last executing test programs: 1.799001077s ago: executing program 4 (id=96416): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0, 0x1c8}}, 0x8000) 1.798720797s ago: executing program 4 (id=96417): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="28000000100001000000000000000000180000000c0000000000000000000000080001"], 0x28}], 0x1}, 0x0) 1.320503376s ago: executing program 0 (id=96429): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.054716203s ago: executing program 4 (id=96433): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) 922.725206ms ago: executing program 3 (id=96439): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 905.231448ms ago: executing program 3 (id=96440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) setresuid(0x0, 0x0, r4) 887.57944ms ago: executing program 3 (id=96441): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 837.917215ms ago: executing program 1 (id=96442): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x12}, 0x4000) 836.448695ms ago: executing program 3 (id=96443): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xba1, 0x8c5f, 0x0, [{0x46, 0x8, 0x1}, {0x2, 0x29, 0x6, '\x00', 0xf8}, {0x60, 0x3, 0x0, '\x00', 0xbd}, {0x7, 0x4, 0x9, '\x00', 0xd}, {0x5, 0x4, 0x8, '\x00', 0x5}, {0x3, 0x42, 0x71, '\x00', 0x2}, {0x7, 0x7, 0xfd, '\x00', 0x34}, {0x9, 0xc5, 0x1, '\x00', 0xfe}, {0x7, 0xfb, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xd, '\x00', 0x4}, {0x1, 0x4e, 0x0, '\x00', 0x2}, {0x9, 0x2, 0x5, '\x00', 0x3}, {0xfa, 0x0, 0x8, '\x00', 0x7}, {0x80, 0x2, 0x80, '\x00', 0x4}, {0x6, 0x8, 0x3, '\x00', 0x4}, {0x9, 0xf1, 0x8, '\x00', 0x4}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x9, '\x00', 0x48}, {0x90, 0x0, 0x81, '\x00', 0x6}, {0xb, 0xff, 0x5}, {0x0, 0x4, 0x3, '\x00', 0x6a}, {0x7, 0x35, 0x7a, '\x00', 0x4}, {0x4, 0x7, 0x5, '\x00', 0xf}, {0x8, 0x2, 0x62, '\x00', 0x1}]}}) 774.958471ms ago: executing program 3 (id=96444): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="28000000100001000000000000000000180000000c0000000000000000000000080001"], 0x28}], 0x1}, 0x0) 774.715641ms ago: executing program 4 (id=96445): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) socket$packet(0x11, 0xd8325a842e88c81b, 0x300) 757.177143ms ago: executing program 0 (id=96446): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) 756.111033ms ago: executing program 4 (id=96447): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 609.246588ms ago: executing program 1 (id=96448): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 589.94906ms ago: executing program 1 (id=96450): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 561.255063ms ago: executing program 1 (id=96452): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000580)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x9, 0x1, 0x8}]}}}], 0x18}}], 0x1, 0x46000) 536.095945ms ago: executing program 1 (id=96453): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 510.192458ms ago: executing program 1 (id=96455): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000040)=ANY=[@ANYBLOB="2639d055000000"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 492.13479ms ago: executing program 0 (id=96456): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) read(r6, 0x0, 0x0) 415.644238ms ago: executing program 0 (id=96459): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='+\x00', 0x0, r3) 415.018808ms ago: executing program 0 (id=96460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="28000000100001000000000000000000180000000c0000000000000000000000080001"], 0x28}], 0x1}, 0x0) 384.359551ms ago: executing program 0 (id=96462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080007000d000000", 0x24) 314.633928ms ago: executing program 2 (id=96464): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)) 298.113449ms ago: executing program 2 (id=96465): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) setresuid(0x0, 0x0, r4) 270.356363ms ago: executing program 2 (id=96466): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 218.446658ms ago: executing program 2 (id=96467): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) 217.167248ms ago: executing program 2 (id=96468): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getresgid(0x0, 0x0, &(0x7f00000002c0)) 150.967654ms ago: executing program 2 (id=96469): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 57.327054ms ago: executing program 3 (id=96470): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) read(r6, 0x0, 0x0) 0s ago: executing program 4 (id=96471): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) kernel console output (not intermixed with test programs): stent [ 3056.144654][T26526] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3056.370402][T26542] netlink: 88 bytes leftover after parsing attributes in process `syz.2.88907'. [ 3056.656032][T26569] overlayfs: missing 'lowerdir' [ 3057.577276][T26611] overlayfs: missing 'lowerdir' [ 3057.648317][T26623] overlayfs: missing 'workdir' [ 3058.051462][T26663] fuse: Bad value for 'fd' [ 3058.217204][T26681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=26681 comm=syz.4.88973 [ 3058.323621][T26689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=26689 comm=syz.4.88977 [ 3058.546599][T26712] overlayfs: missing 'workdir' [ 3058.680502][T26721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=26721 comm=syz.1.88991 [ 3058.989318][T26749] overlayfs: missing 'workdir' [ 3059.062959][T26755] overlayfs: missing 'workdir' [ 3059.074592][T26757] overlayfs: missing 'workdir' [ 3059.096565][T26761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89011'. [ 3059.151366][T26767] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3059.241573][T26775] overlayfs: missing 'workdir' [ 3059.421071][T26793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3059.492596][T26797] overlayfs: missing 'workdir' [ 3059.509312][T26800] device batadv_slave_1 entered promiscuous mode [ 3059.554259][T26798] device batadv_slave_1 left promiscuous mode [ 3059.600812][T26790] bridge0: port 1(bridge_slave_0) entered blocking state [ 3059.607896][T26790] bridge0: port 1(bridge_slave_0) entered disabled state [ 3059.620469][T26790] device bridge_slave_0 entered promiscuous mode [ 3059.627537][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 3059.637416][T26790] bridge0: port 2(bridge_slave_1) entered disabled state [ 3059.645909][T26806] overlayfs: missing 'workdir' [ 3059.660461][T26790] device bridge_slave_1 entered promiscuous mode [ 3059.821883][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 3059.828933][T26790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3059.836240][T26790] bridge0: port 1(bridge_slave_0) entered blocking state [ 3059.843292][T26790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3059.948918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3059.958549][T26823] overlayfs: missing 'lowerdir' [ 3059.971645][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 3059.983269][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 3060.012416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3060.036089][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 3060.043197][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3060.090732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3060.098985][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 3060.106036][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3060.134575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3060.169864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3060.218295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3060.240919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3060.260818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3060.280349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3060.303716][T26790] device veth0_vlan entered promiscuous mode [ 3060.333601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3060.354674][T26790] device veth1_macvtap entered promiscuous mode [ 3060.390294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3060.404972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3060.420375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3060.631256][T32429] device bridge_slave_1 left promiscuous mode [ 3060.637427][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3060.660658][T32429] device bridge_slave_0 left promiscuous mode [ 3060.666815][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3060.693829][T32429] device veth1_macvtap left promiscuous mode [ 3060.699993][T32429] device veth0_vlan left promiscuous mode [ 3061.190404][T26913] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3061.204237][T26910] overlayfs: missing 'lowerdir' [ 3061.229488][T26913] overlayfs: missing 'lowerdir' [ 3061.362502][T26932] overlayfs: missing 'workdir' [ 3061.372240][T26938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89096'. [ 3061.502352][T26955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=26955 comm=syz.0.89104 [ 3061.526149][T26957] device batadv_slave_1 entered promiscuous mode [ 3061.541263][T26956] device batadv_slave_1 left promiscuous mode [ 3061.663334][T26976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=26976 comm=syz.4.89114 [ 3061.736249][T26980] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=26980 comm=syz.3.89116 [ 3061.840643][T26991] device batadv_slave_1 entered promiscuous mode [ 3061.850350][T26989] device batadv_slave_1 left promiscuous mode [ 3061.933511][T27005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27005 comm=syz.4.89127 [ 3062.276564][T27029] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.283888][T27029] bridge0: port 1(bridge_slave_0) entered disabled state [ 3062.289903][T27040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27040 comm=syz.2.89144 [ 3062.316661][T27029] device bridge_slave_0 entered promiscuous mode [ 3062.367561][T27029] bridge0: port 2(bridge_slave_1) entered blocking state [ 3062.385725][T27029] bridge0: port 2(bridge_slave_1) entered disabled state [ 3062.436417][T27029] device bridge_slave_1 entered promiscuous mode [ 3062.539402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3062.551743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3062.562739][T27068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27068 comm=syz.3.89158 [ 3062.587996][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3062.610465][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3062.623041][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.630097][ T2760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3062.642697][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3062.656773][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3062.666016][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 3062.673075][ T2760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3062.696678][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3062.710337][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3062.730184][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3062.761297][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3062.783412][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3062.801750][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3062.810156][T23047] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3062.828309][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3062.841773][T27029] device veth0_vlan entered promiscuous mode [ 3062.865958][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3062.885728][T27029] device veth1_macvtap entered promiscuous mode [ 3062.919086][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3062.939822][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3063.060048][T23047] usb 3-1: Using ep0 maxpacket: 8 [ 3063.180178][T23047] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3063.200078][T23047] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3063.240050][T23047] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3063.260073][T23047] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3063.279275][T23047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.290990][T32429] device bridge_slave_1 left promiscuous mode [ 3063.297145][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3063.300337][T23047] usb 3-1: config 0 descriptor?? [ 3063.319641][T32429] device bridge_slave_0 left promiscuous mode [ 3063.337474][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3063.348370][T32429] device veth1_macvtap left promiscuous mode [ 3063.377840][T32429] device veth0_vlan left promiscuous mode [ 3063.474775][T27092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27092 comm=syz.0.89170 [ 3063.569642][T27098] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3063.608774][T27098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3063.646484][T23047] usbhid 3-1:0.0: can't add hid device: -71 [ 3063.656193][T23047] usbhid: probe of 3-1:0.0 failed with error -71 [ 3063.674248][T23047] usb 3-1: USB disconnect, device number 32 [ 3064.095654][T27125] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3064.136035][T27125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3064.790104][T23047] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3065.040122][T23047] usb 3-1: Using ep0 maxpacket: 8 [ 3065.160160][T23047] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3065.176592][T27200] netlink: 64 bytes leftover after parsing attributes in process `syz.0.89223'. [ 3065.180059][T23047] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3065.219112][T23047] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3065.229216][T23047] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3065.240078][T23047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.251651][T23047] usb 3-1: config 0 descriptor?? [ 3065.410839][T23074] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3065.597587][T27227] overlayfs: missing 'workdir' [ 3065.600102][T23047] usbhid 3-1:0.0: can't add hid device: -71 [ 3065.610557][T27225] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3065.624215][T23047] usbhid: probe of 3-1:0.0 failed with error -71 [ 3065.636243][T23047] usb 3-1: USB disconnect, device number 33 [ 3065.642739][T27225] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3065.664667][T27231] incfs: Backing dir is not set, filesystem can't be mounted. [ 3065.670064][T23074] usb 5-1: Using ep0 maxpacket: 8 [ 3065.672862][T27231] incfs: mount failed -2 [ 3065.790123][T23074] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3065.807591][T23074] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3065.825532][T23074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3065.825783][T27247] overlayfs: missing 'workdir' [ 3065.832216][T23074] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3065.841036][T27253] device batadv_slave_1 entered promiscuous mode [ 3065.846123][T23074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.854534][T27252] device batadv_slave_1 left promiscuous mode [ 3065.864000][T23074] usb 5-1: config 0 descriptor?? [ 3065.907472][T27257] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3065.925726][T27257] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3066.013237][T27271] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3066.051255][T27275] overlayfs: missing 'workdir' [ 3066.069022][T27277] device batadv_slave_1 entered promiscuous mode [ 3066.090720][T27276] device batadv_slave_1 left promiscuous mode [ 3066.184710][T27295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3066.210084][T23074] usbhid 5-1:0.0: can't add hid device: -71 [ 3066.216090][T23074] usbhid: probe of 5-1:0.0 failed with error -71 [ 3066.234222][T23074] usb 5-1: USB disconnect, device number 82 [ 3066.465562][T27328] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3066.593201][T27348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27348 comm=syz.3.89295 [ 3066.622299][T27352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3066.717569][T27374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27374 comm=syz.3.89308 [ 3066.837354][T27398] overlayfs: missing 'workdir' [ 3067.020042][T25542] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3067.095946][T27422] overlayfs: missing 'workdir' [ 3067.260113][T25542] usb 5-1: Using ep0 maxpacket: 8 [ 3067.380181][T25542] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3067.401373][T25542] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3067.434760][T25542] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3067.449868][T25542] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3067.469196][T25542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3067.492095][T25542] usb 5-1: config 0 descriptor?? [ 3067.598950][T27456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27456 comm=syz.3.89349 [ 3067.830131][T25542] usbhid 5-1:0.0: can't add hid device: -71 [ 3067.836247][T25542] usbhid: probe of 5-1:0.0 failed with error -71 [ 3067.848118][T25542] usb 5-1: USB disconnect, device number 83 [ 3067.933991][T27478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27478 comm=syz.3.89361 [ 3068.079676][T27486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27486 comm=syz.3.89366 [ 3068.123326][T27490] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=27490 comm=syz.3.89368 [ 3068.124559][T27492] incfs: Backing dir is not set, filesystem can't be mounted. [ 3068.155778][T27492] incfs: mount failed -2 [ 3068.237135][T27502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27502 comm=syz.2.89372 [ 3068.740181][T23047] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3068.881486][T27528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27528 comm=syz.3.89385 [ 3068.990057][T23047] usb 3-1: Using ep0 maxpacket: 8 [ 3069.110194][T23047] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3069.122505][T27554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27554 comm=syz.4.89398 [ 3069.135345][T23047] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3069.148603][T23047] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3069.161666][T23047] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3069.171100][T23047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.181185][T23047] usb 3-1: config 0 descriptor?? [ 3069.330055][T26583] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 3069.348734][T27574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27574 comm=syz.4.89409 [ 3069.472984][T27594] incfs: Backing dir is not set, filesystem can't be mounted. [ 3069.480548][T27594] incfs: mount failed -2 [ 3069.495661][T27596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27596 comm=syz.1.89420 [ 3069.520112][T23047] usbhid 3-1:0.0: can't add hid device: -71 [ 3069.526404][T23047] usbhid: probe of 3-1:0.0 failed with error -71 [ 3069.536988][T23047] usb 3-1: USB disconnect, device number 34 [ 3069.582721][T27612] overlayfs: missing 'workdir' [ 3069.618751][T27620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27620 comm=syz.4.89431 [ 3069.690136][T26583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3069.708950][T26583] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3069.719261][T26583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.729407][T26583] usb 4-1: config 0 descriptor?? [ 3069.750101][T27546] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 3069.790119][T27648] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 3069.923642][T27676] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3069.934055][T27676] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3070.038919][T27699] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3070.070132][T26583] usbhid 4-1:0.0: can't add hid device: -71 [ 3070.076117][T26583] usbhid: probe of 4-1:0.0 failed with error -71 [ 3070.113114][T26583] usb 4-1: USB disconnect, device number 107 [ 3070.184377][T27720] incfs: Backing dir is not set, filesystem can't be mounted. [ 3070.220081][T27720] incfs: mount failed -2 [ 3070.252127][T27732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27732 comm=syz.1.89487 [ 3070.420084][T26501] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 3070.651010][T27756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27756 comm=syz.0.89498 [ 3070.790125][T26501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3070.812879][T26501] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3070.850060][T26501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3070.870282][T26501] usb 3-1: config 0 descriptor?? [ 3070.900166][T27717] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3071.240127][T26501] usbhid 3-1:0.0: can't add hid device: -71 [ 3071.246332][T26501] usbhid: probe of 3-1:0.0 failed with error -71 [ 3071.262509][T26501] usb 3-1: USB disconnect, device number 35 [ 3071.351830][T27784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27784 comm=syz.1.89510 [ 3071.408342][T27790] overlayfs: missing 'lowerdir' [ 3071.567031][T27809] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 3071.623650][T27813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=27813 comm=syz.4.89525 [ 3071.690053][T27765] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 3071.770394][T26501] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 3072.050769][T27765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3072.072965][T27765] usb 2-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3072.087535][T27765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3072.104456][T27765] usb 2-1: config 0 descriptor?? [ 3072.130096][T27794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3072.149907][T26501] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3072.171554][T26501] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 3072.190046][T26501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3072.208502][T26501] usb 3-1: config 0 descriptor?? [ 3072.364840][T27794] udc-core: couldn't find an available UDC or it's busy [ 3072.380056][T27794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3072.490173][T27765] usbhid 2-1:0.0: can't add hid device: -71 [ 3072.496260][T27765] usbhid: probe of 2-1:0.0 failed with error -71 [ 3072.512925][T27765] usb 2-1: USB disconnect, device number 119 [ 3072.550111][T26501] usbhid 3-1:0.0: can't add hid device: -71 [ 3072.556215][T26501] usbhid: probe of 3-1:0.0 failed with error -71 [ 3072.573561][T26501] usb 3-1: USB disconnect, device number 36 [ 3072.629060][T27897] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61249 sclass=netlink_xfrm_socket pid=27897 comm=syz.4.89566 [ 3072.722986][T27907] overlayfs: missing 'lowerdir' [ 3073.023311][T27929] overlayfs: missing 'lowerdir' [ 3073.220504][T27943] overlayfs: missing 'workdir' [ 3073.353314][T27951] overlayfs: missing 'lowerdir' [ 3073.440080][T26501] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 3073.670555][T27977] overlayfs: missing 'lowerdir' [ 3073.810183][T26501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3073.840066][T26501] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3073.849120][T26501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3073.876742][T26501] usb 3-1: config 0 descriptor?? [ 3073.920103][T27941] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3074.141026][T27941] udc-core: couldn't find an available UDC or it's busy [ 3074.148141][T27941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.260059][T26501] usbhid 3-1:0.0: can't add hid device: -71 [ 3074.266053][T26501] usbhid: probe of 3-1:0.0 failed with error -71 [ 3074.273944][T26501] usb 3-1: USB disconnect, device number 37 [ 3074.340129][T26152] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3074.390459][T31671] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3074.580073][T26152] usb 4-1: Using ep0 maxpacket: 8 [ 3074.650081][T31671] usb 5-1: Using ep0 maxpacket: 8 [ 3074.668916][T28023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3074.680706][T28023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3074.710130][T26152] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3074.727910][T26152] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3074.748283][T26152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3074.748376][T28033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28033 comm=syz.1.89631 [ 3074.755091][T26152] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3074.768578][T28037] overlayfs: missing 'workdir' [ 3074.776922][T26152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.795012][T26152] usb 4-1: config 0 descriptor?? [ 3074.800102][T31671] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3074.814298][T28039] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=28039 comm=syz.1.89637 [ 3074.819957][T31671] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3074.835376][T28041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28041 comm=syz.2.89638 [ 3074.844467][T31671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3074.862188][T31671] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3074.871972][T31671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.896291][T31671] usb 5-1: config 0 descriptor?? [ 3074.947380][T28059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28059 comm=syz.1.89647 [ 3074.999140][T28065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28065 comm=syz.1.89650 [ 3075.071316][T28071] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 3075.137597][T28081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28081 comm=syz.0.89658 [ 3075.160407][T26152] usbhid 4-1:0.0: can't add hid device: -71 [ 3075.166401][T26152] usbhid: probe of 4-1:0.0 failed with error -71 [ 3075.184300][T26152] usb 4-1: USB disconnect, device number 108 [ 3075.250083][T31671] usbhid 5-1:0.0: can't add hid device: -71 [ 3075.264753][T31671] usbhid: probe of 5-1:0.0 failed with error -71 [ 3075.299686][T31671] usb 5-1: USB disconnect, device number 84 [ 3075.308333][T28089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28089 comm=syz.0.89662 [ 3075.489954][T28103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28103 comm=syz.2.89669 [ 3075.577108][T28115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28115 comm=syz.0.89674 [ 3075.649022][T28121] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 3075.726108][T28127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=28127 comm=syz.4.89682 [ 3075.967677][T28143] overlayfs: missing 'workdir' [ 3076.290073][T31671] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3076.540101][T31671] usb 2-1: Using ep0 maxpacket: 8 [ 3076.598116][T28161] overlayfs: missing 'workdir' [ 3076.660399][T31671] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3076.681594][T31671] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3076.720067][T31671] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3076.746913][T31671] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3076.777081][T31671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3076.793257][T31671] usb 2-1: config 0 descriptor?? [ 3077.150091][T31671] usbhid 2-1:0.0: can't add hid device: -71 [ 3077.156142][T31671] usbhid: probe of 2-1:0.0 failed with error -71 [ 3077.173754][T31671] usb 2-1: USB disconnect, device number 120 [ 3098.900060][T27692] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3099.160054][T27692] usb 2-1: Using ep0 maxpacket: 8 [ 3099.280162][T27692] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3099.310141][T27692] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3099.343626][T27692] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3099.363809][T27692] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3099.394061][T27692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.417448][T27692] usb 2-1: config 0 descriptor?? [ 3099.527671][T28234] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3099.662833][T28260] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3099.744241][T28271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89751'. [ 3099.770200][T27692] usbhid 2-1:0.0: can't add hid device: -71 [ 3099.778392][T27692] usbhid: probe of 2-1:0.0 failed with error -71 [ 3099.796856][T27692] usb 2-1: USB disconnect, device number 121 [ 3099.902918][T28291] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3100.101790][T28314] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3100.288883][T28340] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3100.372464][T28350] overlayfs: missing 'workdir' [ 3100.620105][T23525] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3100.759402][T28367] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=28367 comm=syz.4.89800 [ 3100.801632][T28370] overlayfs: missing 'workdir' [ 3100.870105][T23525] usb 4-1: Using ep0 maxpacket: 8 [ 3100.990610][T23525] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3101.016921][T23525] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3101.050061][T23525] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3101.062156][T23525] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3101.074919][T23525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.100275][T23525] usb 4-1: config 0 descriptor?? [ 3101.440102][T23525] usbhid 4-1:0.0: can't add hid device: -71 [ 3101.446144][T23525] usbhid: probe of 4-1:0.0 failed with error -71 [ 3101.471008][T23525] usb 4-1: USB disconnect, device number 109 [ 3102.997409][T28504] overlayfs: missing 'lowerdir' [ 3103.130304][T28513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3103.197581][T28515] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28515 comm=syz.2.89871 [ 3103.364457][T28527] overlayfs: missing 'lowerdir' [ 3103.432806][T28533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3103.747478][T28551] overlayfs: missing 'lowerdir' [ 3103.818075][T28557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3104.230057][T25542] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 3104.332980][T28579] bridge0: port 1(bridge_slave_0) entered blocking state [ 3104.340072][T28579] bridge0: port 1(bridge_slave_0) entered disabled state [ 3104.347500][T28579] device bridge_slave_0 entered promiscuous mode [ 3104.354593][T28579] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.361956][T28579] bridge0: port 2(bridge_slave_1) entered disabled state [ 3104.380463][T28579] device bridge_slave_1 entered promiscuous mode [ 3104.490105][T25542] usb 5-1: Using ep0 maxpacket: 8 [ 3104.501416][T28579] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.508456][T28579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3104.515727][T28579] bridge0: port 1(bridge_slave_0) entered blocking state [ 3104.522763][T28579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3104.559552][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3104.580777][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 3104.610957][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 3104.629591][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3104.630140][T25542] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3104.647942][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 3104.655553][ T2760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3104.670627][T25542] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3104.680359][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3104.694532][T28618] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3104.706536][T25542] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3104.710262][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.720060][T25542] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3104.720169][ T2760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3104.739301][T25542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3104.758586][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3104.767086][T25542] usb 5-1: config 0 descriptor?? [ 3104.773240][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3104.801172][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3104.821586][T28620] overlayfs: missing 'lowerdir' [ 3104.828607][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3104.846940][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3104.866988][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3104.894602][T28579] device veth0_vlan entered promiscuous mode [ 3104.917100][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3104.937123][T28579] device veth1_macvtap entered promiscuous mode [ 3104.960361][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3104.969924][T28626] overlayfs: missing 'lowerdir' [ 3104.981302][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3105.034476][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89927'. [ 3105.092888][T28638] overlayfs: missing 'lowerdir' [ 3105.120527][T28640] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3105.130094][T25542] usbhid 5-1:0.0: can't add hid device: -71 [ 3105.136100][T25542] usbhid: probe of 5-1:0.0 failed with error -71 [ 3105.156849][T25542] usb 5-1: USB disconnect, device number 85 [ 3105.182923][T28644] overlayfs: missing 'lowerdir' [ 3105.257441][T28650] overlayfs: missing 'lowerdir' [ 3105.523030][T28664] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3105.596957][T28669] overlayfs: missing 'lowerdir' [ 3105.654576][T28677] overlayfs: missing 'lowerdir' [ 3105.832596][T28695] overlayfs: missing 'lowerdir' [ 3106.010470][T32429] device bridge_slave_1 left promiscuous mode [ 3106.016675][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3106.026620][T28703] overlayfs: missing 'lowerdir' [ 3106.050341][T32429] device bridge_slave_0 left promiscuous mode [ 3106.069136][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3106.099309][T32429] device veth1_macvtap left promiscuous mode [ 3106.108672][T32429] device veth0_vlan left promiscuous mode [ 3106.247682][T28719] overlayfs: missing 'lowerdir' [ 3106.306386][T28721] overlayfs: missing 'lowerdir' [ 3106.631052][T28735] overlayfs: missing 'lowerdir' [ 3108.287811][T28820] incfs: Backing dir is not set, filesystem can't be mounted. [ 3108.300425][T28820] incfs: mount failed -2 [ 3108.460168][T26584] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 3108.830365][T26584] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3108.850154][T26584] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 3108.889549][T26584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3108.921904][T26584] usb 4-1: config 0 descriptor?? [ 3109.271317][T26584] usbhid 4-1:0.0: can't add hid device: -71 [ 3109.278908][T26584] usbhid: probe of 4-1:0.0 failed with error -71 [ 3109.302938][T26584] usb 4-1: USB disconnect, device number 110 [ 3114.525797][T29303] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=29303 comm=syz.1.90260 [ 3115.753640][T29401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3115.790073][T29401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3115.893531][T29414] overlayfs: missing 'lowerdir' [ 3115.976700][T29425] overlayfs: missing 'workdir' [ 3116.848101][T29445] overlayfs: missing 'workdir' [ 3117.084519][T29470] overlayfs: missing 'workdir' [ 3117.173210][T29481] overlayfs: missing 'lowerdir' [ 3117.257455][T29496] 9pnet: Insufficient options for proto=fd [ 3118.200080][T26152] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 3118.580122][T26152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3118.610077][T26152] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3118.639359][T26152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.659942][T26152] usb 4-1: config 0 descriptor?? [ 3118.690108][T29606] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3118.911107][T29606] udc-core: couldn't find an available UDC or it's busy [ 3118.920125][T29606] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.010472][T26152] usbhid 4-1:0.0: can't add hid device: -71 [ 3119.016476][T26152] usbhid: probe of 4-1:0.0 failed with error -71 [ 3119.038214][T26152] usb 4-1: USB disconnect, device number 111 [ 3119.643808][T29723] device batadv_slave_1 entered promiscuous mode [ 3119.660850][T29722] device batadv_slave_1 left promiscuous mode [ 3119.900410][T25535] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 3119.945748][T29733] bridge0: port 1(bridge_slave_0) entered blocking state [ 3119.952920][T29733] bridge0: port 1(bridge_slave_0) entered disabled state [ 3119.961091][T29733] device bridge_slave_0 entered promiscuous mode [ 3119.968142][T29733] bridge0: port 2(bridge_slave_1) entered blocking state [ 3119.975301][T29733] bridge0: port 2(bridge_slave_1) entered disabled state [ 3119.982849][T29733] device bridge_slave_1 entered promiscuous mode [ 3120.036676][T29733] bridge0: port 2(bridge_slave_1) entered blocking state [ 3120.043742][T29733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3120.051025][T29733] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.058047][T29733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3120.106503][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3120.124944][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.144865][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.172141][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3120.190434][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.197508][ T2760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3120.215193][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3120.235517][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 3120.242600][ T2760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3120.261360][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3120.270211][T25535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3120.290150][T25535] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3120.309337][T25535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.331761][T25535] usb 4-1: config 0 descriptor?? [ 3120.350120][T29721] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3120.363288][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3120.375687][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3120.402518][T29733] device veth0_vlan entered promiscuous mode [ 3120.408734][T29748] device batadv_slave_1 entered promiscuous mode [ 3120.418308][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3120.428258][T29747] device batadv_slave_1 left promiscuous mode [ 3120.442559][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3120.455101][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3120.470320][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3120.504527][T29733] device veth1_macvtap entered promiscuous mode [ 3120.519138][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3120.559039][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3120.571099][T29721] udc-core: couldn't find an available UDC or it's busy [ 3120.578081][T29721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3120.710103][T25535] usbhid 4-1:0.0: can't add hid device: -71 [ 3120.717281][T25535] usbhid: probe of 4-1:0.0 failed with error -71 [ 3120.746245][T25535] usb 4-1: USB disconnect, device number 112 [ 3120.991267][T27309] device bridge_slave_1 left promiscuous mode [ 3121.007689][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3121.020293][T27309] device bridge_slave_0 left promiscuous mode [ 3121.027877][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3121.047803][T27309] device veth1_macvtap left promiscuous mode [ 3121.058720][T27309] device veth0_vlan left promiscuous mode [ 3121.660052][T20856] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 3121.687237][T29859] 9pnet: Insufficient options for proto=fd [ 3121.998952][T29885] overlayfs: missing 'lowerdir' [ 3122.030113][T20856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3122.053400][T20856] usb 5-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3122.070040][T20856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.095797][T20856] usb 5-1: config 0 descriptor?? [ 3122.130116][T29823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3122.351143][T29823] udc-core: couldn't find an available UDC or it's busy [ 3122.370239][T29823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.470116][T20856] usbhid 5-1:0.0: can't add hid device: -71 [ 3122.480387][T20856] usbhid: probe of 5-1:0.0 failed with error -71 [ 3122.495442][T20856] usb 5-1: USB disconnect, device number 86 [ 3123.252370][T29979] overlayfs: missing 'workdir' [ 3123.356415][T29994] overlayfs: failed to resolve './file0': -2 [ 3125.944333][T30175] overlayfs: failed to resolve './bus': -2 [ 3126.225444][T30202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90693'. [ 3126.421033][T30221] overlayfs: missing 'lowerdir' [ 3126.711049][T30250] overlayfs: missing 'lowerdir' [ 3126.973359][T30282] netlink: 88 bytes leftover after parsing attributes in process `syz.1.90731'. [ 3127.137495][T30287] overlayfs: failed to resolve './bus': -2 [ 3127.528095][T30312] overlayfs: missing 'lowerdir' [ 3128.190864][T30348] overlayfs: missing 'lowerdir' [ 3128.817533][T30365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90762'. [ 3128.886425][T30377] overlayfs: missing 'lowerdir' [ 3129.381751][T30397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90782'. [ 3129.462575][T30401] overlayfs: missing 'workdir' [ 3132.410976][T30535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90851'. [ 3132.515682][T30547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3132.626080][T30569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90864'. [ 3133.197571][T30653] overlayfs: missing 'lowerdir' [ 3133.203217][T30655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=30655 comm=syz.4.90907 [ 3133.566064][T30680] overlayfs: missing 'lowerdir' [ 3133.861708][T30703] overlayfs: missing 'lowerdir' [ 3133.938998][T30713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=30713 comm=syz.0.90935 [ 3134.165398][T30730] overlayfs: failed to resolve './bus': -2 [ 3134.211143][T30733] overlayfs: missing 'lowerdir' [ 3134.473766][T30760] overlayfs: missing 'lowerdir' [ 3135.156682][T30781] overlayfs: missing 'lowerdir' [ 3135.437137][T30806] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3135.452547][T30811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=30811 comm=syz.0.90983 [ 3135.460161][T30806] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3135.611186][T30829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90991'. [ 3139.057601][T31100] overlayfs: failed to resolve './bus': -2 [ 3141.808521][T31402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31402 comm=syz.3.91265 [ 3142.519257][T31426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31426 comm=syz.2.91273 [ 3142.664525][T31437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31437 comm=syz.1.91276 [ 3144.172019][T31540] overlayfs: failed to resolve './bus': -2 [ 3144.306274][T31554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31554 comm=syz.3.91338 [ 3144.655480][T31579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31579 comm=syz.3.91350 [ 3145.120085][ T5835] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3145.233211][T31616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31616 comm=syz.4.91366 [ 3145.370061][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 3145.490125][ T5835] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3145.513736][ T5835] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3145.557376][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3145.573168][ T5835] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3145.602487][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3145.620805][ T5835] usb 2-1: config 0 descriptor?? [ 3145.990134][ T5835] usbhid 2-1:0.0: can't add hid device: -71 [ 3145.996611][ T5835] usbhid: probe of 2-1:0.0 failed with error -71 [ 3146.012093][ T5835] usb 2-1: USB disconnect, device number 122 [ 3146.776616][T31752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31752 comm=syz.1.91430 [ 3147.020092][T31778] overlayfs: missing 'lowerdir' [ 3147.305490][T31803] overlayfs: missing 'lowerdir' [ 3147.545155][T31826] overlayfs: missing 'lowerdir' [ 3147.826306][T31848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31848 comm=syz.4.91478 [ 3148.010475][T31872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=31872 comm=syz.2.91488 [ 3149.115825][T31959] overlayfs: missing 'lowerdir' [ 3149.268863][T31988] overlayfs: missing 'lowerdir' [ 3149.922840][T32064] bridge0: port 1(bridge_slave_0) entered blocking state [ 3149.940102][T32064] bridge0: port 1(bridge_slave_0) entered disabled state [ 3149.950542][T32064] device bridge_slave_0 entered promiscuous mode [ 3149.967801][T32064] bridge0: port 2(bridge_slave_1) entered blocking state [ 3149.977548][T32064] bridge0: port 2(bridge_slave_1) entered disabled state [ 3149.985060][T32064] device bridge_slave_1 entered promiscuous mode [ 3150.101314][T32064] bridge0: port 2(bridge_slave_1) entered blocking state [ 3150.108369][T32064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3150.115673][T32064] bridge0: port 1(bridge_slave_0) entered blocking state [ 3150.122795][T32064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3150.201812][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3150.219578][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.239644][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.259367][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3150.277801][T32429] bridge0: port 1(bridge_slave_0) entered blocking state [ 3150.284869][T32429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3150.363829][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3150.372499][T27309] bridge0: port 2(bridge_slave_1) entered blocking state [ 3150.379556][T27309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3150.441240][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3150.459455][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3150.501211][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3150.548785][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3150.558876][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3150.577551][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3150.588782][T32064] device veth0_vlan entered promiscuous mode [ 3150.616641][T32064] device veth1_macvtap entered promiscuous mode [ 3150.630824][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3150.660640][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3150.674644][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3150.753190][ T2760] device bridge_slave_1 left promiscuous mode [ 3150.759338][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.790771][ T2760] device bridge_slave_0 left promiscuous mode [ 3150.803352][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.840659][ T2760] device veth1_macvtap left promiscuous mode [ 3150.850693][ T2760] device veth0_vlan left promiscuous mode [ 3150.917151][T32126] netlink: 64 bytes leftover after parsing attributes in process `syz.3.91606'. [ 3152.908398][T32206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=32206 comm=syz.1.91645 [ 3153.101230][T32429] device bridge_slave_1 left promiscuous mode [ 3153.118723][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3153.138525][T32429] device bridge_slave_0 left promiscuous mode [ 3153.160127][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3153.180867][T32429] device bridge_slave_1 left promiscuous mode [ 3153.187012][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3153.218355][T32429] device bridge_slave_0 left promiscuous mode [ 3153.250099][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3153.265180][T32429] device veth1_macvtap left promiscuous mode [ 3153.277818][T32246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=32246 comm=syz.0.91664 [ 3153.300148][T32429] device veth0_vlan left promiscuous mode [ 3153.336346][T32429] device veth1_macvtap left promiscuous mode [ 3153.346711][T32429] device veth0_vlan left promiscuous mode [ 3154.493977][T32307] overlayfs: failed to resolve './bus': -2 [ 3154.828260][T32335] overlayfs: failed to resolve './bus': -2 [ 3154.889802][T32348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=32348 comm=syz.4.91709 [ 3155.203188][T32413] overlayfs: failed to resolve './bus': -2 [ 3155.388406][T32448] overlayfs: failed to resolve './bus': -2 [ 3158.923629][T32658] overlayfs: failed to resolve './bus': -2 [ 3159.150640][T32685] overlayfs: failed to resolve './bus': -2 [ 3159.393617][T32710] overlayfs: failed to resolve './bus': -2 [ 3161.581214][ T334] netlink: 'syz.1.91928': attribute type 4 has an invalid length. [ 3161.620306][ T334] netlink: 17 bytes leftover after parsing attributes in process `syz.1.91928'. [ 3162.246238][ T396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=396 comm=syz.2.91948 [ 3163.570117][T26585] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 3163.950197][T26585] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3163.970063][T26585] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 3163.999417][T26585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3164.033366][T26585] usb 3-1: config 0 descriptor?? [ 3164.050096][ T458] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3164.197929][ T488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=488 comm=syz.0.91992 [ 3164.370187][T26585] usbhid 3-1:0.0: can't add hid device: -71 [ 3164.376303][T26585] usbhid: probe of 3-1:0.0 failed with error -71 [ 3164.395729][ T498] overlayfs: missing 'lowerdir' [ 3164.401048][T26585] usb 3-1: USB disconnect, device number 38 [ 3165.139695][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 3165.156968][ T564] bridge0: port 1(bridge_slave_0) entered disabled state [ 3165.176277][ T564] device bridge_slave_0 entered promiscuous mode [ 3165.211897][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 3165.220151][ T564] bridge0: port 2(bridge_slave_1) entered disabled state [ 3165.227556][ T564] device bridge_slave_1 entered promiscuous mode [ 3165.274205][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 3165.281287][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3165.288535][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 3165.295587][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3165.325415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3165.352715][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 3165.382842][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 3165.434046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3165.454463][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 3165.461538][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3165.490901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3165.517672][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 3165.524748][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3165.554961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3165.571851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3165.620901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3165.652523][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3165.670896][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3165.690181][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3165.715110][ T564] device veth0_vlan entered promiscuous mode [ 3165.761714][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3165.771324][ T564] device veth1_macvtap entered promiscuous mode [ 3165.816452][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3165.844826][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3165.991465][ T623] netlink: 'syz.1.92053': attribute type 4 has an invalid length. [ 3166.016802][ T623] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92053'. [ 3166.359768][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 3166.404808][ T639] bridge0: port 1(bridge_slave_0) entered disabled state [ 3166.433182][ T639] device bridge_slave_0 entered promiscuous mode [ 3166.451582][ T24] audit: type=1400 audit(1763146517.547:2397): avc: denied { append } for pid=668 comm="syz.4.92073" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3166.489802][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 3166.528635][ T639] bridge0: port 2(bridge_slave_1) entered disabled state [ 3166.549218][ T639] device bridge_slave_1 entered promiscuous mode [ 3166.573183][T32429] device bridge_slave_1 left promiscuous mode [ 3166.579455][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3166.600624][T32429] device bridge_slave_0 left promiscuous mode [ 3166.647399][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3166.658056][T32429] device veth1_macvtap left promiscuous mode [ 3166.664524][T32429] device veth0_vlan left promiscuous mode [ 3166.963012][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 3166.970099][ T639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3166.977375][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 3166.984428][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3167.037192][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3167.051355][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3167.059801][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3167.088367][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3167.100746][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3167.119196][T27309] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.126257][T27309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3167.144144][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3167.164435][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3167.187900][T27309] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.194975][T27309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3167.212680][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3167.230436][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3167.248606][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3167.260473][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3167.282703][ T730] netlink: 'syz.3.92100': attribute type 4 has an invalid length. [ 3167.310101][ T730] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92100'. [ 3167.348016][ T639] device veth0_vlan entered promiscuous mode [ 3167.374877][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3167.390611][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3167.408722][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3167.427117][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3167.460693][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3167.480892][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3167.526296][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3167.544718][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3167.566799][ T639] device veth1_macvtap entered promiscuous mode [ 3167.591808][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3167.609866][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3167.619694][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3167.662692][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3167.689412][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3167.775207][ T755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=755 comm=syz.0.92105 [ 3167.871288][ T762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=762 comm=syz.0.92114 [ 3168.147196][ T782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=782 comm=syz.2.92123 [ 3168.170776][T32429] device bridge_slave_1 left promiscuous mode [ 3168.176924][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3168.210470][T32429] device bridge_slave_0 left promiscuous mode [ 3168.216618][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3168.251222][T32429] device veth1_macvtap left promiscuous mode [ 3168.257253][T32429] device veth0_vlan left promiscuous mode [ 3168.580476][ T807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=807 comm=syz.2.92134 [ 3169.044502][ T825] netlink: 'syz.2.92144': attribute type 4 has an invalid length. [ 3169.072630][ T825] netlink: 17 bytes leftover after parsing attributes in process `syz.2.92144'. [ 3169.155560][ T828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=828 comm=syz.2.92145 [ 3169.392332][ T851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=851 comm=syz.3.92154 [ 3169.508870][ T861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=861 comm=syz.4.92157 [ 3169.599003][ T871] netlink: 'syz.4.92161': attribute type 4 has an invalid length. [ 3169.610152][ T871] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92161'. [ 3169.674537][ T879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=879 comm=syz.4.92165 [ 3169.682588][ T877] netlink: 'syz.3.92164': attribute type 4 has an invalid length. [ 3169.715210][ T877] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92164'. [ 3169.797034][ T887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=887 comm=syz.4.92169 [ 3170.051309][ T911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=911 comm=syz.3.92183 [ 3170.100070][T25793] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3170.340912][ T954] netlink: 'syz.1.92201': attribute type 4 has an invalid length. [ 3170.350101][T25793] usb 3-1: Using ep0 maxpacket: 8 [ 3170.354853][ T954] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92201'. [ 3170.470111][T25793] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3170.499171][T25793] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3170.534682][T25793] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3170.541915][T25793] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3170.554886][T25793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.570658][ T982] netlink: 'syz.3.92213': attribute type 4 has an invalid length. [ 3170.574636][T25793] usb 3-1: config 0 descriptor?? [ 3170.590119][ T982] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92213'. [ 3170.930117][T25793] usbhid 3-1:0.0: can't add hid device: -71 [ 3170.936167][T25793] usbhid: probe of 3-1:0.0 failed with error -71 [ 3170.955775][T25793] usb 3-1: USB disconnect, device number 39 [ 3172.815090][ T1155] incfs: Backing dir is not set, filesystem can't be mounted. [ 3172.822859][ T1155] incfs: mount failed -2 [ 3172.831608][ T1154] netlink: 'syz.3.92282': attribute type 4 has an invalid length. [ 3172.860374][ T1154] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92282'. [ 3173.222293][ T1199] netlink: 'syz.0.92315': attribute type 4 has an invalid length. [ 3173.251203][ T1199] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92315'. [ 3173.501781][ T1225] netlink: 'syz.2.92328': attribute type 4 has an invalid length. [ 3173.528673][ T1225] netlink: 17 bytes leftover after parsing attributes in process `syz.2.92328'. [ 3174.232022][ T1282] netlink: 'syz.2.92354': attribute type 4 has an invalid length. [ 3174.248050][ T1282] netlink: 17 bytes leftover after parsing attributes in process `syz.2.92354'. [ 3174.632507][ T1321] netlink: 'syz.1.92373': attribute type 4 has an invalid length. [ 3174.664354][ T1321] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92373'. [ 3175.074392][ T1362] netlink: 'syz.1.92393': attribute type 4 has an invalid length. [ 3175.090059][ T1362] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92393'. [ 3175.507699][ T1375] netlink: 'syz.0.92401': attribute type 4 has an invalid length. [ 3175.535884][ T1375] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92401'. [ 3175.681144][ T1395] selinux_netlink_send: 4 callbacks suppressed [ 3175.681156][ T1395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1395 comm=syz.2.92408 [ 3175.892302][ T1411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1411 comm=syz.2.92418 [ 3176.320122][T25542] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3176.357261][ T1429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1429 comm=syz.1.92422 [ 3176.451251][ T1433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1433 comm=syz.1.92429 [ 3176.570117][T25542] usb 3-1: Using ep0 maxpacket: 8 [ 3176.690156][T25542] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 3176.710289][T25542] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 3176.732795][ T1462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1462 comm=syz.0.92440 [ 3176.750071][T25542] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3176.770075][T25542] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 3176.779132][T25542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3176.800670][T25542] usb 3-1: config 0 descriptor?? [ 3176.866771][ T1478] netlink: 'syz.1.92446': attribute type 4 has an invalid length. [ 3176.892635][ T1478] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92446'. [ 3177.140975][T25542] usbhid 3-1:0.0: can't add hid device: -71 [ 3177.146971][T25542] usbhid: probe of 3-1:0.0 failed with error -71 [ 3177.172342][T25542] usb 3-1: USB disconnect, device number 40 [ 3177.278847][ T1549] netlink: 'syz.4.92481': attribute type 4 has an invalid length. [ 3177.296976][ T1549] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92481'. [ 3177.336760][ T1553] netlink: 'syz.3.92484': attribute type 4 has an invalid length. [ 3177.350073][ T1553] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92484'. [ 3178.561374][ T1602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1602 comm=syz.4.92510 [ 3178.979252][ T1641] netlink: 'syz.4.92528': attribute type 4 has an invalid length. [ 3179.002927][ T1641] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92528'. [ 3180.377249][ T1708] netlink: 'syz.0.92550': attribute type 4 has an invalid length. [ 3180.400552][ T1708] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92550'. [ 3183.372068][ T1884] netlink: 'syz.1.92645': attribute type 4 has an invalid length. [ 3183.379910][ T1884] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92645'. [ 3184.061896][ T1922] netlink: 'syz.4.92661': attribute type 4 has an invalid length. [ 3184.110065][ T1922] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92661'. [ 3184.574543][ T1954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=1954 comm=syz.4.92677 [ 3184.823545][ T24] audit: type=1400 audit(1763146535.917:2398): avc: denied { setopt } for pid=1988 comm="syz.2.92694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3184.861181][ T1995] netlink: 'syz.1.92696': attribute type 4 has an invalid length. [ 3184.869094][ T1995] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92696'. [ 3186.182525][ T2121] netlink: 'syz.3.92756': attribute type 4 has an invalid length. [ 3186.200109][ T2121] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92756'. [ 3186.816034][ T2152] netlink: 'syz.1.92771': attribute type 4 has an invalid length. [ 3186.834072][ T2152] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92771'. [ 3186.956113][ T2157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=2157 comm=syz.1.92773 [ 3187.366030][ T2183] netlink: 'syz.3.92786': attribute type 4 has an invalid length. [ 3187.374778][ T2183] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92786'. [ 3188.530933][ T2231] netlink: 'syz.2.92810': attribute type 4 has an invalid length. [ 3188.547462][ T2231] netlink: 17 bytes leftover after parsing attributes in process `syz.2.92810'. [ 3188.829532][ T2263] netlink: 'syz.4.92825': attribute type 4 has an invalid length. [ 3188.837452][ T2263] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92825'. [ 3189.139809][ T2292] netlink: 'syz.4.92840': attribute type 4 has an invalid length. [ 3189.164002][ T2292] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92840'. [ 3189.182527][ T2294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=2294 comm=syz.1.92841 [ 3189.386192][ T2322] netlink: 'syz.3.92853': attribute type 4 has an invalid length. [ 3189.420523][ T2322] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92853'. [ 3189.450147][ T2326] netlink: 'syz.1.92856': attribute type 4 has an invalid length. [ 3189.478678][ T2326] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92856'. [ 3189.572152][ T2342] netlink: 'syz.0.92865': attribute type 4 has an invalid length. [ 3189.579985][ T2342] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92865'. [ 3189.678793][ T2353] netlink: 'syz.0.92869': attribute type 4 has an invalid length. [ 3189.696881][ T2353] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92869'. [ 3189.917259][ T2373] netlink: 'syz.3.92879': attribute type 4 has an invalid length. [ 3189.949858][ T2373] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92879'. [ 3190.015937][ T2380] netlink: 'syz.3.92884': attribute type 4 has an invalid length. [ 3190.050073][ T2380] netlink: 17 bytes leftover after parsing attributes in process `syz.3.92884'. [ 3190.388038][ T2403] netlink: 'syz.4.92893': attribute type 4 has an invalid length. [ 3190.408953][ T2403] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92893'. [ 3190.602697][ T2407] netlink: 'syz.0.92896': attribute type 4 has an invalid length. [ 3190.613579][ T2407] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92896'. [ 3190.811668][ T2425] netlink: 'syz.0.92905': attribute type 4 has an invalid length. [ 3190.830040][ T2425] netlink: 17 bytes leftover after parsing attributes in process `syz.0.92905'. [ 3194.203587][ T2738] validate_nla: 1 callbacks suppressed [ 3194.203597][ T2738] netlink: 'syz.2.93059': attribute type 4 has an invalid length. [ 3194.237993][ T2738] __nla_validate_parse: 1 callbacks suppressed [ 3194.238002][ T2738] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93059'. [ 3194.530697][ T2759] netlink: 'syz.2.93068': attribute type 4 has an invalid length. [ 3194.544121][ T2759] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93068'. [ 3194.762493][ T2783] netlink: 'syz.2.93080': attribute type 4 has an invalid length. [ 3194.786184][ T2783] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93080'. [ 3194.874461][ T2793] netlink: 'syz.0.93085': attribute type 4 has an invalid length. [ 3194.890070][ T2793] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93085'. [ 3194.972147][ T2801] netlink: 'syz.4.93078': attribute type 4 has an invalid length. [ 3194.987496][ T2801] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93078'. [ 3195.076569][ T2809] netlink: 'syz.4.93092': attribute type 4 has an invalid length. [ 3195.095417][ T2809] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93092'. [ 3195.188454][ T2813] netlink: 'syz.4.93094': attribute type 4 has an invalid length. [ 3195.200097][ T2813] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93094'. [ 3195.799882][ T2835] netlink: 'syz.2.93105': attribute type 4 has an invalid length. [ 3195.828201][ T2835] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93105'. [ 3196.280593][ T2851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93110'. [ 3196.740482][ T2859] netlink: 'syz.0.93116': attribute type 4 has an invalid length. [ 3196.748404][ T2859] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93116'. [ 3197.991067][ T2921] netlink: 'syz.3.93145': attribute type 4 has an invalid length. [ 3199.245907][ T3056] validate_nla: 2 callbacks suppressed [ 3199.245915][ T3056] netlink: 'syz.4.93210': attribute type 4 has an invalid length. [ 3199.273260][ T3056] __nla_validate_parse: 6 callbacks suppressed [ 3199.273268][ T3056] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93210'. [ 3199.297231][ T3062] netlink: 'syz.0.93212': attribute type 4 has an invalid length. [ 3199.309201][ T3062] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93212'. [ 3199.339835][ T3065] netlink: 'syz.2.93213': attribute type 4 has an invalid length. [ 3199.364935][ T3065] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93213'. [ 3199.393294][ T3072] netlink: 'syz.1.93216': attribute type 4 has an invalid length. [ 3199.419967][ T3072] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93216'. [ 3199.662431][ T3112] netlink: 'syz.0.93234': attribute type 4 has an invalid length. [ 3199.701279][ T3112] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93234'. [ 3200.035998][ T3127] bridge0: port 1(bridge_slave_0) entered blocking state [ 3200.060134][ T3127] bridge0: port 1(bridge_slave_0) entered disabled state [ 3200.104117][ T3127] device bridge_slave_0 entered promiscuous mode [ 3200.127530][ T3127] bridge0: port 2(bridge_slave_1) entered blocking state [ 3200.143137][ T3127] bridge0: port 2(bridge_slave_1) entered disabled state [ 3200.150768][ T3127] device bridge_slave_1 entered promiscuous mode [ 3200.222004][ T3127] bridge0: port 2(bridge_slave_1) entered blocking state [ 3200.229072][ T3127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3200.236345][ T3127] bridge0: port 1(bridge_slave_0) entered blocking state [ 3200.243384][ T3127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3200.293322][ T3144] netlink: 'syz.3.93248': attribute type 4 has an invalid length. [ 3200.309846][ T3144] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93248'. [ 3200.347830][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3200.371768][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3200.392075][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3200.427618][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3200.443161][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 3200.450240][ T2760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3200.504657][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3200.528577][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 3200.535647][ T2760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3200.582240][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3200.593224][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3200.610431][ T3173] netlink: 'syz.2.93261': attribute type 4 has an invalid length. [ 3200.618350][ T3173] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93261'. [ 3200.643353][ T3127] device veth0_vlan entered promiscuous mode [ 3200.650387][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3200.670336][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3200.688596][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3200.706844][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3200.725921][ T3181] netlink: 'syz.0.93265': attribute type 4 has an invalid length. [ 3200.750099][ T3181] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93265'. [ 3200.765256][ T3127] device veth1_macvtap entered promiscuous mode [ 3200.785456][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3200.807231][ T3193] netlink: 'syz.1.93269': attribute type 4 has an invalid length. [ 3200.825127][ T3193] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93269'. [ 3200.852131][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3200.861615][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3201.006762][ T3224] overlayfs: missing 'lowerdir' [ 3201.261410][ T9] device bridge_slave_1 left promiscuous mode [ 3201.267566][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 3201.286923][ T9] device bridge_slave_0 left promiscuous mode [ 3201.305126][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 3201.331316][ T9] device veth1_macvtap left promiscuous mode [ 3201.349322][ T9] device veth0_vlan left promiscuous mode [ 3201.707958][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 3201.725172][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 3201.742809][ T3269] device bridge_slave_0 entered promiscuous mode [ 3201.791910][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 3201.798955][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 3201.840479][ T3269] device bridge_slave_1 entered promiscuous mode [ 3202.033273][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3202.050318][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3202.062376][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3202.090484][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3202.118993][T32429] bridge0: port 1(bridge_slave_0) entered blocking state [ 3202.126055][T32429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3202.160179][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3202.172449][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3202.200626][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3202.220275][T32429] bridge0: port 2(bridge_slave_1) entered blocking state [ 3202.227313][T32429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3202.284938][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3202.304438][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3202.342283][ T3282] netlink: 'syz.1.93308': attribute type 4 has an invalid length. [ 3202.350986][ T3282] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93308'. [ 3202.371776][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3202.379897][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3202.413733][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3202.440321][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3202.473182][ T3269] device veth0_vlan entered promiscuous mode [ 3202.483515][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3202.500859][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3202.511812][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3202.542378][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3202.592108][ T3269] device veth1_macvtap entered promiscuous mode [ 3202.615212][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3202.640655][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3202.658573][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3202.677082][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3202.950947][ T9] device bridge_slave_1 left promiscuous mode [ 3202.957277][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 3202.980420][ T9] device bridge_slave_0 left promiscuous mode [ 3203.020326][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 3203.038611][ T9] device veth1_macvtap left promiscuous mode [ 3203.047838][ T9] device veth0_vlan left promiscuous mode [ 3203.510280][ T3343] overlayfs: overlapping lowerdir path [ 3204.792229][ T3402] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3205.773492][ T3461] validate_nla: 5 callbacks suppressed [ 3205.773502][ T3461] netlink: 'syz.3.93396': attribute type 4 has an invalid length. [ 3205.830059][ T3461] __nla_validate_parse: 5 callbacks suppressed [ 3205.830068][ T3461] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93396'. [ 3205.910298][ T3463] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3206.038083][ T3479] netlink: 'syz.2.93402': attribute type 4 has an invalid length. [ 3206.060412][ T3479] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93402'. [ 3206.081372][ T3478] netlink: 'syz.3.93403': attribute type 4 has an invalid length. [ 3206.098567][ T3478] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93403'. [ 3206.117942][ T3488] netlink: 'syz.2.93408': attribute type 4 has an invalid length. [ 3206.130539][ T3488] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93408'. [ 3206.139648][ T3489] netlink: 'syz.4.93407': attribute type 4 has an invalid length. [ 3206.150608][ T3489] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93407'. [ 3206.170744][ T3493] netlink: 'syz.3.93411': attribute type 4 has an invalid length. [ 3206.190411][ T3493] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93411'. [ 3206.273190][ T3510] netlink: 'syz.2.93418': attribute type 4 has an invalid length. [ 3206.290074][ T3510] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93418'. [ 3206.330137][ T3516] netlink: 'syz.3.93421': attribute type 4 has an invalid length. [ 3206.345507][ T3516] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93421'. [ 3206.355064][ T3518] netlink: 'syz.0.93422': attribute type 4 has an invalid length. [ 3206.368044][ T3518] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93422'. [ 3206.415775][ T3529] netlink: 'syz.0.93426': attribute type 4 has an invalid length. [ 3206.434452][ T3529] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93426'. [ 3206.475916][ T3532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=3532 comm=syz.2.93428 [ 3211.017828][ T3747] validate_nla: 10 callbacks suppressed [ 3211.017836][ T3747] netlink: 'syz.2.93532': attribute type 4 has an invalid length. [ 3211.040117][ T3747] __nla_validate_parse: 12 callbacks suppressed [ 3211.040125][ T3747] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93532'. [ 3211.147115][ T3758] netlink: 'syz.1.93536': attribute type 4 has an invalid length. [ 3211.173805][ T3758] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93536'. [ 3211.221931][ T3764] netlink: 'syz.1.93538': attribute type 4 has an invalid length. [ 3211.239563][ T3764] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93538'. [ 3211.498493][ T3791] netlink: 'syz.1.93551': attribute type 4 has an invalid length. [ 3211.533558][ T3791] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93551'. [ 3211.566120][ T3799] netlink: 'syz.4.93544': attribute type 4 has an invalid length. [ 3211.589578][ T3799] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93544'. [ 3211.633091][ T3808] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3212.821612][ T3880] netlink: 'syz.3.93578': attribute type 4 has an invalid length. [ 3212.829447][ T3880] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93578'. [ 3213.405949][ T3900] netlink: 'syz.2.93604': attribute type 4 has an invalid length. [ 3213.440096][ T3900] netlink: 17 bytes leftover after parsing attributes in process `syz.2.93604'. [ 3213.856156][ T3927] netlink: 'syz.0.93616': attribute type 4 has an invalid length. [ 3213.896996][ T3927] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93616'. [ 3213.944850][ T3938] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3214.011792][ T3945] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3214.013276][ T3946] netlink: 'syz.3.93623': attribute type 4 has an invalid length. [ 3214.029500][ T3945] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3214.048285][ T3946] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93623'. [ 3214.224055][ T3964] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3214.302365][ T3970] netlink: 'syz.1.93637': attribute type 4 has an invalid length. [ 3214.330072][ T3970] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93637'. [ 3215.414919][ T4045] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3215.554232][ T4067] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3215.607252][ T4079] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3215.696762][ T4101] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3215.812805][ T4115] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3216.281955][ T4156] validate_nla: 5 callbacks suppressed [ 3216.281964][ T4156] netlink: 'syz.4.93726': attribute type 4 has an invalid length. [ 3216.320179][ T4156] __nla_validate_parse: 5 callbacks suppressed [ 3216.320187][ T4156] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93726'. [ 3216.638363][ T4182] overlayfs: overlapping lowerdir path [ 3216.817997][ T4203] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3216.923256][ T4227] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3216.971778][ T4239] netlink: 'syz.1.93766': attribute type 4 has an invalid length. [ 3216.984353][ T4239] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93766'. [ 3217.000371][ T4244] netlink: 'syz.3.93768': attribute type 4 has an invalid length. [ 3217.012391][ T4244] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93768'. [ 3217.186599][ T4268] netlink: 'syz.3.93780': attribute type 4 has an invalid length. [ 3217.200985][ T4268] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93780'. [ 3217.686193][ T4312] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3217.986355][ T4361] netlink: 'syz.3.93826': attribute type 4 has an invalid length. [ 3217.994355][ T4361] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93826'. [ 3218.477760][ T4384] netlink: 'syz.4.93837': attribute type 4 has an invalid length. [ 3218.498741][ T4384] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93837'. [ 3218.710836][ T4404] netlink: 'syz.4.93849': attribute type 4 has an invalid length. [ 3218.721830][ T4404] netlink: 17 bytes leftover after parsing attributes in process `syz.4.93849'. [ 3218.935762][ T4442] netlink: 'syz.0.93866': attribute type 4 has an invalid length. [ 3218.945002][ T4442] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93866'. [ 3219.008941][ T4453] netlink: 'syz.1.93871': attribute type 4 has an invalid length. [ 3219.029519][ T4455] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3219.035694][ T4453] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93871'. [ 3219.077318][ T4462] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3219.111792][ T4468] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3219.123129][ T4470] netlink: 'syz.0.93878': attribute type 4 has an invalid length. [ 3219.136247][ T4468] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3219.144710][ T4470] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93878'. [ 3219.198474][ T4476] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3220.848365][ T4554] overlayfs: overlapping lowerdir path [ 3220.909383][ T4567] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3221.052534][ T4598] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3221.076010][ T4609] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3221.529189][ T4684] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3221.569590][ T4684] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3221.932154][ T4726] netlink: 'syz.3.94006': attribute type 4 has an invalid length. [ 3221.963188][ T4726] netlink: 17 bytes leftover after parsing attributes in process `syz.3.94006'. [ 3222.024427][ T4734] netlink: 'syz.0.94010': attribute type 4 has an invalid length. [ 3222.067364][ T4734] netlink: 17 bytes leftover after parsing attributes in process `syz.0.94010'. [ 3222.273286][ T4764] netlink: 'syz.0.94025': attribute type 4 has an invalid length. [ 3222.301563][ T4764] netlink: 17 bytes leftover after parsing attributes in process `syz.0.94025'. [ 3222.589355][ T4794] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3223.380537][ T4842] overlayfs: overlapping lowerdir path [ 3223.390703][ T4842] overlayfs: overlapping lowerdir path [ 3224.222459][ T4866] overlayfs: failed to resolve './file0': -2 [ 3224.482578][ T4889] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3224.753455][ T4930] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3224.845242][ T4934] netlink: 'syz.4.94107': attribute type 4 has an invalid length. [ 3224.863257][ T4934] netlink: 17 bytes leftover after parsing attributes in process `syz.4.94107'. [ 3225.131673][ T4952] overlayfs: failed to resolve './file1': -2 [ 3225.169147][ T4954] netlink: 'syz.4.94118': attribute type 4 has an invalid length. [ 3225.186747][ T4954] netlink: 17 bytes leftover after parsing attributes in process `syz.4.94118'. [ 3225.231519][ T4956] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3225.250811][ T4956] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3225.403005][ T4968] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3225.465558][ T4974] netlink: 'syz.0.94129': attribute type 4 has an invalid length. [ 3225.490074][ T4974] netlink: 17 bytes leftover after parsing attributes in process `syz.0.94129'. [ 3225.592612][ T4981] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3225.607430][ T4981] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3225.774798][ T5002] netlink: 'syz.3.94140': attribute type 4 has an invalid length. [ 3225.783130][ T5002] netlink: 17 bytes leftover after parsing attributes in process `syz.3.94140'. [ 3225.926101][ T5024] netlink: 'syz.3.94152': attribute type 4 has an invalid length. [ 3225.935362][ T5024] netlink: 17 bytes leftover after parsing attributes in process `syz.3.94152'. [ 3226.179931][ T5050] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3226.201589][ T5050] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3226.210904][ T5054] netlink: 'syz.1.94165': attribute type 4 has an invalid length. [ 3226.224149][ T5054] netlink: 17 bytes leftover after parsing attributes in process `syz.1.94165'. [ 3226.814883][ T5082] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3227.186164][ T5105] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3227.836249][ T5155] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3227.961090][ T5166] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3228.576340][ T5230] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3228.627653][ T5232] overlayfs: failed to resolve './file1': -2 [ 3228.820832][ T5249] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3228.849923][ T5249] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3228.908894][ T5263] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3229.969253][ T5349] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3230.002657][ T5355] overlayfs: failed to resolve './file0': -2 [ 3230.079012][ T5365] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3230.276546][ T5391] netlink: 'syz.0.94327': attribute type 4 has an invalid length. [ 3230.294278][ T5391] netlink: 17 bytes leftover after parsing attributes in process `syz.0.94327'. [ 3231.180265][ T5424] netlink: 'syz.3.94338': attribute type 4 has an invalid length. [ 3231.188098][ T5424] netlink: 17 bytes leftover after parsing attributes in process `syz.3.94338'. [ 3231.205565][ T5428] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3231.492165][ T5448] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3231.886907][ T5473] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3232.681418][ T5500] overlayfs: failed to resolve './file0': -2 [ 3233.394690][ T5539] netlink: 'syz.0.94398': attribute type 4 has an invalid length. [ 3233.422806][ T5539] netlink: 17 bytes leftover after parsing attributes in process `syz.0.94398'. [ 3234.058652][ T5572] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3234.384295][ T5602] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3235.129062][ T5629] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3235.440108][ T1668] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 3235.512015][ T5654] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3235.535890][ T5656] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3235.578565][ T5662] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3235.749724][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 3235.757083][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 3235.764543][ T5672] device bridge_slave_0 entered promiscuous mode [ 3235.771712][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 3235.778910][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 3235.786485][ T5672] device bridge_slave_1 entered promiscuous mode [ 3235.800233][ T1668] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3235.809269][ T1668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.830673][ T1668] usb 2-1: config 0 descriptor?? [ 3235.852168][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 3235.859232][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3235.866498][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 3235.873521][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3235.900069][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 3235.907441][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 3235.915301][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3235.926254][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3235.937605][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3235.946060][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 3235.946873][ T5682] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3235.953107][ T2760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3235.988635][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3236.004032][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 3236.011104][ T2760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3236.033697][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3236.050373][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3236.068591][ T2760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3236.090117][ T1668] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 3236.101028][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3236.112457][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3236.119910][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3236.127436][ T1668] asix: probe of 2-1:0.0 failed with error -32 [ 3236.135930][ T5672] device veth0_vlan entered promiscuous mode [ 3236.157861][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3236.168117][ T5672] device veth1_macvtap entered promiscuous mode [ 3236.178717][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3236.204266][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3236.400724][ T9] device bridge_slave_1 left promiscuous mode [ 3236.406893][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 3236.437767][ T9] device bridge_slave_0 left promiscuous mode [ 3236.450112][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 3236.467082][ T9] device veth1_macvtap left promiscuous mode [ 3236.478592][ T9] device veth0_vlan left promiscuous mode [ 3236.970670][ T5735] overlayfs: failed to resolve './file0': -2 [ 3236.989041][ T5739] netlink: 'syz.3.94490': attribute type 4 has an invalid length. [ 3236.997667][ T5739] netlink: 17 bytes leftover after parsing attributes in process `syz.3.94490'. [ 3237.041084][ T5746] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3237.222808][ T5769] overlayfs: failed to resolve './file0': -2 [ 3237.349080][ T5777] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3237.512095][ T5792] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3238.172514][ T2166] usb 2-1: USB disconnect, device number 123 [ 3238.201356][ T5827] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3238.401177][ T5855] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3238.433732][ T5857] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3238.505246][ T5866] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3238.665782][ T5897] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3238.720289][ T5904] overlayfs: failed to resolve './file1': -2 [ 3238.833677][ T5925] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3238.945554][ T5945] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3240.027005][ T6003] binder: Binderfs stats mode cannot be changed during a remount [ 3240.295205][ T6029] overlayfs: failed to resolve './file1': -2 [ 3240.752065][ T6086] binder: Binderfs stats mode cannot be changed during a remount [ 3241.972395][ T6135] binder: Binderfs stats mode cannot be changed during a remount [ 3242.531821][ T6148] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3242.702263][ T6158] binder: Binderfs stats mode cannot be changed during a remount [ 3242.813430][ T6166] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3244.021666][ T6244] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3244.178011][ T6269] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3244.505444][ T6291] netlink: 'syz.1.94757': attribute type 4 has an invalid length. [ 3244.520119][ T6291] netlink: 17 bytes leftover after parsing attributes in process `syz.1.94757'. [ 3244.807330][ T6313] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.034816][ T6330] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.182190][ T6340] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.353480][ T6359] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.412354][ T6366] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.601731][ T6390] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.890989][ T6417] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3245.945849][ T6424] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3246.493258][ T6496] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3246.523958][ T6504] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3246.546579][ T6506] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3246.736654][ T6537] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3246.802063][ T6547] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3246.957313][ T6571] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3247.134919][ T6602] binder: Binderfs stats mode cannot be changed during a remount [ 3247.336254][ T6639] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3247.410709][ T6648] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3248.345493][ T6672] overlayfs: overlapping lowerdir path [ 3248.361403][ T6676] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3248.415127][ T6686] netlink: 'syz.4.94944': attribute type 4 has an invalid length. [ 3248.438930][ T6686] netlink: 17 bytes leftover after parsing attributes in process `syz.4.94944'. [ 3248.657728][ T6705] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3249.553231][ T6728] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3250.505763][ T6769] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3250.685051][ T6781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=6781 comm=syz.1.94988 [ 3250.782040][ T6785] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3250.835748][ T6787] overlayfs: failed to resolve './file1': -2 [ 3251.165598][ T6807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=6807 comm=syz.3.95000 [ 3251.229662][ T6809] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3251.512984][ T6830] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3251.879194][ T6868] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3252.452824][ T6905] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3252.698003][ T6931] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3252.820284][ T6940] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3253.302048][ T6990] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3253.649381][ T7025] binder: Binderfs stats mode cannot be changed during a remount [ 3253.827316][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 3253.840197][ T7043] overlayfs: failed to resolve './file1': -2 [ 3253.860068][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 3253.867498][ T7028] device bridge_slave_0 entered promiscuous mode [ 3253.932906][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 3253.972939][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 3254.005228][ T7028] device bridge_slave_1 entered promiscuous mode [ 3254.076563][ T7060] overlayfs: missing 'lowerdir' [ 3254.095139][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 3254.102216][ T7028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3254.109513][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 3254.116569][ T7028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3254.170328][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3254.198436][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3254.213318][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3254.236681][ T7073] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3254.249235][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3254.264727][T27309] bridge0: port 1(bridge_slave_0) entered blocking state [ 3254.271817][T27309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3254.314102][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3254.336722][T27309] bridge0: port 2(bridge_slave_1) entered blocking state [ 3254.343796][T27309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3254.364805][ T7084] overlayfs: missing 'lowerdir' [ 3254.399343][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3254.420959][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3254.435788][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3254.470783][ T7028] device veth0_vlan entered promiscuous mode [ 3254.483379][ T7098] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3254.495488][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3254.507259][ T7028] device veth1_macvtap entered promiscuous mode [ 3254.522780][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3254.534954][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3254.555307][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3254.579922][ T7105] overlayfs: failed to resolve './file0': -2 [ 3254.588895][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3254.600913][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3254.657126][ T7113] binder: Binderfs stats mode cannot be changed during a remount [ 3254.665822][T26708] device bridge_slave_1 left promiscuous mode [ 3254.680816][T26708] bridge0: port 2(bridge_slave_1) entered disabled state [ 3254.697689][T26708] device bridge_slave_0 left promiscuous mode [ 3254.732741][T26708] bridge0: port 1(bridge_slave_0) entered disabled state [ 3254.748543][T26708] device veth1_macvtap left promiscuous mode [ 3254.763641][ T7131] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3254.772021][T26708] device veth0_vlan left promiscuous mode [ 3255.163662][ T7183] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3255.949062][ T7224] overlayfs: failed to resolve './file1': -2 [ 3256.049304][ T7232] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3256.119701][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 3256.141448][ T7244] binder: Unknown parameter 'contex' [ 3256.155242][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 3256.162135][ T7248] overlayfs: failed to resolve './file0': -2 [ 3256.162841][ T7225] device bridge_slave_0 entered promiscuous mode [ 3256.181240][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 3256.188278][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 3256.195657][ T7225] device bridge_slave_1 entered promiscuous mode [ 3256.301651][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 3256.308729][ T7225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3256.316014][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 3256.323045][ T7225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3256.372782][ T7269] binder: Unknown parameter 'contex' [ 3256.416584][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3256.426842][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3256.435943][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3256.493428][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3256.503812][T27309] bridge0: port 1(bridge_slave_0) entered blocking state [ 3256.510896][T27309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3256.557122][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3256.570520][T27309] bridge0: port 2(bridge_slave_1) entered blocking state [ 3256.577556][T27309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3256.592312][ T7294] binder: Unknown parameter 'contex' [ 3256.614653][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3256.630456][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3256.634099][ T7297] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3256.648367][ T7298] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3256.663522][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3256.674555][ T7297] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3256.694349][ T7225] device veth0_vlan entered promiscuous mode [ 3256.709427][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3256.718522][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3256.740425][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3256.756607][ T7225] device veth1_macvtap entered promiscuous mode [ 3256.770497][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3256.795463][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3256.814084][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3256.900897][T26708] device bridge_slave_1 left promiscuous mode [ 3256.907052][T26708] bridge0: port 2(bridge_slave_1) entered disabled state [ 3256.926386][ T7320] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3256.936403][T26708] device bridge_slave_0 left promiscuous mode [ 3256.951075][T26708] bridge0: port 1(bridge_slave_0) entered disabled state [ 3256.980186][T26708] device veth1_macvtap left promiscuous mode [ 3256.988598][T26708] device veth0_vlan left promiscuous mode [ 3257.057758][ T7329] overlayfs: missing 'lowerdir' [ 3257.151424][ T7335] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 3257.540624][ T7352] overlayfs: missing 'lowerdir' [ 3257.874419][ T7370] overlayfs: unrecognized mount option "/" or missing value [ 3257.909584][ T7372] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3257.931889][ T7372] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3257.990760][ T7377] binder: Unknown parameter 'cont' [ 3258.194203][ T7400] overlayfs: overlapping lowerdir path [ 3258.201197][ T7400] overlayfs: overlapping lowerdir path [ 3258.224204][ T7406] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3258.237080][ T7406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3258.289618][ T7421] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3258.299669][ T7421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3258.361229][ T7431] binder: Bad value for 'context' [ 3258.876285][ T7517] device batadv_slave_1 entered promiscuous mode [ 3258.884123][ T7516] device batadv_slave_1 left promiscuous mode [ 3258.938045][ T7525] binder: Binderfs stats mode cannot be changed during a remount [ 3259.067186][ T7535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=7535 comm=syz.0.95344 [ 3259.311905][ T7551] binder: Binderfs stats mode cannot be changed during a remount [ 3259.395275][ T7559] overlayfs: missing 'lowerdir' [ 3259.685762][ T7580] binder: Bad value for 'context' [ 3259.752008][ T7584] overlayfs: unrecognized mount option "/" or missing value [ 3260.230048][ T5837] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 3260.241464][ T7615] overlayfs: unrecognized mount option "/" or missing value [ 3260.282090][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95381'. [ 3260.445189][ T7638] overlayfs: unrecognized mount option "/" or missing value [ 3260.610198][ T5837] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 3260.618882][ T5837] usb 2-1: config 0 has no interface number 0 [ 3260.625393][ T5837] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3260.637978][ T5837] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3260.681467][ T7660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=7660 comm=syz.3.95401 [ 3260.800125][ T5837] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 3260.809422][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3260.817679][ T5837] usb 2-1: Product: syz [ 3260.822260][ T5837] usb 2-1: Manufacturer: syz [ 3260.827049][ T5837] usb 2-1: SerialNumber: syz [ 3260.835506][ T5837] usb 2-1: config 0 descriptor?? [ 3260.848043][ T7671] overlayfs: failed to resolve './file0': -2 [ 3260.860152][ T7605] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3260.880780][ T5837] plusb: probe of 2-1:0.231 failed with error -22 [ 3260.931621][ T7683] overlayfs: overlapping lowerdir path [ 3261.087637][T27768] usb 2-1: USB disconnect, device number 124 [ 3261.319147][ T7701] overlayfs: missing 'lowerdir' [ 3261.385715][ T7705] overlayfs: failed to resolve './file1': -2 [ 3261.457007][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95427'. [ 3261.735928][ T7746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3261.744889][ T7746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3261.836132][ T7764] device batadv_slave_1 entered promiscuous mode [ 3261.857296][ T7763] device batadv_slave_1 left promiscuous mode [ 3261.936198][ T7781] binder: Unknown parameter 'contex' [ 3262.026799][ T7789] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3262.050809][ T7789] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3262.189595][ T7808] binder: Unknown parameter 'contex' [ 3262.301605][ T7819] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3262.310444][ T7819] SELinux: (dev overlay, type overlay) has no security xattr handler [ 3262.400078][ T5837] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 3262.760185][ T5837] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3262.772617][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3262.789461][ T5837] usb 4-1: config 0 descriptor?? [ 3263.270916][ T5837] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3263.287927][ T5837] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 3263.302726][ T7879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=7879 comm=syz.4.95505 [ 3263.321351][ T5837] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3263.360174][ T5837] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3263.380561][ T5837] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 3263.430120][ T5837] asix: probe of 4-1:0.0 failed with error -71 [ 3263.442662][ T5837] usb 4-1: USB disconnect, device number 113 [ 3263.803594][ T7919] overlayfs: missing 'workdir' [ 3264.474234][ T8017] overlayfs: overlapping lowerdir path [ 3264.488990][ T8017] overlayfs: overlapping lowerdir path [ 3264.686901][ T8041] overlayfs: overlapping lowerdir path [ 3264.702818][ T8041] overlayfs: overlapping lowerdir path [ 3264.977688][ T8066] overlayfs: overlapping lowerdir path [ 3264.994514][ T8066] overlayfs: overlapping lowerdir path [ 3265.032303][ T8072] binder: Bad value for 'context' [ 3265.191759][ T8093] overlayfs: overlapping lowerdir path [ 3265.216658][ T8093] overlayfs: overlapping lowerdir path [ 3265.273392][ T8103] netlink: 120 bytes leftover after parsing attributes in process `syz.3.95612'. [ 3265.613181][ T8122] netlink: 120 bytes leftover after parsing attributes in process `syz.3.95622'. [ 3265.972944][ T8154] netlink: 120 bytes leftover after parsing attributes in process `syz.4.95636'. [ 3266.301246][ T8178] overlayfs: failed to resolve './file0': -2 [ 3266.534554][ T8206] overlayfs: failed to resolve './file1': -2 [ 3266.619813][ T8215] binder: Unknown parameter 'cont' [ 3266.885163][ T8243] binder: Unknown parameter 'cont' [ 3267.627103][ T8299] overlayfs: failed to resolve './file1': -2 [ 3267.734006][ T8319] netlink: 120 bytes leftover after parsing attributes in process `syz.3.95715'. [ 3267.761715][ T8323] overlayfs: failed to resolve './file1': -2 [ 3268.213584][ T8402] netlink: 120 bytes leftover after parsing attributes in process `syz.4.95755'. [ 3268.841128][ T8453] binder: 8452:8453 ioctl c0306201 200000000940 returned -22 [ 3269.032787][ T8480] binder: 8479:8480 ioctl c0306201 200000000940 returned -22 [ 3270.187071][ T8524] binder: 8523:8524 ioctl c0306201 200000000940 returned -22 [ 3270.362110][ T8548] netlink: 120 bytes leftover after parsing attributes in process `syz.2.95824'. [ 3270.400072][T27768] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 3270.495702][ T8559] binder: 8558:8559 ioctl c0306201 200000000940 returned -22 [ 3270.770143][T27768] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3270.789386][T27768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3270.810652][T27768] usb 2-1: config 0 descriptor?? [ 3270.980502][ T8596] overlayfs: missing 'lowerdir' [ 3271.080185][T27768] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 3271.116374][ T8608] netlink: 'syz.2.95852': attribute type 13 has an invalid length. [ 3271.154119][ T8614] binder: Bad value for 'context' [ 3271.301440][T27768] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3271.319110][T27768] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 3271.360101][T27768] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3271.390097][T27768] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3271.404517][T27768] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 3271.450138][T27768] asix: probe of 2-1:0.0 failed with error -71 [ 3271.458218][T27768] usb 2-1: USB disconnect, device number 125 [ 3271.554404][ T8649] netlink: 120 bytes leftover after parsing attributes in process `syz.2.95872'. [ 3271.712276][ T8662] binder: Unknown parameter 'cont' [ 3271.781258][ T8672] netlink: 120 bytes leftover after parsing attributes in process `syz.0.95883'. [ 3272.047776][ T8707] netlink: 120 bytes leftover after parsing attributes in process `syz.3.95898'. [ 3272.081990][ T8711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=8711 comm=syz.2.95900 [ 3272.501947][ T8753] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3272.550087][ T8753] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3272.781099][ T8764] netlink: 120 bytes leftover after parsing attributes in process `syz.1.95919'. [ 3272.790904][ T8768] binder: Unknown parameter 'cont' [ 3272.892704][ T8781] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3272.920448][ T8781] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3272.953454][ T8791] binder: Unknown parameter 'cont' [ 3273.167686][ T8819] overlayfs: missing 'lowerdir' [ 3273.178251][ T8823] overlayfs: missing 'lowerdir' [ 3273.433314][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95967'. [ 3273.490125][ T8865] binder: 8863:8865 ioctl c0306201 200000000940 returned -22 [ 3273.642413][ T8887] netlink: 120 bytes leftover after parsing attributes in process `syz.2.95983'. [ 3274.988566][ T8968] netlink: 'syz.3.96020': attribute type 13 has an invalid length. [ 3276.826435][ T9082] netlink: 120 bytes leftover after parsing attributes in process `syz.1.96076'. [ 3276.912928][ T9090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.96082'. [ 3279.192386][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96136'. [ 3279.352227][ T9218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.96137'. [ 3279.710231][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96148'. [ 3279.993052][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96160'. [ 3281.212880][ T9303] binder: 9302:9303 ioctl c0306201 200000000940 returned -22 [ 3281.380128][ T9330] binder: Bad value for 'context' [ 3282.101851][ T9354] binder: Bad value for 'context' [ 3283.431141][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.96261'. [ 3284.215476][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.96302'. [ 3285.501747][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.4.96357'. [ 3285.819489][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 3285.836800][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 3285.850576][ T9706] device bridge_slave_0 entered promiscuous mode [ 3285.869470][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 3285.878913][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 3285.886537][ T9706] device bridge_slave_1 entered promiscuous mode [ 3285.940753][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 3285.947826][ T9706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3285.955109][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 3285.962139][ T9706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3286.088405][T32429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3286.120453][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3286.137895][T32429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3286.163514][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3286.182669][T26708] bridge0: port 1(bridge_slave_0) entered blocking state [ 3286.189715][T26708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3286.207278][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3286.225757][T26708] bridge0: port 2(bridge_slave_1) entered blocking state [ 3286.232864][T26708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3286.262719][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3286.291164][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3286.328747][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3286.353621][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3286.370577][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3286.398441][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3286.419553][ T9706] device veth0_vlan entered promiscuous mode [ 3286.446710][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3286.466634][ T9706] device veth1_macvtap entered promiscuous mode [ 3286.492455][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3286.516937][T26708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3286.600973][T27309] device bridge_slave_1 left promiscuous mode [ 3286.607130][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3286.624832][T27309] device bridge_slave_0 left promiscuous mode [ 3286.644739][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3286.665805][T27309] device veth1_macvtap left promiscuous mode [ 3286.683302][T27309] device veth0_vlan left promiscuous mode [ 3288.917052][ T7028] ------------[ cut here ]------------ [ 3288.931996][ T7028] WARNING: CPU: 0 PID: 7028 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 3288.950469][ T7028] Modules linked in: [ 3288.960274][ T7028] CPU: 0 PID: 7028 Comm: syz-executor Not tainted syzkaller #0 [ 3288.976044][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3289.018431][ T7028] RIP: 0010:drop_nlink+0xc5/0x110 [ 3289.029612][ T7028] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 93 22 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 30 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 3289.069585][ T7028] RSP: 0018:ffffc9000174fcd0 EFLAGS: 00010293 [ 3289.087152][ T7028] RAX: ffffffff81ab74e5 RBX: ffff88811d8187a0 RCX: ffff8881274d3b40 [ 3289.115418][ T7028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3289.135585][ T7028] RBP: ffffc9000174fcf8 R08: 0000000000000004 R09: 0000000000000003 [ 3289.152196][ T7028] R10: fffff520002e9f88 R11: 1ffff920002e9f88 R12: dffffc0000000000 [ 3289.180069][ T7028] R13: 1ffff11023b030fd R14: ffff88811d8187e8 R15: 0000000000000000 [ 3289.195556][ T7028] FS: 0000555561a39500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3289.220066][ T7028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3289.240095][ T7028] CR2: 00007fec89713f98 CR3: 0000000135fb2000 CR4: 00000000003506b0 [ 3289.268336][ T7028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3289.298598][ T7028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3289.308678][ T7028] Call Trace: [ 3289.318788][ T7028] shmem_rmdir+0x5b/0x90 [ 3289.323336][ T7028] vfs_rmdir+0x1b3/0x3e0 [ 3289.327588][ T7028] incfs_kill_sb+0xfe/0x210 [ 3289.342249][ T7028] deactivate_locked_super+0xa0/0x100 [ 3289.347636][ T7028] deactivate_super+0xaf/0xe0 [ 3289.362598][ T7028] cleanup_mnt+0x446/0x500 [ 3289.367037][ T7028] __cleanup_mnt+0x19/0x20 [ 3289.380055][ T7028] task_work_run+0x127/0x190 [ 3289.390213][ T7028] exit_to_user_mode_loop+0xcb/0xe0 [ 3289.420106][ T7028] exit_to_user_mode_prepare+0x76/0xa0 [ 3289.425591][ T7028] syscall_exit_to_user_mode+0x1d/0x40 [ 3289.440095][ T7028] do_syscall_64+0x3d/0x40 [ 3289.444532][ T7028] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3289.460089][ T7028] RIP: 0033:0x7fd0657529f7 [ 3289.464520][ T7028] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3289.504491][ T7028] RSP: 002b:00007ffe46153138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3289.524675][ T7028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0657529f7 [ 3289.544857][ T7028] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe461531f0 [ 3289.570048][ T7028] RBP: 00007ffe461531f0 R08: 0000000000000000 R09: 0000000000000000 [ 3289.588204][ T7028] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe46154280 [ 3289.618477][ T7028] R13: 00007fd0657d3d7d R14: 0000000000322f36 R15: 00007ffe461542c0 [ 3289.640105][ T7028] ---[ end trace 11d427b7a8f86a51 ]--- [ 3289.645642][ T7028] ================================================================== [ 3289.653701][ T7028] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 3289.659925][ T7028] Write of size 4 at addr 0000000000000170 by task syz-executor/7028 [ 3289.667967][ T7028] [ 3289.670291][ T7028] CPU: 1 PID: 7028 Comm: syz-executor Tainted: G W syzkaller #0 [ 3289.679205][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3289.689244][ T7028] Call Trace: [ 3289.692529][ T7028] __dump_stack+0x21/0x24 [ 3289.696835][ T7028] dump_stack_lvl+0x169/0x1d8 [ 3289.701486][ T7028] ? thaw_kernel_threads+0x220/0x220 [ 3289.706748][ T7028] ? show_regs_print_info+0x18/0x18 [ 3289.711922][ T7028] ? _raw_spin_lock+0x8e/0xe0 [ 3289.716570][ T7028] ? _raw_spin_trylock_bh+0x130/0x130 [ 3289.721918][ T7028] ? ihold+0x20/0x60 [ 3289.725786][ T7028] kasan_report+0xd8/0x130 [ 3289.730174][ T7028] ? ihold+0x20/0x60 [ 3289.734042][ T7028] kasan_check_range+0x280/0x290 [ 3289.738949][ T7028] __kasan_check_write+0x14/0x20 [ 3289.743861][ T7028] ihold+0x20/0x60 [ 3289.747555][ T7028] vfs_rmdir+0x247/0x3e0 [ 3289.751772][ T7028] incfs_kill_sb+0xfe/0x210 [ 3289.756247][ T7028] deactivate_locked_super+0xa0/0x100 [ 3289.761587][ T7028] deactivate_super+0xaf/0xe0 [ 3289.766235][ T7028] cleanup_mnt+0x446/0x500 [ 3289.770632][ T7028] __cleanup_mnt+0x19/0x20 [ 3289.775018][ T7028] task_work_run+0x127/0x190 [ 3289.779582][ T7028] exit_to_user_mode_loop+0xcb/0xe0 [ 3289.784754][ T7028] exit_to_user_mode_prepare+0x76/0xa0 [ 3289.790188][ T7028] syscall_exit_to_user_mode+0x1d/0x40 [ 3289.795618][ T7028] do_syscall_64+0x3d/0x40 [ 3289.800010][ T7028] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3289.805872][ T7028] RIP: 0033:0x7fd0657529f7 [ 3289.810260][ T7028] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3289.829838][ T7028] RSP: 002b:00007ffe46153138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3289.838221][ T7028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0657529f7 [ 3289.846166][ T7028] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe461531f0 [ 3289.854109][ T7028] RBP: 00007ffe461531f0 R08: 0000000000000000 R09: 0000000000000000 [ 3289.862052][ T7028] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe46154280 [ 3289.869998][ T7028] R13: 00007fd0657d3d7d R14: 0000000000322f36 R15: 00007ffe461542c0 [ 3289.877944][ T7028] ================================================================== [ 3289.885987][ T7028] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3289.910087][ T24] audit: type=1400 audit(1763146640.997:2399): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[14012]" dev="pipefs" ino=14012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3289.950841][ T7028] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 3289.958665][ T7028] #PF: supervisor write access in kernel mode [ 3289.964718][ T7028] #PF: error_code(0x0002) - not-present page [ 3289.970690][ T7028] PGD 120be3067 P4D 120be3067 PUD 0 [ 3289.975976][ T7028] Oops: 0002 [#1] PREEMPT SMP KASAN [ 3289.981159][ T7028] CPU: 0 PID: 7028 Comm: syz-executor Tainted: G B W syzkaller #0 [ 3289.990069][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3290.000125][ T7028] RIP: 0010:ihold+0x26/0x60 [ 3290.004609][ T7028] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 3290.024182][ T7028] RSP: 0018:ffffc9000174fd10 EFLAGS: 00010246 [ 3290.030218][ T7028] RAX: ffff8881274d3b00 RBX: 0000000000000000 RCX: 0000000000000286 [ 3290.038159][ T7028] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 3290.046098][ T7028] RBP: ffffc9000174fd20 R08: 0000000000000004 R09: 0000000000000003 [ 3290.054039][ T7028] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff11026894f16 [ 3290.061978][ T7028] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 3290.069916][ T7028] FS: 0000555561a39500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3290.078812][ T7028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3290.085363][ T7028] CR2: 0000000000000170 CR3: 0000000135fb2000 CR4: 00000000003506b0 [ 3290.093304][ T7028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3290.101245][ T7028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3290.109180][ T7028] Call Trace: [ 3290.112442][ T7028] vfs_rmdir+0x247/0x3e0 [ 3290.116653][ T7028] incfs_kill_sb+0xfe/0x210 [ 3290.121125][ T7028] deactivate_locked_super+0xa0/0x100 [ 3290.126462][ T7028] deactivate_super+0xaf/0xe0 [ 3290.131110][ T7028] cleanup_mnt+0x446/0x500 [ 3290.135492][ T7028] __cleanup_mnt+0x19/0x20 [ 3290.139876][ T7028] task_work_run+0x127/0x190 [ 3290.144431][ T7028] exit_to_user_mode_loop+0xcb/0xe0 [ 3290.149592][ T7028] exit_to_user_mode_prepare+0x76/0xa0 [ 3290.155020][ T7028] syscall_exit_to_user_mode+0x1d/0x40 [ 3290.160445][ T7028] do_syscall_64+0x3d/0x40 [ 3290.164830][ T7028] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3290.170691][ T7028] RIP: 0033:0x7fd0657529f7 [ 3290.175073][ T7028] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3290.194644][ T7028] RSP: 002b:00007ffe46153138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3290.203024][ T7028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0657529f7 [ 3290.210966][ T7028] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe461531f0 [ 3290.218904][ T7028] RBP: 00007ffe461531f0 R08: 0000000000000000 R09: 0000000000000000 [ 3290.226844][ T7028] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe46154280 [ 3290.234783][ T7028] R13: 00007fd0657d3d7d R14: 0000000000322f36 R15: 00007ffe461542c0 [ 3290.242722][ T7028] Modules linked in: [ 3290.246589][ T7028] CR2: 0000000000000170 [ 3290.250722][ T7028] ---[ end trace 11d427b7a8f86a52 ]--- [ 3290.256154][ T7028] RIP: 0010:ihold+0x26/0x60 [ 3290.260625][ T7028] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 3290.280200][ T7028] RSP: 0018:ffffc9000174fd10 EFLAGS: 00010246 [ 3290.286233][ T7028] RAX: ffff8881274d3b00 RBX: 0000000000000000 RCX: 0000000000000286 [ 3290.294172][ T7028] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 3290.302114][ T7028] RBP: ffffc9000174fd20 R08: 0000000000000004 R09: 0000000000000003 [ 3290.310059][ T7028] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff11026894f16 [ 3290.318006][ T7028] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 3290.325947][ T7028] FS: 0000555561a39500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3290.334846][ T7028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3290.341396][ T7028] CR2: 0000000000000170 CR3: 0000000135fb2000 CR4: 00000000003506b0 [ 3290.349335][ T7028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3290.357274][ T7028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3290.365213][ T7028] Kernel panic - not syncing: Fatal exception [ 3290.371437][ T7028] Kernel Offset: disabled [ 3290.375760][ T7028] Rebooting in 86400 seconds..