last executing test programs: 23.444203148s ago: executing program 2 (id=3683): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e26, 0xd, @local, 0x9}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'rose0\x00', {0x4}, 0x87fc}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) set_mempolicy(0xc005, 0x0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x92) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x59) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x4048000) 20.92049908s ago: executing program 2 (id=3690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000240), 0x0) timerfd_create(0x0, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget(0x3, 0x1, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 18.83783331s ago: executing program 2 (id=3695): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e26, 0xd, @local, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'rose0\x00', {0x4}, 0x87fc}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) set_mempolicy(0xc005, 0x0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x92) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x59) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x4048000) 16.279512444s ago: executing program 2 (id=3698): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x14, 0x2}, @flat=@weak_binder, @flat=@handle={0x73682a85, 0x10a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000ac0), 0x2, 0xfdfdffff, &(0x7f0000000bc0)='IC'}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) dup(r7) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 13.430289689s ago: executing program 2 (id=3702): socket(0x40000000015, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090186dd6000195800103afffc000000000000000000000000000000ff02000000000000000000000000000186009078007f67d918bf110a3f000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r2 = syz_create_resource$binfmt(0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000600), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000140)={0x10000, 0x5, 0x0, 0x7, 0x200000000000000, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 11.320044154s ago: executing program 2 (id=3707): socket(0x40000000015, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090186dd6000195800103afffc000000000000000000000000000000ff0200"/53], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r2 = syz_create_resource$binfmt(0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000600), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000140)={0x10000, 0x5, 0x0, 0x7, 0x200000000000000, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 7.165765436s ago: executing program 3 (id=3713): socket(0x40000000015, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r2 = syz_create_resource$binfmt(0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000600), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000140)={0x10000, 0x5, 0x0, 0x7, 0x200000000000000, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 5.793302143s ago: executing program 3 (id=3717): socket(0x40000000015, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r2 = syz_create_resource$binfmt(0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000600), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000140)={0x10000, 0x5, 0x0, 0x7, 0x200000000000000, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 5.062231128s ago: executing program 3 (id=3719): r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0x5, @pix={0xd3b, 0x3, 0x44495658, 0x9, 0x67b5, 0x9, 0x1, 0x3, 0x0, 0x1, 0x1, 0x2}}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_void(r6, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x140e, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 3.88726226s ago: executing program 4 (id=3720): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e26, 0xd, @local, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000000)={0x6, 'rose0\x00', {0x4}, 0x87fc}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) set_mempolicy(0xc005, 0x0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x92) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x59) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x4048000) 2.468840832s ago: executing program 1 (id=3724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 2.249622055s ago: executing program 1 (id=3726): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000000), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="02000100"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8) 2.182081854s ago: executing program 0 (id=3727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="442266eb5396", 'erspan0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 2.054734117s ago: executing program 1 (id=3728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000600)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) 1.940631224s ago: executing program 0 (id=3729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 1.938513275s ago: executing program 3 (id=3730): setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.917524361s ago: executing program 4 (id=3731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(0x0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.809792679s ago: executing program 1 (id=3732): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1a0) chmod(&(0x7f0000000040)='./bus\x00', 0x1ad5d7de6a77a4fd) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x2, 0x2, 0x6, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x64, '\x00', r5, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x177d8, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x5, 0x4, 0xe}, {0x5, 0x1, 0xb}, {0x3, 0x2, 0xa, 0x7}], 0x10, 0x4}, 0x94) 1.764823634s ago: executing program 4 (id=3733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) 1.530685853s ago: executing program 0 (id=3734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x8c4618b458db9105, @hyper}, 0x10) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) 1.397199554s ago: executing program 4 (id=3735): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000000000000002000000", @ANYBLOB='\x00\b\x00'], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c"], 0x23c}}, 0x8000000) 917.748459ms ago: executing program 0 (id=3736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2a020400) unshare(0x62040200) 917.129256ms ago: executing program 4 (id=3737): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a518fbd80000000000000000000000000000e4ff00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00009d"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='mm_page_free\x00', r2}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 871.309429ms ago: executing program 0 (id=3738): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 207.873352ms ago: executing program 3 (id=3739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 157.851652ms ago: executing program 4 (id=3740): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x3}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) socket$inet6(0xa, 0x6, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0x0, 0x97}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d017a0300000000000000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) 157.583824ms ago: executing program 1 (id=3741): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000007f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 43.779125ms ago: executing program 0 (id=3742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 17.064862ms ago: executing program 3 (id=3743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=3744): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0xc340) kernel console output (not intermixed with test programs): rror on dev loop6, logical block 0, async page read [ 1533.684403][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.701275][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.722047][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.762781][T13651] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1533.795522][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.812997][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.829146][T13651] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1533.839386][T13651] em28xx 1-1:0.89: board has no eeprom [ 1533.866150][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.905367][T13651] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1533.912616][T13651] em28xx 1-1:0.89: analog set to bulk mode. [ 1533.922692][T19073] em28xx 1-1:0.89: Registering V4L2 extension [ 1533.929301][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1533.990601][T21126] ldm_validate_partition_table(): Disk read failed. [ 1534.026860][T19073] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1534.046674][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1534.053159][T19073] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1534.066466][T19073] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1534.094054][T19073] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1534.095191][T21126] Buffer I/O error on dev loop6, logical block 0, async page read [ 1534.124888][T21121] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1534.144418][T19073] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 1534.156939][T21126] Dev loop6: unable to read RDB block 0 [ 1534.172472][T21126] loop6: unable to read partition table [ 1534.178474][T21126] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1534.197101][T19073] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1534.204130][T19073] em28xx 1-1:0.89: No AC97 audio processor [ 1534.235620][T19073] usb 1-1: Decoder not found [ 1534.240215][T19073] em28xx 1-1:0.89: failed to create media graph [ 1534.250129][T19073] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1534.318944][T19073] em28xx 1-1:0.89: Registering snapshot button... [ 1534.354229][T19073] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input12 [ 1534.458240][T19073] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1534.464334][ T5876] usb 1-1: USB disconnect, device number 15 [ 1534.939875][ T5876] em28xx 1-1:0.89: Disconnecting em28xx [ 1534.945521][ T5876] em28xx 1-1:0.89: Closing input extension [ 1534.951350][ T5876] em28xx 1-1:0.89: Deregistering snapshot button [ 1535.073987][T21141] 9pnet_virtio: no channels available for device syz [ 1535.137096][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1535.143696][ T5186] Dev loop6: unable to read RDB block 0 [ 1535.160656][ T5186] loop6: unable to read partition table [ 1535.385386][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1535.562068][ T5876] em28xx 1-1:0.89: Freeing device [ 1535.931135][T21151] binder: 21147:21151 ioctl c0306201 0 returned -14 [ 1535.948031][T21151] binder: 21147:21151 ioctl c0306201 200000000c80 returned -14 [ 1535.994834][T21151] loop6: detected capacity change from 0 to 2640 [ 1536.001554][T21151] ldm_validate_partition_table(): Disk read failed. [ 1536.012924][T21151] Dev loop6: unable to read RDB block 0 [ 1536.026476][T21151] loop6: unable to read partition table [ 1536.037403][T21151] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1536.926813][T21172] hub 9-0:1.0: USB hub found [ 1536.932610][T21172] hub 9-0:1.0: 1 port detected [ 1538.392762][T21194] 9pnet_virtio: no channels available for device syz [ 1539.090161][T21199] hub 9-0:1.0: USB hub found [ 1539.095382][T21199] hub 9-0:1.0: 1 port detected [ 1539.163485][T21202] binder: 21201:21202 ioctl c0306201 0 returned -14 [ 1539.191045][T21202] binder: 21201:21202 ioctl c0306201 200000000c80 returned -14 [ 1539.406137][T21204] binder: 21203:21204 ioctl c0306201 200000000c80 returned -14 [ 1539.418822][T21202] loop6: detected capacity change from 0 to 2640 [ 1539.436029][T21202] buffer_io_error: 48 callbacks suppressed [ 1539.436043][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.472539][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.515342][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.535453][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.586286][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.615160][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.625940][T21209] binder: 21207:21209 ioctl c0306201 0 returned -14 [ 1539.648840][T21209] binder: 21207:21209 ioctl c0306201 200000000c80 returned -14 [ 1539.662326][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.670481][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.679117][T21202] ldm_validate_partition_table(): Disk read failed. [ 1539.695853][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.703690][T21202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.735403][T21202] Dev loop6: unable to read RDB block 0 [ 1539.741009][T21202] loop6: unable to read partition table [ 1539.784985][T21202] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1539.842482][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1539.856895][ T5186] Dev loop6: unable to read RDB block 0 [ 1539.862547][ T5186] loop6: unable to read partition table [ 1542.024485][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'. [ 1542.034488][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3369'. [ 1542.051418][T21247] hub 9-0:1.0: USB hub found [ 1542.058183][T21247] hub 9-0:1.0: 1 port detected [ 1542.570677][T21227] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1543.206252][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1543.212425][T21248] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 1544.806301][T21275] binder: 21272:21275 ioctl c0306201 200000000c80 returned -14 [ 1544.959656][T21275] loop6: detected capacity change from 0 to 2640 [ 1545.640063][T21275] buffer_io_error: 37 callbacks suppressed [ 1545.640079][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1545.640948][ T4136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1545.645975][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1545.666631][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1545.787554][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1545.833183][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1545.935429][T19073] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1545.977626][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1545.994758][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1546.175510][T19073] usb 5-1: Using ep0 maxpacket: 32 [ 1546.185593][T19073] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1546.199822][T19073] usb 5-1: config 0 has no interface number 0 [ 1546.235523][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1546.246519][T19073] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1546.255779][T19073] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1546.264807][T19073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.276220][T19073] usb 5-1: Product: syz [ 1546.276293][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1546.280927][T19073] usb 5-1: Manufacturer: syz [ 1546.301795][T19073] usb 5-1: SerialNumber: syz [ 1546.317383][T19073] usb 5-1: config 0 descriptor?? [ 1546.328909][T19073] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1546.338977][T19073] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1546.340396][T21275] ldm_validate_partition_table(): Disk read failed. [ 1546.355437][T13651] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1546.365864][T21288] binder: 21286:21288 ioctl c0306201 0 returned -14 [ 1546.373287][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1546.389930][T21275] Buffer I/O error on dev loop6, logical block 0, async page read [ 1546.409942][T21275] Dev loop6: unable to read RDB block 0 [ 1546.425575][T21275] loop6: unable to read partition table [ 1546.451093][T21275] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1546.477654][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1546.485839][ T5186] Dev loop6: unable to read RDB block 0 [ 1546.491566][ T5186] loop6: unable to read partition table [ 1546.517220][T13651] usb 4-1: config 0 has an invalid interface number: 166 but max is 0 [ 1546.560909][T13651] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1546.577375][T13651] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1546.594105][T13651] usb 4-1: config 0 has no interface number 0 [ 1546.601725][T13651] usb 4-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1546.616642][T13651] usb 4-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1546.627219][T13651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.659546][T13651] usb 4-1: config 0 descriptor?? [ 1546.670405][T13651] hub 4-1:0.166: bad descriptor, ignoring hub [ 1546.677009][T13651] hub 4-1:0.166: probe with driver hub failed with error -5 [ 1546.690442][T13651] cp210x 4-1:0.166: cp210x converter detected [ 1546.778706][T21290] binder: 21289:21290 ioctl 4018620d 0 returned -22 [ 1546.815780][T21290] binder: 21289:21290 ioctl c0306201 200000000c80 returned -14 [ 1546.869312][T13651] cp210x 4-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1546.904217][T13651] cp210x 4-1:0.166: querying part number failed [ 1546.917052][T21290] loop6: detected capacity change from 0 to 2640 [ 1546.948681][T13651] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1546.955917][T21290] ldm_validate_partition_table(): Disk read failed. [ 1546.963650][T21290] Dev loop6: unable to read RDB block 0 [ 1546.980027][T21290] loop6: unable to read partition table [ 1547.012602][T21290] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1547.026277][T13651] usb 4-1: USB disconnect, device number 20 [ 1547.067758][T13651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1547.089501][T13651] cp210x 4-1:0.166: device disconnected [ 1547.280846][T21303] netlink: 'syz.1.3383': attribute type 4 has an invalid length. [ 1547.432597][T19073] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1547.564989][T19073] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1547.576960][T19073] em28xx 5-1:0.89: board has no eeprom [ 1548.110649][T19073] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1548.136714][T19073] em28xx 5-1:0.89: analog set to bulk mode. [ 1548.157203][T13651] em28xx 5-1:0.89: Registering V4L2 extension [ 1548.164515][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1548.183329][T19073] usb 5-1: USB disconnect, device number 29 [ 1548.215372][ T5186] Dev loop6: unable to read RDB block 0 [ 1548.215777][T19073] em28xx 5-1:0.89: Disconnecting em28xx [ 1548.281604][ T5186] loop6: unable to read partition table [ 1548.307467][T13651] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1548.333924][T13651] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1548.356145][T13651] em28xx 5-1:0.89: No AC97 audio processor [ 1548.373645][T13651] usb 5-1: Decoder not found [ 1548.400281][T13651] em28xx 5-1:0.89: failed to create media graph [ 1548.426874][T13651] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1548.478387][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 1548.490815][T13651] em28xx 5-1:0.89: Registering snapshot button... [ 1548.509129][T13651] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input13 [ 1548.534440][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 1548.595459][T13651] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1548.661483][T19073] em28xx 5-1:0.89: Closing input extension [ 1548.685188][T19073] em28xx 5-1:0.89: Deregistering snapshot button [ 1548.756779][T19073] em28xx 5-1:0.89: Freeing device [ 1549.741230][T21323] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1550.525372][T13651] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1550.635530][T19073] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1550.676813][T13651] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1550.685632][T13651] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1550.694357][T13651] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1550.709800][T13651] usb 5-1: config 0 has no interface number 0 [ 1550.719505][T13651] usb 5-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1550.760756][T13651] usb 5-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1550.770348][T13651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.805482][T19073] usb 2-1: Using ep0 maxpacket: 32 [ 1550.816883][T19073] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1550.829413][T19073] usb 2-1: config 0 has no interface number 0 [ 1550.839540][T19073] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1550.873584][T19073] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1550.883415][T13651] usb 5-1: config 0 descriptor?? [ 1550.890966][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1550.922599][T19073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.931424][T13651] hub 5-1:0.166: bad descriptor, ignoring hub [ 1550.937716][T13651] hub 5-1:0.166: probe with driver hub failed with error -5 [ 1550.945367][T19073] usb 2-1: Product: syz [ 1550.953467][T19073] usb 2-1: Manufacturer: syz [ 1550.962999][T13651] cp210x 5-1:0.166: cp210x converter detected [ 1550.981595][T19073] usb 2-1: SerialNumber: syz [ 1551.001044][T19073] usb 2-1: config 0 descriptor?? [ 1551.036572][T19073] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1551.087244][T19073] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1551.131870][T13651] cp210x 5-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1551.157428][T13651] cp210x 5-1:0.166: querying part number failed [ 1551.187030][T13651] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1551.256139][T13651] usb 5-1: USB disconnect, device number 30 [ 1551.268861][T13651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1551.388877][T13651] cp210x 5-1:0.166: device disconnected [ 1552.267161][T19073] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1552.811324][T19073] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1552.838670][T19073] em28xx 2-1:0.89: board has no eeprom [ 1553.295874][T19073] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1553.347574][T19073] em28xx 2-1:0.89: analog set to bulk mode. [ 1553.353827][T13651] em28xx 2-1:0.89: Registering V4L2 extension [ 1553.473062][T19073] usb 2-1: USB disconnect, device number 18 [ 1553.535726][T19073] em28xx 2-1:0.89: Disconnecting em28xx [ 1553.567980][T13651] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1553.586054][T13651] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1553.595432][T13651] em28xx 2-1:0.89: No AC97 audio processor [ 1553.797943][T13651] usb 2-1: Decoder not found [ 1553.844950][T13651] em28xx 2-1:0.89: failed to create media graph [ 1553.952790][T13651] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1553.987192][T13651] em28xx 2-1:0.89: Registering snapshot button... [ 1554.005875][T13651] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input14 [ 1554.045412][T13651] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1554.113485][T19073] em28xx 2-1:0.89: Closing input extension [ 1554.138899][T19073] em28xx 2-1:0.89: Deregistering snapshot button [ 1555.096968][T19073] em28xx 2-1:0.89: Freeing device [ 1555.283863][T21382] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1555.765418][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1555.875448][T19073] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1556.298767][T19073] usb 4-1: config 0 has an invalid interface number: 166 but max is 0 [ 1556.375469][T19073] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1556.404378][T19073] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1556.444132][T19073] usb 4-1: config 0 has no interface number 0 [ 1556.480378][T19073] usb 4-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1556.505584][T19073] usb 4-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1556.515941][T19073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.591329][T19073] usb 4-1: config 0 descriptor?? [ 1556.630518][T19073] hub 4-1:0.166: bad descriptor, ignoring hub [ 1556.648828][T19073] hub 4-1:0.166: probe with driver hub failed with error -5 [ 1556.679856][T19073] cp210x 4-1:0.166: cp210x converter detected [ 1556.805189][T19073] cp210x 4-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1556.866500][T21430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3409'. [ 1557.300383][T19073] cp210x 4-1:0.166: querying part number failed [ 1557.323499][T19073] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1557.428359][T19073] usb 4-1: USB disconnect, device number 21 [ 1557.461750][T19073] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1557.628587][T19073] cp210x 4-1:0.166: device disconnected [ 1559.946522][T19073] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1560.708696][T19073] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 1560.729231][T19073] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1560.862191][T19073] usb 1-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1560.887275][T19073] usb 1-1: config 0 has no interface number 0 [ 1561.231854][T21469] 8021q: adding VLAN 0 to HW filter on device batadv63 [ 1561.240736][T21469] team0: Port device batadv63 added [ 1561.280480][T19073] usb 1-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1561.321947][T19073] usb 1-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1561.349214][T19073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.384281][T19073] usb 1-1: config 0 descriptor?? [ 1561.407623][T21471] hub 9-0:1.0: USB hub found [ 1561.410687][T19073] hub 1-1:0.166: bad descriptor, ignoring hub [ 1561.564750][T19073] hub 1-1:0.166: probe with driver hub failed with error -5 [ 1561.580577][T21471] hub 9-0:1.0: 1 port detected [ 1561.589109][T19073] cp210x 1-1:0.166: cp210x converter detected [ 1561.611837][T19073] cp210x 1-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1562.297485][T19073] cp210x 1-1:0.166: querying part number failed [ 1562.314873][T19073] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1562.365661][ T5876] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1562.525661][T19073] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 1562.538827][ T5876] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1562.550412][ T5876] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1562.566593][ T5876] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1562.582240][ T5876] usb 5-1: config 0 has no interface number 0 [ 1562.590701][ T5876] usb 5-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1562.602132][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.628300][ T5876] usb 5-1: config 0 descriptor?? [ 1562.636934][ T5876] hub 5-1:0.166: bad descriptor, ignoring hub [ 1562.643448][ T5876] hub 5-1:0.166: probe with driver hub failed with error -5 [ 1562.652528][ T5876] cp210x 5-1:0.166: cp210x converter detected [ 1562.717019][T19073] usb 1-1: device firmware changed [ 1562.730123][T19073] usb 1-1: USB disconnect, device number 16 [ 1562.744243][T19073] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1562.754020][T19073] cp210x 1-1:0.166: device disconnected [ 1563.075381][T19073] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1563.326624][T19073] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 1563.334845][T19073] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1563.343663][T19073] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1563.354336][T19073] usb 1-1: config 0 has no interface number 0 [ 1563.546368][T21490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1563.608233][T19073] usb 1-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1563.621549][T19073] usb 1-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1563.630729][T19073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.665167][T19073] usb 1-1: config 0 descriptor?? [ 1564.105504][T19073] hub 1-1:0.166: bad descriptor, ignoring hub [ 1564.130205][T19073] hub 1-1:0.166: probe with driver hub failed with error -5 [ 1564.145391][T13651] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1564.166562][T19073] cp210x 1-1:0.166: cp210x converter detected [ 1564.194487][T19073] cp210x 1-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1564.224316][T19073] cp210x 1-1:0.166: querying part number failed [ 1564.252612][T19073] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1564.388394][T19073] usb 1-1: USB disconnect, device number 17 [ 1564.399362][T13651] usb 2-1: Using ep0 maxpacket: 32 [ 1564.417556][T13651] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1564.430667][T19073] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1564.433577][ T5876] cp210x 5-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1564.439020][T13651] usb 2-1: config 0 has no interface number 0 [ 1564.508116][T21500] netlink: 'syz.3.3426': attribute type 2 has an invalid length. [ 1564.519548][T21500] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1564.789975][ T5876] cp210x 5-1:0.166: querying part number failed [ 1564.802558][ T5876] usb 5-1: cp210x converter now attached to ttyUSB1 [ 1564.812600][T19073] cp210x 1-1:0.166: device disconnected [ 1564.815727][T21501] netlink: 'syz.2.3425': attribute type 4 has an invalid length. [ 1564.821253][T13651] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1564.834991][T13651] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1564.844266][T13651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.855103][T13651] usb 2-1: Product: syz [ 1564.859479][T13651] usb 2-1: Manufacturer: syz [ 1564.864141][T13651] usb 2-1: SerialNumber: syz [ 1564.889472][T13651] usb 2-1: config 0 descriptor?? [ 1564.896443][ T5876] usb 5-1: USB disconnect, device number 31 [ 1564.908558][T13651] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1564.927477][T13651] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1565.041878][ T5876] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1565.437780][ T5876] cp210x 5-1:0.166: device disconnected [ 1566.626149][T13651] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1566.702467][T21521] binder: 21520:21521 ioctl c0306201 200000000c80 returned -14 [ 1566.731955][T13651] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1566.762794][T13651] em28xx 2-1:0.89: board has no eeprom [ 1566.855380][T19073] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1566.863760][T13651] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1566.887659][T21521] loop6: detected capacity change from 0 to 2640 [ 1566.895423][T13651] em28xx 2-1:0.89: analog set to bulk mode. [ 1566.915641][T21521] buffer_io_error: 64 callbacks suppressed [ 1566.915650][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1566.961293][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1566.964276][T12809] em28xx 2-1:0.89: Registering V4L2 extension [ 1566.997421][T13651] usb 2-1: USB disconnect, device number 19 [ 1567.036870][T19073] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1567.040423][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1567.046131][T13651] em28xx 2-1:0.89: Disconnecting em28xx [ 1567.078663][T19073] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1567.088742][T19073] usb 5-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1567.115349][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1567.153592][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1567.191907][T12809] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1567.200011][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1567.203069][T12809] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1567.303509][T19073] usb 5-1: config 0 has no interface number 0 [ 1567.357771][T19073] usb 5-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1567.379816][T12809] em28xx 2-1:0.89: No AC97 audio processor [ 1567.396224][T12809] usb 2-1: Decoder not found [ 1567.401318][T12809] em28xx 2-1:0.89: failed to create media graph [ 1567.408846][T19073] usb 5-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1567.423348][T12809] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1567.434656][T19073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.453338][T12809] em28xx 2-1:0.89: Registering snapshot button... [ 1567.469667][T19073] usb 5-1: config 0 descriptor?? [ 1567.477928][T12809] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input15 [ 1567.496311][T19073] hub 5-1:0.166: bad descriptor, ignoring hub [ 1567.509416][T12809] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1567.519596][T19073] hub 5-1:0.166: probe with driver hub failed with error -5 [ 1567.555875][T19073] cp210x 5-1:0.166: cp210x converter detected [ 1567.560080][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1567.757567][T13651] em28xx 2-1:0.89: Closing input extension [ 1567.779730][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1567.780811][T13651] em28xx 2-1:0.89: Deregistering snapshot button [ 1567.923555][T13651] em28xx 2-1:0.89: Freeing device [ 1567.999847][T21521] ldm_validate_partition_table(): Disk read failed. [ 1568.089103][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1568.128551][T21521] Buffer I/O error on dev loop6, logical block 0, async page read [ 1568.164417][T21521] Dev loop6: unable to read RDB block 0 [ 1568.197337][T21521] loop6: unable to read partition table [ 1568.291990][T21521] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1568.928997][T19073] cp210x 5-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1568.968725][T19073] cp210x 5-1:0.166: querying part number failed [ 1568.993678][T19073] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1569.162730][T19073] usb 5-1: USB disconnect, device number 32 [ 1569.188313][T19073] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1569.515368][T13651] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1569.727008][T19073] cp210x 5-1:0.166: device disconnected [ 1569.875341][T13651] usb 2-1: Using ep0 maxpacket: 32 [ 1570.027737][T21551] binder: 21550:21551 ioctl c0306201 0 returned -14 [ 1570.039143][T21551] binder: 21550:21551 ioctl c0306201 200000000c80 returned -14 [ 1570.098622][T13651] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1570.125648][T13651] usb 2-1: config 0 has no interface number 0 [ 1570.195220][T13651] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1570.212385][T13651] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1570.225416][T13651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.253797][T21551] loop6: detected capacity change from 0 to 2640 [ 1570.260925][T21551] ldm_validate_partition_table(): Disk read failed. [ 1570.270743][T13651] usb 2-1: Product: syz [ 1570.285693][T13651] usb 2-1: Manufacturer: syz [ 1570.378506][T21542] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1570.395400][T21551] Dev loop6: unable to read RDB block 0 [ 1570.401046][T21551] loop6: unable to read partition table [ 1570.407942][T21551] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1570.438728][T13651] usb 2-1: SerialNumber: syz [ 1570.444513][T13651] usb 2-1: config 0 descriptor?? [ 1570.469739][T13651] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1570.489382][T13651] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1570.803408][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1571.098590][ T5186] Dev loop6: unable to read RDB block 0 [ 1571.120784][ T5186] loop6: unable to read partition table [ 1571.772602][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1571.856163][T13651] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1571.923932][T13651] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1571.941301][T13651] em28xx 2-1:0.89: board has no eeprom [ 1572.310942][T13651] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1572.329814][T13651] em28xx 2-1:0.89: analog set to bulk mode. [ 1572.346025][T19073] em28xx 2-1:0.89: Registering V4L2 extension [ 1572.373123][T13651] usb 2-1: USB disconnect, device number 20 [ 1572.714604][T13651] em28xx 2-1:0.89: Disconnecting em28xx [ 1572.912018][T19073] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1572.922301][T19073] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1573.132168][T21600] netlink: 'syz.0.3448': attribute type 4 has an invalid length. [ 1573.154191][T19073] em28xx 2-1:0.89: No AC97 audio processor [ 1573.179765][T19073] usb 2-1: Decoder not found [ 1573.191659][T19073] em28xx 2-1:0.89: failed to create media graph [ 1573.201735][T19073] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1573.233355][T19073] em28xx 2-1:0.89: Registering snapshot button... [ 1573.340133][T19073] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input16 [ 1573.385841][T19073] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1573.395179][T13651] em28xx 2-1:0.89: Closing input extension [ 1573.466737][T13651] em28xx 2-1:0.89: Deregistering snapshot button [ 1573.492349][T13651] em28xx 2-1:0.89: Freeing device [ 1575.436669][T21633] binder: 21627:21633 ioctl c0306201 200000000c80 returned -14 [ 1575.726836][T21640] loop6: detected capacity change from 0 to 2640 [ 1575.741753][T21640] buffer_io_error: 48 callbacks suppressed [ 1575.741767][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.827993][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.872762][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.901636][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.988118][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1576.124692][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1576.715388][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1576.978680][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1577.000535][ T4136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1577.782081][T21640] ldm_validate_partition_table(): Disk read failed. [ 1577.811148][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1577.835511][T21640] Buffer I/O error on dev loop6, logical block 0, async page read [ 1577.876178][T21640] Dev loop6: unable to read RDB block 0 [ 1578.035354][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1578.076268][T21640] loop6: unable to read partition table [ 1578.105626][T21645] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 1578.171086][T21640] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1579.833077][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1580.359197][T13651] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1580.413114][T21672] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1580.624152][T13651] usb 4-1: config 0 has an invalid interface number: 166 but max is 0 [ 1580.668192][T13651] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1580.707794][T13651] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1580.757628][T13651] usb 4-1: config 0 has no interface number 0 [ 1580.786396][T13651] usb 4-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1580.839276][T13651] usb 4-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1580.874603][T13651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.924249][T13651] usb 4-1: config 0 descriptor?? [ 1580.953391][T13651] hub 4-1:0.166: bad descriptor, ignoring hub [ 1580.974013][T13651] hub 4-1:0.166: probe with driver hub failed with error -5 [ 1581.395530][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1581.531996][T13651] cp210x 4-1:0.166: cp210x converter detected [ 1582.652551][T21715] binder: 21714:21715 ioctl c0306201 200000000c80 returned -14 [ 1582.672592][T13651] cp210x 4-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1582.685220][T13651] cp210x 4-1:0.166: querying part number failed [ 1582.699983][T13651] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1582.737250][T13651] usb 4-1: USB disconnect, device number 22 [ 1582.760265][T13651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1582.782088][T13651] cp210x 4-1:0.166: device disconnected [ 1582.797696][T21715] loop6: detected capacity change from 0 to 2640 [ 1582.838675][T21715] buffer_io_error: 11 callbacks suppressed [ 1582.838689][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1582.866213][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1582.895969][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1582.912966][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1582.921068][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1582.951195][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1582.977240][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1583.014757][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1583.191093][T21715] ldm_validate_partition_table(): Disk read failed. [ 1583.436271][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1583.448991][T21715] Buffer I/O error on dev loop6, logical block 0, async page read [ 1583.478857][T21715] Dev loop6: unable to read RDB block 0 [ 1583.505373][T21715] loop6: unable to read partition table [ 1583.542080][T21715] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1584.522039][T21718] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1584.693904][T21741] binder: 21740:21741 ioctl c0306201 200000000c80 returned -14 [ 1584.764690][T21741] loop6: detected capacity change from 0 to 2640 [ 1584.792728][T20777] ldm_validate_partition_table(): Disk read failed. [ 1584.802136][T20777] Dev loop6: unable to read RDB block 0 [ 1584.819180][T20777] loop6: unable to read partition table [ 1584.836169][T21741] ldm_validate_partition_table(): Disk read failed. [ 1584.870347][T21741] Dev loop6: unable to read RDB block 0 [ 1584.995405][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1585.097604][T21741] loop6: unable to read partition table [ 1585.146923][T21741] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1585.284643][T21759] binder: 21757:21759 ioctl c0306201 200000000c80 returned -14 [ 1585.482604][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1585.489542][ T5186] Dev loop6: unable to read RDB block 0 [ 1585.505405][ T5186] loop6: unable to read partition table [ 1586.919485][T21777] netlink: 'syz.1.3488': attribute type 2 has an invalid length. [ 1586.931143][T21777] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1588.487127][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1588.655427][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 1588.671947][ T5876] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1588.693716][ T5876] usb 1-1: config 0 has no interface number 0 [ 1588.792639][ T5876] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1588.822150][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1589.656905][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.673436][ T5876] usb 1-1: Product: syz [ 1589.746775][ T5876] usb 1-1: Manufacturer: syz [ 1589.763696][ T5876] usb 1-1: SerialNumber: syz [ 1589.793297][ T5876] usb 1-1: config 0 descriptor?? [ 1589.816141][ T5876] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1589.868266][ T5876] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1590.960769][ T5876] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1591.093606][ T5876] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1591.101808][ T5876] em28xx 1-1:0.89: board has no eeprom [ 1591.175497][ T5876] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1591.194281][ T5876] em28xx 1-1:0.89: analog set to bulk mode. [ 1591.211984][T18573] em28xx 1-1:0.89: Registering V4L2 extension [ 1591.236955][ T5876] usb 1-1: USB disconnect, device number 18 [ 1591.279769][ T5876] em28xx 1-1:0.89: Disconnecting em28xx [ 1591.575908][T18573] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1591.592455][T18573] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1591.605854][T18573] em28xx 1-1:0.89: No AC97 audio processor [ 1591.614169][T18573] usb 1-1: Decoder not found [ 1591.621500][T18573] em28xx 1-1:0.89: failed to create media graph [ 1591.629463][T18573] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1591.641054][T18573] em28xx 1-1:0.89: Registering snapshot button... [ 1591.651752][T18573] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input17 [ 1591.738864][T18573] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1591.919928][ T5876] em28xx 1-1:0.89: Closing input extension [ 1591.935344][ T5876] em28xx 1-1:0.89: Deregistering snapshot button [ 1591.974655][ T5876] em28xx 1-1:0.89: Freeing device [ 1592.814206][T13651] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1593.017125][T13651] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1593.040395][T13651] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1593.121189][T13651] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1593.167415][T13651] usb 5-1: config 0 has no interface number 0 [ 1593.194500][T13651] usb 5-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1593.253590][T13651] usb 5-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1593.299816][T13651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.360563][T13651] usb 5-1: config 0 descriptor?? [ 1593.378757][T13651] hub 5-1:0.166: bad descriptor, ignoring hub [ 1593.401881][T13651] hub 5-1:0.166: probe with driver hub failed with error -5 [ 1593.423151][T13651] cp210x 5-1:0.166: cp210x converter detected [ 1594.592198][T21874] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1595.326869][T21882] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1595.370374][ T5876] SELinux: failure in sel_netif_sid_slow(), invalid network interface (219) [ 1595.516311][T13651] cp210x 5-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1595.530383][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1595.564713][T13651] cp210x 5-1:0.166: querying part number failed [ 1595.600840][T13651] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1595.666932][T13651] usb 5-1: USB disconnect, device number 33 [ 1595.749036][T13651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1595.821709][T13651] cp210x 5-1:0.166: device disconnected [ 1596.296725][T21905] netlink: 'syz.0.3519': attribute type 2 has an invalid length. [ 1596.308238][T21905] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1597.215123][T21918] netlink: 'syz.0.3522': attribute type 4 has an invalid length. [ 1597.423258][T21928] netlink: 'syz.4.3524': attribute type 4 has an invalid length. [ 1597.621272][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1598.816627][T21941] hub 9-0:1.0: USB hub found [ 1598.821919][T21941] hub 9-0:1.0: 1 port detected [ 1600.197124][T13651] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1600.700441][T13651] usb 4-1: config 0 has an invalid interface number: 166 but max is 0 [ 1600.718821][T13651] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1600.735940][T13651] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1600.914831][T13651] usb 4-1: config 0 has no interface number 0 [ 1600.978635][T13651] usb 4-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.048315][T13651] usb 4-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1601.186951][T13651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.417246][T21957] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1601.502289][T13651] usb 4-1: config 0 descriptor?? [ 1601.515803][T13651] hub 4-1:0.166: bad descriptor, ignoring hub [ 1601.528403][T13651] hub 4-1:0.166: probe with driver hub failed with error -5 [ 1601.550636][T13651] cp210x 4-1:0.166: cp210x converter detected [ 1601.848007][T21966] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1602.175332][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1602.610177][T21981] netlink: 'syz.0.3536': attribute type 2 has an invalid length. [ 1602.619703][T21981] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1602.741551][T13651] cp210x 4-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1602.780948][T13651] cp210x 4-1:0.166: querying part number failed [ 1602.831898][T13651] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1602.868420][T13651] usb 4-1: USB disconnect, device number 23 [ 1602.901383][T13651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1602.966585][T13651] cp210x 4-1:0.166: device disconnected [ 1603.684716][T22006] binder: 22005:22006 ioctl c0306201 200000000c80 returned -14 [ 1603.873451][T22006] loop6: detected capacity change from 0 to 2640 [ 1603.880052][T22006] buffer_io_error: 64 callbacks suppressed [ 1603.880061][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.904573][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1603.912778][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1604.063457][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1604.572269][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1604.720664][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1604.855554][T21991] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 1604.877171][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1604.937831][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1605.011941][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1605.095344][T22006] ldm_validate_partition_table(): Disk read failed. [ 1605.363918][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1605.434191][T22006] Buffer I/O error on dev loop6, logical block 0, async page read [ 1605.504480][T22006] Dev loop6: unable to read RDB block 0 [ 1605.545829][T22006] loop6: unable to read partition table [ 1605.567512][T22006] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1605.962126][T22031] binder: 22027:22031 ioctl c0306201 200000000c80 returned -14 [ 1605.982611][T22031] loop6: detected capacity change from 0 to 2640 [ 1605.991548][T20777] ldm_validate_partition_table(): Disk read failed. [ 1606.002764][T20777] Dev loop6: unable to read RDB block 0 [ 1606.013433][T20777] loop6: unable to read partition table [ 1606.021032][T22031] ldm_validate_partition_table(): Disk read failed. [ 1606.043531][T22031] Dev loop6: unable to read RDB block 0 [ 1606.051518][T22031] loop6: unable to read partition table [ 1606.061586][T22031] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1606.535187][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1606.551132][ T5186] Dev loop6: unable to read RDB block 0 [ 1606.557506][ T5186] loop6: unable to read partition table [ 1606.645350][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1607.945513][ T5876] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1608.205352][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 1608.222065][ T5876] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1608.248977][ T5876] usb 4-1: config 0 has no interface number 0 [ 1608.266483][ T5876] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1608.394354][ T5876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1608.420795][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.866161][ T5876] usb 4-1: Product: syz [ 1608.875899][ T5876] usb 4-1: Manufacturer: syz [ 1608.894929][ T5876] usb 4-1: SerialNumber: syz [ 1608.903045][ T5876] usb 4-1: config 0 descriptor?? [ 1608.920899][ T5876] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1608.930807][ T5876] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1609.050315][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1609.110359][T22060] binder: 22059:22060 ioctl c0306201 200000000c80 returned -14 [ 1609.242323][T22064] netlink: 'syz.4.3556': attribute type 4 has an invalid length. [ 1609.291181][T22060] loop6: detected capacity change from 0 to 2640 [ 1609.298049][T22060] buffer_io_error: 64 callbacks suppressed [ 1609.298062][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.312017][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.351119][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.388728][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.428556][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.645389][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.653494][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.749658][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.777278][T22060] ldm_validate_partition_table(): Disk read failed. [ 1609.805410][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.813671][T22060] Buffer I/O error on dev loop6, logical block 0, async page read [ 1609.821823][T22060] Dev loop6: unable to read RDB block 0 [ 1609.827777][T22060] loop6: unable to read partition table [ 1609.994823][T22060] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1610.215970][ T5876] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1610.370417][ T5876] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1610.475335][ T5876] em28xx 4-1:0.89: board has no eeprom [ 1610.625489][ T5876] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1610.652006][ T5876] em28xx 4-1:0.89: analog set to bulk mode. [ 1611.174052][T18573] em28xx 4-1:0.89: Registering V4L2 extension [ 1611.194339][ T5876] usb 4-1: USB disconnect, device number 24 [ 1611.206654][ T5876] em28xx 4-1:0.89: Disconnecting em28xx [ 1611.269483][T18573] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1611.294927][T18573] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1611.320887][T18573] em28xx 4-1:0.89: No AC97 audio processor [ 1611.348111][T18573] usb 4-1: Decoder not found [ 1611.361366][T18573] em28xx 4-1:0.89: failed to create media graph [ 1611.393232][T18573] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1611.671707][T18573] em28xx 4-1:0.89: Registering snapshot button... [ 1611.692159][T18573] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input18 [ 1611.760989][T18573] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1611.795124][ T5876] em28xx 4-1:0.89: Closing input extension [ 1611.814723][ T5876] em28xx 4-1:0.89: Deregistering snapshot button [ 1611.891279][ T5876] em28xx 4-1:0.89: Freeing device [ 1611.977365][T22092] netlink: 'syz.4.3563': attribute type 4 has an invalid length. [ 1612.225384][ T5876] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1612.405909][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 1612.826010][ T5876] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1612.835325][ T5876] usb 4-1: config 0 has no interface number 0 [ 1612.847895][ T5876] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1612.891396][ T5876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1612.919127][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.940569][ T5876] usb 4-1: Product: syz [ 1612.955134][ T5876] usb 4-1: Manufacturer: syz [ 1612.967993][ T5876] usb 4-1: SerialNumber: syz [ 1612.984859][ T5876] usb 4-1: config 0 descriptor?? [ 1613.007455][ T5876] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1613.043965][ T5876] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1614.145613][ T5876] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1614.215402][ T5876] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1614.231820][ T5876] em28xx 4-1:0.89: board has no eeprom [ 1614.305307][ T5876] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1614.345169][ T5876] em28xx 4-1:0.89: analog set to bulk mode. [ 1614.598364][T18573] em28xx 4-1:0.89: Registering V4L2 extension [ 1614.612536][ T5876] usb 4-1: USB disconnect, device number 25 [ 1614.656698][ T5876] em28xx 4-1:0.89: Disconnecting em28xx [ 1614.788775][T18573] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1614.818669][T18573] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1614.827110][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1614.836484][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1614.844439][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1614.852665][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1614.860438][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1614.890055][T18573] em28xx 4-1:0.89: No AC97 audio processor [ 1614.963794][T18573] usb 4-1: Decoder not found [ 1614.982345][T18573] em28xx 4-1:0.89: failed to create media graph [ 1615.015723][T18573] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1615.033701][T18573] em28xx 4-1:0.89: Registering snapshot button... [ 1615.087858][T18573] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input19 [ 1615.133595][T18573] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1615.176990][ T5876] em28xx 4-1:0.89: Closing input extension [ 1615.182818][ T5876] em28xx 4-1:0.89: Deregistering snapshot button [ 1615.350019][ T5876] em28xx 4-1:0.89: Freeing device [ 1615.596961][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.680948][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.798236][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.858060][T22146] netlink: 'syz.3.3575': attribute type 4 has an invalid length. [ 1615.915739][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.018796][T22149] netlink: 'syz.4.3576': attribute type 4 has an invalid length. [ 1616.342952][T22119] chnl_net:caif_netlink_parms(): no params data found [ 1616.590718][ T13] bridge_slave_1: left allmulticast mode [ 1616.606608][ T13] bridge_slave_1: left promiscuous mode [ 1616.615377][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.239253][ T13] bridge_slave_0: left allmulticast mode [ 1617.246752][ T52] Bluetooth: hci5: command tx timeout [ 1617.254693][ T13] bridge_slave_0: left promiscuous mode [ 1617.297948][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.834506][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.845975][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.856300][ T13] bond0 (unregistering): Released all slaves [ 1619.194573][ T13] IPVS: stopping backup sync thread 7305 ... [ 1619.304415][ T52] Bluetooth: hci5: command tx timeout [ 1620.271877][T22189] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1620.677505][T22119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.693794][T22119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.782621][T22119] bridge_slave_0: entered allmulticast mode [ 1620.845521][T22119] bridge_slave_0: entered promiscuous mode [ 1620.878571][T22198] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1620.928969][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1620.984013][T22119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.993477][T22119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.000719][T22119] bridge_slave_1: entered allmulticast mode [ 1621.044365][T22119] bridge_slave_1: entered promiscuous mode [ 1621.366647][ T52] Bluetooth: hci5: command tx timeout [ 1621.712217][T22119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.079855][T22119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.313892][T22119] team0: Port device team_slave_0 added [ 1622.349891][T22119] team0: Port device team_slave_1 added [ 1622.525801][T22119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.544514][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.587231][T22119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.666062][ T13] hsr_slave_0: left promiscuous mode [ 1622.749868][ T13] hsr_slave_1: left promiscuous mode [ 1622.811701][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.836564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.905219][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.943396][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.965579][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1623.044450][ T13] veth1_macvtap: left promiscuous mode [ 1623.050385][ T13] veth0_macvtap: left promiscuous mode [ 1623.071730][ T13] veth1_vlan: left promiscuous mode [ 1623.079176][ T13] veth0_vlan: left promiscuous mode [ 1623.445799][ T52] Bluetooth: hci5: command tx timeout [ 1623.466884][ T30] audit: type=1400 audit(1623.436:4612): avc: denied { set_context_mgr } for pid=22269 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1623.490349][T22270] binder: 22269:22270 ioctl c0306201 200000000c80 returned -14 [ 1623.521905][T22270] loop6: detected capacity change from 0 to 2640 [ 1623.539616][T22270] buffer_io_error: 11 callbacks suppressed [ 1623.539625][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.568379][ T30] audit: type=1400 audit(1623.456:4613): avc: denied { call } for pid=22269 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1623.569781][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.587249][ T30] audit: type=1400 audit(1623.456:4614): avc: denied { transfer } for pid=22269 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1623.604892][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.622136][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.637278][ T13] team0 (unregistering): Port device batadv85 removed [ 1623.655445][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.663937][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.672247][ T13] team0 (unregistering): Port device batadv84 removed [ 1623.675352][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.688121][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.696934][T22270] ldm_validate_partition_table(): Disk read failed. [ 1623.697207][ T13] team0 (unregistering): Port device batadv83 removed [ 1623.703639][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.722111][T22270] Buffer I/O error on dev loop6, logical block 0, async page read [ 1623.730427][ T13] team0 (unregistering): Port device batadv82 removed [ 1623.731751][T22270] Dev loop6: unable to read RDB block 0 [ 1623.742949][T22270] loop6: unable to read partition table [ 1623.754282][T22270] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1623.767147][ T13] team0 (unregistering): Port device batadv81 removed [ 1624.001997][ T13] team0 (unregistering): Port device batadv80 removed [ 1624.028962][ T13] pim6reg (unregistering): left allmulticast mode [ 1624.117858][ T13] team0 (unregistering): Port device batadv79 removed [ 1624.149378][ T13] team0 (unregistering): Port device batadv78 removed [ 1624.170818][ T13] team0 (unregistering): Port device batadv77 removed [ 1624.197468][ T13] team0 (unregistering): Port device batadv76 removed [ 1624.229917][ T13] team0 (unregistering): Port device batadv75 removed [ 1624.289829][ T13] team0 (unregistering): Port device batadv74 removed [ 1624.302756][ T13] team0 (unregistering): Port device batadv73 removed [ 1624.319345][ T13] team0 (unregistering): Port device batadv72 removed [ 1624.347048][ T13] team0 (unregistering): Port device batadv71 removed [ 1624.465637][ T13] team0 (unregistering): Port device batadv70 removed [ 1624.486392][ T13] team0 (unregistering): Port device batadv69 removed [ 1624.534892][ T13] team0 (unregistering): Port device batadv68 removed [ 1624.973113][ T13] team0 (unregistering): Port device batadv67 removed [ 1625.186259][T22273] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1625.264195][ T13] team0 (unregistering): Port device batadv66 removed [ 1625.316018][ T13] team0 (unregistering): Port device batadv65 removed [ 1625.340701][ T13] team0 (unregistering): Port device batadv64 removed [ 1625.362285][ T13] team0 (unregistering): Port device batadv62 removed [ 1625.384607][ T13] team0 (unregistering): Port device batadv61 removed [ 1625.416461][ T13] team0 (unregistering): Port device batadv59 removed [ 1625.436785][ T13] team0 (unregistering): Port device batadv58 removed [ 1625.438914][T22283] loop6: detected capacity change from 0 to 2640 [ 1625.491702][T20777] ldm_validate_partition_table(): Disk read failed. [ 1625.519875][ T13] team0 (unregistering): Port device batadv57 removed [ 1625.533722][T20777] Dev loop6: unable to read RDB block 0 [ 1625.548199][T20777] loop6: unable to read partition table [ 1625.650959][T22283] ldm_validate_partition_table(): Disk read failed. [ 1625.666556][ T13] team0 (unregistering): Port device batadv56 removed [ 1625.688572][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1625.699219][T22283] Dev loop6: unable to read RDB block 0 [ 1625.707978][ T13] team0 (unregistering): Port device batadv55 removed [ 1625.743512][ T13] team0 (unregistering): Port device batadv54 removed [ 1625.746908][T22283] loop6: unable to read partition table [ 1625.795107][ T13] team0 (unregistering): Port device batadv53 removed [ 1625.877105][T22283] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1625.907888][ T13] team0 (unregistering): Port device batadv52 removed [ 1625.942263][ T13] team0 (unregistering): Port device batadv51 removed [ 1625.958419][ T13] team0 (unregistering): Port device batadv50 removed [ 1625.973641][ T13] team0 (unregistering): Port device batadv49 removed [ 1625.989269][ T13] team0 (unregistering): Port device batadv48 removed [ 1626.003859][ T13] team0 (unregistering): Port device batadv47 removed [ 1626.020694][ T13] team0 (unregistering): Port device batadv46 removed [ 1626.039088][ T13] team0 (unregistering): Port device batadv45 removed [ 1626.062382][ T13] team0 (unregistering): Port device batadv44 removed [ 1626.078952][ T13] team0 (unregistering): Port device batadv43 removed [ 1626.094623][ T13] team0 (unregistering): Port device batadv42 removed [ 1626.109588][ T13] team0 (unregistering): Port device batadv41 removed [ 1626.124170][ T13] team0 (unregistering): Port device batadv40 removed [ 1626.140564][ T13] team0 (unregistering): Port device batadv39 removed [ 1626.158815][ T13] team0 (unregistering): Port device batadv38 removed [ 1626.173933][ T13] team0 (unregistering): Port device batadv37 removed [ 1626.196508][ T13] team0 (unregistering): Port device batadv36 removed [ 1626.219123][ T13] team0 (unregistering): Port device batadv35 removed [ 1626.241453][ T13] team0 (unregistering): Port device batadv34 removed [ 1626.272274][ T13] team0 (unregistering): Port device batadv33 removed [ 1626.316199][ T13] team0 (unregistering): Port device batadv32 removed [ 1626.331108][ T13] team0 (unregistering): Port device batadv31 removed [ 1626.349229][ T13] team0 (unregistering): Port device batadv30 removed [ 1626.366183][ T13] team0 (unregistering): Port device batadv29 removed [ 1626.476605][ T13] team0 (unregistering): Port device batadv28 removed [ 1627.019490][ T13] team0 (unregistering): Port device batadv27 removed [ 1627.071475][ T13] team0 (unregistering): Port device batadv26 removed [ 1627.102854][ T13] team0 (unregistering): Port device batadv25 removed [ 1627.126896][ T13] team0 (unregistering): Port device batadv24 removed [ 1627.140297][ T13] team0 (unregistering): Port device batadv23 removed [ 1627.176559][ T13] team0 (unregistering): Port device batadv22 removed [ 1627.203868][ T13] team0 (unregistering): Port device batadv21 removed [ 1627.235736][ T13] team0 (unregistering): Port device batadv20 removed [ 1627.256338][ T13] team0 (unregistering): Port device batadv19 removed [ 1627.276234][ T13] team0 (unregistering): Port device batadv18 removed [ 1627.306688][ T13] team0 (unregistering): Port device batadv17 removed [ 1627.321750][ T13] team0 (unregistering): Port device batadv16 removed [ 1627.339345][ T13] team0 (unregistering): Port device batadv15 removed [ 1627.354051][ T13] team0 (unregistering): Port device batadv14 removed [ 1627.370680][ T13] team0 (unregistering): Port device batadv13 removed [ 1627.388408][ T13] team0 (unregistering): Port device batadv12 removed [ 1627.403993][ T13] team0 (unregistering): Port device batadv11 removed [ 1627.419743][ T13] team0 (unregistering): Port device batadv10 removed [ 1627.434417][ T13] team0 (unregistering): Port device batadv9 removed [ 1627.454950][ T13] team0 (unregistering): Port device batadv8 removed [ 1627.470633][ T13] team0 (unregistering): Port device batadv7 removed [ 1627.486627][ T13] team0 (unregistering): Port device batadv6 removed [ 1627.503009][ T13] team0 (unregistering): Port device batadv5 removed [ 1627.519782][ T13] team0 (unregistering): Port device batadv4 removed [ 1627.536529][ T13] team0 (unregistering): Port device batadv3 removed [ 1627.553465][ T13] team0 (unregistering): Port device batadv2 removed [ 1627.568135][ T13] team0 (unregistering): Port device batadv1 removed [ 1627.830744][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1627.860864][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1628.191658][T22303] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1628.733750][T22119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.741611][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.767543][T22119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.182827][T22119] hsr_slave_0: entered promiscuous mode [ 1629.207833][T22119] hsr_slave_1: entered promiscuous mode [ 1629.217132][T22119] debugfs: 'hsr0' already exists in 'hsr' [ 1629.258022][T22119] Cannot create hsr debugfs directory [ 1630.983433][T22357] loop6: detected capacity change from 0 to 2640 [ 1630.991309][T20777] buffer_io_error: 48 callbacks suppressed [ 1630.991319][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.005797][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.013861][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.023890][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.062862][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.081748][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.101567][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.154830][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.215393][T20777] ldm_validate_partition_table(): Disk read failed. [ 1631.227671][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.258265][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.315550][T22119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1631.409355][T20777] Dev loop6: unable to read RDB block 0 [ 1631.415071][T20777] loop6: unable to read partition table [ 1631.415080][T22119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1631.467984][T22119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1631.478322][T22357] ldm_validate_partition_table(): Disk read failed. [ 1631.499559][T22119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1631.509770][T22357] Dev loop6: unable to read RDB block 0 [ 1631.517988][T22357] loop6: unable to read partition table [ 1631.524986][T22357] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1631.542170][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1631.549716][ T5186] Dev loop6: unable to read RDB block 0 [ 1631.569129][ T5186] loop6: unable to read partition table [ 1631.711429][T22119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.725384][ T5876] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1631.765019][T22119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.781846][T15759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.789044][T15759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.825091][T15759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.832236][T15759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.885922][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 1631.897901][ T5876] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1631.909354][ T5876] usb 1-1: config 0 has no interface number 0 [ 1631.929375][ T5876] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1631.943341][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1631.963591][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.981806][ T5876] usb 1-1: Product: syz [ 1632.016471][ T5876] usb 1-1: Manufacturer: syz [ 1632.021184][ T5876] usb 1-1: SerialNumber: syz [ 1632.034857][ T5876] usb 1-1: config 0 descriptor?? [ 1632.070969][ T5876] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1632.072629][T22391] netlink: 'syz.3.3612': attribute type 4 has an invalid length. [ 1632.128021][ T5876] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1632.329623][T22119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.423317][T22401] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1632.856783][ T5876] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1632.911469][ T30] audit: type=1400 audit(1632.876:4615): avc: denied { name_bind } for pid=22385 comm="syz.3.3612" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1632.942562][ T5876] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1632.960919][ T5876] em28xx 1-1:0.89: board has no eeprom [ 1632.967505][T22119] veth0_vlan: entered promiscuous mode [ 1632.981088][T22119] veth1_vlan: entered promiscuous mode [ 1633.029957][ T5876] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1633.037443][ T5876] em28xx 1-1:0.89: analog set to bulk mode. [ 1633.043361][ T9] em28xx 1-1:0.89: Registering V4L2 extension [ 1633.114296][T22119] veth0_macvtap: entered promiscuous mode [ 1633.137995][ T5876] usb 1-1: USB disconnect, device number 19 [ 1633.155151][ T5876] em28xx 1-1:0.89: Disconnecting em28xx [ 1633.161465][T22119] veth1_macvtap: entered promiscuous mode [ 1633.171695][ T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1633.182115][ T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1633.211886][T22119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.229888][ T9] em28xx 1-1:0.89: No AC97 audio processor [ 1633.460496][ T9] usb 1-1: Decoder not found [ 1633.465073][ T9] em28xx 1-1:0.89: failed to create media graph [ 1633.549001][ T9] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1633.571982][T22119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.593466][ T9] em28xx 1-1:0.89: Registering snapshot button... [ 1633.651393][T20066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.665408][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input20 [ 1633.696453][T20066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.734724][ T9] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1633.765010][T20066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.800317][T20066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.828877][ T5876] em28xx 1-1:0.89: Closing input extension [ 1634.122013][ T5876] em28xx 1-1:0.89: Deregistering snapshot button [ 1634.189337][ T5876] em28xx 1-1:0.89: Freeing device [ 1634.451763][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.515652][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.623962][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.646601][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.765129][ T30] audit: type=1400 audit(1634.726:4616): avc: denied { mounton } for pid=22119 comm="syz-executor" path="/root/syzkaller.8QR3UM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1634.984174][ T30] audit: type=1400 audit(1634.856:4617): avc: denied { mounton } for pid=22119 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1635.066839][T22451] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1636.029330][T22456] loop6: detected capacity change from 0 to 2640 [ 1636.047124][T22456] buffer_io_error: 48 callbacks suppressed [ 1636.047138][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.118437][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.174422][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.234725][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.290331][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.320023][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.320220][ T5137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1636.347527][ T5137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1636.355157][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1636.364304][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1636.366780][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.385484][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1636.565315][T19073] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1636.631733][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.645603][T22455] binder: 22454:22455 ioctl c0306201 200000000c80 returned -14 [ 1636.687234][T22456] ldm_validate_partition_table(): Disk read failed. [ 1636.701019][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.748640][T22456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1636.765308][T19073] usb 5-1: Using ep0 maxpacket: 32 [ 1636.780431][T19073] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1636.808552][T22456] Dev loop6: unable to read RDB block 0 [ 1636.811107][T19073] usb 5-1: config 0 has no interface number 0 [ 1636.814210][T22456] loop6: unable to read partition table [ 1636.851479][T19073] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1636.974206][T22456] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1637.032469][T19073] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1637.094556][T22485] netlink: 'syz.0.3624': attribute type 2 has an invalid length. [ 1637.107139][T22485] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1637.183460][T19073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.202078][T19073] usb 5-1: Product: syz [ 1637.506900][T19073] usb 5-1: Manufacturer: syz [ 1637.532419][T19073] usb 5-1: SerialNumber: syz [ 1637.554162][T19073] usb 5-1: config 0 descriptor?? [ 1637.623856][T19073] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1637.643912][T19073] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1637.790733][T22467] chnl_net:caif_netlink_parms(): no params data found [ 1637.885575][T19073] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1638.145883][T19073] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1638.195144][T19073] em28xx 5-1:0.89: board has no eeprom [ 1638.501634][ T52] Bluetooth: hci2: command tx timeout [ 1638.505588][T19073] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1638.536371][T19073] em28xx 5-1:0.89: analog set to bulk mode. [ 1638.545387][T17196] em28xx 5-1:0.89: Registering V4L2 extension [ 1638.585430][T19073] usb 5-1: USB disconnect, device number 34 [ 1638.592287][T19073] em28xx 5-1:0.89: Disconnecting em28xx [ 1638.766894][T17196] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1638.780901][T17196] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1638.791431][T22517] binder: 22516:22517 ioctl c0306201 200000000c80 returned -14 [ 1638.819363][T22520] netlink: 'syz.4.3627': attribute type 4 has an invalid length. [ 1638.837245][T17196] em28xx 5-1:0.89: No AC97 audio processor [ 1638.853363][T17196] usb 5-1: Decoder not found [ 1638.862559][T17196] em28xx 5-1:0.89: failed to create media graph [ 1638.869110][T17196] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1638.881376][T17196] em28xx 5-1:0.89: Registering snapshot button... [ 1638.911664][T22517] loop6: detected capacity change from 0 to 2640 [ 1638.915438][T17196] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input21 [ 1638.932521][T22467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.942890][T22467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.957408][T22517] ldm_validate_partition_table(): Disk read failed. [ 1638.964149][T22467] bridge_slave_0: entered allmulticast mode [ 1638.971950][T22517] Dev loop6: unable to read RDB block 0 [ 1638.972374][T17196] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1638.989620][T22467] bridge_slave_0: entered promiscuous mode [ 1639.023658][T19073] em28xx 5-1:0.89: Closing input extension [ 1639.024162][T22467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.029523][T19073] em28xx 5-1:0.89: Deregistering snapshot button [ 1639.039269][T22517] loop6: unable to read partition table [ 1639.078314][T22467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.092071][T22517] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1639.106368][T19073] em28xx 5-1:0.89: Freeing device [ 1639.251851][T22467] bridge_slave_1: entered allmulticast mode [ 1639.675401][ T5876] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1639.765738][T22467] bridge_slave_1: entered promiscuous mode [ 1639.994189][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 1640.001578][T22467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.027953][ T5876] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1640.063108][ T5876] usb 1-1: config 0 has no interface number 0 [ 1640.081338][T22467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.095381][ T5876] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1640.121684][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1640.145213][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.182668][ T5876] usb 1-1: Product: syz [ 1640.200506][ T5876] usb 1-1: Manufacturer: syz [ 1640.224207][ T5876] usb 1-1: SerialNumber: syz [ 1640.256721][ T5876] usb 1-1: config 0 descriptor?? [ 1640.276617][T22467] team0: Port device team_slave_0 added [ 1640.286429][ T5876] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1640.306992][T22467] team0: Port device team_slave_1 added [ 1640.316412][ T5876] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1640.492546][ T13] IPVS: stop unused estimator thread 0... [ 1640.571865][T22538] netlink: 'syz.1.3631': attribute type 2 has an invalid length. [ 1640.583754][T22538] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1640.595152][ T52] Bluetooth: hci2: command tx timeout [ 1640.649733][T16488] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1640.993158][T22467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.011686][T22467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.072531][T22467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.100958][T22467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.109816][T22467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.137190][T22467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.284774][T22467] hsr_slave_0: entered promiscuous mode [ 1641.309720][T22467] hsr_slave_1: entered promiscuous mode [ 1641.327817][T22467] debugfs: 'hsr0' already exists in 'hsr' [ 1641.333540][T22467] Cannot create hsr debugfs directory [ 1641.384383][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.425639][ T5876] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1641.446236][T22543] binder: BINDER_SET_CONTEXT_MGR already set [ 1641.452274][T22543] binder: 22541:22543 ioctl 4018620d 200000000040 returned -16 [ 1641.534413][ T5876] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1641.601841][T22543] loop6: detected capacity change from 0 to 2640 [ 1641.609685][ T5876] em28xx 1-1:0.89: board has no eeprom [ 1641.622165][T22543] buffer_io_error: 32 callbacks suppressed [ 1641.622178][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.653603][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.666718][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.666912][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.695336][ T5876] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1641.702615][ T5876] em28xx 1-1:0.89: analog set to bulk mode. [ 1641.708690][T22133] em28xx 1-1:0.89: Registering V4L2 extension [ 1641.746892][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.790412][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.809548][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.831790][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.851012][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.865398][T22543] ldm_validate_partition_table(): Disk read failed. [ 1641.905495][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.913822][T22543] Buffer I/O error on dev loop6, logical block 0, async page read [ 1641.991295][T22133] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1642.001215][T22543] Dev loop6: unable to read RDB block 0 [ 1642.008356][T22133] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1642.017685][T22543] loop6: unable to read partition table [ 1642.027690][T22543] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1642.041878][T22133] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1642.110077][T19073] usb 1-1: USB disconnect, device number 20 [ 1642.150624][T22133] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-19) [ 1642.162262][T19073] em28xx 1-1:0.89: Disconnecting em28xx [ 1642.221309][T22133] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1642.290657][T22133] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1642.306989][T22133] em28xx 1-1:0.89: No AC97 audio processor [ 1642.499476][T22133] usb 1-1: Decoder not found [ 1642.536433][T22133] em28xx 1-1:0.89: failed to create media graph [ 1642.538775][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.542687][T22133] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1642.645328][ T52] Bluetooth: hci2: command tx timeout [ 1642.645534][T22548] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1642.756250][T22133] em28xx 1-1:0.89: Registering snapshot button... [ 1642.763667][T22133] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input22 [ 1642.792814][T22133] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1642.801438][T19073] em28xx 1-1:0.89: Closing input extension [ 1642.862437][T19073] em28xx 1-1:0.89: Deregistering snapshot button [ 1642.983294][T19073] em28xx 1-1:0.89: Freeing device [ 1643.002453][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.775378][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1643.809539][T22584] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1644.556166][ T13] gretap0: left allmulticast mode [ 1644.567010][ T13] gretap0: left promiscuous mode [ 1644.576092][ T13] bridge0: port 3(gretap0) entered disabled state [ 1644.587040][ T13] bridge_slave_1: left allmulticast mode [ 1644.595662][ T13] bridge_slave_1: left promiscuous mode [ 1644.610262][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.690180][T22595] netlink: 'syz.0.3641': attribute type 4 has an invalid length. [ 1644.699729][ T13] bridge_slave_0: left allmulticast mode [ 1644.783937][ T13] bridge_slave_0: left promiscuous mode [ 1644.805930][ T52] Bluetooth: hci2: command tx timeout [ 1644.811472][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.993179][T22604] netlink: 'syz.4.3642': attribute type 2 has an invalid length. [ 1645.004571][T22604] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1646.822987][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.835222][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.844037][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1646.852984][ T13] bond0 (unregistering): Released all slaves [ 1646.993515][ T13] tipc: Left network mode [ 1647.006118][ T9] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1647.014280][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1647.175313][ T9] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1647.191304][ T9] usb 5-1: config 0 has no interface number 0 [ 1647.202072][ T9] usb 5-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1647.246389][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 1647.271632][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.305030][ T9] usb 5-1: config 0 descriptor?? [ 1647.380940][ T9] hub 5-1:0.166: bad descriptor, ignoring hub [ 1647.594203][ T9] hub 5-1:0.166: probe with driver hub failed with error -5 [ 1647.623324][ T9] cp210x 5-1:0.166: cp210x converter detected [ 1647.954795][ T13] hsr_slave_0: left promiscuous mode [ 1647.973039][ T13] hsr_slave_1: left promiscuous mode [ 1647.981441][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1647.989082][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.996980][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.004412][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.034512][ T13] veth1_macvtap: left promiscuous mode [ 1648.040243][ T13] veth0_macvtap: left promiscuous mode [ 1648.046456][ T13] veth1_vlan: left promiscuous mode [ 1648.052482][ T13] veth0_vlan: left promiscuous mode [ 1648.252716][ T13] team0 (unregistering): Port device batadv63 removed [ 1648.287707][ T13] team0 (unregistering): Port device batadv62 removed [ 1648.304084][ T13] pim6reg (unregistering): left allmulticast mode [ 1648.367611][ T13] team0 (unregistering): Port device batadv61 removed [ 1648.414885][ T13] team0 (unregistering): Port device batadv60 removed [ 1648.453388][ T13] team0 (unregistering): Port device batadv59 removed [ 1648.475083][ T13] team0 (unregistering): Port device batadv58 removed [ 1648.492201][ T13] team0 (unregistering): Port device batadv57 removed [ 1648.509047][ T13] team0 (unregistering): Port device batadv56 removed [ 1648.533001][ T13] team0 (unregistering): Port device batadv55 removed [ 1648.572572][ T13] team0 (unregistering): Port device batadv54 removed [ 1648.599882][ T13] team0 (unregistering): Port device batadv53 removed [ 1648.632262][ T13] team0 (unregistering): Port device batadv52 removed [ 1648.657220][ T13] team0 (unregistering): Port device batadv51 removed [ 1648.678616][ T13] team0 (unregistering): Port device batadv50 removed [ 1648.693914][ T13] team0 (unregistering): Port device batadv49 removed [ 1648.714577][ T13] team0 (unregistering): Port device batadv48 removed [ 1648.730620][ T13] team0 (unregistering): Port device batadv47 removed [ 1648.744853][ T13] team0 (unregistering): Port device batadv46 removed [ 1648.772402][ T9] cp210x 5-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 1648.847566][ T9] cp210x 5-1:0.166: querying part number failed [ 1648.866772][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1648.884369][ T13] team0 (unregistering): Port device batadv45 removed [ 1648.906382][ T9] usb 5-1: USB disconnect, device number 35 [ 1648.935335][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1648.954281][ T13] team0 (unregistering): Port device batadv43 removed [ 1648.972072][ T9] cp210x 5-1:0.166: device disconnected [ 1649.005593][ T13] team0 (unregistering): Port device batadv42 removed [ 1649.027374][ T13] team0 (unregistering): Port device batadv40 removed [ 1649.068271][ T13] team0 (unregistering): Port device batadv39 removed [ 1649.081985][ T13] team0 (unregistering): Port device batadv38 removed [ 1649.094703][T22663] binder: BINDER_SET_CONTEXT_MGR already set [ 1649.106011][T22663] binder: 22662:22663 ioctl 4018620d 200000000040 returned -16 [ 1649.116794][ T13] team0 (unregistering): Port device batadv37 removed [ 1649.147875][ T13] team0 (unregistering): Port device batadv36 removed [ 1649.163046][ T13] team0 (unregistering): Port device batadv35 removed [ 1649.174318][T22663] loop6: detected capacity change from 0 to 2640 [ 1649.182338][ T13] team0 (unregistering): Port device batadv34 removed [ 1649.191261][T20777] buffer_io_error: 11 callbacks suppressed [ 1649.191273][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.213198][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.221446][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.229343][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.237562][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.238082][ T13] team0 (unregistering): Port device batadv33 removed [ 1649.246062][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.266432][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.274341][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.282206][T20777] ldm_validate_partition_table(): Disk read failed. [ 1649.282737][ T13] team0 (unregistering): Port device batadv32 removed [ 1649.289515][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.303928][T20777] Buffer I/O error on dev loop6, logical block 0, async page read [ 1649.317789][T20777] Dev loop6: unable to read RDB block 0 [ 1649.323499][T20777] loop6: unable to read partition table [ 1649.330144][T22663] ldm_validate_partition_table(): Disk read failed. [ 1649.345862][ T13] team0 (unregistering): Port device batadv31 removed [ 1649.365165][T22663] Dev loop6: unable to read RDB block 0 [ 1649.375727][T22663] loop6: unable to read partition table [ 1649.381824][ T13] team0 (unregistering): Port device batadv30 removed [ 1649.385470][T22663] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1649.401013][ T13] team0 (unregistering): Port device batadv29 removed [ 1649.413716][ T13] team0 (unregistering): Port device batadv28 removed [ 1649.431554][ T13] team0 (unregistering): Port device batadv27 removed [ 1649.474466][ T13] team0 (unregistering): Port device batadv25 removed [ 1649.516371][ T13] team0 (unregistering): Port device batadv24 removed [ 1649.536996][ T13] team0 (unregistering): Port device batadv23 removed [ 1649.552650][ T13] team0 (unregistering): Port device batadv22 removed [ 1649.570842][ T13] team0 (unregistering): Port device batadv21 removed [ 1649.597617][ T13] team0 (unregistering): Port device batadv20 removed [ 1649.612361][ T13] team0 (unregistering): Port device batadv19 removed [ 1649.631617][ T13] team0 (unregistering): Port device batadv18 removed [ 1649.648997][ T13] team0 (unregistering): Port device batadv17 removed [ 1649.663300][ T13] team0 (unregistering): Port device batadv16 removed [ 1649.678840][ T13] team0 (unregistering): Port device batadv15 removed [ 1649.693296][ T13] team0 (unregistering): Port device batadv14 removed [ 1649.707916][ T13] team0 (unregistering): Port device batadv13 removed [ 1649.722588][ T13] team0 (unregistering): Port device batadv12 removed [ 1649.738531][ T13] team0 (unregistering): Port device batadv11 removed [ 1649.754529][ T13] team0 (unregistering): Port device batadv10 removed [ 1649.769245][ T13] team0 (unregistering): Port device batadv9 removed [ 1649.781264][ T13] team0 (unregistering): Port device batadv8 removed [ 1649.793780][ T13] team0 (unregistering): Port device batadv7 removed [ 1649.807498][ T13] team0 (unregistering): Port device batadv6 removed [ 1649.823636][ T13] team0 (unregistering): Port device batadv5 removed [ 1649.841255][ T13] team0 (unregistering): Port device batadv4 removed [ 1649.859689][ T13] team0 (unregistering): Port device batadv3 removed [ 1649.872738][ T13] team0 (unregistering): Port device batadv2 removed [ 1649.950467][ T13] team0 (unregistering): Port device batadv1 removed [ 1650.640334][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1650.674653][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1651.159185][T22467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1651.229588][T22467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1651.278022][T22467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1651.317754][T22467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1651.425879][T22695] binder: 22692:22695 ioctl c0306201 200000000c80 returned -14 [ 1651.534331][T22709] loop6: detected capacity change from 0 to 2640 [ 1651.541189][T22709] ldm_validate_partition_table(): Disk read failed. [ 1651.550344][T22709] Dev loop6: unable to read RDB block 0 [ 1651.558868][T22709] loop6: unable to read partition table [ 1651.736310][T22709] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1652.023030][T22467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.264269][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1652.271016][ T5186] Dev loop6: unable to read RDB block 0 [ 1652.281108][ T5186] loop6: unable to read partition table [ 1652.321886][T22467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.354967][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.362090][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.517682][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.524758][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.818017][T22730] loop6: detected capacity change from 0 to 2640 [ 1652.824823][T22730] ldm_validate_partition_table(): Disk read failed. [ 1652.831588][T22730] Dev loop6: unable to read RDB block 0 [ 1652.850713][T22730] loop6: unable to read partition table [ 1652.868108][T22730] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1652.982109][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1652.999730][ T5186] Dev loop6: unable to read RDB block 0 [ 1653.018951][ T5186] loop6: unable to read partition table [ 1653.107315][T22738] binder: 22733:22738 ioctl c0306201 200000000c80 returned -14 [ 1653.231675][T22738] loop6: detected capacity change from 0 to 2640 [ 1653.260512][T22738] ldm_validate_partition_table(): Disk read failed. [ 1653.319764][T22467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.338101][T22738] Dev loop6: unable to read RDB block 0 [ 1653.343796][T22738] loop6: unable to read partition table [ 1653.393472][T22738] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1653.460799][T22467] veth0_vlan: entered promiscuous mode [ 1653.517475][T22467] veth1_vlan: entered promiscuous mode [ 1653.604345][T22467] veth0_macvtap: entered promiscuous mode [ 1653.623377][T22467] veth1_macvtap: entered promiscuous mode [ 1653.654431][T22467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.697318][T22467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.779286][ T1083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.826420][ T1083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.015486][ T1083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.031051][ T1083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.049370][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.084121][T22762] binder: 22759:22762 ioctl c0306201 200000000c80 returned -14 [ 1654.093047][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.153386][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.190249][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.892495][ T5137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1654.903356][ T5137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1654.921239][ T5137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1654.936096][ T5137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1654.945880][ T5137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1654.966321][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1655.185386][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 1655.347908][ T5876] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1655.401651][ T5876] usb 2-1: config 0 has no interface number 0 [ 1655.459625][ T5876] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1655.478240][ T5876] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1655.502222][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.514908][T22786] netlink: 'syz.3.3667': attribute type 4 has an invalid length. [ 1655.545291][ T5876] usb 2-1: Product: syz [ 1655.549470][ T5876] usb 2-1: Manufacturer: syz [ 1655.576655][ T5876] usb 2-1: SerialNumber: syz [ 1655.645100][ T5876] usb 2-1: config 0 descriptor?? [ 1655.699023][T22790] binder: BINDER_SET_CONTEXT_MGR already set [ 1655.707194][ T5876] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1655.716723][T22790] binder: 22789:22790 ioctl 4018620d 200000000040 returned -16 [ 1655.730551][ T5876] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1655.746897][T22790] binder: 22789:22790 ioctl c0306201 200000000c80 returned -14 [ 1655.910655][T22796] loop6: detected capacity change from 0 to 2640 [ 1656.000824][ T5876] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1656.007691][T22796] buffer_io_error: 122 callbacks suppressed [ 1656.007705][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.036609][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.044965][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.053536][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.101566][ T5876] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1656.136558][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.144794][ T5876] em28xx 2-1:0.89: board has no eeprom [ 1656.194552][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.215492][ T5876] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1656.222697][ T5876] em28xx 2-1:0.89: analog set to bulk mode. [ 1656.275309][ T5933] em28xx 2-1:0.89: Registering V4L2 extension [ 1656.289768][ T5876] usb 2-1: USB disconnect, device number 21 [ 1656.305336][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.323173][T22772] chnl_net:caif_netlink_parms(): no params data found [ 1656.334864][ T5876] em28xx 2-1:0.89: Disconnecting em28xx [ 1656.357373][ T5933] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1656.364549][ T5933] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1656.385876][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.393686][T22796] ldm_validate_partition_table(): Disk read failed. [ 1656.421926][ T5933] em28xx 2-1:0.89: No AC97 audio processor [ 1656.447765][ T5933] usb 2-1: Decoder not found [ 1656.452604][ T5933] em28xx 2-1:0.89: failed to create media graph [ 1656.464131][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.485392][ T5933] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1656.505395][T22796] Buffer I/O error on dev loop6, logical block 0, async page read [ 1656.513602][T22796] Dev loop6: unable to read RDB block 0 [ 1656.540227][ T5933] em28xx 2-1:0.89: Registering snapshot button... [ 1656.548616][T22796] loop6: unable to read partition table [ 1656.576423][ T5933] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input23 [ 1656.606102][ T5933] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1656.624410][ T5876] em28xx 2-1:0.89: Closing input extension [ 1656.634035][ T5876] em28xx 2-1:0.89: Deregistering snapshot button [ 1656.685961][T22796] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1656.708777][T22772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.716042][T22772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.724772][T22772] bridge_slave_0: entered allmulticast mode [ 1656.726901][ T5876] em28xx 2-1:0.89: Freeing device [ 1656.732663][T22772] bridge_slave_0: entered promiscuous mode [ 1656.974243][ T5137] Bluetooth: hci4: command tx timeout [ 1657.235389][T22772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.285691][T22772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.301818][T22772] bridge_slave_1: entered allmulticast mode [ 1657.325641][T22772] bridge_slave_1: entered promiscuous mode [ 1657.446692][T22772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.488819][T22772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.495997][ T13] IPVS: stop unused estimator thread 0... [ 1657.644895][T22772] team0: Port device team_slave_0 added [ 1657.690879][T22772] team0: Port device team_slave_1 added [ 1657.840571][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.897911][T22772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.906188][T22772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.968711][T22829] binder_alloc: 22828: binder_alloc_buf, no vma [ 1658.013297][T22772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.100091][T22833] binder: 22828:22833 ioctl c0306201 200000000c80 returned -14 [ 1658.616547][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.648475][T22772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.656270][T22772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.682387][T22772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.090665][ T5137] Bluetooth: hci4: command tx timeout [ 1659.216992][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.370544][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.451435][T22772] hsr_slave_0: entered promiscuous mode [ 1659.476978][T22772] hsr_slave_1: entered promiscuous mode [ 1659.482659][T22855] binder: 22854:22855 ioctl c0306201 200000000c80 returned -14 [ 1659.666624][T22855] loop6: detected capacity change from 0 to 2640 [ 1659.683995][T22855] ldm_validate_partition_table(): Disk read failed. [ 1660.156149][T22855] Dev loop6: unable to read RDB block 0 [ 1660.163730][T22855] loop6: unable to read partition table [ 1660.190053][T22855] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1660.455302][T19073] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1660.852933][T22856] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1660.885923][ T5186] ldm_validate_partition_table(): Disk read failed. [ 1660.899453][ T5186] Dev loop6: unable to read RDB block 0 [ 1660.912081][T22863] pim6reg: entered allmulticast mode [ 1660.939279][ T5186] loop6: unable to read partition table [ 1660.955373][T19073] usb 4-1: Using ep0 maxpacket: 32 [ 1660.986238][T19073] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1661.010973][T19073] usb 4-1: config 0 has no interface number 0 [ 1661.025402][T19073] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1661.034885][T19073] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1661.106917][T19073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.119004][T19073] usb 4-1: Product: syz [ 1661.127805][ T5137] Bluetooth: hci4: command tx timeout [ 1661.128044][T19073] usb 4-1: Manufacturer: syz [ 1661.196794][T19073] usb 4-1: SerialNumber: syz [ 1661.222246][T19073] usb 4-1: config 0 descriptor?? [ 1661.262570][T19073] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1661.277963][T19073] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1661.338159][ T13] bridge_slave_1: left allmulticast mode [ 1661.343812][ T13] bridge_slave_1: left promiscuous mode [ 1661.374850][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.505541][ T13] bridge_slave_0: left allmulticast mode [ 1661.521553][ T13] bridge_slave_0: left promiscuous mode [ 1661.527207][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 1661.544710][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.060224][T22886] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 1662.459924][T19073] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1662.539686][T19073] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1662.562253][T19073] em28xx 4-1:0.89: board has no eeprom [ 1662.658806][T19073] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1662.730795][T19073] em28xx 4-1:0.89: analog set to bulk mode. [ 1662.763235][T13651] em28xx 4-1:0.89: Registering V4L2 extension [ 1662.777336][T22890] binder_alloc: 22889: binder_alloc_buf, no vma [ 1662.787078][T19073] usb 4-1: USB disconnect, device number 26 [ 1662.803991][T22890] binder: 22889:22890 ioctl c0306201 200000000c80 returned -14 [ 1662.821153][T19073] em28xx 4-1:0.89: Disconnecting em28xx [ 1662.904514][T13651] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1663.144918][T13651] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1663.175316][T13651] em28xx 4-1:0.89: No AC97 audio processor [ 1663.195491][T13651] usb 4-1: Decoder not found [ 1663.200090][T13651] em28xx 4-1:0.89: failed to create media graph [ 1663.205321][ T5137] Bluetooth: hci4: command tx timeout [ 1663.270107][T13651] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1663.541586][T13651] em28xx 4-1:0.89: Registering snapshot button... [ 1663.563389][T13651] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input24 [ 1663.614066][T13651] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1663.628491][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.655316][T19073] em28xx 4-1:0.89: Closing input extension [ 1663.665666][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.671348][T19073] em28xx 4-1:0.89: Deregistering snapshot button [ 1663.714747][ T13] bond0 (unregistering): Released all slaves [ 1663.715353][T19073] em28xx 4-1:0.89: Freeing device [ 1665.291571][ T13] hsr_slave_0: left promiscuous mode [ 1665.308800][ T13] hsr_slave_1: left promiscuous mode [ 1665.326616][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.343761][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.358736][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.541927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.911797][ T13] veth1_macvtap: left promiscuous mode [ 1665.921902][ T13] veth0_macvtap: left promiscuous mode [ 1665.963556][ T13] veth1_vlan: left promiscuous mode [ 1666.000482][ T13] veth0_vlan: left promiscuous mode [ 1666.557618][ T13] team0 (unregistering): Port device batadv78 removed [ 1666.591382][ T13] team0 (unregistering): Port device batadv77 removed [ 1666.626725][ T13] team0 (unregistering): Port device batadv76 removed [ 1666.658335][ T13] team0 (unregistering): Port device batadv75 removed [ 1666.693840][ T13] team0 (unregistering): Port device batadv74 removed [ 1666.813885][ T13] team0 (unregistering): Port device batadv73 removed [ 1666.828297][ T13] team0 (unregistering): Port device batadv72 removed [ 1666.860710][ T13] team0 (unregistering): Port device batadv71 removed [ 1666.883692][ T13] team0 (unregistering): Port device batadv70 removed [ 1666.906874][ T13] team0 (unregistering): Port device batadv69 removed [ 1666.930547][ T13] team0 (unregistering): Port device batadv68 removed [ 1666.950784][ T13] team0 (unregistering): Port device batadv67 removed [ 1666.972430][ T13] team0 (unregistering): Port device batadv66 removed [ 1666.985213][ T13] team0 (unregistering): Port device batadv65 removed [ 1666.999302][ T13] team0 (unregistering): Port device batadv64 removed [ 1667.012840][ T13] team0 (unregistering): Port device batadv63 removed [ 1667.026616][ T13] team0 (unregistering): Port device batadv62 removed [ 1667.040657][ T13] team0 (unregistering): Port device batadv61 removed [ 1667.053391][ T13] team0 (unregistering): Port device batadv60 removed [ 1667.067252][ T13] team0 (unregistering): Port device batadv59 removed [ 1667.079680][ T13] team0 (unregistering): Port device batadv58 removed [ 1667.097739][ T13] team0 (unregistering): Port device batadv54 removed [ 1667.110572][ T13] team0 (unregistering): Port device batadv53 removed [ 1667.124497][ T13] team0 (unregistering): Port device batadv52 removed [ 1667.139078][ T13] team0 (unregistering): Port device batadv51 removed [ 1667.153770][ T13] team0 (unregistering): Port device batadv50 removed [ 1667.167679][ T13] team0 (unregistering): Port device batadv49 removed [ 1667.181018][ T13] team0 (unregistering): Port device batadv48 removed [ 1667.194512][ T13] team0 (unregistering): Port device batadv47 removed [ 1667.208610][ T13] team0 (unregistering): Port device batadv46 removed [ 1667.221656][ T13] team0 (unregistering): Port device batadv45 removed [ 1667.236223][ T13] team0 (unregistering): Port device batadv43 removed [ 1667.248884][ T13] team0 (unregistering): Port device batadv42 removed [ 1667.261088][ T13] team0 (unregistering): Port device batadv41 removed [ 1667.275084][ T13] team0 (unregistering): Port device batadv40 removed [ 1667.289733][ T13] team0 (unregistering): Port device batadv38 removed [ 1667.306586][ T13] team0 (unregistering): Port device batadv37 removed [ 1667.319238][ T13] team0 (unregistering): Port device batadv36 removed [ 1667.331443][ T13] team0 (unregistering): Port device batadv35 removed [ 1667.344163][ T13] team0 (unregistering): Port device batadv34 removed [ 1667.358671][ T13] team0 (unregistering): Port device batadv33 removed [ 1667.371331][ T13] team0 (unregistering): Port device batadv32 removed [ 1667.390893][ T13] team0 (unregistering): Port device batadv31 removed [ 1667.404187][ T13] team0 (unregistering): Port device batadv30 removed [ 1667.417107][ T13] team0 (unregistering): Port device batadv29 removed [ 1667.429583][ T13] team0 (unregistering): Port device batadv28 removed [ 1667.441834][ T13] team0 (unregistering): Port device batadv27 removed [ 1667.458455][ T13] pim6reg (unregistering): left allmulticast mode [ 1667.470496][ T13] team0 (unregistering): Port device batadv26 removed [ 1667.484453][ T13] team0 (unregistering): Port device batadv25 removed [ 1667.498396][ T13] team0 (unregistering): Port device batadv24 removed [ 1667.512586][ T13] team0 (unregistering): Port device batadv23 removed [ 1667.536125][ T13] team0 (unregistering): Port device batadv22 removed [ 1667.548605][ T13] team0 (unregistering): Port device batadv21 removed [ 1667.562485][ T13] team0 (unregistering): Port device batadv20 removed [ 1667.575041][ T13] team0 (unregistering): Port device batadv19 removed [ 1667.588270][ T13] team0 (unregistering): Port device batadv18 removed [ 1667.602162][ T13] team0 (unregistering): Port device batadv17 removed [ 1667.618521][ T13] team0 (unregistering): Port device batadv16 removed [ 1667.631982][ T13] team0 (unregistering): Port device batadv15 removed [ 1667.645177][ T13] team0 (unregistering): Port device batadv14 removed [ 1667.657803][ T13] team0 (unregistering): Port device batadv13 removed [ 1667.671930][ T13] team0 (unregistering): Port device batadv12 removed [ 1667.684892][ T13] team0 (unregistering): Port device batadv11 removed [ 1667.702333][ T13] team0 (unregistering): Port device batadv10 removed [ 1667.717510][ T13] team0 (unregistering): Port device batadv9 removed [ 1667.730638][ T13] team0 (unregistering): Port device batadv8 removed [ 1667.742689][ T13] team0 (unregistering): Port device batadv7 removed [ 1667.754893][ T13] team0 (unregistering): Port device batadv6 removed [ 1667.771941][ T13] team0 (unregistering): Port device batadv5 removed [ 1667.788130][ T13] team0 (unregistering): Port device batadv4 removed [ 1667.801104][ T13] team0 (unregistering): Port device batadv3 removed [ 1667.813519][ T13] team0 (unregistering): Port device batadv2 removed [ 1667.826020][ T13] team0 (unregistering): Port device batadv1 removed [ 1668.046416][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1668.072664][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1668.606574][T22772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1668.630522][T22968] binder: BINDER_SET_CONTEXT_MGR already set [ 1668.649604][T22772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1668.665506][T22968] binder: 22965:22968 ioctl 4018620d 200000000040 returned -16 [ 1669.132607][T22772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1669.156354][T22968] binder: 22965:22968 ioctl c0306201 200000000c80 returned -14 [ 1669.179046][T22772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1669.256643][T22987] hub 9-0:1.0: USB hub found [ 1669.262119][T22987] hub 9-0:1.0: 1 port detected [ 1669.497009][T22968] loop6: detected capacity change from 0 to 2640 [ 1669.505830][T22968] buffer_io_error: 48 callbacks suppressed [ 1669.505862][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.737879][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.769033][T22772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.784979][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.821981][T22772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.831726][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.862253][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.869374][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.879625][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.925445][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.947805][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.961965][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.969148][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.043215][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.059508][T22772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1670.080566][T22772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1670.114338][T22968] ldm_validate_partition_table(): Disk read failed. [ 1670.191794][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.268958][T22968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1670.333401][T22968] Dev loop6: unable to read RDB block 0 [ 1670.384746][T22968] loop6: unable to read partition table [ 1670.428794][T22968] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1670.513678][T22772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.139750][T22772] veth0_vlan: entered promiscuous mode [ 1671.170293][T22772] veth1_vlan: entered promiscuous mode [ 1671.346661][T22772] veth0_macvtap: entered promiscuous mode [ 1671.357689][T22772] veth1_macvtap: entered promiscuous mode [ 1671.382918][T22772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.659441][T22772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.730000][T16488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.855441][T16488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.864141][T16488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.069159][T16488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.383050][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.484098][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.793851][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.802316][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.447960][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 1675.454009][T23045] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 1675.754409][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1675.764959][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1675.772674][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1675.785939][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1675.793227][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1677.399107][T23078] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1677.798959][T23069] chnl_net:caif_netlink_parms(): no params data found [ 1677.851141][ T5137] Bluetooth: hci3: command tx timeout [ 1678.141822][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 1678.851389][T23069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.885974][T23069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.893111][T23069] bridge_slave_0: entered allmulticast mode [ 1678.962533][T23069] bridge_slave_0: entered promiscuous mode [ 1678.977692][T23069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.991920][T23069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.375215][T23069] bridge_slave_1: entered allmulticast mode [ 1679.383195][T23069] bridge_slave_1: entered promiscuous mode [ 1679.500321][T23069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.571485][T23069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.668033][T23069] team0: Port device team_slave_0 added [ 1679.682877][T23069] team0: Port device team_slave_1 added [ 1679.930867][ T5137] Bluetooth: hci3: command tx timeout [ 1680.478953][ T6028] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1680.613929][T23069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.623400][ T13] IPVS: stop unused estimator thread 0... [ 1680.629181][T23069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.655154][T23069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.719588][T23069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.736912][T23069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.810831][T23069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.830628][ T6028] usb 4-1: Using ep0 maxpacket: 32 [ 1680.851555][ T6028] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1680.866636][ T6028] usb 4-1: config 0 has no interface number 0 [ 1680.880253][ T6028] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1680.912060][ T6028] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1680.927122][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.930137][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.997557][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1681.025493][T23139] netlink: 'syz.1.3721': attribute type 4 has an invalid length. [ 1681.063569][ T6028] usb 4-1: Product: syz [ 1681.067945][ T6028] usb 4-1: Manufacturer: syz [ 1681.072538][ T6028] usb 4-1: SerialNumber: syz [ 1681.099611][ T6028] usb 4-1: config 0 descriptor?? [ 1681.113136][ T6028] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1681.149928][ T6028] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1681.192898][T23069] hsr_slave_0: entered promiscuous mode [ 1681.202780][T23069] hsr_slave_1: entered promiscuous mode [ 1681.224586][T23069] debugfs: 'hsr0' already exists in 'hsr' [ 1681.245869][T23069] Cannot create hsr debugfs directory [ 1681.295580][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.353952][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1681.790276][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.819273][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1682.006255][ T5137] Bluetooth: hci3: command tx timeout [ 1682.258466][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.274330][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1682.305627][ T6028] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1682.334405][T23152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1682.381844][ T6028] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1682.400084][ T6028] em28xx 4-1:0.89: board has no eeprom [ 1682.444598][T23154] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1682.475356][ T6028] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1682.499101][ T6028] em28xx 4-1:0.89: analog set to bulk mode. [ 1682.505038][T19407] em28xx 4-1:0.89: Registering V4L2 extension [ 1682.579026][ T13] bridge_slave_1: left allmulticast mode [ 1682.610604][ T13] bridge_slave_1: left promiscuous mode [ 1682.636660][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.683143][T19407] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1682.692254][ T13] bridge_slave_0: left allmulticast mode [ 1682.749862][ T13] bridge_slave_0: left promiscuous mode [ 1682.797820][T19407] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1682.809033][T23039] usb 4-1: USB disconnect, device number 27 [ 1682.815866][T23039] em28xx 4-1:0.89: Disconnecting em28xx [ 1682.816713][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.825308][T19407] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1682.851532][T19407] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1682.870058][T19407] em28xx 4-1:0.89: No AC97 audio processor [ 1682.896448][T19407] usb 4-1: Decoder not found [ 1682.901045][T19407] em28xx 4-1:0.89: failed to create media graph [ 1682.927138][T19407] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1683.049095][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1683.077184][T19407] em28xx 4-1:0.89: Registering snapshot button... [ 1683.086945][T19407] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input25 [ 1683.098765][T19407] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1683.108052][T23039] em28xx 4-1:0.89: Closing input extension [ 1683.113867][T23039] em28xx 4-1:0.89: Deregistering snapshot button [ 1683.658305][T23039] em28xx 4-1:0.89: Freeing device [ 1684.085865][ T5137] Bluetooth: hci3: command tx timeout [ 1684.187307][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.197996][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.210799][ T13] bond0 (unregistering): Released all slaves [ 1684.393887][T23181] bridge0: port 3(gretap0) entered blocking state [ 1684.401178][T23181] bridge0: port 3(gretap0) entered disabled state [ 1684.410971][T23181] gretap0: entered allmulticast mode [ 1684.418378][T23181] gretap0: entered promiscuous mode [ 1684.424198][T23181] bridge0: port 3(gretap0) entered blocking state [ 1684.430844][T23181] bridge0: port 3(gretap0) entered forwarding state [ 1684.581504][ T13] tipc: Disabling bearer [ 1684.598219][ T13] tipc: Disabling bearer [ 1684.617137][ T13] tipc: Left network mode [ 1684.753566][T23218] [ 1684.756278][T23218] ============================= [ 1684.761315][T23218] WARNING: suspicious RCU usage [ 1684.766373][T23218] syzkaller #0 Tainted: G L [ 1684.772352][T23218] ----------------------------- [ 1684.777519][T23218] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1684.786117][T23218] [ 1684.786117][T23218] other info that might help us debug this: [ 1684.786117][T23218] [ 1684.796404][T23218] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1684.796404][T23218] rcu_scheduler_active = 2, debug_locks = 1 [ 1684.804764][T23218] 1 lock held by syz.3.3743/23218: [ 1684.810084][T23218] #0: ffffffff8e3c8d00 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x357/0xb20 [ 1684.821303][T23218] [ 1684.821303][T23218] stack backtrace: [ 1684.827693][T23218] CPU: 0 UID: 0 PID: 23218 Comm: syz.3.3743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1684.827723][T23218] Tainted: [L]=SOFTLOCKUP [ 1684.827731][T23218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.827743][T23218] Call Trace: [ 1684.827750][T23218] [ 1684.827757][T23218] dump_stack_lvl+0x16c/0x1f0 [ 1684.827795][T23218] lockdep_rcu_suspicious+0x166/0x260 [ 1684.827821][T23218] get_callchain_entry+0x278/0x3f0 [ 1684.827849][T23218] get_perf_callchain+0x2d6/0x980 [ 1684.827876][T23218] ? __pfx_get_perf_callchain+0x10/0x10 [ 1684.827900][T23218] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1684.827934][T23218] ? trace_sched_exit_tp+0xd1/0x110 [ 1684.827952][T23218] ? __schedule+0x10b9/0x6150 [ 1684.827973][T23218] ? __schedule+0x114c/0x6150 [ 1684.827997][T23218] __bpf_get_stack+0x74b/0x950 [ 1684.828027][T23218] ? __pfx___bpf_get_stack+0x10/0x10 [ 1684.828059][T23218] bpf_get_stack+0x32/0x40 [ 1684.828084][T23218] bpf_get_stack_raw_tp+0x1dd/0x280 [ 1684.828111][T23218] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 1684.828130][T23218] bpf_prog_test_run_syscall+0x461/0xb20 [ 1684.828156][T23218] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1684.828180][T23218] ? fput+0x70/0xf0 [ 1684.828197][T23218] ? __bpf_prog_get+0x97/0x2a0 [ 1684.828217][T23218] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1684.828241][T23218] __sys_bpf+0x1035/0x4980 [ 1684.828267][T23218] ? futex_private_hash_put+0x160/0x1b0 [ 1684.828295][T23218] ? __pfx___sys_bpf+0x10/0x10 [ 1684.828324][T23218] ? __pfx_futex_wake+0x10/0x10 [ 1684.828342][T23218] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1684.828371][T23218] ? rcu_is_watching+0x12/0xc0 [ 1684.828391][T23218] ? __schedule+0x10b9/0x6150 [ 1684.828411][T23218] ? __schedule+0x114c/0x6150 [ 1684.828436][T23218] ? do_futex+0x122/0x350 [ 1684.828479][T23218] ? xfd_validate_state+0x61/0x180 [ 1684.828504][T23218] __x64_sys_bpf+0x78/0xc0 [ 1684.828529][T23218] ? lockdep_hardirqs_on+0x7c/0x110 [ 1684.828553][T23218] do_syscall_64+0xcd/0xf80 [ 1684.828579][T23218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.828598][T23218] RIP: 0033:0x7f0166b8f749 [ 1684.828614][T23218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1684.828632][T23218] RSP: 002b:00007f01679e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1684.828651][T23218] RAX: ffffffffffffffda RBX: 00007f0166de5fa0 RCX: 00007f0166b8f749 [ 1684.828664][T23218] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1684.828675][T23218] RBP: 00007f0166c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1684.828686][T23218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.828698][T23218] R13: 00007f0166de6038 R14: 00007f0166de5fa0 R15: 00007ffd3ccd70e8 [ 1684.828725][T23218] [ 1686.118626][ T13] hsr_slave_0: left promiscuous mode [ 1686.125125][ T13] hsr_slave_1: left promiscuous mode [ 1686.137337][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.145605][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.153397][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.161023][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.182614][ T13] veth1_macvtap: left promiscuous mode [ 1686.189112][ T13] veth0_macvtap: left promiscuous mode [ 1686.194610][ T13] veth1_vlan: left promiscuous mode [ 1686.200728][ T13] veth0_vlan: left promiscuous mode [ 1686.321780][ T13] team0 (unregistering): Port device batadv71 removed [ 1686.345170][ T13] team0 (unregistering): Port device batadv70 removed [ 1686.362663][ T13] team0 (unregistering): Port device batadv69 removed [ 1686.374848][ T13] team0 (unregistering): Port device batadv68 removed [ 1686.387177][ T13] team0 (unregistering): Port device batadv67 removed [ 1686.400767][ T13] team0 (unregistering): Port device batadv66 removed [ 1686.414947][ T13] team0 (unregistering): Port device batadv65 removed [ 1686.427533][ T13] team0 (unregistering): Port device batadv64 removed [ 1686.440084][ T13] team0 (unregistering): Port device batadv63 removed [ 1686.454150][ T13] team0 (unregistering): Port device batadv62 removed [ 1686.467887][ T13] team0 (unregistering): Port device batadv61 removed [ 1686.479591][ T13] pim6reg (unregistering): left allmulticast mode [ 1686.492842][ T13] team0 (unregistering): Port device batadv60 removed [ 1686.505021][ T13] team0 (unregistering): Port device batadv59 removed [ 1686.519318][ T13] team0 (unregistering): Port device batadv58 removed [ 1686.531554][ T13] team0 (unregistering): Port device batadv57 removed [ 1686.544373][ T13] team0 (unregistering): Port device batadv56 removed [ 1686.557604][ T13] team0 (unregistering): Port device batadv55 removed [ 1686.572912][ T13] team0 (unregistering): Port device batadv53 removed [ 1686.586863][ T13] team0 (unregistering): Port device batadv52 removed [ 1686.599574][ T13] team0 (unregistering): Port device batadv51 removed [ 1686.611702][ T13] team0 (unregistering): Port device batadv50 removed [ 1686.623881][ T13] team0 (unregistering): Port device batadv49 removed [ 1686.636655][ T13] team0 (unregistering): Port device batadv48 removed [ 1686.649664][ T13] team0 (unregistering): Port device batadv47 removed [ 1686.664177][ T13] team0 (unregistering): Port device batadv46 removed [ 1686.677385][ T13] team0 (unregistering): Port device batadv45 removed [ 1686.689923][ T13] team0 (unregistering): Port device batadv44 removed [ 1686.702477][ T13] team0 (unregistering): Port device batadv43 removed [ 1686.715815][ T13] team0 (unregistering): Port device batadv42 removed [ 1686.728224][ T13] team0 (unregistering): Port device batadv41 removed [ 1686.740403][ T13] team0 (unregistering): Port device batadv40 removed [ 1686.753013][ T13] team0 (unregistering): Port device batadv39 removed [ 1686.768214][ T13] team0 (unregistering): Port device batadv38 removed [ 1686.781885][ T13] team0 (unregistering): Port device batadv37 removed [ 1686.794575][ T13] team0 (unregistering): Port device batadv36 removed [ 1686.807887][ T13] team0 (unregistering): Port device batadv35 removed [ 1686.820108][ T13] team0 (unregistering): Port device batadv34 removed [ 1686.833272][ T13] team0 (unregistering): Port device batadv33 removed [ 1686.845952][ T13] team0 (unregistering): Port device batadv32 removed [ 1686.859235][ T13] team0 (unregistering): Port device batadv31 removed [ 1686.872346][ T13] team0 (unregistering): Port device batadv30 removed [ 1686.888874][ T13] team0 (unregistering): Port device batadv29 removed [ 1686.902204][ T13] team0 (unregistering): Port device batadv28 removed [ 1686.915161][ T13] team0 (unregistering): Port device batadv27 removed [ 1686.929381][ T13] team0 (unregistering): Port device batadv26 removed [ 1686.942671][ T13] team0 (unregistering): Port device batadv25 removed [ 1686.954995][ T13] team0 (unregistering): Port device batadv24 removed [ 1686.969337][ T13] team0 (unregistering): Port device batadv23 removed [ 1686.982733][ T13] team0 (unregistering): Port device batadv22 removed [ 1686.995581][ T13] team0 (unregistering): Port device batadv21 removed [ 1687.008264][ T13] team0 (unregistering): Port device batadv20 removed [ 1687.023242][ T13] team0 (unregistering): Port device batadv19 removed [ 1687.036738][ T13] team0 (unregistering): Port device batadv18 removed [ 1687.049758][ T13] team0 (unregistering): Port device batadv17 removed [ 1687.061979][ T13] team0 (unregistering): Port device batadv16 removed [ 1687.074924][ T13] team0 (unregistering): Port device batadv15 removed [ 1687.087766][ T13] team0 (unregistering): Port device batadv14 removed [ 1687.100254][ T13] team0 (unregistering): Port device batadv13 removed [ 1687.113181][ T13] team0 (unregistering): Port device batadv12 removed [ 1687.127120][ T13] team0 (unregistering): Port device batadv11 removed [ 1687.140809][ T13] team0 (unregistering): Port device batadv10 removed [ 1687.153947][ T13] team0 (unregistering): Port device batadv9 removed [ 1687.166281][ T13] team0 (unregistering): Port device batadv8 removed [ 1687.179389][ T13] team0 (unregistering): Port device batadv7 removed [ 1687.191676][ T13] team0 (unregistering): Port device batadv6 removed [ 1687.204130][ T13] team0 (unregistering): Port device batadv5 removed [ 1687.219056][ T13] team0 (unregistering): Port device batadv4 removed [ 1687.231409][ T13] team0 (unregistering): Port device batadv3 removed [ 1687.243714][ T13] team0 (unregistering): Port device batadv2 removed [ 1687.256194][ T13] team0 (unregistering): Port device batadv1 removed [ 1687.460971][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1687.487893][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1690.911243][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.956321][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.044182][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.124169][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.244401][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.328693][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.387267][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.443294][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.631373][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.691599][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.769313][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.859109][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.048154][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.122324][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.203706][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.261394][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.386524][ T13] bridge_slave_1: left allmulticast mode [ 1692.392610][ T13] bridge_slave_1: left promiscuous mode [ 1692.403239][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.412137][ T13] bridge_slave_0: left allmulticast mode [ 1692.418241][ T13] bridge_slave_0: left promiscuous mode [ 1692.423924][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.435201][ T13] bridge_slave_1: left allmulticast mode [ 1692.441713][ T13] bridge_slave_1: left promiscuous mode [ 1692.447744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.458879][ T13] bridge_slave_0: left allmulticast mode [ 1692.464516][ T13] bridge_slave_0: left promiscuous mode [ 1692.470741][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.482540][ T13] bridge_slave_1: left allmulticast mode [ 1692.495522][ T13] bridge_slave_1: left promiscuous mode [ 1692.501177][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.510366][ T13] bridge_slave_0: left allmulticast mode [ 1692.516272][ T13] bridge_slave_0: left promiscuous mode [ 1692.521876][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.531001][ T13] gretap0: left allmulticast mode [ 1692.536340][ T13] gretap0: left promiscuous mode [ 1692.541326][ T13] bridge0: port 3(gretap0) entered disabled state [ 1692.549127][ T13] bridge_slave_1: left allmulticast mode [ 1692.554758][ T13] bridge_slave_1: left promiscuous mode [ 1692.560956][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.570520][ T13] bridge_slave_0: left allmulticast mode [ 1692.576263][ T13] bridge_slave_0: left promiscuous mode [ 1692.581851][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.590942][ T13] bridge_slave_1: left allmulticast mode [ 1692.597451][ T13] bridge_slave_1: left promiscuous mode [ 1692.603063][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.611386][ T13] bridge_slave_0: left allmulticast mode [ 1692.617061][ T13] bridge_slave_0: left promiscuous mode [ 1692.622646][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.978663][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.988495][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.998200][ T13] bond0 (unregistering): Released all slaves [ 1693.184099][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.194691][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.204300][ T13] bond0 (unregistering): Released all slaves [ 1693.405121][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.416206][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.425517][ T13] bond0 (unregistering): Released all slaves [ 1693.587239][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.599798][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.609525][ T13] bond0 (unregistering): Released all slaves [ 1693.870339][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.879986][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.889400][ T13] bond0 (unregistering): Released all slaves