last executing test programs: 25.697496318s ago: executing program 1 (id=380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) 23.876105485s ago: executing program 1 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23.672483098s ago: executing program 1 (id=384): r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x44) 21.693831457s ago: executing program 1 (id=387): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) 20.984839788s ago: executing program 1 (id=391): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 19.995944153s ago: executing program 1 (id=393): syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x10, 0x0, @in={0x2, 0x4e22, @rand_addr=0x3}}}, 0xa0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1={0xfc, 0x1, '\x00', 0x1}, 0xaffe}, {0xa, 0x4e20, 0x0, @loopback, 0x7fffffff}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17.316891603s ago: executing program 3 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 16.200034629s ago: executing program 3 (id=400): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000780)={0x0, 0x0, r4, r5, 0x7, 0xe27, 0x6, 0x7, {0x7, 0xfff, 0x9, 0x80, 0x3, 0x2, 0xff, 0x8, 0x4, 0xb793, 0x6, 0x8000, 0xffffff8b, 0x8c95, "e84c15f511a12d35b27358b7cf51ec894e611716d224c572223960b2c04caf83"}}) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x7}, 0x2a, r6) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 10.608110853s ago: executing program 3 (id=408): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10) 7.312761921s ago: executing program 0 (id=409): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 6.995224367s ago: executing program 2 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 6.913193497s ago: executing program 2 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r2, &(0x7f0000002000)=""/4096, 0x1000) 6.200750458s ago: executing program 0 (id=413): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e657400"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 6.153553068s ago: executing program 2 (id=414): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000380)) 5.876145833s ago: executing program 2 (id=415): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xb5fa, 0x1}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8905, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.758330464s ago: executing program 2 (id=416): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket(0x27, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) writev(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f0000000480)="b9e94d05d9adf5e171261092d920194b9c340d5b93021429ce551bb07db881c794edda114aefac7d4eb0736504662a9c09a387dfffe56e075aedc01a665b465f68aea60527aa845722f37803e57eb6ce06effa3b76410898295e8860fb1a314304273a7ac2de1bf7e3", 0x69}], 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x0, 0xab6, 0x7ff, 0x5, 0xb}) ptrace$poke(0x4, r1, &(0x7f0000000280), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00'/27], 0x48) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000380)={0x800, 0x7fffffff, 0x10001, 0x400}, &(0x7f00000003c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) modify_ldt$write(0x1, &(0x7f00000002c0)={0x1, 0x20000800, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) 4.627909982s ago: executing program 32 (id=393): syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x10, 0x0, @in={0x2, 0x4e22, @rand_addr=0x3}}}, 0xa0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1={0xfc, 0x1, '\x00', 0x1}, 0xaffe}, {0xa, 0x4e20, 0x0, @loopback, 0x7fffffff}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 4.622841891s ago: executing program 2 (id=418): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7fff}, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, r3, {0xb}}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x351a, 0x1, 0x200000, 0x207}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.520096373s ago: executing program 3 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x48) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.519441863s ago: executing program 0 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 2.151025328s ago: executing program 3 (id=421): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setgroups(0x4, &(0x7f0000000800)=[r0, r0, r0, r0]) setregid(0x0, r0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.150145758s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x20cc7a, 0x60cd2}) 1.154022423s ago: executing program 0 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) shutdown(r1, 0x1) 1.102691714s ago: executing program 3 (id=423): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) socket$kcm(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x141a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xd7) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0xffffff4a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x20000000, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x9, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x6b1, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) 0s ago: executing program 0 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r0, 0x8925, 0x200000000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a00009611780000"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): [ T5768] bridge_slave_1: entered promiscuous mode [ 76.570470][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.669323][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.682897][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.764161][ T5768] team0: Port device team_slave_0 added [ 76.778693][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.792145][ T5768] team0: Port device team_slave_1 added [ 76.850766][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.858405][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.885093][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.918868][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.925972][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.952011][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.008917][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.031711][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.039051][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.046737][ T5772] bridge_slave_0: entered allmulticast mode [ 77.053777][ T5772] bridge_slave_0: entered promiscuous mode [ 77.062526][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.069773][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.077899][ T5772] bridge_slave_1: entered allmulticast mode [ 77.084876][ T5772] bridge_slave_1: entered promiscuous mode [ 77.142337][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.160693][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.168195][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.175503][ T5777] bridge_slave_0: entered allmulticast mode [ 77.182512][ T5777] bridge_slave_0: entered promiscuous mode [ 77.204439][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.239430][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.247073][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.254462][ T5777] bridge_slave_1: entered allmulticast mode [ 77.263085][ T5777] bridge_slave_1: entered promiscuous mode [ 77.337697][ T5768] hsr_slave_0: entered promiscuous mode [ 77.344224][ T5768] hsr_slave_1: entered promiscuous mode [ 77.354915][ T5772] team0: Port device team_slave_0 added [ 77.364214][ T5772] team0: Port device team_slave_1 added [ 77.412545][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.464610][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.488418][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.495663][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.522598][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.534108][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.541842][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.549179][ T5776] bridge_slave_0: entered allmulticast mode [ 77.556539][ T5776] bridge_slave_0: entered promiscuous mode [ 77.569390][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576650][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.583845][ T5776] bridge_slave_1: entered allmulticast mode [ 77.591229][ T5776] bridge_slave_1: entered promiscuous mode [ 77.611850][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.618992][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.645385][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.697318][ T5777] team0: Port device team_slave_0 added [ 77.705933][ T5777] team0: Port device team_slave_1 added [ 77.774230][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.781447][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.807513][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.821938][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.834891][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.868524][ T5772] hsr_slave_0: entered promiscuous mode [ 77.875450][ T5772] hsr_slave_1: entered promiscuous mode [ 77.881737][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.890390][ T5772] Cannot create hsr debugfs directory [ 77.890418][ T5086] Bluetooth: hci0: command tx timeout [ 77.896880][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.908791][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.935284][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.955716][ T5086] Bluetooth: hci1: command tx timeout [ 78.038371][ T5776] team0: Port device team_slave_0 added [ 78.080305][ T5777] hsr_slave_0: entered promiscuous mode [ 78.087351][ T5777] hsr_slave_1: entered promiscuous mode [ 78.093578][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.101324][ T5777] Cannot create hsr debugfs directory [ 78.110939][ T5776] team0: Port device team_slave_1 added [ 78.116794][ T5086] Bluetooth: hci3: command tx timeout [ 78.117033][ T5086] Bluetooth: hci2: command tx timeout [ 78.193981][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.201645][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.227771][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.240605][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.248064][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.274245][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.447126][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.479664][ T5776] hsr_slave_0: entered promiscuous mode [ 78.486304][ T5776] hsr_slave_1: entered promiscuous mode [ 78.492554][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.500379][ T5776] Cannot create hsr debugfs directory [ 78.513398][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.565545][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.581051][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.780954][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.790867][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.802516][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.839637][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.922547][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.949783][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.962001][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.974757][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.052933][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.063845][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.089606][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.117927][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.181404][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.247029][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.262218][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.300651][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.308069][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.321320][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.328684][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.384848][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.419937][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.427181][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.456564][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.463726][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.512637][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.584913][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.604368][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.633920][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.641116][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.677417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.684582][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.751972][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.817877][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.825130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.880118][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.887364][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.955607][ T5086] Bluetooth: hci0: command tx timeout [ 80.036140][ T5086] Bluetooth: hci1: command tx timeout [ 80.130144][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.147960][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.200454][ T5086] Bluetooth: hci3: command tx timeout [ 80.200476][ T5771] Bluetooth: hci2: command tx timeout [ 80.260197][ T5768] veth0_vlan: entered promiscuous mode [ 80.339514][ T5768] veth1_vlan: entered promiscuous mode [ 80.369960][ T5772] veth0_vlan: entered promiscuous mode [ 80.408193][ T5772] veth1_vlan: entered promiscuous mode [ 80.471924][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.489066][ T5768] veth0_macvtap: entered promiscuous mode [ 80.512320][ T5768] veth1_macvtap: entered promiscuous mode [ 80.534084][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.572135][ T5772] veth0_macvtap: entered promiscuous mode [ 80.600722][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.640816][ T5772] veth1_macvtap: entered promiscuous mode [ 80.693294][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.706445][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.717038][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725824][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734544][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.753901][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.765978][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.780719][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.794906][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.806704][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.819332][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.837711][ T5776] veth0_vlan: entered promiscuous mode [ 80.844028][ T5777] veth0_vlan: entered promiscuous mode [ 80.870571][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.879814][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.889931][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.898959][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.914430][ T5777] veth1_vlan: entered promiscuous mode [ 80.951303][ T5776] veth1_vlan: entered promiscuous mode [ 81.120944][ T5776] veth0_macvtap: entered promiscuous mode [ 81.134132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.144006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.152523][ T5777] veth0_macvtap: entered promiscuous mode [ 81.177483][ T5776] veth1_macvtap: entered promiscuous mode [ 81.232386][ T5777] veth1_macvtap: entered promiscuous mode [ 81.250513][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.265132][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.297296][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.306844][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.323335][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.326290][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.335300][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.354124][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.372010][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.392331][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.406731][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.422160][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.434037][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.444664][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.455880][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.469457][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.497339][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.514229][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.525714][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.536720][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.549066][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.582560][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.597148][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.607714][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.618548][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.628912][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.640047][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.651580][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.673710][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.682777][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.692551][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701766][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.730995][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.742840][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.753079][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.761599][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.772031][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.781787][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035995][ T5086] Bluetooth: hci0: command tx timeout [ 82.104429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.113696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.126374][ T5086] Bluetooth: hci1: command tx timeout [ 82.181446][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.192550][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.251619][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.276222][ T5086] Bluetooth: hci3: command tx timeout [ 82.286622][ T5086] Bluetooth: hci2: command tx timeout [ 82.291910][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.305646][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.309491][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.332953][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.355330][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.521843][ T5862] syz.3.4[5862]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.522275][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 82.543328][ T5862] loop3: detected capacity change from 0 to 16 [ 82.545089][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 82.572339][ T5852] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 82.602369][ T5858] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 82.625699][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.626202][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.681440][ T5858] usb 3-1: config 0 descriptor?? [ 82.684131][ T5862] erofs: (device loop3): mounted with root inode @ nid 36. [ 82.710568][ T5852] pvrusb2: Hardware description: Terratec Grabster AV400 [ 82.973108][ T5852] pvrusb2: ********** [ 82.982961][ T5852] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 83.023958][ T5852] pvrusb2: Important functionality might not be entirely working. [ 83.095335][ T5862] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 83.101843][ T5852] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 83.134147][ T5852] pvrusb2: ********** [ 83.171386][ T2319] pvrusb2: Invalid write control endpoint [ 83.245450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.278319][ T5858] aquacomputer_d5next 0003:0C70:F0BD.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0 [ 83.429877][ T5858] usb 3-1: USB disconnect, device number 2 [ 83.692564][ T2319] pvrusb2: Invalid write control endpoint [ 83.782694][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 83.819759][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 83.862506][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 83.881784][ T2319] pvrusb2: Device being rendered inoperable [ 83.889911][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 83.900515][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 83.913809][ T2319] pvrusb2: Attached sub-driver cx25840 [ 83.927362][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 83.942032][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 83.989718][ T5870] fido_id[5870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 84.116990][ T5086] Bluetooth: hci0: command tx timeout [ 84.195687][ T5086] Bluetooth: hci1: command tx timeout [ 84.355475][ T5086] Bluetooth: hci2: command tx timeout [ 84.359053][ T5771] Bluetooth: hci3: command tx timeout [ 84.692233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.775468][ T28] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.918786][ T5876] loop3: detected capacity change from 0 to 32768 [ 85.014365][ T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.045166][ T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.071060][ T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.072097][ T5876] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.085702][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.115800][ T5878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.152316][ T5885] loop0: detected capacity change from 0 to 128 [ 85.164142][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 85.217794][ T5885] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 85.340520][ T5876] XFS (loop3): Ending clean mount [ 85.420653][ T5885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.464481][ T28] usb 3-1: USB disconnect, device number 3 [ 85.472154][ T5876] XFS (loop3): Quotacheck needed: Please wait. [ 85.610590][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.812327][ T5876] XFS (loop3): Quotacheck: Done. [ 86.172164][ T5779] usb 2-1: USB disconnect, device number 2 [ 86.223726][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.370758][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.446514][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.676298][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 86.699080][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.706943][ T5909] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.735704][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.774575][ T28] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 86.791202][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.819409][ T28] usb 1-1: config 0 descriptor?? [ 86.885417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.942630][ T5915] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 87.005550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.183827][ T5917] loop2: detected capacity change from 0 to 1024 [ 87.211189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.255794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.264370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.272841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.281378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.315683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.854038][ T5771] Bluetooth: hci0: Malformed Event: 0x02 [ 88.054978][ T28] usb 1-1: USB disconnect, device number 2 [ 88.387888][ T70] hfsplus: b-tree write err: -5, ino 4 [ 88.865354][ T5779] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.066022][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 89.088837][ T5779] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 89.105326][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.130385][ T5779] pvrusb2: Hardware description: Terratec Grabster AV400 [ 89.145035][ T5779] pvrusb2: ********** [ 89.159311][ T5779] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 89.173576][ T5779] pvrusb2: Important functionality might not be entirely working. [ 89.181846][ T5779] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 89.193837][ T5779] pvrusb2: ********** [ 89.284737][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.305020][ T5952] netlink: 'syz.3.27': attribute type 3 has an invalid length. [ 89.314273][ T5952] netlink: 'syz.3.27': attribute type 3 has an invalid length. [ 89.336472][ T2319] pvrusb2: Invalid write control endpoint [ 89.431699][ T2319] pvrusb2: Invalid write control endpoint [ 89.445252][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 89.457733][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 89.479661][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 89.494521][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 89.527913][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.553735][ T5959] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 89.575179][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.592848][ T2319] pvrusb2: Device being rendered inoperable [ 89.602764][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.659145][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 89.701442][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.720648][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 89.731169][ T2319] pvrusb2: Attached sub-driver cx25840 [ 89.737316][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 89.756324][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 89.803320][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.825189][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 89.838296][ T5961] loop3: detected capacity change from 0 to 1024 [ 89.851685][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 89.921967][ T5821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 89.961435][ T9] usb 1-1: Product: syz [ 90.412875][ T9] usb 1-1: Manufacturer: syz [ 90.419835][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.432538][ T9] usb 1-1: SerialNumber: syz [ 90.449208][ T5771] Bluetooth: hci3: Malformed Event: 0x02 [ 90.496365][ T9] usb 1-1: config 0 descriptor?? [ 90.519008][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 90.535962][ T9] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 90.550937][ T5821] pvrusb2: ********** [ 90.559867][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 90.589860][ T5821] pvrusb2: Important functionality might not be entirely working. [ 90.600514][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 90.629206][ T5821] pvrusb2: ********** [ 90.722107][ T2319] pvrusb2: Invalid write control endpoint [ 90.752008][ T5821] usb 1-1: USB disconnect, device number 3 [ 90.849231][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 90.858730][ T2319] pvrusb2: Invalid write control endpoint [ 90.888140][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 90.935329][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 90.964255][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 90.989306][ T2319] pvrusb2: Device being rendered inoperable [ 91.004162][ T2319] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 91.018309][ T2319] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 91.032646][ T2319] pvrusb2: Attached sub-driver cx25840 [ 91.048935][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 91.067991][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 92.029297][ T5858] usb 3-1: USB disconnect, device number 4 [ 92.086928][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.201651][ T965] cfg80211: failed to load regulatory.db [ 92.275273][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 92.301965][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 92.344223][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.351000][ T28] usb 2-1: USB disconnect, device number 3 [ 92.418801][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 92.426141][ T9] pvrusb2: ********** [ 92.432092][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 92.478643][ T9] pvrusb2: Important functionality might not be entirely working. [ 92.498061][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 92.526168][ T9] pvrusb2: ********** [ 92.697793][ T2319] pvrusb2: Invalid write control endpoint [ 92.852582][ T2319] pvrusb2: Invalid write control endpoint [ 92.959331][ T5992] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 93.142742][ T5994] loop2: detected capacity change from 0 to 1024 [ 95.098403][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 95.126391][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 95.134060][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 95.248722][ T2319] pvrusb2: Device being rendered inoperable [ 95.256951][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 95.265421][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 95.273993][ T2319] pvrusb2: Attached sub-driver cx25840 [ 95.291885][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 95.439726][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 95.460840][ T5771] Bluetooth: hci0: Malformed Event: 0x02 [ 95.856022][ T6002] loop0: detected capacity change from 0 to 512 [ 95.982202][ T12] hfsplus: b-tree write err: -5, ino 4 [ 96.068038][ T6002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.124733][ T6002] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.493666][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.436716][ T6015] Zero length message leads to an empty skb [ 98.306553][ T965] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.655117][ T965] usb 3-1: Using ep0 maxpacket: 8 [ 98.683629][ T965] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 98.693123][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.734205][ T965] pvrusb2: Hardware description: Terratec Grabster AV400 [ 98.748956][ T5858] usb 4-1: USB disconnect, device number 2 [ 98.816272][ T965] pvrusb2: ********** [ 98.821685][ T965] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 98.914113][ T965] pvrusb2: Important functionality might not be entirely working. [ 99.002020][ T965] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.040926][ T965] pvrusb2: ********** [ 99.060241][ T2319] pvrusb2: Invalid write control endpoint [ 99.265305][ T2319] pvrusb2: Invalid write control endpoint [ 99.318130][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.382303][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.425345][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.445627][ T2319] pvrusb2: Device being rendered inoperable [ 99.451687][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 99.469045][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 99.496221][ T2319] pvrusb2: Attached sub-driver cx25840 [ 99.511990][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.702104][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 100.597515][ T965] usb 3-1: USB disconnect, device number 5 [ 100.752933][ T6050] loop3: detected capacity change from 0 to 512 [ 100.775171][ T6050] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.944210][ T6050] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.55: corrupted inode contents [ 100.962979][ T6057] binder: 6053:6057 ioctl 4018620d 0 returned -22 [ 100.970667][ T6050] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #16: comm syz.3.55: mark_inode_dirty error [ 100.990150][ T6050] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.55: corrupted inode contents [ 101.011383][ T6057] binder: 6053:6057 ioctl 4018620d 0 returned -22 [ 101.018968][ T6050] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.55: mark_inode_dirty error [ 101.074270][ T6050] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.55: corrupted inode contents [ 101.111749][ T6050] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 101.148683][ T6050] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.55: corrupted inode contents [ 101.171247][ T6050] EXT4-fs error (device loop3): ext4_truncate:4283: inode #16: comm syz.3.55: mark_inode_dirty error [ 101.209891][ T6050] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 101.233068][ T27] audit: type=1326 audit(1750804976.058:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.255027][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.305084][ T6050] EXT4-fs (loop3): 1 truncate cleaned up [ 101.312181][ T6050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.326016][ T6050] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.351227][ T27] audit: type=1326 audit(1750804976.058:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.373914][ T2918] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.384955][ T2918] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 1 [ 101.426407][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 101.476926][ T27] audit: type=1326 audit(1750804976.068:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.500118][ T27] audit: type=1326 audit(1750804976.068:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.522620][ T27] audit: type=1326 audit(1750804976.068:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.545610][ T27] audit: type=1326 audit(1750804976.068:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.576323][ T27] audit: type=1326 audit(1750804976.068:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.672692][ T27] audit: type=1326 audit(1750804976.068:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.731450][ T27] audit: type=1326 audit(1750804976.068:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65bd8e929 code=0x7fc00000 [ 101.769623][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.179976][ T6078] ======================================================= [ 102.179976][ T6078] WARNING: The mand mount option has been deprecated and [ 102.179976][ T6078] and is ignored by this kernel. Remove the mand [ 102.179976][ T6078] option from the mount to silence this warning. [ 102.179976][ T6078] ======================================================= [ 102.215330][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.275278][ T965] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.555221][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 102.640034][ T965] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 102.712127][ T6078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.777033][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.845589][ T965] pvrusb2: Hardware description: Terratec Grabster AV400 [ 102.895381][ T965] pvrusb2: ********** [ 102.899456][ T965] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 102.988017][ T965] pvrusb2: Important functionality might not be entirely working. [ 103.012038][ T965] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 103.051767][ T965] pvrusb2: ********** [ 103.080037][ T2319] pvrusb2: Invalid write control endpoint [ 103.213568][ T2319] pvrusb2: Invalid write control endpoint [ 103.229784][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.258923][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.275919][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.298939][ T2319] pvrusb2: Device being rendered inoperable [ 103.311829][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 103.329019][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 103.350506][ T2319] pvrusb2: Attached sub-driver cx25840 [ 103.369404][ T6092] loop3: detected capacity change from 0 to 2048 [ 103.376123][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 103.392798][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 103.440626][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.475965][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 103.543400][ T6101] loop0: detected capacity change from 0 to 512 [ 103.795019][ T6101] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.72: corrupted inode contents [ 103.824038][ T6101] EXT4-fs error (device loop0): ext4_dirty_inode:6100: inode #16: comm syz.0.72: mark_inode_dirty error [ 103.854573][ T6101] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.72: corrupted inode contents [ 103.890546][ T6101] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.72: mark_inode_dirty error [ 103.923782][ T6101] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.72: corrupted inode contents [ 103.954739][ T6101] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 103.973315][ T6101] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.72: corrupted inode contents [ 103.990160][ T6101] EXT4-fs error (device loop0): ext4_truncate:4283: inode #16: comm syz.0.72: mark_inode_dirty error [ 104.016012][ T6101] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 104.029572][ T6101] EXT4-fs (loop0): 1 truncate cleaned up [ 104.043026][ T6101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.070132][ T6101] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.086947][ T3462] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:10: Failed to release dquot type 1 [ 104.252795][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.279727][ T6108] Bluetooth: MGMT ver 1.22 [ 104.664193][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.859565][ T9] usb 2-1: USB disconnect, device number 4 [ 106.047962][ T6124] loop1: detected capacity change from 0 to 1024 [ 106.206493][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.224427][ T6135] loop0: detected capacity change from 0 to 1024 [ 106.252440][ T6124] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.307089][ T6124] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 106.371778][ T6124] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 106.406551][ T6137] serio: Serial port ptm0 [ 106.447437][ T6124] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.447437][ T6124] [ 106.514428][ T6124] EXT4-fs (loop1): Total free blocks count 0 [ 106.526599][ T6124] EXT4-fs (loop1): Free/Dirty block details [ 106.538612][ T6124] EXT4-fs (loop1): free_blocks=4293918720 [ 106.706843][ T6124] EXT4-fs (loop1): dirty_blocks=16 [ 106.877551][ T6124] EXT4-fs (loop1): Block reservation details [ 107.078711][ T6124] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 107.941446][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.962322][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 108.114003][ T6150] usb usb1: usbfs: process 6150 (syz.0.89) did not claim interface 0 before use [ 108.506453][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 108.528789][ T6165] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 108.765151][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.870647][ T6173] loop3: detected capacity change from 0 to 1024 [ 109.095141][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 109.106142][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.124293][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.835359][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.842462][ T9] pvrusb2: ********** [ 109.846546][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.858186][ T9] pvrusb2: Important functionality might not be entirely working. [ 109.866127][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.879934][ T9] pvrusb2: ********** [ 110.041566][ T2319] pvrusb2: Invalid write control endpoint [ 110.211590][ T2319] pvrusb2: Invalid write control endpoint [ 110.233613][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 110.280184][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 110.296297][ T28] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 110.323083][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 110.337008][ T2319] pvrusb2: Device being rendered inoperable [ 110.343110][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 110.351308][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 110.371159][ T2319] pvrusb2: Attached sub-driver cx25840 [ 110.377331][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 110.392511][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 111.350767][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.403391][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.505226][ T28] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 111.526810][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.590993][ T28] usb 4-1: config 0 descriptor?? [ 112.117543][ T28] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 112.422896][ T28] usb 4-1: USB disconnect, device number 3 [ 112.570480][ T6199] loop2: detected capacity change from 0 to 256 [ 112.630905][ T6199] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xff48ad06, utbl_chksum : 0xe619d30d) [ 112.972016][ T6194] loop0: detected capacity change from 0 to 32768 [ 112.996013][ T6194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.101 (6194) [ 113.022983][ T9] usb 2-1: USB disconnect, device number 5 [ 113.193971][ T6194] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.236891][ T6194] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.267738][ T6194] BTRFS info (device loop0): setting nodatacow, compression disabled [ 113.293390][ T6194] BTRFS info (device loop0): max_inline at 0 [ 113.304726][ T6205] loop2: detected capacity change from 0 to 2048 [ 113.323019][ T6194] BTRFS info (device loop0): enabling disk space caching [ 113.362284][ T6194] BTRFS info (device loop0): turning off barriers [ 113.416908][ T6194] BTRFS info (device loop0): turning on flush-on-commit [ 113.426203][ T6194] BTRFS info (device loop0): doing ref verification [ 113.432900][ T6194] BTRFS info (device loop0): force clearing of disk cache [ 113.433228][ T6205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.445062][ T6194] BTRFS info (device loop0): enabling ssd optimizations [ 113.460082][ T6194] BTRFS info (device loop0): max_inline at 4096 [ 113.471452][ T6194] BTRFS info (device loop0): disk space caching is enabled [ 114.268598][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.285882][ T6194] BTRFS info (device loop0): auto enabling async discard [ 114.320942][ T6194] BTRFS info (device loop0): rebuilding free space tree [ 114.414867][ T6194] BTRFS info (device loop0): disabling free space tree [ 114.450503][ T6194] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.475036][ T6194] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.511942][ T6225] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 155648 lbcount: 159744 extent 129+158720 [ 114.665176][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 114.665191][ T27] audit: type=1800 audit(1750804989.488:48): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.101" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 114.695615][ T28] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.925244][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 115.051219][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.275187][ T28] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.373243][ T28] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 115.407082][ T6235] kernel read not supported for file /!sel (pid: 6235 comm: syz.2.111) [ 115.433614][ T27] audit: type=1800 audit(1750804990.258:49): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.111" name="!sel" dev="mqueue" ino=8403 res=0 errno=0 [ 115.457339][ T28] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 115.500437][ T28] usb 4-1: Product: syz [ 115.504727][ T28] usb 4-1: Manufacturer: syz [ 115.551685][ T28] usb 4-1: SerialNumber: syz [ 115.562373][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.615806][ T28] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 115.725731][ T5892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop0 scanned by udevd (5892) [ 115.858388][ T28] usb 4-1: USB disconnect, device number 4 [ 115.980477][ T28] appletouch 4-1:1.0: input: appletouch disconnected [ 116.163023][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.185287][ T5804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.375086][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 116.383332][ T5804] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.402635][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.430170][ T5804] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.458471][ T5804] pvrusb2: ********** [ 116.472929][ T5804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.490221][ T5804] pvrusb2: Important functionality might not be entirely working. [ 116.499805][ T5804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.552715][ T5804] pvrusb2: ********** [ 116.846087][ T2319] pvrusb2: Invalid write control endpoint [ 116.861820][ T6263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.873207][ T6263] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 116.942393][ T2319] pvrusb2: Invalid write control endpoint [ 116.969552][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 117.003042][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 117.036602][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.083979][ T2319] pvrusb2: Device being rendered inoperable [ 117.111929][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 117.140155][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 117.176260][ T2319] pvrusb2: Attached sub-driver cx25840 [ 117.181801][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.252824][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.788008][ T6274] loop3: detected capacity change from 0 to 4096 [ 118.751687][ T6281] input: syz0 as /devices/virtual/input/input6 [ 119.222638][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 119.416794][ T9] usb 2-1: USB disconnect, device number 6 [ 119.745078][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.942091][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 119.971209][ T28] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 119.993808][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.058943][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 120.222780][ T28] pvrusb2: Hardware description: Terratec Grabster AV400 [ 120.231550][ T28] pvrusb2: ********** [ 120.235646][ T28] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 120.245810][ T28] pvrusb2: Important functionality might not be entirely working. [ 120.253657][ T28] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 120.274985][ T28] pvrusb2: ********** [ 120.494245][ T2319] pvrusb2: Invalid write control endpoint [ 120.725589][ T2319] pvrusb2: Invalid write control endpoint [ 120.765059][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 120.800787][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 120.820210][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 120.831253][ T2319] pvrusb2: Device being rendered inoperable [ 120.837411][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 120.845723][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 120.861236][ T2319] pvrusb2: Attached sub-driver cx25840 [ 120.869897][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 120.880439][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 121.064419][ T6302] loop3: detected capacity change from 0 to 40427 [ 121.125143][ T6302] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 121.195595][ T6302] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.238013][ T6302] F2FS-fs (loop3): invalid crc value [ 121.367841][ T6302] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.713369][ T6302] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.728176][ T6302] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.715713][ T5779] usb 3-1: USB disconnect, device number 6 [ 122.766009][ T5804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.935296][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.985048][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 123.003444][ T5804] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 123.025634][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.042021][ T5804] pvrusb2: Hardware description: Terratec Grabster AV400 [ 123.062927][ T5804] pvrusb2: ********** [ 123.084979][ T5804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 123.125074][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 123.125364][ T5804] pvrusb2: Important functionality might not be entirely working. [ 123.143243][ T5804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 123.145939][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 123.170693][ T5804] pvrusb2: ********** [ 123.170688][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.211244][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 123.228835][ T9] pvrusb2: ********** [ 123.232984][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 123.263977][ T9] pvrusb2: Important functionality might not be entirely working. [ 123.267084][ T2319] pvrusb2: Invalid write control endpoint [ 123.288751][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 123.328312][ T9] pvrusb2: ********** [ 123.442487][ T2319] pvrusb2: Invalid write control endpoint [ 123.454510][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 123.479998][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 123.488440][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 123.499336][ T2319] pvrusb2: Device being rendered inoperable [ 123.507326][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 123.507772][ T6333] netlink: 'syz.3.138': attribute type 7 has an invalid length. [ 123.514563][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 123.530131][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 123.565348][ T2319] pvrusb2: Attached sub-driver cx25840 [ 123.581230][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 123.645095][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 123.661292][ T9] usb 1-1: USB disconnect, device number 4 [ 123.668669][ T2319] pvrusb2: Invalid write control endpoint [ 123.805825][ T2319] pvrusb2: Invalid write control endpoint [ 123.898809][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 123.969280][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 124.002141][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 124.077728][ T6342] netlink: 5 bytes leftover after parsing attributes in process `syz.3.144'. [ 124.116469][ T6342] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 124.123696][ T2319] pvrusb2: Device being rendered inoperable [ 124.135446][ T2319] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 124.149702][ T6342] 0ªî{X¹¦: entered allmulticast mode [ 124.160776][ T2319] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 124.183577][ T2319] pvrusb2: Attached sub-driver cx25840 [ 124.192348][ T6342] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 124.215852][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 124.228793][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 126.388269][ T965] usb 2-1: USB disconnect, device number 7 [ 126.605110][ T5858] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.805302][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 126.831758][ T5858] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 126.856103][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.902956][ T5858] pvrusb2: Hardware description: Terratec Grabster AV400 [ 126.910223][ T5858] pvrusb2: ********** [ 126.914883][ T5858] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 126.930175][ T5858] pvrusb2: Important functionality might not be entirely working. [ 126.940754][ T5858] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 126.952580][ T5858] pvrusb2: ********** [ 127.103115][ T2319] pvrusb2: Invalid write control endpoint [ 127.128437][ T6373] fuse: root generation should be zero [ 127.184336][ T2319] pvrusb2: Invalid write control endpoint [ 127.211563][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.252584][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.261275][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.281902][ T2319] pvrusb2: Device being rendered inoperable [ 127.294342][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.316105][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 127.335574][ T2319] pvrusb2: Attached sub-driver cx25840 [ 127.341168][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.353948][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.399685][ T965] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.625032][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 127.724311][ T965] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 127.751090][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.980944][ T965] pvrusb2: Hardware description: Terratec Grabster AV400 [ 128.106072][ T965] pvrusb2: ********** [ 128.134251][ T965] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 128.277873][ T965] pvrusb2: Important functionality might not be entirely working. [ 128.335124][ T965] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 128.507284][ T965] pvrusb2: ********** [ 128.610340][ T2319] pvrusb2: Invalid write control endpoint [ 128.824860][ T5804] usb 1-1: USB disconnect, device number 5 [ 129.019009][ T2319] pvrusb2: Invalid write control endpoint [ 129.074696][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.092752][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.109644][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.129964][ T2319] pvrusb2: Device being rendered inoperable [ 129.165664][ T2319] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 129.187723][ T2319] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 129.253214][ T2319] pvrusb2: Attached sub-driver cx25840 [ 129.275796][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.329873][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 129.646331][ T6390] loop1: detected capacity change from 0 to 32768 [ 129.683678][ T6390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.158 (6390) [ 129.805512][ T5858] usb 3-1: USB disconnect, device number 7 [ 129.808583][ T6390] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.864573][ T6390] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.882284][ T6390] BTRFS info (device loop1): using free space tree [ 129.935569][ T5804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.986510][ T6390] BTRFS info (device loop1): enabling ssd optimizations [ 129.993540][ T6390] BTRFS info (device loop1): auto enabling async discard [ 130.115645][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 130.127817][ T5804] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.137359][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.161237][ T5804] pvrusb2: Hardware description: Terratec Grabster AV400 [ 130.172305][ T5804] pvrusb2: ********** [ 130.176454][ T5804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 130.186809][ T5804] pvrusb2: Important functionality might not be entirely working. [ 130.194683][ T5804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 130.214464][ T5804] pvrusb2: ********** [ 130.364034][ T2319] pvrusb2: Invalid write control endpoint [ 130.491653][ T70] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 130.591594][ T2319] pvrusb2: Invalid write control endpoint [ 130.618095][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 130.643715][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 130.651908][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 130.662008][ T2319] pvrusb2: Device being rendered inoperable [ 130.668108][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 130.676509][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 130.686276][ T2319] pvrusb2: Attached sub-driver cx25840 [ 130.691805][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 130.707445][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 130.748161][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.174288][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.182973][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.414273][ T5858] usb 1-1: USB disconnect, device number 6 [ 135.600497][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 136.777627][ T6465] loop1: detected capacity change from 0 to 32768 [ 136.791239][ T6465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.172 (6465) [ 136.821295][ T6465] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.854690][ T6465] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.862453][ T6470] syz.0.174 uses obsolete (PF_INET,SOCK_PACKET) [ 136.878306][ T6465] BTRFS info (device loop1): using free space tree [ 137.009425][ T6465] BTRFS info (device loop1): enabling ssd optimizations [ 137.016741][ T6465] BTRFS info (device loop1): auto enabling async discard [ 137.276699][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.595542][ T6495] loop1: detected capacity change from 0 to 512 [ 137.606653][ T6495] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 137.620066][ T6495] EXT4-fs (loop1): invalid journal inode [ 137.626148][ T6495] EXT4-fs (loop1): can't get journal size [ 137.683310][ T6495] EXT4-fs (loop1): 1 truncate cleaned up [ 137.691012][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.888334][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.200715][ T1055] null_blk: rq ffff8880226a8000 timed out [ 140.207327][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.217957][ T1055] null_blk: rq ffff8880226a8180 timed out [ 140.223695][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.234601][ T1055] null_blk: rq ffff8880226a8300 timed out [ 140.240554][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.251356][ T1055] null_blk: rq ffff8880226a8480 timed out [ 140.257362][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.267876][ T1055] null_blk: rq ffff8880226a8600 timed out [ 140.273600][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.284200][ T1055] null_blk: rq ffff8880226a8780 timed out [ 140.289982][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.301065][ T1055] null_blk: rq ffff8880226a8900 timed out [ 140.306883][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.317402][ T1055] null_blk: rq ffff8880226a8a80 timed out [ 140.323140][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.337131][ T1055] null_blk: rq ffff8880226a8c00 timed out [ 140.342958][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.353634][ T1055] null_blk: rq ffff8880226a8d80 timed out [ 140.359706][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 140.370553][ T1055] null_blk: rq ffff8880226a8f00 timed out [ 140.376398][ T1055] null_blk: rq ffff8880226a9080 timed out [ 140.382166][ T1055] null_blk: rq ffff8880226a9200 timed out [ 140.388544][ T1055] null_blk: rq ffff8880226a9380 timed out [ 140.394297][ T1055] null_blk: rq ffff8880226a9500 timed out [ 140.400652][ T1055] null_blk: rq ffff8880226a9680 timed out [ 140.407182][ T1055] null_blk: rq ffff8880226a9800 timed out [ 140.412942][ T1055] null_blk: rq ffff8880226a9980 timed out [ 140.418799][ T1055] null_blk: rq ffff8880226a9b00 timed out [ 140.424535][ T1055] null_blk: rq ffff8880226a9c80 timed out [ 140.430345][ T1055] null_blk: rq ffff8880226a9e00 timed out [ 140.440604][ T1055] null_blk: rq ffff8880226a9f80 timed out [ 140.446448][ T1055] null_blk: rq ffff8880226aa100 timed out [ 140.452187][ T1055] null_blk: rq ffff8880226aa280 timed out [ 140.459591][ T1055] null_blk: rq ffff8880226aa400 timed out [ 140.465413][ T1055] null_blk: rq ffff8880226aa580 timed out [ 140.471154][ T1055] null_blk: rq ffff8880226aa700 timed out [ 140.477023][ T1055] null_blk: rq ffff8880226aa880 timed out [ 140.482839][ T1055] null_blk: rq ffff8880226aaa00 timed out [ 140.488700][ T1055] null_blk: rq ffff8880226aab80 timed out [ 140.494440][ T1055] null_blk: rq ffff8880226aad00 timed out [ 140.500811][ T1055] null_blk: rq ffff8880226aae80 timed out [ 140.508888][ T1055] null_blk: rq ffff8880226ab000 timed out [ 140.514672][ T1055] null_blk: rq ffff8880226ab180 timed out [ 140.520481][ T1055] null_blk: rq ffff8880226ab300 timed out [ 140.526274][ T1055] null_blk: rq ffff8880226ab480 timed out [ 140.532015][ T1055] null_blk: rq ffff8880226ab600 timed out [ 140.537787][ T1055] null_blk: rq ffff8880226ab780 timed out [ 140.543543][ T1055] null_blk: rq ffff8880226ab900 timed out [ 140.549463][ T1055] null_blk: rq ffff8880226aba80 timed out [ 140.607266][ T1055] null_blk: rq ffff8880226abc00 timed out [ 140.613129][ T1055] null_blk: rq ffff8880226abd80 timed out [ 140.618947][ T1055] null_blk: rq ffff8880226abf00 timed out [ 140.624684][ T1055] null_blk: rq ffff8880226ac080 timed out [ 140.630491][ T1055] null_blk: rq ffff8880226ac200 timed out [ 140.636316][ T1055] null_blk: rq ffff8880226ac380 timed out [ 140.642061][ T1055] null_blk: rq ffff8880226ac500 timed out [ 140.647963][ T1055] null_blk: rq ffff8880226ac680 timed out [ 140.653698][ T1055] null_blk: rq ffff8880226ac800 timed out [ 140.659473][ T1055] null_blk: rq ffff8880226ac980 timed out [ 140.665259][ T1055] null_blk: rq ffff8880226acb00 timed out [ 140.671023][ T1055] null_blk: rq ffff8880226acc80 timed out [ 140.677087][ T1055] null_blk: rq ffff8880226ace00 timed out [ 140.682820][ T1055] null_blk: rq ffff8880226acf80 timed out [ 140.688611][ T1055] null_blk: rq ffff8880226ad100 timed out [ 140.694361][ T1055] null_blk: rq ffff8880226ad280 timed out [ 140.700188][ T1055] null_blk: rq ffff8880226ad400 timed out [ 140.706534][ T1055] null_blk: rq ffff8880226ad580 timed out [ 140.712273][ T1055] null_blk: rq ffff8880226ad700 timed out [ 140.718056][ T1055] null_blk: rq ffff8880226ad880 timed out [ 140.723788][ T1055] null_blk: rq ffff8880226ada00 timed out [ 140.729573][ T1055] null_blk: rq ffff8880226adb80 timed out [ 140.735351][ T1055] null_blk: rq ffff8880226add00 timed out [ 140.741087][ T1055] null_blk: rq ffff8880226ade80 timed out [ 144.249399][ T27] audit: type=1326 audit(1750805275.090:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.271506][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.305864][ T27] audit: type=1326 audit(1750805275.090:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.391260][ T27] audit: type=1326 audit(1750805275.090:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.468055][ T27] audit: type=1326 audit(1750805275.120:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.511051][ T27] audit: type=1326 audit(1750805275.120:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.576164][ T27] audit: type=1326 audit(1750805275.130:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.703192][ T27] audit: type=1326 audit(1750805275.140:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.712800][ T6600] loop1: detected capacity change from 0 to 1024 [ 144.786150][ T27] audit: type=1326 audit(1750805275.140:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 144.806618][ T6600] EXT4-fs: Ignoring removed nobh option [ 144.824411][ T6600] EXT4-fs: Ignoring removed bh option [ 144.855240][ T6600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.912168][ T27] audit: type=1326 audit(1750805275.150:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 145.013586][ T6600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.020098][ T27] audit: type=1326 audit(1750805275.150:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df0b8e929 code=0x7ffc0000 [ 145.211017][ T6600] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.209: Allocating blocks 497-513 which overlap fs metadata [ 145.301001][ T6600] EXT4-fs (loop1): pa ffff888056f49658: logic 256, phys. 385, len 8 [ 145.309739][ T6600] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 145.749419][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.425119][ T28] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.645251][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 146.656310][ T28] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 146.672478][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.691909][ T28] pvrusb2: Hardware description: Terratec Grabster AV400 [ 146.699509][ T28] pvrusb2: ********** [ 146.703819][ T28] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 146.715192][ T28] pvrusb2: Important functionality might not be entirely working. [ 146.723257][ T28] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 146.735840][ T28] pvrusb2: ********** [ 146.891911][ T2319] pvrusb2: Invalid write control endpoint [ 147.225249][ T2319] pvrusb2: Invalid write control endpoint [ 147.231009][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 147.314050][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 147.323136][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 147.337963][ T2319] pvrusb2: Device being rendered inoperable [ 147.344258][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 147.352309][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 147.383369][ T2319] pvrusb2: Attached sub-driver cx25840 [ 147.400128][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 147.411202][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.773946][ T6650] loop0: detected capacity change from 0 to 4096 [ 148.837503][ T6651] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.317381][ T24] null_blk: rq ffff8880226a8000 timed out [ 149.323340][ T24] blk_print_req_error: 54 callbacks suppressed [ 149.323354][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.341294][ T24] null_blk: rq ffff8880226a8180 timed out [ 149.347128][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.357644][ T24] null_blk: rq ffff8880226a8300 timed out [ 149.363411][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.375139][ T24] null_blk: rq ffff8880226a8480 timed out [ 149.380995][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.391830][ T24] null_blk: rq ffff8880226a8600 timed out [ 149.397717][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.409205][ T24] null_blk: rq ffff8880226a8780 timed out [ 149.415056][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.425665][ T24] null_blk: rq ffff8880226a8900 timed out [ 149.431500][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.442285][ T24] null_blk: rq ffff8880226a8a80 timed out [ 149.448084][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.460527][ T24] null_blk: rq ffff8880226a8c00 timed out [ 149.466377][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.477445][ T24] null_blk: rq ffff8880226a8d80 timed out [ 149.484215][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 149.494811][ T24] null_blk: rq ffff8880226a8f00 timed out [ 149.500663][ T24] null_blk: rq ffff8880226a9080 timed out [ 149.506704][ T24] null_blk: rq ffff8880226a9200 timed out [ 149.513098][ T24] null_blk: rq ffff8880226a9380 timed out [ 149.518909][ T24] null_blk: rq ffff8880226a9500 timed out [ 149.524721][ T24] null_blk: rq ffff8880226a9680 timed out [ 149.531881][ T24] null_blk: rq ffff8880226a9800 timed out [ 149.538883][ T24] null_blk: rq ffff8880226a9980 timed out [ 149.545198][ T24] null_blk: rq ffff8880226a9b00 timed out [ 149.550996][ T24] null_blk: rq ffff8880226a9c80 timed out [ 149.556853][ T24] null_blk: rq ffff8880226a9e00 timed out [ 149.562597][ T24] null_blk: rq ffff8880226a9f80 timed out [ 149.568453][ T24] null_blk: rq ffff8880226aa100 timed out [ 149.574259][ T24] null_blk: rq ffff8880226aa280 timed out [ 149.582367][ T24] null_blk: rq ffff8880226aa400 timed out [ 149.588283][ T24] null_blk: rq ffff8880226aa580 timed out [ 149.594050][ T24] null_blk: rq ffff8880226aa700 timed out [ 149.599891][ T24] null_blk: rq ffff8880226aa880 timed out [ 149.604594][ T965] usb 2-1: USB disconnect, device number 8 [ 149.605803][ T24] null_blk: rq ffff8880226aaa00 timed out [ 149.618447][ T24] null_blk: rq ffff8880226aab80 timed out [ 149.624267][ T24] null_blk: rq ffff8880226aad00 timed out [ 149.630149][ T24] null_blk: rq ffff8880226aae80 timed out [ 149.644021][ T24] null_blk: rq ffff8880226ab000 timed out [ 149.650012][ T24] null_blk: rq ffff8880226ab180 timed out [ 149.655942][ T24] null_blk: rq ffff8880226ab300 timed out [ 149.662075][ T24] null_blk: rq ffff8880226ab480 timed out [ 149.667932][ T24] null_blk: rq ffff8880226ab600 timed out [ 149.673746][ T24] null_blk: rq ffff8880226ab780 timed out [ 149.679597][ T24] null_blk: rq ffff8880226ab900 timed out [ 149.685485][ T24] null_blk: rq ffff8880226aba80 timed out [ 149.691318][ T24] null_blk: rq ffff8880226abc00 timed out [ 150.797421][ T6671] loop3: detected capacity change from 0 to 1024 [ 151.129412][ T6658] loop0: detected capacity change from 0 to 32768 [ 151.530567][ T6658] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 151.610019][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 151.610036][ T27] audit: type=1804 audit(1750805282.440:69): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.229" name="/newroot/65/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 151.695092][ T27] audit: type=1804 audit(1750805282.490:70): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.229" name="/newroot/65/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 151.750493][ T27] audit: type=1804 audit(1750805282.490:71): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.229" name="/newroot/65/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 151.928586][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 152.672713][ T6705] loop1: detected capacity change from 0 to 128 [ 152.818072][ T6705] warning: `syz.1.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.129875][ T6723] binder: BINDER_SET_CONTEXT_MGR already set [ 155.163223][ T6723] binder: 6722:6723 ioctl 4018620d 200000000040 returned -16 [ 156.225282][ T24] null_blk: rq ffff8880226a8000 timed out [ 156.231090][ T24] blk_print_req_error: 31 callbacks suppressed [ 156.231099][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.247875][ T24] null_blk: rq ffff8880226a8180 timed out [ 156.253614][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.264215][ T24] null_blk: rq ffff8880226a8300 timed out [ 156.270649][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.281227][ T24] null_blk: rq ffff8880226a8480 timed out [ 156.286990][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.297461][ T24] null_blk: rq ffff8880226a8600 timed out [ 156.303189][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.313757][ T24] null_blk: rq ffff8880226a8780 timed out [ 156.319524][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.330116][ T24] null_blk: rq ffff8880226a8900 timed out [ 156.335898][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.346422][ T24] null_blk: rq ffff8880226a8a80 timed out [ 156.352149][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.363453][ T24] null_blk: rq ffff8880226a8c00 timed out [ 156.369276][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.380519][ T24] null_blk: rq ffff8880226a8d80 timed out [ 156.386448][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 156.397099][ T24] null_blk: rq ffff8880226a8f00 timed out [ 156.402948][ T24] null_blk: rq ffff8880226a9080 timed out [ 156.405296][ T5821] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.408802][ T24] null_blk: rq ffff8880226a9200 timed out [ 156.422066][ T24] null_blk: rq ffff8880226a9380 timed out [ 156.427907][ T24] null_blk: rq ffff8880226a9500 timed out [ 156.433696][ T24] null_blk: rq ffff8880226a9680 timed out [ 156.440255][ T24] null_blk: rq ffff8880226a9800 timed out [ 156.446099][ T24] null_blk: rq ffff8880226a9980 timed out [ 156.451878][ T24] null_blk: rq ffff8880226a9b00 timed out [ 156.457755][ T24] null_blk: rq ffff8880226a9c80 timed out [ 156.463551][ T24] null_blk: rq ffff8880226a9e00 timed out [ 156.469350][ T24] null_blk: rq ffff8880226a9f80 timed out [ 156.475701][ T24] null_blk: rq ffff8880226aa100 timed out [ 156.481464][ T24] null_blk: rq ffff8880226aa280 timed out [ 156.487898][ T24] null_blk: rq ffff8880226aa400 timed out [ 156.493679][ T24] null_blk: rq ffff8880226aa580 timed out [ 156.499470][ T24] null_blk: rq ffff8880226aa700 timed out [ 156.505258][ T24] null_blk: rq ffff8880226aa880 timed out [ 156.510993][ T24] null_blk: rq ffff8880226aaa00 timed out [ 156.516805][ T24] null_blk: rq ffff8880226aab80 timed out [ 156.522565][ T24] null_blk: rq ffff8880226aad00 timed out [ 156.528463][ T24] null_blk: rq ffff8880226aae80 timed out [ 156.535584][ T24] null_blk: rq ffff8880226ab000 timed out [ 156.541455][ T24] null_blk: rq ffff8880226ab180 timed out [ 156.547423][ T24] null_blk: rq ffff8880226ab300 timed out [ 156.553173][ T24] null_blk: rq ffff8880226ab480 timed out [ 156.559165][ T24] null_blk: rq ffff8880226ab600 timed out [ 156.565510][ T24] null_blk: rq ffff8880226ab780 timed out [ 156.571363][ T24] null_blk: rq ffff8880226ab900 timed out [ 156.578520][ T24] null_blk: rq ffff8880226aba80 timed out [ 156.584402][ T24] null_blk: rq ffff8880226abc00 timed out [ 156.835264][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 156.870626][ T5821] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 156.890647][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.927951][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 156.951154][ T5821] pvrusb2: ********** [ 156.955801][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 156.969349][ T5821] pvrusb2: Important functionality might not be entirely working. [ 156.981115][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 156.995270][ T5821] pvrusb2: ********** [ 157.164083][ T2319] pvrusb2: Invalid write control endpoint [ 157.916900][ T2319] pvrusb2: Invalid write control endpoint [ 157.955393][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 157.969853][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 157.981187][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 158.564272][ T2319] pvrusb2: Device being rendered inoperable [ 158.621369][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 158.675275][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 158.695693][ T2319] pvrusb2: Attached sub-driver cx25840 [ 158.701311][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 158.879410][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 160.668790][ T5821] usb 3-1: USB disconnect, device number 8 [ 161.251973][ T6782] syz_tun: entered promiscuous mode [ 161.260645][ T6782] vlan2: entered promiscuous mode [ 162.765083][ T5821] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.025135][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 163.097320][ T5821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 163.140792][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.373116][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 163.380425][ T5821] pvrusb2: ********** [ 163.384439][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 163.401151][ T5821] pvrusb2: Important functionality might not be entirely working. [ 163.410558][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 163.435035][ T5821] pvrusb2: ********** [ 163.441221][ T2319] pvrusb2: Invalid write control endpoint [ 163.708380][ T2319] pvrusb2: Invalid write control endpoint [ 163.739732][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 163.775639][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.812765][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.888068][ T2319] pvrusb2: Device being rendered inoperable [ 163.908753][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 163.942599][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 163.971001][ T2319] pvrusb2: Attached sub-driver cx25840 [ 163.976901][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.987699][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 164.636580][ T27] audit: type=1400 audit(1750805295.470:72): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B62 pid=6818 comm="syz.2.275" [ 164.661561][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.628756][ T28] usb 4-1: USB disconnect, device number 5 [ 167.148578][ T6842] loop3: detected capacity change from 0 to 1024 [ 167.369742][ T6842] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 170.022451][ T6852] binder: 6850:6852 unknown command 1074553619 [ 170.050761][ T6852] binder: 6850:6852 ioctl c0306201 200000000540 returned -22 [ 170.474844][ T6857] loop2: detected capacity change from 0 to 64 [ 171.258945][ T6875] loop2: detected capacity change from 0 to 8 [ 171.747350][ T965] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 171.980622][ T965] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 171.991081][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.015567][ T965] usb 3-1: config 0 descriptor?? [ 173.067057][ T965] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.084835][ T965] asix: probe of 3-1:0.0 failed with error -71 [ 173.097864][ T965] usb 3-1: USB disconnect, device number 9 [ 173.173324][ T6879] loop3: detected capacity change from 0 to 128 [ 173.239898][ T6879] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.263739][ T6879] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.944806][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.145634][ T6888] tipc: Started in network mode [ 174.150776][ T6888] tipc: Node identity ffffa848, cluster identity 4711 [ 174.160288][ T6888] tipc: Node number set to 4294944840 [ 174.746173][ T6886] loop3: detected capacity change from 0 to 32768 [ 174.757120][ T6886] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (6886) [ 174.843682][ T6886] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 174.936338][ T6886] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 174.984865][ T6886] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 175.005032][ T6886] BTRFS info (device loop3): use zstd compression, level 3 [ 175.022233][ T6886] BTRFS info (device loop3): using free space tree [ 175.116660][ T6886] BTRFS info (device loop3): enabling ssd optimizations [ 175.150485][ T6886] BTRFS info (device loop3): auto enabling async discard [ 175.430558][ T27] audit: type=1800 audit(1750805306.270:73): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 177.081899][ T5777] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 177.385156][ T1055] null_blk: rq ffff8880226a8000 timed out [ 177.391020][ T1055] blk_print_req_error: 31 callbacks suppressed [ 177.391034][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.408299][ T1055] null_blk: rq ffff8880226a8180 timed out [ 177.414071][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.425879][ T1055] null_blk: rq ffff8880226a8300 timed out [ 177.431703][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.442338][ T1055] null_blk: rq ffff8880226a8480 timed out [ 177.448272][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.459099][ T1055] null_blk: rq ffff8880226a8600 timed out [ 177.464987][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.476357][ T1055] null_blk: rq ffff8880226a8780 timed out [ 177.482139][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.493300][ T1055] null_blk: rq ffff8880226a8900 timed out [ 177.499163][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.509826][ T1055] null_blk: rq ffff8880226a8a80 timed out [ 177.516377][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.528188][ T1055] null_blk: rq ffff8880226a8c00 timed out [ 177.533973][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.544552][ T1055] null_blk: rq ffff8880226a8d80 timed out [ 177.550390][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 177.563799][ T1055] null_blk: rq ffff8880226a8f00 timed out [ 177.570813][ T1055] null_blk: rq ffff8880226a9080 timed out [ 177.576904][ T1055] null_blk: rq ffff8880226a9200 timed out [ 177.582708][ T1055] null_blk: rq ffff8880226a9380 timed out [ 177.588564][ T1055] null_blk: rq ffff8880226a9500 timed out [ 177.594578][ T1055] null_blk: rq ffff8880226a9680 timed out [ 177.602217][ T1055] null_blk: rq ffff8880226a9800 timed out [ 177.609223][ T1055] null_blk: rq ffff8880226a9980 timed out [ 177.615351][ T1055] null_blk: rq ffff8880226a9b00 timed out [ 177.621404][ T1055] null_blk: rq ffff8880226a9c80 timed out [ 177.627895][ T1055] null_blk: rq ffff8880226a9e00 timed out [ 177.635890][ T1055] null_blk: rq ffff8880226a9f80 timed out [ 177.641703][ T1055] null_blk: rq ffff8880226aa100 timed out [ 177.648104][ T1055] null_blk: rq ffff8880226aa280 timed out [ 177.655664][ T1055] null_blk: rq ffff8880226aa400 timed out [ 177.661547][ T1055] null_blk: rq ffff8880226aa580 timed out [ 177.667439][ T1055] null_blk: rq ffff8880226aa700 timed out [ 177.673904][ T1055] null_blk: rq ffff8880226aa880 timed out [ 177.679789][ T1055] null_blk: rq ffff8880226aaa00 timed out [ 177.685949][ T1055] null_blk: rq ffff8880226aab80 timed out [ 177.691738][ T1055] null_blk: rq ffff8880226aad00 timed out [ 177.697592][ T1055] null_blk: rq ffff8880226aae80 timed out [ 177.861114][ T1055] null_blk: rq ffff8880226ab000 timed out [ 177.867746][ T1055] null_blk: rq ffff8880226ab180 timed out [ 177.873557][ T1055] null_blk: rq ffff8880226ab300 timed out [ 177.880867][ T1055] null_blk: rq ffff8880226ab480 timed out [ 177.886894][ T1055] null_blk: rq ffff8880226ab600 timed out [ 177.892707][ T1055] null_blk: rq ffff8880226ab780 timed out [ 177.898672][ T1055] null_blk: rq ffff8880226ab900 timed out [ 177.904468][ T1055] null_blk: rq ffff8880226aba80 timed out [ 177.961104][ T1055] null_blk: rq ffff8880226abc00 timed out [ 178.115628][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.425209][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 178.487176][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 178.528777][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.650805][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 178.714841][ T5892] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5892) [ 178.735374][ T6937] loop2: detected capacity change from 0 to 1024 [ 178.747608][ T23] pvrusb2: ********** [ 178.751668][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 178.753441][ T6937] EXT4-fs: Ignoring removed orlov option [ 178.843192][ T23] pvrusb2: Important functionality might not be entirely working. [ 178.865017][ T6937] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 178.880717][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 178.915974][ T23] pvrusb2: ********** [ 178.938951][ T2319] pvrusb2: Invalid write control endpoint [ 179.965981][ T2319] pvrusb2: Invalid write control endpoint [ 179.971913][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 179.981808][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 179.990062][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.024688][ T2319] pvrusb2: Device being rendered inoperable [ 180.048383][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 180.065548][ T6947] process 'syz.3.300' launched './file0' with NULL argv: empty string added [ 180.085801][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 180.135943][ T2319] pvrusb2: Attached sub-driver cx25840 [ 180.159136][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.193777][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.080074][ T6961] loop3: detected capacity change from 0 to 256 [ 181.105440][ T6961] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 181.265294][ T5821] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.487880][ T5821] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 181.530426][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.564090][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.613407][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.625971][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.644557][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.657847][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.668669][ T6969] loop3: detected capacity change from 0 to 256 [ 181.689009][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.709743][ T6969] FAT-fs (loop3): Directory bread(block 64) failed [ 181.716845][ T6969] FAT-fs (loop3): Directory bread(block 65) failed [ 181.723513][ T6969] FAT-fs (loop3): Directory bread(block 66) failed [ 181.730360][ T6969] FAT-fs (loop3): Directory bread(block 67) failed [ 181.737111][ T6969] FAT-fs (loop3): Directory bread(block 68) failed [ 181.743648][ T6969] FAT-fs (loop3): Directory bread(block 69) failed [ 181.750317][ T6969] FAT-fs (loop3): Directory bread(block 70) failed [ 181.756972][ T6969] FAT-fs (loop3): Directory bread(block 71) failed [ 181.763633][ T6969] FAT-fs (loop3): Directory bread(block 72) failed [ 181.770795][ T6969] FAT-fs (loop3): Directory bread(block 73) failed [ 181.785441][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.797319][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.806725][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.815880][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.826965][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.018481][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.028258][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.039448][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.048136][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.057772][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.069225][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.098989][ T27] audit: type=1326 audit(1750805312.940:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0698e929 code=0x7fc00000 [ 182.102390][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.695146][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.708222][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.717184][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.735011][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.746646][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.756838][ T5821] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 182.766137][ T5821] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 182.774512][ T5821] usb 3-1: Product: syz [ 182.785112][ T5821] usb 3-1: Manufacturer: syz [ 182.785179][ T27] audit: type=1326 audit(1750805312.940:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fae0698e929 code=0x7fc00000 [ 182.789754][ T5821] usb 3-1: SerialNumber: syz [ 182.846328][ T5821] usb 3-1: config 0 descriptor?? [ 182.897626][ T5821] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 182.921514][ T27] audit: type=1326 audit(1750805312.940:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0698e929 code=0x7fc00000 [ 183.189879][ T27] audit: type=1326 audit(1750805312.940:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0698e929 code=0x7fc00000 [ 183.322847][ T27] audit: type=1326 audit(1750805312.940:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0698e929 code=0x7fc00000 [ 184.066166][ T27] audit: type=1326 audit(1750805312.940:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0698e929 code=0x7fc00000 [ 185.102808][ T28] usb 3-1: USB disconnect, device number 10 [ 185.178323][ T28] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 185.335348][ T5858] usb 2-1: USB disconnect, device number 9 [ 186.603441][ T6995] xt_hashlimit: size too large, truncated to 1048576 [ 186.781061][ T6999] loop3: detected capacity change from 0 to 128 [ 188.356662][ T7012] loop3: detected capacity change from 0 to 256 [ 188.462204][ T7012] loop3: detected capacity change from 0 to 512 [ 188.485787][ T7012] EXT4-fs: Ignoring removed bh option [ 188.491286][ T7012] ext4: Unknown parameter 'smackfsroot' [ 188.497784][ T7015] syzkaller0: entered promiscuous mode [ 188.503464][ T7015] syzkaller0: entered allmulticast mode [ 193.821925][ T7061] loop3: detected capacity change from 0 to 2048 [ 193.912458][ T7061] loop3: p1 < > p3 [ 194.016075][ T7061] loop3: p3 size 134217728 extends beyond EOD, truncated [ 194.552133][ T5141] loop3: p1 < > p3 [ 194.584399][ T5141] loop3: p3 size 134217728 extends beyond EOD, truncated [ 194.623903][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.630611][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.780244][ T7073] loop7: detected capacity change from 0 to 16384 [ 196.033699][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 196.051769][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 196.095152][ T5858] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.016917][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 197.034596][ T5858] usb 2-1: config 0 has no interfaces? [ 197.046587][ T5858] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 197.057099][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.065618][ T5858] usb 2-1: Product: syz [ 197.080593][ T5858] usb 2-1: Manufacturer: syz [ 197.085686][ T5858] usb 2-1: SerialNumber: syz [ 197.093785][ T5858] usb 2-1: config 0 descriptor?? [ 197.445077][ T7073] blk_print_req_error: 31 callbacks suppressed [ 197.445094][ T7073] I/O error, dev loop7, sector 2856 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 197.482170][ T5858] usb 2-1: USB disconnect, device number 10 [ 198.403081][ T7100] loop3: detected capacity change from 0 to 128 [ 198.565430][ T5821] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.616174][ T7100] EXT4-fs (loop3): Test dummy encryption mode enabled [ 198.837064][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 198.943598][ T7100] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.007141][ T5821] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 199.059584][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.088955][ T7100] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.183719][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 199.235262][ T5821] pvrusb2: ********** [ 199.257509][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 199.294418][ T5821] pvrusb2: Important functionality might not be entirely working. [ 199.325601][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 199.582411][ T5821] pvrusb2: ********** [ 199.694598][ T2319] pvrusb2: Invalid write control endpoint [ 200.237614][ T2319] pvrusb2: Invalid write control endpoint [ 200.243484][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 200.298791][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 200.340353][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 200.357901][ T7111] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 200.454933][ T2319] pvrusb2: Device being rendered inoperable [ 200.473680][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.534316][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 200.586592][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 200.661806][ T2319] pvrusb2: Attached sub-driver cx25840 [ 200.762495][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 200.830872][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 201.150198][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.347'. [ 201.885043][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 201.885452][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 201.891187][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 202.131761][ T7150] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.352'. [ 202.181044][ T7150] netlink: 584 bytes leftover after parsing attributes in process `syz.0.352'. [ 202.535104][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.731880][ T5814] usb 3-1: USB disconnect, device number 11 [ 202.757699][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.803217][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.846287][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.876448][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.894738][ T23] usb 1-1: SerialNumber: syz [ 204.858615][ T23] usb 1-1: 0:2 : does not exist [ 204.863673][ T23] usb 1-1: unit 255 not found! [ 204.899948][ T23] usb 1-1: 5:0: cannot get min/max values for control 1 (id 5) [ 205.507784][ T23] usb 1-1: USB disconnect, device number 7 [ 206.431591][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.766083][ T7191] loop2: detected capacity change from 0 to 32768 [ 207.833360][ T7191] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 208.638382][ T5892] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 208.738289][ T7224] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.845029][ T5779] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.228950][ T7231] loop0: detected capacity change from 0 to 64 [ 210.831077][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.843124][ T5779] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 210.853150][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.869218][ T5779] usb 3-1: config 0 descriptor?? [ 210.879267][ T5779] pwc: Askey VC010 type 2 USB webcam detected. [ 212.054799][ T5779] pwc: recv_control_msg error -32 req 02 val 2b00 [ 212.180342][ T5779] pwc: recv_control_msg error -32 req 02 val 2700 [ 212.250213][ T5779] pwc: recv_control_msg error -32 req 02 val 2c00 [ 212.289737][ T5779] pwc: recv_control_msg error -32 req 04 val 1000 [ 212.297793][ T5779] pwc: recv_control_msg error -32 req 04 val 1300 [ 212.315152][ T5779] pwc: recv_control_msg error -32 req 04 val 1400 [ 212.326197][ T5779] pwc: recv_control_msg error -32 req 02 val 2000 [ 212.336540][ T5779] pwc: recv_control_msg error -32 req 02 val 2100 [ 212.357843][ T5779] pwc: recv_control_msg error -32 req 04 val 1500 [ 212.370177][ T5779] pwc: recv_control_msg error -32 req 02 val 2500 [ 212.447985][ T7244] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.456624][ T7242] syzkaller0: entered promiscuous mode [ 212.464538][ T7242] syzkaller0: entered allmulticast mode [ 212.586010][ T5779] pwc: recv_control_msg error -71 req 02 val 2600 [ 212.603612][ T5779] pwc: recv_control_msg error -71 req 02 val 2900 [ 212.610897][ T5779] pwc: recv_control_msg error -71 req 02 val 2800 [ 212.618763][ T5779] pwc: recv_control_msg error -71 req 04 val 1100 [ 212.631040][ T5779] pwc: recv_control_msg error -71 req 04 val 1200 [ 212.659573][ T5779] pwc: Registered as video103. [ 212.668128][ T5779] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 212.715846][ T5779] usb 3-1: USB disconnect, device number 12 [ 213.356295][ T1055] null_blk: rq ffff8880226a8000 timed out [ 213.362105][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.372864][ T1055] null_blk: rq ffff8880226a8180 timed out [ 213.378737][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.389380][ T1055] null_blk: rq ffff8880226a8300 timed out [ 213.395242][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.405799][ T1055] null_blk: rq ffff8880226a8480 timed out [ 213.412173][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.423107][ T1055] null_blk: rq ffff8880226a8600 timed out [ 213.428992][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.439621][ T1055] null_blk: rq ffff8880226a8780 timed out [ 213.445483][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.456100][ T1055] null_blk: rq ffff8880226a8900 timed out [ 213.461861][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.472411][ T1055] null_blk: rq ffff8880226a8a80 timed out [ 213.478799][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.490071][ T1055] null_blk: rq ffff8880226a8c00 timed out [ 213.495913][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.506474][ T1055] null_blk: rq ffff8880226a8d80 timed out [ 213.512758][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 213.523341][ T1055] null_blk: rq ffff8880226a8f00 timed out [ 213.529824][ T1055] null_blk: rq ffff8880226a9080 timed out [ 213.535697][ T1055] null_blk: rq ffff8880226a9200 timed out [ 213.541458][ T1055] null_blk: rq ffff8880226a9380 timed out [ 213.547315][ T1055] null_blk: rq ffff8880226a9500 timed out [ 213.553079][ T1055] null_blk: rq ffff8880226a9680 timed out [ 213.559743][ T1055] null_blk: rq ffff8880226a9800 timed out [ 213.565622][ T1055] null_blk: rq ffff8880226a9980 timed out [ 213.571399][ T1055] null_blk: rq ffff8880226a9b00 timed out [ 213.577226][ T1055] null_blk: rq ffff8880226a9c80 timed out [ 213.583004][ T1055] null_blk: rq ffff8880226a9e00 timed out [ 213.589013][ T1055] null_blk: rq ffff8880226a9f80 timed out [ 213.594795][ T1055] null_blk: rq ffff8880226aa100 timed out [ 213.600680][ T1055] null_blk: rq ffff8880226aa280 timed out [ 213.607148][ T1055] null_blk: rq ffff8880226aa400 timed out [ 213.645209][ T1055] null_blk: rq ffff8880226aa580 timed out [ 213.651051][ T1055] null_blk: rq ffff8880226aa700 timed out [ 213.656972][ T1055] null_blk: rq ffff8880226aa880 timed out [ 213.662753][ T1055] null_blk: rq ffff8880226aaa00 timed out [ 213.668668][ T1055] null_blk: rq ffff8880226aab80 timed out [ 213.674471][ T1055] null_blk: rq ffff8880226aad00 timed out [ 213.680625][ T1055] null_blk: rq ffff8880226aae80 timed out [ 213.688462][ T1055] null_blk: rq ffff8880226ab000 timed out [ 213.694294][ T1055] null_blk: rq ffff8880226ab180 timed out [ 213.700163][ T1055] null_blk: rq ffff8880226ab300 timed out [ 213.706073][ T1055] null_blk: rq ffff8880226ab480 timed out [ 213.711870][ T1055] null_blk: rq ffff8880226ab600 timed out [ 213.718459][ T1055] null_blk: rq ffff8880226ab780 timed out [ 213.724278][ T1055] null_blk: rq ffff8880226ab900 timed out [ 213.730262][ T1055] null_blk: rq ffff8880226aba80 timed out [ 213.787728][ T1055] null_blk: rq ffff8880226abc00 timed out [ 213.793961][ T1055] null_blk: rq ffff8880226abd80 timed out [ 213.800551][ T1055] null_blk: rq ffff8880226abf00 timed out [ 216.393263][ T7271] binder: 7269:7271 ioctl 4018620d 0 returned -22 [ 220.825630][ T7300] sch_fq: defrate 0 ignored. [ 220.914987][ T55] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 221.208625][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 221.912556][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.927624][ T55] usb 3-1: config 0 descriptor?? [ 221.955297][ T55] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 222.102818][ T7317] (null): rxe_set_mtu: Set mtu to 1024 [ 222.177954][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'. [ 222.195127][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 222.598999][ T7317] infiniband syz1: set active [ 222.604187][ T7317] infiniband syz1: added syz_tun [ 223.475625][ T7317] RDS/IB: syz1: added [ 223.484765][ T7317] smc: adding ib device syz1 with port count 1 [ 223.494076][ T7317] smc: ib device syz1 port 1 has pnetid [ 224.141951][ T1055] null_blk: rq ffff8880226a8000 timed out [ 224.148610][ T1055] blk_print_req_error: 33 callbacks suppressed [ 224.148625][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.166963][ T1055] null_blk: rq ffff8880226a8180 timed out [ 224.172756][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.183743][ T1055] null_blk: rq ffff8880226a8300 timed out [ 224.189747][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.200745][ T1055] null_blk: rq ffff8880226a8480 timed out [ 224.206746][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.217632][ T1055] null_blk: rq ffff8880226a8600 timed out [ 224.223403][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.234260][ T1055] null_blk: rq ffff8880226a8780 timed out [ 224.240312][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.251214][ T1055] null_blk: rq ffff8880226a8900 timed out [ 224.257329][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.268863][ T1055] null_blk: rq ffff8880226a8a80 timed out [ 224.274644][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.285525][ T1055] null_blk: rq ffff8880226a8c00 timed out [ 224.291303][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.302235][ T1055] null_blk: rq ffff8880226a8d80 timed out [ 224.308133][ T1055] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 224.318731][ T1055] null_blk: rq ffff8880226a8f00 timed out [ 224.324533][ T1055] null_blk: rq ffff8880226a9080 timed out [ 224.330439][ T1055] null_blk: rq ffff8880226a9200 timed out [ 224.336295][ T1055] null_blk: rq ffff8880226a9380 timed out [ 224.342087][ T1055] null_blk: rq ffff8880226a9500 timed out [ 224.348023][ T1055] null_blk: rq ffff8880226a9680 timed out [ 224.353920][ T1055] null_blk: rq ffff8880226a9800 timed out [ 224.360280][ T1055] null_blk: rq ffff8880226a9980 timed out [ 224.366859][ T1055] null_blk: rq ffff8880226a9b00 timed out [ 224.372651][ T1055] null_blk: rq ffff8880226a9c80 timed out [ 224.378528][ T1055] null_blk: rq ffff8880226a9e00 timed out [ 224.384318][ T1055] null_blk: rq ffff8880226a9f80 timed out [ 224.390406][ T1055] null_blk: rq ffff8880226aa100 timed out [ 224.396274][ T1055] null_blk: rq ffff8880226aa280 timed out [ 224.402168][ T1055] null_blk: rq ffff8880226aa400 timed out [ 224.408051][ T1055] null_blk: rq ffff8880226aa580 timed out [ 224.413843][ T1055] null_blk: rq ffff8880226aa700 timed out [ 224.419726][ T1055] null_blk: rq ffff8880226aa880 timed out [ 224.425730][ T1055] null_blk: rq ffff8880226aaa00 timed out [ 224.431512][ T1055] null_blk: rq ffff8880226aab80 timed out [ 224.437360][ T1055] null_blk: rq ffff8880226aad00 timed out [ 224.443152][ T1055] null_blk: rq ffff8880226aae80 timed out [ 224.449124][ T1055] null_blk: rq ffff8880226ab000 timed out [ 224.454956][ T1055] null_blk: rq ffff8880226ab180 timed out [ 224.460734][ T1055] null_blk: rq ffff8880226ab300 timed out [ 224.466619][ T1055] null_blk: rq ffff8880226ab480 timed out [ 224.473155][ T1055] null_blk: rq ffff8880226ab600 timed out [ 224.479038][ T1055] null_blk: rq ffff8880226ab780 timed out [ 224.479348][ T55] usb 3-1: USB disconnect, device number 13 [ 224.485358][ T1055] null_blk: rq ffff8880226ab900 timed out [ 224.496672][ T1055] null_blk: rq ffff8880226aba80 timed out [ 224.502447][ T1055] null_blk: rq ffff8880226abc00 timed out [ 224.508559][ T1055] null_blk: rq ffff8880226abd80 timed out [ 224.514359][ T1055] null_blk: rq ffff8880226abf00 timed out [ 224.520903][ T1055] null_blk: rq ffff8880226ac080 timed out [ 224.526776][ T1055] null_blk: rq ffff8880226ac200 timed out [ 224.532570][ T1055] null_blk: rq ffff8880226ac380 timed out [ 224.538433][ T1055] null_blk: rq ffff8880226ac500 timed out [ 224.544225][ T1055] null_blk: rq ffff8880226ac680 timed out [ 224.550074][ T1055] null_blk: rq ffff8880226ac800 timed out [ 224.555946][ T1055] null_blk: rq ffff8880226ac980 timed out [ 224.561732][ T1055] null_blk: rq ffff8880226acb00 timed out [ 224.567593][ T1055] null_blk: rq ffff8880226acc80 timed out [ 224.574031][ T1055] null_blk: rq ffff8880226ace00 timed out [ 224.579879][ T1055] null_blk: rq ffff8880226acf80 timed out [ 224.586437][ T1055] null_blk: rq ffff8880226ad100 timed out [ 224.592228][ T1055] null_blk: rq ffff8880226ad280 timed out [ 224.598167][ T1055] null_blk: rq ffff8880226ad400 timed out [ 224.603954][ T1055] null_blk: rq ffff8880226ad580 timed out [ 224.609856][ T1055] null_blk: rq ffff8880226ad700 timed out [ 224.615869][ T1055] null_blk: rq ffff8880226ad880 timed out [ 224.621654][ T1055] null_blk: rq ffff8880226ada00 timed out [ 224.627502][ T1055] null_blk: rq ffff8880226adb80 timed out [ 224.633286][ T1055] null_blk: rq ffff8880226add00 timed out [ 224.639134][ T1055] null_blk: rq ffff8880226ade80 timed out [ 225.790254][ T7320] infiniband syz1: set down [ 226.064517][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.074043][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.360798][ T7349] loop0: detected capacity change from 0 to 1024 [ 226.422626][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.845539][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.989286][ T7360] loop2: detected capacity change from 0 to 2048 [ 228.078940][ T7360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.665219][ T7320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.086218][ T7320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.466458][ T7320] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.482336][ T7320] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.689293][ T7320] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.732689][ T7320] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.653239][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.662155][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.686439][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.714447][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.725828][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 238.736788][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.313151][ T2912] smc: removing ib device syz1 [ 239.971363][ T7432] loop3: detected capacity change from 0 to 512 [ 240.127989][ T7419] chnl_net:caif_netlink_parms(): no params data found [ 240.285013][ T7432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.429768][ T7432] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.836190][ T5086] Bluetooth: hci4: command tx timeout [ 240.997376][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.839153][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.855866][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.865347][ T7419] bridge_slave_0: entered allmulticast mode [ 241.879348][ T7419] bridge_slave_0: entered promiscuous mode [ 241.899867][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.915076][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.930973][ T5852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 241.960938][ T7419] bridge_slave_1: entered allmulticast mode [ 241.989787][ T7419] bridge_slave_1: entered promiscuous mode [ 242.140854][ T2912] ------------[ cut here ]------------ [ 242.147258][ T2912] GID entry ref leak for dev syz1 index 2 ref=1 [ 242.191200][ T7419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.200492][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 242.206043][ T2912] WARNING: CPU: 1 PID: 2912 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 242.212941][ T5852] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 242.217096][ T2912] Modules linked in: [ 242.230199][ T2912] CPU: 1 PID: 2912 Comm: kworker/u4:8 Not tainted 6.6.94-syzkaller #0 [ 242.238718][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.240010][ T7419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.248865][ T2912] Workqueue: ib-unreg-wq ib_unregister_work [ 242.248912][ T2912] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 242.248950][ T2912] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 c0 d7 85 8b 48 8b 74 24 20 44 89 fa e8 f1 1a b0 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 242.248969][ T2912] RSP: 0018:ffffc9000bcf7a68 EFLAGS: 00010246 [ 242.248995][ T2912] RAX: aa93f59974e12d00 RBX: ffff888025957cd8 RCX: ffff88802c4d9e00 [ 242.249012][ T2912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 242.249026][ T2912] RBP: 1ffff11004b2af80 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 242.249043][ T2912] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff11004b2af9b [ 242.249060][ T2912] R13: ffff888025957c00 R14: ffff888030efb900 R15: 0000000000000002 [ 242.249074][ T2912] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 242.249092][ T2912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.249107][ T2912] CR2: 00007fae06971d60 CR3: 0000000056b74000 CR4: 00000000003506e0 [ 242.249126][ T2912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.249138][ T2912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.249152][ T2912] Call Trace: [ 242.249161][ T2912] [ 242.249189][ T2912] ib_device_release+0xd2/0x1b0 [ 242.318545][ T7448] (null): rxe_set_mtu: Set mtu to 1024 [ 242.320748][ T2912] ? ib_device_uevent+0xa0/0xa0 [ 242.398373][ T2912] device_release+0x96/0x1c0 [ 242.402983][ T2912] kobject_put+0x221/0x470 [ 242.407505][ T2912] ? process_scheduled_works+0x957/0x15b0 [ 242.413244][ T2912] process_scheduled_works+0xa45/0x15b0 [ 242.418852][ T2912] ? assign_work+0x400/0x400 [ 242.423493][ T2912] ? assign_work+0x39e/0x400 [ 242.428183][ T2912] worker_thread+0xa55/0xfc0 [ 242.432879][ T2912] kthread+0x2fa/0x390 [ 242.437131][ T2912] ? pr_cont_work+0x560/0x560 [ 242.441848][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 242.446498][ T2912] ret_from_fork+0x48/0x80 [ 242.450944][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 242.455603][ T2912] ret_from_fork_asm+0x11/0x20 [ 242.460397][ T2912] [ 242.463424][ T2912] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.470706][ T2912] CPU: 1 PID: 2912 Comm: kworker/u4:8 Not tainted 6.6.94-syzkaller #0 [ 242.478871][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.488942][ T2912] Workqueue: ib-unreg-wq ib_unregister_work [ 242.494865][ T2912] Call Trace: [ 242.498172][ T2912] [ 242.501127][ T2912] dump_stack_lvl+0x16c/0x230 [ 242.505828][ T2912] ? show_regs_print_info+0x20/0x20 [ 242.511047][ T2912] ? load_image+0x3b0/0x3b0 [ 242.515575][ T2912] panic+0x2c0/0x710 [ 242.519487][ T2912] ? bpf_jit_dump+0xd0/0xd0 [ 242.524013][ T2912] ? ret_from_fork_asm+0x11/0x20 [ 242.528975][ T2912] __warn+0x2e0/0x470 [ 242.532971][ T2912] ? gid_table_release_one+0x30f/0x490 [ 242.538445][ T2912] ? gid_table_release_one+0x30f/0x490 [ 242.543921][ T2912] report_bug+0x2be/0x4f0 [ 242.548360][ T2912] ? gid_table_release_one+0x30f/0x490 [ 242.553870][ T2912] ? gid_table_release_one+0x30f/0x490 [ 242.559346][ T2912] ? gid_table_release_one+0x311/0x490 [ 242.564825][ T2912] handle_bug+0xcf/0x120 [ 242.569101][ T2912] exc_invalid_op+0x1a/0x50 [ 242.573647][ T2912] asm_exc_invalid_op+0x1a/0x20 [ 242.578543][ T2912] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 242.584626][ T2912] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 c0 d7 85 8b 48 8b 74 24 20 44 89 fa e8 f1 1a b0 f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 242.604264][ T2912] RSP: 0018:ffffc9000bcf7a68 EFLAGS: 00010246 [ 242.610360][ T2912] RAX: aa93f59974e12d00 RBX: ffff888025957cd8 RCX: ffff88802c4d9e00 [ 242.618339][ T2912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 242.626325][ T2912] RBP: 1ffff11004b2af80 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 242.634306][ T2912] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff11004b2af9b [ 242.642301][ T2912] R13: ffff888025957c00 R14: ffff888030efb900 R15: 0000000000000002 [ 242.650309][ T2912] ? gid_table_release_one+0x30f/0x490 [ 242.655801][ T2912] ib_device_release+0xd2/0x1b0 [ 242.660668][ T2912] ? ib_device_uevent+0xa0/0xa0 [ 242.665535][ T2912] device_release+0x96/0x1c0 [ 242.670139][ T2912] kobject_put+0x221/0x470 [ 242.674568][ T2912] ? process_scheduled_works+0x957/0x15b0 [ 242.680305][ T2912] process_scheduled_works+0xa45/0x15b0 [ 242.685918][ T2912] ? assign_work+0x400/0x400 [ 242.690537][ T2912] ? assign_work+0x39e/0x400 [ 242.695175][ T2912] worker_thread+0xa55/0xfc0 [ 242.699833][ T2912] kthread+0x2fa/0x390 [ 242.703940][ T2912] ? pr_cont_work+0x560/0x560 [ 242.708634][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 242.713239][ T2912] ret_from_fork+0x48/0x80 [ 242.717701][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 242.722325][ T2912] ret_from_fork_asm+0x11/0x20 [ 242.727116][ T2912] [ 242.730299][ T2912] Kernel Offset: disabled [ 242.734720][ T2912] Rebooting in 86400 seconds..