last executing test programs: 11.81205386s ago: executing program 1 (id=583): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, &(0x7f0000000140)) 11.628250104s ago: executing program 1 (id=584): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 11.249279651s ago: executing program 1 (id=586): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000001180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "2ff7e2", 0x10, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x6, "49c5f5", 0x6, '?J\x00'}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000001280), 0x1, 0x900) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, 0x0) 10.443882457s ago: executing program 0 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) 7.21481945s ago: executing program 0 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$link(0x8, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) 5.850184686s ago: executing program 1 (id=592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000280)={0xffff, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x9, 0x6}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 5.325349996s ago: executing program 0 (id=594): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, &(0x7f0000000140)) 5.107221731s ago: executing program 0 (id=597): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='cifs\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x2d8, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x2c4, 0x1, [@m_gact={0x1a8, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x17a, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x38, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0xd, 0x6, "266510c489ea5b3a4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xb0, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x3, 0x7, 0x294cce70}, 0x3}}]}, {0x67, 0x6, "81453f804a82cb6aee040cab1a26b8e22ec8166344fb4905e0eaf17ba33cdd74ed4974df2bc7764a4edc7b4bcc0919a48f180d201a029d98fff52fcc74742c1f8046a7cc4c0299095ebfedcd454245cf40d13f04487991b233521bd7d84c14634f205a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 4.910397534s ago: executing program 3 (id=600): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000001180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "2ff7e2", 0x10, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x6, "49c5f5", 0x6, '?J\x00'}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000001280), 0x1, 0x900) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, 0x0) 3.787097886s ago: executing program 1 (id=601): openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000018000102000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 3.236488527s ago: executing program 1 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$link(0x8, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) 3.05525006s ago: executing program 2 (id=603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x24, 0x60000000}, 0x50) 2.759993206s ago: executing program 2 (id=604): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x0) 2.677557868s ago: executing program 0 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) 2.60395306s ago: executing program 3 (id=606): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), 0x0) 1.367200023s ago: executing program 3 (id=607): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1.316159285s ago: executing program 2 (id=608): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 1.069547489s ago: executing program 3 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20044050) 918.678352ms ago: executing program 2 (id=610): openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000018000102000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r4, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 740.012136ms ago: executing program 3 (id=611): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) epoll_create1(0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_print_times', 0x12ba82, 0x18d) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x125c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x3, 0x0, r0}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 309.282284ms ago: executing program 2 (id=612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x24, 0x60000000}, 0x50) 258.089155ms ago: executing program 0 (id=613): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="42a1ee5b20dddd57a5", 0x9, 0xc001, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 53.705889ms ago: executing program 3 (id=614): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) ioctl$KDENABIO(r0, 0x4b36) openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x88) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/184, 0xb8}], 0x2, 0x7fd, 0x2, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x0, 0x0, 0x3, 0xa}, {0x7, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in6=@remote, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20042800}, 0x4044800) 0s ago: executing program 2 (id=615): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000001180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "2ff7e2", 0x10, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x6, "49c5f5", 0x6, '?J\x00'}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000001280), 0x1, 0x900) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 64.009964][ T5771] cgroup: Unknown subsys name 'net' [ 64.179504][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.576384][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.109999][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.118611][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.127156][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.135356][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.155117][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.172538][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.180285][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.180307][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.189266][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.202485][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.204253][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.210583][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.218271][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.224533][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.233570][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.240382][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.244928][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.251406][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.258891][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.266436][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.273077][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.279790][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.286994][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.302599][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.754114][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 67.825608][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 67.861989][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 67.872797][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 67.937461][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.944971][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.952329][ T5783] bridge_slave_0: entered allmulticast mode [ 67.959319][ T5783] bridge_slave_0: entered promiscuous mode [ 68.011510][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.018714][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.025939][ T5783] bridge_slave_1: entered allmulticast mode [ 68.032641][ T5783] bridge_slave_1: entered promiscuous mode [ 68.086668][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.093954][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.101070][ T5782] bridge_slave_0: entered allmulticast mode [ 68.109053][ T5782] bridge_slave_0: entered promiscuous mode [ 68.139876][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.147461][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.154739][ T5782] bridge_slave_1: entered allmulticast mode [ 68.161404][ T5782] bridge_slave_1: entered promiscuous mode [ 68.170982][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.190604][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.197814][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.205443][ T5784] bridge_slave_0: entered allmulticast mode [ 68.212098][ T5784] bridge_slave_0: entered promiscuous mode [ 68.235085][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.266738][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.273976][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.281123][ T5781] bridge_slave_0: entered allmulticast mode [ 68.288355][ T5781] bridge_slave_0: entered promiscuous mode [ 68.296859][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.304037][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.311362][ T5784] bridge_slave_1: entered allmulticast mode [ 68.318786][ T5784] bridge_slave_1: entered promiscuous mode [ 68.338940][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.359274][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.366560][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.373943][ T5781] bridge_slave_1: entered allmulticast mode [ 68.380801][ T5781] bridge_slave_1: entered promiscuous mode [ 68.401132][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.413886][ T5783] team0: Port device team_slave_0 added [ 68.449452][ T5783] team0: Port device team_slave_1 added [ 68.479901][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.491131][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.524267][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.545780][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.568924][ T5782] team0: Port device team_slave_0 added [ 68.575872][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.582829][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.609241][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.644006][ T5782] team0: Port device team_slave_1 added [ 68.652391][ T5784] team0: Port device team_slave_0 added [ 68.660263][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.667291][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.693446][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.713743][ T5781] team0: Port device team_slave_0 added [ 68.742499][ T5784] team0: Port device team_slave_1 added [ 68.759199][ T5781] team0: Port device team_slave_1 added [ 68.786856][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.793861][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.819813][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.832569][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.839629][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.865784][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.908538][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.915796][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.941817][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.953595][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.960547][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.986854][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.013263][ T5783] hsr_slave_0: entered promiscuous mode [ 69.020354][ T5783] hsr_slave_1: entered promiscuous mode [ 69.048696][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.055725][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.081729][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.094722][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.101678][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.128274][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.190669][ T5781] hsr_slave_0: entered promiscuous mode [ 69.197326][ T5781] hsr_slave_1: entered promiscuous mode [ 69.204302][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.212142][ T5781] Cannot create hsr debugfs directory [ 69.291163][ T5782] hsr_slave_0: entered promiscuous mode [ 69.297778][ T5782] hsr_slave_1: entered promiscuous mode [ 69.304644][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.312211][ T5782] Cannot create hsr debugfs directory [ 69.324053][ T5792] Bluetooth: hci3: command tx timeout [ 69.324404][ T5104] Bluetooth: hci1: command tx timeout [ 69.335864][ T5789] Bluetooth: hci0: command tx timeout [ 69.352997][ T5784] hsr_slave_0: entered promiscuous mode [ 69.359697][ T5784] hsr_slave_1: entered promiscuous mode [ 69.366203][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.374332][ T5784] Cannot create hsr debugfs directory [ 69.403853][ T5789] Bluetooth: hci2: command tx timeout [ 69.673392][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.687896][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.697709][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.710268][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.766660][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.780875][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.797013][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.828843][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.876474][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.914324][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.934385][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.943917][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.003435][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.015867][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.025192][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.044958][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.139086][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.196024][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.209437][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.249518][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.256867][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.266668][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.273871][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.310110][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.338732][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.369260][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.376423][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.400334][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.408769][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.415960][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.461795][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.469013][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.494324][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.501479][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.529664][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.579988][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.637981][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.673071][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.680270][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.692304][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.699519][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.728725][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.818860][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.967842][ T5783] veth0_vlan: entered promiscuous mode [ 71.001697][ T5783] veth1_vlan: entered promiscuous mode [ 71.039185][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.139942][ T5781] veth0_vlan: entered promiscuous mode [ 71.152809][ T5781] veth1_vlan: entered promiscuous mode [ 71.180162][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.204422][ T5783] veth0_macvtap: entered promiscuous mode [ 71.215472][ T5783] veth1_macvtap: entered promiscuous mode [ 71.259906][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.308233][ T5781] veth0_macvtap: entered promiscuous mode [ 71.318293][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.332906][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.349691][ T5781] veth1_macvtap: entered promiscuous mode [ 71.362445][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.371745][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.380962][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.390602][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.403843][ T5789] Bluetooth: hci0: command tx timeout [ 71.409316][ T5104] Bluetooth: hci1: command tx timeout [ 71.411652][ T5792] Bluetooth: hci3: command tx timeout [ 71.426655][ T5782] veth0_vlan: entered promiscuous mode [ 71.453160][ T5782] veth1_vlan: entered promiscuous mode [ 71.469226][ T5784] veth0_vlan: entered promiscuous mode [ 71.478748][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.491135][ T5792] Bluetooth: hci2: command tx timeout [ 71.492011][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.498127][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.513876][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.525802][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.557477][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.568608][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.580413][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.591813][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.601764][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610673][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.619538][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640671][ T5784] veth1_vlan: entered promiscuous mode [ 71.711520][ T5782] veth0_macvtap: entered promiscuous mode [ 71.739634][ T5782] veth1_macvtap: entered promiscuous mode [ 71.751280][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.765270][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.822459][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.831830][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.840974][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.859051][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.868975][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.879412][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.890542][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.907147][ T5784] veth0_macvtap: entered promiscuous mode [ 71.925472][ T5784] veth1_macvtap: entered promiscuous mode [ 71.933806][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.941622][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.985564][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.004376][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.016108][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.026768][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.038480][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.065543][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.074621][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.083660][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.092368][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.167313][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.178657][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.190539][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.201183][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.211489][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.222444][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.234997][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.243917][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.255069][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.280855][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.295404][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.305405][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.315874][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.326023][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.336834][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.349501][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.378342][ T5874] CIFS: VFS: Malformed UNC in devname [ 72.461750][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.472223][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.481324][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.490265][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.611682][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.636519][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.723562][ T27] audit: type=1326 audit(1757600636.653:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.077369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.367380][ T27] audit: type=1326 audit(1757600636.653:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.479425][ T27] audit: type=1326 audit(1757600636.653:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.513246][ T5792] Bluetooth: hci3: command tx timeout [ 73.518696][ T5792] Bluetooth: hci1: command tx timeout [ 73.523902][ T5104] Bluetooth: hci0: command tx timeout [ 73.558394][ T27] audit: type=1326 audit(1757600636.653:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.582595][ T5104] Bluetooth: hci2: command tx timeout [ 73.589756][ T27] audit: type=1326 audit(1757600636.653:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.611732][ T27] audit: type=1326 audit(1757600636.653:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.637883][ T27] audit: type=1326 audit(1757600636.653:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.662445][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.703595][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.711342][ T27] audit: type=1326 audit(1757600636.653:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.755985][ T27] audit: type=1326 audit(1757600636.653:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.778438][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.809340][ T27] audit: type=1326 audit(1757600636.663:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 73.868125][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.001040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.048881][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.578521][ T5889] sched: RT throttling activated [ 75.623268][ T5104] Bluetooth: hci0: command tx timeout [ 75.628725][ T5104] Bluetooth: hci1: command tx timeout [ 75.634285][ T5104] Bluetooth: hci3: command tx timeout [ 75.644210][ T5792] Bluetooth: hci2: command tx timeout [ 76.243290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.252420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.261840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.270869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.482229][ T5900] CIFS: VFS: Malformed UNC in devname [ 77.061121][ T5905] CIFS: VFS: Malformed UNC in devname [ 77.173890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 77.182897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.333395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.725731][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.787813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.796635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.819879][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.548588][ T5933] CIFS: VFS: Malformed UNC in devname [ 81.825080][ T28] cfg80211: failed to load regulatory.db [ 82.113075][ T5934] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 82.206920][ T5934] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13'. [ 82.938568][ T5943] (null): rxe_set_mtu: Set mtu to 4096 [ 83.429588][ T5943] lo speed is unknown, defaulting to 1000 [ 83.438364][ T5943] lo speed is unknown, defaulting to 1000 [ 83.446328][ T5943] lo speed is unknown, defaulting to 1000 [ 83.524137][ T5943] infiniband sz1: set active [ 83.528946][ T5943] infiniband sz1: added lo [ 83.548990][ T28] lo speed is unknown, defaulting to 1000 [ 83.593493][ T5943] RDS/IB: sz1: added [ 83.597999][ T5943] smc: adding ib device sz1 with port count 1 [ 83.604384][ T5943] smc: ib device sz1 port 1 has pnetid [ 83.613208][ T5943] lo speed is unknown, defaulting to 1000 [ 83.700046][ T5943] lo speed is unknown, defaulting to 1000 [ 83.782399][ T5943] lo speed is unknown, defaulting to 1000 [ 83.863654][ T5943] lo speed is unknown, defaulting to 1000 [ 83.963365][ T28] lo speed is unknown, defaulting to 1000 [ 88.213746][ T5973] CIFS: VFS: Malformed UNC in devname [ 88.280867][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'. [ 90.255387][ T5983] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26'. [ 90.808831][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29'. [ 92.753998][ T5787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.943226][ T5787] usb 4-1: Using ep0 maxpacket: 16 [ 92.965437][ T5787] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 92.984895][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 93.003828][ T5787] usb 4-1: Product: syz [ 93.008088][ T5787] usb 4-1: Manufacturer: syz [ 93.012766][ T5787] usb 4-1: SerialNumber: syz [ 93.038171][ T5787] usb 4-1: config 0 descriptor?? [ 93.350306][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 93.373419][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 94.783340][ T6019] sz1: rxe_newlink: already configured on lo [ 95.193288][ T5870] usb 4-1: USB disconnect, device number 2 [ 95.714073][ T6024] netlink: 68 bytes leftover after parsing attributes in process `syz.0.37'. [ 96.711751][ T6030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.38'. [ 96.970714][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 96.970813][ T27] audit: type=1326 audit(1757600889.812:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.238846][ T27] audit: type=1326 audit(1757600889.812:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.280253][ T27] audit: type=1326 audit(1757600889.812:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.510029][ T27] audit: type=1326 audit(1757600889.812:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.538048][ T27] audit: type=1326 audit(1757600889.812:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.647001][ T6042] syz.1.41[6042]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.660974][ T27] audit: type=1326 audit(1757600889.822:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.723184][ T27] audit: type=1326 audit(1757600889.822:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.767059][ T6042] loop1: detected capacity change from 0 to 512 [ 97.821712][ T27] audit: type=1326 audit(1757600889.822:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.844538][ T27] audit: type=1326 audit(1757600889.822:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.867288][ T27] audit: type=1326 audit(1757600889.822:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 97.878205][ T6042] ======================================================= [ 97.878205][ T6042] WARNING: The mand mount option has been deprecated and [ 97.878205][ T6042] and is ignored by this kernel. Remove the mand [ 97.878205][ T6042] option from the mount to silence this warning. [ 97.878205][ T6042] ======================================================= [ 98.297462][ T6042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.385652][ T6042] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.415800][ T6042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.41: bg 0: block 248: padding at end of block bitmap is not set [ 98.662608][ T6042] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.41: Failed to acquire dquot type 1 [ 99.011117][ T6042] EXT4-fs (loop1): 1 truncate cleaned up [ 99.177523][ T6042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.407416][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.45'. [ 99.780061][ T6059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.826224][ T6065] tipc: Started in network mode [ 101.831168][ T6065] tipc: Node identity fac4392e04c, cluster identity 4711 [ 101.862122][ T6065] tipc: Enabled bearer , priority 0 [ 101.881887][ T6065] syzkaller0: entered promiscuous mode [ 101.893414][ T6065] syzkaller0: entered allmulticast mode [ 101.928076][ T6065] tipc: Resetting bearer [ 101.960383][ T6064] tipc: Resetting bearer [ 102.004351][ T6064] tipc: Disabling bearer [ 102.618429][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 103.542839][ T6084] loop0: detected capacity change from 0 to 512 [ 103.614655][ T6084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.679602][ T6084] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.757436][ T6084] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.51: bg 0: block 248: padding at end of block bitmap is not set [ 103.913768][ T6084] __quota_error: 44 callbacks suppressed [ 103.913782][ T6084] Quota error (device loop0): write_blk: dquota write failed [ 103.928098][ T6084] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.938575][ T6084] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.51: Failed to acquire dquot type 1 [ 103.983682][ T6084] EXT4-fs (loop0): 1 truncate cleaned up [ 104.597258][ T6084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.270486][ T6099] (null): rxe_set_mtu: Set mtu to 4096 [ 105.279577][ T6099] rdma_rxe: rxe_newlink: failed to add lo [ 105.936758][ T27] audit: type=1326 audit(1757600898.822:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.427701][ T27] audit: type=1326 audit(1757600898.822:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.469568][ T27] audit: type=1326 audit(1757600898.832:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.491700][ T27] audit: type=1326 audit(1757600898.832:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.514031][ T27] audit: type=1326 audit(1757600898.832:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.536109][ T27] audit: type=1326 audit(1757600898.842:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.558476][ T27] audit: type=1326 audit(1757600898.842:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 106.581503][ T27] audit: type=1326 audit(1757600898.842:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 107.419760][ T6109] (null): rxe_set_mtu: Set mtu to 4096 [ 107.426874][ T6109] rdma_rxe: rxe_newlink: failed to add lo [ 108.361721][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.483605][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.984156][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 109.224764][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.244606][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.257807][ T5836] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 109.268136][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.443019][ T5836] usb 4-1: config 0 descriptor?? [ 110.643590][ T5836] usbhid 4-1:0.0: can't add hid device: -71 [ 110.662358][ T5836] usbhid: probe of 4-1:0.0 failed with error -71 [ 110.685609][ T5836] usb 4-1: USB disconnect, device number 3 [ 110.781351][ T6125] tipc: Enabled bearer , priority 0 [ 110.794875][ T6125] syzkaller0: entered promiscuous mode [ 110.800711][ T6125] syzkaller0: entered allmulticast mode [ 110.815594][ T6127] tipc: Started in network mode [ 110.821166][ T6127] tipc: Node identity aefc860521c8, cluster identity 4711 [ 110.831978][ T6127] tipc: Enabled bearer , priority 0 [ 110.870500][ T6127] tipc: Resetting bearer [ 110.894390][ T6126] tipc: Disabling bearer [ 110.916948][ T6124] tipc: Resetting bearer [ 110.981021][ T6124] tipc: Disabling bearer [ 111.051786][ T6130] tipc: Enabled bearer , priority 0 [ 111.065452][ T6130] syzkaller0: entered promiscuous mode [ 111.088082][ T6130] syzkaller0: entered allmulticast mode [ 111.149017][ T6129] tipc: Resetting bearer [ 111.186006][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.229733][ T6129] tipc: Disabling bearer [ 112.643337][ T6144] (null): rxe_set_mtu: Set mtu to 4096 [ 112.649018][ T6144] rdma_rxe: rxe_newlink: failed to add lo [ 112.870258][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.926326][ T6152] tipc: Enabled bearer , priority 0 [ 112.975540][ T6152] tipc: Resetting bearer [ 113.143350][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.207748][ T6151] tipc: Disabling bearer [ 113.213720][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 113.237380][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 113.249741][ T8] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 113.259939][ T8] usb 1-1: Product: syz [ 113.264758][ T8] usb 1-1: Manufacturer: syz [ 113.269522][ T8] usb 1-1: SerialNumber: syz [ 113.278726][ T8] usb 1-1: config 0 descriptor?? [ 113.373642][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 113.411878][ T5870] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 113.426833][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 113.437370][ T5870] usb 2-1: Product: syz [ 113.441583][ T5870] usb 2-1: Manufacturer: syz [ 113.447031][ T5870] usb 2-1: SerialNumber: syz [ 113.462635][ T5870] usb 2-1: config 0 descriptor?? [ 113.569907][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 113.579197][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 114.664518][ T5870] usb 1-1: USB disconnect, device number 2 [ 114.684982][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 114.722580][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 115.845238][ T6176] tipc: Enabled bearer , priority 0 [ 115.869284][ T6176] tipc: Resetting bearer [ 115.903771][ T6175] tipc: Disabling bearer [ 117.256706][ T6183] (null): rxe_set_mtu: Set mtu to 4096 [ 117.263010][ T6183] rdma_rxe: rxe_newlink: failed to add lo [ 117.450243][ T8] usb 2-1: USB disconnect, device number 2 [ 118.688315][ T6193] netlink: 68 bytes leftover after parsing attributes in process `syz.3.78'. [ 119.223620][ T6209] (null): rxe_set_mtu: Set mtu to 4096 [ 119.230594][ T6209] rdma_rxe: rxe_newlink: failed to add lo [ 120.350793][ T6218] loop2: detected capacity change from 0 to 512 [ 120.399008][ T6218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.418763][ T6218] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.439025][ T6218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.85: bg 0: block 248: padding at end of block bitmap is not set [ 120.486472][ T6218] __quota_error: 18 callbacks suppressed [ 120.486576][ T6218] Quota error (device loop2): write_blk: dquota write failed [ 120.501213][ T6218] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 120.511427][ T6218] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.85: Failed to acquire dquot type 1 [ 120.580543][ T6218] EXT4-fs (loop2): 1 truncate cleaned up [ 120.595089][ T6218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.393842][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.482252][ T6232] netlink: 188 bytes leftover after parsing attributes in process `syz.0.87'. [ 122.799558][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.663308][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 123.821693][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 123.835993][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 123.857464][ T9] usb 4-1: Product: syz [ 123.861677][ T9] usb 4-1: Manufacturer: syz [ 123.871694][ T9] usb 4-1: SerialNumber: syz [ 123.919269][ T9] usb 4-1: config 0 descriptor?? [ 124.613383][ T27] audit: type=1326 audit(1757600917.382:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 124.667671][ T27] audit: type=1326 audit(1757600917.382:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.354292][ T27] audit: type=1326 audit(1757600917.382:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.376588][ T27] audit: type=1326 audit(1757600917.382:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.399189][ T27] audit: type=1326 audit(1757600917.382:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.517368][ T27] audit: type=1326 audit(1757600917.392:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.599142][ T27] audit: type=1326 audit(1757600917.392:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.687005][ T27] audit: type=1326 audit(1757600917.392:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.763396][ T27] audit: type=1326 audit(1757600917.392:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.818497][ T27] audit: type=1326 audit(1757600917.392:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.962166][ T27] audit: type=1326 audit(1757600917.392:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 125.985553][ T5787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.051254][ T27] audit: type=1326 audit(1757600917.392:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 126.117590][ T9] usb 4-1: can't set config #0, error -71 [ 126.154107][ T27] audit: type=1326 audit(1757600917.392:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 126.185715][ T9] usb 4-1: USB disconnect, device number 4 [ 126.203855][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 126.251476][ T5787] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 126.268025][ T27] audit: type=1326 audit(1757600917.392:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 126.294845][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.347843][ T5787] usb 3-1: config 0 descriptor?? [ 126.563864][ T5787] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 126.645009][ T5787] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 126.663240][ T5787] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 126.672910][ T27] audit: type=1326 audit(1757600917.392:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 127.031512][ T6281] netlink: 'syz.1.96': attribute type 10 has an invalid length. [ 127.197682][ T6281] team0: Port device dummy0 added [ 130.392659][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 131.340374][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 131.340387][ T27] audit: type=1326 audit(1757600924.282:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.393302][ T27] audit: type=1326 audit(1757600924.282:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.415777][ T27] audit: type=1326 audit(1757600924.312:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.439040][ T27] audit: type=1326 audit(1757600924.322:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f9478ebe3 code=0x7ffc0000 [ 131.465154][ T27] audit: type=1326 audit(1757600924.322:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f9478ebe3 code=0x7ffc0000 [ 131.547760][ T6317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.100'. [ 131.588658][ T27] audit: type=1326 audit(1757600924.332:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.676231][ T27] audit: type=1326 audit(1757600924.332:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.790114][ T27] audit: type=1326 audit(1757600924.412:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.946566][ T27] audit: type=1326 audit(1757600924.412:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 131.976163][ T27] audit: type=1326 audit(1757600924.412:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 133.204648][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.211015][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.215907][ T5870] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.636568][ T6358] tipc: Started in network mode [ 134.641519][ T6358] tipc: Node identity 2ee44c39ca7, cluster identity 4711 [ 134.695834][ T6358] tipc: Enabled bearer , priority 0 [ 134.724507][ T5870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.733517][ T5870] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.751781][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.633842][ T6358] tipc: Resetting bearer [ 135.681418][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 135.747641][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 135.774891][ T9] tipc: Node number set to 3834924089 [ 135.817934][ T5870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.823216][ T6356] tipc: Disabling bearer [ 135.836417][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.861817][ T5870] usb 1-1: Product: syz [ 135.877440][ T5870] usb 1-1: Manufacturer: syz [ 135.900909][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 135.913434][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 135.946054][ T5870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 135.952122][ T5870] cdc_wdm 1-1:1.0: Unknown control protocol [ 137.264316][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 137.598797][ T6386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.595508][ T8] usb 1-1: USB disconnect, device number 3 [ 138.961900][ T27] kauditd_printk_skb: 90 callbacks suppressed [ 138.961937][ T27] audit: type=1326 audit(1757601160.863:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 139.665924][ T6399] macsec1: entered promiscuous mode [ 139.673550][ T27] audit: type=1326 audit(1757601160.863:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 139.787911][ T6399] macsec1: entered allmulticast mode [ 139.858022][ T27] audit: type=1326 audit(1757601160.863:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 139.971540][ T27] audit: type=1326 audit(1757601160.873:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.035207][ T27] audit: type=1326 audit(1757601160.873:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.280830][ T27] audit: type=1326 audit(1757601160.873:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.508935][ T27] audit: type=1326 audit(1757601160.873:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.574430][ T27] audit: type=1326 audit(1757601160.873:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.607466][ T27] audit: type=1326 audit(1757601160.883:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.649954][ T27] audit: type=1326 audit(1757601160.883:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 140.999559][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.120'. [ 141.033455][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.814635][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 141.822236][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 141.831544][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.857665][ T9] usb 4-1: config 0 descriptor?? [ 142.073757][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 142.402399][ T6438] syzkaller0: entered promiscuous mode [ 142.427674][ T6438] syzkaller0: entered allmulticast mode [ 143.582833][ T6458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.122'. [ 145.453078][ T6463] macsec1: entered promiscuous mode [ 145.470961][ T6463] macsec1: entered allmulticast mode [ 145.496626][ T6464] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 145.553927][ T6464] team0: Port device dummy0 added [ 147.821601][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 147.821616][ T27] audit: type=1326 audit(1757601398.762:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.160543][ T27] audit: type=1326 audit(1757601398.762:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.183491][ T27] audit: type=1326 audit(1757601398.762:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.208479][ T27] audit: type=1326 audit(1757601398.762:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 148.233300][ T27] audit: type=1326 audit(1757601398.802:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 148.279066][ T27] audit: type=1326 audit(1757601398.802:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.363319][ T27] audit: type=1326 audit(1757601398.862:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.393297][ T27] audit: type=1326 audit(1757601398.862:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.416862][ T27] audit: type=1326 audit(1757601398.862:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.492836][ T27] audit: type=1326 audit(1757601399.202:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 148.883300][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.076185][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 149.106247][ T28] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 149.133276][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.159355][ T28] usb 1-1: config 0 descriptor?? [ 149.386340][ T28] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 149.401222][ T6503] netlink: 68 bytes leftover after parsing attributes in process `syz.1.136'. [ 149.882197][ T6509] macsec1: entered promiscuous mode [ 149.888085][ T6509] macsec1: entered allmulticast mode [ 149.906923][ T6509] netlink: 'syz.2.139': attribute type 10 has an invalid length. [ 149.938470][ T6509] team0: Port device dummy0 added [ 149.983218][ T6429] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.173560][ T6429] usb 2-1: Using ep0 maxpacket: 32 [ 150.201545][ T6511] Zero length message leads to an empty skb [ 150.209742][ T6429] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.222907][ T6429] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.243575][ T6429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.287076][ T6429] usb 2-1: config 0 descriptor?? [ 152.977546][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 152.977560][ T27] audit: type=1326 audit(1757601403.922:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 153.012642][ T27] audit: type=1326 audit(1757601403.952:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 153.040251][ T27] audit: type=1326 audit(1757601403.952:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 153.900143][ T27] audit: type=1326 audit(1757601403.952:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 [ 154.067583][ T5870] usb 2-1: USB disconnect, device number 3 [ 154.182397][ T27] audit: type=1326 audit(1757601403.972:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 [ 154.206920][ T27] audit: type=1326 audit(1757601404.882:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 154.230524][ T27] audit: type=1326 audit(1757601404.882:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 154.256094][ T27] audit: type=1326 audit(1757601405.012:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 154.999112][ T6557] fuse: Bad value for 'fd' [ 155.094202][ T6561] tipc: Enabled bearer , priority 0 [ 155.102956][ T6561] syzkaller0: entered promiscuous mode [ 155.109112][ T6561] syzkaller0: entered allmulticast mode [ 155.148516][ T6561] tipc: Resetting bearer [ 155.180302][ T6560] tipc: Resetting bearer [ 155.208105][ T27] audit: type=1326 audit(1757601406.152:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 155.274648][ T6560] tipc: Disabling bearer [ 158.565224][ T6574] netlink: 68 bytes leftover after parsing attributes in process `syz.1.159'. [ 158.726314][ T6598] fuse: Bad value for 'fd' [ 158.739134][ T6599] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 160.171957][ T6613] netlink: 'syz.1.169': attribute type 10 has an invalid length. [ 160.201353][ T6612] tipc: Started in network mode [ 160.206717][ T6612] tipc: Node identity 12754f3232f2, cluster identity 4711 [ 160.220886][ T6612] tipc: Enabled bearer , priority 0 [ 160.263668][ T6612] syzkaller0: entered promiscuous mode [ 160.271487][ T6612] syzkaller0: entered allmulticast mode [ 160.320224][ T6612] tipc: Resetting bearer [ 160.335312][ T6611] tipc: Resetting bearer [ 160.367440][ T6611] tipc: Disabling bearer [ 161.312811][ T6633] fuse: Bad value for 'fd' [ 162.923391][ T6429] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.115145][ T6429] usb 2-1: Using ep0 maxpacket: 16 [ 163.133728][ T6429] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 163.142992][ T6429] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 163.151514][ T6429] usb 2-1: Product: syz [ 163.155975][ T6429] usb 2-1: Manufacturer: syz [ 163.160605][ T6429] usb 2-1: SerialNumber: syz [ 163.168069][ T6429] usb 2-1: config 0 descriptor?? [ 165.571094][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 165.620782][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 166.869163][ T5822] usb 2-1: USB disconnect, device number 4 [ 166.983606][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 167.317302][ T6714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.448869][ T6733] syzkaller0: entered promiscuous mode [ 169.459280][ T6733] syzkaller0: entered allmulticast mode [ 169.513320][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.753331][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 169.806677][ T787] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.850369][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.630378][ T787] usb 2-1: config 0 descriptor?? [ 170.820784][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 170.939153][ T787] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 171.163240][ T6747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.517253][ T6817] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 177.903270][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 178.477947][ T6830] loop0: detected capacity change from 0 to 512 [ 178.528652][ T6830] EXT4-fs: Ignoring removed i_version option [ 178.541129][ T6830] EXT4-fs: Ignoring removed nobh option [ 178.548103][ T6830] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 178.576004][ T6830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.631388][ T6830] EXT4-fs (loop0): 1 truncate cleaned up [ 178.677619][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.995168][ T6843] (null): rxe_set_mtu: Set mtu to 4096 [ 179.996317][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.001059][ T6843] rdma_rxe: rxe_newlink: failed to add lo [ 180.924801][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.249'. [ 182.154782][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 182.877787][ T6886] fuse: Bad value for 'fd' [ 183.755587][ T6892] fuse: Bad value for 'fd' [ 183.970441][ T6898] loop0: detected capacity change from 0 to 512 [ 183.981253][ T6898] EXT4-fs: Ignoring removed i_version option [ 183.989499][ T6898] EXT4-fs: Ignoring removed nobh option [ 184.255394][ T6898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.567169][ T6898] EXT4-fs (loop0): 1 truncate cleaned up [ 184.583452][ T6898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.656787][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.081604][ T6925] fuse: Bad value for 'fd' [ 186.253507][ T6928] binder: 6927:6928 ioctl 541b 200000000140 returned -22 [ 189.252253][ T5787] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 189.267953][ T787] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 190.631375][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 190.710172][ T28] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 190.725717][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 190.744422][ T28] dvb_usb_az6027: probe of 1-1:0.0 failed with error -2 [ 190.745494][ T5787] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110 [ 190.758998][ T787] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 [ 190.774608][ T28] usb 1-1: USB disconnect, device number 4 [ 190.780905][ T9] dvb_usb_az6027: probe of 4-1:0.0 failed with error -2 [ 190.788319][ T787] usb 2-1: USB disconnect, device number 5 [ 190.804051][ T5787] usb 3-1: USB disconnect, device number 2 [ 191.027596][ T9] usb 4-1: USB disconnect, device number 5 [ 191.423240][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.643207][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 191.672622][ T28] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 191.699030][ T28] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 191.914960][ T28] usb 1-1: Product: syz [ 191.919233][ T28] usb 1-1: Manufacturer: syz [ 191.924014][ T28] usb 1-1: SerialNumber: syz [ 191.933422][ T28] usb 1-1: config 0 descriptor?? [ 192.281114][ T28] usb 1-1: can't set config #0, error -71 [ 192.293251][ T54] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 192.310684][ T28] usb 1-1: USB disconnect, device number 5 [ 192.503295][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 192.512230][ T54] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 192.533202][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.564669][ T54] usb 4-1: config 0 descriptor?? [ 192.995590][ T54] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 193.051662][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.062009][ T54] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 193.070638][ T54] usb 4-1: media controller created [ 193.092721][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.065484][ T54] az6027: usb out operation failed. (-71) [ 194.072688][ T54] az6027: usb out operation failed. (-71) [ 194.078752][ T54] stb0899_attach: Driver disabled by Kconfig [ 194.103394][ T54] az6027: no front-end attached [ 194.103394][ T54] [ 194.132442][ T54] az6027: usb out operation failed. (-71) [ 194.143268][ T54] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 194.152249][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 194.351410][ T54] dvb-usb: schedule remote query interval to 400 msecs. [ 194.358607][ T54] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 194.388098][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394641][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.496060][ T54] usb 4-1: USB disconnect, device number 6 [ 195.357325][ T27] audit: type=1326 audit(1757601904.294:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 195.365765][ T54] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 195.458100][ T27] audit: type=1326 audit(1757601904.304:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 195.483015][ T27] audit: type=1326 audit(1757601904.334:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 195.622237][ T27] audit: type=1326 audit(1757601904.354:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f9478ebe3 code=0x7ffc0000 [ 195.705512][ T27] audit: type=1326 audit(1757601904.354:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f9478ebe3 code=0x7ffc0000 [ 195.733213][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 195.766980][ T27] audit: type=1326 audit(1757601904.354:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 195.833248][ T27] audit: type=1326 audit(1757601904.354:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 195.943331][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 196.003755][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 196.012861][ T23] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 196.050614][ T23] usb 1-1: Product: syz [ 196.073187][ T23] usb 1-1: Manufacturer: syz [ 196.095586][ T23] usb 1-1: SerialNumber: syz [ 196.146556][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 196.152645][ T23] usb 1-1: config 0 descriptor?? [ 196.445377][ T7041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.274765][ T7042] syzkaller0: entered promiscuous mode [ 197.423372][ T7042] syzkaller0: entered allmulticast mode [ 197.446633][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 197.482685][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 198.059137][ T27] audit: type=1326 audit(1757601907.004:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 198.091660][ T27] audit: type=1326 audit(1757601907.004:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 198.182581][ T27] audit: type=1326 audit(1757601907.064:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 198.393191][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 199.546497][ T7064] (null): rxe_set_mtu: Set mtu to 4096 [ 199.552363][ T7064] rdma_rxe: rxe_newlink: failed to add lo [ 199.683507][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 199.842056][ T5870] usb 1-1: USB disconnect, device number 6 [ 199.970346][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 200.107845][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 200.157704][ T9] usb 2-1: Product: syz [ 200.161977][ T9] usb 2-1: Manufacturer: syz [ 200.181236][ T9] usb 2-1: SerialNumber: syz [ 200.348411][ T7074] macsec1: entered promiscuous mode [ 200.354879][ T7074] macsec1: entered allmulticast mode [ 201.107719][ T9] usb 2-1: config 0 descriptor?? [ 201.114457][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.317'. [ 201.334358][ T7074] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 203.317071][ T7074] team0: Port device dummy0 added [ 204.338965][ T9] usb 2-1: can't set config #0, error -71 [ 204.380680][ T9] usb 2-1: USB disconnect, device number 6 [ 204.784463][ T7103] loop2: detected capacity change from 0 to 512 [ 204.794655][ T7103] EXT4-fs: Ignoring removed i_version option [ 204.807547][ T7103] EXT4-fs: Ignoring removed nobh option [ 204.844690][ T7103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.967554][ T7103] EXT4-fs (loop2): 1 truncate cleaned up [ 204.990458][ T7103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.053282][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 205.053295][ T27] audit: type=1326 audit(1757601913.974:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 205.119999][ T27] audit: type=1326 audit(1757601913.984:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 205.142734][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.151621][ T27] audit: type=1326 audit(1757601913.984:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 205.265237][ T27] audit: type=1326 audit(1757601913.984:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f009b58ebe3 code=0x7ffc0000 [ 205.466721][ T27] audit: type=1326 audit(1757601914.044:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f009b58ebe3 code=0x7ffc0000 [ 205.492865][ T27] audit: type=1326 audit(1757601914.114:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 206.215197][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 206.224543][ T27] audit: type=1326 audit(1757601914.114:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 206.265501][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.281036][ T787] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 206.310997][ T787] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 206.367955][ T787] usb 2-1: Product: syz [ 206.372179][ T787] usb 2-1: Manufacturer: syz [ 206.402224][ T787] usb 2-1: SerialNumber: syz [ 206.431272][ T787] usb 2-1: config 0 descriptor?? [ 206.434432][ T7117] CIFS: VFS: Malformed UNC in devname [ 206.880971][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 206.951164][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 206.990680][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 207.287527][ T7129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.180619][ T6748] usb 2-1: USB disconnect, device number 7 [ 208.286042][ T7135] CIFS: VFS: Malformed UNC in devname [ 209.194974][ T7144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.757810][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 209.773273][ T54] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.841626][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 210.257343][ T7165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.926176][ T54] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 210.936582][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.947476][ T54] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.961831][ T54] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.975944][ T54] usb 1-1: Product: syz [ 210.994111][ T54] usb 1-1: Manufacturer: syz [ 210.998745][ T54] usb 1-1: SerialNumber: syz [ 211.097284][ T54] usb 1-1: config 0 descriptor?? [ 211.128182][ T54] usb 1-1: selecting invalid altsetting 0 [ 211.303233][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.333192][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.563278][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 211.572237][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 211.584170][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.598093][ T9] usb 2-1: config 0 descriptor?? [ 211.643255][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 211.659844][ T787] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 211.669700][ T787] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 211.678515][ T787] usb 4-1: Product: syz [ 211.683016][ T787] usb 4-1: Manufacturer: syz [ 211.688371][ T787] usb 4-1: SerialNumber: syz [ 211.698306][ T787] usb 4-1: config 0 descriptor?? [ 211.810651][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 211.821265][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.832170][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 211.839731][ T9] usb 2-1: media controller created [ 211.861613][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.921253][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 211.932492][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 212.019541][ T9] az6027: usb out operation failed. (-71) [ 212.025714][ T9] az6027: usb out operation failed. (-71) [ 212.040265][ T9] stb0899_attach: Driver disabled by Kconfig [ 212.050698][ T9] az6027: no front-end attached [ 212.050698][ T9] [ 212.064997][ T9] az6027: usb out operation failed. (-71) [ 212.077424][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 212.085907][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 212.108480][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 212.130651][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 212.165551][ T9] usb 2-1: USB disconnect, device number 8 [ 212.214964][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.664141][ T9] usb 4-1: USB disconnect, device number 7 [ 213.675585][ T54] usb 1-1: USB disconnect, device number 7 [ 213.686604][ T7146] delete_channel: no stack [ 213.818264][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 214.136016][ T7184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.776935][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.993910][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 216.005265][ T7211] CIFS: VFS: Malformed UNC in devname [ 216.014514][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 216.029771][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.253703][ T9] usb 1-1: config 0 descriptor?? [ 216.482685][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 216.501180][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.524847][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 216.533460][ T9] usb 1-1: media controller created [ 216.561362][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.685342][ T9] az6027: usb out operation failed. (-71) [ 216.713762][ T9] az6027: usb out operation failed. (-71) [ 216.719544][ T9] stb0899_attach: Driver disabled by Kconfig [ 216.725722][ T9] az6027: no front-end attached [ 216.725722][ T9] [ 216.733535][ T9] az6027: usb out operation failed. (-71) [ 216.853642][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 217.074131][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 217.137878][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 217.154085][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 217.209660][ T9] usb 1-1: USB disconnect, device number 8 [ 217.356320][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 217.546018][ T5836] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 217.688365][ T7230] syzkaller0: entered promiscuous mode [ 217.703399][ T7230] syzkaller0: entered allmulticast mode [ 217.771998][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 217.847219][ T5836] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 217.866477][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 217.903415][ T5836] usb 4-1: Product: syz [ 217.914536][ T5836] usb 4-1: Manufacturer: syz [ 217.919308][ T5836] usb 4-1: SerialNumber: syz [ 217.954315][ T5836] usb 4-1: config 0 descriptor?? [ 218.243916][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 218.343989][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 220.243780][ T54] usb 4-1: USB disconnect, device number 8 [ 221.893250][ T5836] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.443255][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 222.454494][ T5836] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 222.473364][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.483970][ T5836] usb 3-1: config 0 descriptor?? [ 222.705699][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 222.723565][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.736094][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 222.743917][ T5836] usb 3-1: media controller created [ 222.771391][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.904912][ T5836] az6027: usb out operation failed. (-71) [ 222.941293][ T5836] az6027: usb out operation failed. (-71) [ 222.958937][ T5836] stb0899_attach: Driver disabled by Kconfig [ 222.983205][ T5836] az6027: no front-end attached [ 222.983205][ T5836] [ 222.991747][ T5836] az6027: usb out operation failed. (-71) [ 222.997707][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 223.012462][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 223.027686][ T5836] dvb-usb: schedule remote query interval to 400 msecs. [ 223.036952][ T5836] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 223.048535][ T5836] usb 3-1: USB disconnect, device number 3 [ 223.127864][ T5836] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 223.190298][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 223.206277][ T7281] batadv0: entered promiscuous mode [ 223.211978][ T7281] macvtap1: entered promiscuous mode [ 223.217900][ T7281] macvtap1: entered allmulticast mode [ 223.223384][ T7281] batadv0: entered allmulticast mode [ 223.229622][ T7281] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 223.249598][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 223.530064][ T7290] netlink: 'syz.1.378': attribute type 10 has an invalid length. [ 224.303278][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 224.503344][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 224.583312][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 224.637348][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 224.654342][ T9] usb 3-1: Product: syz [ 224.682704][ T9] usb 3-1: Manufacturer: syz [ 224.688526][ T9] usb 3-1: SerialNumber: syz [ 224.705682][ T9] usb 3-1: config 0 descriptor?? [ 225.056814][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 225.065746][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 225.633204][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.828578][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 225.838955][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 225.855439][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.867882][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.888767][ T9] usb 4-1: Product: syz [ 225.899916][ T9] usb 4-1: Manufacturer: syz [ 225.934439][ T9] usb 4-1: SerialNumber: syz [ 225.947136][ T9] usb 4-1: config 0 descriptor?? [ 225.972763][ T9] usb 4-1: selecting invalid altsetting 0 [ 226.753840][ T6748] usb 3-1: USB disconnect, device number 4 [ 226.988357][ T7327] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 227.273197][ T6748] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 227.463232][ T6748] usb 3-1: Using ep0 maxpacket: 32 [ 227.473943][ T6748] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 227.483326][ T6748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.516202][ T6748] usb 3-1: config 0 descriptor?? [ 227.726188][ T6748] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 227.738900][ T6748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.770735][ T6748] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 227.796469][ T6748] usb 3-1: media controller created [ 227.848446][ T6748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.928348][ T6748] az6027: usb out operation failed. (-71) [ 227.934674][ T6748] az6027: usb out operation failed. (-71) [ 227.946214][ T6748] stb0899_attach: Driver disabled by Kconfig [ 227.967096][ T6748] az6027: no front-end attached [ 227.967096][ T6748] [ 227.994424][ T6748] az6027: usb out operation failed. (-71) [ 228.008170][ T6748] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 228.046795][ T6748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 228.106430][ T6748] dvb-usb: schedule remote query interval to 400 msecs. [ 228.128543][ T6748] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 228.168084][ T6748] usb 3-1: USB disconnect, device number 5 [ 228.485080][ T6748] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 228.514092][ T5836] usb 4-1: USB disconnect, device number 9 [ 228.527107][ T7315] delete_channel: no stack [ 228.754506][ T27] audit: type=1326 audit(1757602395.691:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 228.846624][ T27] audit: type=1326 audit(1757602395.691:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 228.901187][ T27] audit: type=1326 audit(1757602395.691:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 228.923930][ T27] audit: type=1326 audit(1757602395.691:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f009b58ebe3 code=0x7ffc0000 [ 228.957479][ T27] audit: type=1326 audit(1757602395.691:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f009b58ebe3 code=0x7ffc0000 [ 228.980747][ T7347] loop8: detected capacity change from 0 to 7 [ 229.017633][ T7347] Dev loop8: unable to read RDB block 7 [ 229.024608][ T27] audit: type=1326 audit(1757602395.701:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 229.040393][ T7347] loop8: unable to read partition table [ 229.061164][ T7347] loop8: partition table beyond EOD, truncated [ 229.083493][ T7347] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 229.296140][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.382278][ T7357] loop3: detected capacity change from 0 to 512 [ 229.396627][ T7357] EXT4-fs: Ignoring removed i_version option [ 229.423254][ T7357] EXT4-fs: Ignoring removed nobh option [ 229.452791][ T7357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.481444][ T7357] EXT4-fs (loop3): 1 truncate cleaned up [ 229.494052][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 229.535798][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 229.545071][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.559058][ T9] usb 1-1: config 0 descriptor?? [ 229.572990][ T7357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.771570][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 229.885906][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.906262][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 230.663227][ T9] usb 1-1: media controller created [ 230.689998][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.725153][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.754523][ T9] az6027: usb out operation failed. (-71) [ 230.768866][ T9] az6027: usb out operation failed. (-71) [ 230.774703][ T9] stb0899_attach: Driver disabled by Kconfig [ 230.781029][ T9] az6027: no front-end attached [ 230.781029][ T9] [ 230.805324][ T9] az6027: usb out operation failed. (-71) [ 230.811111][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 230.844884][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 230.894719][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 230.942340][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 231.017435][ T9] usb 1-1: USB disconnect, device number 9 [ 231.030859][ T7367] tipc: Enabled bearer , priority 0 [ 231.045554][ T7367] syzkaller0: entered promiscuous mode [ 231.052879][ T7367] syzkaller0: entered allmulticast mode [ 231.107091][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 231.121565][ T7367] tipc: Resetting bearer [ 231.179683][ T7366] tipc: Resetting bearer [ 231.242320][ T7366] tipc: Disabling bearer [ 231.765485][ T7388] loop2: detected capacity change from 0 to 512 [ 231.808391][ T7388] EXT4-fs: Ignoring removed i_version option [ 231.869204][ T7388] EXT4-fs: Ignoring removed nobh option [ 231.910292][ T7388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 232.081505][ T7388] EXT4-fs (loop2): 1 truncate cleaned up [ 232.103082][ T7388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.289870][ T6748] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 232.483357][ T6748] usb 1-1: Using ep0 maxpacket: 32 [ 232.579125][ T6748] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 232.620128][ T6748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.641781][ T6748] usb 1-1: config 0 descriptor?? [ 232.729913][ T5870] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.904633][ T6748] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 232.915935][ T5870] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 232.937546][ T6748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.953227][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.968762][ T5870] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 232.978918][ T6748] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 232.996504][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.005393][ T6748] usb 1-1: media controller created [ 233.023338][ T5870] usb 4-1: Product: syz [ 233.027548][ T5870] usb 4-1: Manufacturer: syz [ 233.048041][ T6748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.066575][ T5870] usb 4-1: SerialNumber: syz [ 233.105278][ T5870] usb 4-1: config 0 descriptor?? [ 233.149038][ T6748] az6027: usb out operation failed. (-71) [ 233.166316][ T5870] usb 4-1: selecting invalid altsetting 0 [ 233.173005][ T6748] az6027: usb out operation failed. (-71) [ 233.184522][ T6748] stb0899_attach: Driver disabled by Kconfig [ 233.201032][ T6748] az6027: no front-end attached [ 233.201032][ T6748] [ 233.231814][ T6748] az6027: usb out operation failed. (-71) [ 233.271451][ T6748] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 233.284203][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.304850][ T6748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 233.362309][ T6748] dvb-usb: schedule remote query interval to 400 msecs. [ 233.397308][ T6748] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 233.430420][ T6748] usb 1-1: USB disconnect, device number 10 [ 233.569903][ T6748] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 233.738562][ T7411] tipc: Enabled bearer , priority 0 [ 233.768696][ T7410] syzkaller0: entered promiscuous mode [ 233.779390][ T7410] syzkaller0: entered allmulticast mode [ 233.833695][ T7410] tipc: Resetting bearer [ 233.854775][ T7409] tipc: Resetting bearer [ 233.878706][ T7409] tipc: Disabling bearer [ 234.444977][ T7421] tipc: Enabled bearer , priority 0 [ 235.427331][ T7421] syzkaller0: entered promiscuous mode [ 235.432849][ T7421] syzkaller0: entered allmulticast mode [ 235.522087][ T7428] tipc: Resetting bearer [ 235.563539][ T9] tipc: Node number set to 4261689646 [ 236.648593][ T7420] tipc: Resetting bearer [ 236.689741][ T7420] tipc: Disabling bearer [ 236.904723][ T54] usb 4-1: USB disconnect, device number 10 [ 236.920746][ T7398] delete_channel: no stack [ 236.925628][ T5836] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 236.950004][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 237.153276][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 237.210600][ T5836] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.237924][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.259896][ T5836] usb 1-1: config 0 descriptor?? [ 237.490591][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 237.561419][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.663984][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 237.720198][ T5836] usb 1-1: media controller created [ 237.780234][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.817533][ T5836] az6027: usb out operation failed. (-71) [ 237.828458][ T5836] az6027: usb out operation failed. (-71) [ 237.841449][ T5836] stb0899_attach: Driver disabled by Kconfig [ 237.875758][ T5836] az6027: no front-end attached [ 237.875758][ T5836] [ 237.948736][ T5836] az6027: usb out operation failed. (-71) [ 237.958175][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 238.007824][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 238.055511][ T5836] dvb-usb: schedule remote query interval to 400 msecs. [ 238.093800][ T5836] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.157286][ T5836] usb 1-1: USB disconnect, device number 11 [ 238.332717][ T5836] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 240.573764][ T7468] sz1: rxe_newlink: already configured on lo [ 240.923277][ T5836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 240.938427][ T7474] binder: 7473:7474 ioctl 541b 200000000140 returned -22 [ 241.129897][ T5836] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 241.153221][ T5836] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.168121][ T5836] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 241.178510][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 241.186959][ T5836] usb 4-1: Product: syz [ 241.192324][ T5836] usb 4-1: Manufacturer: syz [ 241.197107][ T5836] usb 4-1: SerialNumber: syz [ 241.205447][ T5836] usb 4-1: config 0 descriptor?? [ 241.221406][ T5836] usb 4-1: selecting invalid altsetting 0 [ 242.075964][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 242.115704][ T7480] loop2: detected capacity change from 0 to 512 [ 242.122948][ T7480] EXT4-fs: Ignoring removed i_version option [ 242.145334][ T7480] EXT4-fs: Ignoring removed nobh option [ 242.162669][ T7480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.178619][ T7480] EXT4-fs (loop2): 1 truncate cleaned up [ 242.190854][ T7480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.138186][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.193282][ T6748] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 243.335079][ T5836] usb 4-1: USB disconnect, device number 11 [ 243.342985][ T7463] delete_channel: no stack [ 243.447436][ T6748] usb 2-1: Using ep0 maxpacket: 32 [ 243.455312][ T6748] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 243.464760][ T6748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.502258][ T6748] usb 2-1: config 0 descriptor?? [ 243.725005][ T6748] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 243.748193][ T6748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.773593][ T6748] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 243.794478][ T6748] usb 2-1: media controller created [ 243.859314][ T6748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.933983][ T6748] az6027: usb out operation failed. (-71) [ 243.943379][ T6748] az6027: usb out operation failed. (-71) [ 243.957416][ T6748] stb0899_attach: Driver disabled by Kconfig [ 243.973958][ T6748] az6027: no front-end attached [ 243.973958][ T6748] [ 243.990050][ T6748] az6027: usb out operation failed. (-71) [ 244.001766][ T6748] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 244.022396][ T6748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 244.031495][ T7501] tipc: Enabled bearer , priority 0 [ 244.052412][ T6748] dvb-usb: schedule remote query interval to 400 msecs. [ 244.061390][ T7501] syzkaller0: entered promiscuous mode [ 244.068420][ T6748] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 244.082961][ T7501] syzkaller0: entered allmulticast mode [ 244.092881][ T6748] usb 2-1: USB disconnect, device number 9 [ 244.121061][ T7501] tipc: Resetting bearer [ 244.141764][ T7500] tipc: Resetting bearer [ 244.169680][ T7500] tipc: Disabling bearer [ 244.213734][ T6748] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 244.914767][ T7517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.683200][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.852229][ T7527] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 245.873236][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 245.883499][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.897848][ T787] usb 2-1: config 4 interface 0 has no altsetting 0 [ 245.921736][ T787] usb 2-1: string descriptor 0 read error: -22 [ 245.932428][ T787] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 245.973329][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.999923][ T787] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 246.035368][ T787] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.060973][ T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 246.076072][ T787] usb 2-1: media controller created [ 246.099178][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.262792][ T7529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.457'. [ 246.953238][ T54] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 247.133234][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 247.142734][ T54] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 247.174210][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.194020][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 247.206542][ T54] usb 1-1: config 0 descriptor?? [ 247.273064][ T787] usb 2-1: USB disconnect, device number 10 [ 247.279943][ T7541] tipc: Enabled bearer , priority 0 [ 247.303402][ T7541] syzkaller0: entered promiscuous mode [ 247.317224][ T7541] syzkaller0: entered allmulticast mode [ 247.364097][ T7541] tipc: Resetting bearer [ 247.377636][ T7540] tipc: Resetting bearer [ 247.417690][ T7540] tipc: Disabling bearer [ 247.429932][ T54] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 247.444802][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.466490][ T54] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 247.474863][ T54] usb 1-1: media controller created [ 247.521061][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.632107][ T54] az6027: usb out operation failed. (-71) [ 247.642845][ T54] az6027: usb out operation failed. (-71) [ 247.648898][ T54] stb0899_attach: Driver disabled by Kconfig [ 247.655353][ T54] az6027: no front-end attached [ 247.655353][ T54] [ 247.674235][ T54] az6027: usb out operation failed. (-71) [ 247.680003][ T54] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 247.698430][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 247.717479][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 247.732472][ T54] dvb-usb: schedule remote query interval to 400 msecs. [ 247.752423][ T54] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 247.791088][ T54] usb 1-1: USB disconnect, device number 12 [ 247.888770][ T54] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 248.340982][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 248.550211][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 248.577998][ T5822] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 248.590222][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 248.706116][ T5822] usb 3-1: Product: syz [ 248.770075][ T5822] usb 3-1: Manufacturer: syz [ 248.774976][ T5822] usb 3-1: SerialNumber: syz [ 248.945598][ T5822] usb 3-1: config 0 descriptor?? [ 249.412480][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 251.294473][ T787] usb 3-1: USB disconnect, device number 6 [ 252.241512][ T7593] CIFS: VFS: Malformed UNC in devname [ 252.260625][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 253.265816][ T7602] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 253.513638][ T7604] binder: 7603:7604 ioctl 541b 200000000140 returned -22 [ 253.971781][ T7614] binder: 7613:7614 ioctl 541b 200000000140 returned -22 [ 255.036872][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 255.317078][ T7630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.824976][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.831366][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.660604][ T7641] loop0: detected capacity change from 0 to 512 [ 256.681191][ T7641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.818922][ T7641] EXT4-fs (loop0): orphan cleanup on readonly fs [ 256.842580][ T7641] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.492: bg 0: block 248: padding at end of block bitmap is not set [ 256.859154][ T7641] Quota error (device loop0): write_blk: dquota write failed [ 256.867009][ T7641] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 256.877350][ T7641] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.492: Failed to acquire dquot type 1 [ 256.896645][ T7641] EXT4-fs (loop0): 1 truncate cleaned up [ 256.910083][ T7641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.477279][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.083339][ T27] audit: type=1326 audit(1757602885.016:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 260.259326][ T27] audit: type=1326 audit(1757602885.016:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 260.282129][ T27] audit: type=1326 audit(1757602885.016:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 260.305247][ T27] audit: type=1326 audit(1757602885.016:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 260.331551][ T27] audit: type=1326 audit(1757602885.066:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 260.468318][ T27] audit: type=1326 audit(1757602885.066:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 260.583333][ T27] audit: type=1326 audit(1757602885.096:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 260.616451][ T27] audit: type=1326 audit(1757602885.096:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 262.063450][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 262.063859][ T27] audit: type=1326 audit(1757602886.996:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 262.284443][ T7705] loop3: detected capacity change from 0 to 512 [ 264.153652][ T27] audit: type=1326 audit(1757602887.006:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 264.173353][ T7705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.151661][ T7705] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 265.151892][ T7705] EXT4-fs: failed to create workqueue [ 265.166983][ T7705] EXT4-fs (loop3): mount failed [ 265.531137][ T27] audit: type=1326 audit(1757602887.006:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 265.609224][ T27] audit: type=1326 audit(1757602887.046:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 265.735476][ T27] audit: type=1326 audit(1757602887.056:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 265.836598][ T27] audit: type=1326 audit(1757602887.086:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 265.881636][ T27] audit: type=1326 audit(1757602887.086:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 265.920145][ T27] audit: type=1326 audit(1757602887.096:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7693 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 265.962432][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 266.246099][ T7719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.950109][ T7720] fuse: Unknown parameter 'grou00000000000000000000' [ 267.541236][ T7733] CIFS: VFS: Malformed UNC in devname [ 267.763276][ T5822] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 267.953231][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 267.969974][ T5822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.978935][ T5822] usb 2-1: config 4 interface 0 has no altsetting 0 [ 267.990667][ T5822] usb 2-1: string descriptor 0 read error: -22 [ 267.999266][ T27] audit: type=1326 audit(1757602892.946:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.021814][ T27] audit: type=1326 audit(1757602892.966:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.053350][ T5822] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 268.082959][ T27] audit: type=1326 audit(1757602892.996:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.105419][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.129215][ T5822] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 268.145656][ T5822] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 268.157843][ T5822] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 268.166474][ T5822] usb 2-1: media controller created [ 268.222143][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.234140][ T27] audit: type=1326 audit(1757602892.996:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f9478ebe3 code=0x7ffc0000 [ 268.291248][ T27] audit: type=1326 audit(1757602892.996:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f9478ebe3 code=0x7ffc0000 [ 268.376047][ T27] audit: type=1326 audit(1757602892.996:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.399334][ T27] audit: type=1326 audit(1757602892.996:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.422037][ T27] audit: type=1326 audit(1757602892.996:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.444837][ T27] audit: type=1326 audit(1757602892.996:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.468727][ T27] audit: type=1326 audit(1757602892.996:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 268.996378][ T7755] fuse: Unknown parameter 'grou00000000000000000000' [ 269.415135][ T5822] zl10353_read_register: readreg error (reg=127, ret==0) [ 269.514736][ T5822] usb 2-1: USB disconnect, device number 11 [ 269.623210][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 269.813570][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 269.850787][ T5836] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 269.867534][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 269.886056][ T5836] usb 3-1: Product: syz [ 269.890281][ T5836] usb 3-1: Manufacturer: syz [ 269.903051][ T5836] usb 3-1: SerialNumber: syz [ 269.917669][ T5836] usb 3-1: config 0 descriptor?? [ 272.550465][ T5822] usb 3-1: USB disconnect, device number 7 [ 272.685224][ T7807] tipc: Enabled bearer , priority 0 [ 272.705624][ T7807] syzkaller0: entered promiscuous mode [ 272.721667][ T7807] syzkaller0: entered allmulticast mode [ 272.799379][ T7807] tipc: Resetting bearer [ 272.824289][ T7806] tipc: Resetting bearer [ 272.856340][ T7806] tipc: Disabling bearer [ 273.325465][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 273.325486][ T27] audit: type=1326 audit(1757602898.276:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 273.354335][ T27] audit: type=1326 audit(1757602898.306:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 273.441431][ T27] audit: type=1326 audit(1757602898.326:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 273.499984][ T27] audit: type=1326 audit(1757602898.336:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 [ 273.727112][ T27] audit: type=1326 audit(1757602898.336:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 [ 273.973339][ T27] audit: type=1326 audit(1757602898.336:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 273.995663][ T27] audit: type=1326 audit(1757602898.336:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 274.018007][ T27] audit: type=1326 audit(1757602898.336:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 274.055299][ T27] audit: type=1326 audit(1757602898.336:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 274.126587][ T27] audit: type=1326 audit(1757602898.336:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 Stopping sshd: stopped /usr/sbin/sshd (pid 5546) OK Stopping crond: [ 275.642380][ T7862] loop2: detected capacity change from 0 to 512 [ 275.652465][ T7862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.569913][ T7862] EXT4-fs (loop2): orphan cleanup on readonly fs [ 277.596916][ T7862] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.559: bg 0: block 248: padding at end of block bitmap is not set [ 277.613766][ T7862] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.559: Failed to acquire dquot type 1 [ 277.635261][ T7862] EXT4-fs (loop2): 1 truncate cleaned up [ 277.647218][ T7862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. stopped /usr/sbin/crond (pid 552[ 278.522148][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 7) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5452) Stopping network: [ 280.088135][ T7899] fuse: Unknown parameter 'group_i00000000000000000000' [ 281.524220][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 281.524233][ T27] audit: type=1326 audit(1757602906.476:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 281.631180][ T27] audit: type=1326 audit(1757602906.516:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 OK [ 281.703975][ T27] audit: type=1326 audit(1757602906.536:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 281.796307][ T27] audit: type=1326 audit(1757602906.536:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 Stopping iptables: [ 281.855262][ T27] audit: type=1326 audit(1757602906.536:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 281.972559][ T27] audit: type=1326 audit(1757602906.536:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 OK Stopping system message bus: [ 282.436192][ T27] audit: type=1326 audit(1757602907.336:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 283.141378][ T27] audit: type=1326 audit(1757602907.336:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 283.218978][ T27] audit: type=1326 audit(1757602907.346:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 283.242403][ T27] audit: type=1326 audit(1757602907.346:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9478eba9 code=0x7ffc0000 [ 283.430306][ T7950] fuse: Unknown parameter 'group_i00000000000000000000' [ 283.516592][ T7952] loop2: detected capacity change from 0 to 512 [ 285.037408][ T7952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.050439][ T7952] EXT4-fs (loop2): orphan cleanup on readonly fs [ 285.061081][ T7952] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.579: bg 0: block 248: padding at end of block bitmap is not set [ 285.076198][ T7952] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.579: Failed to acquire dquot type 1 [ 285.572766][ T7952] EXT4-fs (loop2): 1 truncate cleaned up [ 285.585739][ T7952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.510840][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.786400][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 286.786413][ T27] audit: type=1326 audit(1757602911.736:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 done [ 286.940909][ T27] audit: type=1326 audit(1757602911.766:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 286.965376][ T27] audit: type=1326 audit(1757602911.766:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 286.991396][ T27] audit: type=1326 audit(1757602911.776:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fadf9b8ebe3 code=0x7ffc0000 [ 287.052701][ T27] audit: type=1326 audit(1757602911.776:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 287.078921][ T27] audit: type=1326 audit(1757602911.776:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9b8eba9 code=0x7ffc0000 [ 287.333336][ T27] audit: type=1326 audit(1757602912.276:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 287.385111][ T27] audit: type=1326 audit(1757602912.276:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 287.508014][ T27] audit: type=1326 audit(1757602912.276:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 287.566224][ T27] audit: type=1326 audit(1757602912.276:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 [ 287.961898][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 288.282233][ T7995] loop0: detected capacity change from 0 to 512 [ 288.424066][ T7995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.152611][ T7995] EXT4-fs (loop0): orphan cleanup on readonly fs [ 290.588399][ T7995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.588: bg 0: block 248: padding at end of block bitmap is not set [ 290.609988][ T7995] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.588: Failed to acquire dquot type 1 [ 290.626928][ T7995] EXT4-fs (loop0): 1 truncate cleaned up [ 291.127381][ T7995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.308440][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping klogd: OK Stopping acpid: [ 292.488105][ T8013] fuse: Unknown parameter 'group_i00000000000000000000' [ 292.945730][ T8019] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 293.295601][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 293.295614][ T27] audit: type=1326 audit(1757602918.246:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 293.382093][ T27] audit: type=1326 audit(1757602918.246:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 293.414179][ T27] audit: type=1326 audit(1757602918.296:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 293.438782][ T27] audit: type=1326 audit(1757602918.306:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2cf8ebe3 code=0x7ffc0000 [ 293.521406][ T27] audit: type=1326 audit(1757602918.306:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 [ 293.557288][ T27] audit: type=1326 audit(1757602918.306:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2cf8eba9 code=0x7ffc0000 OK Stopping syslogd: stopped /sbin/syslogd (pid 5140) OK umount: can't remount debugfs read-only [ 295.821755][ T8056] fuse: Unknown parameter 'group_id00000000000000000000' [ 295.984909][ T27] audit: type=1326 audit(1757602920.936:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 296.099223][ T8064] loop0: detected capacity change from 0 to 512 [ 296.121555][ T8064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.230597][ T8064] EXT4-fs (loop0): orphan cleanup on readonly fs [ 296.244980][ T8064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.605: bg 0: block 248: padding at end of block bitmap is not set [ 296.264862][ T8064] Quota error (device loop0): write_blk: dquota write failed [ 296.272680][ T8064] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 296.282758][ T8064] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.605: Failed to acquire dquot type 1 [ 296.300233][ T8064] EXT4-fs (loop0): 1 truncate cleaned up [ 296.316755][ T8064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.454799][ T27] audit: type=1326 audit(1757602920.936:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009b58eba9 code=0x7ffc0000 [ 298.063241][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 298.159380][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 298.247756][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.776917][ T8092] netdevsim netdevsim3 netdevsim0: entered promiscuous mode umount: sysfs bu[ 299.038426][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. sy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.85 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 300.582898][ T1078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.653141][ T1078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.763302][ T1078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.849411][ T1078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.966392][ T1078] tipc: Left network mode [ 301.237234][ T8095] smc: removing ib device sz1 [ 301.264093][ T8095] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 301.273571][ T8095] ACPI: PM: Preparing to enter system sleep state S5 [ 301.281971][ T8095] kvm: exiting hardware virtualization [ 301.288093][ T8095] reboot: Power down serialport: VM disconnected.