last executing test programs: 6.075663345s ago: executing program 3 (id=2725): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) socket(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c54, &(0x7f0000000300)={0x0, 0xd612, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 4.922175914s ago: executing program 1 (id=2727): ftruncate(0xffffffffffffffff, 0x7000000) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 4.703758092s ago: executing program 1 (id=2728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7f, 0x9}}}}]}, 0x44}}, 0x4010006) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.063685475s ago: executing program 1 (id=2730): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x1, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x1, 0xf, 0x1, 0xf7, 0xfffffffffffffffc, 0xffffffffffffffff}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.060541006s ago: executing program 3 (id=2731): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0xffffffffffffffff) 3.772297603s ago: executing program 3 (id=2732): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000240), 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.575920458s ago: executing program 2 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.519052896s ago: executing program 1 (id=2734): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x149040, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) listen(r0, 0x4) 3.40967911s ago: executing program 2 (id=2735): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x4002}, {0xffffffffffffffff, 0x2000}], 0x2, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 2.960795588s ago: executing program 3 (id=2736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xa, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x0, 0x2, 0x0, 0x4, 0x1, 0xe, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0xb, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x100000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x4, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x1, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xb000, 0x9}, {0x1000, 0x9}, 0x40010000, 0x0, 0x100000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 2.679707394s ago: executing program 0 (id=2738): accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 2.587601156s ago: executing program 0 (id=2739): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) socket(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c54, &(0x7f0000000300)={0x0, 0xd612, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 2.543375042s ago: executing program 3 (id=2740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffffd) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) 1.693721952s ago: executing program 3 (id=2741): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.4749978s ago: executing program 0 (id=2742): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) write(r0, &(0x7f0000000100)="9c2a0a65", 0x4) 1.334235948s ago: executing program 1 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 1.255673749s ago: executing program 0 (id=2744): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000240), 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.255398848s ago: executing program 1 (id=2745): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfa", 0x40}], 0x1, 0x0, 0x0, 0x7400}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, [0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1]}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x20000000, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x3c}}, 0x42880) 1.195200726s ago: executing program 2 (id=2746): unshare(0x4020400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 1.001275792s ago: executing program 2 (id=2747): unshare(0x24020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x3b3, &(0x7f0000000400), 0x0}) 500.331996ms ago: executing program 2 (id=2748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xa, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x0, 0x2, 0x0, 0x4, 0x1, 0xe, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0xb, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x100000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x4, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x1, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xb000, 0x9}, {0x1000, 0x9}, 0x40010000, 0x0, 0x100000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 192.338116ms ago: executing program 0 (id=2749): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x83, 0x7, 0x3, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x8, 0x3f9a, 0xffffffffffff0000, 0x8000000010001, 0x3}, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 83.74798ms ago: executing program 2 (id=2750): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) socket(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c54, &(0x7f0000000300)={0x0, 0xd612, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 0 (id=2751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r7, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x10, 0x0, 0x0) setsockopt$inet6_int(r11, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r2, @ANYRESHEX=r8], 0xfffffdef}}, 0x10) recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) kernel console output (not intermixed with test programs): ace 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 519.940657][T11193] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 520.423678][T12541] loop2: detected capacity change from 0 to 7 [ 520.443700][T12541] Dev loop2: unable to read RDB block 7 [ 520.450090][T12541] loop2: unable to read partition table [ 520.459608][T12541] loop2: partition table beyond EOD, truncated [ 520.467470][T12541] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 520.489631][ T5139] Dev loop2: unable to read RDB block 7 [ 520.499338][ T5139] loop2: unable to read partition table [ 520.505602][ T5139] loop2: partition table beyond EOD, truncated [ 522.949766][T11193] usb 3-1: string descriptor 0 read error: -71 [ 522.956216][T11193] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.006981][T11193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.050531][T11193] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 523.101134][T11193] usb 3-1: no configuration chosen from 1 choice [ 523.123778][T11193] usb 3-1: USB disconnect, device number 65 [ 523.830978][T11193] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 524.323187][T11193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.340592][T11193] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.355191][T11193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.364242][T11193] usb 3-1: Product: syz [ 524.376272][T11193] usb 3-1: Manufacturer: syz [ 524.383654][T11193] usb 3-1: SerialNumber: syz [ 524.791349][T12590] loop2: detected capacity change from 0 to 7 [ 524.810354][T12590] Dev loop2: unable to read RDB block 7 [ 524.845965][T12590] loop2: unable to read partition table [ 524.863769][T12590] loop2: partition table beyond EOD, truncated [ 524.923951][T12590] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.132896][T12625] loop2: detected capacity change from 0 to 7 [ 527.154245][ T7707] Dev loop2: unable to read RDB block 7 [ 527.160192][ T7707] loop2: unable to read partition table [ 527.176125][ T7707] loop2: partition table beyond EOD, truncated [ 527.198243][T12625] Dev loop2: unable to read RDB block 7 [ 527.241106][T12625] loop2: unable to read partition table [ 527.264858][T12625] loop2: partition table beyond EOD, truncated [ 527.345225][T11193] cdc_ncm 3-1:1.0: bind() failure [ 527.356746][T12625] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.395316][T11193] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 527.421237][T11193] cdc_ncm 3-1:1.1: bind() failure [ 527.477439][T11193] usb 3-1: USB disconnect, device number 66 [ 528.230940][T11193] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 528.416679][T11193] usb 1-1: config 0 has no interfaces? [ 528.433360][T11193] usb 1-1: string descriptor 0 read error: -22 [ 528.445393][T11193] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 528.459049][T11193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.470902][ T5774] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 528.489515][T11193] usb 1-1: config 0 descriptor?? [ 528.665589][ T5774] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 528.676417][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.685239][ T5774] usb 3-1: Product: syz [ 528.689488][ T5774] usb 3-1: Manufacturer: syz [ 528.694281][ T5774] usb 3-1: SerialNumber: syz [ 528.721994][T11193] usb 1-1: USB disconnect, device number 47 [ 529.028327][T12656] loop2: detected capacity change from 0 to 7 [ 529.039615][ T7707] Dev loop2: unable to read RDB block 7 [ 529.047009][ T7707] loop2: unable to read partition table [ 529.053150][ T7707] loop2: partition table beyond EOD, truncated [ 529.070586][T12656] Dev loop2: unable to read RDB block 7 [ 529.078313][T12656] loop2: unable to read partition table [ 529.084817][T12656] loop2: partition table beyond EOD, truncated [ 529.099228][T12656] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 529.117151][ T5139] Dev loop2: unable to read RDB block 7 [ 529.123124][ T5139] loop2: unable to read partition table [ 529.129154][ T5139] loop2: partition table beyond EOD, truncated [ 529.137304][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 530.592252][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 530.637009][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 531.114239][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 531.184246][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 531.231903][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 531.291519][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 531.352430][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 531.410997][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 531.444159][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 531.481041][ T5774] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 531.557011][ T5774] lan78xx: probe of 3-1:1.0 failed with error -71 [ 531.606104][ T5774] usb 3-1: USB disconnect, device number 67 [ 531.688005][T12694] loop2: detected capacity change from 0 to 7 [ 531.725759][T12694] Dev loop2: unable to read RDB block 7 [ 531.751104][T12694] loop2: unable to read partition table [ 531.761387][T12694] loop2: partition table beyond EOD, truncated [ 531.778934][T12694] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 532.031728][T12704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.041888][T12704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.049789][T12704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.059206][T12704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.069649][T12704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 532.077940][T12704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.094438][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.111000][ T5774] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 532.120509][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.135760][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.146412][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.154573][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 532.169597][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.303169][ T5774] usb 3-1: device descriptor read/64, error -71 [ 532.316215][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.437190][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.515320][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.601173][ T5774] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 532.651916][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.767935][ T5774] usb 3-1: device descriptor read/64, error -71 [ 532.843414][T12702] chnl_net:caif_netlink_parms(): no params data found [ 532.921435][ T5774] usb usb3-port1: attempt power cycle [ 533.330924][ T5774] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 533.358365][ T27] audit: type=1326 audit(1768259937.224:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.377484][ T5774] usb 3-1: device descriptor read/8, error -71 [ 533.482883][ T27] audit: type=1326 audit(1768259937.244:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.531717][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.558979][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.580500][ T27] audit: type=1326 audit(1768259937.264:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.603643][T12702] bridge_slave_0: entered allmulticast mode [ 533.622231][T12702] bridge_slave_0: entered promiscuous mode [ 533.656673][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.661630][ T5774] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 533.674561][ T27] audit: type=1326 audit(1768259937.264:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.697385][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 533.705218][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.715296][T12702] bridge_slave_1: entered allmulticast mode [ 533.724604][T12702] bridge_slave_1: entered promiscuous mode [ 533.731204][ T27] audit: type=1326 audit(1768259937.264:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.747328][ T5774] usb 3-1: device descriptor read/8, error -71 [ 533.772493][ T27] audit: type=1326 audit(1768259937.264:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.798994][ T27] audit: type=1326 audit(1768259937.264:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.840165][ T27] audit: type=1326 audit(1768259937.284:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.870010][ T27] audit: type=1326 audit(1768259937.284:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 533.912711][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.920575][ T5774] usb usb3-port1: unable to enumerate USB device [ 533.931505][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 533.940114][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.976467][ T27] audit: type=1326 audit(1768259937.284:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0898f749 code=0x7ffc0000 [ 534.013861][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 534.033236][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 534.061396][ T9] usb 1-1: Product: syz [ 534.067353][ T9] usb 1-1: Manufacturer: syz [ 534.073840][ T59] tipc: Disabling bearer [ 534.090458][ T59] tipc: Left network mode [ 534.105737][ T9] usb 1-1: SerialNumber: syz [ 534.135278][ T9] usb 1-1: config 0 descriptor?? [ 534.143943][T12702] team0: Port device team_slave_0 added [ 534.167408][T12702] team0: Port device team_slave_1 added [ 534.242878][ T5781] Bluetooth: hci0: command tx timeout [ 534.398057][ T9] usb 1-1: USB disconnect, device number 48 [ 534.653032][T12702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.660069][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.685997][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.714205][T12702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.794977][T12702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.823226][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.849202][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.874582][T12702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.102308][T12702] hsr_slave_0: entered promiscuous mode [ 535.131399][T12702] hsr_slave_1: entered promiscuous mode [ 535.151923][T12702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.169343][T12702] Cannot create hsr debugfs directory [ 536.177526][T12764] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.186762][T12764] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.206167][T12764] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.216771][T12764] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 536.226522][T12764] geneve2: entered promiscuous mode [ 536.236368][T12764] geneve2: entered allmulticast mode [ 536.301327][ T5775] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 536.321000][ T5781] Bluetooth: hci0: command tx timeout [ 536.369940][T12764] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 536.379469][T12764] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 536.391780][T12764] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 536.444161][T12764] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 536.480998][ T5775] usb 1-1: device descriptor read/64, error -71 [ 536.761957][ T5775] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 536.930944][ T5775] usb 1-1: device descriptor read/64, error -71 [ 536.946518][ T59] hsr_slave_0: left promiscuous mode [ 536.963948][ T59] hsr_slave_1: left promiscuous mode [ 537.056751][ T59] veth0_macvtap: left promiscuous mode [ 537.069387][ T5775] usb usb1-port1: attempt power cycle [ 537.076261][ T59] veth1_vlan: left promiscuous mode [ 537.316428][ T59] pim6reg (unregistering): left allmulticast mode [ 537.490906][ T5775] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 537.532604][ T5775] usb 1-1: device descriptor read/8, error -71 [ 537.540096][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2229'. [ 537.801452][ T5775] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 537.841933][ T5775] usb 1-1: device descriptor read/8, error -71 [ 537.857811][T11193] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 537.987918][ T5775] usb usb1-port1: unable to enumerate USB device [ 538.051176][T11193] usb 4-1: Using ep0 maxpacket: 16 [ 538.087799][T11193] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 538.108639][T11193] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 538.400887][ T5781] Bluetooth: hci0: command tx timeout [ 539.597397][ T59] bond0 (unregistering): Released all slaves [ 539.947793][T12812] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.957052][T12812] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.966071][T12812] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 539.997891][T12812] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.021794][T12812] geneve2: entered promiscuous mode [ 540.027432][T12812] geneve2: entered allmulticast mode [ 540.088371][T12812] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.098156][T12812] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.107868][T12812] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.117245][T12812] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.490964][ T5781] Bluetooth: hci0: command tx timeout [ 540.790575][T12702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.917911][T12702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.991454][T12702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 541.050577][ T59] IPVS: stop unused estimator thread 0... [ 541.058406][T12702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.108405][T11193] usb 4-1: string descriptor 0 read error: -71 [ 541.158265][T11193] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.197817][T11193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.246701][T11193] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 541.293269][T11193] usb 4-1: no configuration chosen from 1 choice [ 541.322490][T11193] usb 4-1: USB disconnect, device number 59 [ 541.588175][T12702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.689017][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.790868][T12814] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.798030][T12814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.814906][T12814] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.822121][T12814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.993787][T12702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.737236][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.824371][T12702] veth0_vlan: entered promiscuous mode [ 542.856140][T12702] veth1_vlan: entered promiscuous mode [ 543.007956][T12702] veth0_macvtap: entered promiscuous mode [ 543.064700][T12702] veth1_macvtap: entered promiscuous mode [ 543.124693][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.157060][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.186633][T12702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.215299][T12702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.264776][T12702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.264936][ T5770] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 543.297534][T12702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.315981][T12702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.354325][T12702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.372366][T12702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.402789][T12702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.551412][ T5770] usb 3-1: device descriptor read/64, error -71 [ 543.733419][T12831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.761457][T12831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.842603][ T8337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.861039][ T5770] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 543.862092][ T8337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.031492][ T5770] usb 3-1: device descriptor read/64, error -71 [ 544.166833][ T5770] usb usb3-port1: attempt power cycle [ 544.527339][T12898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2245'. [ 544.591340][ T5770] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 544.641849][ T5770] usb 3-1: device descriptor read/8, error -71 [ 544.990925][ T5770] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 545.057440][T12890] pim6reg: entered allmulticast mode [ 545.071240][ T5770] usb 3-1: device descriptor read/8, error -71 [ 545.201248][ T5770] usb usb3-port1: unable to enumerate USB device [ 545.378294][T12913] loop2: detected capacity change from 0 to 7 [ 545.391466][T12913] Dev loop2: unable to read RDB block 7 [ 545.397159][T12913] loop2: unable to read partition table [ 545.404160][T12913] loop2: partition table beyond EOD, truncated [ 545.410448][T12913] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 546.030199][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 546.857909][T12943] loop2: detected capacity change from 0 to 7 [ 546.900115][T12943] Dev loop2: unable to read RDB block 7 [ 546.920161][T12943] loop2: unable to read partition table [ 546.952685][T12943] loop2: partition table beyond EOD, truncated [ 546.986204][T12943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 548.154954][T12963] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.164129][T12963] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.173858][T12963] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.182811][T12963] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.313867][T12963] geneve2: entered promiscuous mode [ 548.330330][T12963] geneve2: entered allmulticast mode [ 548.346853][T12963] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 548.356933][T12963] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 548.370769][T12963] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 548.386028][T12963] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 548.474412][T12975] loop2: detected capacity change from 0 to 7 [ 548.515466][T12975] Dev loop2: unable to read RDB block 7 [ 548.550605][T12975] loop2: unable to read partition table [ 548.573687][T12975] loop2: partition table beyond EOD, truncated [ 548.641164][T12975] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 550.854066][T13015] loop2: detected capacity change from 0 to 7 [ 550.862693][T13015] Dev loop2: unable to read RDB block 7 [ 550.868717][T13015] loop2: unable to read partition table [ 550.875266][T13015] loop2: partition table beyond EOD, truncated [ 550.893054][T13015] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 553.991951][T13069] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.008026][T13069] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.017062][T13069] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.047984][T13069] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.191100][T13069] geneve2: entered promiscuous mode [ 554.196591][T13069] geneve2: entered allmulticast mode [ 554.221507][T13069] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.230567][T13069] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.239910][T13069] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.249717][T13069] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.954189][T12704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.972482][T12704] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.980324][T12704] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.990584][T12704] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.000575][ T2945] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.013694][T12704] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 557.021834][T12704] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.175500][ T2945] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.288154][ T2945] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.417756][ T2945] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.918683][T13103] chnl_net:caif_netlink_parms(): no params data found [ 557.987129][ T2945] tipc: Left network mode [ 558.394973][T13120] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.407201][T13120] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.420969][T13120] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.429970][T13120] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 558.439633][T13120] geneve2: entered promiscuous mode [ 558.445306][T13120] geneve2: entered allmulticast mode [ 558.453660][T13120] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.463827][T13120] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.473601][T13120] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.494650][T13120] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.653023][T13144] loop9: detected capacity change from 0 to 7 [ 558.675547][T13144] Dev loop9: unable to read RDB block 7 [ 558.681409][T13144] loop9: unable to read partition table [ 558.691708][T13144] loop9: partition table beyond EOD, truncated [ 558.709773][T13144] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 558.957483][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.979259][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.991166][T13103] bridge_slave_0: entered allmulticast mode [ 559.010933][T13103] bridge_slave_0: entered promiscuous mode [ 559.124658][ T5781] Bluetooth: hci3: command tx timeout [ 559.273398][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.294499][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.364800][T13103] bridge_slave_1: entered allmulticast mode [ 559.434607][T13103] bridge_slave_1: entered promiscuous mode [ 559.594989][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.688075][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.831290][T13103] team0: Port device team_slave_0 added [ 559.844665][T13103] team0: Port device team_slave_1 added [ 559.911096][ T28] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 560.207045][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.244692][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.283970][ T28] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 560.297846][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.337112][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.366788][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.390099][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.417799][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 560.451628][ T28] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.515339][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.526292][ T28] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 560.548805][ T28] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 560.572778][ T28] usb 4-1: Product: syz [ 560.628358][ T28] usb 4-1: Manufacturer: syz [ 560.757639][ T28] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 561.044725][ T28] usb 4-1: USB disconnect, device number 60 [ 561.120374][T13103] hsr_slave_0: entered promiscuous mode [ 561.159878][T13103] hsr_slave_1: entered promiscuous mode [ 561.175386][T13103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.198151][T13103] Cannot create hsr debugfs directory [ 561.203935][ T5781] Bluetooth: hci3: command tx timeout [ 561.488264][ T2945] hsr_slave_0: left promiscuous mode [ 561.495339][ T2945] hsr_slave_1: left promiscuous mode [ 561.601850][ T2945] veth1: left promiscuous mode [ 561.628816][ T2945] veth1_macvtap: left promiscuous mode [ 561.668971][ T2945] veth0_macvtap: left promiscuous mode [ 561.703797][T13193] loop9: detected capacity change from 0 to 7 [ 561.726734][T13193] Dev loop9: unable to read RDB block 7 [ 561.740975][T13193] loop9: unable to read partition table [ 561.758240][T13193] loop9: partition table beyond EOD, truncated [ 561.771743][T13193] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 562.182818][ T2945] pim6reg (unregistering): left allmulticast mode [ 562.214818][ T2945] bond3 (unregistering): (slave vlan0): Releasing active interface [ 562.731848][ T2945] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 562.749602][ T2945] bond3 (unregistering): Released all slaves [ 562.790079][ T2945] bond2 (unregistering): (slave veth3): Releasing backup interface [ 562.820611][ T2945] veth3 (unregistering): left promiscuous mode [ 563.204930][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.211366][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.285182][ T5781] Bluetooth: hci3: command tx timeout [ 563.335629][ T2945] bond2 (unregistering): Released all slaves [ 563.489977][T13222] loop2: detected capacity change from 0 to 7 [ 563.526569][T13222] Dev loop2: unable to read RDB block 7 [ 563.535420][T13222] loop2: unable to read partition table [ 563.561110][T13222] loop2: partition table beyond EOD, truncated [ 563.596806][T13222] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 563.635160][ T5139] Dev loop2: unable to read RDB block 7 [ 563.652878][ T5139] loop2: unable to read partition table [ 563.658786][ T5139] loop2: partition table beyond EOD, truncated [ 563.881953][ T2945] bond1 (unregistering): Released all slaves [ 564.983563][T13245] program syz.3.2336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.368895][ T5781] Bluetooth: hci3: command tx timeout [ 565.429717][T13245] cgroup: fork rejected by pids controller in /syz3 [ 565.731350][ T2945] bond0 (unregistering): Released all slaves [ 566.997837][ T2945] IPVS: stop unused estimator thread 0... [ 567.140908][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 567.458429][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.485122][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.548529][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.587473][T13521] loop2: detected capacity change from 0 to 7 [ 567.593979][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.624833][T13103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.632552][T13521] Dev loop2: unable to read RDB block 7 [ 567.646821][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.664550][T13521] loop2: unable to read partition table [ 567.676059][T13103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.680587][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.702861][T13521] loop2: partition table beyond EOD, truncated [ 567.710488][ T9] usb 2-1: Product: syz [ 567.719926][T13521] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.735220][ T9] usb 2-1: Manufacturer: syz [ 567.742159][T13103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.771943][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 567.813753][T13103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 567.993226][T11193] usb 2-1: USB disconnect, device number 73 [ 568.329391][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.378587][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.428248][T12814] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.436250][T12814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.496834][T12814] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.504073][T12814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.493623][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.697623][T13103] veth0_vlan: entered promiscuous mode [ 569.724704][T13103] veth1_vlan: entered promiscuous mode [ 569.868923][T13103] veth0_macvtap: entered promiscuous mode [ 569.919873][T13103] veth1_macvtap: entered promiscuous mode [ 569.975785][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.009766][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.052647][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.066088][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.102362][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.145071][T13573] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.215766][T13573] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.370993][T13573] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.403013][T13573] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.428714][T13573] geneve2: entered promiscuous mode [ 570.471476][T13573] geneve2: entered allmulticast mode [ 570.517725][T13573] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.651009][T13573] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.671464][T13573] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.690981][T13573] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 571.025912][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.080121][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.172035][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.188599][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.200004][T13592] loop2: detected capacity change from 0 to 7 [ 571.225841][T13592] Dev loop2: unable to read RDB block 7 [ 571.245731][T13592] loop2: unable to read partition table [ 571.253405][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.267328][T13592] loop2: partition table beyond EOD, truncated [ 571.290376][T13592] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 571.369826][T13103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.445503][T13103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.545068][T13103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.610281][T13103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.882609][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.890491][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.036360][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.063228][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.051132][ T5774] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 573.341421][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 573.363888][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.390300][ T5774] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.450337][ T5774] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 573.491246][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.518836][ T5774] usb 1-1: config 0 descriptor?? [ 573.581072][T11193] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 573.763394][T11193] usb 3-1: config 0 has no interfaces? [ 573.799325][T11193] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 573.821219][T11193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.836208][T11193] usb 3-1: Product: syz [ 573.848242][T11193] usb 3-1: Manufacturer: syz [ 573.865502][T11193] usb 3-1: SerialNumber: syz [ 573.894733][T11193] usb 3-1: config 0 descriptor?? [ 574.176525][ T5775] usb 3-1: USB disconnect, device number 76 [ 574.812006][T13656] loop9: detected capacity change from 0 to 7 [ 574.828905][T13656] Dev loop9: unable to read RDB block 7 [ 574.841248][T13656] loop9: unable to read partition table [ 574.854639][T13656] loop9: partition table beyond EOD, truncated [ 574.864638][T13656] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 575.372648][T13669] program syz.2.2361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.028919][ T5770] usb 1-1: USB disconnect, device number 53 [ 576.741213][T13702] loop2: detected capacity change from 0 to 7 [ 576.843585][T13702] Dev loop2: unable to read RDB block 7 [ 576.884895][T13702] loop2: unable to read partition table [ 576.954158][T13702] loop2: partition table beyond EOD, truncated [ 577.043474][T13702] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 577.151170][ T5770] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 577.384375][ T5770] usb 4-1: config 0 has no interfaces? [ 577.407628][ T5770] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 577.461705][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.485665][T13694] pim6reg: entered allmulticast mode [ 577.500634][ T5770] usb 4-1: Product: syz [ 577.516751][ T5770] usb 4-1: Manufacturer: syz [ 577.525195][ T5770] usb 4-1: SerialNumber: syz [ 577.542109][ T5770] usb 4-1: config 0 descriptor?? [ 577.806026][T13722] loop9: detected capacity change from 0 to 7 [ 577.835008][ T7723] Dev loop9: unable to read RDB block 7 [ 577.846734][ T7723] loop9: unable to read partition table [ 577.859658][ T9] usb 4-1: USB disconnect, device number 61 [ 577.884992][ T7723] loop9: partition table beyond EOD, truncated [ 577.927541][T13722] Dev loop9: unable to read RDB block 7 [ 577.947600][T13722] loop9: unable to read partition table [ 577.955910][T13722] loop9: partition table beyond EOD, truncated [ 577.963469][T13722] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 579.397984][T13754] loop2: detected capacity change from 0 to 7 [ 579.426830][T13754] Dev loop2: unable to read RDB block 7 [ 579.493764][T13754] loop2: unable to read partition table [ 579.511944][T13754] loop2: partition table beyond EOD, truncated [ 579.528482][T13754] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.462520][T13765] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.481024][T13765] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.514059][T13765] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.545640][T13768] loop9: detected capacity change from 0 to 7 [ 580.555591][T13768] Dev loop9: unable to read RDB block 7 [ 580.561425][T13768] loop9: unable to read partition table [ 580.569464][T13765] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.579437][T13765] geneve2: entered promiscuous mode [ 580.586230][T13768] loop9: partition table beyond EOD, truncated [ 580.597220][T13765] geneve2: entered allmulticast mode [ 580.604308][T13768] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.731546][T13765] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.789955][T13765] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.838739][T13765] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.850840][T13765] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 581.190960][ T5775] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 581.391785][ T5775] usb 3-1: config 0 has no interfaces? [ 581.400209][ T5775] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 581.420440][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.446609][ T5775] usb 3-1: Product: syz [ 581.469292][ T5775] usb 3-1: Manufacturer: syz [ 581.479457][ T5775] usb 3-1: SerialNumber: syz [ 581.506252][ T5775] usb 3-1: config 0 descriptor?? [ 581.795178][ T5775] usb 3-1: USB disconnect, device number 77 [ 581.927594][T13787] loop2: detected capacity change from 0 to 7 [ 581.941441][ T7723] Dev loop2: unable to read RDB block 7 [ 581.950534][ T7723] loop2: unable to read partition table [ 581.960222][ T7723] loop2: partition table beyond EOD, truncated [ 581.988070][T13787] Dev loop2: unable to read RDB block 7 [ 582.006350][T13787] loop2: unable to read partition table [ 582.019536][T13787] loop2: partition table beyond EOD, truncated [ 582.030964][T13787] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 582.053903][ T5139] Dev loop2: unable to read RDB block 7 [ 582.059507][ T5139] loop2: unable to read partition table [ 582.067138][ T5139] loop2: partition table beyond EOD, truncated [ 582.246896][T13797] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20000 [ 582.395031][T13801] loop9: detected capacity change from 0 to 7 [ 582.443264][T13801] Dev loop9: unable to read RDB block 7 [ 582.473877][T13801] loop9: AHDI p1 p2 [ 582.477825][T13801] loop9: partition table partially beyond EOD, truncated [ 582.499543][T13801] loop9: p1 size 4177526783 extends beyond EOD, truncated [ 582.694423][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 583.030957][ T5770] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 583.060944][ T5774] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 583.240881][ T5774] usb 1-1: Using ep0 maxpacket: 8 [ 583.259246][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.285707][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.325053][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.368387][ T5774] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 583.401258][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.428243][ T5774] usb 1-1: config 0 descriptor?? [ 583.449428][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 583.565038][ T5770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.584330][ T5770] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.593443][ T5770] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 583.619493][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.674373][ T5770] usb 3-1: config 0 descriptor?? [ 583.880680][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.905016][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.925333][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.936702][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.953164][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.970580][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.979740][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.987744][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 583.996899][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 584.004994][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 584.015881][ T5774] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 584.041725][ T5774] hid-rmi 0003:06CB:81A7.001A: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 584.077318][ T5774] usb 1-1: USB disconnect, device number 54 [ 584.138859][T13816] fido_id[13816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 584.160223][T13815] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 584.169595][T13815] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 584.184595][T13815] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 584.194342][T13815] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 584.203624][T13815] geneve2: entered promiscuous mode [ 584.224786][T13815] geneve2: entered allmulticast mode [ 584.571064][T13815] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 584.757718][T13815] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 584.781921][T13815] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 584.799155][T13815] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.144727][T13825] loop2: detected capacity change from 0 to 7 [ 585.183647][T13825] Dev loop2: unable to read RDB block 7 [ 585.264136][T13825] loop2: unable to read partition table [ 585.358331][T13825] loop2: partition table beyond EOD, truncated [ 585.418080][T13825] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 585.679791][T13834] loop9: detected capacity change from 0 to 7 [ 585.692648][ T7723] Dev loop9: unable to read RDB block 7 [ 585.705798][ T7723] loop9: AHDI p1 p2 [ 585.716851][ T7723] loop9: partition table partially beyond EOD, truncated [ 585.738559][ T7723] loop9: p1 size 4177526783 extends beyond EOD, truncated [ 585.792216][T13834] Dev loop9: unable to read RDB block 7 [ 585.800931][T13834] loop9: AHDI p1 p2 [ 585.817644][T13834] loop9: partition table partially beyond EOD, truncated [ 585.831355][T13834] loop9: p1 size 4177526783 extends beyond EOD, truncated [ 585.840991][ T5770] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 586.043322][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 586.103160][ T5770] usb 2-1: config 0 has no interfaces? [ 586.112186][ T5770] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 586.150092][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.194484][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 586.213000][ T5770] usb 2-1: Product: syz [ 586.220863][ T5770] usb 2-1: Manufacturer: syz [ 586.229058][ T5770] usb 2-1: SerialNumber: syz [ 586.252521][ T5770] usb 2-1: config 0 descriptor?? [ 586.344958][T11193] usb 3-1: USB disconnect, device number 78 [ 586.513059][ T786] usb 2-1: USB disconnect, device number 74 [ 587.857380][T13862] loop2: detected capacity change from 0 to 7 [ 587.875539][T13862] Dev loop2: unable to read RDB block 7 [ 587.883965][T13862] loop2: unable to read partition table [ 587.889787][T13862] loop2: partition table beyond EOD, truncated [ 587.906037][T13862] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.200973][ T5775] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 589.273495][T13890] loop2: detected capacity change from 0 to 7 [ 589.300939][T13890] Dev loop2: unable to read RDB block 7 [ 589.309258][T13890] loop2: unable to read partition table [ 589.316568][T13890] loop2: partition table beyond EOD, truncated [ 589.323400][T13890] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.402824][ T5775] usb 4-1: config 0 has no interfaces? [ 589.410574][ T5775] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 589.425837][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.434068][ T5775] usb 4-1: Product: syz [ 589.438334][ T5775] usb 4-1: Manufacturer: syz [ 589.451215][ T5775] usb 4-1: SerialNumber: syz [ 589.512955][ T5775] usb 4-1: config 0 descriptor?? [ 589.770910][ T5770] usb 4-1: USB disconnect, device number 62 [ 591.738552][T13927] loop2: detected capacity change from 0 to 7 [ 591.774747][T13927] Dev loop2: unable to read RDB block 7 [ 591.780948][T13927] loop2: unable to read partition table [ 591.797771][T13927] loop2: partition table beyond EOD, truncated [ 591.835496][T13927] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 592.274650][T13942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2432'. [ 592.770970][ T786] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 593.022357][ T786] usb 2-1: config 0 has no interfaces? [ 593.068737][ T786] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 593.150910][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.202275][ T786] usb 2-1: Product: syz [ 593.224760][ T786] usb 2-1: Manufacturer: syz [ 593.284043][ T786] usb 2-1: SerialNumber: syz [ 593.331309][ T786] usb 2-1: config 0 descriptor?? [ 593.616235][ T9] usb 2-1: USB disconnect, device number 75 [ 594.808023][T13970] loop2: detected capacity change from 0 to 7 [ 594.825470][T13970] Dev loop2: unable to read RDB block 7 [ 594.862883][T13970] loop2: unable to read partition table [ 594.889537][T13970] loop2: partition table beyond EOD, truncated [ 594.919821][T13970] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 595.750956][ T5775] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 595.988373][T12704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.008988][T12704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.021391][T12704] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.032651][ T5775] usb 1-1: config 0 has no interfaces? [ 596.041040][T12704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.055158][T12704] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 596.065200][T12704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.072759][ T5775] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 596.082145][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.090419][ T5775] usb 1-1: Product: syz [ 596.095331][ T5775] usb 1-1: Manufacturer: syz [ 596.100399][ T5775] usb 1-1: SerialNumber: syz [ 596.167414][ T5775] usb 1-1: config 0 descriptor?? [ 596.546225][ T5774] usb 1-1: USB disconnect, device number 55 [ 597.059243][ T1124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.223349][ T1124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.247972][T13986] chnl_net:caif_netlink_parms(): no params data found [ 597.366010][ T1124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.521020][ T1124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.869261][T13986] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.884008][T13986] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.899940][T13986] bridge_slave_0: entered allmulticast mode [ 597.927589][T13986] bridge_slave_0: entered promiscuous mode [ 597.943592][T13986] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.964585][T13986] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.985841][T13986] bridge_slave_1: entered allmulticast mode [ 598.009254][T13986] bridge_slave_1: entered promiscuous mode [ 598.096676][T13986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.163113][T13986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.241513][ T5781] Bluetooth: hci4: command tx timeout [ 598.417752][T13986] team0: Port device team_slave_0 added [ 598.523275][ T1124] tipc: Left network mode [ 598.539412][T13986] team0: Port device team_slave_1 added [ 598.792301][T14015] loop2: detected capacity change from 0 to 7 [ 598.821968][T13986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.829002][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.859588][T14015] Dev loop2: unable to read RDB block 7 [ 598.887455][T14015] loop2: unable to read partition table [ 598.935881][T14015] loop2: partition table beyond EOD, truncated [ 598.979110][T14015] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.995789][T13986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.189770][T13986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.208232][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.250410][T13986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.534954][T13986] hsr_slave_0: entered promiscuous mode [ 599.576700][T13986] hsr_slave_1: entered promiscuous mode [ 599.607145][T13986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.641235][T13986] Cannot create hsr debugfs directory [ 600.322708][ T5781] Bluetooth: hci4: command tx timeout [ 600.770532][T14057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2459'. [ 601.263652][ T1124] hsr_slave_0: left promiscuous mode [ 601.301500][ T1124] hsr_slave_1: left promiscuous mode [ 601.425537][ T1124] veth1_macvtap: left promiscuous mode [ 601.438931][ T1124] veth0_macvtap: left promiscuous mode [ 601.471501][ T1124] veth1_vlan: left promiscuous mode [ 601.507276][ T1124] veth0_vlan: left promiscuous mode [ 602.047056][ T1124] pim6reg (unregistering): left allmulticast mode [ 602.144251][T14081] loop2: detected capacity change from 0 to 7 [ 602.214230][T14081] Dev loop2: unable to read RDB block 7 [ 602.265526][T14081] loop2: unable to read partition table [ 602.311207][T14081] loop2: partition table beyond EOD, truncated [ 602.325310][T14081] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 602.364504][ T5139] Dev loop2: unable to read RDB block 7 [ 602.378689][ T5139] loop2: unable to read partition table [ 602.394575][ T5139] loop2: partition table beyond EOD, [ 602.401149][ T5781] Bluetooth: hci4: command tx timeout [ 602.420226][ T5139] truncated [ 602.966746][T14089] binder_alloc: 14088: binder_alloc_buf, no vma [ 604.486738][ T5781] Bluetooth: hci4: command tx timeout [ 605.304301][ T1124] bond0 (unregistering): Released all slaves [ 605.961582][T14112] loop2: detected capacity change from 0 to 7 [ 605.974870][T13986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.026507][T14112] Dev loop2: unable to read RDB block 7 [ 606.040928][T14112] loop2: unable to read partition table [ 606.043384][T13986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.058797][T14112] loop2: partition table beyond EOD, truncated [ 606.081425][T14112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.146880][ T5139] Dev loop2: unable to read RDB block 7 [ 606.166145][ T5139] loop2: unable to read partition table [ 606.201429][ T5139] loop2: partition table beyond EOD, truncated [ 606.393647][T14121] loop9: detected capacity change from 0 to 7 [ 606.411972][T13986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 606.444353][T13986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.452811][T14121] Dev loop9: unable to read RDB block 7 [ 606.458452][T14121] loop9: unable to read partition table [ 606.490554][T14121] loop9: partition table beyond EOD, truncated [ 606.599826][ T1124] IPVS: stop unused estimator thread 0... [ 606.611507][T14121] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 607.257198][T13986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.343833][T13986] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.428160][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.435341][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.453352][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.460555][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.251954][T13986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.441860][T13986] veth0_vlan: entered promiscuous mode [ 608.486645][T13986] veth1_vlan: entered promiscuous mode [ 608.574931][T13986] veth0_macvtap: entered promiscuous mode [ 608.609185][T13986] veth1_macvtap: entered promiscuous mode [ 608.803903][T13986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.822197][T13986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.840810][T13986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.853782][T13986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.905580][T13986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.934344][T13986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.967394][T13986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.993298][T14185] loop2: detected capacity change from 0 to 7 [ 609.019805][T14185] Dev loop2: unable to read RDB block 7 [ 609.039816][T14185] loop2: unable to read partition table [ 609.068538][T14185] loop2: partition table beyond EOD, truncated [ 609.088579][T13986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.116335][T14185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 609.137437][T13986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.155003][T13986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.304170][T13986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.374254][T13986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.406797][T13986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.428632][T13986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.458187][T13986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.497724][T13986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.530953][T13986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.560861][T13986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.930687][T12831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.950978][T12831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.088343][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.160557][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.961729][ T786] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 611.214468][ T786] usb 4-1: config 0 has no interfaces? [ 611.243242][ T786] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 611.314303][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.350589][ T786] usb 4-1: config 0 descriptor?? [ 611.668087][ T786] usb 4-1: USB disconnect, device number 63 [ 611.892887][T14223] loop2: detected capacity change from 0 to 7 [ 611.942314][ T7723] Dev loop2: unable to read RDB block 7 [ 611.963075][ T7723] loop2: unable to read partition table [ 611.987018][ T7723] loop2: partition table beyond EOD, truncated [ 612.003041][T14223] Dev loop2: unable to read RDB block 7 [ 612.020971][T14223] loop2: unable to read partition table [ 612.026857][T14223] loop2: partition table beyond EOD, truncated [ 612.056768][T14223] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 612.896219][T14242] tipc: Started in network mode [ 612.915176][T14242] tipc: Node identity 961ac19beb6a, cluster identity 4711 [ 612.922953][T14242] tipc: Enabled bearer , priority 0 [ 612.931648][T14242] syzkaller0: entered promiscuous mode [ 612.937261][T14242] syzkaller0: entered allmulticast mode [ 612.988506][T14242] tipc: Resetting bearer [ 612.998279][T14241] tipc: Resetting bearer [ 613.073467][T14241] tipc: Disabling bearer [ 613.521795][ T8] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 613.726169][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.780945][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.820191][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.860877][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.901002][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.923288][ T8] usb 1-1: config 0 descriptor?? [ 614.157235][T14253] loop2: detected capacity change from 0 to 7 [ 614.181371][T14253] Dev loop2: unable to read RDB block 7 [ 614.190078][T14253] loop2: unable to read partition table [ 614.204114][T14253] loop2: partition table beyond EOD, truncated [ 614.220577][T14253] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 614.409046][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.428341][T14260] Set syz0 is full, maxelem 0 reached [ 614.437779][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.457242][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.480869][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.509442][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.538634][T14260] use of bytesused == 0 is deprecated and will be removed in the future, [ 614.544023][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.566369][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.584230][T14260] use the actual size instead. [ 614.605675][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.620024][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 614.645765][ T8] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 614.679199][ T8] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 614.709772][ T8] usb 1-1: USB disconnect, device number 56 [ 614.875679][T14268] fido_id[14268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 615.049696][T14271] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.064428][T14271] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.081004][T14271] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.106138][T14271] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.117841][T14271] geneve2: entered promiscuous mode [ 615.126068][T14271] geneve2: entered allmulticast mode [ 615.185435][T14271] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.194575][T14271] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.206115][T14271] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.221564][T14271] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 616.766958][T14291] loop2: detected capacity change from 0 to 7 [ 616.786494][T14291] Dev loop2: unable to read RDB block 7 [ 616.808007][T14291] loop2: unable to read partition table [ 616.814626][T14291] loop2: partition table beyond EOD, truncated [ 616.826920][T14291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.497518][T14316] pim6reg: entered allmulticast mode [ 617.676842][T14312] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.687977][T14312] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.697794][T14312] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.807516][T14312] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.826841][T14312] geneve2: entered promiscuous mode [ 617.832474][T14312] geneve2: entered allmulticast mode [ 617.840672][T14312] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 617.850216][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 617.850227][ T27] audit: type=1326 audit(1768260021.694:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 617.914702][T14312] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 617.929928][T14312] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 617.947781][ T27] audit: type=1326 audit(1768260021.694:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.023850][ T27] audit: type=1326 audit(1768260021.694:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.049786][ T27] audit: type=1326 audit(1768260021.844:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.073068][T14312] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.166444][ T27] audit: type=1326 audit(1768260021.844:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.193712][ T27] audit: type=1326 audit(1768260021.844:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d5d9c2005 code=0x7ffc0000 [ 618.252806][ T27] audit: type=1326 audit(1768260021.984:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.325591][ T27] audit: type=1326 audit(1768260021.994:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.400215][ T27] audit: type=1326 audit(1768260021.994:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 618.430987][ T966] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 618.557119][ T27] audit: type=1326 audit(1768260021.994:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9d5d98f749 code=0x7ffc0000 [ 619.867859][T14335] loop2: detected capacity change from 0 to 7 [ 619.885501][T14335] Dev loop2: unable to read RDB block 7 [ 619.897498][T14335] loop2: unable to read partition table [ 619.910656][T14335] loop2: partition table beyond EOD, truncated [ 619.935244][T14335] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 620.139332][T14340] binder: BINDER_SET_CONTEXT_MGR already set [ 620.159409][T14340] binder: 14339:14340 ioctl 4018620d 200000000040 returned -16 [ 620.956070][T14355] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.983766][T14355] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 620.999254][T14355] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.014836][T14355] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.026118][T14355] geneve2: entered promiscuous mode [ 621.033887][T14355] geneve2: entered allmulticast mode [ 621.113618][T14355] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.159537][T14355] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.174973][T14355] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.185379][T14355] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.759092][T14367] loop2: detected capacity change from 0 to 7 [ 621.777173][ T7723] Dev loop2: unable to read RDB block 7 [ 621.792533][ T7723] loop2: unable to read partition table [ 621.818438][ T7723] loop2: partition table beyond EOD, truncated [ 621.837617][T14367] Dev loop2: unable to read RDB block 7 [ 621.861251][T14367] loop2: unable to read partition table [ 621.892038][T14367] loop2: partition table beyond EOD, truncated [ 621.901371][T14367] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 622.049410][T14371] binder_alloc: 14370: binder_alloc_buf, no vma [ 622.083532][T14371] binder_alloc: 14370: binder_alloc_buf, no vma [ 622.435722][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'. [ 622.466097][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'. [ 622.788569][T14389] loop2: detected capacity change from 0 to 7 [ 622.796931][T14389] Dev loop2: unable to read RDB block 7 [ 622.803035][T14389] loop2: unable to read partition table [ 622.809024][T14389] loop2: partition table beyond EOD, truncated [ 622.815769][T14389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 623.020908][ T5775] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 623.059130][T14399] binder_alloc: 14398: binder_alloc_buf, no vma [ 623.071864][T14399] binder_alloc: 14398: binder_alloc_buf, no vma [ 623.161199][T14400] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 623.170325][T14400] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 623.183882][T14400] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 623.206659][T14400] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 623.233429][ T5775] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.247274][T14400] geneve2: entered promiscuous mode [ 623.252888][ T5775] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 623.270961][T14400] geneve2: entered allmulticast mode [ 623.276481][ T5775] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 623.297389][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.317610][ T5775] usb 1-1: config 0 descriptor?? [ 623.329592][ T5775] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 623.340307][ T5775] dvb-usb: bulk message failed: -22 (3/0) [ 623.356182][T14400] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.368626][ T5775] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 623.386849][T14400] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.401065][T14400] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.411477][T14400] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.421504][ T5775] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 623.428916][ T5775] usb 1-1: media controller created [ 623.436711][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.476038][ T5775] dvb-usb: bulk message failed: -22 (6/0) [ 623.492109][ T5775] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 623.531191][ T5775] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 623.543506][T14386] dvb-usb: bulk message failed: -22 (2/0) [ 623.583064][ T5775] dvb-usb: schedule remote query interval to 150 msecs. [ 623.602786][ T5775] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 623.639433][ T5775] usb 1-1: USB disconnect, device number 57 [ 623.763890][ T5775] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 624.320546][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'. [ 624.400354][T14417] loop2: detected capacity change from 0 to 7 [ 624.414020][T14417] Dev loop2: unable to read RDB block 7 [ 624.423039][T14417] loop2: unable to read partition table [ 624.429223][T14417] loop2: partition table beyond EOD, truncated [ 624.444093][T14417] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.645912][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.652370][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.590961][ T966] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 625.785962][ T966] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 625.802894][ T966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 625.820905][ T966] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.844700][ T966] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.870968][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.879178][ T966] usb 3-1: Product: syz [ 625.883474][ T966] usb 3-1: Manufacturer: syz [ 625.888107][ T966] usb 3-1: SerialNumber: syz [ 626.190845][T10924] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 626.248169][ T966] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 626.274987][ T966] cdc_mbim 3-1:1.0: bind() failure [ 626.306742][ T966] usb 3-1: USB disconnect, device number 80 [ 626.375199][T10924] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 626.391113][T10924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.399214][T10924] usb 2-1: Product: syz [ 626.404212][T10924] usb 2-1: Manufacturer: syz [ 626.408819][T10924] usb 2-1: SerialNumber: syz [ 626.759996][T14446] loop2: detected capacity change from 0 to 7 [ 626.767598][T14446] Dev loop2: unable to read RDB block 7 [ 626.773569][T14446] loop2: unable to read partition table [ 626.779482][T14446] loop2: partition table beyond EOD, truncated [ 626.790835][T14446] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 626.839477][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 628.124484][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 628.343751][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 628.370274][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 628.401867][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 628.419460][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 628.439134][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 628.464388][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 628.493201][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 628.515621][T14475] loop2: detected capacity change from 0 to 7 [ 628.535358][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 628.558866][ T7707] Dev loop2: unable to read RDB block 7 [ 628.576991][ T7707] loop2: unable to read partition table [ 628.596125][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 628.610701][ T7707] loop2: partition table beyond EOD, truncated [ 628.624311][T10924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 628.636367][T14475] Dev loop2: unable to read RDB block 7 [ 628.657806][T14475] loop2: unable to read partition table [ 628.665321][T10924] lan78xx: probe of 2-1:1.0 failed with error -71 [ 628.683693][T10924] usb 2-1: USB disconnect, device number 76 [ 628.700612][T14475] loop2: partition table beyond EOD, truncated [ 628.736421][T14475] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 629.628819][T14490] loop9: detected capacity change from 0 to 7 [ 629.661102][T14490] Dev loop9: unable to read RDB block 7 [ 629.697419][T14490] loop9: AHDI p1 p2 [ 629.716045][T14490] loop9: partition table partially beyond EOD, truncated [ 629.737984][T14490] loop9: p1 size 4177526783 extends beyond EOD, truncated [ 629.924460][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 630.129307][T14499] netlink: 'syz.1.2580': attribute type 7 has an invalid length. [ 630.146318][T14499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2580'. [ 630.162906][T14501] binder: BINDER_SET_CONTEXT_MGR already set [ 630.169723][T14501] binder: 14500:14501 ioctl 4018620d 200000000040 returned -16 [ 630.310724][T14503] loop2: detected capacity change from 0 to 7 [ 630.330968][ T7723] Dev loop2: unable to read RDB block 7 [ 630.336596][ T7723] loop2: unable to read partition table [ 630.352398][ T7723] loop2: partition table beyond EOD, truncated [ 630.369384][T14503] Dev loop2: unable to read RDB block 7 [ 630.385698][T14503] loop2: unable to read partition table [ 630.397943][T14503] loop2: partition table beyond EOD, truncated [ 630.412001][T14503] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 630.471533][ T5139] Dev loop2: unable to read RDB block 7 [ 630.478412][ T5139] loop2: unable to read partition table [ 630.484698][ T5139] loop2: partition table beyond EOD, truncated [ 630.774823][T14518] loop9: detected capacity change from 0 to 7 [ 630.784168][T14518] Dev loop9: unable to read RDB block 7 [ 630.789778][T14518] loop9: AHDI p1 p2 [ 630.795298][T14518] loop9: partition table partially beyond EOD, truncated [ 630.804102][T14518] loop9: p1 size 4177526783 extends beyond EOD, truncated [ 630.871809][ T5775] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 630.887854][T10924] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 630.896039][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 630.990809][T14523] binder: BINDER_SET_CONTEXT_MGR already set [ 630.996936][T14523] binder: 14522:14523 ioctl 4018620d 200000000040 returned -16 [ 631.096562][ T5775] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 631.113457][T10924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.115946][ T5775] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 631.148078][T10924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.170890][ T5775] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 631.187672][T10924] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.203859][ T5775] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 631.211293][T10924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.234236][ T5775] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 631.250886][T10924] usb 4-1: SerialNumber: syz [ 631.270659][ T5775] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 631.296094][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 631.312990][ T5775] usb 1-1: Product: syz [ 631.317224][ T5775] usb 1-1: Manufacturer: syz [ 631.346919][ T5775] cdc_wdm 1-1:1.0: skipping garbage [ 631.361138][ T5775] cdc_wdm 1-1:1.0: skipping garbage [ 631.397647][ T5775] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 631.410801][ T5775] cdc_wdm 1-1:1.0: Unknown control protocol [ 631.658719][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 631.664849][ T8] usb 1-1: USB disconnect, device number 58 [ 631.665980][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 631.677413][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 632.006503][T12704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.017330][T12704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.028381][T12704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.036714][T12704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.046763][T12704] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.054549][T12704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.061433][T10924] usb 4-1: 0:2 : does not exist [ 632.129423][T10924] usb 4-1: USB disconnect, device number 64 [ 632.271026][ T7723] udevd[7723]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.374161][T12831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.512326][T14540] loop2: detected capacity change from 0 to 7 [ 632.535810][T12831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.542451][T14540] Dev loop2: unable to read RDB block 7 [ 632.593255][T14540] loop2: unable to read partition table [ 632.626667][T14540] loop2: partition table beyond EOD, truncated [ 632.640574][T14540] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 632.760189][T12831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.032807][T12831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.364405][T14536] chnl_net:caif_netlink_parms(): no params data found [ 633.385583][T12831] tipc: Disabling bearer [ 633.406453][T12831] tipc: Left network mode [ 634.060914][ T5774] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 634.154978][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.164466][ T5781] Bluetooth: hci1: command tx timeout [ 634.204780][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.213285][T14536] bridge_slave_0: entered allmulticast mode [ 634.220133][T14536] bridge_slave_0: entered promiscuous mode [ 634.229507][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.239320][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.247442][T14536] bridge_slave_1: entered allmulticast mode [ 634.255107][T14536] bridge_slave_1: entered promiscuous mode [ 634.280889][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 634.288258][ T5774] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 634.297582][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.318202][ T5774] usb 2-1: config 0 descriptor?? [ 634.324909][T14577] loop9: detected capacity change from 0 to 7 [ 634.335305][T14577] Dev loop9: unable to read RDB block 7 [ 634.351183][T14577] loop9: AHDI p1 p2 [ 634.398059][T14577] loop9: partition table partially beyond EOD, truncated [ 634.430337][T14577] loop9: p1 size 4177526783 extends beyond EOD, truncated [ 634.675844][ T7723] udevd[7723]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 634.798040][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.817993][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.011505][T11193] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 635.174921][T14536] team0: Port device team_slave_0 added [ 635.273490][T11193] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 635.282074][T11193] usb 4-1: config 0 has no interface number 0 [ 635.288758][T11193] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 635.300379][T11193] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 635.331773][T11193] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 635.357021][T11193] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 635.372938][T14536] team0: Port device team_slave_1 added [ 635.433543][T11193] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 635.525949][T11193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.543136][T11193] usb 4-1: config 0 descriptor?? [ 635.551411][T14582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.558869][T14582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.569161][T11193] ldusb 4-1:0.55: Interrupt in endpoint not found [ 635.800092][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.817213][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.861687][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.891692][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.900612][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.950281][T11193] usb 4-1: USB disconnect, device number 65 [ 636.001292][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.241304][T12704] Bluetooth: hci1: command tx timeout [ 636.304554][T14536] hsr_slave_0: entered promiscuous mode [ 636.313667][T14536] hsr_slave_1: entered promiscuous mode [ 636.321810][T14536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.329515][T14536] Cannot create hsr debugfs directory [ 636.383321][T12831] hsr_slave_0: left promiscuous mode [ 636.397098][T12831] hsr_slave_1: left promiscuous mode [ 636.408555][T12831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.417706][T12831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.436823][T12831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.445408][T12831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.471476][T12831] bridge_slave_1: left allmulticast mode [ 636.494422][T12831] bridge_slave_1: left promiscuous mode [ 636.548011][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.572973][T12831] bridge_slave_0: left allmulticast mode [ 636.611819][T12831] bridge_slave_0: left promiscuous mode [ 636.631402][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.742317][T14589] loop2: detected capacity change from 0 to 7 [ 636.777339][T14589] Dev loop2: unable to read RDB block 7 [ 636.783254][T14589] loop2: unable to read partition table [ 636.789171][T14589] loop2: partition table beyond EOD, truncated [ 636.796283][T12831] veth1_macvtap: left promiscuous mode [ 636.802649][T14589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.841291][T12831] veth0_macvtap: left promiscuous mode [ 636.847103][T12831] veth1_vlan: left promiscuous mode [ 636.867636][T12831] veth0_vlan: left promiscuous mode [ 636.868556][T14591] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2602'. [ 636.919376][ T5139] Dev loop2: unable to read RDB block 7 [ 636.927234][ T5139] loop2: unable to read partition table [ 636.943597][ T5139] loop2: partition table beyond EOD, truncated [ 637.219956][ T5774] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 637.247073][T14594] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 637.283106][T12704] Bluetooth: hci0: command 0x0406 tx timeout [ 637.345677][ T5774] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 637.398408][ T5774] dib0700: firmware download failed at 7 with -22 [ 637.482730][ T5774] usb 2-1: USB disconnect, device number 77 [ 637.549943][T12831] pim6reg (unregistering): left allmulticast mode [ 637.645772][T12831] bond1 (unregistering): (slave vlan3): Releasing active interface [ 637.689922][T12831] veth0_to_bond (unregistering): entered promiscuous mode [ 638.053997][T12831] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 638.073865][T12831] veth0_to_bond (unregistering): left promiscuous mode [ 638.116649][T12831] bond1 (unregistering): Released all slaves [ 638.330845][ T5781] Bluetooth: hci1: command tx timeout [ 638.731793][T11193] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 638.947022][T11193] usb 1-1: config 0 has no interfaces? [ 638.981267][T11193] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 638.990371][T11193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.999513][T12831] team0 (unregistering): Port device team_slave_1 removed [ 639.007573][T11193] usb 1-1: Product: syz [ 639.026377][T11193] usb 1-1: Manufacturer: syz [ 639.031092][T11193] usb 1-1: SerialNumber: syz [ 639.045924][T11193] usb 1-1: config 0 descriptor?? [ 639.086704][T12831] team0 (unregistering): Port device team_slave_0 removed [ 639.126912][T12831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.174213][T12831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.621403][T12831] bond0 (unregistering): Released all slaves [ 639.704190][ T786] usb 1-1: USB disconnect, device number 59 [ 640.367939][T12831] IPVS: stop unused estimator thread 0... [ 640.400872][ T5781] Bluetooth: hci1: command tx timeout [ 641.531077][T14634] loop2: detected capacity change from 0 to 7 [ 641.553803][T14634] Dev loop2: unable to read RDB block 7 [ 641.571004][T14634] loop2: unable to read partition table [ 641.577275][T14634] loop2: partition table beyond EOD, truncated [ 641.594790][T14634] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.634997][T14636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2611'. [ 641.858831][T14536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.008077][T14536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.093857][T14536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.156254][T14536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 642.301191][ T5774] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 642.484381][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.504720][ T5774] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 642.541013][ T5774] usb 1-1: config 0 has no interface number 0 [ 642.556828][ T5774] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 642.571824][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.584825][ T5774] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 642.621289][ T5774] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 642.633463][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.640665][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.657098][ T5774] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 642.690437][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.697710][T12831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.712302][ T5774] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 642.773197][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.831111][ T5774] usb 1-1: config 0 descriptor?? [ 642.871946][T14640] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.890508][T14640] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.956526][ T5774] ldusb 1-1:0.55: Interrupt in endpoint not found [ 643.036038][T14657] xt_socket: unknown flags 0xc [ 643.222537][ T5775] usb 1-1: USB disconnect, device number 60 [ 643.642258][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.040397][T14536] veth0_vlan: entered promiscuous mode [ 644.123569][T14536] veth1_vlan: entered promiscuous mode [ 644.172595][T14688] xt_TCPMSS: Only works on TCP SYN packets [ 644.256905][T14536] veth0_macvtap: entered promiscuous mode [ 644.300348][T14536] veth1_macvtap: entered promiscuous mode [ 644.557533][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.600045][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.624430][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.646554][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.682495][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.719233][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.762929][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.981375][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.087686][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.141205][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.188911][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.212838][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.264476][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.299474][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.396994][T14536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.423579][T14536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.484204][T14536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.520912][T14536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.792092][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.810984][ T786] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 645.831618][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.951455][ T8346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.959993][ T8346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.032924][ T786] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 646.032954][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 646.032988][ T786] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.036282][ T786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.036303][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.036317][ T786] usb 4-1: Product: syz [ 646.036327][ T786] usb 4-1: Manufacturer: syz [ 646.036338][ T786] usb 4-1: SerialNumber: syz [ 646.272666][T14720] loop2: detected capacity change from 0 to 7 [ 646.273948][ T786] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 646.273998][ T786] cdc_mbim 4-1:1.0: bind() failure [ 646.286941][T14720] Dev loop2: unable to read RDB block 7 [ 646.286986][T14720] loop2: unable to read partition table [ 646.287222][ T786] usb 4-1: USB disconnect, device number 66 [ 646.287257][T14720] loop2: partition table beyond EOD, truncated [ 646.287290][T14720] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 646.292555][T14720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2619'. [ 646.504541][T14724] tipc: Started in network mode [ 646.516916][T14724] tipc: Node identity 168cb38cf082, cluster identity 4711 [ 646.529580][T14724] tipc: Enabled bearer , priority 0 [ 646.543354][T14724] syzkaller0: entered promiscuous mode [ 646.549110][T14724] syzkaller0: entered allmulticast mode [ 646.613828][T14724] tipc: Resetting bearer [ 646.628250][T14721] tipc: Resetting bearer [ 646.731575][T14721] tipc: Disabling bearer [ 647.379664][T14734] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.390576][T14734] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.435237][T14734] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.542711][T14734] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.570136][T14734] geneve2: entered promiscuous mode [ 647.577847][T14734] geneve2: entered allmulticast mode [ 647.594127][T14734] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 647.607724][T14734] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 647.626201][T14734] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 647.649317][T14734] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 648.449614][T14750] loop2: detected capacity change from 0 to 7 [ 648.461936][T14750] Dev loop2: unable to read RDB block 7 [ 648.477015][T14750] loop2: unable to read partition table [ 648.501125][T14750] loop2: partition table beyond EOD, truncated [ 648.516361][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2629'. [ 648.561235][T14750] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 648.589415][ T5139] Dev loop2: unable to read RDB block 7 [ 648.597489][ T5139] loop2: unable to read partition table [ 648.606524][ T5139] loop2: partition table beyond EOD, truncated [ 648.821027][ T5770] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 649.014591][ T5770] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 649.046135][ T5770] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 649.072510][ T5770] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.089137][ T5770] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.103031][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.114645][ T5770] usb 2-1: Product: syz [ 649.118943][ T5770] usb 2-1: Manufacturer: syz [ 649.126567][ T5770] usb 2-1: SerialNumber: syz [ 649.210997][ T5774] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 649.349964][ T5770] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 649.377847][ T5770] cdc_mbim 2-1:1.0: bind() failure [ 649.414009][ T5770] usb 2-1: USB disconnect, device number 78 [ 649.435997][ T5774] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 649.454518][ T5774] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 649.465500][ T5774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 649.480841][ T5774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 649.495024][ T5774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 649.508797][ T5774] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 649.525638][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.537199][ T5774] usb 4-1: Product: syz [ 649.542902][ T5774] usb 4-1: Manufacturer: syz [ 649.564421][ T5774] cdc_wdm 4-1:1.0: skipping garbage [ 649.569893][ T5774] cdc_wdm 4-1:1.0: skipping garbage [ 649.587222][ T5774] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 649.608937][ T5774] cdc_wdm 4-1:1.0: Unknown control protocol [ 649.885013][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.891715][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.900977][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.907687][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.913956][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.920565][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.927016][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.933654][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.942007][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.948660][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.955109][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.961714][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.968087][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.974738][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.981118][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 649.987763][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 649.994127][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 650.000776][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 650.007680][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 650.014328][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 650.021460][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 650.030175][ T5770] usb 4-1: USB disconnect, device number 67 [ 650.973316][T14780] binder: BINDER_SET_CONTEXT_MGR already set [ 650.999275][T14780] binder: 14779:14780 ioctl 4018620d 200000000040 returned -16 [ 651.023348][T14782] loop2: detected capacity change from 0 to 7 [ 651.044528][T14782] Dev loop2: unable to read RDB block 7 [ 651.088556][T14782] loop2: unable to read partition table [ 651.101166][T14782] loop2: partition table beyond EOD, truncated [ 651.107580][T14782] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 651.142927][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2639'. [ 651.713607][T14794] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 652.036921][T14795] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.079887][T14795] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.114635][T14795] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.251016][T14795] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 652.287344][T14795] geneve2: entered promiscuous mode [ 652.311811][T14795] geneve2: entered allmulticast mode [ 652.432833][T14795] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.459257][T14795] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.479890][T14795] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.561342][T14795] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.661005][ T5774] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 652.852937][ T5774] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 652.885670][ T5774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 652.916153][ T5774] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.984184][ T5774] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.999000][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.009459][ T5774] usb 1-1: Product: syz [ 653.018595][ T5774] usb 1-1: Manufacturer: syz [ 653.028522][ T5774] usb 1-1: SerialNumber: syz [ 653.274106][ T5774] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 653.391080][ T5774] cdc_mbim 1-1:1.0: bind() failure [ 653.421203][ T5774] usb 1-1: USB disconnect, device number 61 [ 653.960903][ T786] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 653.979750][T14817] xt_TCPMSS: Only works on TCP SYN packets [ 654.210845][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 654.238147][ T786] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 654.252759][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.263833][ T786] usb 4-1: Product: syz [ 654.268253][ T786] usb 4-1: Manufacturer: syz [ 654.273278][ T5774] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 654.278089][ T786] usb 4-1: SerialNumber: syz [ 654.301158][ T786] usb 4-1: config 0 descriptor?? [ 654.315171][ T786] gspca_main: sq930x-2.14.0 probing 2770:930c [ 654.532034][ T5774] usb 1-1: Using ep0 maxpacket: 8 [ 654.546110][ T5774] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 654.560848][ T5774] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 654.570480][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.582265][ T786] gspca_sq930x: reg_r 001f failed -32 [ 654.593365][ T5774] usb 1-1: Product: syz [ 654.601552][ T786] sq930x: probe of 4-1:0.0 failed with error -32 [ 654.646298][ T5774] usb 1-1: Manufacturer: syz [ 654.665812][ T5774] usb 1-1: SerialNumber: syz [ 654.714366][ T5774] usb 1-1: config 0 descriptor?? [ 654.761892][ T5774] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 654.795314][ T5774] usb 1-1: setting power ON [ 654.841565][ T5774] dvb-usb: bulk message failed: -22 (2/0) [ 654.921275][ T5774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 654.995616][ T5774] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 655.020029][T14819] dvb-usb: bulk message failed: -22 (3/0) [ 655.041181][T14819] dvb-usb: bulk message failed: -22 (4/0) [ 655.050985][ T5774] usb 1-1: media controller created [ 655.183683][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 655.296915][ T5774] usb 1-1: selecting invalid altsetting 6 [ 655.334997][ T5774] usb 1-1: digital interface selection failed (-22) [ 655.350927][ T5774] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 655.435984][ T5774] usb 1-1: setting power OFF [ 655.443692][ T5774] dvb-usb: bulk message failed: -22 (2/0) [ 655.481065][ T5774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 655.490937][ T5774] (NULL device *): no alternate interface [ 655.613747][ T5774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 655.708236][T14823] loop2: detected capacity change from 0 to 7 [ 655.728333][ T5774] usb 1-1: USB disconnect, device number 62 [ 655.755020][T14823] Dev loop2: unable to read RDB block 7 [ 655.780013][T14826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2649'. [ 655.850839][T14823] loop2: unable to read partition table [ 655.905772][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.915458][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.931793][T14823] loop2: partition table beyond EOD, truncated [ 655.938079][T14823] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 656.025943][T14829] binder: BINDER_SET_CONTEXT_MGR already set [ 656.070929][T14829] binder: 14828:14829 ioctl 4018620d 200000000040 returned -16 [ 657.257788][ T786] usb 4-1: USB disconnect, device number 68 [ 658.390989][ T5770] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 658.570984][ T5770] usb 3-1: Using ep0 maxpacket: 8 [ 658.591324][ T5770] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 658.611850][ T5770] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 658.635938][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.645906][ T5770] usb 3-1: Product: syz [ 658.650180][ T5770] usb 3-1: Manufacturer: syz [ 658.659597][ T5770] usb 3-1: SerialNumber: syz [ 658.675775][ T5770] usb 3-1: config 0 descriptor?? [ 658.688538][T14861] loop2: detected capacity change from 0 to 7 [ 658.697681][ T5770] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 658.711180][ T5770] usb 3-1: setting power ON [ 658.716191][ T5770] dvb-usb: bulk message failed: -22 (2/0) [ 658.734219][ T5770] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 658.757955][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2660'. [ 658.765620][ T5770] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 658.785442][T14861] Dev loop2: unable to read RDB block 7 [ 658.801004][ T5770] usb 3-1: media controller created [ 658.807474][T14864] tipc: Started in network mode [ 658.823909][T14864] tipc: Node identity 6a28d478cd08, cluster identity 4711 [ 658.827466][T14861] loop2: unable to read partition table [ 658.854780][T14864] tipc: Enabled bearer , priority 0 [ 658.870561][ T5770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.882656][T14866] syzkaller0: entered promiscuous mode [ 658.897993][T14866] syzkaller0: entered allmulticast mode [ 658.914638][T14857] dvb-usb: bulk message failed: -22 (3/0) [ 658.920431][T14857] dvb-usb: bulk message failed: -22 (4/0) [ 658.948880][T14861] loop2: partition table beyond EOD, truncated [ 658.955614][ T5770] usb 3-1: selecting invalid altsetting 6 [ 658.963604][ T5770] usb 3-1: digital interface selection failed (-22) [ 658.977196][T14861] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.997657][ T5770] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 658.998103][T14864] tipc: Resetting bearer [ 659.019610][ T5770] usb 3-1: setting power OFF [ 659.026757][ T5770] dvb-usb: bulk message failed: -22 (2/0) [ 659.034327][ T5770] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 659.055856][ T5770] (NULL device *): no alternate interface [ 659.079572][T14862] tipc: Resetting bearer [ 659.133067][ T5770] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 659.179329][ T5770] usb 3-1: USB disconnect, device number 81 [ 659.193747][T14862] tipc: Disabling bearer [ 659.435871][T14875] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.445649][T14875] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.459963][T14875] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.472933][T14875] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.486255][T14875] geneve2: entered promiscuous mode [ 659.492354][T14875] geneve2: entered allmulticast mode [ 659.510595][T14875] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 659.520641][T14875] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 659.530272][T14875] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 659.545076][T14875] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 659.731014][ T5774] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 659.921611][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 659.954391][ T5774] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 659.970841][ T5774] usb 4-1: config 0 has no interface number 0 [ 659.987349][ T5774] usb 4-1: config 0 interface 12 has no altsetting 0 [ 660.033322][ T5774] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 660.050817][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.111251][ T5774] usb 4-1: Product: syz [ 660.116334][ T5774] usb 4-1: Manufacturer: syz [ 660.121227][ T5774] usb 4-1: SerialNumber: syz [ 660.128847][ T5774] usb 4-1: config 0 descriptor?? [ 661.168380][T14896] loop2: detected capacity change from 0 to 7 [ 661.185877][T14896] Dev loop2: unable to read RDB block 7 [ 661.242545][T14896] loop2: unable to read partition table [ 661.266368][T14896] loop2: partition table beyond EOD, truncated [ 661.273667][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2671'. [ 661.468438][T14896] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 661.746879][T14903] tipc: Enabled bearer , priority 0 [ 661.758784][T14903] syzkaller0: entered promiscuous mode [ 661.766733][T14903] syzkaller0: entered allmulticast mode [ 661.810277][T14903] tipc: Resetting bearer [ 661.838403][T14902] tipc: Resetting bearer [ 661.887927][T14902] tipc: Disabling bearer [ 661.889917][T14906] ksmbd: Unknown IPC event: 12, ignore. [ 663.608307][ T5774] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 663.627951][ T5774] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 663.680044][ T5774] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 663.719697][ T5774] f81534: probe of 4-1:0.12 failed with error -32 [ 663.774495][ T5774] usb 4-1: USB disconnect, device number 69 [ 664.098942][T14932] xt_socket: unknown flags 0xc [ 667.460944][ T5770] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 667.700841][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 667.712304][ T5770] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 667.720608][T14969] tipc: Enabled bearer , priority 0 [ 667.732973][ T5770] usb 3-1: config 0 has no interface number 0 [ 667.749908][T14969] syzkaller0: entered promiscuous mode [ 667.756051][T14969] syzkaller0: entered allmulticast mode [ 667.774394][ T5770] usb 3-1: config 0 interface 12 has no altsetting 0 [ 667.796071][ T5770] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 667.820810][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.823275][T14969] tipc: Resetting bearer [ 667.839454][ T5770] usb 3-1: Product: syz [ 667.851813][ T5770] usb 3-1: Manufacturer: syz [ 667.856465][ T5770] usb 3-1: SerialNumber: syz [ 667.884658][T14968] tipc: Resetting bearer [ 667.925671][ T5770] usb 3-1: config 0 descriptor?? [ 667.945931][T14968] tipc: Disabling bearer [ 668.407147][T14982] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 668.433220][T14982] net_ratelimit: 1 callbacks suppressed [ 668.433236][T14982] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 669.019884][T14992] syzkaller0: entered promiscuous mode [ 669.042298][T14965] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 669.053128][T14992] syzkaller0: entered allmulticast mode [ 669.067097][T14965] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 669.495326][T14999] tipc: Started in network mode [ 669.500374][T14999] tipc: Node identity aa2a41b8faf2, cluster identity 4711 [ 669.509339][T14999] tipc: Enabled bearer , priority 0 [ 669.530211][T14999] syzkaller0: entered promiscuous mode [ 669.546630][T14999] syzkaller0: entered allmulticast mode [ 669.581725][T14999] tipc: Resetting bearer [ 669.608344][T14998] tipc: Resetting bearer [ 669.683790][T14998] tipc: Disabling bearer [ 669.945443][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.975184][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.218365][T15010] tipc: Enabled bearer , priority 10 [ 670.403502][ T5770] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 670.453688][ T5770] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 670.491416][ T5770] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 670.527230][ T5770] f81534: probe of 3-1:0.12 failed with error -71 [ 670.585717][ T5770] usb 3-1: USB disconnect, device number 82 [ 670.750990][ T5774] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 670.953060][ T5774] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 670.971024][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.008830][ T5774] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 671.026639][ T5774] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 671.051091][ T5774] usb 2-1: Manufacturer: syz [ 671.067359][ T5774] usb 2-1: config 0 descriptor?? [ 671.290902][ T5774] rc_core: IR keymap rc-hauppauge not found [ 671.311689][ T5774] Registered IR keymap rc-empty [ 671.318655][ T5774] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 671.339810][T11193] tipc: Node number set to 2803946616 [ 671.391092][ T5774] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 671.447209][ T5774] usb 2-1: USB disconnect, device number 79 [ 671.530373][T15025] program syz.0.2714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.025982][T15028] tipc: Enabled bearer , priority 0 [ 672.069302][T15028] syzkaller0: entered promiscuous mode [ 672.082995][T15028] syzkaller0: entered allmulticast mode [ 672.135260][T15028] tipc: Resetting bearer [ 672.222632][T15027] tipc: Resetting bearer [ 672.278980][T15027] tipc: Disabling bearer [ 673.054181][T15042] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 673.065780][T15042] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 673.076693][T15042] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 673.086894][T15042] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 673.098328][T15042] geneve2: entered promiscuous mode [ 673.103939][T15042] geneve2: entered allmulticast mode [ 673.141856][T15042] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.165163][T15042] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.190726][T15042] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.208465][T15042] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 674.837824][T15064] IPVS: You probably need to specify IP address on multicast interface. [ 674.848190][T15064] IPVS: Error connecting to the multicast addr [ 675.313826][T15071] tipc: Enabled bearer , priority 0 [ 675.324348][T15071] syzkaller0: entered promiscuous mode [ 675.341768][T15071] syzkaller0: entered allmulticast mode [ 675.461485][T15071] tipc: Resetting bearer [ 675.481524][T15069] tipc: Resetting bearer [ 675.606379][T15069] tipc: Disabling bearer [ 676.970999][ T5774] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 677.183164][ T5774] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 677.197267][ T5774] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 677.239121][ T5774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 677.250999][ T5774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 677.290892][ T5774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 677.323992][ T5774] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.345489][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.355069][ T5774] usb 3-1: Product: syz [ 677.359557][ T5774] usb 3-1: Manufacturer: syz [ 677.380898][ T5774] cdc_wdm 3-1:1.0: skipping garbage [ 677.387062][ T5774] cdc_wdm 3-1:1.0: skipping garbage [ 677.399624][ T5774] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 677.410847][ T5774] cdc_wdm 3-1:1.0: Unknown control protocol [ 677.518219][T15105] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 677.541055][T15105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 677.674813][ C1] wdm_int_callback: 4 callbacks suppressed [ 677.674833][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.687408][ C1] wdm_int_callback: 4 callbacks suppressed [ 677.687421][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.700247][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.706871][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.713295][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.719896][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.726174][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.732781][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.739061][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.745655][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.751970][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.758588][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.765087][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.771698][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.778248][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.784881][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.791422][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.798018][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.804338][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 677.810941][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 677.891654][ T786] usb 3-1: USB disconnect, device number 83 [ 677.891903][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 678.633711][ T786] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 678.842665][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.866489][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.887995][ T786] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 678.927040][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.966458][ T786] usb 4-1: config 0 descriptor?? [ 679.494919][ T786] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 679.506816][ T786] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 679.661037][ T786] cp2112 0003:10C4:EA90.001C: Part Number: 0x82 Device Version: 0xFE [ 680.267330][T15113] ================================================================== [ 680.275434][T15113] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x714/0xf00 [ 680.282820][T15113] Read of size 42 at addr ffffc90003adfd41 by task syz.3.2741/15113 [ 680.290810][T15113] [ 680.293142][T15113] CPU: 1 PID: 15113 Comm: syz.3.2741 Not tainted syzkaller #0 [ 680.300598][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.310666][T15113] Call Trace: [ 680.313959][T15113] [ 680.316913][T15113] dump_stack_lvl+0x16c/0x230 [ 680.321626][T15113] ? cp2112_xfer+0x714/0xf00 [ 680.326222][T15113] ? show_regs_print_info+0x20/0x20 [ 680.331429][T15113] ? load_image+0x3b0/0x3b0 [ 680.335981][T15113] ? register_lock_class+0xb5/0x890 [ 680.341181][T15113] ? __virt_addr_valid+0xc3/0x540 [ 680.346233][T15113] print_report+0xac/0x220 [ 680.350655][T15113] ? cp2112_xfer+0x714/0xf00 [ 680.355239][T15113] kasan_report+0x117/0x150 [ 680.359746][T15113] ? cp2112_xfer+0x714/0xf00 [ 680.364334][T15113] kasan_check_range+0x288/0x290 [ 680.369274][T15113] ? cp2112_xfer+0x714/0xf00 [ 680.373863][T15113] __asan_memcpy+0x29/0x70 [ 680.378282][T15113] cp2112_xfer+0x714/0xf00 [ 680.382709][T15113] ? cp2112_i2c_xfer+0xe70/0xe70 [ 680.387650][T15113] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 680.393632][T15113] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 680.399527][T15113] __i2c_smbus_xfer+0x888/0x1d90 [ 680.404475][T15113] ? cp2112_i2c_xfer+0xe70/0xe70 [ 680.409423][T15113] ? i2c_smbus_write_i2c_block_data+0x1b0/0x1b0 [ 680.415666][T15113] ? rt_mutex_adjust_prio_chain+0x2400/0x2400 [ 680.421748][T15113] ? i2c_smbus_xfer+0x121/0x3a0 [ 680.426621][T15113] i2c_smbus_xfer+0x267/0x3a0 [ 680.431303][T15113] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 680.436584][T15113] ? __might_fault+0xaa/0x120 [ 680.441257][T15113] ? __might_fault+0xc6/0x120 [ 680.445953][T15113] ? __might_fault+0xaa/0x120 [ 680.450645][T15113] i2cdev_ioctl_smbus+0x423/0x670 [ 680.455672][T15113] ? i2cdev_ioctl_rdwr+0x690/0x690 [ 680.460781][T15113] ? __might_fault+0xaa/0x120 [ 680.465473][T15113] ? __might_fault+0xc6/0x120 [ 680.470157][T15113] ? __might_fault+0xaa/0x120 [ 680.474841][T15113] i2cdev_ioctl+0x5d1/0x7e0 [ 680.479349][T15113] ? i2cdev_write+0x120/0x120 [ 680.484025][T15113] ? bpf_lsm_file_ioctl+0x9/0x10 [ 680.488961][T15113] ? security_file_ioctl+0x80/0xa0 [ 680.494080][T15113] ? i2cdev_write+0x120/0x120 [ 680.498758][T15113] __se_sys_ioctl+0xfd/0x170 [ 680.503352][T15113] do_syscall_64+0x55/0xb0 [ 680.507772][T15113] ? clear_bhb_loop+0x40/0x90 [ 680.512457][T15113] ? clear_bhb_loop+0x40/0x90 [ 680.517145][T15113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.523043][T15113] RIP: 0033:0x7fcd31f8f749 [ 680.527464][T15113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.547091][T15113] RSP: 002b:00007fcd32ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.555524][T15113] RAX: ffffffffffffffda RBX: 00007fcd321e5fa0 RCX: 00007fcd31f8f749 [ 680.563529][T15113] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 680.571507][T15113] RBP: 00007fcd32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 680.579476][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.587444][T15113] R13: 00007fcd321e6038 R14: 00007fcd321e5fa0 R15: 00007ffc36dc9ba8 [ 680.595418][T15113] [ 680.598432][T15113] [ 680.600751][T15113] The buggy address belongs to stack of task syz.3.2741/15113 [ 680.608211][T15113] and is located at offset 33 in frame: [ 680.613840][T15113] i2cdev_ioctl_smbus+0x0/0x670 [ 680.618712][T15113] [ 680.621063][T15113] This frame has 1 object: [ 680.625513][T15113] [32, 66) 'temp' [ 680.625522][T15113] [ 680.631577][T15113] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003ad8000 allocated at copy_process+0x549/0x3d70 [ 680.644522][T15113] The buggy address belongs to the physical page: [ 680.650980][T15113] page:ffffea0001a90640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a419 [ 680.661152][T15113] memcg:ffff8880572bba02 [ 680.665390][T15113] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 680.672742][T15113] page_type: 0xffffffff() [ 680.677086][T15113] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 680.685689][T15113] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8880572bba02 [ 680.694274][T15113] page dumped because: kasan: bad access detected [ 680.700708][T15113] page_owner tracks the page as allocated [ 680.706418][T15113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 15062, tgid 15062 (syz.3.2725), ts 674817164134, free_ts 655565442907 [ 680.724906][T15113] post_alloc_hook+0x1cd/0x210 [ 680.729681][T15113] get_page_from_freelist+0x195c/0x19f0 [ 680.735238][T15113] __alloc_pages+0x1e3/0x460 [ 680.739835][T15113] __vmalloc_node_range+0x96b/0x1320 [ 680.745138][T15113] dup_task_struct+0x3d0/0x7c0 [ 680.749901][T15113] copy_process+0x549/0x3d70 [ 680.754522][T15113] kernel_clone+0x21b/0x840 [ 680.759039][T15113] __se_sys_clone3+0x252/0x2c0 [ 680.763795][T15113] do_syscall_64+0x55/0xb0 [ 680.768206][T15113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.774107][T15113] page last free stack trace: [ 680.778767][T15113] free_unref_page_prepare+0x7ce/0x8e0 [ 680.784228][T15113] free_unref_page+0x32/0x2e0 [ 680.788901][T15113] vfree+0x1a6/0x320 [ 680.792804][T15113] dvb_usb_adapter_dvb_exit+0x9c/0x1b0 [ 680.798267][T15113] dvb_usb_adapter_exit+0x8b/0x230 [ 680.803387][T15113] dvb_usb_device_exit+0x1b7/0x330 [ 680.808503][T15113] cxusb_probe+0x604/0x700 [ 680.812928][T15113] usb_probe_interface+0x5a4/0xb00 [ 680.818055][T15113] really_probe+0x25b/0xb40 [ 680.822562][T15113] __driver_probe_device+0x18c/0x330 [ 680.827844][T15113] driver_probe_device+0x4f/0x420 [ 680.832875][T15113] __device_attach_driver+0x2ca/0x520 [ 680.838252][T15113] bus_for_each_drv+0x24b/0x2d0 [ 680.843099][T15113] __device_attach+0x2b5/0x400 [ 680.847863][T15113] bus_probe_device+0x180/0x260 [ 680.852758][T15113] device_add+0x85b/0xc20 [ 680.857120][T15113] [ 680.859462][T15113] Memory state around the buggy address: [ 680.865122][T15113] ffffc90003adfc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 680.873187][T15113] ffffc90003adfc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 680.881250][T15113] >ffffc90003adfd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 680.889311][T15113] ^ [ 680.896501][T15113] ffffc90003adfd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 680.904554][T15113] ffffc90003adfe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 [ 680.912631][T15113] ================================================================== [ 681.012712][T15113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 681.019973][T15113] CPU: 0 PID: 15113 Comm: syz.3.2741 Not tainted syzkaller #0 [ 681.027442][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.037541][T15113] Call Trace: [ 681.040845][T15113] [ 681.043794][T15113] dump_stack_lvl+0x16c/0x230 [ 681.048477][T15113] ? show_regs_print_info+0x20/0x20 [ 681.053701][T15113] ? load_image+0x3b0/0x3b0 [ 681.058218][T15113] panic+0x2c0/0x710 [ 681.062138][T15113] ? bpf_jit_dump+0xd0/0xd0 [ 681.066677][T15113] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 681.072589][T15113] ? _raw_spin_unlock+0x40/0x40 [ 681.077461][T15113] ? print_memory_metadata+0x314/0x400 [ 681.082960][T15113] ? cp2112_xfer+0x714/0xf00 [ 681.087567][T15113] check_panic_on_warn+0x84/0xa0 [ 681.092510][T15113] ? cp2112_xfer+0x714/0xf00 [ 681.097106][T15113] end_report+0x6f/0x140 [ 681.101348][T15113] kasan_report+0x128/0x150 [ 681.105864][T15113] ? cp2112_xfer+0x714/0xf00 [ 681.110466][T15113] kasan_check_range+0x288/0x290 [ 681.115408][T15113] ? cp2112_xfer+0x714/0xf00 [ 681.120005][T15113] __asan_memcpy+0x29/0x70 [ 681.124469][T15113] cp2112_xfer+0x714/0xf00 [ 681.128896][T15113] ? cp2112_i2c_xfer+0xe70/0xe70 [ 681.133849][T15113] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 681.139864][T15113] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 681.145768][T15113] __i2c_smbus_xfer+0x888/0x1d90 [ 681.150709][T15113] ? cp2112_i2c_xfer+0xe70/0xe70 [ 681.155689][T15113] ? i2c_smbus_write_i2c_block_data+0x1b0/0x1b0 [ 681.161962][T15113] ? rt_mutex_adjust_prio_chain+0x2400/0x2400 [ 681.168061][T15113] ? i2c_smbus_xfer+0x121/0x3a0 [ 681.172944][T15113] i2c_smbus_xfer+0x267/0x3a0 [ 681.177627][T15113] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 681.182912][T15113] ? __might_fault+0xaa/0x120 [ 681.187592][T15113] ? __might_fault+0xc6/0x120 [ 681.192284][T15113] ? __might_fault+0xaa/0x120 [ 681.196976][T15113] i2cdev_ioctl_smbus+0x423/0x670 [ 681.202023][T15113] ? i2cdev_ioctl_rdwr+0x690/0x690 [ 681.207159][T15113] ? __might_fault+0xaa/0x120 [ 681.211843][T15113] ? __might_fault+0xc6/0x120 [ 681.216520][T15113] ? __might_fault+0xaa/0x120 [ 681.221212][T15113] i2cdev_ioctl+0x5d1/0x7e0 [ 681.225738][T15113] ? i2cdev_write+0x120/0x120 [ 681.230427][T15113] ? bpf_lsm_file_ioctl+0x9/0x10 [ 681.235367][T15113] ? security_file_ioctl+0x80/0xa0 [ 681.240486][T15113] ? i2cdev_write+0x120/0x120 [ 681.245170][T15113] __se_sys_ioctl+0xfd/0x170 [ 681.249775][T15113] do_syscall_64+0x55/0xb0 [ 681.254201][T15113] ? clear_bhb_loop+0x40/0x90 [ 681.258895][T15113] ? clear_bhb_loop+0x40/0x90 [ 681.263585][T15113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.269490][T15113] RIP: 0033:0x7fcd31f8f749 [ 681.273944][T15113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.293557][T15113] RSP: 002b:00007fcd32ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.301993][T15113] RAX: ffffffffffffffda RBX: 00007fcd321e5fa0 RCX: 00007fcd31f8f749 [ 681.309964][T15113] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 681.317928][T15113] RBP: 00007fcd32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 681.325899][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.333873][T15113] R13: 00007fcd321e6038 R14: 00007fcd321e5fa0 R15: 00007ffc36dc9ba8 [ 681.341854][T15113] [ 681.345461][T15113] Kernel Offset: disabled [ 681.349789][T15113] Rebooting in 86400 seconds..