last executing test programs: 5.043282434s ago: executing program 0 (id=6934): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4.90805013s ago: executing program 4 (id=6936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x1513, &(0x7f0000003080)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 3.011465111s ago: executing program 3 (id=6940): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210f27bd7000fbdbdf2501"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 3.008670621s ago: executing program 3 (id=6942): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.004140922s ago: executing program 3 (id=6944): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) 2.707172144s ago: executing program 3 (id=6946): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setresuid(0x0, 0x0, 0x0) 2.706582424s ago: executing program 3 (id=6947): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1b4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x15a011, 0x0) 2.697945214s ago: executing program 3 (id=6949): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.982185205s ago: executing program 4 (id=6950): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlockall() 1.807844662s ago: executing program 0 (id=6953): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.630434311s ago: executing program 1 (id=6956): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 1.532631245s ago: executing program 1 (id=6958): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) sendmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) 1.425555839s ago: executing program 1 (id=6960): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) 1.369883501s ago: executing program 1 (id=6961): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f000001", @ANYRES32], 0x48) 1.340059153s ago: executing program 2 (id=6962): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.260123706s ago: executing program 1 (id=6963): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 1.120923623s ago: executing program 1 (id=6964): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1.058358255s ago: executing program 4 (id=6965): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syslog(0x4, &(0x7f0000000040)=""/25, 0x19) 919.312231ms ago: executing program 2 (id=6966): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 861.282923ms ago: executing program 0 (id=6967): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getpeername$inet6(r0, 0x0, 0x0) 764.620748ms ago: executing program 0 (id=6968): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) 754.590848ms ago: executing program 2 (id=6969): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) 581.209795ms ago: executing program 0 (id=6970): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) timerfd_create(0x8, 0x80000) 564.653496ms ago: executing program 2 (id=6971): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 563.592306ms ago: executing program 4 (id=6972): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 413.013003ms ago: executing program 2 (id=6973): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c00058005"], 0x54}}, 0x4004850) 262.143179ms ago: executing program 0 (id=6974): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2060, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 123.639165ms ago: executing program 4 (id=6975): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r5, 0x80, 0x7f, 0xa}, [@NDA_FLAGS_EXT={0x8}, @NDA_LLADDR={0xa, 0x2, @random="f5cd1533841a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) 1.05451ms ago: executing program 4 (id=6976): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f00000006c0)=""/112, 0x70, 0x42) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=6986): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) kernel console output (not intermixed with test programs): 2434'. [ 256.844052][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2437'. [ 257.785235][ T1108] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 257.823388][ T1108] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.472658][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 259.077313][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 259.136970][ T9920] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.145915][ T9920] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.154723][ T9920] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.163608][ T9920] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.223319][ T9935] loop1: detected capacity change from 0 to 512 [ 259.365019][ T9935] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 259.382237][ T9935] EXT4-fs (loop1): inline encryption not supported [ 259.402785][ T9935] EXT4-fs (loop1): Test dummy encryption mode enabled [ 259.432635][ T9935] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 259.455933][ T9935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.500240][ T9935] EXT4-fs (loop1): 1 truncate cleaned up [ 259.544434][ T9935] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 259.775015][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 259.874490][ T9935] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 261.046141][T10004] tmpfs: Unknown parameter 'noswap' [ 263.050943][T10061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2540'. [ 263.370849][T10081] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 264.484313][T10130] binder: Unknown parameter 'seclabel' [ 265.218928][T10161] loop2: detected capacity change from 0 to 512 [ 265.242971][T10161] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 265.266553][T10161] EXT4-fs (loop2): inline encryption not supported [ 265.303404][T10161] EXT4-fs (loop2): Test dummy encryption mode enabled [ 265.333719][T10161] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 265.357364][T10161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.473415][T10161] EXT4-fs (loop2): 1 truncate cleaned up [ 265.479176][T10161] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 265.497766][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 265.739602][T10187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 265.872783][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.891635][ T4227] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.936013][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.976180][ T4227] usb 2-1: config 0 descriptor?? [ 266.312606][ T4227] usbhid 2-1:0.0: can't add hid device: -71 [ 266.318620][ T4227] usbhid: probe of 2-1:0.0 failed with error -71 [ 266.372445][ T4227] usb 2-1: USB disconnect, device number 2 [ 267.964326][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2640'. [ 268.354218][T10295] netlink: 'syz.2.2649': attribute type 13 has an invalid length. [ 268.675153][T10313] loop1: detected capacity change from 0 to 2048 [ 268.858041][T10313] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.939271][T10313] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.316928][ T263] block nbd2: Attempted send on invalid socket [ 269.324381][ T263] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 269.338264][T10344] EXT4-fs (nbd2): unable to read superblock [ 269.338487][T10346] fuse: Bad value for 'fd' [ 269.537952][T10356] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.2676'. [ 269.698624][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 269.729192][T10362] overlayfs: missing 'lowerdir' [ 269.952378][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 270.045558][T10377] netlink: 'syz.2.2687': attribute type 4 has an invalid length. [ 270.072606][ T4227] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.101794][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0 [ 270.124139][ T4227] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 270.153591][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.196632][ T4227] usb 1-1: config 0 descriptor?? [ 270.555128][ T4227] usbhid 1-1:0.0: can't add hid device: -71 [ 270.566834][ T4227] usbhid: probe of 1-1:0.0 failed with error -71 [ 270.577039][ T4227] usb 1-1: USB disconnect, device number 4 [ 273.077174][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2749'. [ 273.185830][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2749'. [ 273.481644][T10539] overlayfs: missing 'lowerdir' [ 274.470593][T10591] 9pnet: Insufficient options for proto=fd [ 275.308020][T10616] loop0: detected capacity change from 0 to 1024 [ 275.393740][T10616] EXT4-fs (loop0): inline encryption not supported [ 275.412172][T10616] EXT4-fs (loop0): Ignoring removed nobh option [ 275.419205][T10616] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 275.476581][T10616] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.635361][T10616] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nouid32,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,nomblk_io_submit,grpid,dioread_nolock,,errors=continue. Quota mode: writeback. [ 277.456712][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2815'. [ 277.610724][T10677] bridge0: port 3(hsr_slave_1) entered blocking state [ 277.635372][T10677] bridge0: port 3(hsr_slave_1) entered disabled state [ 278.361117][T10712] netlink: 'syz.3.2834': attribute type 4 has an invalid length. [ 278.373206][ T26] audit: type=1326 audit(2000000090.295:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10674 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7fc00000 [ 278.451064][ T26] audit: type=1326 audit(2000000090.295:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10674 comm="syz.2.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f388af63749 code=0x7fc00000 [ 278.539315][T10715] loop0: detected capacity change from 0 to 1024 [ 278.671685][T10715] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 278.741681][T10715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 278.808772][T10715] System zones: 0-1, 4-36, 102-102 [ 278.849062][T10715] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 279.250700][T10743] bridge0: port 3(hsr_slave_1) entered blocking state [ 279.278135][T10743] bridge0: port 3(hsr_slave_1) entered disabled state [ 279.363638][ T26] audit: type=1326 audit(2000000091.285:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10742 comm="syz.0.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7fc00000 [ 279.398935][T10751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2853'. [ 279.955848][T10783] bridge0: port 3(hsr_slave_1) entered blocking state [ 280.008995][T10783] bridge0: port 3(hsr_slave_1) entered disabled state [ 280.772414][ T26] audit: type=1326 audit(2000000092.695:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 280.857682][ T26] audit: type=1326 audit(2000000092.695:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 280.908310][ T26] audit: type=1326 audit(2000000092.695:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 280.971931][ T26] audit: type=1326 audit(2000000092.695:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 281.008910][ T26] audit: type=1326 audit(2000000092.695:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 281.091564][ T26] audit: type=1326 audit(2000000092.695:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 281.171793][ T26] audit: type=1326 audit(2000000092.695:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7fc00000 [ 281.427687][T10845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2895'. [ 281.655450][T10857] overlayfs: missing 'lowerdir' [ 281.954826][T10873] bridge0: port 3(hsr_slave_1) entered blocking state [ 281.976700][T10873] bridge0: port 3(hsr_slave_1) entered disabled state [ 282.304636][T10888] loop1: detected capacity change from 0 to 512 [ 282.391697][T10891] loop2: detected capacity change from 0 to 512 [ 282.404199][T10888] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.441212][T10888] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.492660][T10891] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #11: comm syz.2.2915: ea_inode with extended attributes [ 282.522522][T10891] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2915: error while reading EA inode 11 err=-117 [ 282.593864][T10891] EXT4-fs (loop2): 1 orphan inode deleted [ 282.646588][T10891] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 284.997758][T10958] mmap: syz.3.2943 (10958): VmData 49209344 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 285.542613][T10983] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 285.715625][T10991] overlayfs: missing 'workdir' [ 286.094461][T11008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2966'. [ 288.888894][T11109] netlink: 'syz.3.3014': attribute type 4 has an invalid length. [ 288.904519][T11111] loop2: detected capacity change from 0 to 512 [ 289.074093][T11111] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.095593][T11111] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.346961][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 289.818776][T11151] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 289.981076][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3038'. [ 290.006931][T11164] device ip6_vti0 entered promiscuous mode [ 290.042351][T11165] netlink: 'syz.1.3040': attribute type 4 has an invalid length. [ 290.351341][ T4227] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 290.602559][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 290.725691][ T4227] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.779220][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 290.811516][ T4227] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 290.820602][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.886439][ T4227] usb 5-1: config 0 descriptor?? [ 291.241311][ T4227] usbhid 5-1:0.0: can't add hid device: -71 [ 291.247362][ T4227] usbhid: probe of 5-1:0.0 failed with error -71 [ 291.291304][ T4227] usb 5-1: USB disconnect, device number 4 [ 291.418727][T11213] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 291.935451][T11235] loop4: detected capacity change from 0 to 128 [ 292.010812][T11235] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 293.438690][T11267] netlink: 'syz.3.3082': attribute type 6 has an invalid length. [ 293.688846][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 293.730558][T11279] 9pnet: p9_fd_create_tcp (11279): problem connecting socket to 127.0.0.1 [ 293.764211][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3089'. [ 294.630640][T11317] loop0: detected capacity change from 0 to 256 [ 294.817892][T11317] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 295.316232][T11319] loop4: detected capacity change from 0 to 512 [ 295.466608][T11319] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.538763][T11319] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.775690][T11350] loop1: detected capacity change from 0 to 128 [ 296.886054][T11350] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 296.981238][T11354] lo speed is unknown, defaulting to 1000 [ 297.001474][T11354] lo speed is unknown, defaulting to 1000 [ 297.017947][T11354] lo speed is unknown, defaulting to 1000 [ 297.634734][T11354] infiniband syz2: set down [ 297.639636][T11354] infiniband syz2: added lo [ 297.654192][T11354] infiniband syz2: Couldn't open port 1 [ 297.694897][T11354] RDS/IB: syz2: added [ 297.699522][T11354] smc: adding ib device syz2 with port count 1 [ 297.705919][T11354] smc: ib device syz2 port 1 has pnetid [ 297.716500][T11354] lo speed is unknown, defaulting to 1000 [ 297.739278][T11353] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3121'. [ 297.820232][T11354] lo speed is unknown, defaulting to 1000 [ 297.840676][T11353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3121'. [ 297.926989][T11354] lo speed is unknown, defaulting to 1000 [ 297.942825][ T1111] lo speed is unknown, defaulting to 1000 [ 297.964494][ T4249] lo speed is unknown, defaulting to 1000 [ 298.117533][T11354] lo speed is unknown, defaulting to 1000 [ 298.217423][T11354] lo speed is unknown, defaulting to 1000 [ 298.482850][T11360] netlink: 'syz.4.3124': attribute type 4 has an invalid length. [ 298.706155][T11367] lo speed is unknown, defaulting to 1000 [ 299.814571][T11379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3130'. [ 299.870069][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 299.899608][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'. [ 299.921839][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'. [ 300.501449][T11403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 300.748480][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3148'. [ 302.657893][T11466] device batadv_slave_1 entered promiscuous mode [ 302.680148][T11465] device batadv_slave_1 left promiscuous mode [ 302.815628][T11462] can: request_module (can-proto-0) failed. [ 303.018152][T11477] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3175'. [ 303.065198][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 303.110099][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'. [ 303.149870][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'. [ 304.083693][T11490] lo speed is unknown, defaulting to 1000 [ 304.398795][T11501] can: request_module (can-proto-0) failed. [ 305.654364][T11543] can: request_module (can-proto-0) failed. [ 307.783922][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 307.783938][ T26] audit: type=1326 audit(2000000118.446:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 307.926589][ T26] audit: type=1326 audit(2000000118.446:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 307.990187][ T26] audit: type=1326 audit(2000000118.626:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 308.079901][ T26] audit: type=1326 audit(2000000118.626:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 308.102324][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.170240][ T26] audit: type=1326 audit(2000000118.626:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 308.280196][ T26] audit: type=1326 audit(2000000118.736:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 308.302563][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.470157][ T26] audit: type=1326 audit(2000000118.736:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 308.686927][T11574] rdma_rxe: rxe_register_device failed with error -23 [ 308.696663][T11574] rdma_rxe: failed to add lo [ 308.961659][ T26] audit: type=1326 audit(2000000118.736:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 309.260102][ T26] audit: type=1326 audit(2000000118.966:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 309.371505][ T26] audit: type=1326 audit(2000000118.966:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11548 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 309.910547][T11593] overlayfs: failed to clone lowerpath [ 310.202166][T11601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3228'. [ 314.853102][T11711] overlayfs: missing 'lowerdir' [ 314.872819][T11713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3281'. [ 315.715711][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'. [ 315.867342][T11763] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3305'. [ 315.901512][T11763] device gretap0 entered promiscuous mode [ 316.462387][T11787] netlink: 'syz.4.3313': attribute type 7 has an invalid length. [ 316.730425][T11795] lo speed is unknown, defaulting to 1000 [ 317.146851][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.153239][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.347818][T11829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 317.817142][T11851] tipc: Started in network mode [ 317.828942][T11851] tipc: Node identity 4, cluster identity 4711 [ 317.842207][T11851] tipc: Node number set to 4 [ 318.642670][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 318.649583][ T26] audit: type=1326 audit(2000000130.557:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.493724][ T26] audit: type=1326 audit(2000000130.557:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.516589][ T26] audit: type=1326 audit(2000000130.567:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.538951][ T26] audit: type=1326 audit(2000000130.567:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.563407][ T26] audit: type=1326 audit(2000000130.567:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.729664][ T26] audit: type=1326 audit(2000000130.567:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.846113][ T26] audit: type=1326 audit(2000000130.567:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 319.981728][ T26] audit: type=1326 audit(2000000130.567:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 320.104788][ T26] audit: type=1326 audit(2000000130.567:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 320.189256][ T26] audit: type=1326 audit(2000000130.567:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.1.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 320.870313][T11904] overlayfs: missing 'lowerdir' [ 321.291232][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 321.850084][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 326.085199][T12087] fuse: Bad value for 'group_id' [ 326.215015][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3461'. [ 326.643107][T12121] lo speed is unknown, defaulting to 1000 [ 327.780900][T12146] lo speed is unknown, defaulting to 1000 [ 329.149127][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 330.157476][T12213] xt_bpf: check failed: parse error [ 330.204612][T12212] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3514'. [ 330.775238][T12231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3524'. [ 332.536951][T12287] 9pnet: Insufficient options for proto=fd [ 333.874888][T12317] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 333.892813][T12319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3563'. [ 333.910298][T12317] CIFS mount error: No usable UNC path provided in device string! [ 333.910298][T12317] [ 333.927956][T12317] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.320846][T12336] 9pnet_virtio: no channels available for device syz [ 335.920586][T12368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3587'. [ 335.997305][T12370] 9pnet_virtio: no channels available for device syz [ 336.459180][T12370] overlayfs: failed to clone upperpath [ 336.831640][T12381] loop1: detected capacity change from 0 to 512 [ 336.944397][T12381] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 336.959875][T12381] System zones: 0-2, 18-18, 34-35 [ 337.026993][T12381] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue. Quota mode: writeback. [ 337.042139][T12381] ext4 filesystem being mounted at /729/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.148207][T12407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3600'. [ 338.495340][T12441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3617'. [ 339.032749][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3634'. [ 339.606439][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3645'. [ 339.797456][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3650'. [ 340.422105][T12530] 9pnet: Could not find request transport: f [ 340.722066][T12542] loop2: detected capacity change from 0 to 512 [ 340.805124][T12542] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 340.852467][T12542] EXT4-fs (loop2): orphan cleanup on readonly fs [ 340.900355][T12542] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.3663: Block bitmap for bg 0 marked uninitialized [ 340.996673][T12542] EXT4-fs (loop2): Remounting filesystem read-only [ 341.026604][T12542] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 341.088489][T12542] EXT4-fs (loop2): Remounting filesystem read-only [ 341.095188][T12542] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.3663: Block bitmap for bg 0 marked uninitialized [ 341.124852][T12542] EXT4-fs (loop2): Remounting filesystem read-only [ 341.138362][T12542] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 341.158142][T12542] EXT4-fs (loop2): Remounting filesystem read-only [ 341.164957][T12542] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.3663: Block bitmap for bg 0 marked uninitialized [ 341.190454][T12542] EXT4-fs (loop2): Remounting filesystem read-only [ 341.197027][T12542] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 341.218789][T12542] EXT4-fs (loop2): Remounting filesystem read-only [ 341.225488][T12542] EXT4-fs (loop2): 1 orphan inode deleted [ 341.238377][T12542] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 341.510893][T12560] loop2: detected capacity change from 0 to 512 [ 341.655115][T12560] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 341.677888][T12560] System zones: 0-2, 18-18, 34-35 [ 341.744657][T12560] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue. Quota mode: writeback. [ 341.818433][T12560] ext4 filesystem being mounted at /735/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.104262][T12594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3687'. [ 342.612118][T12620] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3701'. [ 342.999011][T12640] loop1: detected capacity change from 0 to 512 [ 343.047307][T12640] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 343.072992][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 343.073005][ T26] audit: type=1326 audit(2000000154.998:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 343.124338][T12640] EXT4-fs (loop1): orphan cleanup on readonly fs [ 343.132459][T12640] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.3708: Block bitmap for bg 0 marked uninitialized [ 343.165088][ T26] audit: type=1326 audit(2000000154.998:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 343.174146][T12640] EXT4-fs (loop1): Remounting filesystem read-only [ 343.280176][T12640] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 343.290196][T12640] EXT4-fs (loop1): Remounting filesystem read-only [ 343.296759][T12640] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.3708: Block bitmap for bg 0 marked uninitialized [ 343.309527][ T26] audit: type=1326 audit(2000000154.998:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 343.356857][T12640] EXT4-fs (loop1): Remounting filesystem read-only [ 343.381012][T12640] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 343.390948][ T26] audit: type=1326 audit(2000000155.068:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 343.419025][T12640] EXT4-fs (loop1): Remounting filesystem read-only [ 343.438417][T12640] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.3708: Block bitmap for bg 0 marked uninitialized [ 343.495648][T12640] EXT4-fs (loop1): Remounting filesystem read-only [ 343.538329][T12640] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 343.591535][T12640] EXT4-fs (loop1): Remounting filesystem read-only [ 343.629499][T12669] lo speed is unknown, defaulting to 1000 [ 343.642917][T12640] EXT4-fs (loop1): 1 orphan inode deleted [ 343.678224][T12640] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 344.466274][T12706] xt_SECMARK: invalid mode: 2 [ 345.291854][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 345.524524][T12724] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3748'. [ 345.527866][T12714] lo speed is unknown, defaulting to 1000 [ 345.957554][T12748] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3756'. [ 346.277325][T12761] lo speed is unknown, defaulting to 1000 [ 348.043134][T12794] lo speed is unknown, defaulting to 1000 [ 348.902853][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3797'. [ 349.097166][T12846] lo speed is unknown, defaulting to 1000 [ 349.212647][ T26] audit: type=1326 audit(2000000161.139:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.4.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 349.300734][ T26] audit: type=1326 audit(2000000161.169:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.4.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 349.423605][ T26] audit: type=1326 audit(2000000161.169:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.4.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 349.545284][ T26] audit: type=1326 audit(2000000161.169:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.4.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 349.663667][ T26] audit: type=1326 audit(2000000161.169:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.4.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 350.689371][T12883] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 350.771547][T12883] overlayfs: missing 'lowerdir' [ 351.050533][T12891] netlink: 368 bytes leftover after parsing attributes in process `syz.0.3823'. [ 351.119648][T12895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3825'. [ 351.926120][T12913] lo speed is unknown, defaulting to 1000 [ 353.437011][T12939] lo speed is unknown, defaulting to 1000 [ 354.799039][T12955] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3850'. [ 354.894276][T12960] lo speed is unknown, defaulting to 1000 [ 356.286841][T12993] lo speed is unknown, defaulting to 1000 [ 357.818241][T12996] lo speed is unknown, defaulting to 1000 [ 359.282826][T13047] lo speed is unknown, defaulting to 1000 [ 361.422410][T13123] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3918'. [ 362.415108][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'. [ 363.193131][T13158] 9pnet: Insufficient options for proto=fd [ 363.656168][T13176] tmpfs: Unknown parameter 'noswap' [ 365.607519][T13216] tipc: Enabled bearer , priority 0 [ 365.664540][T13214] tipc: Disabling bearer [ 366.732357][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3975'. [ 367.940821][ T26] audit: type=1326 audit(2000000179.870:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.0.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 368.044277][ T26] audit: type=1326 audit(2000000179.870:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.0.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 368.130985][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3989'. [ 368.407488][T13296] lo speed is unknown, defaulting to 1000 [ 370.508107][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4007'. [ 372.235902][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4025'. [ 372.297610][T13375] overlayfs: missing 'lowerdir' [ 372.800558][T13396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.818929][T13396] team0: Port device bond0 added [ 372.852938][T13390] team0: Failed to send port change of device bond0 via netlink (err -105) [ 373.542996][T13390] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.654022][T13390] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.718516][T13390] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 373.803930][T13390] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 374.592797][T13437] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4052'. [ 374.636457][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 374.687934][T13434] lo speed is unknown, defaulting to 1000 [ 374.706755][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4052'. [ 374.745167][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4052'. [ 375.480072][T13469] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4067'. [ 375.792734][T13481] lo speed is unknown, defaulting to 1000 [ 375.920924][T13487] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4076'. [ 376.447515][T13504] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4083'. [ 378.183168][T13522] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 378.276332][T13522] overlayfs: missing 'lowerdir' [ 378.798216][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.804566][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.082947][T13544] lo speed is unknown, defaulting to 1000 [ 379.230891][ T26] audit: type=1326 audit(2000000191.150:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 379.276009][ T26] audit: type=1326 audit(2000000191.180:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 379.332055][ T26] audit: type=1326 audit(2000000191.180:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 379.430883][ T26] audit: type=1326 audit(2000000191.180:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 379.525789][ T26] audit: type=1326 audit(2000000191.250:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x7ffc0000 [ 379.591111][ T26] audit: type=1326 audit(2000000191.250:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a62c95783 code=0x7ffc0000 [ 379.665676][ T26] audit: type=1326 audit(2000000191.250:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7a62c95807 code=0x7ffc0000 [ 379.717957][T13567] overlayfs: missing 'lowerdir' [ 379.760885][ T26] audit: type=1326 audit(2000000191.250:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7a62c4cbdd code=0x7ffc0000 [ 379.852480][ T26] audit: type=1326 audit(2000000191.250:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7a62cc9e89 code=0x7ffc0000 [ 379.926288][ T26] audit: type=1326 audit(2000000191.250:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.3.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7a62c4cc47 code=0x7ffc0000 [ 380.393222][T13587] lo speed is unknown, defaulting to 1000 [ 380.810292][T13601] device macsec0 entered promiscuous mode [ 381.138993][T13613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4135'. [ 381.618163][T13633] lo speed is unknown, defaulting to 1000 [ 381.900783][T13636] lo speed is unknown, defaulting to 1000 [ 382.947857][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 383.407133][T13687] lo speed is unknown, defaulting to 1000 [ 383.447264][T13689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4172'. [ 384.589716][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4176'. [ 384.923369][T13716] lo speed is unknown, defaulting to 1000 [ 386.217000][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'. [ 386.280225][T13746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.304680][T13746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.336251][T13746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.352950][T13746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.500340][T13773] lo speed is unknown, defaulting to 1000 [ 387.979310][T13785] lo speed is unknown, defaulting to 1000 [ 388.106904][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 388.106921][ T26] audit: type=1326 audit(2000000200.031:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.185775][ T26] audit: type=1326 audit(2000000200.071:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.279505][ T26] audit: type=1326 audit(2000000200.071:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.313788][ T26] audit: type=1326 audit(2000000200.071:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.341224][ T26] audit: type=1326 audit(2000000200.071:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.416974][ T26] audit: type=1326 audit(2000000200.071:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.535744][ T26] audit: type=1326 audit(2000000200.071:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.625752][ T26] audit: type=1326 audit(2000000200.071:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.728465][ T26] audit: type=1326 audit(2000000200.071:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 388.793079][T13819] netlink: 'syz.2.4225': attribute type 4 has an invalid length. [ 388.888812][T13822] netlink: 'syz.2.4225': attribute type 4 has an invalid length. [ 389.447316][T13838] lo speed is unknown, defaulting to 1000 [ 389.748366][T13855] loop2: detected capacity change from 0 to 128 [ 389.812134][T13855] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.858390][T13855] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.905472][T13863] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4247'. [ 390.175897][ T1408] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.758974][T13890] lo speed is unknown, defaulting to 1000 [ 391.452489][T13906] lo speed is unknown, defaulting to 1000 [ 391.660945][T13917] overlayfs: missing 'workdir' [ 391.933261][T13926] ptrace attach of "./syz-executor exec"[13929] was attempted by "./syz-executor exec"[13926] [ 392.297589][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4283'. [ 392.372538][T13944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4283'. [ 393.692496][T13951] lo speed is unknown, defaulting to 1000 [ 394.782349][T13975] lo speed is unknown, defaulting to 1000 [ 394.811487][T13979] loop2: detected capacity change from 0 to 512 [ 395.145959][T13992] loop1: detected capacity change from 0 to 512 [ 396.923252][T14016] overlayfs: missing 'workdir' [ 397.177018][T14021] ipt_CLUSTERIP: Please specify destination IP [ 397.335243][T13794] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 397.355668][T14031] 9pnet: Insufficient options for proto=fd [ 397.585359][T13794] usb 2-1: Using ep0 maxpacket: 8 [ 397.705262][T13794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 397.765387][T13794] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 397.773013][T13794] usb 2-1: can't read configurations, error -71 [ 398.197721][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4334'. [ 398.255173][T14055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4334'. [ 399.190412][T14073] device wlan0 entered promiscuous mode [ 401.043291][T14114] lo speed is unknown, defaulting to 1000 [ 401.626503][ T26] audit: type=1326 audit(2000000213.551:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 401.704200][ T26] audit: type=1326 audit(2000000213.581:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 401.800246][ T26] audit: type=1326 audit(2000000213.581:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fec83846005 code=0x7ffc0000 [ 401.875375][ T26] audit: type=1326 audit(2000000213.581:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 401.912812][ T26] audit: type=1326 audit(2000000213.581:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 402.022283][ T26] audit: type=1326 audit(2000000213.601:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 402.028332][T14138] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.055680][ T26] audit: type=1326 audit(2000000213.611:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 402.184913][T14138] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 402.395847][T14153] overlayfs: overlapping lowerdir path [ 402.624260][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 402.685030][T14166] device bridge_slave_1 left promiscuous mode [ 402.699341][T14166] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.749565][T14166] device bridge_slave_0 left promiscuous mode [ 402.757391][T14174] loop1: detected capacity change from 0 to 128 [ 402.770638][T14166] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.887492][T14174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.906967][T14174] ext4 filesystem being mounted at /869/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.817196][T14185] device wlan0 entered promiscuous mode [ 403.846050][T14184] lo speed is unknown, defaulting to 1000 [ 404.688983][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4408'. [ 405.054030][T14244] loop1: detected capacity change from 0 to 256 [ 405.162456][T14247] lo speed is unknown, defaulting to 1000 [ 405.585234][T14255] lo speed is unknown, defaulting to 1000 [ 406.154112][T14279] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 406.163117][T14279] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 406.172210][T14279] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 406.181788][T14279] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 406.193435][T14279] device geneve3 entered promiscuous mode [ 406.799479][ T26] audit: type=1326 audit(2000000218.712:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 406.925141][ T26] audit: type=1326 audit(2000000218.712:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 407.022691][ T26] audit: type=1326 audit(2000000218.712:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 407.139376][ T26] audit: type=1326 audit(2000000218.712:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 407.183672][T14298] netlink: 'syz.2.4442': attribute type 6 has an invalid length. [ 407.252146][T14298] netlink: 'syz.2.4442': attribute type 4 has an invalid length. [ 407.265006][ T26] audit: type=1326 audit(2000000219.172:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14300 comm="syz.1.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 407.282211][T14298] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4442'. [ 407.350957][ T26] audit: type=1326 audit(2000000219.172:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14300 comm="syz.1.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 407.511675][ T26] audit: type=1326 audit(2000000219.172:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14300 comm="syz.1.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 407.590707][ T26] audit: type=1326 audit(2000000219.172:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14300 comm="syz.1.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x7ffc0000 [ 408.165633][T14348] lo speed is unknown, defaulting to 1000 [ 408.468337][T14353] lo speed is unknown, defaulting to 1000 [ 408.666344][T14360] lo speed is unknown, defaulting to 1000 [ 409.431999][T14387] lo speed is unknown, defaulting to 1000 [ 409.512540][T14396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4487'. [ 409.675321][T14403] device wlan0 entered promiscuous mode [ 409.792773][T14392] lo speed is unknown, defaulting to 1000 [ 410.090144][T14400] lo speed is unknown, defaulting to 1000 [ 411.704250][T14453] netlink: 'syz.0.4513': attribute type 4 has an invalid length. [ 411.844508][T14459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4518'. [ 412.209880][T14483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 412.248892][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4529'. [ 412.260111][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 412.923076][T14517] device syzkaller0 entered promiscuous mode [ 412.963057][T14517] tipc: Enabled bearer , priority 0 [ 412.981898][T14524] lo speed is unknown, defaulting to 1000 [ 413.019258][T14515] tipc: Resetting bearer [ 413.086167][T14515] tipc: Disabling bearer [ 413.162187][T14533] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4553'. [ 413.191987][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4553'. [ 414.434857][T14604] netlink: 'syz.4.4588': attribute type 11 has an invalid length. [ 414.442963][T14604] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4588'. [ 415.100790][T14600] lo speed is unknown, defaulting to 1000 [ 415.322103][T14613] netlink: 'syz.2.4592': attribute type 1 has an invalid length. [ 415.394026][T14613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.963839][T14643] lo speed is unknown, defaulting to 1000 [ 417.237752][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4609'. [ 417.778016][T14696] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4624'. [ 417.781145][T13792] Bluetooth: hci4: command 0x0406 tx timeout [ 418.061222][T14704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4627'. [ 418.263689][T14712] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4632'. [ 418.334539][T14712] device gretap0 entered promiscuous mode [ 418.609883][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4640'. [ 419.937301][T14790] 9pnet: Could not find request transport: 0xffffffffffffffff [ 419.990944][T14796] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 420.035775][T14792] fuse: Unknown parameter '&' [ 420.700604][T14795] lo speed is unknown, defaulting to 1000 [ 422.103650][T14823] lo speed is unknown, defaulting to 1000 [ 422.489833][T14831] lo speed is unknown, defaulting to 1000 [ 423.750728][T14858] lo speed is unknown, defaulting to 1000 [ 424.533090][T14886] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4705'. [ 424.873046][T14899] lo speed is unknown, defaulting to 1000 [ 425.958936][T14924] netlink: 'syz.3.4725': attribute type 10 has an invalid length. [ 425.973076][T14924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4725'. [ 425.998715][T14924] device dummy0 entered promiscuous mode [ 426.033639][T13792] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 426.162697][T14932] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4729'. [ 426.200613][T14929] lo speed is unknown, defaulting to 1000 [ 426.443570][T13792] usb 2-1: Using ep0 maxpacket: 16 [ 426.468814][T14934] lo speed is unknown, defaulting to 1000 [ 426.563903][T13792] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 426.578487][T13792] usb 2-1: config 1 has no interface number 1 [ 426.613884][T13792] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 426.651863][T13792] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 426.703503][T13792] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.903833][T13792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.920804][T13792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.944910][T13792] usb 2-1: Product: syz [ 426.960573][T13792] usb 2-1: Manufacturer: syz [ 426.974456][T13792] usb 2-1: SerialNumber: syz [ 427.230644][T14950] fuse: Unknown parameter '&' [ 427.313842][T13792] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 427.463821][T13792] usb 2-1: USB disconnect, device number 5 [ 427.570326][T14961] overlayfs: overlapping lowerdir path [ 427.656303][ T4292] udevd[4292]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.780670][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 427.796035][T14969] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4746'. [ 429.058445][T15026] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 429.267737][T15041] overlayfs: failed to clone lowerpath [ 430.687690][T15063] lo speed is unknown, defaulting to 1000 [ 431.263103][T15084] lo speed is unknown, defaulting to 1000 [ 431.993202][T15111] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 432.143298][T15112] netlink: 'syz.1.4807': attribute type 13 has an invalid length. [ 432.805401][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 432.825083][T15121] device bridge_slave_1 left promiscuous mode [ 432.831363][T15121] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.917026][T15121] device bridge_slave_0 left promiscuous mode [ 432.936010][T15121] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.102688][T15124] ipt_CLUSTERIP: Please specify destination IP [ 433.704584][T15155] loop1: detected capacity change from 0 to 512 [ 433.735713][T15155] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 433.793216][T15155] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 433.801767][T15160] netlink: 'syz.4.4832': attribute type 6 has an invalid length. [ 433.836881][T15155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 433.848877][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4834'. [ 433.861085][T15164] device bridge_slave_1 left promiscuous mode [ 433.865992][T15155] System zones: 1-12 [ 433.870566][T15164] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.887114][T15164] device bridge_slave_0 left promiscuous mode [ 433.897970][T15164] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.905071][T15155] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4830: inode #1: comm syz.1.4830: iget: illegal inode # [ 433.942868][T15155] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4830: error while reading EA inode 1 err=-117 [ 434.032342][T15155] EXT4-fs (loop1): 1 orphan inode deleted [ 434.038564][T15160] netlink: 'syz.4.4832': attribute type 4 has an invalid length. [ 434.046215][T15155] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback. [ 434.058850][T15160] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4832'. [ 434.163845][T15169] lo speed is unknown, defaulting to 1000 [ 435.048076][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'. [ 435.073980][T15199] device bridge_slave_1 left promiscuous mode [ 435.094614][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.129499][T15199] device bridge_slave_0 left promiscuous mode [ 435.142097][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.280203][T15196] lo speed is unknown, defaulting to 1000 [ 435.758567][ T26] audit: type=1326 audit(2000000247.683:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 435.880224][ T26] audit: type=1326 audit(2000000247.683:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 435.951174][ T26] audit: type=1326 audit(2000000247.683:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 435.983823][T15226] lo speed is unknown, defaulting to 1000 [ 436.078794][ T26] audit: type=1326 audit(2000000247.683:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 436.152959][ T26] audit: type=1326 audit(2000000247.683:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 436.693096][ T26] audit: type=1326 audit(2000000248.593:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 436.986563][ T26] audit: type=1326 audit(2000000248.603:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 437.035758][ T26] audit: type=1326 audit(2000000248.683:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 437.063468][T15239] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.073156][T15239] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.081992][T15239] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.090856][T15239] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 437.099871][T15239] device geneve2 entered promiscuous mode [ 437.223157][ T26] audit: type=1326 audit(2000000248.693:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 437.285438][ T26] audit: type=1326 audit(2000000248.713:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.4.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 439.111252][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4882'. [ 439.126494][T15281] device bridge_slave_1 left promiscuous mode [ 439.143243][T15281] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.177401][T15281] device bridge_slave_0 left promiscuous mode [ 439.196045][T15281] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.006754][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.013556][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.461324][T15341] lo speed is unknown, defaulting to 1000 [ 440.814097][T15359] netlink: 'syz.3.4920': attribute type 4 has an invalid length. [ 440.928869][T15364] fuse: Bad value for 'user_id' [ 441.344834][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 441.344849][ T26] audit: type=1326 audit(2000000253.274:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 441.440784][ T26] audit: type=1326 audit(2000000253.314:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 441.567008][ T26] audit: type=1326 audit(2000000253.314:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 441.637026][ T26] audit: type=1326 audit(2000000253.314:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15379 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 441.773180][T10564] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 441.796548][T15394] lo speed is unknown, defaulting to 1000 [ 442.163009][T10564] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.184453][T10564] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 442.200406][T10564] usb 1-1: config 0 interface 0 has no altsetting 0 [ 442.207595][T10564] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 442.222474][T10564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.267258][T10564] usb 1-1: config 0 descriptor?? [ 442.283111][T15386] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 442.514350][T15402] device syzkaller0 entered promiscuous mode [ 442.580345][T15402] tipc: Enabled bearer , priority 0 [ 442.607488][T15401] tipc: Resetting bearer [ 442.613989][T10564] usbhid 1-1:0.0: can't add hid device: -71 [ 442.623338][T10564] usbhid: probe of 1-1:0.0 failed with error -71 [ 442.680709][T10564] usb 1-1: USB disconnect, device number 5 [ 442.779230][T15401] tipc: Disabling bearer [ 443.822709][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 443.950757][T15478] netlink: 'syz.3.4977': attribute type 11 has an invalid length. [ 443.999710][T15478] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4977'. [ 444.334212][ T21] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.345574][ T21] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 444.356446][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 444.363147][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 444.372633][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.408548][ T21] usb 3-1: config 0 descriptor?? [ 444.538207][T15460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 445.422563][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 445.428585][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 445.464344][ T21] usb 3-1: USB disconnect, device number 3 [ 445.773916][T15520] netlink: 'syz.0.4994': attribute type 11 has an invalid length. [ 445.781891][T15520] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4994'. [ 447.414172][T15557] loop2: detected capacity change from 0 to 1024 [ 447.549152][T15557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 447.932764][ T26] audit: type=1800 audit(2000000259.794:432): pid=15575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5012" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 448.361446][T15577] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5017'. [ 448.466976][T15577] device gretap0 entered promiscuous mode [ 448.980861][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5030'. [ 449.308806][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.347554][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.370256][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.406914][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.462598][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.498724][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.534731][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5036'. [ 449.841465][T15639] device sit0 entered promiscuous mode [ 449.867310][T15639] netlink: 'syz.1.5048': attribute type 1 has an invalid length. [ 450.029729][ T26] audit: type=1107 audit(2000000261.954:433): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 450.255809][T15656] lo speed is unknown, defaulting to 1000 [ 451.403374][T15697] netlink: 'syz.3.5077': attribute type 4 has an invalid length. [ 451.626231][T14077] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 451.992159][T14077] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.012076][T14077] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 452.032096][T14077] usb 2-1: config 0 interface 0 has no altsetting 0 [ 452.045843][T14077] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 452.065226][T14077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.083931][T14077] usb 2-1: config 0 descriptor?? [ 452.114711][T15695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 452.452227][T14077] usbhid 2-1:0.0: can't add hid device: -71 [ 452.464363][T14077] usbhid: probe of 2-1:0.0 failed with error -71 [ 452.478223][T14077] usb 2-1: USB disconnect, device number 6 [ 453.066323][T15712] lo speed is unknown, defaulting to 1000 [ 453.293242][ T26] audit: type=1326 audit(2000000265.224:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 453.385882][ T26] audit: type=1326 audit(2000000265.254:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 453.480198][ T26] audit: type=1326 audit(2000000265.254:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 453.512777][T15731] loop2: detected capacity change from 0 to 512 [ 453.548518][T15731] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 453.577553][T15731] EXT4-fs (loop2): inline encryption not supported [ 453.592207][ T26] audit: type=1326 audit(2000000265.254:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 453.631743][T15731] EXT4-fs (loop2): Test dummy encryption mode enabled [ 453.649182][T15731] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 453.669321][T15731] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.685020][ T26] audit: type=1326 audit(2000000265.254:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 453.747793][T15731] EXT4-fs (loop2): 1 truncate cleaned up [ 453.799974][T15731] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 453.840687][ T26] audit: type=1326 audit(2000000265.254:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 453.951621][ T26] audit: type=1326 audit(2000000265.254:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 454.061295][ T26] audit: type=1326 audit(2000000265.254:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 454.109125][ T26] audit: type=1326 audit(2000000265.254:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 454.131786][T15749] device sit0 entered promiscuous mode [ 454.181230][T15749] netlink: 'syz.3.5100': attribute type 1 has an invalid length. [ 454.237109][T15749] __nla_validate_parse: 3 callbacks suppressed [ 454.237141][T15749] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5100'. [ 454.262079][ T26] audit: type=1326 audit(2000000265.254:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 454.484887][T15766] netlink: 'syz.0.5118': attribute type 4 has an invalid length. [ 454.595921][T15771] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5110'. [ 454.647883][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5110'. [ 456.716632][T15831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5137'. [ 457.092883][T15843] device sit0 entered promiscuous mode [ 457.121223][T15843] netlink: 'syz.4.5142': attribute type 1 has an invalid length. [ 457.165653][T15843] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5142'. [ 457.769810][T10564] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 459.025309][T15885] device sit0 entered promiscuous mode [ 459.043477][T15885] netlink: 'syz.0.5158': attribute type 1 has an invalid length. [ 459.051246][T15885] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5158'. [ 459.060614][T10564] usb 3-1: config 0 has no interfaces? [ 459.072640][T10564] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 459.095969][T10564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.133600][T10564] usb 3-1: config 0 descriptor?? [ 459.392564][ T1111] usb 3-1: USB disconnect, device number 4 [ 461.004920][T15923] lo speed is unknown, defaulting to 1000 [ 461.210426][T15933] loop1: detected capacity change from 0 to 8 [ 461.854761][T10564] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 461.959761][T15960] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5193'. [ 461.969058][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 462.006591][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5192'. [ 462.018320][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 462.033374][T15958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.042494][T15958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.051249][T15958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.060106][T15958] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.073990][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 462.101162][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5192'. [ 462.112044][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 462.308125][T10564] usb 2-1: config 0 has no interfaces? [ 462.314009][T10564] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 462.334649][T10564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.366108][T10564] usb 2-1: config 0 descriptor?? [ 462.493193][T15978] fuse: Bad value for 'fd' [ 462.624290][T10564] usb 2-1: USB disconnect, device number 7 [ 463.433035][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5209'. [ 463.442074][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5209'. [ 463.451047][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5209'. [ 463.502242][T16001] netlink: 'syz.3.5210': attribute type 4 has an invalid length. [ 466.175914][T16042] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.184971][T16042] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.193739][T16042] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.202488][T16042] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.337622][T16090] __nla_validate_parse: 9 callbacks suppressed [ 467.337639][T16090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5253'. [ 467.503283][T16099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5255'. [ 467.913707][T16127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5268'. [ 468.773905][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5304'. [ 468.967285][T16190] loop1: detected capacity change from 0 to 1024 [ 469.016607][T16190] EXT4-fs (loop1): Ignoring removed nobh option [ 469.028224][T16190] EXT4-fs (loop1): Ignoring removed bh option [ 469.046712][T16190] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.108861][T16190] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 469.249645][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5307'. [ 471.024741][T16259] lo speed is unknown, defaulting to 1000 [ 471.118721][T16267] loop2: detected capacity change from 0 to 512 [ 471.190170][T16267] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 471.315444][T16267] EXT4-fs (loop2): orphan cleanup on readonly fs [ 471.332620][T16267] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.5331: Block bitmap for bg 0 marked uninitialized [ 471.359779][T16267] EXT4-fs (loop2): Remounting filesystem read-only [ 471.515179][T16267] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 471.685271][T16267] EXT4-fs (loop2): Remounting filesystem read-only [ 471.797614][T16267] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.5331: Block bitmap for bg 0 marked uninitialized [ 472.051570][T16267] EXT4-fs (loop2): Remounting filesystem read-only [ 472.068745][T16267] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 472.087699][T16267] EXT4-fs (loop2): Remounting filesystem read-only [ 472.094680][T16267] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.5331: Block bitmap for bg 0 marked uninitialized [ 472.128222][T16267] EXT4-fs (loop2): Remounting filesystem read-only [ 472.141227][T16267] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 472.172630][T16267] EXT4-fs (loop2): Remounting filesystem read-only [ 472.183984][T16267] EXT4-fs (loop2): 1 orphan inode deleted [ 472.199294][T16267] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 472.295721][T16278] loop1: detected capacity change from 0 to 128 [ 472.354617][T16278] EXT4-fs (loop1): Ignoring removed nobh option [ 472.432989][T16278] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,,errors=continue. Quota mode: none. [ 472.461957][T16278] ext4 filesystem being mounted at /1046/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.524509][T16291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5340'. [ 474.124502][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 474.124519][ T26] audit: type=1326 audit(2000000286.056:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16330 comm="syz.1.5358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec83813749 code=0x0 [ 474.934206][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 475.148297][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5367'. [ 475.469620][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 475.526639][T16357] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.535467][T16357] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.544223][T16357] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.553300][T16357] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.668572][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 475.735477][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5367'. [ 475.764645][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 476.004170][T16383] lo speed is unknown, defaulting to 1000 [ 476.088376][T16389] loop1: detected capacity change from 0 to 128 [ 477.087863][T16422] loop1: detected capacity change from 0 to 512 [ 477.164839][T16422] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 477.210347][T16422] EXT4-fs (loop1): orphan cleanup on readonly fs [ 477.217101][T16422] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.5397: Block bitmap for bg 0 marked uninitialized [ 477.237341][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 477.247920][T16422] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 477.266666][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 477.281132][T16422] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.5397: Block bitmap for bg 0 marked uninitialized [ 477.345518][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 477.403823][T16436] lo speed is unknown, defaulting to 1000 [ 477.411246][T16422] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 477.432344][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 477.439207][T16422] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.5397: Block bitmap for bg 0 marked uninitialized [ 477.511829][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 477.532035][T16422] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 477.560693][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 477.580781][T16422] EXT4-fs (loop1): 1 orphan inode deleted [ 477.586556][T16422] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 478.075353][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 478.116447][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5404'. [ 478.141136][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 478.251161][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 478.270943][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5404'. [ 478.287430][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 478.679906][ T26] audit: type=1326 audit(2000000290.606:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.0.5419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x0 [ 480.027746][ T26] audit: type=1326 audit(2000000291.956:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.4.5444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x0 [ 481.207879][T16535] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2338251980/2338251982 [ 481.225551][ T26] audit: type=1326 audit(2000000293.156:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16537 comm="syz.2.5449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x0 [ 481.268316][T16535] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2338251980/2338251982 [ 482.494251][T16559] loop2: detected capacity change from 0 to 128 [ 483.718046][T16573] tipc: Failed to remove unknown binding: 66,1,1/0:3853620129/3853620131 [ 483.790543][T16573] tipc: Failed to remove unknown binding: 66,1,1/0:3853620129/3853620131 [ 483.846972][T16582] IPv6: A: Disabled Multicast RS [ 484.324685][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5482'. [ 484.420818][ T1111] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 484.445363][T16615] tipc: Failed to remove unknown binding: 66,1,1/0:1658097579/1658097581 [ 484.470631][T16615] tipc: Failed to remove unknown binding: 66,1,1/0:1658097579/1658097581 [ 484.840635][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.856478][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.050663][ T1111] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.076164][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.115065][ T1111] usb 2-1: Product: syz [ 485.127899][ T1111] usb 2-1: Manufacturer: syz [ 485.137801][ T1111] usb 2-1: SerialNumber: syz [ 485.500340][ T1111] usb 2-1: cannot find UAC_HEADER [ 485.613496][ T1111] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 485.674175][ T1111] usb 2-1: USB disconnect, device number 8 [ 485.756385][ T4292] udevd[4292]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.548425][T16673] loop1: detected capacity change from 0 to 512 [ 488.651799][T16673] EXT4-fs (loop1): Ignoring removed nobh option [ 488.761757][T16673] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 488.784013][T16673] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.5506: attempt to clear invalid blocks 1 len 1 [ 488.816310][T16673] EXT4-fs (loop1): Remounting filesystem read-only [ 488.823424][T16673] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 488.890836][T16673] EXT4-fs (loop1): Remounting filesystem read-only [ 488.899028][T16673] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5506: invalid indirect mapped block 1819239214 (level 0) [ 488.916932][T16673] EXT4-fs (loop1): Remounting filesystem read-only [ 488.924076][T16673] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5506: invalid indirect mapped block 1819239214 (level 1) [ 488.948066][T16673] EXT4-fs (loop1): Remounting filesystem read-only [ 488.962123][T16673] EXT4-fs (loop1): 1 truncate cleaned up [ 488.967811][T16673] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 490.250373][ T1108] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 492.020032][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.039800][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.108149][T16729] overlayfs: failed to clone upperpath [ 492.130391][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'. [ 492.154952][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'. [ 492.184269][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'. [ 492.210524][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.224599][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.252314][ T1108] usb 3-1: Product: syz [ 492.267204][ T1108] usb 3-1: Manufacturer: syz [ 492.285443][ T1108] usb 3-1: SerialNumber: syz [ 492.320421][ T1108] usb 3-1: can't set config #1, error -71 [ 492.338400][ T1108] usb 3-1: USB disconnect, device number 5 [ 492.604191][T16759] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 492.821260][T16771] overlayfs: failed to clone upperpath [ 493.045409][T16782] lo speed is unknown, defaulting to 1000 [ 493.077558][T16786] loop2: detected capacity change from 0 to 512 [ 493.147871][T16786] EXT4-fs (loop2): Ignoring removed nobh option [ 493.215552][T16786] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 493.258815][T16786] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.5550: attempt to clear invalid blocks 1 len 1 [ 493.284924][T16786] EXT4-fs (loop2): Remounting filesystem read-only [ 493.296410][T16786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 493.317478][T16786] EXT4-fs (loop2): Remounting filesystem read-only [ 493.326233][T16786] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5550: invalid indirect mapped block 1819239214 (level 0) [ 493.350269][T16786] EXT4-fs (loop2): Remounting filesystem read-only [ 493.357574][T16786] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5550: invalid indirect mapped block 1819239214 (level 1) [ 493.375104][T16785] lo speed is unknown, defaulting to 1000 [ 493.399964][T16786] EXT4-fs (loop2): Remounting filesystem read-only [ 493.473044][T16786] EXT4-fs (loop2): 1 truncate cleaned up [ 493.478761][T16786] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 493.481938][T16798] overlayfs: failed to clone upperpath [ 494.170915][T16819] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5568'. [ 494.304220][T16823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5565'. [ 497.958153][T16876] lo speed is unknown, defaulting to 1000 [ 498.393387][T16897] syz.4.5602 uses obsolete (PF_INET,SOCK_PACKET) [ 498.494234][T16899] overlayfs: missing 'lowerdir' [ 498.685260][T16908] trusted_key: encrypted_key: insufficient parameters specified [ 499.679278][T16927] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5613'. [ 499.890005][T16931] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5615'. [ 499.899102][T16931] net_ratelimit: 23 callbacks suppressed [ 499.899118][T16931] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 501.442590][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449700][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.653437][T17011] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5648'. [ 503.678344][T17011] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 504.327224][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 504.373255][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 504.960578][T17066] lo speed is unknown, defaulting to 1000 [ 506.443866][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5697'. [ 506.555920][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5697'. [ 507.138975][T17131] overlayfs: failed to clone upperpath [ 507.757130][T17149] overlayfs: failed to resolve './file0': -2 [ 508.023094][T17159] overlayfs: missing 'workdir' [ 508.154857][T17164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5722'. [ 509.077916][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5743'. [ 511.143890][T17266] loop2: detected capacity change from 0 to 512 [ 511.226416][T17266] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 511.273453][T17266] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 511.999551][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5777'. [ 512.698402][T17316] loop1: detected capacity change from 0 to 512 [ 512.765483][T17316] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 512.781553][T17316] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 514.127462][T17337] lo speed is unknown, defaulting to 1000 [ 514.569094][T17354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5809'. [ 515.551947][ T26] audit: type=1326 audit(2000000327.488:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.2.5818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x0 [ 515.777129][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5822'. [ 515.902611][T17389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.918534][T13795] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 516.278667][T13795] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.308469][T13795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 516.317429][T13795] usb 2-1: config 1 has no interface number 0 [ 516.372431][T13795] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.559258][T13795] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.594062][T13795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.616166][T13795] usb 2-1: Product: syz [ 516.620972][T13795] usb 2-1: Manufacturer: syz [ 516.632778][T13795] usb 2-1: SerialNumber: syz [ 516.703700][T13795] usb 2-1: selecting invalid altsetting 1 [ 516.747994][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 516.763968][T17425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5841'. [ 516.908591][T13795] cdc_ncm 2-1:1.1: bind() failure [ 516.925882][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5855'. [ 516.956443][T13795] usb 2-1: USB disconnect, device number 9 [ 517.138789][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5847'. [ 517.169616][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 518.492590][ T26] audit: type=1326 audit(2000000330.428:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17458 comm="syz.4.5858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x0 [ 518.779440][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5865'. [ 518.954274][T17484] device veth0_vlan left promiscuous mode [ 519.116225][ T26] audit: type=1326 audit(2000000331.048:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.3.5875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a62c95749 code=0x0 [ 520.450365][T17519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.458318][T17519] IPv6: NLM_F_CREATE should be set when creating new route [ 522.005807][T17536] netlink: 'syz.3.5894': attribute type 12 has an invalid length. [ 522.230847][T17546] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 522.263046][T17546] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 522.292479][T17546] overlayfs: missing 'lowerdir' [ 524.447119][T17570] syz.2.5901 sent an empty control message without MSG_MORE. [ 526.556784][T17582] lo speed is unknown, defaulting to 1000 [ 527.115247][T17615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 528.656233][T17644] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.546278][T17680] device batadv_slave_1 entered promiscuous mode [ 530.576496][T17679] device batadv_slave_1 left promiscuous mode [ 530.813881][T17684] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5955'. [ 533.805947][T17743] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5982'. [ 534.551983][T17775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5998'. [ 535.631726][T17796] tmpfs: Unknown parameter 'noswap' [ 537.443297][T17836] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 537.486660][T17836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 537.983142][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6032'. [ 538.002883][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6032'. [ 538.079331][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6032'. [ 538.088593][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6032'. [ 539.802071][T17957] syz.1.6082[17957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.802571][T17957] syz.1.6082[17957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.841564][T17957] loop1: detected capacity change from 0 to 128 [ 541.974876][T17968] tipc: Started in network mode [ 542.002801][T17968] tipc: Node identity b6cbb31e8359, cluster identity 4711 [ 542.031367][T17968] tipc: Enabled bearer , priority 0 [ 542.101318][T17967] tipc: Disabling bearer [ 542.629108][T17987] x_tables: unsorted underflow at hook 1 [ 543.347310][T18021] lo speed is unknown, defaulting to 1000 [ 545.567803][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6152'. [ 545.648402][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6152'. [ 545.658478][T18097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6152'. [ 545.683973][T18097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6152'. [ 546.001514][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6162'. [ 546.036481][T18124] overlayfs: missing 'workdir' [ 546.553546][T18152] loop1: detected capacity change from 0 to 128 [ 546.692461][T18152] EXT4-fs (loop1): Test dummy encryption mode enabled [ 546.765532][T18152] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none. [ 546.877380][T18152] ext4 filesystem being mounted at /1204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 547.357285][T18187] netlink: 'syz.0.6195': attribute type 10 has an invalid length. [ 548.052488][T18220] overlayfs: missing 'lowerdir' [ 548.916401][T18271] loop1: detected capacity change from 0 to 512 [ 548.952020][ T154] tipc: Subscription rejected, illegal request [ 549.118532][T18271] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 549.176329][T18271] ext4 filesystem being mounted at /1215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.550295][ T26] audit: type=1326 audit(2000000361.480:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 549.614822][ T26] audit: type=1326 audit(2000000361.520:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 549.733993][ T26] audit: type=1326 audit(2000000361.520:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 549.773278][T18314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6252'. [ 549.845749][ T26] audit: type=1326 audit(2000000361.520:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 549.958270][ T26] audit: type=1326 audit(2000000361.520:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 550.066639][ T26] audit: type=1326 audit(2000000361.520:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 550.181587][T18332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 550.191916][ T26] audit: type=1326 audit(2000000361.520:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 550.198598][T18333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6262'. [ 550.278826][ T26] audit: type=1326 audit(2000000361.520:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18302 comm="syz.4.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 550.332753][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'. [ 550.520993][T18330] team0 (unregistering): Port device team_slave_0 removed [ 550.557771][T18330] team0 (unregistering): Port device team_slave_1 removed [ 550.643956][T18335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6264'. [ 550.912782][T18357] lo speed is unknown, defaulting to 1000 [ 551.332539][T18369] lo speed is unknown, defaulting to 1000 [ 552.898566][T18434] IPv6: Can't replace route, no match found [ 552.972309][T18437] fuse: Bad value for 'fd' [ 554.463543][T18483] lo speed is unknown, defaulting to 1000 [ 554.599908][ T26] audit: type=1326 audit(2000000366.530:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18484 comm="syz.2.6335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x0 [ 555.161393][T18511] x_tables: unsorted underflow at hook 1 [ 555.902371][T18534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6353'. [ 556.258317][T18547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6364'. [ 556.487881][ T26] audit: type=1326 audit(2000000368.420:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 556.560163][T18562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6370'. [ 556.596146][ T26] audit: type=1326 audit(2000000368.420:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 556.677712][ T26] audit: type=1326 audit(2000000368.570:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 556.797479][ T26] audit: type=1326 audit(2000000368.570:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 556.895139][ T26] audit: type=1326 audit(2000000368.570:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 556.995237][ T26] audit: type=1326 audit(2000000368.570:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 557.038761][ T26] audit: type=1326 audit(2000000368.570:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 557.176266][ T26] audit: type=1326 audit(2000000368.570:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 557.262956][ T26] audit: type=1326 audit(2000000368.570:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5d84ed749 code=0x7ffc0000 [ 558.725751][T18615] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 558.755757][T18615] overlayfs: missing 'lowerdir' [ 558.795048][T18617] tipc: Enabled bearer , priority 0 [ 558.816806][T18616] tipc: Disabling bearer [ 559.215469][T18630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.224113][T18630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.273237][T18642] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6405'. [ 560.313618][T18638] loop2: detected capacity change from 0 to 2048 [ 560.407096][ T4292] Alternate GPT is invalid, using primary GPT. [ 560.413461][ T4292] loop2: p2 p3 p7 [ 560.491201][T18638] Alternate GPT is invalid, using primary GPT. [ 560.546337][T18638] loop2: p2 p3 p7 [ 560.825521][T18661] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6415'. [ 561.063515][T18677] loop1: detected capacity change from 0 to 8 [ 561.091767][ T5201] udevd[5201]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 561.116740][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 561.127246][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 561.238702][ T5201] udevd[5201]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 561.239315][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 561.289159][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 562.602520][T18732] loop1: detected capacity change from 0 to 2048 [ 562.735426][ T4292] Alternate GPT is invalid, using primary GPT. [ 562.755168][ T4292] loop1: p2 p3 p7 [ 562.815504][T18732] Alternate GPT is invalid, using primary GPT. [ 562.837238][T18732] loop1: p2 p3 p7 [ 562.880997][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.887349][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.092547][ T5201] udevd[5201]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 563.103687][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 563.107142][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 563.302283][ T5201] udevd[5201]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 565.417313][T18827] 9pnet: Could not find request transport: 0xffffffffffffffff [ 565.543588][T18830] lo speed is unknown, defaulting to 1000 [ 565.852618][T18837] loop2: detected capacity change from 0 to 8 [ 566.135524][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 566.135539][ T26] audit: type=1326 audit(2000000378.061:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.292512][ T26] audit: type=1326 audit(2000000378.111:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.341024][ T26] audit: type=1326 audit(2000000378.111:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.450616][ T26] audit: type=1326 audit(2000000378.111:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.566639][ T26] audit: type=1326 audit(2000000378.111:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.598965][T18856] netlink: 'syz.0.6505': attribute type 1 has an invalid length. [ 566.643342][ T26] audit: type=1326 audit(2000000378.141:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.809520][ T26] audit: type=1326 audit(2000000378.141:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.846192][T18861] bond3: (slave gretap1): making interface the new active one [ 566.884716][T18861] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 566.894667][ T26] audit: type=1326 audit(2000000378.141:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 566.950859][T18856] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 567.103287][ T26] audit: type=1326 audit(2000000378.141:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 567.144673][ T26] audit: type=1326 audit(2000000378.151:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 569.866210][T18945] netlink: 'syz.1.6542': attribute type 1 has an invalid length. [ 569.952322][T18949] bond2: (slave gretap1): making interface the new active one [ 570.014524][T18949] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 570.082546][T18945] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 571.729830][T18987] netlink: 'syz.3.6560': attribute type 1 has an invalid length. [ 571.840386][T18998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6565'. [ 571.908059][T18987] bond1: (slave gretap1): making interface the new active one [ 571.943231][T18987] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 572.021569][T18991] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 572.277016][T19008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6570'. [ 572.296733][T19008] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6570'. [ 572.315696][T19008] tipc: Invalid UDP bearer configuration [ 572.315738][T19008] tipc: Enabling of bearer rejected, failed to enable media [ 572.620306][T19024] netlink: 368 bytes leftover after parsing attributes in process `syz.1.6578'. [ 573.659993][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.667543][T19031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.951264][T19081] lo speed is unknown, defaulting to 1000 [ 576.928179][T19120] loop2: detected capacity change from 0 to 512 [ 577.012809][T19120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 577.025691][T19120] System zones: 1-12 [ 577.051614][T19120] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.6620: Directory hole found for htree index block 0 [ 577.081289][T19132] netlink: 'syz.1.6626': attribute type 17 has an invalid length. [ 577.104184][T19132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 577.186463][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6629'. [ 577.196714][T19120] EXT4-fs (loop2): Remounting filesystem read-only [ 577.203551][T19120] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 577.265632][T19120] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.6620: Directory hole found for htree index block 0 [ 577.315781][T19120] EXT4-fs (loop2): Remounting filesystem read-only [ 577.335115][T19120] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 577.363709][T19120] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 577.993833][T19168] overlayfs: missing 'workdir' [ 580.095102][T19196] loop2: detected capacity change from 0 to 512 [ 580.669067][T19196] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 580.678340][T19196] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 580.768636][T19196] EXT4-fs (loop2): orphan cleanup on readonly fs [ 580.817864][T19196] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 580.936556][T19196] EXT4-fs (loop2): Remounting filesystem read-only [ 580.967325][T19196] __quota_error: 6 callbacks suppressed [ 580.967341][T19196] Quota error (device loop2): write_blk: dquota write failed [ 580.986719][T19196] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 581.030648][T19196] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.6665: Failed to acquire dquot type 0 [ 581.080217][T19212] lo speed is unknown, defaulting to 1000 [ 581.091442][T19196] EXT4-fs (loop2): Remounting filesystem read-only [ 581.105965][T19196] EXT4-fs (loop2): 1 truncate cleaned up [ 581.139695][T19196] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,grpjquota=./file0,errors=remount-ro,noinit_itable,stripe=0x00000000000000432. Quota mode: writeback. [ 581.452519][T19226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6669'. [ 582.971531][T19265] overlayfs: missing 'workdir' [ 583.321042][T19280] overlayfs: failed to clone upperpath [ 583.615733][T19288] netlink: 'syz.3.6694': attribute type 4 has an invalid length. [ 583.778534][T19293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.216242][T19313] fuse: Bad value for 'group_id' [ 585.379411][T19321] netlink: 'syz.0.6708': attribute type 17 has an invalid length. [ 585.430997][T19321] rdma_rxe: ignoring netdev event = 14 for lo [ 585.461403][T19321] infiniband syz2: set active [ 585.489529][T19321] infiniband syz2: set active [ 585.500674][T19328] cgroup: Unknown subsys name 'fowner>00000000000000060929' [ 585.523406][ T1108] lo speed is unknown, defaulting to 1000 [ 585.541850][T14077] lo speed is unknown, defaulting to 1000 [ 585.560524][T14077] lo speed is unknown, defaulting to 1000 [ 585.697169][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6714'. [ 586.135055][T19362] netlink: 'syz.3.6726': attribute type 17 has an invalid length. [ 586.150545][ T26] audit: type=1326 audit(2000000398.082:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19360 comm="syz.2.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.172899][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.212024][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6729'. [ 586.227652][T19368] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 586.260652][ T26] audit: type=1326 audit(2000000398.122:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19360 comm="syz.2.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.283256][T19368] overlayfs: missing 'lowerdir' [ 586.370500][ T26] audit: type=1326 audit(2000000398.122:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19360 comm="syz.2.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.449102][ T26] audit: type=1326 audit(2000000398.122:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19360 comm="syz.2.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.471470][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.538216][ T26] audit: type=1326 audit(2000000398.122:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19360 comm="syz.2.6727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.634467][ T26] audit: type=1326 audit(2000000398.502:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.656832][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.759039][ T26] audit: type=1326 audit(2000000398.502:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.875958][ T26] audit: type=1326 audit(2000000398.502:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.965585][ T26] audit: type=1326 audit(2000000398.502:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 586.988088][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.085454][ T26] audit: type=1326 audit(2000000398.512:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f388af63749 code=0x7ffc0000 [ 587.420419][T19411] lo speed is unknown, defaulting to 1000 [ 587.455606][ T1108] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 587.631157][T19415] netlink: 'syz.0.6752': attribute type 4 has an invalid length. [ 587.662660][T19415] rdma_rxe: ignoring netdev event = 23 for lo [ 587.695628][T19415] rdma_rxe: lo changed mtu to 11337732 [ 587.721540][T19413] lo speed is unknown, defaulting to 1000 [ 587.825164][ T1108] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 587.833387][ T1108] usb 3-1: config 0 has no interface number 0 [ 588.024767][ T1108] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 588.033861][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.077873][ T1108] usb 3-1: Product: syz [ 588.082090][ T1108] usb 3-1: Manufacturer: syz [ 588.104400][ T1108] usb 3-1: SerialNumber: syz [ 588.120309][ T1108] usb 3-1: config 0 descriptor?? [ 588.397913][ T1108] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 588.483407][ T1108] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 589.337241][ T1108] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 589.345396][ T1108] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 589.461756][ T1108] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 589.548467][T19439] 9pnet: Insufficient options for proto=fd [ 589.736683][ T1108] usb 3-1: USB disconnect, device number 6 [ 589.777853][T19447] futex_wake_op: syz.1.6764 tries to shift op by 32; fix this program [ 589.796826][ T1108] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 589.843554][ T1108] keyspan 3-1:0.133: device disconnected [ 591.174280][T19469] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6775'. [ 591.437898][T19482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6780'. [ 591.702287][T19488] lo speed is unknown, defaulting to 1000 [ 591.936549][T19503] netlink: 'syz.1.6790': attribute type 4 has an invalid length. [ 592.519925][T19516] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6794'. [ 592.727735][T19526] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6799'. [ 592.764251][T19526] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6799'. [ 593.183011][T19550] netlink: 'syz.2.6813': attribute type 7 has an invalid length. [ 593.224129][T19550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6813'. [ 594.121549][T19598] netlink: 'syz.2.6845': attribute type 4 has an invalid length. [ 594.667953][T13791] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 594.934408][T13791] usb 3-1: Using ep0 maxpacket: 32 [ 595.054508][T13791] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 595.072964][T13791] usb 3-1: config 0 has no interface number 0 [ 595.103347][T13791] usb 3-1: config 0 interface 12 has no altsetting 0 [ 595.279355][T13791] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 595.302200][T13791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.320728][T13791] usb 3-1: Product: syz [ 595.330878][T13791] usb 3-1: Manufacturer: syz [ 595.338586][T13791] usb 3-1: SerialNumber: syz [ 595.367178][T13791] usb 3-1: config 0 descriptor?? [ 595.405502][T13791] f81534 3-1:0.12: required endpoints missing [ 596.186741][ T4241] usb 3-1: USB disconnect, device number 7 [ 597.776075][T19650] overlayfs: unrecognized mount option "appraise" or missing value [ 597.970965][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6864'. [ 598.236131][T19673] lo speed is unknown, defaulting to 1000 [ 599.607767][T19713] netlink: 'syz.0.6887': attribute type 10 has an invalid length. [ 599.658670][T19713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6887'. [ 599.899791][T19727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6893'. [ 600.212760][T19745] syz.3.6901[19745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.212874][T19745] syz.3.6901[19745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.279682][T19747] fuse: Bad value for 'fd' [ 601.935474][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 601.935487][ T26] audit: type=1326 audit(2000000414.876:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.069510][ T26] audit: type=1326 audit(2000000414.906:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.173611][ T26] audit: type=1326 audit(2000000414.906:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.252946][T19801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6924'. [ 602.290965][ T26] audit: type=1326 audit(2000000414.906:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.376306][ T26] audit: type=1326 audit(2000000414.906:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.450925][ T26] audit: type=1326 audit(2000000414.906:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.521180][ T26] audit: type=1326 audit(2000000414.906:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.589569][ T26] audit: type=1326 audit(2000000414.906:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.696298][ T26] audit: type=1326 audit(2000000414.906:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7febbe3ff749 code=0x7ffc0000 [ 602.892411][ T26] audit: type=1326 audit(2000000414.906:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19790 comm="syz.0.6921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febbe3ff783 code=0x7ffc0000 [ 603.795600][T19835] tipc: Enabling of bearer rejected, failed to enable media [ 603.856056][T19837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6940'. [ 604.898872][T19859] xt_policy: neither incoming nor outgoing policy selected [ 605.930847][T19873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6954'. [ 605.999075][T19875] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 624.315279][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321620][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.751647][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.757995][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 714.167218][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 714.173830][ C1] rcu: 1-...!: (1 GPs behind) idle=8bf/1/0x4000000000000000 softirq=59581/59582 fqs=369 [ 714.184844][ C1] (t=10502 jiffies g=80229 q=173) [ 714.189948][ C1] rcu: rcu_preempt kthread starved for 9762 jiffies! g80229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 714.201042][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 714.211014][ C1] rcu: RCU grace-period kthread stack dump: [ 714.216911][ C1] task:rcu_preempt state:R running task stack:28064 pid: 15 ppid: 2 flags:0x00004000 [ 714.227694][ C1] Call Trace: [ 714.230962][ C1] [ 714.233900][ C1] __schedule+0x11bb/0x4390 [ 714.238419][ C1] ? release_firmware_map_entry+0x190/0x190 [ 714.244316][ C1] schedule+0x11b/0x1e0 [ 714.248465][ C1] schedule_timeout+0x15c/0x280 [ 714.253308][ C1] ? console_conditional_schedule+0x40/0x40 [ 714.259193][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 714.265080][ C1] ? update_process_times+0x200/0x200 [ 714.270454][ C1] ? prepare_to_swait_event+0x331/0x350 [ 714.275993][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 714.280838][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 714.287334][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 714.292093][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 714.297286][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 714.302491][ C1] rcu_gp_kthread+0x98/0x350 [ 714.307075][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 714.312185][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 714.318072][ C1] ? __kthread_parkme+0x157/0x1b0 [ 714.323103][ C1] kthread+0x436/0x520 [ 714.327166][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 714.332279][ C1] ? kthread_blkcg+0xd0/0xd0 [ 714.336872][ C1] ret_from_fork+0x1f/0x30 [ 714.341309][ C1] [ 714.344320][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 714.350644][ C1] Sending NMI from CPU 1 to CPUs 0: [ 714.355850][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 714.356836][ C1] NMI backtrace for cpu 1 [ 714.369043][ C1] CPU: 1 PID: 19920 Comm: syz.2.6986 Not tainted syzkaller #0 [ 714.376490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 714.386531][ C1] Call Trace: [ 714.389795][ C1] [ 714.392627][ C1] dump_stack_lvl+0x168/0x230 [ 714.397296][ C1] ? show_regs_print_info+0x20/0x20 [ 714.402484][ C1] ? load_image+0x3b0/0x3b0 [ 714.407000][ C1] ? try_to_wake_up+0x3d4/0x1050 [ 714.411940][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 714.416874][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 714.423030][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 714.428403][ C1] ? _raw_spin_lock+0x40/0x40 [ 714.433063][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 714.439117][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 714.445088][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 714.450206][ C1] print_cpu_stall+0x31d/0x5f0 [ 714.454960][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 714.460153][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 714.464994][ C1] ? account_process_tick+0x227/0x3a0 [ 714.470356][ C1] update_process_times+0x193/0x200 [ 714.475542][ C1] tick_sched_timer+0x37d/0x560 [ 714.480384][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 714.485576][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 714.491130][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 714.496234][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 714.502298][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 714.507265][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 714.513234][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 714.518861][ C1] [ 714.521789][ C1] [ 714.524709][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 714.530687][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 714.536483][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 de 9e a9 f7 48 89 df e8 a6 73 aa f7 e8 41 0d cb f7 fb bf 01 00 00 00 76 95 9e f7 65 8b 05 07 93 4f 76 85 c0 74 02 5b c3 e8 b4 9d 4d [ 714.556077][ C1] RSP: 0018:ffffc900036b7bc0 EFLAGS: 00000282 [ 714.562130][ C1] RAX: 3b55d701e0b39e00 RBX: ffff88802437b780 RCX: 3b55d701e0b39e00 [ 714.570092][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 [ 714.578051][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100486f6f1 [ 714.586019][ C1] R10: ffffed100486f6f1 R11: 1ffff1100486f6f0 R12: ffff88802437b780 [ 714.593993][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 714.601998][ C1] get_signal+0x11d6/0x12c0 [ 714.606529][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 714.612162][ C1] ? _copy_from_user+0x111/0x170 [ 714.617125][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 714.622789][ C1] ? load_gs_index+0x120/0x120 [ 714.627547][ C1] ? get_sigframe_size+0x10/0x10 [ 714.632497][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 714.637967][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 714.643264][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 714.648823][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 714.654274][ C1] do_syscall_64+0x58/0xa0 [ 714.658674][ C1] ? clear_bhb_loop+0x30/0x80 [ 714.663333][ C1] ? clear_bhb_loop+0x30/0x80 [ 714.667994][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 714.673900][ C1] RIP: 0033:0x7f388af63747 [ 714.678301][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 714.697899][ C1] RSP: 002b:00007f38891ca0e8 EFLAGS: 00000246 [ 714.703968][ C1] RAX: 00000000000000ca RBX: 00007f388b1b9fa8 RCX: 00007f388af63749 [ 714.711935][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f388b1b9fa8 [ 714.719916][ C1] RBP: 00007f388b1b9fa0 R08: 0000000000000000 R09: 0000000000000000 [ 714.727872][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.735834][ C1] R13: 00007f388b1ba038 R14: 00007ffcc3642f20 R15: 00007ffcc3643008 [ 714.743812][ C1]