last executing test programs: 10.975181704s ago: executing program 2 (id=264): set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, 0x0, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r3, &(0x7f0000000e80)=""/4096, 0x1000) 9.349317997s ago: executing program 1 (id=272): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 9.095702659s ago: executing program 0 (id=274): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 8.962870658s ago: executing program 1 (id=275): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@dax_always}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 8.876351408s ago: executing program 0 (id=276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="ae14665f5b467ae7b905a0db6c5af77521f1adb5", 0x14}], 0x1}}], 0x1, 0x20008000) close_range(r0, 0xffffffffffffffff, 0x0) 8.579927473s ago: executing program 0 (id=279): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_dev$char_usb(0xc, 0xb4, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x7, 0x0, 0x2, 0x5, 0x5, 0x63e9}, 0x20) 8.460621692s ago: executing program 1 (id=280): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0xff) r0 = socket(0x8, 0x4, 0x10000004) getsockname$packet(r0, 0x0, 0x0) 8.288111949s ago: executing program 2 (id=282): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r5, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) 7.472894734s ago: executing program 4 (id=283): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, r3}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 7.331797942s ago: executing program 1 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 6.934898757s ago: executing program 0 (id=286): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 5.28388424s ago: executing program 1 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$DEVLINK_CMD_RATE_SET(r0, 0x0, 0x4090) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.147198052s ago: executing program 0 (id=289): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 3.98096598s ago: executing program 3 (id=290): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@dax_always}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3.18555141s ago: executing program 3 (id=291): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) 3.019980509s ago: executing program 1 (id=292): set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$inet(r2, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r3, &(0x7f0000000e80)=""/4096, 0x1000) 2.87601564s ago: executing program 4 (id=293): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x89d9, 0x100000001, 0x2, 0x3}) 2.873697432s ago: executing program 3 (id=294): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0xff) r0 = socket(0x8, 0x4, 0x10000004) getsockname$packet(r0, 0x0, 0x0) 2.449559236s ago: executing program 3 (id=295): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.293012442s ago: executing program 4 (id=296): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e62, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x23}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x0, 0xc}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 2.24216346s ago: executing program 2 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x36, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d00)=ANY=[], 0x3d0}, 0x1, 0x0, 0x0, 0x1}, 0xac85af59110bb1cf) 1.93174359s ago: executing program 2 (id=298): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYBLOB="a294ed0e6deb3d0f012f16297a5e5b7cf4df60ed4a20de020b3e85086ed39ba2980bd89a3bcf751484ff58ccdedb287d459cabd5f98dde7576180cc0459bf12f3cc1783ca0e08cd8af0de92716bfee74da0119640afe890ccf583b55"], 0x47, 0xc11, &(0x7f0000000c80)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 1.929217353s ago: executing program 4 (id=299): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 1.845496163s ago: executing program 3 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000080)=@xdp={0x2c, 0x3, 0x0, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x116, 0x2}, {0x10, 0x3a, 0x5}, {0xb0, 0x107, 0x1, "73f27d882dae0b9521ac2664fa65f728ca248894aafb3ed8ec2ce20bee011c011b5afa23e0d507b86e1faec80485cfee3f93c84e3ad87b89bfd0e889163f14e54a44649312249cd5e10097c1078f854a4d03ebc0df72cab62370449ee7dacf1b543f5361a54d537a1490735e9c562040e0c4ca81d6839398f6ca68f1a934f6e28ae7c8fb66f3314f3c0d0b06112f8290bcaa093da9eab50be5"}, {0x90, 0x104, 0x2, "8fbe3dab651d5b6e69292204b364c6414ca78124b4d1a6c864db41f150dd79b3b8267950947051dc3444b9c6df8ea7b166c4d0cc70244708f126074028140a0d4519affdc1ccd27d9d3904d515048b90f65c83aa86909e4acbe78f06ed3aa9ee85b61f1ab2a75b462098b00712ae1c945e4a1366fdde1b0f6e"}], 0x160}, 0x4040804) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x5565, &(0x7f000000c100)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x2}}, 0x20) 1.40175114s ago: executing program 4 (id=301): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@dax_always}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1.241111148s ago: executing program 0 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$DEVLINK_CMD_RATE_SET(r0, 0x0, 0x4090) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 583.211631ms ago: executing program 3 (id=303): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, r3}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 484.710132ms ago: executing program 2 (id=304): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) 159.890671ms ago: executing program 4 (id=305): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_continue}, {@errors_remount_ro}]}, 0x1, 0xa6b, &(0x7f0000001f80)="$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") mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ext4\x00', 0x200000, 0x0) 0s ago: executing program 2 (id=306): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 82.273615][ T5856] cgroup: Unknown subsys name 'net' [ 82.429744][ T5856] cgroup: Unknown subsys name 'cpuset' [ 82.440232][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.191947][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.522229][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.569758][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.579877][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.589576][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.598887][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.606343][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.613217][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.622808][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.626238][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.631792][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.646839][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.656295][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.664937][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.675252][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.683218][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.691662][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.701028][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.713143][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.734893][ T5885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.744549][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.754442][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.765340][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.772731][ T5885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.781087][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.790030][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.421317][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 88.522213][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 88.584621][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 88.735711][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 88.748660][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 88.903972][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.912310][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.920139][ T5872] bridge_slave_0: entered allmulticast mode [ 88.927739][ T5872] bridge_slave_0: entered promiscuous mode [ 88.944080][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.951306][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.958791][ T5873] bridge_slave_0: entered allmulticast mode [ 88.966195][ T5873] bridge_slave_0: entered promiscuous mode [ 88.993579][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.002036][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.009496][ T5872] bridge_slave_1: entered allmulticast mode [ 89.016983][ T5872] bridge_slave_1: entered promiscuous mode [ 89.053304][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.060710][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.068041][ T5873] bridge_slave_1: entered allmulticast mode [ 89.075816][ T5873] bridge_slave_1: entered promiscuous mode [ 89.186365][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.193549][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.201255][ T5867] bridge_slave_0: entered allmulticast mode [ 89.208628][ T5867] bridge_slave_0: entered promiscuous mode [ 89.220203][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.232342][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.257322][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.264492][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.272284][ T5866] bridge_slave_0: entered allmulticast mode [ 89.280294][ T5866] bridge_slave_0: entered promiscuous mode [ 89.288284][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.295638][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.302861][ T5867] bridge_slave_1: entered allmulticast mode [ 89.310952][ T5867] bridge_slave_1: entered promiscuous mode [ 89.319935][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.347131][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.370956][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.378700][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.386159][ T5878] bridge_slave_0: entered allmulticast mode [ 89.393537][ T5878] bridge_slave_0: entered promiscuous mode [ 89.401370][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.409118][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.416810][ T5866] bridge_slave_1: entered allmulticast mode [ 89.424079][ T5866] bridge_slave_1: entered promiscuous mode [ 89.489727][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.497233][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.504526][ T5878] bridge_slave_1: entered allmulticast mode [ 89.512358][ T5878] bridge_slave_1: entered promiscuous mode [ 89.547312][ T5872] team0: Port device team_slave_0 added [ 89.557345][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.568940][ T5873] team0: Port device team_slave_0 added [ 89.606878][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.620069][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.631832][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.659160][ T5872] team0: Port device team_slave_1 added [ 89.681833][ T5873] team0: Port device team_slave_1 added [ 89.690849][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.725632][ T5885] Bluetooth: hci0: command tx timeout [ 89.752584][ T5867] team0: Port device team_slave_0 added [ 89.762393][ T5867] team0: Port device team_slave_1 added [ 89.785614][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.805303][ T5885] Bluetooth: hci2: command tx timeout [ 89.805330][ T5874] Bluetooth: hci1: command tx timeout [ 89.805460][ T5877] Bluetooth: hci4: command tx timeout [ 89.838148][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.845253][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.871249][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.884874][ T5877] Bluetooth: hci3: command tx timeout [ 89.928493][ T5866] team0: Port device team_slave_0 added [ 89.936282][ T5878] team0: Port device team_slave_0 added [ 89.942836][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.951052][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.977793][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.003975][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.011371][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.037517][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.051461][ T5878] team0: Port device team_slave_1 added [ 90.058593][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.065732][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.092696][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.106349][ T5866] team0: Port device team_slave_1 added [ 90.120239][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.127402][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.153531][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.166515][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.173506][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.199646][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.284248][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.291328][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.317723][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.344409][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.351720][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.378282][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.391125][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.398174][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.424565][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.452730][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.460110][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.486800][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.564152][ T5873] hsr_slave_0: entered promiscuous mode [ 90.571599][ T5873] hsr_slave_1: entered promiscuous mode [ 90.604451][ T5872] hsr_slave_0: entered promiscuous mode [ 90.611516][ T5872] hsr_slave_1: entered promiscuous mode [ 90.618376][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 90.624377][ T5872] Cannot create hsr debugfs directory [ 90.682883][ T5866] hsr_slave_0: entered promiscuous mode [ 90.689909][ T5866] hsr_slave_1: entered promiscuous mode [ 90.696303][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 90.702067][ T5866] Cannot create hsr debugfs directory [ 90.730122][ T5867] hsr_slave_0: entered promiscuous mode [ 90.737658][ T5867] hsr_slave_1: entered promiscuous mode [ 90.743971][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 90.749814][ T5867] Cannot create hsr debugfs directory [ 90.805751][ T5878] hsr_slave_0: entered promiscuous mode [ 90.812252][ T5878] hsr_slave_1: entered promiscuous mode [ 90.820128][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 90.825988][ T5878] Cannot create hsr debugfs directory [ 91.461170][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.479248][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.499735][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.519448][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.571191][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.595280][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.607804][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.624356][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.731851][ T5878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.751875][ T5878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.776557][ T5878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.790043][ T5878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.818729][ T5877] Bluetooth: hci0: command tx timeout [ 91.884986][ T5877] Bluetooth: hci1: command tx timeout [ 91.885729][ T5885] Bluetooth: hci4: command tx timeout [ 91.890453][ T5877] Bluetooth: hci2: command tx timeout [ 91.920701][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.934504][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.950324][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.962520][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.969745][ T5877] Bluetooth: hci3: command tx timeout [ 91.993307][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.118750][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.128159][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.140493][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.152427][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.181216][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.207313][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.214903][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.252577][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.259804][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.322775][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.393084][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.458786][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.476832][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.499114][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.516231][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.538020][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.545203][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.577726][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.584963][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.613191][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.628086][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.635322][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.647583][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.678594][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.685925][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.739498][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.746739][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.820659][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.851665][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.858939][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.907704][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.914951][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.931735][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.939118][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.064183][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.382234][ T5867] veth0_vlan: entered promiscuous mode [ 93.465778][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.480014][ T5867] veth1_vlan: entered promiscuous mode [ 93.653609][ T5867] veth0_macvtap: entered promiscuous mode [ 93.694555][ T5867] veth1_macvtap: entered promiscuous mode [ 93.705835][ T5872] veth0_vlan: entered promiscuous mode [ 93.761375][ T5872] veth1_vlan: entered promiscuous mode [ 93.793310][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.826567][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.843844][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.867779][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.885370][ T5877] Bluetooth: hci0: command tx timeout [ 93.901704][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917145][ T2999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.939296][ T2999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968686][ T5874] Bluetooth: hci4: command tx timeout [ 93.969160][ T5885] Bluetooth: hci1: command tx timeout [ 93.974243][ T5877] Bluetooth: hci2: command tx timeout [ 93.997605][ T2999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047857][ T5877] Bluetooth: hci3: command tx timeout [ 94.054296][ T5872] veth0_macvtap: entered promiscuous mode [ 94.088321][ T5872] veth1_macvtap: entered promiscuous mode [ 94.102665][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.159322][ T5866] veth0_vlan: entered promiscuous mode [ 94.204519][ T5866] veth1_vlan: entered promiscuous mode [ 94.290124][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.303659][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.317347][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354452][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.372867][ T5873] veth0_vlan: entered promiscuous mode [ 94.429095][ T1101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.438566][ T1101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459132][ T5873] veth1_vlan: entered promiscuous mode [ 94.471069][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.479207][ T1101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.489072][ T74] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.495111][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.590436][ T5866] veth0_macvtap: entered promiscuous mode [ 94.592316][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.631849][ T5878] veth0_vlan: entered promiscuous mode [ 94.649636][ T5878] veth1_vlan: entered promiscuous mode [ 94.694049][ T5866] veth1_macvtap: entered promiscuous mode [ 94.783501][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.796511][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.813560][ T5873] veth0_macvtap: entered promiscuous mode [ 94.820433][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.857272][ T5873] veth1_macvtap: entered promiscuous mode [ 94.871934][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.942491][ T5878] veth0_macvtap: entered promiscuous mode [ 94.967130][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.980083][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.989404][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.992034][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.007559][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.023645][ T5878] veth1_macvtap: entered promiscuous mode [ 95.044775][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.062513][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.115832][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.192205][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.237419][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268519][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.303994][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.317952][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.338893][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.395284][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.403431][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.419220][ T2977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.424151][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.441388][ T2977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.462586][ T2977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471823][ T2977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.563352][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.575825][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 95.589608][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.600425][ T5869] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 95.614135][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.617321][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.629340][ T5869] usb 1-1: Product: syz [ 95.634360][ T5869] usb 1-1: Manufacturer: syz [ 95.643894][ T5869] usb 1-1: SerialNumber: syz [ 95.661253][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.686689][ T5869] usb 1-1: config 0 descriptor?? [ 95.723351][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.734107][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.833658][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.849344][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.901128][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.933311][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.956627][ T5869] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 95.969164][ T5877] Bluetooth: hci0: command tx timeout [ 96.046458][ T5877] Bluetooth: hci2: command tx timeout [ 96.046501][ T5885] Bluetooth: hci4: command tx timeout [ 96.051929][ T5877] Bluetooth: hci1: command tx timeout [ 96.124899][ T5885] Bluetooth: hci3: command tx timeout [ 96.212349][ T6004] loop1: detected capacity change from 0 to 16 [ 96.273503][ T6004] ======================================================= [ 96.273503][ T6004] WARNING: The mand mount option has been deprecated and [ 96.273503][ T6004] and is ignored by this kernel. Remove the mand [ 96.273503][ T6004] option from the mount to silence this warning. [ 96.273503][ T6004] ======================================================= [ 96.363533][ T5869] gspca_sunplus: reg_w_riv err -71 [ 96.376279][ T6004] erofs (device loop1): mounted with root inode @ nid 36. [ 96.393959][ T5869] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 96.444624][ T6006] loop4: detected capacity change from 0 to 256 [ 96.453894][ T5869] usb 1-1: USB disconnect, device number 2 [ 96.488016][ T6006] exfat: Deprecated parameter 'utf8' [ 96.493533][ T6006] exfat: Deprecated parameter 'utf8' [ 96.521004][ T6004] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 96.644187][ T6004] syz.1.2: attempt to access beyond end of device [ 96.644187][ T6004] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 96.644553][ T6006] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 96.682604][ T6004] erofs (device loop1): failed to decompress -5 in[4096, 0] out[4096] [ 96.694411][ T6004] erofs (device loop1): read error -117 @ 0 of nid 89 [ 96.707677][ T30] audit: type=1800 audit(1757646895.084:2): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 96.811111][ T6019] loop2: detected capacity change from 0 to 256 [ 96.841061][ T6006] process 'syz.4.5' launched './file1' with NULL argv: empty string added [ 96.892993][ T6019] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 97.020284][ T6019] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 97.065148][ T6016] "syz.3.11" (6016) uses obsolete ecb(arc4) skcipher [ 97.065300][ T6019] exFAT-fs (loop2): Filesystem has been set read-only [ 97.275192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.284919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.298961][ T43] cfg80211: failed to load regulatory.db [ 97.542098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.551260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.645258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.655551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.922380][ T6038] loop0: detected capacity change from 0 to 64 [ 97.936033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.053233][ T6040] loop4: detected capacity change from 0 to 1024 [ 98.220582][ T6040] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 98.235337][ T6040] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 98.299467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 98.316039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.324806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.335067][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.377064][ T3030] hfsplus: b-tree write err: -5, ino 4 [ 98.549875][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.709852][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 98.747808][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 98.848909][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 98.870757][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.121512][ T9] usb 4-1: Product: syz [ 99.125862][ T9] usb 4-1: Manufacturer: syz [ 99.269876][ T6053] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.294041][ T6053] Zero length message leads to an empty skb [ 99.300595][ T9] usb 4-1: SerialNumber: syz [ 99.322265][ T9] usb 4-1: config 0 descriptor?? [ 99.338482][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 99.351371][ T9] usb 4-1: setting power ON [ 99.359703][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 99.366660][ T5956] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.402595][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.416710][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.434109][ T9] usb 4-1: media controller created [ 99.512679][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.550088][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 99.573777][ T5956] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.588839][ T5956] usb 5-1: config 0 has no interface number 0 [ 99.640607][ T5956] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 99.659078][ T9] usb 4-1: selecting invalid altsetting 6 [ 99.674772][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.689884][ T9] usb 4-1: digital interface selection failed (-22) [ 99.699613][ T5956] usb 5-1: Product: syz [ 99.711913][ T5956] usb 5-1: Manufacturer: syz [ 99.722019][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 99.753358][ T5956] usb 5-1: SerialNumber: syz [ 99.784020][ T9] usb 4-1: setting power OFF [ 99.800304][ T5956] usb 5-1: config 0 descriptor?? [ 99.814955][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 99.839092][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 99.854769][ T845] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.867964][ T5956] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 99.875128][ T9] (NULL device *): no alternate interface [ 100.024713][ T845] usb 2-1: Using ep0 maxpacket: 16 [ 100.029552][ T6062] pim6reg: entered allmulticast mode [ 100.050091][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 100.064068][ T845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.100796][ T845] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.149016][ T9] usb 4-1: USB disconnect, device number 2 [ 100.192011][ T845] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.241022][ T845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.278705][ T845] usb 2-1: config 0 descriptor?? [ 100.297467][ T845] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 100.577452][ T6070] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 100.587632][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.596876][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.627304][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.634561][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.642955][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.650303][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.683573][ T6070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.049730][ T6078] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.775705][ T5956] gspca_spca1528: reg_r err -110 [ 101.780807][ T5956] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 102.255234][ T6081] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.693384][ T6085] loop3: detected capacity change from 0 to 32768 [ 103.612019][ T5927] usb 5-1: USB disconnect, device number 2 [ 104.115108][ T5956] usb 2-1: USB disconnect, device number 2 [ 104.578365][ T845] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.755244][ T845] usb 4-1: Using ep0 maxpacket: 8 [ 104.773468][ T845] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 104.829788][ T845] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 104.851842][ T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.886396][ T845] usb 4-1: Product: syz [ 104.919628][ T845] usb 4-1: Manufacturer: syz [ 104.984852][ T845] usb 4-1: SerialNumber: syz [ 105.018754][ T845] usb 4-1: config 0 descriptor?? [ 105.036731][ T845] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 105.064881][ T845] usb 4-1: setting power ON [ 105.072793][ T845] dvb-usb: bulk message failed: -22 (2/0) [ 105.090904][ T845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.215708][ T845] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 105.521924][ T845] usb 4-1: media controller created [ 105.717759][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.765252][ T845] usb 4-1: selecting invalid altsetting 6 [ 105.834916][ T845] usb 4-1: digital interface selection failed (-22) [ 105.884905][ T845] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 105.958813][ T845] usb 4-1: setting power OFF [ 105.978518][ T845] dvb-usb: bulk message failed: -22 (2/0) [ 106.107994][ T845] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 106.184272][ T845] (NULL device *): no alternate interface [ 106.398071][ T845] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 106.501345][ T6134] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 106.566499][ T845] usb 4-1: USB disconnect, device number 3 [ 107.133964][ T6138] netlink: 165 bytes leftover after parsing attributes in process `syz.3.45'. [ 107.181706][ T6137] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.801829][ T6156] loop2: detected capacity change from 0 to 256 [ 107.875798][ T6156] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 107.914412][ T6158] syz_tun: entered allmulticast mode [ 107.956435][ T6157] syz_tun: left allmulticast mode [ 108.570286][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.578032][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.883559][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.891270][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.996235][ T6173] loop0: detected capacity change from 0 to 512 [ 109.017700][ T6173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.047804][ T6173] EXT4-fs: Mount option(s) incompatible with ext3 [ 109.283935][ T6179] loop3: detected capacity change from 0 to 1024 [ 109.485925][ T6179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.550757][ T6186] IPVS: length: 102 != 8 [ 110.083862][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.326644][ T6197] loop3: detected capacity change from 0 to 512 [ 110.464518][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.507815][ T6197] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.090065][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.549285][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.794987][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 111.803895][ T5920] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 111.855199][ T5920] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 111.872434][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.975863][ T5920] usb 4-1: Product: syz [ 112.674711][ T5920] usb 4-1: Manufacturer: syz [ 112.774929][ T5920] usb 4-1: SerialNumber: syz [ 112.805658][ T5920] usb 4-1: config 0 descriptor?? [ 112.822816][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 112.866328][ T5920] usb 4-1: setting power ON [ 112.871252][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 112.909642][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.950832][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 112.983456][ T5920] usb 4-1: media controller created [ 113.153736][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.249648][ T5920] usb 4-1: selecting invalid altsetting 6 [ 113.279679][ T5920] usb 4-1: digital interface selection failed (-22) [ 113.310092][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 113.397459][ T5920] usb 4-1: setting power OFF [ 113.402148][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 113.455795][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 113.486768][ T5920] (NULL device *): no alternate interface [ 113.496123][ T6228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.75'. [ 113.537985][ T74] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.575078][ T74] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.617770][ T74] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.663494][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 113.697678][ T74] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.760700][ T5920] usb 4-1: USB disconnect, device number 4 [ 114.485061][ T5956] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 114.720428][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.732566][ T5956] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.753772][ T5956] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.763420][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.791737][ T5956] usb 2-1: config 0 descriptor?? [ 114.802948][ T5956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 115.159186][ T845] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.238032][ T6265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.89'. [ 115.263295][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 115.301935][ T5956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 115.344762][ T845] usb 4-1: Using ep0 maxpacket: 8 [ 115.469294][ T5956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 115.476886][ T5956] usb 2-1: media controller created [ 115.503009][ T845] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 115.747781][ T845] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 115.766742][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.776712][ T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.809159][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 115.822232][ T845] usb 4-1: Product: syz [ 115.827165][ T845] usb 4-1: Manufacturer: syz [ 115.831925][ T845] usb 4-1: SerialNumber: syz [ 115.842217][ T5956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.955048][ T845] usb 4-1: config 0 descriptor?? [ 115.972021][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 115.998881][ T845] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 116.017017][ T845] usb 4-1: setting power ON [ 116.037750][ T845] dvb-usb: bulk message failed: -22 (2/0) [ 116.050391][ T5956] dvb-usb: schedule remote query interval to 150 msecs. [ 116.061748][ T845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.081702][ T5956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 116.153566][ T845] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 116.165195][ T5956] usb 2-1: USB disconnect, device number 3 [ 116.292318][ T845] usb 4-1: media controller created [ 116.337687][ T5956] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 116.394121][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.446372][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 116.509909][ T845] usb 4-1: selecting invalid altsetting 6 [ 116.563915][ T845] usb 4-1: digital interface selection failed (-22) [ 116.652758][ T845] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 116.759618][ T845] usb 4-1: setting power OFF [ 116.782189][ T845] dvb-usb: bulk message failed: -22 (2/0) [ 116.861174][ T845] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 116.918186][ T845] (NULL device *): no alternate interface [ 117.045372][ T845] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 117.122155][ T845] usb 4-1: USB disconnect, device number 5 [ 117.209459][ T6290] netdevsim netdevsim0: Direct firmware load for . [ 117.209459][ T6290] failed with error -2 [ 117.239973][ T6292] loop3: detected capacity change from 0 to 47 [ 117.263576][ T6290] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 117.263576][ T6290] [ 117.310676][ T30] audit: type=1800 audit(1757646915.654:3): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.98" name="bus" dev="loop3" ino=8 res=0 errno=0 [ 117.335280][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.408592][ T30] audit: type=1804 audit(1757646915.664:4): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.98" name="/newroot/23/file1/bus" dev="loop3" ino=8 res=1 errno=0 [ 117.506018][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 117.590868][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.628711][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.742432][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.770988][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.839414][ T9] usb 5-1: config 0 descriptor?? [ 117.853447][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 118.024764][ T2154] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 118.207049][ T2154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.218054][ T2154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.228722][ T2154] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.239153][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.389163][ T2154] usb 4-1: config 0 descriptor?? [ 118.420593][ T2154] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.460268][ T2154] dvb-usb: bulk message failed: -22 (3/0) [ 118.889670][ T2154] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.899291][ T2154] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.906630][ T2154] usb 4-1: media controller created [ 118.919789][ T2154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.984096][ T2154] dvb-usb: bulk message failed: -22 (6/0) [ 119.009930][ T2154] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.033347][ T2154] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 119.084448][ T2154] dvb-usb: schedule remote query interval to 150 msecs. [ 119.096103][ T6307] dvb-usb: bulk message failed: -22 (2/0) [ 119.181977][ T2154] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.222760][ T2154] usb 4-1: USB disconnect, device number 6 [ 119.439152][ T6312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.102'. [ 119.639208][ T6315] overlayfs: failed to resolve './file0': -2 [ 120.211846][ T5956] usb 5-1: USB disconnect, device number 3 [ 120.235647][ T2154] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.584767][ T2154] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.605618][ T6333] loop2: detected capacity change from 0 to 512 [ 120.651068][ T6333] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.774778][ T2154] usb 4-1: Using ep0 maxpacket: 8 [ 120.820868][ T2154] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 120.876669][ T6333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.942290][ T6333] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 120.968283][ T2154] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 120.992419][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.002017][ T2154] usb 4-1: Product: syz [ 121.007387][ T2154] usb 4-1: Manufacturer: syz [ 121.012117][ T2154] usb 4-1: SerialNumber: syz [ 121.020907][ T2154] usb 4-1: config 0 descriptor?? [ 121.035329][ T6333] EXT4-fs (loop2): 1 truncate cleaned up [ 121.043825][ T2154] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 121.052459][ T2154] usb 4-1: setting power ON [ 121.057537][ T2154] dvb-usb: bulk message failed: -22 (2/0) [ 121.059379][ T6333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.085816][ T2154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.104290][ T2154] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 121.133561][ T2154] usb 4-1: media controller created [ 121.255605][ T2154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.348833][ T2154] usb 4-1: selecting invalid altsetting 6 [ 121.358255][ T2154] usb 4-1: digital interface selection failed (-22) [ 121.381597][ T2154] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 121.383011][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.472248][ T2154] usb 4-1: setting power OFF [ 121.547496][ T2154] dvb-usb: bulk message failed: -22 (2/0) [ 121.585524][ T2154] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 121.617149][ T2154] (NULL device *): no alternate interface [ 122.416939][ T2154] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 122.684902][ T2154] usb 4-1: USB disconnect, device number 7 [ 123.029490][ T6362] batman_adv: batadv0: Adding interface: dummy0 [ 123.054350][ T6362] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.079755][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.087555][ T6362] batman_adv: batadv0: Interface activated: dummy0 [ 123.104879][ T5956] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.159719][ T6366] batadv0: mtu less than device minimum [ 123.179357][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.191266][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.202772][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.214212][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.225728][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.237162][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.248596][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.260054][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.271465][ T6366] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.420293][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 123.447667][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.514740][ T5956] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.534794][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.564401][ T5956] usb 5-1: config 0 descriptor?? [ 123.602208][ T5956] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 123.742185][ T6378] loop7: detected capacity change from 0 to 16384 [ 123.753990][ T6382] loop2: detected capacity change from 0 to 16 [ 123.793557][ T6382] erofs (device loop2): mounted with root inode @ nid 36. [ 123.965124][ T5956] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.144961][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 124.153501][ T5956] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 124.170739][ T5956] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 124.201660][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.230936][ T5956] usb 1-1: Product: syz [ 124.626573][ T5956] usb 1-1: Manufacturer: syz [ 124.664868][ T5956] usb 1-1: SerialNumber: syz [ 124.682592][ T5956] usb 1-1: config 0 descriptor?? [ 124.703067][ T5956] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 124.730269][ T5956] usb 1-1: setting power ON [ 124.750898][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 124.833809][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.854396][ T5956] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 124.863595][ T5956] usb 1-1: media controller created [ 125.167144][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.263206][ T5956] usb 1-1: selecting invalid altsetting 6 [ 125.269800][ T5956] usb 1-1: digital interface selection failed (-22) [ 125.293302][ T5956] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 125.364181][ T5956] usb 1-1: setting power OFF [ 125.375287][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 125.381293][ T5956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 125.411710][ T5956] (NULL device *): no alternate interface [ 125.425847][ T6400] loop1: detected capacity change from 0 to 128 [ 125.563373][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 125.613584][ T5956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 125.689857][ T5956] usb 1-1: USB disconnect, device number 3 [ 125.978580][ T5927] usb 5-1: USB disconnect, device number 4 [ 126.160920][ T6409] loop1: detected capacity change from 0 to 4096 [ 126.173833][ T6409] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 126.362999][ T6409] ntfs3(loop1): Failed to load $Extend (-22). [ 126.377516][ T6409] ntfs3(loop1): Failed to initialize $Extend. [ 127.015574][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.205436][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 127.212393][ T5927] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 127.232055][ T5927] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 127.249189][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.323519][ T5927] usb 2-1: Product: syz [ 127.333101][ T5927] usb 2-1: Manufacturer: syz [ 127.338969][ T5927] usb 2-1: SerialNumber: syz [ 127.349899][ T5927] usb 2-1: config 0 descriptor?? [ 127.387914][ T5927] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 127.407216][ T5927] usb 2-1: setting power ON [ 127.416312][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 127.451374][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.467412][ T6445] IPVS: length: 102 != 8 [ 127.498083][ T5927] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 127.509969][ T5927] usb 2-1: media controller created [ 127.595030][ T6428] dvb-usb: bulk message failed: -22 (3/0) [ 127.601009][ T6428] dvb-usb: bulk message failed: -22 (3/0) [ 127.628952][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.775266][ T5927] usb 2-1: selecting invalid altsetting 6 [ 127.806185][ T5927] usb 2-1: digital interface selection failed (-22) [ 127.821026][ T5927] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 127.842762][ T5927] usb 2-1: setting power OFF [ 127.869509][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 127.881700][ T6456] loop4: detected capacity change from 0 to 128 [ 127.888307][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 127.906023][ T6456] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.924604][ T5927] (NULL device *): no alternate interface [ 128.021261][ T6456] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.164530][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 128.295382][ T6464] loop1: detected capacity change from 0 to 764 [ 128.333276][ T6464] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 128.463463][ T5927] usb 2-1: USB disconnect, device number 4 [ 128.893358][ T6469] loop0: detected capacity change from 0 to 32768 [ 128.937753][ T6471] IPVS: length: 102 != 8 [ 129.469514][ T6481] netlink: 165 bytes leftover after parsing attributes in process `syz.2.151'. [ 129.545993][ T6485] loop1: detected capacity change from 0 to 2048 [ 129.653783][ T6485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 129.825576][ T6495] loop3: detected capacity change from 0 to 512 [ 129.834568][ T6485] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.901288][ T6495] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.907862][ T6485] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 374 with error 28 [ 129.965242][ T6495] EXT4-fs (loop3): 1 truncate cleaned up [ 129.982268][ T6485] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.982268][ T6485] [ 129.995604][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.016482][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.080905][ T6485] EXT4-fs (loop1): Total free blocks count 0 [ 130.100616][ T6485] EXT4-fs (loop1): Free/Dirty block details [ 130.108478][ T6485] EXT4-fs (loop1): free_blocks=2415919104 [ 130.114380][ T6485] EXT4-fs (loop1): dirty_blocks=384 [ 130.120327][ T6485] EXT4-fs (loop1): Block reservation details [ 130.126922][ T6485] EXT4-fs (loop1): i_reserved_data_blocks=24 [ 130.132133][ T6495] EXT4-fs (loop3): shut down requested (1) [ 130.177012][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 130.196198][ T5920] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 130.201613][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.211105][ T5920] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 130.222881][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.284735][ T5920] usb 5-1: Product: syz [ 130.288979][ T5920] usb 5-1: Manufacturer: syz [ 130.293746][ T5920] usb 5-1: SerialNumber: syz [ 130.335969][ T5920] usb 5-1: config 0 descriptor?? [ 130.405825][ T6505] IPVS: length: 102 != 8 [ 130.580980][ T6502] loop2: detected capacity change from 0 to 32768 [ 130.595676][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 130.603863][ T5920] usb 5-1: setting power ON [ 130.619387][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 130.668207][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.741612][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 130.783221][ T2999] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 130.789621][ T5920] usb 5-1: media controller created [ 130.866325][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.025999][ T5920] usb 5-1: selecting invalid altsetting 6 [ 131.034122][ T5920] usb 5-1: digital interface selection failed (-22) [ 131.080797][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 131.160098][ T5920] usb 5-1: setting power OFF [ 131.165264][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 131.174485][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 131.204233][ T5920] (NULL device *): no alternate interface [ 131.257714][ T5239] udevd[5239]: worker [5993] terminated by signal 33 (Unknown signal 33) [ 131.310426][ T5239] udevd[5239]: worker [5993] failed while handling '/devices/virtual/block/loop2' [ 131.353914][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 131.386461][ T5920] usb 5-1: USB disconnect, device number 5 [ 131.482515][ T6519] loop2: detected capacity change from 0 to 1024 [ 131.621721][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.018043][ T6533] IPVS: length: 102 != 8 [ 132.127091][ T5885] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 132.136382][ T5885] Bluetooth: hci2: Injecting HCI hardware error event [ 132.144950][ T5874] Bluetooth: hci2: hardware error 0x00 [ 132.205853][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.395222][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 132.496509][ T6541] netlink: 165 bytes leftover after parsing attributes in process `syz.3.178'. [ 132.600095][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 132.610999][ T9] usb 5-1: config 179 has no interface number 0 [ 132.628862][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 132.663248][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 132.691289][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 132.724132][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 132.786796][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 132.859696][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 132.882368][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.013856][ T6535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.034500][ T6535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.116586][ T6548] loop1: detected capacity change from 0 to 4096 [ 133.189940][ T6548] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 133.420943][ T5920] usb 5-1: USB disconnect, device number 6 [ 133.420938][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.435339][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.540365][ T6555] loop3: detected capacity change from 0 to 512 [ 133.552523][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 133.570073][ T6555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.607711][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.655182][ T6555] EXT4-fs (loop3): 1 truncate cleaned up [ 133.685860][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.768033][ T6555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.782536][ T6558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 133.811527][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.825852][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.843404][ T30] audit: type=1800 audit(1757646932.214:5): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.190" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 134.200042][ T6565] loop4: detected capacity change from 0 to 1024 [ 134.208741][ T5874] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.261377][ T6565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.591017][ T6574] IPVS: length: 102 != 8 [ 134.631852][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.680894][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.742464][ T6576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 135.023711][ T6587] loop4: detected capacity change from 0 to 256 [ 135.042160][ T9] libceph: connect (1)[c::]:6789 error -101 [ 135.049223][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 135.079882][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 135.107610][ T6587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 135.137223][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 135.152810][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 135.336301][ T9] libceph: connect (1)[c::]:6789 error -101 [ 135.342543][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 135.394785][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 135.436134][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 135.442290][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 135.487857][ T6598] bond0: (slave bond_slave_1): Releasing backup interface [ 135.540458][ T6577] ceph: No mds server is up or the cluster is laggy [ 135.547562][ T6581] ceph: No mds server is up or the cluster is laggy [ 135.579456][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.600018][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.655031][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 135.701280][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.703310][ T6600] syzkaller0: entered promiscuous mode [ 135.768810][ T24] usb 1-1: config 0 descriptor?? [ 135.800610][ T6600] syzkaller0: entered allmulticast mode [ 135.854005][ T6603] loop4: detected capacity change from 0 to 128 [ 135.860782][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 135.887369][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 135.894511][ T6603] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.962014][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 135.982115][ T6603] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.997098][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 136.009313][ T6588] dvb-usb: bulk message failed: -22 (2/0) [ 136.035598][ T24] usb 1-1: media controller created [ 136.066459][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.110459][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 136.151000][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 136.169715][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 136.213968][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 136.245193][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 136.308099][ T24] usb 1-1: USB disconnect, device number 4 [ 136.345019][ T6613] IPVS: length: 102 != 8 [ 136.369691][ T6612] loop4: detected capacity change from 0 to 128 [ 136.442131][ T6615] IPVS: stopping backup sync thread 6617 ... [ 136.442130][ T6617] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 136.506591][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 136.522317][ T6618] net_ratelimit: 10 callbacks suppressed [ 136.522338][ T6618] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.735740][ T6625] loop0: detected capacity change from 0 to 512 [ 136.803265][ T6625] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.875437][ T6625] EXT4-fs (loop0): 1 truncate cleaned up [ 136.925027][ T6625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.937549][ T6632] loop3: detected capacity change from 0 to 64 [ 137.062785][ T6625] EXT4-fs (loop0): shut down requested (1) [ 137.131678][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.183136][ T6639] loop3: detected capacity change from 0 to 128 [ 137.298571][ T6639] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.339375][ T6639] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.760952][ T6652] loop3: detected capacity change from 0 to 128 [ 138.106349][ T6656] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.145357][ T2154] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 138.227000][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.233810][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.300090][ T6660] loop3: detected capacity change from 0 to 512 [ 138.315245][ T6659] loop1: detected capacity change from 0 to 1024 [ 138.338130][ T2154] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.354713][ T2154] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.452635][ T6660] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.226: bg 0: block 5: invalid block bitmap [ 138.471000][ T6660] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 138.488697][ T6660] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.226: invalid indirect mapped block 3 (level 2) [ 138.492250][ T6659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.505649][ T6660] EXT4-fs (loop3): 1 orphan inode deleted [ 138.527970][ T6660] EXT4-fs (loop3): 1 truncate cleaned up [ 138.547864][ T2154] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.567018][ T6660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.586563][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.658734][ T2154] usb 1-1: config 0 descriptor?? [ 138.741672][ T2154] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.785576][ T2154] dvb-usb: bulk message failed: -22 (3/0) [ 138.847977][ T2154] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.892960][ T2154] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.907531][ T2154] usb 1-1: media controller created [ 138.918660][ T2154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.923877][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.942721][ T6654] dvb-usb: bulk message failed: -22 (2/0) [ 138.962516][ T2154] dvb-usb: bulk message failed: -22 (6/0) [ 138.972995][ T2154] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 139.067114][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.085489][ T2154] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 139.145031][ T2154] dvb-usb: schedule remote query interval to 150 msecs. [ 139.170564][ T2154] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 139.262944][ T2154] usb 1-1: USB disconnect, device number 5 [ 139.371200][ T2154] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 139.991012][ T6680] loop3: detected capacity change from 0 to 128 [ 140.008861][ T6680] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.089701][ T6680] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.752932][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'. [ 140.963784][ T6693] loop3: detected capacity change from 0 to 256 [ 141.007502][ T6693] exfat: Deprecated parameter 'namecase' [ 141.013308][ T6693] exfat: Deprecated parameter 'namecase' [ 141.047484][ T6693] exfat: Deprecated parameter 'utf8' [ 141.084281][ T6697] loop4: detected capacity change from 0 to 2048 [ 141.231040][ T6697] syz.4.238: attempt to access beyond end of device [ 141.231040][ T6697] loop4: rw=0, sector=36028797018964050, nr_sectors = 2 limit=2048 [ 141.233093][ T6693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 141.355555][ T6697] NILFS (loop4): I/O error reading meta-data file (ino=5, block-offset=0) [ 141.419316][ T6697] NILFS (loop4): error -5 while loading super root [ 141.493388][ T6697] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 141.575262][ T5874] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 141.584188][ T5874] Bluetooth: hci0: Injecting HCI hardware error event [ 141.594254][ T5885] Bluetooth: hci0: hardware error 0x00 [ 142.167712][ T6718] loop4: detected capacity change from 0 to 512 [ 142.201795][ T6718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.234844][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.308509][ T6720] loop0: detected capacity change from 0 to 256 [ 142.327853][ T6720] exfat: Deprecated parameter 'utf8' [ 142.333276][ T6720] exfat: Deprecated parameter 'utf8' [ 142.347755][ T6718] EXT4-fs: Mount option(s) incompatible with ext3 [ 142.439603][ T6720] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 142.476919][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.504689][ T24] usb 2-1: config 0 has no interface number 0 [ 142.546347][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 142.564708][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.609829][ T24] usb 2-1: Product: syz [ 142.644689][ T24] usb 2-1: Manufacturer: syz [ 142.649368][ T24] usb 2-1: SerialNumber: syz [ 142.680758][ T24] usb 2-1: config 0 descriptor?? [ 142.900413][ T6732] loop0: detected capacity change from 0 to 128 [ 142.921311][ T24] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 142.941261][ T6732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 142.992542][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.025400][ T6732] System zones: 1-3, 19-19, 35-36 [ 143.126788][ T6732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.135656][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.189972][ T6732] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.255628][ T24] usb 2-1: media controller created [ 143.304101][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.376789][ T5867] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.457525][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 143.693528][ T24] usb 2-1: USB disconnect, device number 5 [ 143.814757][ T5885] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 144.221891][ T6767] loop4: detected capacity change from 0 to 512 [ 144.261861][ T6767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.314850][ T6767] EXT4-fs: Mount option(s) incompatible with ext3 [ 144.687065][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 144.771317][ T6782] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 144.804864][ T6782] EXT4-fs (loop4): unable to read superblock [ 145.304050][ T24] libceph: connect (1)[c::]:6789 error -97 [ 145.342356][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 145.785524][ T5927] libceph: connect (1)[c::]:6789 error -97 [ 145.944972][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 146.112950][ T6795] ceph: No mds server is up or the cluster is laggy [ 146.328417][ T6810] loop0: detected capacity change from 0 to 64 [ 146.876410][ T6821] loop1: detected capacity change from 0 to 512 [ 146.945948][ T6821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.980004][ T6821] EXT4-fs: Mount option(s) incompatible with ext3 [ 151.704818][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.769285][ T6867] loop3: detected capacity change from 0 to 512 [ 151.796321][ T6867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.840288][ T6867] EXT4-fs: Mount option(s) incompatible with ext3 [ 151.917601][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 151.932364][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 151.969232][ T24] usb 1-1: config 0 has no interface number 0 [ 152.006314][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 152.076066][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 152.109994][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.141081][ T24] usb 1-1: Product: syz [ 152.154133][ T24] usb 1-1: Manufacturer: syz [ 152.167517][ T24] usb 1-1: SerialNumber: syz [ 152.190234][ T24] usb 1-1: config 0 descriptor?? [ 152.210831][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 152.274806][ T24] em28xx 1-1:0.89: Video interface 89 found: bulk [ 152.781405][ T6875] loop4: detected capacity change from 0 to 512 [ 152.839437][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 152.875924][ T6875] EXT4-fs: Ignoring removed i_version option [ 152.919830][ T6875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.274166][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.464558][ T24] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 153.500199][ T24] em28xx 1-1:0.89: board has no eeprom [ 153.614751][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 153.677332][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 153.714117][ T5920] em28xx 1-1:0.89: Registering V4L2 extension [ 153.749548][ T6894] loop2: detected capacity change from 0 to 2048 [ 153.774773][ T24] usb 1-1: USB disconnect, device number 6 [ 153.818473][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 153.838093][ T6894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.087123][ T6899] loop3: detected capacity change from 0 to 40427 [ 154.113604][ T6899] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 154.123185][ T6899] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.150334][ T6899] F2FS-fs (loop3): invalid crc value [ 154.247890][ T6899] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.278540][ T6899] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.286069][ T6899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.962590][ T6906] loop4: detected capacity change from 0 to 512 [ 154.989593][ T5920] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 155.024703][ T5920] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 155.031813][ T5920] em28xx 1-1:0.89: No AC97 audio processor [ 155.052427][ T6906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.066459][ T5920] usb 1-1: Decoder not found [ 155.071125][ T5920] em28xx 1-1:0.89: failed to create media graph [ 155.147286][ T6906] EXT4-fs: Mount option(s) incompatible with ext3 [ 155.164312][ T5920] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 155.208959][ T5920] em28xx 1-1:0.89: Registering snapshot button... [ 155.268702][ T5920] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input10 [ 155.366143][ T5920] em28xx 1-1:0.89: Remote control support is not available for this card. [ 155.424864][ T24] em28xx 1-1:0.89: Closing input extension [ 155.441627][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 155.632838][ T6914] loop4: detected capacity change from 0 to 2048 [ 155.657703][ T24] ================================================================== [ 155.665916][ T24] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 155.674277][ T24] Read of size 4 at addr ffff8880786314f0 by task kworker/1:0/24 [ 155.682089][ T24] [ 155.684437][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 155.684458][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.684472][ T24] Workqueue: usb_hub_wq hub_event [ 155.684503][ T24] Call Trace: [ 155.684510][ T24] [ 155.684519][ T24] dump_stack_lvl+0x189/0x250 [ 155.684545][ T24] ? rcu_is_watching+0x15/0xb0 [ 155.684577][ T24] ? __kasan_check_byte+0x12/0x40 [ 155.684605][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.684628][ T24] ? rcu_is_watching+0x15/0xb0 [ 155.684659][ T24] ? lock_release+0x4b/0x3e0 [ 155.684685][ T24] ? __virt_addr_valid+0x1c8/0x5c0 [ 155.684705][ T24] ? __virt_addr_valid+0x4a5/0x5c0 [ 155.684726][ T24] print_report+0xca/0x240 [ 155.684743][ T24] ? media_devnode_unregister+0xe2/0xf0 [ 155.684768][ T24] kasan_report+0x118/0x150 [ 155.684795][ T24] ? media_devnode_unregister+0xe2/0xf0 [ 155.684823][ T24] media_devnode_unregister+0xe2/0xf0 [ 155.684847][ T24] media_device_unregister+0x37c/0x400 [ 155.684874][ T24] em28xx_release_resources+0xac/0x240 [ 155.684904][ T24] em28xx_usb_disconnect+0x19f/0x2f0 [ 155.684933][ T24] usb_unbind_interface+0x26e/0x910 [ 155.684958][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 155.684981][ T24] device_release_driver_internal+0x4d9/0x800 [ 155.685013][ T24] bus_remove_device+0x34d/0x410 [ 155.685038][ T24] device_del+0x511/0x8e0 [ 155.685068][ T24] ? __pfx_device_del+0x10/0x10 [ 155.685094][ T24] ? kobject_put+0x446/0x480 [ 155.685116][ T24] usb_disable_device+0x3e9/0x8a0 [ 155.685139][ T24] usb_disconnect+0x330/0x950 [ 155.685159][ T24] hub_event+0x1cf5/0x4a20 [ 155.685189][ T24] ? do_raw_spin_lock+0x121/0x290 [ 155.685209][ T24] ? register_lock_class+0x51/0x320 [ 155.685239][ T24] ? __pfx_hub_event+0x10/0x10 [ 155.685258][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 155.685286][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.685312][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 155.685338][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 155.685365][ T24] process_scheduled_works+0xae1/0x17b0 [ 155.685403][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.685436][ T24] worker_thread+0x8a0/0xda0 [ 155.685473][ T24] kthread+0x711/0x8a0 [ 155.685493][ T24] ? __pfx_worker_thread+0x10/0x10 [ 155.685520][ T24] ? __pfx_kthread+0x10/0x10 [ 155.685539][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.685572][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.685598][ T24] ? __pfx_kthread+0x10/0x10 [ 155.685617][ T24] ret_from_fork+0x47c/0x820 [ 155.685655][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 155.685682][ T24] ? __switch_to_asm+0x39/0x70 [ 155.685704][ T24] ? __switch_to_asm+0x33/0x70 [ 155.685726][ T24] ? __pfx_kthread+0x10/0x10 [ 155.685744][ T24] ret_from_fork_asm+0x1a/0x30 [ 155.685773][ T24] [ 155.685779][ T24] [ 155.963002][ T24] Allocated by task 24: [ 155.967161][ T24] kasan_save_track+0x3e/0x80 [ 155.971852][ T24] __kasan_kmalloc+0x93/0xb0 [ 155.976453][ T24] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 155.981840][ T24] __media_device_register+0x58/0x280 [ 155.987251][ T24] em28xx_usb_probe+0x1764/0x2a20 [ 155.992304][ T24] usb_probe_interface+0x665/0xc30 [ 155.997517][ T24] really_probe+0x26d/0x9e0 [ 156.002036][ T24] __driver_probe_device+0x18c/0x2f0 [ 156.007335][ T24] driver_probe_device+0x4f/0x430 [ 156.012459][ T24] __device_attach_driver+0x2ce/0x530 [ 156.017961][ T24] bus_for_each_drv+0x24e/0x2e0 [ 156.022829][ T24] __device_attach+0x2b8/0x400 [ 156.027610][ T24] bus_probe_device+0x185/0x260 [ 156.032472][ T24] device_add+0x7b6/0xb50 [ 156.036811][ T24] usb_set_configuration+0x1a87/0x20e0 [ 156.042279][ T24] usb_generic_driver_probe+0x8d/0x150 [ 156.047743][ T24] usb_probe_device+0x1c1/0x390 [ 156.052687][ T24] really_probe+0x26d/0x9e0 [ 156.057214][ T24] __driver_probe_device+0x18c/0x2f0 [ 156.062516][ T24] driver_probe_device+0x4f/0x430 [ 156.067546][ T24] __device_attach_driver+0x2ce/0x530 [ 156.072936][ T24] bus_for_each_drv+0x24e/0x2e0 [ 156.077805][ T24] __device_attach+0x2b8/0x400 [ 156.082585][ T24] bus_probe_device+0x185/0x260 [ 156.087445][ T24] device_add+0x7b6/0xb50 [ 156.091784][ T24] usb_new_device+0xa39/0x16f0 [ 156.096639][ T24] hub_event+0x2958/0x4a20 [ 156.101151][ T24] process_scheduled_works+0xae1/0x17b0 [ 156.106709][ T24] worker_thread+0x8a0/0xda0 [ 156.111422][ T24] kthread+0x711/0x8a0 [ 156.115502][ T24] ret_from_fork+0x47c/0x820 [ 156.120114][ T24] ret_from_fork_asm+0x1a/0x30 [ 156.124894][ T24] [ 156.127234][ T24] Freed by task 24: [ 156.131038][ T24] kasan_save_track+0x3e/0x80 [ 156.135726][ T24] __kasan_save_free_info+0x46/0x50 [ 156.140930][ T24] __kasan_slab_free+0x5b/0x80 [ 156.145703][ T24] kfree+0x199/0x6d0 [ 156.149609][ T24] media_devnode_release+0x61/0xa0 [ 156.154750][ T24] device_release+0x99/0x1c0 [ 156.159527][ T24] kobject_put+0x228/0x480 [ 156.163953][ T24] media_devnode_unregister+0x6d/0xf0 [ 156.169353][ T24] media_device_unregister+0x37c/0x400 [ 156.174852][ T24] em28xx_release_resources+0xac/0x240 [ 156.180350][ T24] em28xx_usb_disconnect+0x19f/0x2f0 [ 156.185656][ T24] usb_unbind_interface+0x26e/0x910 [ 156.190865][ T24] device_release_driver_internal+0x4d9/0x800 [ 156.196948][ T24] bus_remove_device+0x34d/0x410 [ 156.201898][ T24] device_del+0x511/0x8e0 [ 156.206243][ T24] usb_disable_device+0x3e9/0x8a0 [ 156.211275][ T24] usb_disconnect+0x330/0x950 [ 156.215986][ T24] hub_event+0x1cf5/0x4a20 [ 156.220415][ T24] process_scheduled_works+0xae1/0x17b0 [ 156.225978][ T24] worker_thread+0x8a0/0xda0 [ 156.230671][ T24] kthread+0x711/0x8a0 [ 156.234746][ T24] ret_from_fork+0x47c/0x820 [ 156.239358][ T24] ret_from_fork_asm+0x1a/0x30 [ 156.244133][ T24] [ 156.246469][ T24] The buggy address belongs to the object at ffff888078631000 [ 156.246469][ T24] which belongs to the cache kmalloc-2k of size 2048 [ 156.260524][ T24] The buggy address is located 1264 bytes inside of [ 156.260524][ T24] freed 2048-byte region [ffff888078631000, ffff888078631800) [ 156.274510][ T24] [ 156.276844][ T24] The buggy address belongs to the physical page: [ 156.283310][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78630 [ 156.292084][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.300932][ T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.308493][ T24] page_type: f5(slab) [ 156.312493][ T24] raw: 00fff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 156.321087][ T24] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 156.329897][ T24] head: 00fff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 156.338586][ T24] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 156.347267][ T24] head: 00fff00000000003 ffffea0001e18c01 00000000ffffffff 00000000ffffffff [ 156.355936][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 156.364604][ T24] page dumped because: kasan: bad access detected [ 156.371048][ T24] page_owner tracks the page as allocated [ 156.376764][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5867, tgid 5867 (syz-executor), ts 92425460782, free_ts 92365721303 [ 156.397527][ T24] post_alloc_hook+0x240/0x2a0 [ 156.402308][ T24] get_page_from_freelist+0x21e4/0x22c0 [ 156.407877][ T24] __alloc_frozen_pages_noprof+0x181/0x370 [ 156.413702][ T24] alloc_pages_mpol+0x232/0x4a0 [ 156.418563][ T24] allocate_slab+0x8a/0x330 [ 156.423074][ T24] ___slab_alloc+0xbd1/0x13f0 [ 156.427766][ T24] __slab_alloc+0x55/0xa0 [ 156.432109][ T24] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 156.438620][ T24] kmalloc_reserve+0x136/0x290 [ 156.443425][ T24] pskb_expand_head+0x18e/0x1150 [ 156.448369][ T24] netlink_trim+0x1d5/0x2e0 [ 156.452886][ T24] netlink_broadcast_filtered+0xd6/0x1000 [ 156.458615][ T24] nlmsg_notify+0xf0/0x1a0 [ 156.463043][ T24] __dev_notify_flags+0xf4/0x2e0 [ 156.467999][ T24] netif_change_flags+0xe8/0x1a0 [ 156.472959][ T24] do_setlink+0xc55/0x41c0 [ 156.477381][ T24] page last free pid 24 tgid 24 stack trace: [ 156.483385][ T24] __free_frozen_pages+0xbc4/0xd30 [ 156.488525][ T24] __slab_free+0x2e7/0x390 [ 156.492954][ T24] qlist_free_all+0x97/0x140 [ 156.497625][ T24] kasan_quarantine_reduce+0x148/0x160 [ 156.503102][ T24] __kasan_slab_alloc+0x22/0x80 [ 156.507975][ T24] __kmalloc_node_track_caller_noprof+0x519/0x800 [ 156.514407][ T24] kmalloc_reserve+0x136/0x290 [ 156.519177][ T24] __alloc_skb+0x142/0x2d0 [ 156.523597][ T24] mld_newpack+0x13c/0xc40 [ 156.528126][ T24] add_grhead+0x5a/0x2a0 [ 156.532386][ T24] add_grec+0x1452/0x1740 [ 156.536763][ T24] mld_ifc_work+0x6ed/0xd60 [ 156.541297][ T24] process_scheduled_works+0xae1/0x17b0 [ 156.546864][ T24] worker_thread+0x8a0/0xda0 [ 156.551467][ T24] kthread+0x711/0x8a0 [ 156.555626][ T24] ret_from_fork+0x47c/0x820 [ 156.560227][ T24] [ 156.562549][ T24] Memory state around the buggy address: [ 156.568186][ T24] ffff888078631380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.576256][ T24] ffff888078631400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.584409][ T24] >ffff888078631480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.592473][ T24] ^ [ 156.600190][ T24] ffff888078631500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.608255][ T24] ffff888078631580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.616322][ T24] ================================================================== [ 156.785398][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.792658][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 156.801887][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.812251][ T24] Workqueue: usb_hub_wq hub_event [ 156.817308][ T24] Call Trace: [ 156.820713][ T24] [ 156.823739][ T24] dump_stack_lvl+0x99/0x250 [ 156.828352][ T24] ? __asan_memcpy+0x40/0x70 [ 156.832966][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.838178][ T24] ? __pfx__printk+0x10/0x10 [ 156.842816][ T24] vpanic+0x237/0x6d0 [ 156.846833][ T24] ? __pfx_vpanic+0x10/0x10 [ 156.851377][ T24] ? preempt_schedule+0xae/0xc0 [ 156.856279][ T24] ? __pfx_preempt_schedule+0x10/0x10 [ 156.861837][ T24] panic+0xb9/0xc0 [ 156.865621][ T24] ? __pfx_panic+0x10/0x10 [ 156.870080][ T24] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 156.876021][ T24] ? media_devnode_unregister+0xe2/0xf0 [ 156.881632][ T24] check_panic_on_warn+0x89/0xb0 [ 156.886620][ T24] ? media_devnode_unregister+0xe2/0xf0 [ 156.892401][ T24] end_report+0x78/0x160 [ 156.896697][ T24] kasan_report+0x129/0x150 [ 156.901249][ T24] ? media_devnode_unregister+0xe2/0xf0 [ 156.906871][ T24] media_devnode_unregister+0xe2/0xf0 [ 156.912291][ T24] media_device_unregister+0x37c/0x400 [ 156.917778][ T24] em28xx_release_resources+0xac/0x240 [ 156.923261][ T24] em28xx_usb_disconnect+0x19f/0x2f0 [ 156.928584][ T24] usb_unbind_interface+0x26e/0x910 [ 156.933897][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 156.939650][ T24] device_release_driver_internal+0x4d9/0x800 [ 156.945760][ T24] bus_remove_device+0x34d/0x410 [ 156.950717][ T24] device_del+0x511/0x8e0 [ 156.955086][ T24] ? __pfx_device_del+0x10/0x10 [ 156.959974][ T24] ? kobject_put+0x446/0x480 [ 156.964576][ T24] usb_disable_device+0x3e9/0x8a0 [ 156.969621][ T24] usb_disconnect+0x330/0x950 [ 156.974314][ T24] hub_event+0x1cf5/0x4a20 [ 156.978859][ T24] ? do_raw_spin_lock+0x121/0x290 [ 156.983995][ T24] ? register_lock_class+0x51/0x320 [ 156.989224][ T24] ? __pfx_hub_event+0x10/0x10 [ 156.994013][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 156.999876][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.005099][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 157.011022][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 157.016782][ T24] process_scheduled_works+0xae1/0x17b0 [ 157.022363][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.028365][ T24] worker_thread+0x8a0/0xda0 [ 157.032985][ T24] kthread+0x711/0x8a0 [ 157.037070][ T24] ? __pfx_worker_thread+0x10/0x10 [ 157.042211][ T24] ? __pfx_kthread+0x10/0x10 [ 157.046899][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.052124][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.057341][ T24] ? __pfx_kthread+0x10/0x10 [ 157.061946][ T24] ret_from_fork+0x47c/0x820 [ 157.066555][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 157.071772][ T24] ? __switch_to_asm+0x39/0x70 [ 157.076555][ T24] ? __switch_to_asm+0x33/0x70 [ 157.081349][ T24] ? __pfx_kthread+0x10/0x10 [ 157.085967][ T24] ret_from_fork_asm+0x1a/0x30 [ 157.090757][ T24] [ 157.094063][ T24] Kernel Offset: disabled [ 157.098397][ T24] Rebooting in 86400 seconds..