last executing test programs: 5m57.396552094s ago: executing program 1 (id=31496): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_getres(0x2, &(0x7f0000000040)) 5m57.339503179s ago: executing program 1 (id=31498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) 5m57.312059873s ago: executing program 1 (id=31499): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@rnullb, 0x0, 0x0) 5m57.288344555s ago: executing program 1 (id=31500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1a) 5m57.187959145s ago: executing program 1 (id=31501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 5m57.177198666s ago: executing program 1 (id=31502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 5m42.167578881s ago: executing program 32 (id=31502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 3.173027272s ago: executing program 3 (id=42134): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x2, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff"], 0x0) 1.679038002s ago: executing program 2 (id=42177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.619188078s ago: executing program 2 (id=42179): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x2, 0x0) 1.578960262s ago: executing program 2 (id=42180): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.49212388s ago: executing program 2 (id=42182): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x8000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1.456514204s ago: executing program 2 (id=42184): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) 1.410307259s ago: executing program 2 (id=42186): syz_usb_connect(0x0, 0x3f9, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x9, 0xbd, 0xc2, 0x8, 0x17dc, 0x202, 0x8add, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e7, 0x3, 0x0, 0x0, 0x0, 0xd, [{{0x9, 0x4, 0x7d, 0x2, 0x2, 0xe, 0x1, 0x0, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0xfff, 0xd}}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0x7f, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x6}, @generic={0x12, 0x32, "7fc6d9b85cbf7d143b9290e22dd20d9a"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x9, 0xca, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x79, 0x6}]}}]}}, {{0x9, 0x4, 0x53, 0x8, 0xf, 0xa5, 0xdd, 0x2a, 0x4, [], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x8, 0x1}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x4, 0x0, 0x3, [@generic={0x76, 0xd, "d33501c36ca3f5700cdbc3a103864b88f0e2870e85309aed5931b79a3b3d735c8e026762d159da5c00985cd3d40bace232e46cf99334d251386ac139a3af7f155add521867a58070e090520a029afe9a60775edd9934659826585798b924d5aa62ea2d06f15b06c4013d6390dad6c08798c372f1"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf8, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0xc0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xa60}]}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x9, 0x8, 0x1, [@generic={0x7d, 0x9, "7c036800cbfba95ed76f9e4a4b0a3de16f63333ee82ccf1270ff13881aa44ac624a14c1c2df84d2636d8a304f01163f1044bf7641b2ea69132c313b4d1bbaa3f26712076d355c839223e6d0d9d47b634fe1c162a2b9ee2f2602499da20f1127a7d114900a4f56430ea6b18632c735dcd495ae54fc44bf3221f2558"}]}}, {{0x9, 0x5, 0xb, 0x14, 0x20, 0xe0, 0x80, 0x40}}, {{0x9, 0x5, 0x3, 0x3, 0x1b7, 0x1, 0xff, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x1, 0x9, 0x81, [@generic={0x42, 0xe, "670ffdca832d53759612929f0a12f1c60c893d5a3fbc9dc62dedac34e2b8829a5a53fb34412cb5d09ae1198b03420a28175f8ad1841ef17a56dfed88e7963abe"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0xe1, 0x6, [@generic={0x41, 0x1, "244aec00df9a422efae80ca62d278f47196d219edda84ab2fcf2c59bd17092ffe5aa6dfe0fdd92d26100826d8726bdc7c02b396ea61b6b6c38daf49fd4bfaf"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x87, 0x4, 0x8, [@generic={0xb7, 0x22, "6d72c3a27ed9fc7eb92ee469cfd48110c3d55baa7162788c4b42cb56e80d1f3d15d0b0576b31740bab6889035951696f1ecfefc18ace5b5851bbd84dabfcb53156982d18de0ffb459eb64f4d8368d7e681da02bd8e4e362d14832e1cca65169af504d93c9a7eedc3e2c88cc013f20259a43888727714ac7c90678382cdf22d85d26920e8abd23f28855ad4b3d5eb5483f93a257cb7ea103a34ab348e305e5786195d0f4571e8c9827ba0ddbba89dd9306c3837856e"}, @generic={0x34, 0x22, "3b51ebf944821be48a5dc48870fe64bd4890f2557b3baccd4db13d2ee785dbf214b44ef93a6ebf3aab2ea4767aa46fac5859"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x5, 0xc1, 0x81}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x7, 0x3, 0x5, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x5, 0xa8, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x2, 0x9, 0x9c}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x7, 0x2, 0xe}}]}}, {{0x9, 0x4, 0x25, 0x5, 0x8, 0xe6, 0x15, 0x65, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ec"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0xe, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0xff, 0x30}]}], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x5, 0x1, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xf1, 0x6, 0xc}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xf8, 0x9, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x15, 0xa7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x46c7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x2, 0xfa}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7f, 0x6, 0x5}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x5, 0x6}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x2, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 1.39487631s ago: executing program 3 (id=42188): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="a43b2eaab400000000000000", 0xc}], 0x2) 1.332146936s ago: executing program 3 (id=42193): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.306560129s ago: executing program 4 (id=42194): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x8000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1.249412045s ago: executing program 3 (id=42195): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1, 0x2, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@lsrr={0x83, 0x3, 0x8e}]}}}}}) 1.249079005s ago: executing program 3 (id=42196): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.248023615s ago: executing program 4 (id=42197): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x8014) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x2) 1.180109692s ago: executing program 3 (id=42198): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x2, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff"], 0x0) 1.179966242s ago: executing program 4 (id=42199): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) 1.058779264s ago: executing program 0 (id=42200): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) 1.048672465s ago: executing program 0 (id=42201): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 788.074681ms ago: executing program 5 (id=42202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) 694.22599ms ago: executing program 4 (id=42203): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x2, 0x0) 691.94961ms ago: executing program 0 (id=42204): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 496.83878ms ago: executing program 5 (id=42205): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = dup(r5) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, 0x0) 496.37465ms ago: executing program 5 (id=42206): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 481.341941ms ago: executing program 5 (id=42207): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1, 0x2, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@lsrr={0x83, 0x3, 0x8e}]}}}}}) 476.847212ms ago: executing program 4 (id=42208): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) 416.107378ms ago: executing program 5 (id=42209): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) 415.905928ms ago: executing program 5 (id=42210): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 174.678313ms ago: executing program 0 (id=42211): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x0) 145.199475ms ago: executing program 0 (id=42212): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) accept(r3, 0x0, 0x0) 123.804218ms ago: executing program 0 (id=42213): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=42214): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x844}, 0x40000) kernel console output (not intermixed with test programs): falling back to nfs_export=off. [ 2024.695139][T24326] overlayfs: missing 'lowerdir' [ 2024.990119][T24356] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2025.054637][T24356] overlayfs: missing 'lowerdir' [ 2025.145288][ T24] audit: type=1326 audit(1763265747.295:12586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24361 comm="syz.3.38708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc114af36c9 code=0x0 [ 2025.445339][ T24] audit: type=1326 audit(1763265747.595:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24387 comm="syz.3.38721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc114af36c9 code=0x0 [ 2025.654118][T24394] validate_nla: 7 callbacks suppressed [ 2025.654126][T24394] netlink: 'syz.3.38725': attribute type 4 has an invalid length. [ 2025.729800][T24398] netlink: 'syz.3.38725': attribute type 4 has an invalid length. [ 2026.263035][T24466] netlink: 'syz.3.38757': attribute type 4 has an invalid length. [ 2027.052059][ T1864] print_req_error: 937 callbacks suppressed [ 2027.052074][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2027.076577][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2027.090389][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2027.114664][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.130080][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.151588][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.172900][ T325] buffer_io_error: 719 callbacks suppressed [ 2027.172910][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2027.195159][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2027.203293][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2027.211519][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.223814][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.241101][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2027.249438][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2027.272496][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.289996][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.306325][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2027.319893][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2027.333389][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2027.361738][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2027.383735][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2028.123445][T24542] netlink: 'syz.2.38794': attribute type 4 has an invalid length. [ 2029.262178][T24630] netlink: 'syz.0.38837': attribute type 4 has an invalid length. [ 2030.757323][T24707] netlink: 156 bytes leftover after parsing attributes in process `syz.4.38875'. [ 2030.783735][T24707] netlink: 156 bytes leftover after parsing attributes in process `syz.4.38875'. [ 2032.157190][ T1864] print_req_error: 790 callbacks suppressed [ 2032.157205][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2032.176447][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2032.189633][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2032.211548][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.223250][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.251750][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.257935][ T325] buffer_io_error: 606 callbacks suppressed [ 2032.257945][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2032.277085][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2032.292964][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2032.301776][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.322093][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.352751][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2032.363427][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.381422][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2032.389762][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.401399][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2032.409799][T24783] netlink: 'syz.0.38915': attribute type 4 has an invalid length. [ 2032.417850][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2032.426250][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2032.454849][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2032.471834][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2032.910528][T24801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.962966][T24801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.970430][T24801] device bridge_slave_0 entered promiscuous mode [ 2033.022908][T24801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.029982][T24801] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.073238][T24801] device bridge_slave_1 entered promiscuous mode [ 2033.196831][T24801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.203893][T24801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.211166][T24801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.218217][T24801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.304975][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2033.343154][T25013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.353297][T25013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.374827][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2033.393103][T25013] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.400165][T25013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.428811][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2033.453238][T25013] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.460382][T25013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.518394][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2033.548374][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2033.585211][ T3541] device bridge_slave_1 left promiscuous mode [ 2033.591336][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.613269][ T3541] device bridge_slave_0 left promiscuous mode [ 2033.619426][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.643679][ T3541] device veth1_macvtap left promiscuous mode [ 2033.649707][ T3541] device veth0_vlan left promiscuous mode [ 2033.814402][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2033.856560][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2033.888396][T24801] device veth0_vlan entered promiscuous mode [ 2033.895066][T24845] netlink: 'syz.3.38941': attribute type 4 has an invalid length. [ 2033.910189][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2033.930347][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2033.965326][T24801] device veth1_macvtap entered promiscuous mode [ 2033.981948][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2033.991554][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2034.016936][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2034.035273][T24866] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38951'. [ 2034.050357][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2034.058672][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2034.076597][T24866] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38951'. [ 2034.086754][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2034.095512][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2034.121800][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2034.139421][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2034.194309][T24886] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2034.226750][T24886] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2034.858981][T24933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.866116][T24933] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.873909][T24933] device bridge_slave_0 entered promiscuous mode [ 2034.881611][T24933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.889190][T24933] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.896926][T24933] device bridge_slave_1 entered promiscuous mode [ 2034.944161][T24933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.951238][T24933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2034.958530][T24933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.965567][T24933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.044094][T24773] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.061602][T24773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.079246][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2035.121584][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2035.154890][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2035.173662][T24773] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.180708][T24773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.202089][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2035.230632][T24773] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.237698][T24773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.271241][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2035.294478][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2035.338478][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2035.436774][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2035.454978][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2035.482919][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2035.504750][T24933] device veth0_vlan entered promiscuous mode [ 2035.538590][T24933] device veth1_macvtap entered promiscuous mode [ 2035.564184][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2035.600134][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2035.617902][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2035.898501][ T3541] device bridge_slave_1 left promiscuous mode [ 2035.910269][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.938526][ T3541] device bridge_slave_0 left promiscuous mode [ 2035.953122][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.972251][ T24] audit: type=1400 audit(1763265758.115:12588): avc: denied { write } for pid=24989 comm="syz.3.39007" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2036.018908][ T3541] device veth1_macvtap left promiscuous mode [ 2036.025447][ T3541] device veth0_vlan left promiscuous mode [ 2036.042730][ T24] audit: type=1400 audit(1763265758.115:12589): avc: denied { open } for pid=24989 comm="syz.3.39007" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2036.177319][T24979] netlink: 'syz.2.39002': attribute type 4 has an invalid length. [ 2036.214199][T24983] netlink: 'syz.4.39004': attribute type 4 has an invalid length. [ 2036.238571][T24991] netlink: 'syz.2.39002': attribute type 4 has an invalid length. [ 2038.184214][ T1864] print_req_error: 468 callbacks suppressed [ 2038.184227][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2038.205453][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2038.218917][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2038.250791][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.252610][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.272401][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.292562][ T325] buffer_io_error: 359 callbacks suppressed [ 2038.292570][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2038.306744][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2038.329470][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.350959][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.352544][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2038.370406][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2038.370459][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.389862][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2038.422660][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2038.443947][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2038.454711][T25063] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2038.463979][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2038.472293][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2038.488493][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2038.499357][T25063] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2038.509964][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2038.523798][T25065] 9pnet: Insufficient options for proto=fd [ 2040.997727][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39103'. [ 2041.126301][T25198] netlink: 'syz.4.39110': attribute type 4 has an invalid length. [ 2041.153180][T25198] netlink: 'syz.4.39110': attribute type 4 has an invalid length. [ 2042.300139][T25295] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2042.340339][T25295] overlayfs: missing 'lowerdir' [ 2042.388323][T25301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2042.435041][T25301] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2043.075158][T25321] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2043.103074][T25321] overlayfs: missing 'lowerdir' [ 2043.204542][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39173'. [ 2043.255296][ T1864] print_req_error: 703 callbacks suppressed [ 2043.255311][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2043.274382][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2043.287872][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2043.296400][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.326291][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.351090][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.365926][ T2875] buffer_io_error: 539 callbacks suppressed [ 2043.365956][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2043.372265][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2043.389751][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2043.432463][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.442409][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.472277][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2043.480389][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.512255][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2043.532463][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2043.552252][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2043.560394][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2043.582005][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2043.611804][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2043.612126][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2043.642779][T25339] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2043.671153][T25339] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2043.783296][T25343] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2043.818828][T25338] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.842251][T25343] overlayfs: missing 'lowerdir' [ 2043.900701][T25338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.935983][T25338] device bridge_slave_0 entered promiscuous mode [ 2043.969072][T25338] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.014695][T25338] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.036542][T25338] device bridge_slave_1 entered promiscuous mode [ 2044.151189][T25367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2044.181765][T25338] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.188830][T25338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2044.196120][T25338] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.203156][T25338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.233224][T25367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2044.236226][T25369] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2044.292583][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2044.305637][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.315841][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2044.332376][T25369] overlayfs: missing 'lowerdir' [ 2044.342604][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2044.413972][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2044.422333][T24773] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.429368][T24773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2044.479329][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2044.493727][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2044.542394][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2044.585704][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2044.612731][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2044.620543][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2044.706257][T25338] device veth0_vlan entered promiscuous mode [ 2044.724527][T25404] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2044.740754][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2044.762503][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2044.780564][T25404] overlayfs: missing 'lowerdir' [ 2044.787104][T25338] device veth1_macvtap entered promiscuous mode [ 2044.815974][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2044.823898][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2044.834984][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2044.873393][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2044.908920][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2044.963053][ T1527] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2044.974790][T25013] device bridge_slave_1 left promiscuous mode [ 2044.986929][T25013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.996076][T25429] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2045.021136][T25013] device bridge_slave_0 left promiscuous mode [ 2045.028476][T25013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.033608][T25429] overlayfs: missing 'lowerdir' [ 2045.047947][T25013] device veth1_macvtap left promiscuous mode [ 2045.064259][T25013] device veth0_vlan left promiscuous mode [ 2045.212169][ T1527] usb 5-1: Using ep0 maxpacket: 8 [ 2045.290061][T25450] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2045.317616][T25450] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2045.372296][ T1527] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2045.462303][ T1527] usb 5-1: config 0 has an invalid interface number: 125 but max is 2 [ 2045.470478][ T1527] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2045.507479][ T1527] usb 5-1: config 0 has no interface number 0 [ 2045.532147][ T1527] usb 5-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2045.565621][ T1527] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2045.742225][ T1527] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2045.761438][ T1527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.781613][ T1527] usb 5-1: Product: syz [ 2045.801803][ T1527] usb 5-1: Manufacturer: syz [ 2045.811906][ T1527] usb 5-1: SerialNumber: syz [ 2045.824258][ T1527] usb 5-1: config 0 descriptor?? [ 2046.102328][ T1527] hub 5-1:0.125: bad descriptor, ignoring hub [ 2046.108451][ T1527] hub: probe of 5-1:0.125 failed with error -5 [ 2046.172170][ T1527] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2046.178700][ T1527] uvcvideo: No valid video chain found. [ 2046.232528][ T1527] usb 5-1: USB disconnect, device number 61 [ 2047.599169][ T24] audit: type=1400 audit(1780043214.745:12590): avc: denied { read } for pid=25588 comm="syz.2.39300" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2048.722362][ T1840] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2048.753721][ T1864] print_req_error: 573 callbacks suppressed [ 2048.753734][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2048.777049][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2048.783955][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2048.808154][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.827675][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.839134][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.857345][ T325] buffer_io_error: 439 callbacks suppressed [ 2048.857355][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2048.884831][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2048.891181][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2048.901266][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2048.905934][ T837] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2048.913591][T25952] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2048.936739][T10182] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2048.951472][ T837] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2048.969716][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2048.978047][ T837] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2048.986210][ T1840] usb 6-1: Using ep0 maxpacket: 32 [ 2049.001946][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2049.002040][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2049.018254][T10182] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2049.028244][ T837] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2049.102061][ T1840] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2049.116453][ T1840] usb 6-1: config 0 has no interface number 0 [ 2049.145499][ T1840] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2049.322031][ T1840] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2049.341291][ T1840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.371619][ T1840] usb 6-1: Product: syz [ 2049.376063][ T1840] usb 6-1: Manufacturer: syz [ 2049.380653][ T1840] usb 6-1: SerialNumber: syz [ 2049.405711][ T1840] usb 6-1: config 0 descriptor?? [ 2049.442513][ T1840] smsc75xx v1.0.0 [ 2049.446932][ T1840] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2049.472031][ T1840] smsc75xx: probe of 6-1:0.184 failed with error -22 [ 2049.983492][T25682] binder: Bad value for 'stats' [ 2051.452141][ T1641] usb 6-1: USB disconnect, device number 13 [ 2051.553646][T25741] netlink: 'syz.5.39372': attribute type 4 has an invalid length. [ 2052.590144][T25845] netlink: 'syz.3.39424': attribute type 4 has an invalid length. [ 2052.615039][T25845] netlink: 'syz.3.39424': attribute type 4 has an invalid length. [ 2053.641710][ T1641] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2053.763053][ T1864] print_req_error: 606 callbacks suppressed [ 2053.763068][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2053.782541][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2053.795510][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2053.798968][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.818624][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.826161][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.849104][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.860568][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.878039][ T1864] buffer_io_error: 469 callbacks suppressed [ 2053.878048][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2053.881728][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2053.884148][ T1641] usb 3-1: Using ep0 maxpacket: 16 [ 2053.892141][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2053.915243][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.943193][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2053.951393][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2053.971722][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2053.981871][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2053.999006][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2054.013470][T25926] binder: Bad value for 'stats' [ 2054.017608][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2054.042313][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2054.042722][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2054.058526][ T1641] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.081513][ T1641] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2054.091565][ T1641] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 2054.115180][ T1641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.144647][ T1641] usb 3-1: config 0 descriptor?? [ 2054.491682][ T1641] usbhid 3-1:0.0: can't add hid device: -71 [ 2054.497728][ T1641] usbhid: probe of 3-1:0.0 failed with error -71 [ 2054.522281][ T1641] usb 3-1: USB disconnect, device number 78 [ 2055.561592][ T5] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2055.811573][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 2055.931647][ T5] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.951559][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2055.970142][T25990] netlink: 756 bytes leftover after parsing attributes in process `syz.3.39494'. [ 2055.979371][ T5] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 2055.994303][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.017842][ T5] usb 1-1: config 0 descriptor?? [ 2056.076373][T26000] netlink: 'syz.3.39500': attribute type 4 has an invalid length. [ 2056.263227][T26020] netlink: 756 bytes leftover after parsing attributes in process `syz.5.39508'. [ 2056.371587][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 2056.377580][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 2056.385157][ T5] usb 1-1: USB disconnect, device number 74 [ 2056.967491][T26041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.023321][T26041] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.041054][T26041] device bridge_slave_0 entered promiscuous mode [ 2057.089134][T26041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.106352][T26041] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.126972][T26041] device bridge_slave_1 entered promiscuous mode [ 2057.265459][T26041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.272519][T26041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.279776][T26041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.286825][T26041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.349192][T26078] binder: Bad value for 'stats' [ 2057.425396][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.442114][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.472786][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2057.480395][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2057.514280][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2057.532175][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.539232][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.568769][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2057.588422][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.595501][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.613256][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2057.670167][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2057.686098][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2057.706732][T26041] device veth0_vlan entered promiscuous mode [ 2057.715701][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2057.765833][T26041] device veth1_macvtap entered promiscuous mode [ 2057.789034][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2057.799225][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2057.809334][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2057.827307][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2057.836165][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2057.893719][T26112] netlink: 756 bytes leftover after parsing attributes in process `syz.4.39554'. [ 2057.984351][T25013] device bridge_slave_1 left promiscuous mode [ 2057.990730][T25013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.028330][T25013] device bridge_slave_0 left promiscuous mode [ 2058.052012][T25013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.086553][T25013] device veth1_macvtap left promiscuous mode [ 2058.107295][T25013] device veth0_vlan left promiscuous mode [ 2058.159821][ T24] audit: type=1400 audit(1813598115.304:12591): avc: denied { setopt } for pid=26143 comm="syz.3.39568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2058.366450][T26168] netlink: 756 bytes leftover after parsing attributes in process `syz.3.39581'. [ 2058.434705][T26181] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2058.481984][T26181] overlayfs: missing 'lowerdir' [ 2058.530615][T26192] binder: Unknown parameter 'co' [ 2058.567543][T26198] binder: Bad value for 'stats' [ 2058.653642][T26211] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2058.679978][T26211] overlayfs: missing 'lowerdir' [ 2058.748577][T26224] binder: Unknown parameter 'co' [ 2058.787507][ T1864] print_req_error: 716 callbacks suppressed [ 2058.787521][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2058.811222][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2058.842084][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2058.851478][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.869097][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.877004][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.899348][ T2875] buffer_io_error: 546 callbacks suppressed [ 2058.899358][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2058.906273][ T837] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2058.929192][T25952] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2058.930512][T10182] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2058.944294][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.952193][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2058.969986][T25952] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2058.981622][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2058.984239][ T837] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2058.997790][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2059.004860][T25952] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2059.013833][T10182] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2059.019223][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2059.031478][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2059.215676][T26275] netlink: 'syz.5.39630': attribute type 4 has an invalid length. [ 2059.770583][T26334] netlink: 'syz.4.39659': attribute type 4 has an invalid length. [ 2059.800665][T26334] netlink: 'syz.4.39659': attribute type 4 has an invalid length. [ 2062.445615][T26515] netlink: 756 bytes leftover after parsing attributes in process `syz.4.39746'. [ 2062.546417][T26522] netlink: 'syz.5.39748': attribute type 4 has an invalid length. [ 2062.882884][T26549] netlink: 'syz.4.39762': attribute type 4 has an invalid length. [ 2063.722157][T26563] binder: Bad value for 'stats' [ 2063.761916][T26565] netlink: 756 bytes leftover after parsing attributes in process `syz.0.39770'. [ 2063.989599][T26581] binder: Bad value for 'stats' [ 2064.092539][T26588] netlink: 756 bytes leftover after parsing attributes in process `syz.0.39783'. [ 2064.107706][ T1864] print_req_error: 1028 callbacks suppressed [ 2064.107720][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2064.130719][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2064.144125][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2064.149278][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.176133][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.191146][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.202539][ T325] buffer_io_error: 793 callbacks suppressed [ 2064.202547][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2064.234028][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2064.241048][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2064.248926][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.275670][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2064.276701][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.291725][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.301767][T26611] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2064.321044][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2064.332250][T26611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2064.341273][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2064.345025][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.358124][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2064.385698][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2064.400238][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2064.431826][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2064.671356][T26651] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2064.683644][T26651] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2065.911019][T17119] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2066.171024][T17119] usb 4-1: Using ep0 maxpacket: 16 [ 2066.291065][T17119] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.328407][T17119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2066.344526][T17119] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 2066.380980][T17119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.414227][T17119] usb 4-1: config 0 descriptor?? [ 2066.761006][T17119] usbhid 4-1:0.0: can't add hid device: -71 [ 2066.772016][T17119] usbhid: probe of 4-1:0.0 failed with error -71 [ 2066.791753][T17119] usb 4-1: USB disconnect, device number 105 [ 2067.472954][T26819] netlink: 'syz.5.39891': attribute type 4 has an invalid length. [ 2067.491200][T26819] netlink: 'syz.5.39891': attribute type 4 has an invalid length. [ 2068.364241][T26866] netlink: 756 bytes leftover after parsing attributes in process `syz.3.39905'. [ 2068.810912][T18697] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2069.060878][T18697] usb 4-1: Using ep0 maxpacket: 8 [ 2069.157927][ T1864] print_req_error: 890 callbacks suppressed [ 2069.157942][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2069.177155][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2069.190208][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2069.209611][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.213844][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.225253][T18697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2069.250901][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.270801][ T2875] buffer_io_error: 688 callbacks suppressed [ 2069.270809][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2069.270816][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2069.270936][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.296984][ T2875] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.321201][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2069.340868][T18697] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.359515][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2069.372151][T18697] usb 4-1: config 12 interface 0 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 2069.390915][ T2875] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.400852][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2069.412585][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2069.423771][T18697] usb 4-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2069.430807][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2069.448752][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2069.457127][T18697] usb 4-1: config 12 interface 0 has no altsetting 0 [ 2069.470837][ T2875] Buffer I/O error on dev loop2p5, logical block 7, async page read [ 2069.475676][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2069.507547][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2069.640894][T18697] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2069.658166][T18697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.679551][T18697] usb 4-1: Product: syz [ 2069.689781][T18697] usb 4-1: Manufacturer: syz [ 2069.699835][T18697] usb 4-1: SerialNumber: syz [ 2069.815047][T26977] binder: Bad value for 'stats' [ 2070.031273][T18697] usb 4-1: selecting invalid altsetting 0 [ 2070.051495][T18697] snd-usb-audio: probe of 4-1:12.0 failed with error -2 [ 2070.070257][T18697] usb 4-1: USB disconnect, device number 106 [ 2070.635081][T27045] netlink: 'syz.5.39999': attribute type 4 has an invalid length. [ 2070.653543][T27045] netlink: 'syz.5.39999': attribute type 4 has an invalid length. [ 2071.020745][T17119] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2071.079384][T27078] 9pnet: Insufficient options for proto=fd [ 2071.117097][T27082] netlink: 756 bytes leftover after parsing attributes in process `syz.5.40016'. [ 2071.280751][T17119] usb 5-1: Using ep0 maxpacket: 32 [ 2071.400737][T17119] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2071.408979][T17119] usb 5-1: config 0 has no interface number 0 [ 2071.420229][T17119] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2071.601637][T17119] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2071.620839][T17119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.649770][T17119] usb 5-1: Product: syz [ 2071.669100][T17119] usb 5-1: Manufacturer: syz [ 2071.680679][T17119] usb 5-1: SerialNumber: syz [ 2071.695188][T17119] usb 5-1: config 0 descriptor?? [ 2071.751142][T17119] smsc75xx v1.0.0 [ 2072.380731][T17119] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2072.394552][T17119] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2072.900979][T17119] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 2072.930731][T17119] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 2072.940386][T17119] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2072.980710][T17119] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 2072.990823][T17119] usb 5-1: USB disconnect, device number 62 [ 2074.765752][ T1864] print_req_error: 479 callbacks suppressed [ 2074.765766][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2074.785160][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2074.801964][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2074.833496][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2074.837201][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2074.864911][ T2875] buffer_io_error: 372 callbacks suppressed [ 2074.864920][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2074.885786][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2074.920553][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2074.923205][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2074.940696][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2074.950621][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2074.970501][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2074.998804][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.010489][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2075.018606][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.025837][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2075.064657][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2075.073650][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2075.110322][T27250] netlink: 'syz.4.40095': attribute type 4 has an invalid length. [ 2075.110914][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2075.126687][T27244] netlink: 'syz.4.40095': attribute type 4 has an invalid length. [ 2075.156666][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2075.625060][T27284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.40111'. [ 2075.669220][T27284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.40111'. [ 2075.912221][T27323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.40130'. [ 2075.980482][T27323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.40130'. [ 2076.621841][T27359] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40146'. [ 2076.650471][T27359] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40146'. [ 2076.931053][T27378] netlink: 'syz.5.40159': attribute type 4 has an invalid length. [ 2076.996653][T27383] netlink: 156 bytes leftover after parsing attributes in process `syz.5.40162'. [ 2077.016101][T27383] netlink: 156 bytes leftover after parsing attributes in process `syz.5.40162'. [ 2077.812553][T27404] netlink: 156 bytes leftover after parsing attributes in process `syz.2.40173'. [ 2077.850349][T27404] netlink: 156 bytes leftover after parsing attributes in process `syz.2.40173'. [ 2078.949574][T27497] netlink: 'syz.4.40216': attribute type 4 has an invalid length. [ 2078.986828][T27497] netlink: 'syz.4.40216': attribute type 4 has an invalid length. [ 2079.970251][T19945] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2080.132496][ T1864] print_req_error: 1185 callbacks suppressed [ 2080.132510][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2080.151736][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2080.164573][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2080.180063][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.191636][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.220206][T19945] usb 3-1: Using ep0 maxpacket: 16 [ 2080.221160][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.236637][ T2875] buffer_io_error: 914 callbacks suppressed [ 2080.236647][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2080.258856][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2080.267096][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.278554][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2080.286781][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.298127][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2080.307600][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2080.316429][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.327964][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.339285][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2080.347499][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2080.350277][T19945] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.355832][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2080.375022][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2080.384504][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2080.400269][T19945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2080.408086][T19945] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 2080.442617][T19945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.474503][T19945] usb 3-1: config 0 descriptor?? [ 2080.810229][T19945] usbhid 3-1:0.0: can't add hid device: -71 [ 2080.816297][T19945] usbhid: probe of 3-1:0.0 failed with error -71 [ 2080.831684][T19945] usb 3-1: USB disconnect, device number 79 [ 2081.091353][T27601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.40266'. [ 2081.507491][T27629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40279'. [ 2081.525595][T27635] 9pnet: Insufficient options for proto=fd [ 2082.195729][T27670] 9pnet: Insufficient options for proto=fd [ 2082.513197][T27679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.534695][T27679] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.594617][T27679] device bridge_slave_0 entered promiscuous mode [ 2082.632635][T27679] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.639670][T27679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2082.680454][T27679] device bridge_slave_1 entered promiscuous mode [ 2082.825251][T27679] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.832329][T27679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.839579][T27679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.846631][T27679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2082.912860][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2082.922829][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.940328][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 2082.981385][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2083.002808][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.009848][ T6763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.037472][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2083.060794][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.067836][ T6763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2083.090276][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2083.108927][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2083.144962][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2083.162933][T27679] device veth0_vlan entered promiscuous mode [ 2083.182452][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2083.196366][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2083.220897][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2083.243288][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2083.252780][T27679] device veth1_macvtap entered promiscuous mode [ 2083.260151][T24773] device bridge_slave_1 left promiscuous mode [ 2083.266664][T24773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.280688][T24773] device bridge_slave_0 left promiscuous mode [ 2083.300335][T24773] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.317182][T24773] device veth1_macvtap left promiscuous mode [ 2083.323525][T24773] device veth0_vlan left promiscuous mode [ 2083.465723][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2083.484176][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2083.523103][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2083.547067][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2083.587625][T27741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40328'. [ 2083.880027][T19945] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2084.150042][T19945] usb 6-1: device descriptor read/64, error -71 [ 2084.549971][T19945] usb 6-1: device descriptor read/64, error -71 [ 2084.816635][T27801] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2084.829960][T19945] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2084.837558][T27801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2084.987843][T27820] binder: Unknown parameter 'co' [ 2085.037966][T27828] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2085.057224][T27828] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2085.149928][T19945] usb 6-1: device descriptor read/64, error -71 [ 2085.224346][ T1864] print_req_error: 815 callbacks suppressed [ 2085.224361][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2085.243489][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2085.257675][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2085.270553][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.270805][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.293573][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.305113][ T1864] buffer_io_error: 627 callbacks suppressed [ 2085.305122][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2085.319247][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2085.323843][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2085.332167][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.351409][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2085.353113][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.359638][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.385862][T27846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.40377'. [ 2085.386551][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2085.403194][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2085.416144][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2085.419632][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2085.437146][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2085.439821][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2085.471972][T27854] binder: Bad value for 'stats' [ 2085.478030][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2085.539988][T19945] usb 6-1: device descriptor read/64, error -71 [ 2085.663227][T19945] usb usb6-port1: attempt power cycle [ 2086.099894][T19945] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2086.284860][T19945] usb 6-1: device descriptor read/8, error -71 [ 2086.569899][T19945] usb 6-1: device descriptor read/8, error -71 [ 2086.645218][T27913] netlink: 36 bytes leftover after parsing attributes in process `syz.5.40414'. [ 2086.793057][T27927] netlink: 'syz.2.40420': attribute type 4 has an invalid length. [ 2086.874327][T27945] netlink: 'syz.2.40420': attribute type 4 has an invalid length. [ 2087.405619][T27987] netlink: 'syz.0.40441': attribute type 4 has an invalid length. [ 2087.430283][T27987] netlink: 'syz.0.40441': attribute type 4 has an invalid length. [ 2087.726352][T28004] netlink: 756 bytes leftover after parsing attributes in process `syz.4.40454'. [ 2088.226028][T28021] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2088.273879][T28021] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2088.989759][ T8793] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2089.176905][T28067] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2089.200594][T28067] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2089.229758][ T8793] usb 1-1: Using ep0 maxpacket: 8 [ 2089.389759][ T8793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2089.480129][ T8793] usb 1-1: config 0 has an invalid interface number: 125 but max is 2 [ 2089.497630][ T8793] usb 1-1: config 0 has an invalid descriptor of length 3, skipping remainder of the config [ 2089.533756][ T8793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2089.555494][ T8793] usb 1-1: config 0 has no interface number 0 [ 2089.565029][T28097] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2089.576307][ T8793] usb 1-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2089.600086][ T8793] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2089.607063][T28097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2089.759774][ T8793] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2089.774194][ T8793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.792530][ T8793] usb 1-1: Product: syz [ 2089.800073][ T8793] usb 1-1: Manufacturer: syz [ 2089.815021][ T8793] usb 1-1: SerialNumber: syz [ 2089.842139][ T8793] usb 1-1: config 0 descriptor?? [ 2090.119913][ T8793] hub 1-1:0.125: bad descriptor, ignoring hub [ 2090.126053][ T8793] hub: probe of 1-1:0.125 failed with error -5 [ 2090.179736][ T8793] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2090.189662][ T8793] uvcvideo: No valid video chain found. [ 2090.240119][ T8793] usb 1-1: USB disconnect, device number 75 [ 2090.270309][T28122] netlink: 756 bytes leftover after parsing attributes in process `syz.5.40512'. [ 2090.340899][ T1864] print_req_error: 815 callbacks suppressed [ 2090.340914][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2090.367286][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2090.380032][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2090.391277][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.403068][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.419678][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.439078][ T2875] buffer_io_error: 627 callbacks suppressed [ 2090.439087][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2090.452914][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2090.453758][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2090.489745][ T2875] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.503243][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.521033][T28135] 9pnet: Insufficient options for proto=fd [ 2090.524639][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2090.535027][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2090.549742][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.562499][ T2875] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2090.585046][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2090.594320][T25952] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2090.595615][T28140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2090.603563][ T837] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2090.612240][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2090.630281][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2090.642137][T28140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2090.849721][T26364] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2091.016657][T28167] netlink: 'syz.3.40532': attribute type 4 has an invalid length. [ 2091.101510][T28175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.40536'. [ 2091.120957][T26364] usb 6-1: device descriptor read/64, error -71 [ 2091.127979][T28177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40537'. [ 2091.509614][T26364] usb 6-1: device descriptor read/64, error -71 [ 2091.721310][T28217] 9pnet: Insufficient options for proto=fd [ 2091.779586][T26364] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2092.049563][T26364] usb 6-1: device descriptor read/64, error -71 [ 2092.297571][T28252] 9pnet: Insufficient options for proto=fd [ 2092.343773][T28259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.40576'. [ 2092.459528][T26364] usb 6-1: device descriptor read/64, error -71 [ 2092.589594][T26364] usb usb6-port1: attempt power cycle [ 2093.000441][T26364] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2093.111671][T28274] 9pnet: Insufficient options for proto=fd [ 2093.149740][T28276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.40587'. [ 2093.169582][T26364] usb 6-1: device descriptor read/8, error -71 [ 2093.220200][T24773] device bridge_slave_1 left promiscuous mode [ 2093.226346][T24773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.250932][T24773] device bridge_slave_0 left promiscuous mode [ 2093.257066][T24773] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.300796][T24773] device veth1_macvtap left promiscuous mode [ 2093.317385][T24773] device veth0_vlan left promiscuous mode [ 2093.439670][T26364] usb 6-1: device descriptor read/8, error -71 [ 2095.548838][ T1864] print_req_error: 925 callbacks suppressed [ 2095.548852][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2095.561816][T28423] netlink: 'syz.0.40657': attribute type 4 has an invalid length. [ 2095.567855][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2095.586943][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2095.602808][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.614180][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.619406][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.654330][ T325] buffer_io_error: 713 callbacks suppressed [ 2095.654338][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2095.659329][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2095.676420][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.688138][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2095.719372][ T2875] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.723858][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2095.751589][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2095.759215][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.779354][T28426] netlink: 'syz.0.40657': attribute type 4 has an invalid length. [ 2095.787250][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2095.789390][ T2875] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2095.806524][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2095.837621][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2095.845351][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2095.869395][ T2875] Buffer I/O error on dev loop2p5, logical block 7, async page read [ 2095.926067][T28435] netlink: 36 bytes leftover after parsing attributes in process `syz.5.40660'. [ 2096.309334][T26364] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2096.423913][T28455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.40668'. [ 2096.449654][T28455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.40668'. [ 2096.459752][T28452] netlink: 'syz.0.40669': attribute type 4 has an invalid length. [ 2096.484695][T28452] netlink: 'syz.0.40669': attribute type 4 has an invalid length. [ 2096.559669][T26364] usb 6-1: Using ep0 maxpacket: 32 [ 2096.679380][T26364] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2096.699297][T26364] usb 6-1: config 0 has no interface number 0 [ 2096.705401][T26364] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2096.899338][T26364] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2096.908381][T26364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.943834][T26364] usb 6-1: Product: syz [ 2096.948024][T26364] usb 6-1: Manufacturer: syz [ 2096.977598][T26364] usb 6-1: SerialNumber: syz [ 2096.990199][T26364] usb 6-1: config 0 descriptor?? [ 2097.049693][T26364] smsc75xx v1.0.0 [ 2097.468260][T28561] netlink: 'syz.4.40721': attribute type 4 has an invalid length. [ 2097.539022][T28563] netlink: 756 bytes leftover after parsing attributes in process `syz.4.40722'. [ 2098.121331][T28586] netlink: 'syz.3.40734': attribute type 4 has an invalid length. [ 2098.149463][T26364] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 2098.168877][T26364] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2098.219231][T26364] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2098.237348][T26364] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2098.256592][T26364] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2098.288009][T26364] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2098.308706][T26364] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 2098.325411][T26364] usb 6-1: USB disconnect, device number 22 [ 2098.440147][T28606] netlink: 'syz.3.40743': attribute type 4 has an invalid length. [ 2098.458332][T28606] netlink: 'syz.3.40743': attribute type 4 has an invalid length. [ 2098.854369][T28631] 9pnet: Insufficient options for proto=fd [ 2099.056522][T28641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.40762'. [ 2099.216329][T28649] 9pnet: Insufficient options for proto=fd [ 2099.514508][T28672] 9pnet: Insufficient options for proto=fd [ 2100.056541][T28729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.40803'. [ 2100.393561][T28773] 9pnet: Insufficient options for proto=fd [ 2100.512104][T28790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40836'. [ 2100.541017][T28793] 9pnet: Insufficient options for proto=fd [ 2100.555740][ T1864] print_req_error: 1179 callbacks suppressed [ 2100.555755][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2100.575030][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2100.590884][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2100.620473][T25952] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2100.634002][ T837] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2100.647579][T10182] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2100.649316][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2100.672279][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2100.701012][ T837] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2100.706551][T10182] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2100.724596][ T325] buffer_io_error: 906 callbacks suppressed [ 2100.724606][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2100.724678][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2100.742326][ T837] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2100.750530][T25952] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2100.768634][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2100.779090][T10182] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2100.786874][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2100.796578][T10182] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2100.817174][T10182] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2100.818155][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2100.937666][T28815] binder: Unknown parameter 'co' [ 2101.004627][T28817] 9pnet: Insufficient options for proto=fd [ 2101.136825][T28823] 9pnet: Insufficient options for proto=fd [ 2101.410149][T28843] 9pnet: Insufficient options for proto=fd [ 2101.762278][T28876] 9pnet: Insufficient options for proto=fd [ 2101.962689][T28894] 9pnet: Insufficient options for proto=fd [ 2102.379512][T28927] 9pnet: Insufficient options for proto=fd [ 2102.762686][T28949] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40902'. [ 2102.799037][T28949] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40902'. [ 2103.198269][T29007] netlink: 48 bytes leftover after parsing attributes in process `syz.5.40940'. [ 2103.359286][T29024] netlink: 156 bytes leftover after parsing attributes in process `syz.2.40926'. [ 2103.388959][T29024] netlink: 156 bytes leftover after parsing attributes in process `syz.2.40926'. [ 2104.790119][T29091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.40977'. [ 2105.561198][ T325] print_req_error: 444 callbacks suppressed [ 2105.561213][ T325] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2105.561233][ T1864] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.567174][ T325] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.623372][ T1864] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.668893][ T1864] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.703790][ T1864] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.718857][ T325] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.754796][ T1864] buffer_io_error: 344 callbacks suppressed [ 2105.754805][ T1864] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2105.758115][T29110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.40990'. [ 2105.760772][ T325] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2105.794741][ T1864] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.818757][ T1864] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2105.846240][ T325] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.880245][ T325] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2105.898824][ T325] blk_update_request: I/O error, dev loop4, sector 3654 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2105.919660][ T325] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2105.951959][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2105.951966][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2105.951988][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2105.961741][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2106.017097][T25952] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2107.140107][T29200] binder: Unknown parameter 'sta' [ 2109.428574][T19945] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2109.678542][T19945] usb 5-1: Using ep0 maxpacket: 8 [ 2109.838676][T19945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2109.928692][T19945] usb 5-1: config 0 has an invalid interface number: 125 but max is 2 [ 2109.936875][T19945] usb 5-1: config 0 has an invalid descriptor of length 3, skipping remainder of the config [ 2109.966968][T19945] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2109.976163][T19945] usb 5-1: config 0 has no interface number 0 [ 2110.001801][T19945] usb 5-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2110.025602][T19945] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2110.063180][T29385] netlink: 'syz.0.41122': attribute type 4 has an invalid length. [ 2110.090771][T29385] netlink: 'syz.0.41122': attribute type 4 has an invalid length. [ 2110.198597][T19945] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2110.217803][T19945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.237967][T19945] usb 5-1: Product: syz [ 2110.248057][T19945] usb 5-1: Manufacturer: syz [ 2110.258141][T19945] usb 5-1: SerialNumber: syz [ 2110.269003][T19945] usb 5-1: config 0 descriptor?? [ 2110.379863][T29425] netlink: 52 bytes leftover after parsing attributes in process `syz.0.41138'. [ 2110.548048][T29452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41153'. [ 2110.561540][T19945] hub 5-1:0.125: bad descriptor, ignoring hub [ 2110.568746][T19945] hub: probe of 5-1:0.125 failed with error -5 [ 2110.578190][T29454] netlink: 52 bytes leftover after parsing attributes in process `syz.3.41154'. [ 2110.606460][T29456] netlink: 108 bytes leftover after parsing attributes in process `syz.5.41156'. [ 2110.618538][T19945] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2110.625047][T19945] uvcvideo: No valid video chain found. [ 2110.629934][ T325] print_req_error: 791 callbacks suppressed [ 2110.629949][ T325] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2110.655905][ T2875] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2110.668969][T19945] usb 5-1: USB disconnect, device number 63 [ 2110.669961][ T1864] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2110.689598][T29464] netlink: 'syz.0.41157': attribute type 4 has an invalid length. [ 2110.696545][ T2875] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.715522][ T1864] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.725808][ T325] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.738536][ T1864] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.750530][T29477] netlink: 'syz.0.41157': attribute type 4 has an invalid length. [ 2110.763452][ T2875] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.783209][ T1864] buffer_io_error: 606 callbacks suppressed [ 2110.783220][ T1864] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2110.786720][ T325] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2110.801029][ T1864] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.815505][ T2875] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2110.824709][ T2875] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2110.850037][ T1864] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2110.859280][ T2875] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2110.882352][ T1864] Buffer I/O error on dev loop2p5, logical block 7, async page read [ 2110.887278][ T2875] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2110.899356][T29487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.41169'. [ 2110.919259][ T2875] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2110.942739][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2110.952063][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2111.152002][T29504] netlink: 'syz.0.41179': attribute type 4 has an invalid length. [ 2111.199701][T29504] netlink: 'syz.0.41179': attribute type 4 has an invalid length. [ 2112.301842][T29571] netlink: 'syz.3.41210': attribute type 4 has an invalid length. [ 2112.503949][T29585] netlink: 268 bytes leftover after parsing attributes in process `syz.3.41218'. [ 2113.201706][T29610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41224'. [ 2113.654287][T29639] netlink: 268 bytes leftover after parsing attributes in process `syz.3.41244'. [ 2114.029194][T29662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41255'. [ 2114.423637][T29685] 9pnet: Insufficient options for proto=fd [ 2114.444482][ T24] audit: type=1400 audit(1830375616.592:12592): avc: denied { setattr } for pid=29686 comm="syz.4.41266" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2114.506540][T29690] 9pnet: Insufficient options for proto=fd [ 2114.618125][T29698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.41271'. [ 2114.653818][T29704] 9pnet: Insufficient options for proto=fd [ 2115.014737][T29745] netlink: 'syz.2.41276': attribute type 4 has an invalid length. [ 2115.854955][ T1864] print_req_error: 831 callbacks suppressed [ 2115.854978][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2115.874175][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2115.887416][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2115.892847][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2115.918368][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2115.928191][ T1864] buffer_io_error: 638 callbacks suppressed [ 2115.928201][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2115.929830][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2115.948212][T19945] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2115.969884][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2115.986696][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2115.998196][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2116.009778][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2116.024339][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2116.037858][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2116.058985][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2116.069739][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2116.084308][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2116.098370][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2116.106462][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2116.114619][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2116.149900][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2116.218178][T19945] usb 1-1: Using ep0 maxpacket: 8 [ 2116.388216][T19945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2116.478227][T19945] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.499481][T19945] usb 1-1: config 12 interface 0 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 2116.522557][T19945] usb 1-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2116.560392][T19945] usb 1-1: config 12 interface 0 has no altsetting 0 [ 2116.578948][T29861] __nla_validate_parse: 3 callbacks suppressed [ 2116.578957][T29861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.41351'. [ 2116.728287][T19945] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2116.744611][T19945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.768164][T19945] usb 1-1: Product: syz [ 2116.778295][T19945] usb 1-1: Manufacturer: syz [ 2116.786625][T19945] usb 1-1: SerialNumber: syz [ 2117.118572][T19945] usb 1-1: selecting invalid altsetting 0 [ 2117.134577][T19945] snd-usb-audio: probe of 1-1:12.0 failed with error -2 [ 2117.153108][T19945] usb 1-1: USB disconnect, device number 76 [ 2117.950372][T29932] netlink: 268 bytes leftover after parsing attributes in process `syz.0.41385'. [ 2118.109723][T29938] netlink: 'syz.0.41388': attribute type 4 has an invalid length. [ 2118.134433][T29938] netlink: 'syz.0.41388': attribute type 4 has an invalid length. [ 2118.358150][T18697] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2118.374251][T29954] 9pnet: Insufficient options for proto=fd [ 2118.598111][T18697] usb 4-1: Using ep0 maxpacket: 8 [ 2118.758138][T18697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2118.834070][T29983] netlink: 108 bytes leftover after parsing attributes in process `syz.0.41409'. [ 2118.838185][T18697] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.867640][T18697] usb 4-1: config 12 interface 0 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 2118.888050][T18697] usb 4-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2118.930814][T18697] usb 4-1: config 12 interface 0 has no altsetting 0 [ 2119.098122][T18697] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2119.107709][T18697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.149789][T18697] usb 4-1: Product: syz [ 2119.154150][T30007] netlink: 108 bytes leftover after parsing attributes in process `syz.2.41421'. [ 2119.160233][T18697] usb 4-1: Manufacturer: syz [ 2119.178250][T18697] usb 4-1: SerialNumber: syz [ 2119.468229][T30048] netlink: 268 bytes leftover after parsing attributes in process `syz.4.41439'. [ 2119.498486][T18697] usb 4-1: selecting invalid altsetting 0 [ 2119.504316][T18697] snd-usb-audio: probe of 4-1:12.0 failed with error -2 [ 2119.558775][T18697] usb 4-1: USB disconnect, device number 107 [ 2120.859810][ T1864] print_req_error: 834 callbacks suppressed [ 2120.859826][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2120.880448][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2120.894622][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2120.904979][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2120.916398][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2120.927033][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2120.937912][ T325] buffer_io_error: 643 callbacks suppressed [ 2120.937921][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2120.957744][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2120.957902][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2120.984502][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2120.997983][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2121.015246][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2121.023404][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2121.035226][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2121.037958][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2121.067920][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2121.077804][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2121.086113][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2121.095276][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2121.117708][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2121.659653][ T24] audit: type=1400 audit(1830375623.813:12593): avc: denied { map } for pid=30224 comm="syz.2.41525" path="socket:[517268]" dev="sockfs" ino=517268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2121.744104][ T24] audit: type=1400 audit(1830375623.813:12594): avc: denied { read accept } for pid=30224 comm="syz.2.41525" path="socket:[517268]" dev="sockfs" ino=517268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2123.181810][T30305] netlink: 'syz.2.41562': attribute type 4 has an invalid length. [ 2123.198192][T30305] netlink: 'syz.2.41562': attribute type 4 has an invalid length. [ 2123.339520][T30316] netlink: 268 bytes leftover after parsing attributes in process `syz.2.41567'. [ 2123.426792][T30322] fuse: Bad value for 'fd' [ 2123.529526][ T24] audit: type=1400 audit(1830375625.683:12595): avc: denied { getopt } for pid=30330 comm="syz.3.41574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2123.737841][T26366] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 2124.107935][T26366] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 2124.126282][T26366] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.146576][T26366] usb 1-1: config 0 has no interface number 0 [ 2124.152726][T26366] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64 [ 2124.173816][T26366] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2124.187737][ T8124] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2124.357822][T26366] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 2124.370379][T26366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.381128][T26366] usb 1-1: Product: syz [ 2124.385525][T26366] usb 1-1: Manufacturer: syz [ 2124.390622][T26366] usb 1-1: SerialNumber: syz [ 2124.404718][T26366] usb 1-1: config 0 descriptor?? [ 2124.429898][T30326] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2124.447745][ T8124] usb 5-1: Using ep0 maxpacket: 8 [ 2124.448321][T26366] plusb: probe of 1-1:0.231 failed with error -22 [ 2124.607771][ T8124] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2124.656618][T19945] usb 1-1: USB disconnect, device number 77 [ 2124.689908][ T8124] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2124.708019][ T8124] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2124.731183][ T8124] usb 5-1: config 0 has no interface number 0 [ 2124.744166][ T8124] usb 5-1: config 0 interface 125 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2124.763367][ T8124] usb 5-1: config 0 interface 125 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 2124.789173][ T8124] usb 5-1: config 0 interface 125 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 2 [ 2124.817766][ T8124] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2124.987772][ T8124] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2124.996833][ T8124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.024771][ T8124] usb 5-1: Product: syz [ 2125.029511][ T8124] usb 5-1: Manufacturer: syz [ 2125.034368][ T8124] usb 5-1: SerialNumber: syz [ 2125.065483][ T8124] usb 5-1: config 0 descriptor?? [ 2125.087806][T30372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2125.116234][T30432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.41622'. [ 2125.387858][ T8124] hub 5-1:0.125: bad descriptor, ignoring hub [ 2125.393984][ T8124] hub: probe of 5-1:0.125 failed with error -5 [ 2125.457779][ T8124] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2125.470311][ T8124] uvcvideo: No valid video chain found. [ 2125.528115][ T8124] usb 5-1: USB disconnect, device number 64 [ 2125.869455][ T1864] print_req_error: 928 callbacks suppressed [ 2125.869469][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2125.890463][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2125.903458][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2125.925521][T30468] netlink: 'syz.4.41641': attribute type 4 has an invalid length. [ 2125.937571][ T1864] blk_update_request: I/O error, dev loop4, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2125.951693][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2125.962990][ T2875] blk_update_request: I/O error, dev loop4, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2125.974462][T30468] netlink: 'syz.4.41641': attribute type 4 has an invalid length. [ 2125.984296][ T1864] buffer_io_error: 714 callbacks suppressed [ 2125.984305][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2125.987619][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2126.006295][ T2875] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2126.026556][ T2875] blk_update_request: I/O error, dev loop4, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.042853][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.071759][ T2875] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2126.087626][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2126.105858][ T2875] blk_update_request: I/O error, dev loop4, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.117418][ T325] blk_update_request: I/O error, dev loop4, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.143253][ T2875] Buffer I/O error on dev loop4p5, logical block 6, async page read [ 2126.157801][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2126.167916][ T2875] Buffer I/O error on dev loop4p5, logical block 7, async page read [ 2126.179308][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2126.206805][ T325] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2126.305278][T30495] netlink: 'syz.5.41653': attribute type 4 has an invalid length. [ 2126.324560][T30495] netlink: 'syz.5.41653': attribute type 4 has an invalid length. [ 2126.427731][T30506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.41657'. [ 2126.518324][T19945] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2126.757596][T19945] usb 4-1: Using ep0 maxpacket: 8 [ 2126.763518][T30520] netlink: 'syz.2.41664': attribute type 4 has an invalid length. [ 2126.785930][T30520] netlink: 'syz.2.41664': attribute type 4 has an invalid length. [ 2126.917755][T19945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2126.936743][T30529] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41669'. [ 2126.973685][T30529] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41669'. [ 2126.997726][T19945] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2127.006217][T19945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2127.031019][T19945] usb 4-1: config 0 has no interface number 0 [ 2127.047710][T19945] usb 4-1: config 0 interface 125 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2127.067693][T19945] usb 4-1: config 0 interface 125 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 2127.087617][T19945] usb 4-1: config 0 interface 125 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 2 [ 2127.127590][T19945] usb 4-1: config 0 interface 125 has no altsetting 0 [ 2127.297734][T19945] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2127.307742][T19945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.315732][T19945] usb 4-1: Product: syz [ 2127.345172][T30550] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41680'. [ 2127.349822][T30552] netlink: 'syz.4.41681': attribute type 4 has an invalid length. [ 2127.354336][T19945] usb 4-1: Manufacturer: syz [ 2127.378956][T30550] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41680'. [ 2127.397552][T19945] usb 4-1: SerialNumber: syz [ 2127.409429][T19945] usb 4-1: config 0 descriptor?? [ 2127.437643][T30492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2127.697785][T19945] hub 4-1:0.125: bad descriptor, ignoring hub [ 2127.714067][T19945] hub: probe of 4-1:0.125 failed with error -5 [ 2127.767585][T19945] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2127.774110][T19945] uvcvideo: No valid video chain found. [ 2127.828461][T19945] usb 4-1: USB disconnect, device number 108 [ 2128.393528][T30584] netlink: 268 bytes leftover after parsing attributes in process `syz.3.41697'. [ 2128.629848][T30606] 9pnet: Insufficient options for proto=fd [ 2128.695463][T30612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.41709'. [ 2128.704815][T30614] netlink: 'syz.3.41710': attribute type 4 has an invalid length. [ 2128.797591][T26364] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2128.896559][T30631] 9pnet: Insufficient options for proto=fd [ 2129.004341][T30640] netlink: 'syz.2.41722': attribute type 4 has an invalid length. [ 2129.047504][T26364] usb 1-1: Using ep0 maxpacket: 8 [ 2129.227540][T26364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2129.269275][T30663] netlink: 'syz.2.41735': attribute type 4 has an invalid length. [ 2129.347511][T26364] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2129.365878][T26364] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2129.396139][T26364] usb 1-1: config 0 has no interface number 0 [ 2129.412522][T26364] usb 1-1: config 0 interface 125 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2129.429043][T26364] usb 1-1: config 0 interface 125 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 2129.462710][T26364] usb 1-1: config 0 interface 125 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 2 [ 2129.487479][T26364] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2129.647512][T26364] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2129.668205][T26364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.697608][T26364] usb 1-1: Product: syz [ 2129.701962][T26364] usb 1-1: Manufacturer: syz [ 2129.717446][T26364] usb 1-1: SerialNumber: syz [ 2129.731443][T26364] usb 1-1: config 0 descriptor?? [ 2129.757766][T30598] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2130.017635][T26364] hub 1-1:0.125: bad descriptor, ignoring hub [ 2130.027456][T26364] hub: probe of 1-1:0.125 failed with error -5 [ 2130.077483][T26364] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2130.099547][T26364] uvcvideo: No valid video chain found. [ 2130.137869][T26364] usb 1-1: USB disconnect, device number 78 [ 2131.299143][ T1864] print_req_error: 689 callbacks suppressed [ 2131.299159][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2131.318830][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2131.334004][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2131.355730][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.373038][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.394500][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.407329][ T325] buffer_io_error: 529 callbacks suppressed [ 2131.407338][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2131.426019][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2131.438663][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2131.451177][ T2875] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.476620][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.493952][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2131.515945][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2131.524148][ T2875] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.545162][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.563121][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2131.572541][ T837] Buffer I/O error on dev loop4p5, logical block 4, async page read [ 2131.572690][T25952] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2131.585605][ T837] Buffer I/O error on dev loop4p5, logical block 5, async page read [ 2131.598816][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2131.873279][T30775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.880394][T30775] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.887813][T30775] device bridge_slave_0 entered promiscuous mode [ 2131.894866][T30775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.901907][T30775] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.909324][T30775] device bridge_slave_1 entered promiscuous mode [ 2131.954818][T30775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.961899][T30775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2131.969270][T30775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.976284][T30775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2132.015241][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2132.035809][T25013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.067479][T30784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.41785'. [ 2132.087394][T25013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.119169][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2132.145896][T25013] bridge0: port 1(bridge_slave_0) entered blocking state [ 2132.152984][T25013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2132.192050][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2132.214487][T25013] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.221539][T25013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2132.256951][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2132.276811][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2132.323621][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2132.341127][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2132.361273][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2132.377569][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2132.397795][T30775] device veth0_vlan entered promiscuous mode [ 2132.428024][T25013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2132.450486][T30775] device veth1_macvtap entered promiscuous mode [ 2132.478316][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2132.499678][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2132.667018][T30831] binder: 30830:30831 ioctl c0306201 0 returned -14 [ 2132.674460][ T3541] device bridge_slave_1 left promiscuous mode [ 2132.687311][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.699562][ T3541] device bridge_slave_0 left promiscuous mode [ 2132.737070][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.766382][ T3541] device veth1_macvtap left promiscuous mode [ 2132.777435][ T3541] device veth0_vlan left promiscuous mode [ 2133.266398][T30857] netlink: 108 bytes leftover after parsing attributes in process `syz.2.41824'. [ 2133.367745][T30865] netlink: 52 bytes leftover after parsing attributes in process `syz.2.41828'. [ 2134.383017][T30916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.397156][T30916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.437579][T30916] device bridge_slave_0 entered promiscuous mode [ 2134.444724][T30916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.515284][T30916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2134.522989][T30916] device bridge_slave_1 entered promiscuous mode [ 2134.667535][T30916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.674602][T30916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2134.681881][T30916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.688918][T30916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2134.781668][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2134.797629][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.827479][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 2134.850619][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2134.867410][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.874457][ T6763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2134.912243][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2134.927444][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.934476][ T6763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2134.999308][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2135.034059][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2135.054145][T30916] device veth0_vlan entered promiscuous mode [ 2135.094864][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2135.107456][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2135.127353][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2135.135949][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2135.153271][T30916] device veth1_macvtap entered promiscuous mode [ 2135.192172][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2135.224164][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2135.243426][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2135.327213][T30968] overlayfs: missing 'lowerdir' [ 2135.689423][ T3541] device bridge_slave_1 left promiscuous mode [ 2135.695572][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.741124][ T3541] device bridge_slave_0 left promiscuous mode [ 2135.755537][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.774243][ T3541] device veth1_macvtap left promiscuous mode [ 2135.787573][ T3541] device veth0_vlan left promiscuous mode [ 2135.939319][T31012] netlink: 'syz.5.41898': attribute type 4 has an invalid length. [ 2135.960695][T31015] netlink: 'syz.5.41898': attribute type 4 has an invalid length. [ 2136.159161][T31028] overlayfs: missing 'lowerdir' [ 2136.439372][ T1864] print_req_error: 738 callbacks suppressed [ 2136.439387][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2136.454407][T31044] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41914'. [ 2136.460601][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2136.481237][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2136.486154][T31044] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41914'. [ 2136.515948][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.542628][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.557345][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.570473][T31056] overlayfs: missing 'lowerdir' [ 2136.580943][ T2875] buffer_io_error: 567 callbacks suppressed [ 2136.580952][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2136.581006][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2136.586893][ T2875] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.595472][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2136.631926][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.643640][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2136.646191][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2136.675191][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.687689][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2136.697316][ T2875] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2136.701187][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2136.718357][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2136.738982][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2136.759243][ T2875] Buffer I/O error on dev loop2p5, logical block 7, async page read [ 2137.265131][T31116] netlink: 268 bytes leftover after parsing attributes in process `syz.4.41941'. [ 2137.482127][T31126] netlink: 'syz.5.41953': attribute type 4 has an invalid length. [ 2137.550331][T31128] netlink: 48 bytes leftover after parsing attributes in process `syz.5.41954'. [ 2138.011483][T31146] netlink: 'syz.2.41964': attribute type 4 has an invalid length. [ 2138.797288][T31203] 9pnet: Insufficient options for proto=fd [ 2139.278701][T31230] 9pnet: Insufficient options for proto=fd [ 2139.422429][T31237] netlink: 'syz.3.42008': attribute type 4 has an invalid length. [ 2139.874065][T31278] 9pnet: Insufficient options for proto=fd [ 2139.899355][T31280] 9pnet: Insufficient options for proto=fd [ 2140.149608][T31303] 9pnet: Insufficient options for proto=fd [ 2140.476946][T28804] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 2140.626026][T31338] netlink: 'syz.3.42057': attribute type 4 has an invalid length. [ 2140.634285][T31338] netlink: 'syz.3.42057': attribute type 4 has an invalid length. [ 2140.846875][T28804] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 2140.873368][T28804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.914319][T28804] usb 1-1: config 0 has no interface number 0 [ 2140.926894][T31382] 9pnet: Insufficient options for proto=fd [ 2140.958128][T28804] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64 [ 2140.992624][T28804] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2141.001225][T31401] overlayfs: missing 'lowerdir' [ 2141.064343][T31403] netlink: 108 bytes leftover after parsing attributes in process `syz.2.42087'. [ 2141.112545][T31415] 9pnet: Insufficient options for proto=fd [ 2141.176916][T28804] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 2141.185961][T28804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.210148][T28804] usb 1-1: Product: syz [ 2141.214326][T28804] usb 1-1: Manufacturer: syz [ 2141.219046][T28804] usb 1-1: SerialNumber: syz [ 2141.240055][T28804] usb 1-1: config 0 descriptor?? [ 2141.256920][T31305] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2141.277288][T28804] plusb: probe of 1-1:0.231 failed with error -22 [ 2141.482552][T28804] usb 1-1: USB disconnect, device number 79 [ 2141.728150][ T1864] print_req_error: 1074 callbacks suppressed [ 2141.728165][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2141.749066][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2141.765132][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2141.768367][T31460] 9pnet: Insufficient options for proto=fd [ 2141.784816][ T2875] blk_update_request: I/O error, dev loop2, sector 3648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.794857][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.798276][ T1864] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.820112][ T2875] buffer_io_error: 827 callbacks suppressed [ 2141.820122][ T2875] Buffer I/O error on dev loop2p5, logical block 4, async page read [ 2141.828579][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2141.834156][ T2875] blk_update_request: I/O error, dev loop2, sector 3650 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.853388][ T1864] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 2141.862622][ T2875] Buffer I/O error on dev loop2p5, logical block 5, async page read [ 2141.866871][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.892708][ T2875] blk_update_request: I/O error, dev loop2, sector 3652 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.912000][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2141.918821][ T2875] Buffer I/O error on dev loop2p5, logical block 6, async page read [ 2141.942242][ T325] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2141.955521][T31470] netlink: 108 bytes leftover after parsing attributes in process `syz.3.42121'. [ 2141.961935][ T2875] Buffer I/O error on dev loop2p5, logical block 7, async page read [ 2141.983449][ T325] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 2141.989864][ T1864] Buffer I/O error on dev loop4p1, logical block 1, async page read [ 2142.000883][T25952] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 2142.001334][T31476] overlayfs: missing 'lowerdir' [ 2142.243811][T31504] netlink: 108 bytes leftover after parsing attributes in process `syz.4.42137'. [ 2142.361691][T31512] overlayfs: missing 'lowerdir' [ 2142.426854][T26366] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2142.499641][T31519] netlink: 268 bytes leftover after parsing attributes in process `syz.2.42144'. [ 2142.603669][T31528] netlink: 108 bytes leftover after parsing attributes in process `syz.4.42149'. [ 2142.806802][T26366] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 2142.814983][T26366] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2142.858208][T26366] usb 4-1: config 0 has no interface number 0 [ 2142.876803][T26366] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64 [ 2142.896685][T26366] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2143.096776][T26366] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 2143.105848][T26366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.136675][T26366] usb 4-1: Product: syz [ 2143.140876][T26366] usb 4-1: Manufacturer: syz [ 2143.163213][T26366] usb 4-1: SerialNumber: syz [ 2143.173480][T26366] usb 4-1: config 0 descriptor?? [ 2143.196733][T31497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2143.217194][T26366] plusb: probe of 4-1:0.231 failed with error -22 [ 2143.297745][T31560] netlink: 268 bytes leftover after parsing attributes in process `syz.5.42165'. [ 2143.364282][T31566] netlink: 108 bytes leftover after parsing attributes in process `syz.5.42168'. [ 2143.418941][T26366] usb 4-1: USB disconnect, device number 109 [ 2143.678294][T31582] netlink: 268 bytes leftover after parsing attributes in process `syz.2.42177'. [ 2144.186631][T26366] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2144.376615][ T25] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2144.446661][T26366] usb 3-1: Using ep0 maxpacket: 8 [ 2144.606649][T26366] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2144.706706][T26366] usb 3-1: config 0 has an invalid interface number: 125 but max is 2 [ 2144.721455][T26366] usb 3-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 2144.736670][ T25] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 2144.742521][T26366] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2144.744873][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.764143][T26366] usb 3-1: config 0 has no interface number 0 [ 2144.779778][T26366] usb 3-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2144.796682][ T25] usb 4-1: config 0 has no interface number 0 [ 2144.809195][ T25] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64 [ 2144.812589][T26366] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2144.846949][ T25] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2144.871001][T31649] incfs: Unexpected inode type [ 2144.906923][T27679] ------------[ cut here ]------------ [ 2144.912532][T27679] WARNING: CPU: 1 PID: 27679 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 2144.926619][T27679] Modules linked in: [ 2144.937068][T27679] CPU: 1 PID: 27679 Comm: syz-executor Not tainted syzkaller #0 [ 2144.944699][T27679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2144.956723][T27679] RIP: 0010:drop_nlink+0xc5/0x110 [ 2144.961882][T27679] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 93 22 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 30 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 2144.981722][T27679] RSP: 0018:ffffc90006727cd0 EFLAGS: 00010293 [ 2144.987992][T27679] RAX: ffffffff81ab74e5 RBX: ffff888115466100 RCX: ffff8881146662c0 [ 2144.996074][T27679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2145.004425][T27679] RBP: ffffc90006727cf8 R08: 0000000000000004 R09: 0000000000000003 [ 2145.012526][T27679] R10: fffff52000ce4f88 R11: 1ffff92000ce4f88 R12: dffffc0000000000 [ 2145.020708][T27679] R13: 1ffff11022a8cc29 R14: ffff888115466148 R15: 0000000000000000 [ 2145.026664][T26366] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 2145.028844][T27679] FS: 000055555bc6b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2145.046587][T26366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.046796][T27679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2145.061181][T26366] usb 3-1: Product: syz [ 2145.065452][T27679] CR2: 00007f1a7aef4f98 CR3: 0000000117edc000 CR4: 00000000003506a0 [ 2145.073464][T26366] usb 3-1: Manufacturer: syz [ 2145.073473][T26366] usb 3-1: SerialNumber: syz [ 2145.077438][T26366] usb 3-1: config 0 descriptor?? [ 2145.078336][T27679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2145.095885][ T25] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 2145.105037][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.113173][ T25] usb 4-1: Product: syz [ 2145.117392][T27679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2145.125504][ T25] usb 4-1: Manufacturer: syz [ 2145.130234][ T25] usb 4-1: SerialNumber: syz [ 2145.136668][T27679] Call Trace: [ 2145.139578][ T25] usb 4-1: config 0 descriptor?? [ 2145.145125][T27679] shmem_rmdir+0x5b/0x90 [ 2145.156599][T31626] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2145.160046][T27679] vfs_rmdir+0x1b3/0x3e0 [ 2145.168141][T27679] incfs_kill_sb+0xfe/0x210 [ 2145.172700][T27679] deactivate_locked_super+0xa0/0x100 [ 2145.179188][ T25] plusb: probe of 4-1:0.231 failed with error -22 [ 2145.200562][T27679] deactivate_super+0xaf/0xe0 [ 2145.216673][T27679] cleanup_mnt+0x446/0x500 [ 2145.221173][T27679] __cleanup_mnt+0x19/0x20 [ 2145.225660][T27679] task_work_run+0x127/0x190 [ 2145.240684][T27679] exit_to_user_mode_loop+0xcb/0xe0 [ 2145.246682][T27679] exit_to_user_mode_prepare+0x76/0xa0 [ 2145.252234][T27679] syscall_exit_to_user_mode+0x1d/0x40 [ 2145.266556][T27679] do_syscall_64+0x3d/0x40 [ 2145.276117][T27679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2145.286576][T27679] RIP: 0033:0x7f8d91bc89f7 [ 2145.290993][T27679] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2145.325658][T27679] RSP: 002b:00007fff43f7e178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2145.344445][T27679] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d91bc89f7 [ 2145.352779][T27679] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff43f7e230 [ 2145.366614][T27679] RBP: 00007fff43f7e230 R08: 0000000000000000 R09: 0000000000000000 [ 2145.366879][T26366] hub 3-1:0.125: bad descriptor, ignoring hub [ 2145.374607][T27679] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff43f7f2c0 [ 2145.374614][T27679] R13: 00007f8d91c49d7d R14: 000000000020ba90 R15: 00007fff43f7f300 [ 2145.374622][T27679] ---[ end trace bb6e443630ce14e0 ]--- [ 2145.374699][T27679] ================================================================== [ 2145.390937][T26366] hub: probe of 3-1:0.125 failed with error -5 [ 2145.396649][T27679] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 2145.396665][T27679] Write of size 4 at addr 0000000000000170 by task syz-executor/27679 [ 2145.430570][T27679] [ 2145.432891][T27679] CPU: 1 PID: 27679 Comm: syz-executor Tainted: G W syzkaller #0 [ 2145.441888][T27679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2145.451924][T27679] Call Trace: [ 2145.455298][T27679] __dump_stack+0x21/0x24 [ 2145.459618][T27679] dump_stack_lvl+0x169/0x1d8 [ 2145.464281][T27679] ? thaw_kernel_threads+0x220/0x220 [ 2145.469729][T27679] ? show_regs_print_info+0x18/0x18 [ 2145.474920][T27679] ? _raw_spin_lock+0x8e/0xe0 [ 2145.477651][T26366] uvcvideo: Found UVC 15.ff device syz (17dc:0202) [ 2145.479585][T27679] ? _raw_spin_trylock_bh+0x130/0x130 [ 2145.479602][T27679] ? ihold+0x20/0x60 [ 2145.488345][T26366] uvcvideo: No valid video chain found. [ 2145.491504][T27679] kasan_report+0xd8/0x130 [ 2145.491523][T27679] ? ihold+0x20/0x60 [ 2145.509168][T27679] kasan_check_range+0x280/0x290 [ 2145.514104][T27679] __kasan_check_write+0x14/0x20 [ 2145.519031][T27679] ihold+0x20/0x60 [ 2145.522747][T27679] vfs_rmdir+0x247/0x3e0 [ 2145.526996][T27679] incfs_kill_sb+0xfe/0x210 [ 2145.528608][T26366] usb 3-1: USB disconnect, device number 80 [ 2145.531498][T27679] deactivate_locked_super+0xa0/0x100 [ 2145.531514][T27679] deactivate_super+0xaf/0xe0 [ 2145.547380][T27679] cleanup_mnt+0x446/0x500 [ 2145.551799][T27679] __cleanup_mnt+0x19/0x20 [ 2145.556207][T27679] task_work_run+0x127/0x190 [ 2145.560792][T27679] exit_to_user_mode_loop+0xcb/0xe0 [ 2145.565979][T27679] exit_to_user_mode_prepare+0x76/0xa0 [ 2145.571431][T27679] syscall_exit_to_user_mode+0x1d/0x40 [ 2145.576875][T27679] do_syscall_64+0x3d/0x40 [ 2145.581286][T27679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2145.587169][T27679] RIP: 0033:0x7f8d91bc89f7 [ 2145.591573][T27679] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2145.611171][T27679] RSP: 002b:00007fff43f7e178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2145.619580][T27679] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d91bc89f7 [ 2145.627546][T27679] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff43f7e230 [ 2145.635516][T27679] RBP: 00007fff43f7e230 R08: 0000000000000000 R09: 0000000000000000 [ 2145.643480][T27679] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff43f7f2c0 [ 2145.651444][T27679] R13: 00007f8d91c49d7d R14: 000000000020ba90 R15: 00007fff43f7f300 [ 2145.659419][T27679] ================================================================== [ 2145.667479][T27679] Disabling lock debugging due to kernel taint [ 2145.674228][T27679] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 2145.682033][T27679] #PF: supervisor write access in kernel mode [ 2145.688086][T27679] #PF: error_code(0x0002) - not-present page [ 2145.688633][T28804] usb 4-1: USB disconnect, device number 110 [ 2145.694052][T27679] PGD 12338f067 P4D 12338f067 PUD 0 [ 2145.705274][T27679] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2145.710461][T27679] CPU: 0 PID: 27679 Comm: syz-executor Tainted: G B W syzkaller #0 [ 2145.719589][T27679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2145.729641][T27679] RIP: 0010:ihold+0x26/0x60 [ 2145.734130][T27679] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 2145.753721][T27679] RSP: 0018:ffffc90006727d10 EFLAGS: 00010246 [ 2145.759778][T27679] RAX: ffff888114666200 RBX: 0000000000000000 RCX: 0000000000000286 [ 2145.767738][T27679] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 2145.775701][T27679] RBP: ffffc90006727d20 R08: 0000000000000004 R09: 0000000000000003 [ 2145.783661][T27679] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff110234eea6c [ 2145.791621][T27679] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2145.799587][T27679] FS: 000055555bc6b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2145.808502][T27679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2145.810532][ T24] audit: type=1400 audit(1830375647.964:12596): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2145.815066][T27679] CR2: 0000000000000170 CR3: 0000000117edc000 CR4: 00000000003506b0 [ 2145.815075][T27679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2145.815081][T27679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2145.815085][T27679] Call Trace: [ 2145.815101][T27679] vfs_rmdir+0x247/0x3e0 [ 2145.815114][T27679] incfs_kill_sb+0xfe/0x210 [ 2145.815125][T27679] deactivate_locked_super+0xa0/0x100 [ 2145.815133][T27679] deactivate_super+0xaf/0xe0 [ 2145.815150][T27679] cleanup_mnt+0x446/0x500 [ 2145.841914][ T24] audit: type=1400 audit(1830375647.964:12597): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2145.844949][T27679] __cleanup_mnt+0x19/0x20 [ 2145.853699][ T24] audit: type=1400 audit(1830375647.964:12598): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2145.860836][T27679] task_work_run+0x127/0x190 [ 2145.860848][T27679] exit_to_user_mode_loop+0xcb/0xe0 [ 2145.860856][T27679] exit_to_user_mode_prepare+0x76/0xa0 [ 2145.860873][T27679] syscall_exit_to_user_mode+0x1d/0x40 [ 2145.864398][ T24] audit: type=1400 audit(1830375647.964:12599): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2145.868337][T27679] do_syscall_64+0x3d/0x40 [ 2145.868350][T27679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2145.868358][T27679] RIP: 0033:0x7f8d91bc89f7 [ 2145.868368][T27679] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2145.868380][T27679] RSP: 002b:00007fff43f7e178 EFLAGS: 00000246 [ 2145.873109][ T24] audit: type=1400 audit(1830375647.964:12600): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2145.878183][T27679] ORIG_RAX: 00000000000000a6 [ 2145.878190][T27679] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d91bc89f7 [ 2145.878196][T27679] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff43f7e230 [ 2145.878202][T27679] RBP: 00007fff43f7e230 R08: 0000000000000000 R09: 0000000000000000 [ 2145.878208][T27679] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff43f7f2c0 [ 2145.878220][T27679] R13: 00007f8d91c49d7d R14: 000000000020ba90 R15: 00007fff43f7f300 [ 2145.883243][ T24] audit: type=1400 audit(1830375647.964:12601): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2145.887240][T27679] Modules linked in: [ 2145.887250][T27679] CR2: 0000000000000170 [ 2145.887271][T27679] ---[ end trace bb6e443630ce14e1 ]--- [ 2145.909113][ T24] audit: type=1400 audit(1830375647.964:12602): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2145.913081][T27679] RIP: 0010:ihold+0x26/0x60 [ 2146.144018][T27679] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 2146.163593][T27679] RSP: 0018:ffffc90006727d10 EFLAGS: 00010246 [ 2146.169629][T27679] RAX: ffff888114666200 RBX: 0000000000000000 RCX: 0000000000000286 [ 2146.177569][T27679] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 2146.185504][T27679] RBP: ffffc90006727d20 R08: 0000000000000004 R09: 0000000000000003 [ 2146.193443][T27679] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff110234eea6c [ 2146.201383][T27679] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2146.209323][T27679] FS: 000055555bc6b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2146.218228][T27679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2146.224801][T27679] CR2: 0000000000000170 CR3: 0000000117edc000 CR4: 00000000003506b0 [ 2146.232758][T27679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2146.240702][T27679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2146.248641][T27679] Kernel panic - not syncing: Fatal exception [ 2146.254901][T27679] Kernel Offset: disabled [ 2146.259215][T27679] Rebooting in 86400 seconds..