected capacity change from 0 to 16 [ 963.100204][T29841] loop7: detected capacity change from 0 to 128 [ 963.117042][T29839] erofs: (device loop9): mounted with root inode @ nid 36. [ 963.189795][T18391] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 963.230773][T29841] FAT-fs (loop7): Directory bread(block 414) failed [ 963.237304][T29839] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 963.248716][T29841] FAT-fs (loop7): Directory bread(block 415) failed [ 963.252400][ T28] audit: type=1800 audit(962.187:4213): pid=29839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9714" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 963.255369][T29841] FAT-fs (loop7): Directory bread(block 416) failed [ 963.281743][T29841] FAT-fs (loop7): Directory bread(block 417) failed [ 963.291866][T29841] FAT-fs (loop7): Directory bread(block 418) failed [ 963.306789][T29841] FAT-fs (loop7): Directory bread(block 419) failed [ 963.319573][T29841] FAT-fs (loop7): Directory bread(block 420) failed [ 963.326928][T29841] FAT-fs (loop7): Directory bread(block 421) failed [ 964.129122][T29875] loop9: detected capacity change from 0 to 128 [ 964.173752][T29875] FAT-fs (loop9): Directory bread(block 414) failed [ 964.209164][T29875] FAT-fs (loop9): Directory bread(block 415) failed [ 964.238805][T29875] FAT-fs (loop9): Directory bread(block 416) failed [ 964.272017][T29875] FAT-fs (loop9): Directory bread(block 417) failed [ 964.296130][T29875] FAT-fs (loop9): Directory bread(block 418) failed [ 964.317927][T29875] FAT-fs (loop9): Directory bread(block 419) failed [ 964.344295][T29875] FAT-fs (loop9): Directory bread(block 420) failed [ 964.358147][T29875] FAT-fs (loop9): Directory bread(block 421) failed [ 964.963443][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9734'. [ 965.230550][T29902] loop9: detected capacity change from 0 to 256 [ 965.504595][T29912] loop9: detected capacity change from 0 to 128 [ 965.543749][T29912] FAT-fs (loop9): Directory bread(block 414) failed [ 965.564730][T29912] FAT-fs (loop9): Directory bread(block 415) failed [ 965.592675][T29912] FAT-fs (loop9): Directory bread(block 416) failed [ 965.622674][T29912] FAT-fs (loop9): Directory bread(block 417) failed [ 965.673722][T29912] FAT-fs (loop9): Directory bread(block 418) failed [ 965.698168][T29912] FAT-fs (loop9): Directory bread(block 419) failed [ 965.704863][T29912] FAT-fs (loop9): Directory bread(block 420) failed [ 965.728150][T29912] FAT-fs (loop9): Directory bread(block 421) failed [ 965.830836][T29920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9743'. [ 966.115336][T29928] netlink: 190 bytes leftover after parsing attributes in process `syz.3.9745'. [ 966.366333][ T28] audit: type=1326 audit(965.307:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.436300][ T28] audit: type=1326 audit(965.307:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.475501][T29943] loop9: detected capacity change from 0 to 128 [ 966.523492][ T28] audit: type=1326 audit(965.307:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.541066][T29943] FAT-fs (loop9): Directory bread(block 414) failed [ 966.582487][T29943] FAT-fs (loop9): Directory bread(block 415) failed [ 966.614906][ T28] audit: type=1326 audit(965.307:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.616808][T29943] FAT-fs (loop9): Directory bread(block 416) failed [ 966.678668][T29943] FAT-fs (loop9): Directory bread(block 417) failed [ 966.715840][T29943] FAT-fs (loop9): Directory bread(block 418) failed [ 966.724559][ T28] audit: type=1326 audit(965.307:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.743655][T29943] FAT-fs (loop9): Directory bread(block 419) failed [ 966.758069][T29943] FAT-fs (loop9): Directory bread(block 420) failed [ 966.781576][T29943] FAT-fs (loop9): Directory bread(block 421) failed [ 966.789774][ T28] audit: type=1326 audit(965.307:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.860097][ T28] audit: type=1326 audit(965.307:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 966.912931][ T28] audit: type=1326 audit(965.307:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 967.001248][ T28] audit: type=1326 audit(965.307:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29935 comm="syz.7.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x50000 [ 967.518804][T29972] loop9: detected capacity change from 0 to 128 [ 967.578668][T29972] FAT-fs (loop9): Directory bread(block 414) failed [ 967.596838][T29972] FAT-fs (loop9): Directory bread(block 415) failed [ 967.605317][T29977] program syz.8.9764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.631076][T29972] FAT-fs (loop9): Directory bread(block 416) failed [ 967.666850][T29972] FAT-fs (loop9): Directory bread(block 417) failed [ 967.673576][T29972] FAT-fs (loop9): Directory bread(block 418) failed [ 967.709138][T29972] FAT-fs (loop9): Directory bread(block 419) failed [ 967.723327][T29972] FAT-fs (loop9): Directory bread(block 420) failed [ 967.732872][T29972] FAT-fs (loop9): Directory bread(block 421) failed [ 968.462134][T30004] loop7: detected capacity change from 0 to 512 [ 968.510217][T30004] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 968.559548][T30004] EXT4-fs (loop7): invalid journal inode [ 968.566671][T30004] EXT4-fs (loop7): can't get journal size [ 968.580578][T30010] loop8: detected capacity change from 0 to 128 [ 968.617441][T30004] EXT4-fs (loop7): 1 truncate cleaned up [ 968.644975][T30004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.654511][T30010] FAT-fs (loop8): Directory bread(block 414) failed [ 968.716449][T30010] FAT-fs (loop8): Directory bread(block 415) failed [ 968.736134][T30010] FAT-fs (loop8): Directory bread(block 416) failed [ 968.771388][T30010] FAT-fs (loop8): Directory bread(block 417) failed [ 968.800499][T30010] FAT-fs (loop8): Directory bread(block 418) failed [ 968.812241][T21664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.836793][T30010] FAT-fs (loop8): Directory bread(block 419) failed [ 968.843483][T30010] FAT-fs (loop8): Directory bread(block 420) failed [ 968.884829][T30010] FAT-fs (loop8): Directory bread(block 421) failed [ 969.727919][T30053] loop7: detected capacity change from 0 to 128 [ 969.796304][T30053] FAT-fs (loop7): Directory bread(block 414) failed [ 969.803004][T30053] FAT-fs (loop7): Directory bread(block 415) failed [ 969.876249][T30053] FAT-fs (loop7): Directory bread(block 416) failed [ 969.882942][T30053] FAT-fs (loop7): Directory bread(block 417) failed [ 969.945171][T30053] FAT-fs (loop7): Directory bread(block 418) failed [ 969.967772][T30053] FAT-fs (loop7): Directory bread(block 419) failed [ 969.984651][T30053] FAT-fs (loop7): Directory bread(block 420) failed [ 970.001671][T30053] FAT-fs (loop7): Directory bread(block 421) failed [ 970.211127][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9795'. [ 971.229402][T30110] binder: 30106:30110 ioctl 4018620d 0 returned -22 [ 971.453747][T30120] binder: 30117:30120 ioctl c0306201 200000000100 returned -14 [ 972.147109][T30140] loop8: detected capacity change from 0 to 128 [ 972.184803][T30140] FAT-fs (loop8): Directory bread(block 414) failed [ 972.199043][T30140] FAT-fs (loop8): Directory bread(block 415) failed [ 972.207752][T30140] FAT-fs (loop8): Directory bread(block 416) failed [ 972.217596][T30142] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9826'. [ 972.226846][T30140] FAT-fs (loop8): Directory bread(block 417) failed [ 972.233496][T30140] FAT-fs (loop8): Directory bread(block 418) failed [ 972.266833][T30140] FAT-fs (loop8): Directory bread(block 419) failed [ 972.273798][T30140] FAT-fs (loop8): Directory bread(block 420) failed [ 972.313826][T30140] FAT-fs (loop8): Directory bread(block 421) failed [ 973.279909][T30178] loop9: detected capacity change from 0 to 128 [ 973.353709][ T5806] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 973.834817][T30198] loop3: detected capacity change from 0 to 16 [ 973.872298][T30198] erofs: (device loop3): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 973.962103][T30202] loop3: detected capacity change from 0 to 256 [ 974.074370][T30202] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 976.140774][T30260] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 976.904851][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 976.904871][ T28] audit: type=1326 audit(975.848:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30270 comm="syz.8.9881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7fc00000 [ 977.148646][T30297] overlayfs: failed to resolve './file0': -2 [ 978.435934][T14636] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 978.503368][T30342] 9pnet: Could not find request transport: 0xffffffffffffffff [ 978.625700][T14636] usb 9-1: Using ep0 maxpacket: 16 [ 978.650135][T14636] usb 9-1: config 222 has an invalid interface number: 31 but max is 0 [ 978.668104][T14636] usb 9-1: config 222 has no interface number 0 [ 978.695694][T14636] usb 9-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 978.725570][T14636] usb 9-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 978.772862][T14636] usb 9-1: config 222 interface 31 has no altsetting 0 [ 978.797168][T14636] usb 9-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 978.812114][T14636] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.826091][T14636] usb 9-1: Product: syz [ 978.830308][T14636] usb 9-1: Manufacturer: syz [ 978.845175][T14636] usb 9-1: SerialNumber: syz [ 978.873308][T30337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 979.117643][T14636] ldusb 9-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 979.151018][T14636] usb 9-1: USB disconnect, device number 14 [ 979.170771][T14636] ldusb 9-1:222.31: LD USB Device #0 now disconnected [ 980.040066][T30398] netlink: 'syz.8.9933': attribute type 64 has an invalid length. [ 980.048570][T30398] netlink: 5 bytes leftover after parsing attributes in process `syz.8.9933'. [ 980.065000][T30398] gretap0: entered allmulticast mode [ 980.071314][T30398] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 980.584113][T30417] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9942'. [ 980.770846][T30423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9945'. [ 982.463877][T30482] qnx4: no qnx4 filesystem (no root dir). [ 983.033622][T30503] loop9: detected capacity change from 0 to 16 [ 983.054923][T30503] erofs: (device loop9): mounted with root inode @ nid 36. [ 983.575762][T30506] erofs: (device loop9): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 983.593151][T30506] erofs: (device loop9): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 983.649236][T30506] syz.9.9984: attempt to access beyond end of device [ 983.649236][T30506] loop9: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 983.667636][T30506] syz.9.9984: attempt to access beyond end of device [ 983.667636][T30506] loop9: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 984.375606][T30526] loop7: detected capacity change from 0 to 2048 [ 984.416741][T30526] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 984.451151][T30526] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 984.485996][T30526] UDF-fs: Scanning with blocksize 512 failed [ 984.583772][T30526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 985.693650][T30573] loop9: detected capacity change from 0 to 512 [ 985.710458][T30573] EXT4-fs: Ignoring removed mblk_io_submit option [ 985.737652][T30573] EXT4-fs: inline encryption not supported [ 985.743690][T30573] EXT4-fs: Ignoring removed mblk_io_submit option [ 985.798992][T30573] EXT4-fs (loop9): Test dummy encryption mode enabled [ 985.809984][T30575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (8 ns). Using initial count to start timer. [ 985.820024][T30573] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 985.878047][T30573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 985.915426][T30573] System zones: 1-12 [ 985.929358][T30573] EXT4-fs (loop9): 1 truncate cleaned up [ 985.937039][T30573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.016090][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.266154][T30588] netlink: 'syz.9.10022': attribute type 4 has an invalid length. [ 986.274046][T30588] netlink: 'syz.9.10022': attribute type 5 has an invalid length. [ 986.299764][T30588] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.10022'. [ 987.118203][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10037'. [ 987.544818][T30632] binder: 30631:30632 ioctl 400c620e 0 returned -14 [ 988.077490][T30646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10051'. [ 988.621893][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10058'. [ 988.685037][T14636] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 988.865074][T14636] usb 10-1: Using ep0 maxpacket: 32 [ 988.880580][T14636] usb 10-1: unable to get BOS descriptor or descriptor too short [ 988.892472][T14636] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 988.912715][T14636] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 988.927029][T14636] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.944490][T14636] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.963873][T14636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.982696][T14636] usb 10-1: Product: syz [ 988.992804][T14636] usb 10-1: Manufacturer: syz [ 989.006012][T14636] usb 10-1: SerialNumber: syz [ 989.241500][T14636] usb 10-1: 0:2 : does not exist [ 989.282358][T14636] usb 10-1: USB disconnect, device number 14 [ 989.362185][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.414186][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10067'. [ 991.076106][T30704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10076'. [ 992.690945][T30754] loop8: detected capacity change from 0 to 512 [ 992.706758][T30754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 992.723881][T30754] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 992.760006][T30754] EXT4-fs (loop8): 1 truncate cleaned up [ 992.792530][T30754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.116343][T14616] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 993.317933][T14616] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.337172][T14616] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.357720][T14616] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.371968][T14616] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.381325][T14616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.408508][T14616] usb 9-1: config 0 descriptor?? [ 993.783077][T30791] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10115'. [ 993.831829][T14616] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 993.877478][T14616] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 994.233774][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.240258][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.461668][T18391] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 994.708138][ T968] usb 9-1: USB disconnect, device number 15 [ 994.781866][T30810] loop7: detected capacity change from 0 to 64 [ 994.845476][T30810] hfs: get root inode failed [ 994.901212][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 994.918856][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 994.928599][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 994.953409][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 994.966091][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 994.989924][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 995.193633][ T1328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.311960][T21590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.372444][ T1328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.427216][T30812] chnl_net:caif_netlink_parms(): no params data found [ 995.458066][T30823] binder: Unknown parameter 'co' [ 995.557673][ T1328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.687739][ T1328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.933963][T30812] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.937645][T30832] kvm: pic: non byte write [ 995.941939][T30812] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.953443][T30812] bridge_slave_0: entered allmulticast mode [ 995.961976][T30812] bridge_slave_0: entered promiscuous mode [ 995.995007][T30812] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.002419][T30812] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.010447][T30812] bridge_slave_1: entered allmulticast mode [ 996.018004][T30812] bridge_slave_1: entered promiscuous mode [ 996.142753][T30812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.193888][T30812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.492647][T30812] team0: Port device team_slave_0 added [ 996.527206][T30812] team0: Port device team_slave_1 added [ 996.634709][ T5834] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 996.697930][T30812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.715991][T30812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.749272][T30812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.828418][T30812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.841193][ T5834] usb 10-1: Using ep0 maxpacket: 8 [ 996.848216][T30812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.879942][T30812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.907308][ T5834] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 996.924534][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.932745][ T5834] usb 10-1: Product: syz [ 996.949284][ T5834] usb 10-1: Manufacturer: syz [ 996.954055][ T5834] usb 10-1: SerialNumber: syz [ 996.979377][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10135'. [ 996.985559][ T5834] usb 10-1: config 0 descriptor?? [ 997.005317][ T5834] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 997.029604][T18391] Bluetooth: hci1: command tx timeout [ 997.260577][T30812] hsr_slave_0: entered promiscuous mode [ 997.287216][T30812] hsr_slave_1: entered promiscuous mode [ 997.324800][T30812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.332449][T30812] Cannot create hsr debugfs directory [ 998.193516][T30886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10144'. [ 999.104592][T18391] Bluetooth: hci1: command tx timeout [ 999.305070][ T5834] gspca_sonixj: reg_w1 err -71 [ 999.364776][ T5834] sonixj: probe of 10-1:0.0 failed with error -71 [ 999.373231][ T5834] usb 10-1: USB disconnect, device number 15 [ 999.569828][ T28] audit: type=1326 audit(998.509:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 999.600109][ T28] audit: type=1326 audit(998.509:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 999.622081][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.814130][ T28] audit: type=1326 audit(998.509:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 999.836444][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.973366][ T1328] hsr_slave_0: left promiscuous mode [ 999.994717][ T28] audit: type=1326 audit(998.509:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.017412][ T28] audit: type=1326 audit(998.509:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.039909][ T28] audit: type=1326 audit(998.539:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.071149][ T28] audit: type=1326 audit(998.539:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.097986][ T28] audit: type=1326 audit(998.539:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.131362][ T1328] hsr_slave_1: left promiscuous mode [ 1000.142491][ T28] audit: type=1326 audit(998.539:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.167591][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.202272][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.210229][ T28] audit: type=1326 audit(998.539:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30906 comm="syz.7.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fef3378f749 code=0x7ffc0000 [ 1000.270688][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.301032][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.340029][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10154'. [ 1000.353780][T30917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10154'. [ 1000.433844][ T1328] veth1_macvtap: left promiscuous mode [ 1000.442401][ T1328] veth0_macvtap: left promiscuous mode [ 1000.449997][ T1328] veth1_vlan: left promiscuous mode [ 1000.456516][ T1328] veth0_vlan: left promiscuous mode [ 1001.053962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.188230][T18391] Bluetooth: hci1: command tx timeout [ 1001.535557][ T5834] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1001.718801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.730571][ T5834] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.749025][ T5834] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1001.763833][ T5834] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1001.778932][ T5834] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1001.782315][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 1001.789053][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.809216][ T5834] usb 10-1: Product: syz [ 1001.813683][ T5834] usb 10-1: Manufacturer: syz [ 1001.818544][ T5834] usb 10-1: SerialNumber: syz [ 1001.891836][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 1001.973314][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.066822][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.164303][ T5834] usb 10-1: Found UVC 0.00 device syz (8086:0b07) [ 1002.171176][ T5834] usb 10-1: No valid video chain found. [ 1002.184561][ T5834] usb 10-1: USB disconnect, device number 16 [ 1003.023512][ T1328] bond0 (unregistering): Released all slaves [ 1003.189689][T30919] tc_dump_action: action bad kind [ 1003.264361][T18391] Bluetooth: hci1: command tx timeout [ 1003.477208][T30938] Set syz1 is full, maxelem 46 reached [ 1004.458330][T30812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1004.568471][T30812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1004.665264][T30812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1004.720710][T30812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1005.036414][T30984] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10175'. [ 1005.573825][T30812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.701339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.779222][T30812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.066732][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.074071][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.303174][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.310787][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.404172][T31019] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10188'. [ 1006.672871][T30812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1007.104753][T14616] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1007.324486][T14616] usb 8-1: Using ep0 maxpacket: 16 [ 1007.340749][T14616] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1007.366093][T14616] usb 8-1: config 0 has no interface number 0 [ 1007.402463][T14616] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1007.433950][T14616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.442012][T14616] usb 8-1: Product: syz [ 1007.457099][T30812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.493505][T14616] usb 8-1: Manufacturer: syz [ 1007.501813][T14616] usb 8-1: SerialNumber: syz [ 1007.517941][T14616] usb 8-1: config 0 descriptor?? [ 1007.547402][T14616] hub 8-1:0.132: bad descriptor, ignoring hub [ 1007.553559][T14616] hub: probe of 8-1:0.132 failed with error -5 [ 1007.641262][T14616] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input34 [ 1007.706877][T30812] veth0_vlan: entered promiscuous mode [ 1007.826384][T30812] veth1_vlan: entered promiscuous mode [ 1007.951804][T30812] veth0_macvtap: entered promiscuous mode [ 1007.997457][T30812] veth1_macvtap: entered promiscuous mode [ 1008.049165][T30812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.075975][T30812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.098673][T30812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.121371][T30812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.153508][T30812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.199491][T30812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.242774][T30812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.275276][T30812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.314129][T30812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.351504][T30812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.374559][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1008.374576][ T28] audit: type=1326 audit(1007.320:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1008.392971][T30812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.471131][T30812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.489870][ T28] audit: type=1326 audit(1007.350:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1008.505588][T30812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.573596][T30812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.594030][ T28] audit: type=1326 audit(1007.350:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1008.714000][ T28] audit: type=1326 audit(1007.370:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1008.817452][ T28] audit: type=1326 audit(1007.370:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1008.904045][ T28] audit: type=1326 audit(1007.370:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1008.964996][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.010659][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.013896][ T28] audit: type=1326 audit(1007.370:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1009.070304][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.121248][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.134784][ T28] audit: type=1326 audit(1007.370:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1009.245864][ T28] audit: type=1326 audit(1007.370:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1009.327197][ T28] audit: type=1326 audit(1007.370:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31075 comm="syz.8.10207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1009.606740][T31109] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10218'. [ 1012.031089][T14616] usb 8-1: USB disconnect, device number 39 [ 1013.784062][T31246] binder: BINDER_SET_CONTEXT_MGR already set [ 1013.790213][T31246] binder: 31245:31246 ioctl 4018620d 200000000040 returned -16 [ 1014.203683][T14622] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1014.405879][T14622] usb 10-1: Using ep0 maxpacket: 8 [ 1014.443494][T14622] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1014.469135][T14622] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.506136][T14622] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1014.527001][T14622] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.590978][T14622] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1014.621751][T14622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.866519][T14622] usb 10-1: GET_CAPABILITIES returned 0 [ 1014.872184][T14622] usbtmc 10-1:16.0: can't read capabilities [ 1015.077591][T28242] usb 10-1: USB disconnect, device number 17 [ 1015.552157][ T68] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.859754][ T68] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.096864][ T68] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.178724][T31309] input: syz1 as /devices/virtual/input/input35 [ 1016.408238][ T68] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.048485][ T68] tipc: Disabling bearer [ 1017.063635][ T68] tipc: Left network mode [ 1017.858157][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1017.870405][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1017.893180][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1017.902165][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1017.911013][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1017.920858][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1018.053374][T14636] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1018.260980][T14636] usb 9-1: config 0 has no interfaces? [ 1018.283582][T14636] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1018.313510][T14636] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.367110][T14636] usb 9-1: config 0 descriptor?? [ 1018.602833][T31335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.633855][T31335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.651447][T28242] usb 9-1: USB disconnect, device number 16 [ 1019.600845][T31336] chnl_net:caif_netlink_parms(): no params data found [ 1019.706665][ T68] hsr_slave_0: left promiscuous mode [ 1019.731117][ T68] hsr_slave_1: left promiscuous mode [ 1019.749639][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.769022][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.790797][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.808715][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.902652][ T68] veth1_macvtap: left promiscuous mode [ 1019.925448][ T68] veth0_macvtap: left promiscuous mode [ 1019.931179][ T68] veth1_vlan: left promiscuous mode [ 1019.949228][ T68] veth0_vlan: left promiscuous mode [ 1019.983559][ T51] Bluetooth: hci0: command tx timeout [ 1020.036955][T31402] kvm: vcpu 2044: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1022.073871][ T51] Bluetooth: hci0: command tx timeout [ 1022.707820][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1022.782049][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1022.847318][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.927347][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.784631][ T68] bond0 (unregistering): Released all slaves [ 1023.972656][T31427] netlink: 'syz.8.10321': attribute type 16 has an invalid length. [ 1023.981667][T31427] netlink: 'syz.8.10321': attribute type 17 has an invalid length. [ 1023.997606][T31427] gretap0: left allmulticast mode [ 1024.008389][T31427] sit0: left promiscuous mode [ 1024.095227][T31427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1024.143218][ T51] Bluetooth: hci0: command tx timeout [ 1024.732276][T31465] loop9: detected capacity change from 0 to 4096 [ 1024.773063][T31336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.923324][T31336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.088507][T31336] bridge_slave_0: entered allmulticast mode [ 1025.304045][T31336] bridge_slave_0: entered promiscuous mode [ 1025.358765][T31465] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1025.660319][T31336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.801516][T31336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.871171][T31465] ntfs3: loop9: Failed to load $Extend (-22). [ 1025.877602][T31465] ntfs3: loop9: Failed to initialize $Extend. [ 1026.009913][T31336] bridge_slave_1: entered allmulticast mode [ 1026.180612][T31336] bridge_slave_1: entered promiscuous mode [ 1026.223152][ T51] Bluetooth: hci0: command tx timeout [ 1026.715381][T31336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.750339][T31336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.916100][ T68] IPVS: stop unused estimator thread 0... [ 1027.008277][T31336] team0: Port device team_slave_0 added [ 1027.093031][T31336] team0: Port device team_slave_1 added [ 1027.265510][T31336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.272557][T31336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.398929][T31336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.420098][T31336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.461136][T31336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.487220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.562784][T31336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.775258][T31336] hsr_slave_0: entered promiscuous mode [ 1027.789567][T31336] hsr_slave_1: entered promiscuous mode [ 1027.806001][T31510] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10341'. [ 1028.398284][T31530] loop8: detected capacity change from 0 to 256 [ 1028.598380][T31530] syz.8.10347: attempt to access beyond end of device [ 1028.598380][T31530] loop8: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 1031.128743][T31336] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1031.174206][T31336] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1031.260524][T31336] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1031.306351][T31336] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1031.627016][T31336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.691254][T31336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.771009][T31467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.778268][T31467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.852549][T31467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.859748][T31467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.886057][T31640] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.10381' sets config #0 [ 1032.166015][T31646] loop8: detected capacity change from 0 to 256 [ 1033.898878][T31336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.109434][T31680] loop1: detected capacity change from 0 to 512 [ 1034.195921][T31680] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.10392: inode has both inline data and extents flags [ 1034.256805][T31680] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.10392: couldn't read orphan inode 15 (err -117) [ 1034.338852][T31680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.514400][T30812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.808850][T31336] veth0_vlan: entered promiscuous mode [ 1034.856870][T31336] veth1_vlan: entered promiscuous mode [ 1034.954969][T31336] veth0_macvtap: entered promiscuous mode [ 1034.988051][T31336] veth1_macvtap: entered promiscuous mode [ 1035.093997][T31336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.120780][T31336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.144889][T31336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.152647][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1035.152668][ T28] audit: type=1326 audit(1034.071:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.170136][T31336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.257075][ T28] audit: type=1326 audit(1034.071:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.288000][ T28] audit: type=1326 audit(1034.131:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.310791][ T28] audit: type=1326 audit(1034.131:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.314758][T31336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.351706][ T28] audit: type=1326 audit(1034.131:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.392106][ T28] audit: type=1326 audit(1034.131:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.415034][T31336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.458265][ T28] audit: type=1326 audit(1034.131:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.472365][T31336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.525815][T31336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.543647][ T28] audit: type=1326 audit(1034.131:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.547913][T31336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.617579][ T28] audit: type=1326 audit(1034.141:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.641698][T31336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.686400][T31717] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10397'. [ 1035.700103][T31336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.705130][ T28] audit: type=1326 audit(1034.151:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31708 comm="syz.8.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1035.725548][T31723] 9p: Unknown uid 00000000004294967295 [ 1035.753821][T31336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.774829][T31336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.808586][T31336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.114773][T31467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.146869][T31467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.244235][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.292381][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.645549][T31748] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10291'. [ 1036.676887][T31747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1036.712457][T14622] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1036.964353][T14622] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1036.980987][T14622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.011243][T14622] usb 9-1: Product: syz [ 1037.022496][T14622] usb 9-1: Manufacturer: syz [ 1037.042635][T14622] usb 9-1: SerialNumber: syz [ 1037.343058][T14622] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1037.406096][T14622] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1039.028302][T31817] netlink: 'syz.9.10428': attribute type 6 has an invalid length. [ 1039.087262][T14622] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 1039.128529][T14622] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1039.171599][T31820] loop1: detected capacity change from 0 to 128 [ 1039.184854][T14622] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1039.247268][T14622] lan78xx: probe of 9-1:1.0 failed with error -71 [ 1039.309479][T14622] usb 9-1: USB disconnect, device number 17 [ 1039.786262][T31841] mmap: syz.5.10436 (31841): VmData 49975296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1040.273905][T31858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10441'. [ 1040.572256][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1040.795557][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1040.828078][ T9] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 1040.857350][ T9] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 1040.900095][ T9] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1040.949879][ T9] usb 10-1: config 250 has no interface number 0 [ 1040.966900][ T9] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1040.989671][ T9] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1041.021157][ T9] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.048001][ T9] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1041.060382][T31880] loop5: detected capacity change from 0 to 512 [ 1041.083272][T31880] EXT4-fs: Ignoring removed mblk_io_submit option [ 1041.089843][ T9] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1041.109848][T31880] EXT4-fs: inline encryption not supported [ 1041.132524][T31880] EXT4-fs: Ignoring removed mblk_io_submit option [ 1041.139568][ T9] usb 10-1: config 250 interface 228 has no altsetting 0 [ 1041.150885][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1041.161908][ T9] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1041.172106][ T9] usb 10-1: Product: syz [ 1041.176441][ T9] usb 10-1: SerialNumber: syz [ 1041.208498][T31880] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1041.227610][ T9] hub 10-1:250.228: bad descriptor, ignoring hub [ 1041.240982][T31880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1041.281195][ T9] hub: probe of 10-1:250.228 failed with error -5 [ 1041.339158][T31880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1041.351571][T31880] System zones: 1-12 [ 1041.369339][T31880] EXT4-fs (loop5): 1 truncate cleaned up [ 1041.393504][T31880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.435659][ T9] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1041.533426][T31336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.751360][ T9] usb 10-1: reset high-speed USB device number 18 using dummy_hcd [ 1043.384451][ T9037] usb 10-1: USB disconnect, device number 18 [ 1043.449997][ T9037] usblp0: removed [ 1043.539904][T31961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10472'. [ 1043.810416][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10475'. [ 1044.014444][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1044.014463][ T28] audit: type=1326 audit(1042.962:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.138485][ T28] audit: type=1326 audit(1043.002:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.155259][T31980] overlayfs: failed to resolve './file1': -2 [ 1044.188404][ T28] audit: type=1326 audit(1043.002:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.292633][ T28] audit: type=1326 audit(1043.002:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.371040][ T28] audit: type=1326 audit(1043.002:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.485295][ T28] audit: type=1326 audit(1043.002:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.548749][ T28] audit: type=1326 audit(1043.012:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.610933][ T28] audit: type=1326 audit(1043.012:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1044.691824][ T28] audit: type=1326 audit(1043.012:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.9.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fa418f749 code=0x7ffc0000 [ 1045.793132][T32030] loop1: detected capacity change from 0 to 512 [ 1045.812878][T32030] EXT4-fs: Ignoring removed bh option [ 1045.840751][T32030] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1045.866784][T32030] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1045.897711][T32030] EXT4-fs (loop1): 1 truncate cleaned up [ 1045.916316][T32030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1045.993739][T30812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.844034][ T28] audit: type=1326 audit(1046.792:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32107 comm="syz.8.10524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1047.897936][T32106] loop5: detected capacity change from 0 to 256 [ 1048.982604][T32153] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10539'. [ 1049.388180][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 1049.388198][ T28] audit: type=1326 audit(1048.332:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.521566][ T28] audit: type=1326 audit(1048.332:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.609891][ T28] audit: type=1326 audit(1048.332:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.708759][ T28] audit: type=1326 audit(1048.332:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.821558][ T28] audit: type=1326 audit(1048.332:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.862103][T32184] netlink: 'syz.1.10552': attribute type 10 has an invalid length. [ 1049.870080][T32184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10552'. [ 1049.909550][ T28] audit: type=1326 audit(1048.362:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.953838][ T28] audit: type=1326 audit(1048.362:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1049.986039][ T28] audit: type=1326 audit(1048.372:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1050.075677][ T28] audit: type=1326 audit(1048.372:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1050.119063][T32184] team0: Port device geneve0 added [ 1050.137501][ T28] audit: type=1326 audit(1048.372:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32166 comm="syz.8.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9738f749 code=0x7ffc0000 [ 1050.716216][T32209] loop1: detected capacity change from 0 to 512 [ 1050.801986][T32209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.088131][T30812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.137384][T32332] binder: 32329:32332 unknown command 1074553620 [ 1054.165018][T32332] binder: 32329:32332 ioctl c0306201 200000000940 returned -22 [ 1054.392912][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 1054.392929][ T28] audit: type=1326 audit(1053.342:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32338 comm="syz.1.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1054.486345][ T28] audit: type=1326 audit(1053.372:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32338 comm="syz.1.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1054.503956][T32346] netlink: 'syz.9.10605': attribute type 4 has an invalid length. [ 1054.545395][T32346] netlink: 17 bytes leftover after parsing attributes in process `syz.9.10605'. [ 1054.599105][ T28] audit: type=1326 audit(1053.372:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32338 comm="syz.1.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1054.684296][ T28] audit: type=1326 audit(1053.372:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32338 comm="syz.1.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1054.781457][ T28] audit: type=1326 audit(1053.372:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32338 comm="syz.1.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1054.855953][ T28] audit: type=1326 audit(1053.372:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32338 comm="syz.1.10602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1055.000481][T32362] batadv_slave_1: entered promiscuous mode [ 1055.014749][T32360] batadv_slave_1: left promiscuous mode [ 1055.164521][ T28] audit: type=1326 audit(1054.112:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32368 comm="syz.1.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1055.287318][ T28] audit: type=1326 audit(1054.142:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32368 comm="syz.1.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1055.326497][ T28] audit: type=1326 audit(1054.142:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32368 comm="syz.1.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1055.431714][ T28] audit: type=1326 audit(1054.142:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32368 comm="syz.1.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1055.532748][ T5841] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1055.671843][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.678440][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.762179][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 1055.823618][ T5841] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1055.847248][ T5841] usb 6-1: config 0 has no interface number 0 [ 1055.859304][ T5841] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1055.897890][ T5841] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1056.058889][ T5841] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1056.213310][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.448899][ T5841] usb 6-1: Product: syz [ 1056.484011][ T5841] usb 6-1: Manufacturer: syz [ 1056.488683][ T5841] usb 6-1: SerialNumber: syz [ 1056.569783][ T5841] usb 6-1: config 0 descriptor?? [ 1056.627831][T32396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10622'. [ 1057.316981][ T5841] appletouch 6-1:0.85: Geyser mode initialized. [ 1057.339602][ T5841] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input36 [ 1057.896356][T31588] usb 6-1: USB disconnect, device number 2 [ 1058.025693][T31588] appletouch 6-1:0.85: input: appletouch disconnected [ 1058.741761][T32456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10640'. [ 1059.097845][T32468] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10645'. [ 1059.428065][ T5841] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1059.631727][ T5841] usb 9-1: Using ep0 maxpacket: 8 [ 1059.642872][ T5841] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1059.661546][ T5841] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1059.680310][ T5841] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1059.699596][ T5841] usb 9-1: config 250 has no interface number 0 [ 1059.721844][ T5841] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1059.744174][ T5841] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1059.765736][ T5841] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1059.792201][ T5841] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1059.823660][ T5841] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1059.877599][ T5841] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1059.897189][ T5841] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1059.918492][ T5841] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1059.947594][ T5841] usb 9-1: Product: syz [ 1059.964990][ T5841] usb 9-1: SerialNumber: syz [ 1060.054180][ T5841] hub 9-1:250.228: bad descriptor, ignoring hub [ 1060.060657][ T5841] hub: probe of 9-1:250.228 failed with error -5 [ 1060.188820][T32489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10651'. [ 1060.284108][ T5841] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1060.571856][ T5841] usb 9-1: reset high-speed USB device number 18 using dummy_hcd [ 1060.862350][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 1060.862367][ T28] audit: type=1326 audit(1059.813:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1060.981614][ T28] audit: type=1326 audit(1059.843:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.137826][ T28] audit: type=1326 audit(1059.863:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.251520][ T28] audit: type=1326 audit(1059.863:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.345928][ T28] audit: type=1326 audit(1059.863:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.422029][ T28] audit: type=1326 audit(1059.873:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.527838][ T28] audit: type=1326 audit(1059.873:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.617211][ T28] audit: type=1326 audit(1059.873:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.716628][ T28] audit: type=1326 audit(1059.883:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.803559][ T28] audit: type=1326 audit(1059.883:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32505 comm="syz.5.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac5458f749 code=0x7ffc0000 [ 1061.840663][T32519] tmpfs: Bad value for 'mpol' [ 1062.361242][T14636] usb 9-1: USB disconnect, device number 18 [ 1062.391634][T14636] usblp0: removed [ 1063.299757][T32558] usb usb8: usbfs: process 32558 (syz.9.10673) did not claim interface 0 before use [ 1064.244640][T32579] overlayfs: invalid origin (0000) [ 1064.390835][ T5841] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1064.455213][T32584] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1064.611102][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 1064.634077][ T5841] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1064.670367][ T5841] usb 2-1: config 0 has no interface number 0 [ 1064.688750][ T5841] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.726311][ T5841] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1064.751466][ T5841] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1064.760575][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.810762][ T5841] usb 2-1: Product: syz [ 1064.828740][ T5841] usb 2-1: Manufacturer: syz [ 1064.848930][ T5841] usb 2-1: SerialNumber: syz [ 1064.901594][ T5841] usb 2-1: config 0 descriptor?? [ 1065.841550][ T5841] appletouch 2-1:0.85: Geyser mode initialized. [ 1065.860942][ T5841] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input37 [ 1065.887890][T32624] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10691'. [ 1065.929220][T32624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10691'. [ 1065.970864][T32624] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10691'. [ 1066.375908][T32631] veth0: entered promiscuous mode [ 1066.447566][T32630] veth0: left promiscuous mode [ 1066.714397][ T5841] usb 2-1: USB disconnect, device number 9 [ 1066.854012][ T5841] appletouch 2-1:0.85: input: appletouch disconnected [ 1067.516953][T32653] loop8: detected capacity change from 0 to 1024 [ 1067.603467][T32653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.924137][T21590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1068.788265][T32707] tmpfs: Unknown parameter 'nosw' [ 1069.059531][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10722'. [ 1069.661886][T32731] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1069.923417][T32738] vxcan1: entered allmulticast mode [ 1070.889406][T32762] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1071.989314][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1071.989332][ T28] audit: type=1326 audit(1070.933:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.086783][ T28] audit: type=1326 audit(1070.933:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.119246][ T28] audit: type=1326 audit(1070.943:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.193416][ T28] audit: type=1326 audit(1070.943:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.242871][ T28] audit: type=1326 audit(1070.943:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.301359][ T28] audit: type=1326 audit(1070.943:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.344841][ T28] audit: type=1326 audit(1070.943:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.405361][ T28] audit: type=1326 audit(1070.943:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.452432][ T28] audit: type=1326 audit(1070.953:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.505905][ T28] audit: type=1326 audit(1070.953:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=328 comm="syz.1.10760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cac18f749 code=0x7ffc0000 [ 1072.871180][ T354] tmpfs: Unknown parameter 'no' [ 1077.890123][ T786] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 1078.100236][ T786] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1078.119736][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.137270][ T786] usb 2-1: config 0 descriptor?? [ 1080.739269][ T786] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1080.761899][ T534] netlink: 188 bytes leftover after parsing attributes in process `syz.9.10823'. [ 1080.765174][ T786] asix: probe of 2-1:0.0 failed with error -71 [ 1080.812960][ T786] usb 2-1: USB disconnect, device number 10 [ 1082.869686][T14617] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1083.076726][T14617] usb 2-1: config 0 has no interfaces? [ 1083.092192][T14617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.113880][T14617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.139994][T14617] usb 2-1: Product: syz [ 1083.145430][T14617] usb 2-1: Manufacturer: syz [ 1083.162311][T14617] usb 2-1: SerialNumber: syz [ 1083.198147][T14617] usb 2-1: config 0 descriptor?? [ 1083.229771][ T5841] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1083.453710][T14617] usb 2-1: USB disconnect, device number 11 [ 1083.468480][ T5841] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1083.491264][ T5841] usb 10-1: not running at top speed; connect to a high speed hub [ 1083.534115][ T5841] usb 10-1: config 1 has an invalid interface number: 138 but max is 0 [ 1083.556638][ T5841] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1083.580453][ T594] binder_alloc: 593: binder_alloc_buf, no vma [ 1083.589950][ T5841] usb 10-1: config 1 has no interface number 0 [ 1083.606489][ T5841] usb 10-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1083.627385][ T5841] usb 10-1: config 1 interface 138 has no altsetting 0 [ 1083.647191][ T5841] usb 10-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1083.663048][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.679488][ T5841] usb 10-1: Product: syz [ 1083.691917][ T5841] usb 10-1: Manufacturer: syz [ 1083.697199][ T5841] usb 10-1: SerialNumber: syz [ 1083.944767][ T5841] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1084.119957][ T5841] usb 10-1: USB disconnect, device number 19 [ 1084.205194][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.916060][ T625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10848'. [ 1086.970652][ T681] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10868'. [ 1087.915395][ T716] netlink: 'syz.5.10877': attribute type 7 has an invalid length. [ 1087.946950][ T716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10877'. [ 1088.097400][ T720] netlink: 'syz.8.10879': attribute type 27 has an invalid length. [ 1088.511735][ T736] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10884'. [ 1088.820665][ T749] netlink: 'syz.1.10889': attribute type 8 has an invalid length. [ 1090.882336][ T808] loop8: detected capacity change from 0 to 128 [ 1091.138224][ T808] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1091.257242][ T824] syz.8.10906 (pid 824) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1091.317543][ T808] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 23 bytes, need 32+ bytes) [ 1091.419347][T18391] Bluetooth: hci0: command 0x0405 tx timeout [ 1091.584885][T21590] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1091.674212][T18391] Bluetooth: hci2: command 0x0406 tx timeout [ 1091.679590][ T772] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1091.988766][ T772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1091.995689][ T772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1092.036378][ T772] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1092.063105][ T772] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1092.120409][ T772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1092.127497][ T772] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1092.217336][ T772] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1093.739449][T18391] Bluetooth: hci3: command 0x0406 tx timeout [ 1094.060330][T18391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1094.139103][T18391] Bluetooth: hci0: command 0x0405 tx timeout [ 1095.285747][ T941] loop9: detected capacity change from 0 to 512 [ 1095.330170][ T941] EXT4-fs: Ignoring removed i_version option [ 1095.346877][ T941] EXT4-fs: Ignoring removed bh option [ 1095.438642][ T941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.461714][ T940] syzkaller0: entered promiscuous mode [ 1095.468682][ T940] syzkaller0: entered allmulticast mode [ 1095.746909][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.139012][T18391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1096.221630][T18391] Bluetooth: hci0: command 0x0405 tx timeout [ 1098.250766][T18391] Bluetooth: hci1: command 0x0c1a tx timeout [ 1098.309480][T18391] Bluetooth: hci0: command 0x0405 tx timeout [ 1103.766883][ T1095] loop5: detected capacity change from 0 to 128 [ 1103.829462][ T1095] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1104.101744][T31336] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1104.944877][ T1136] loop9: detected capacity change from 0 to 16 [ 1104.983931][ T1136] erofs: (device loop9): mounted with root inode @ nid 36. [ 1106.836363][ T1186] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1106.891919][ T1186] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1107.000917][ T1189] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11017'. [ 1108.257646][ T1213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1108.264312][ T1213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1108.273152][ T1213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1108.279863][ T1213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1108.925948][ T1249] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1108.933190][ T1249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1108.976910][ T1249] vhci_hcd vhci_hcd.0: Device attached [ 1108.990113][ T1250] vhci_hcd: connection closed [ 1109.002695][T31467] vhci_hcd: stop threads [ 1109.109417][T31467] vhci_hcd: release socket [ 1109.168057][T31467] vhci_hcd: disconnect device [ 1110.138399][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1110.298185][T18391] Bluetooth: hci0: command 0x0405 tx timeout [ 1110.298925][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1110.304303][T18391] Bluetooth: hci3: command 0x0406 tx timeout [ 1111.314639][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11056'. [ 1111.328442][ T1314] erspan0: entered promiscuous mode [ 1115.491804][ T1446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11100'. [ 1116.498255][T14616] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1116.706347][T14616] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1116.757986][T14616] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.766145][T14616] usb 10-1: Product: syz [ 1116.793640][T14616] usb 10-1: Manufacturer: syz [ 1116.817747][T14616] usb 10-1: SerialNumber: syz [ 1116.906010][ T1492] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11116'. [ 1116.935641][ T1492] ip6_vti0: entered promiscuous mode [ 1116.956037][ T1492] ip6_vti0: entered allmulticast mode [ 1117.068227][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1117.103437][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.110627][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.138910][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1117.928648][ T1524] xt_cgroup: invalid path, errno=-2 [ 1118.598447][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1119.020995][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 1119.064805][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1119.087370][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1119.135163][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1119.188167][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1119.227982][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1119.263423][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1119.319655][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1119.357961][T14616] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1119.416672][T14616] lan78xx: probe of 10-1:1.0 failed with error -71 [ 1119.459901][T14616] usb 10-1: USB disconnect, device number 20 [ 1120.532603][ T1586] tmpfs: Unknown parameter 'fscontext' [ 1123.841793][ T1671] overlayfs: missing 'lowerdir' [ 1125.064139][ T1713] overlayfs: missing 'lowerdir' [ 1125.472563][ T1724] loop1: detected capacity change from 0 to 512 [ 1125.502964][ T1724] EXT4-fs: Ignoring removed mblk_io_submit option [ 1125.537621][ T1724] EXT4-fs: inline encryption not supported [ 1125.543580][ T1724] EXT4-fs: Ignoring removed mblk_io_submit option [ 1125.590575][ T1724] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1125.603678][ T1724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1125.679106][ T1724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1125.713057][ T1724] System zones: 1-12 [ 1125.743197][ T1724] EXT4-fs (loop1): 1 truncate cleaned up [ 1125.778629][ T1724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.014765][T30812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.745661][ T1765] mkiss: ax0: crc mode is auto. [ 1126.869069][ T1772] syzkaller0: entered promiscuous mode [ 1126.888635][ T1772] syzkaller0: entered allmulticast mode [ 1127.055001][ T1775] netlink: 'syz.9.11205': attribute type 12 has an invalid length. [ 1127.075245][ T1779] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1127.123337][ T1779] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1127.362730][ T1786] loop8: detected capacity change from 0 to 128 [ 1128.569974][ T1800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11211'. [ 1128.974953][ T1811] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1129.019492][ T1811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1130.135348][ T1847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1130.303004][ T1847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1130.495657][ T1862] loop1: detected capacity change from 0 to 256 [ 1130.734972][ T1870] binder: Unknown parameter 'defcontext' [ 1131.672395][ T1873] tipc: Started in network mode [ 1131.717002][ T1873] tipc: Node identity bae75bde1ab3, cluster identity 4711 [ 1131.756616][ T1873] tipc: Enabled bearer , priority 0 [ 1131.867239][ T1872] tipc: Disabling bearer [ 1131.967784][ T1887] overlayfs: missing 'lowerdir' [ 1132.288102][ T1894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11242'. [ 1134.420519][ T1943] loop9: detected capacity change from 0 to 512 [ 1134.513359][ T1943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.749746][T21686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.490150][ T2045] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1137.712831][ T2053] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11294'. [ 1138.439670][ T2079] netlink: 536 bytes leftover after parsing attributes in process `syz.5.11305'. [ 1139.423132][ T2101] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11315'. [ 1140.911961][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1140.911978][ T28] audit: type=1804 audit(1139.857:4694): pid=2142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.11329" name="/newroot/1240/file1" dev="fuse" ino=1 res=1 errno=0 [ 1140.992473][ T28] audit: type=1800 audit(1139.857:4695): pid=2142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11329" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1141.065979][ T28] audit: type=1800 audit(1139.907:4696): pid=2142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11329" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1142.016982][ T2176] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 1142.048005][ C0] divide error: 0000 [#1] PREEMPT SMP KASAN [ 1142.053962][ C0] CPU: 0 PID: 2176 Comm: syz.5.11340 Not tainted syzkaller #0 [ 1142.061471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1142.071575][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a2/0x430 [ 1142.078105][ C0] Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 0d a7 8a f9 48 bb 00 00 00 [ 1142.097764][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00010046 [ 1142.103884][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1142.111913][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1142.119934][ C0] RBP: ffff88806c0f2600 R08: ffff88806c0f2600 R09: 1ffff92000662200 [ 1142.127951][ C0] R10: dffffc0000000000 R11: fffff52000662201 R12: ffff88806c0f2688 [ 1142.135973][ C0] R13: 0000000000000004 R14: 0000000000000000 R15: ffff88806c0f2634 [ 1142.143994][ C0] FS: 00007fac555036c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1142.152976][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.159606][ C0] CR2: 000000110c3cceb0 CR3: 000000005947b000 CR4: 00000000003506f0 [ 1142.167629][ C0] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 1142.175648][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1142.183663][ C0] Call Trace: [ 1142.186985][ C0] [ 1142.189872][ C0] comedi_buf_write_samples+0x372/0x5d0 [ 1142.195474][ C0] ? verify_lock_unused+0x140/0x140 [ 1142.200760][ C0] aio_iiro_16_cos+0x164/0x1c0 [ 1142.205639][ C0] ? ktime_get+0x7f/0x280 [ 1142.210015][ C0] ? ktime_get+0x7f/0x280 [ 1142.214392][ C0] ? aio_iiro_16_attach+0x760/0x760 [ 1142.219655][ C0] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 1142.225955][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 1142.231310][ C0] ? aio_iiro_16_attach+0x760/0x760 [ 1142.236568][ C0] __handle_irq_event_percpu+0x276/0x930 [ 1142.242274][ C0] ? __irq_wake_thread+0x160/0x160 [ 1142.247449][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 1142.252533][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1142.257802][ C0] handle_irq_event+0x8b/0x1e0 [ 1142.262633][ C0] ? handle_edge_irq+0x23f/0xb30 [ 1142.267633][ C0] handle_edge_irq+0x247/0xb30 [ 1142.272458][ C0] __common_interrupt+0x13b/0x230 [ 1142.277592][ C0] common_interrupt+0xb4/0xd0 [ 1142.282540][ C0] [ 1142.285583][ C0] [ 1142.288581][ C0] asm_common_interrupt+0x26/0x40 [ 1142.293780][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 1142.300415][ C0] Code: 74 05 e8 ea 7c 13 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f2 f8 e2 f6 65 8b 05 e3 41 8b 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1142.320159][ C0] RSP: 0018:ffffc9000d957a40 EFLAGS: 00000206 [ 1142.326280][ C0] RAX: 6961787e32ae4b00 RBX: 0000000000000a06 RCX: 6961787e32ae4b00 [ 1142.334310][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 1142.342326][ C0] RBP: ffffc9000d957ad0 R08: ffffffff90da8557 R09: 1ffffffff21b50aa [ 1142.350359][ C0] R10: dffffc0000000000 R11: fffffbfff21b50ab R12: dffffc0000000000 [ 1142.358385][ C0] R13: dffffc0000000000 R14: ffffffff971d8d40 R15: 1ffff92001b2af48 [ 1142.366419][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1142.371329][ C0] ? io_serial_out+0x55/0xc0 [ 1142.376024][ C0] serial8250_config_port+0x2697/0x39c0 [ 1142.381642][ C0] ? serial8250_request_port+0x20/0x20 [ 1142.387177][ C0] ? __release_region+0x2d5/0x360 [ 1142.392308][ C0] ? free_resource+0x450/0x450 [ 1142.397132][ C0] univ8250_config_port+0x3b5/0x960 [ 1142.402396][ C0] uart_ioctl+0xddf/0xfb0 [ 1142.406791][ C0] ? uart_chars_in_buffer+0x2c0/0x2c0 [ 1142.412335][ C0] ? __fget_files+0x28/0x4d0 [ 1142.417031][ C0] ? tty_jobctrl_ioctl+0x367/0xb70 [ 1142.422242][ C0] tty_ioctl+0x926/0xdd0 [ 1142.426547][ C0] ? tty_get_icount+0xb0/0xb0 [ 1142.431279][ C0] __se_sys_ioctl+0xfd/0x170 [ 1142.435932][ C0] do_syscall_64+0x55/0xb0 [ 1142.440419][ C0] ? clear_bhb_loop+0x40/0x90 [ 1142.445156][ C0] ? clear_bhb_loop+0x40/0x90 [ 1142.449900][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.455839][ C0] RIP: 0033:0x7fac5458f749 [ 1142.460383][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.480047][ C0] RSP: 002b:00007fac55503038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.488516][ C0] RAX: ffffffffffffffda RBX: 00007fac547e5fa0 RCX: 00007fac5458f749 [ 1142.496543][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006 [ 1142.504569][ C0] RBP: 00007fac54613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1142.512593][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.520613][ C0] R13: 00007fac547e6038 R14: 00007fac547e5fa0 R15: 00007ffe668dca08 [ 1142.528653][ C0] [ 1142.531732][ C0] Modules linked in: [ 1142.535688][ C0] ---[ end trace 0000000000000000 ]--- [ 1142.541189][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a2/0x430 [ 1142.547583][ C0] Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 0d a7 8a f9 48 bb 00 00 00 [ 1142.567243][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00010046 [ 1142.573379][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1142.581400][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1142.589428][ C0] RBP: ffff88806c0f2600 R08: ffff88806c0f2600 R09: 1ffff92000662200 [ 1142.597467][ C0] R10: dffffc0000000000 R11: fffff52000662201 R12: ffff88806c0f2688 [ 1142.605580][ C0] R13: 0000000000000004 R14: 0000000000000000 R15: ffff88806c0f2634 [ 1142.613690][ C0] FS: 00007fac555036c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1142.622802][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.629448][ C0] CR2: 000000110c3cceb0 CR3: 000000005947b000 CR4: 00000000003506f0 [ 1142.637491][ C0] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 1142.645523][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1142.653560][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1142.661124][ C0] Kernel Offset: disabled [ 1142.665489][ C0] Rebooting in 86400 seconds..