last executing test programs: 2m40.90927693s ago: executing program 3 (id=2092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x4040190) 2m40.090309378s ago: executing program 3 (id=2096): truncate(0x0, 0x1fff) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) unshare(0x60000480) 2m38.545647647s ago: executing program 3 (id=2100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x4040190) 2m37.616489495s ago: executing program 3 (id=2104): syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0xb8, 0x1, 0x5223777b, "a99c6f72ff9eb5de220f3846c52ae85b58cb55896eb40f2d496c15ba751310920c43c046e1539e4836defe79119e86ffa167818954443bcb1c58621684a448f942105af54ba3f4f293896100c7645346468b26b60bb2d1a6459083b0d5b472cfb6f02e7611300b465556b776b9a273e910c2e670e121a312278095fbe4a434566389a9e8b6116a11708afce70731bbf830a544b82c68d80f177f2b7611c4475fa93183"}, {0x110, 0x10e, 0x57e, "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"}, {0x38, 0x1, 0x23, "8d27f5d23da89c70303f7900b373fd42c4f5dce84b63f0c81abdf4c06ef225e2f0"}, {0x10, 0x1, 0x2}, {0x10, 0x107, 0xf}, {0x10, 0x111, 0x8}], 0x230}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m36.176201517s ago: executing program 3 (id=2106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x4040190) 2m35.699478612s ago: executing program 4 (id=2109): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x5, 0x3, 0x3, 0xc, 0xc1a7, 0x9d}]}}}}, 0x1d) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e"], 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a300000"], 0x1f4}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x1, '\x00', @p_u8=&(0x7f0000000080)}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f00000010c0)) 2m35.160067695s ago: executing program 3 (id=2110): truncate(0x0, 0x1fff) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) unshare(0x60000480) 2m33.895623854s ago: executing program 4 (id=2112): bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x66000080) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() gettid() r3 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x48) fcntl$getflags(r3, 0x401) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) unshare(0x2a020480) shmat(r5, &(0x7f0000fed000/0x3000)=nil, 0x400c) tkill(0x0, 0x28) rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2m19.626430629s ago: executing program 32 (id=2110): truncate(0x0, 0x1fff) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) unshare(0x60000480) 2m19.163149266s ago: executing program 4 (id=2131): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) read(0xffffffffffffffff, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x6748, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r0}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 2m18.507184609s ago: executing program 4 (id=2135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2m17.28735849s ago: executing program 4 (id=2139): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040effff1020"], 0x7) 2m16.398220797s ago: executing program 4 (id=2142): bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x66000080) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) unshare(0x2a020480) shmat(r3, &(0x7f0000fed000/0x3000)=nil, 0x400c) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2m1.041312832s ago: executing program 33 (id=2142): bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x66000080) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) unshare(0x2a020480) shmat(r3, &(0x7f0000fed000/0x3000)=nil, 0x400c) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14.325037804s ago: executing program 5 (id=2443): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x0, 0x1, 0x3, "8f2877"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.505667054s ago: executing program 2 (id=2448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x238, 0x30, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{0x224, 0x1, [@m_skbedit={0xd8, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xa9, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x148, 0x1c, 0x0, 0x0, {{0xf}, {0x4}, {0x115, 0x6, "ebb7905fe91e9be4677d59a9642fd119d19ac5e190bf4b0f9f2859657921b9c6fce506e2b627b610552adbd25f19af61b6f9b1603735a6e3d97188050bf1e9e04f7b370bf4a6645e82f7d27f94bddbc246b88ff6f286b4e7ecb451e477ceac7c3e03294761182420c71011ec9e6197a94d09c83485f0010c2c263d6eaf902b5831308213aac2eec18d2613d94f3c16221f4e24ab21924bd8923e0a9d6b731641505a6814be2508b3bef8eaf4207cbc46042bf22dc5b0bc578bc14f8feff9644e81d9de9632d869415827d60c0f1586f7bafbfe130f8345250997ba63cfcdc682e91a9f076f979dde266d0b98062918af13d4a31000dd10675257d8d11f0df8d7dc03154774269973fbf355142aafc1c991"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x238}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 11.684815274s ago: executing program 2 (id=2450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="829c", 0x2}, {&(0x7f0000000340)="540ca3c326bf7877ce7d358cba", 0xd}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 10.775861047s ago: executing program 2 (id=2452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc2, &(0x7f0000000280)=""/194, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)}, &(0x7f0000000280)=0x10) shutdown(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) 9.262146842s ago: executing program 5 (id=2458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1d0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x17c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_vlan={0x108, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd1, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea59071f0fd93760930ba453b3e23095f617d12282ec3f8190afeb1ac2e8d254fdac5b6ea11185f9256c3bab37a15cafe5f112d56723f0fb5c49b6449e58fc91a26d527012f701a9cfebef7787238f0d549914d85db8de6456cd08e0cd88f542f218759aebb2337e303783a52c6e45d646c6ef46ddb4aac282b8605eabf8141749876b4d391ca0a9d7a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.255222886s ago: executing program 2 (id=2459): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0x40}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x102}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x6, 0x1, 0x12, 0x1ff}, 0x9c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x80, 0x2, 0x2, "b217283a0fc3c617a9d13f0a85c44a76b52c6ab1558ec7550f98f4a37dfb854f", 0x50313134}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 8.81592213s ago: executing program 0 (id=2460): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="20311100"], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000600)=0xdfa, 0x4) 7.678726493s ago: executing program 5 (id=2462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="829c", 0x2}, {&(0x7f0000000340)="540ca3c326bf7877ce7d358cba", 0xd}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 7.656100383s ago: executing program 1 (id=2463): socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000f, 0x4008032, 0xffffffffffffffff, 0x2002000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 7.419599164s ago: executing program 6 (id=2464): r0 = syz_open_dev$loop(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073"], 0xf0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.847531062s ago: executing program 1 (id=2465): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xa0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.844944251s ago: executing program 5 (id=2466): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c900"], 0x17) 6.547810851s ago: executing program 6 (id=2467): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.986622774s ago: executing program 5 (id=2468): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x0, 0x1, 0x3, "8f2877"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.657614936s ago: executing program 6 (id=2469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc2, &(0x7f0000000280)=""/194, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)}, &(0x7f0000000280)=0x10) shutdown(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) 4.860444212s ago: executing program 0 (id=2470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300"], 0x2c}}, 0x0) 4.085881241s ago: executing program 2 (id=2471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x2f, 0x0, "3fe898cf475648b07398b8dc67b76e6bd14bb37fb341cd6c142bb230c96ef88066ce6f2953fded261351a0a635b4a49eea5198b84b3329b8217806661f3a50933616d2ae0ebd69680b52eb1d47cc6808"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.055730704s ago: executing program 6 (id=2472): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000100)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 3.839135646s ago: executing program 1 (id=2473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2b, @void, @value}, 0x94) 3.70674853s ago: executing program 0 (id=2474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="1c002f"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 2.851049233s ago: executing program 0 (id=2475): socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000f, 0x4008032, 0xffffffffffffffff, 0x2002000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.200388874s ago: executing program 2 (id=2476): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x20, 0x18}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b00)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0}) 2.175443868s ago: executing program 1 (id=2477): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.629077397s ago: executing program 0 (id=2478): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c900"], 0x17) 1.259205225s ago: executing program 6 (id=2479): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.217581743s ago: executing program 1 (id=2480): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 856.547623ms ago: executing program 0 (id=2481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x2f, 0x0, "3fe898cf475648b07398b8dc67b76e6bd14bb37fb341cd6c142bb230c96ef88066ce6f2953fded261351a0a635b4a49eea5198b84b3329b8217806661f3a50933616d2ae0ebd69680b52eb1d47cc6808"}, 0xd8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 547.918466ms ago: executing program 5 (id=2482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc2, &(0x7f0000000280)=""/194, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)}, &(0x7f0000000280)=0x10) shutdown(r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) 124.822554ms ago: executing program 1 (id=2483): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x6d8, 0x5, 0x398, 0x260, 0x11c, 0xffffffff, 0x0, 0x11c, 0x304, 0x304, 0xffffffff, 0x304, 0x304, 0x5, 0x0, {[{{@uncond, 0x0, 0xd4, 0x11c, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'veth0_to_hsr\x00', {}, 'dummy0\x00', {}, 0x10, 0xf}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv6=@private2={0xfc, 0x2, '\x00', 0xfc}, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x3}, {0x3, 0x6, 0x4}, 0x3, 0x1}}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'veth1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x2, 0x2, 0x68}, 0x0, 0x70, 0xa4, 0x0, {0x0, 0x4800}}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1c2, {0x0, @local, @broadcast, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id=0x64, @gre_key=0x1000}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f4) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) r3 = socket(0x28, 0x5, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DISCONNECT(r2, 0xab08) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r4 = eventfd(0x800a6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$eventfd(r4, &(0x7f00000004c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4079, 0xfef}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) sendmsg$nl_route(r7, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast2, @in6=@private0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe4) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405668, &(0x7f0000000000)={0x5, 0x1, 0x1, "0000087aba10fdfffffb05000400", 0xa4435559}) ftruncate(r8, 0x0) mount$afs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x55020, &(0x7f0000000280)=ANY=[]) 0s ago: executing program 6 (id=2484): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) fallocate(r1, 0x3, 0x100000000, 0x80000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, 0x0, 0xf5) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): : 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 1080.874745][T11760] fuse: Unknown parameter 'group_i00000000000000000000' [ 1080.916811][T11759] block nbd4: NBD_DISCONNECT [ 1080.921775][T11759] block nbd4: Send disconnect failed -107 [ 1080.966491][T11759] block nbd4: Send disconnect failed -22 [ 1080.967140][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 1081.353429][T11759] loop4: detected capacity change from 0 to 2048 [ 1081.396286][T11759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1081.488007][T11759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.649759][T11763] netlink: 'syz.4.1837': attribute type 2 has an invalid length. [ 1081.802797][T11757] block nbd4: Disconnected due to user request. [ 1081.809932][T11757] block nbd4: shutting down sockets [ 1082.212003][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.294817][ T45] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1083.507731][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.518651][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.631576][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1083.641470][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.650109][ T45] usb 2-1: Product: syz [ 1083.654705][ T45] usb 2-1: Manufacturer: syz [ 1083.659583][ T45] usb 2-1: SerialNumber: syz [ 1083.683318][T11792] fuse: Unknown parameter 'group_i00000000000000000000' [ 1083.856038][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 1083.929026][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 1083.970871][ T45] usb 2-1: 0:2 : does not exist [ 1084.025817][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 1084.146397][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1084.329201][ T45] usb 2-1: USB disconnect, device number 91 [ 1084.427068][T11798] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1084.531911][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.539166][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.734811][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.947212][T11804] x_tables: duplicate underflow at hook 4 [ 1085.056477][T11804] block nbd0: NBD_DISCONNECT [ 1085.061523][T11804] block nbd0: Send disconnect failed -107 [ 1085.120898][T11804] block nbd0: Send disconnect failed -22 [ 1085.448645][T11804] loop0: detected capacity change from 0 to 2048 [ 1085.470125][T11804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.698083][T11804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.794978][ T45] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1085.839109][T11816] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1085.880135][T11816] EXT4-fs (loop0): Remounting filesystem read-only [ 1085.967269][T11823] netlink: 'syz.0.1854': attribute type 2 has an invalid length. [ 1085.994483][ T45] usb 4-1: device descriptor read/64, error -71 [ 1086.178203][T11803] block nbd0: Disconnected due to user request. [ 1086.185609][T11803] block nbd0: shutting down sockets [ 1086.254961][ T45] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1086.435752][ T45] usb 4-1: device descriptor read/64, error -71 [ 1086.452158][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.567131][ T45] usb usb4-port1: attempt power cycle [ 1086.924865][ T45] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1087.020780][ T45] usb 4-1: device descriptor read/8, error -71 [ 1087.148476][T11831] fuse: Unknown parameter 'group_id00000000000000000000' [ 1087.274661][ T45] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1087.364760][ T45] usb 4-1: device descriptor read/8, error -71 [ 1087.485824][ T45] usb usb4-port1: unable to enumerate USB device [ 1087.496711][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 1087.931762][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 1087.993706][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 1088.047507][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 1088.145398][ T5848] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1088.392388][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.403163][ T5848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1088.526412][ T5848] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1088.536213][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.544884][ T5848] usb 5-1: Product: syz [ 1088.549412][ T5848] usb 5-1: Manufacturer: syz [ 1088.554498][ T5848] usb 5-1: SerialNumber: syz [ 1088.955378][ T5848] usb 5-1: 0:2 : does not exist [ 1089.105424][ T5848] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1089.281051][ T5848] usb 5-1: USB disconnect, device number 99 [ 1089.555598][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.585197][T11857] x_tables: duplicate underflow at hook 4 [ 1089.705285][T11857] block nbd2: NBD_DISCONNECT [ 1089.710453][T11857] block nbd2: Send disconnect failed -107 [ 1089.743321][T11857] block nbd2: Send disconnect failed -22 [ 1090.083220][T11860] loop2: detected capacity change from 0 to 2048 [ 1090.112744][T11860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.251861][T11860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.583778][T11860] netlink: 'syz.2.1872': attribute type 2 has an invalid length. [ 1090.848590][T11856] block nbd2: Disconnected due to user request. [ 1090.855482][T11856] block nbd2: shutting down sockets [ 1090.864743][T11869] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1090.955187][T11869] EXT4-fs (loop2): Remounting filesystem read-only [ 1091.284178][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.322000][ T45] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1091.573829][ T45] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1091.583390][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.591918][ T45] usb 4-1: Product: syz [ 1091.596567][ T45] usb 4-1: Manufacturer: syz [ 1091.601436][ T45] usb 4-1: SerialNumber: syz [ 1091.737668][ T45] usb 4-1: config 0 descriptor?? [ 1092.037846][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 1092.038106][ T45] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1092.108427][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 1092.193828][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 1092.657529][ T45] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1093.394744][ T5848] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1093.584506][ T5848] usb 5-1: device descriptor read/64, error -71 [ 1093.846599][ T5848] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1094.021090][ T5848] usb 5-1: device descriptor read/64, error -71 [ 1094.140236][ T5848] usb usb5-port1: attempt power cycle [ 1094.260367][ T45] usb 4-1: USB disconnect, device number 91 [ 1094.514689][ T5848] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1094.567067][ T5848] usb 5-1: device descriptor read/8, error -71 [ 1094.805433][ T5848] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1094.869196][ T5848] usb 5-1: device descriptor read/8, error -71 [ 1094.992156][ T5848] usb usb5-port1: unable to enumerate USB device [ 1095.456219][T11914] x_tables: duplicate underflow at hook 4 [ 1095.623099][T11917] block nbd1: Device being setup by another task [ 1095.679886][T11914] block nbd1: NBD_DISCONNECT [ 1095.685432][T11914] block nbd1: Send disconnect failed -107 [ 1096.016997][T11914] loop1: detected capacity change from 0 to 2048 [ 1096.067006][T11914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1096.175941][T11914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.349173][T11917] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 1096.485305][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1096.528198][T11912] block nbd1: Disconnected due to user request. [ 1096.535742][T11912] block nbd1: shutting down sockets [ 1096.586675][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1096.646373][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1097.009712][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.024948][ T5848] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1098.174793][ T5848] usb 4-1: device descriptor read/64, error -71 [ 1098.434659][ T5848] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1098.610533][ T5848] usb 4-1: device descriptor read/64, error -71 [ 1098.741180][ T5848] usb usb4-port1: attempt power cycle [ 1099.114965][ T5848] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1099.177485][ T5848] usb 4-1: device descriptor read/8, error -71 [ 1099.454597][ T5848] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1099.517018][ T5848] usb 4-1: device descriptor read/8, error -71 [ 1099.626028][ T5848] usb usb4-port1: unable to enumerate USB device [ 1099.654450][T11964] x_tables: duplicate underflow at hook 4 [ 1099.785972][T11964] block nbd2: NBD_DISCONNECT [ 1099.791025][T11964] block nbd2: Send disconnect failed -107 [ 1099.809559][T11964] block nbd2: Send disconnect failed -22 [ 1099.988930][T11964] loop2: detected capacity change from 0 to 2048 [ 1100.025527][T11964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1100.119904][T11964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.276239][T11964] netlink: 'syz.2.1907': attribute type 2 has an invalid length. [ 1100.422853][T11963] block nbd2: Disconnected due to user request. [ 1100.429595][T11963] block nbd2: shutting down sockets [ 1100.882199][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.180424][T12002] x_tables: duplicate underflow at hook 4 [ 1103.267668][ T45] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1103.405203][T12002] block nbd3: NBD_DISCONNECT [ 1103.410341][T12002] block nbd3: Send disconnect failed -107 [ 1103.663703][ T45] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1103.673738][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.681598][T12002] block nbd3: Send disconnect failed -22 [ 1103.682675][ T45] usb 5-1: Product: syz [ 1103.693003][ T45] usb 5-1: Manufacturer: syz [ 1103.698454][ T45] usb 5-1: SerialNumber: syz [ 1103.710679][ T45] usb 5-1: config 0 descriptor?? [ 1103.819034][T12003] loop3: detected capacity change from 0 to 2048 [ 1103.832693][T12003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1104.017026][T12003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.039264][ T45] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1104.293635][T12002] netlink: 'syz.3.1923': attribute type 2 has an invalid length. [ 1104.398269][T12001] block nbd3: Disconnected due to user request. [ 1104.406204][T12001] block nbd3: shutting down sockets [ 1104.618233][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 1104.707370][ T45] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1104.898112][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.162955][ T5848] usb 5-1: USB disconnect, device number 104 [ 1106.416807][T12030] syzkaller0: entered promiscuous mode [ 1106.422648][T12030] syzkaller0: entered allmulticast mode [ 1107.742598][T12044] x_tables: duplicate underflow at hook 4 [ 1107.914912][ T45] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1107.934756][T12045] block nbd2: Device being setup by another task [ 1108.016467][T12044] block nbd2: NBD_DISCONNECT [ 1108.021593][T12044] block nbd2: Send disconnect failed -107 [ 1108.089125][ T45] usb 4-1: device descriptor read/64, error -71 [ 1108.279666][T12045] loop2: detected capacity change from 0 to 2048 [ 1108.301751][T12045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1108.316839][T12051] netlink: 'syz.0.1940': attribute type 10 has an invalid length. [ 1108.325574][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1940'. [ 1108.358417][ T45] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1108.490152][T12045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.546044][ T45] usb 4-1: device descriptor read/64, error -71 [ 1108.640927][T12044] netlink: 'syz.2.1938': attribute type 2 has an invalid length. [ 1108.671822][ T45] usb usb4-port1: attempt power cycle [ 1108.709665][T12043] block nbd2: Disconnected due to user request. [ 1108.716784][T12043] block nbd2: shutting down sockets [ 1109.069675][ T45] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1109.114921][ T45] usb 4-1: device descriptor read/8, error -71 [ 1109.116207][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.377526][ T45] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1109.443989][ T45] usb 4-1: device descriptor read/8, error -71 [ 1109.456017][ T24] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1109.567056][ T45] usb usb4-port1: unable to enumerate USB device [ 1109.944827][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1109.954742][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.963063][ T24] usb 5-1: Product: syz [ 1109.967766][ T24] usb 5-1: Manufacturer: syz [ 1109.972671][ T24] usb 5-1: SerialNumber: syz [ 1110.095079][ T24] usb 5-1: config 0 descriptor?? [ 1110.341462][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1110.349605][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1110.375332][ T45] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1110.618747][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.629784][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1110.641254][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1110.756080][ T45] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1110.766896][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.775747][ T45] usb 2-1: Product: syz [ 1110.780458][ T45] usb 2-1: Manufacturer: syz [ 1110.785864][ T45] usb 2-1: SerialNumber: syz [ 1110.802345][ T45] usb 2-1: config 0 descriptor?? [ 1110.849718][ T45] usb 2-1: ucan: probing device on interface #0 [ 1110.857165][ T45] usb 2-1: ucan: invalid EP count (0) [ 1110.863265][ T45] usb 2-1: ucan: probe failed; try to update the device firmware [ 1111.153474][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1112.736666][ T24] usb 5-1: USB disconnect, device number 105 [ 1113.406332][ T5848] usb 2-1: USB disconnect, device number 92 [ 1113.857765][T12090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.115992][T12107] x_tables: duplicate underflow at hook 4 [ 1114.262980][T12107] block nbd4: NBD_DISCONNECT [ 1114.268632][T12107] block nbd4: Send disconnect failed -107 [ 1114.337547][T12107] block nbd4: Send disconnect failed -22 [ 1114.687640][T12107] loop4: detected capacity change from 0 to 2048 [ 1114.737337][T12107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1114.899838][T12107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.048510][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 1115.088406][T12107] netlink: 'syz.4.1955': attribute type 2 has an invalid length. [ 1115.181781][T12106] block nbd4: Disconnected due to user request. [ 1115.188939][T12106] block nbd4: shutting down sockets [ 1115.226367][ T5848] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1115.405171][ T5848] usb 2-1: device descriptor read/64, error -71 [ 1115.512991][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.685472][ T5848] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1115.859123][ T5848] usb 2-1: device descriptor read/64, error -71 [ 1115.979463][ T5848] usb usb2-port1: attempt power cycle [ 1116.359878][ T5848] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1116.404907][ T24] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1116.418732][ T5848] usb 2-1: device descriptor read/8, error -71 [ 1116.638233][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1116.651378][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.661081][ T24] usb 5-1: Product: syz [ 1116.665671][ T24] usb 5-1: Manufacturer: syz [ 1116.670540][ T24] usb 5-1: SerialNumber: syz [ 1116.716294][ T5848] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1116.738278][ T24] usb 5-1: config 0 descriptor?? [ 1116.787410][ T5848] usb 2-1: device descriptor read/8, error -71 [ 1116.794743][ T5846] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1116.905909][ T5848] usb usb2-port1: unable to enumerate USB device [ 1117.005306][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.016168][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1117.027238][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1117.038812][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.199637][ T5846] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1117.209513][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.221094][ T5846] usb 4-1: Product: syz [ 1117.226027][ T5846] usb 4-1: Manufacturer: syz [ 1117.231065][ T5846] usb 4-1: SerialNumber: syz [ 1117.317629][ T5846] usb 4-1: config 0 descriptor?? [ 1117.325960][T12135] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1117.339273][ T5846] usb 4-1: ucan: probing device on interface #0 [ 1117.346689][ T5846] usb 4-1: ucan: invalid EP count (1) [ 1117.352368][ T5846] usb 4-1: ucan: probe failed; try to update the device firmware [ 1117.711613][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1118.503007][T12157] x_tables: duplicate underflow at hook 4 [ 1118.617066][T12157] block nbd0: NBD_DISCONNECT [ 1118.622113][T12157] block nbd0: Send disconnect failed -107 [ 1118.664313][T12157] block nbd0: Send disconnect failed -22 [ 1118.935376][T12157] loop0: detected capacity change from 0 to 2048 [ 1118.968526][T12157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1119.039348][T12157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.094640][ T5846] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1119.095567][ T24] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1119.216328][T12167] netlink: 'syz.0.1972': attribute type 2 has an invalid length. [ 1119.222147][ T45] usb 5-1: USB disconnect, device number 106 [ 1119.291014][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 1119.357563][ T5846] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1119.367669][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.428016][T12154] block nbd0: Disconnected due to user request. [ 1119.434910][T12154] block nbd0: shutting down sockets [ 1119.494718][ T24] usb 3-1: device descriptor read/64, error -71 [ 1119.507096][ T5846] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1119.522184][ T5846] pvrusb2: ********** [ 1119.528926][ T5846] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1119.539377][ T5846] pvrusb2: Important functionality might not be entirely working. [ 1119.547988][ T5846] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1119.560343][ T5846] pvrusb2: ********** [ 1119.731359][ T2327] pvrusb2: Invalid write control endpoint [ 1119.784473][ T24] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1119.806238][ T5846] usb 4-1: USB disconnect, device number 100 [ 1119.994420][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.004906][ T24] usb 3-1: device descriptor read/64, error -71 [ 1120.044621][ T45] usb 2-1: USB disconnect, device number 97 [ 1120.130579][ T24] usb usb3-port1: attempt power cycle [ 1120.195616][ T2327] pvrusb2: Invalid write control endpoint [ 1120.201605][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1120.211703][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1120.219784][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1120.235354][ T2327] pvrusb2: Device being rendered inoperable [ 1120.241536][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1120.250686][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1120.260754][ T2327] pvrusb2: Attached sub-driver cx25840 [ 1120.266698][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1120.278167][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1120.594750][ T24] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1120.648881][ T24] usb 3-1: device descriptor read/8, error -71 [ 1120.914980][ T45] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1120.926730][ T24] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1120.986587][ T24] usb 3-1: device descriptor read/8, error -71 [ 1121.125128][ T24] usb usb3-port1: unable to enumerate USB device [ 1121.157103][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.167885][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.241366][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.254630][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.263033][ T45] usb 4-1: Product: syz [ 1121.269245][ T45] usb 4-1: Manufacturer: syz [ 1121.274285][ T45] usb 4-1: SerialNumber: syz [ 1121.283085][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 1121.290579][ T5802] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1121.292813][T12181] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1978'. [ 1121.529554][ T45] usb 4-1: 0:2 : does not exist [ 1121.618092][ T45] usb 4-1: USB disconnect, device number 101 [ 1121.901199][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.744263][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1984'. [ 1123.394906][ T45] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1123.438797][T12203] x_tables: duplicate underflow at hook 4 [ 1123.582035][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.593085][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1123.605097][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.703552][T12205] block nbd1: Device being setup by another task [ 1123.738993][T12207] block nbd1: NBD_DISCONNECT [ 1123.743923][T12207] block nbd1: Send disconnect failed -107 [ 1123.786728][ T45] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1123.796726][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.805275][ T45] usb 3-1: Product: syz [ 1123.809717][ T45] usb 3-1: Manufacturer: syz [ 1123.818655][ T45] usb 3-1: SerialNumber: syz [ 1123.880445][ T45] usb 3-1: config 0 descriptor?? [ 1123.894428][T12198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1123.928905][T12203] loop1: detected capacity change from 0 to 2048 [ 1123.961350][ T45] usb 3-1: ucan: probing device on interface #0 [ 1123.968371][ T45] usb 3-1: ucan: invalid EP count (1) [ 1123.974336][ T45] usb 3-1: ucan: probe failed; try to update the device firmware [ 1123.988103][T12203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1124.004362][ T5846] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1124.173046][T12203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.219181][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 1124.273435][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1124.274217][ T5846] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1124.291549][T12203] netlink: 'syz.1.1987': attribute type 2 has an invalid length. [ 1124.292146][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.347385][T12201] block nbd1: Disconnected due to user request. [ 1124.355679][T12201] block nbd1: shutting down sockets [ 1124.381546][ T5846] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1124.389631][ T5846] pvrusb2: ********** [ 1124.393980][ T5846] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1124.405582][ T5846] pvrusb2: Important functionality might not be entirely working. [ 1124.413654][ T5846] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1124.433408][ T5846] pvrusb2: ********** [ 1124.606483][ T2327] pvrusb2: Invalid write control endpoint [ 1124.695662][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.816663][T12208] pvrusb2: Invalid write control endpoint [ 1124.875179][ T5846] usb 4-1: USB disconnect, device number 102 [ 1125.017939][ T2327] pvrusb2: Invalid write control endpoint [ 1125.024759][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1125.034766][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1125.047114][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1125.059239][ T2327] pvrusb2: Device being rendered inoperable [ 1125.059956][T12217] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1991'. [ 1125.066391][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1125.066530][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1125.068719][ T2327] pvrusb2: Attached sub-driver cx25840 [ 1125.098621][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1125.109079][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1125.119952][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 1125.127342][ T5802] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1126.092149][T12227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1126.155423][ T45] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1126.388205][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.400111][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.451250][ T5846] usb 3-1: USB disconnect, device number 103 [ 1126.456769][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.467410][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.480058][ T45] usb 5-1: Product: syz [ 1126.485754][ T45] usb 5-1: Manufacturer: syz [ 1126.490613][ T45] usb 5-1: SerialNumber: syz [ 1126.869772][ T45] usb 5-1: 0:2 : does not exist [ 1127.035109][ T45] usb 5-1: USB disconnect, device number 107 [ 1127.317850][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.726443][T12239] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 1127.735462][T12239] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2000'. [ 1127.869353][T12239] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1127.878134][T12239] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1127.890153][T12239] team0: Port device netdevsim1 added [ 1128.154758][ T45] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1128.181656][T12245] x_tables: duplicate underflow at hook 4 [ 1128.364684][T12245] block nbd1: Device being setup by another task [ 1128.369064][ T45] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 1128.380009][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.390728][ T45] usb 3-1: config 0 has no interface number 0 [ 1128.397557][ T45] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1128.409021][ T45] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1128.424697][ T45] usb 3-1: config 0 interface 172 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 1128.447653][T12247] block nbd1: NBD_DISCONNECT [ 1128.452859][T12247] block nbd1: Send disconnect failed -107 [ 1128.604639][ T24] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1128.646931][ T45] usb 3-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=c3.c0 [ 1128.656811][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.665376][ T45] usb 3-1: Product: syz [ 1128.669846][ T45] usb 3-1: Manufacturer: syz [ 1128.674973][ T45] usb 3-1: SerialNumber: syz [ 1128.733508][T12245] loop1: detected capacity change from 0 to 2048 [ 1128.747403][ T45] usb 3-1: config 0 descriptor?? [ 1128.774645][ T24] usb 4-1: device descriptor read/64, error -71 [ 1128.801261][T12245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1128.846031][ T45] ums-datafab 3-1:0.172: USB Mass Storage device detected [ 1128.888120][ T45] ums-datafab 3-1:0.172: Quirks match for vid 07c4 pid a002: 1 [ 1129.019379][T12245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.042242][ T24] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1129.099586][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 1129.106950][ T5802] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1129.143906][T12256] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2004'. [ 1129.165257][T12247] netlink: 'syz.1.2002': attribute type 2 has an invalid length. [ 1129.263327][T12243] block nbd1: Disconnected due to user request. [ 1129.270803][T12243] block nbd1: shutting down sockets [ 1129.284773][ T24] usb 4-1: device descriptor read/64, error -71 [ 1129.394833][T12254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1129.410435][ T24] usb usb4-port1: attempt power cycle [ 1129.435680][T12254] EXT4-fs (loop1): Remounting filesystem read-only [ 1129.497119][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.796187][ T24] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1129.840798][ T24] usb 4-1: device descriptor read/8, error -71 [ 1130.103961][T12262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 1130.105151][ T24] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1130.337390][ T24] usb 4-1: device descriptor read/8, error -71 [ 1130.449832][ T24] usb usb4-port1: unable to enumerate USB device [ 1130.614722][ T24] usb 3-1: USB disconnect, device number 104 [ 1131.104547][ T45] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1131.316252][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.327228][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1131.338795][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.424456][ T24] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1131.474585][ T45] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1131.483987][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.496294][ T45] usb 2-1: Product: syz [ 1131.500747][ T45] usb 2-1: Manufacturer: syz [ 1131.508007][ T45] usb 2-1: SerialNumber: syz [ 1131.598839][ T45] usb 2-1: config 0 descriptor?? [ 1131.616503][T12266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1131.654829][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.666206][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1131.692517][ T45] usb 2-1: ucan: probing device on interface #0 [ 1131.704559][ T45] usb 2-1: ucan: invalid EP count (1) [ 1131.710239][ T45] usb 2-1: ucan: probe failed; try to update the device firmware [ 1131.787334][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1131.796937][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.808757][ T24] usb 5-1: Product: syz [ 1131.813201][ T24] usb 5-1: Manufacturer: syz [ 1131.819587][ T24] usb 5-1: SerialNumber: syz [ 1132.155413][ T24] usb 5-1: 0:2 : does not exist [ 1132.301895][ T24] usb 5-1: USB disconnect, device number 108 [ 1132.771387][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.887151][ T24] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1133.085242][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.096346][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1133.172277][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1133.182313][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.190950][ T24] usb 4-1: Product: syz [ 1133.195476][ T24] usb 4-1: Manufacturer: syz [ 1133.200342][ T24] usb 4-1: SerialNumber: syz [ 1133.282980][ T24] usb 4-1: config 0 descriptor?? [ 1133.467928][T12284] x_tables: duplicate underflow at hook 4 [ 1133.696791][T12286] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2017'. [ 1133.708795][T12284] block nbd4: NBD_DISCONNECT [ 1133.720479][T12284] block nbd4: Send disconnect failed -107 [ 1133.737462][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 23 > 9 [ 1133.750413][ T5802] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1133.760172][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 1 < 9 [ 1133.767534][ T5802] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1133.808140][T12284] block nbd4: Send disconnect failed -22 [ 1133.940087][T12292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2018'. [ 1134.078352][T12289] loop4: detected capacity change from 0 to 2048 [ 1134.106015][T12289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1134.173914][ T5848] usb 2-1: USB disconnect, device number 98 [ 1134.261854][T12289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.434858][T12296] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1134.512011][T12296] EXT4-fs (loop4): Remounting filesystem read-only [ 1134.543368][T12284] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 1134.648850][T12283] block nbd4: Disconnected due to user request. [ 1134.655660][T12283] block nbd4: shutting down sockets [ 1135.038814][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.789595][ T24] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1135.874480][ T5846] usb 4-1: USB disconnect, device number 107 [ 1135.924735][ T5848] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1136.037558][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.048885][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1136.115760][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.125640][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.133955][ T24] usb 2-1: Product: syz [ 1136.138637][ T24] usb 2-1: Manufacturer: syz [ 1136.143502][ T24] usb 2-1: SerialNumber: syz [ 1136.144734][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 1136.172476][ T5848] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1136.182377][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.317071][ T5848] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1136.329524][ T5848] pvrusb2: ********** [ 1136.333734][ T5848] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1136.344889][ T5848] pvrusb2: Important functionality might not be entirely working. [ 1136.352948][ T5848] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1136.364969][ T5848] pvrusb2: ********** [ 1136.470584][ T24] usb 2-1: 0:2 : does not exist [ 1136.636335][ T2327] pvrusb2: Invalid write control endpoint [ 1136.707450][ T24] usb 2-1: USB disconnect, device number 99 [ 1136.780664][T12312] pvrusb2: Invalid write control endpoint [ 1136.928969][ T5848] usb 5-1: USB disconnect, device number 109 [ 1136.981902][ T2327] pvrusb2: Invalid write control endpoint [ 1136.988037][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1136.998859][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1137.007731][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1137.019811][ T2327] pvrusb2: Device being rendered inoperable [ 1137.036557][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1137.043981][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1137.055806][ T2327] pvrusb2: Attached sub-driver cx25840 [ 1137.061523][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1137.072688][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1137.221769][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1137.824880][ T5848] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1137.921285][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 1 < 9 [ 1137.929425][ T5802] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1137.931682][T12327] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2031'. [ 1138.057562][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1138.069743][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1138.197038][ T5848] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1138.206838][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.215332][ T5848] usb 3-1: Product: syz [ 1138.219778][ T5848] usb 3-1: Manufacturer: syz [ 1138.224764][ T5848] usb 3-1: SerialNumber: syz [ 1138.304956][ T5848] usb 3-1: config 0 descriptor?? [ 1138.313823][T12325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1138.339955][ T5848] usb 3-1: ucan: probing device on interface #0 [ 1138.346887][ T5848] usb 3-1: ucan: invalid EP count (1) [ 1138.360173][ T5848] usb 3-1: ucan: probe failed; try to update the device firmware [ 1138.480041][T12330] batadv0: entered allmulticast mode [ 1138.626081][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2033'. [ 1138.945496][T12334] x_tables: duplicate underflow at hook 4 [ 1139.075905][T12334] block nbd3: NBD_DISCONNECT [ 1139.081138][T12334] block nbd3: Send disconnect failed -107 [ 1139.114848][T12334] block nbd3: Send disconnect failed -22 [ 1139.235150][T12340] loop3: detected capacity change from 0 to 2048 [ 1139.245972][T12340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1139.335902][T12340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.451971][T12334] netlink: 'syz.3.2034': attribute type 2 has an invalid length. [ 1139.516403][T12333] block nbd3: Disconnected due to user request. [ 1139.522989][T12333] block nbd3: shutting down sockets [ 1139.882591][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.689867][ T45] usb 3-1: USB disconnect, device number 105 [ 1140.702382][ T24] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1140.941130][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.952281][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1141.138810][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.148681][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.157227][ T24] usb 4-1: Product: syz [ 1141.161656][ T24] usb 4-1: Manufacturer: syz [ 1141.166670][ T24] usb 4-1: SerialNumber: syz [ 1141.364532][ T5848] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1141.495602][ T24] usb 4-1: 0:2 : does not exist [ 1141.594484][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 1141.621667][ T5848] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1141.636393][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.648839][ T24] usb 4-1: USB disconnect, device number 108 [ 1141.774720][ T5848] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1141.782118][ T5848] pvrusb2: ********** [ 1141.786528][ T5848] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1141.797133][ T5848] pvrusb2: Important functionality might not be entirely working. [ 1141.805338][ T5848] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1141.817107][ T5848] pvrusb2: ********** [ 1141.973355][ T9915] Bluetooth: hci3: unexpected cc 0x1001 length: 1 < 9 [ 1141.981361][ T9915] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1142.062880][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.074788][ T2327] pvrusb2: Invalid write control endpoint [ 1142.116114][T12365] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1142.183648][T12360] pvrusb2: Invalid write control endpoint [ 1142.236454][ T5848] usb 5-1: USB disconnect, device number 110 [ 1142.487611][ T2327] pvrusb2: Invalid write control endpoint [ 1142.496569][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1142.507031][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1142.515177][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1142.525554][ T2327] pvrusb2: Device being rendered inoperable [ 1142.531734][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1142.539323][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1142.549381][ T2327] pvrusb2: Attached sub-driver cx25840 [ 1142.559722][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1142.570391][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1143.081049][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2046'. [ 1143.421457][T12378] x_tables: duplicate underflow at hook 4 [ 1143.636158][T12378] block nbd0: NBD_DISCONNECT [ 1143.641115][T12378] block nbd0: Send disconnect failed -107 [ 1143.702665][T12378] block nbd0: Send disconnect failed -22 [ 1143.824428][T12378] loop0: detected capacity change from 0 to 2048 [ 1143.855706][T12378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1143.935907][T12384] fuse: Unknown parameter 'use00000000000000000000' [ 1144.020424][T12378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.286133][T12378] netlink: 'syz.0.2049': attribute type 2 has an invalid length. [ 1144.346811][T12377] block nbd0: Disconnected due to user request. [ 1144.353392][T12377] block nbd0: shutting down sockets [ 1144.942647][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.059134][ T9915] Bluetooth: hci4: unexpected cc 0x1001 length: 1 < 9 [ 1145.061785][T12400] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2058'. [ 1145.066935][ T9915] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1145.475613][ T24] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1145.692398][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.703462][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.854743][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.865315][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.873805][ T24] usb 3-1: Product: syz [ 1145.882000][ T24] usb 3-1: Manufacturer: syz [ 1145.887082][ T24] usb 3-1: SerialNumber: syz [ 1145.901016][T12396] loop4: detected capacity change from 0 to 8192 [ 1145.954759][ T45] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1145.970934][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1145.978295][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.080235][ T30] audit: type=1800 audit(1747195071.621:151): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2054" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 1146.218040][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.229145][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1146.244005][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.309392][ T24] usb 3-1: 0:2 : does not exist [ 1146.380226][ T45] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1146.390170][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.399000][ T45] usb 4-1: Product: syz [ 1146.403423][ T45] usb 4-1: Manufacturer: syz [ 1146.408727][ T45] usb 4-1: SerialNumber: syz [ 1146.427934][ T24] usb 3-1: USB disconnect, device number 106 [ 1146.537927][ T45] usb 4-1: config 0 descriptor?? [ 1146.559349][ T45] usb 4-1: ucan: probing device on interface #0 [ 1146.566227][ T45] usb 4-1: ucan: invalid EP count (0) [ 1146.571883][ T45] usb 4-1: ucan: probe failed; try to update the device firmware [ 1146.848917][ T5848] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1146.871319][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.074630][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 1147.136421][ T5848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1147.146748][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.283967][ T5848] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1147.291498][ T5848] pvrusb2: ********** [ 1147.295892][ T5848] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1147.306423][ T5848] pvrusb2: Important functionality might not be entirely working. [ 1147.314582][ T5848] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1147.326317][ T5848] pvrusb2: ********** [ 1147.768737][ T2327] pvrusb2: Invalid write control endpoint [ 1147.799559][ T5848] usb 2-1: USB disconnect, device number 100 [ 1148.245938][ T2327] pvrusb2: Invalid write control endpoint [ 1148.253186][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1148.263139][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1148.271315][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1148.282612][ T2327] pvrusb2: Device being rendered inoperable [ 1148.293482][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1148.302505][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1148.312878][ T2327] pvrusb2: Attached sub-driver cx25840 [ 1148.318738][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1148.329448][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1148.826262][T12432] x_tables: duplicate underflow at hook 4 [ 1148.997432][T12432] block nbd4: NBD_DISCONNECT [ 1149.035957][ T45] usb 4-1: USB disconnect, device number 109 [ 1149.125480][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1149.231665][T12432] block nbd4: Send disconnect failed -22 [ 1149.543337][T12435] loop4: detected capacity change from 0 to 2048 [ 1149.555721][T12435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1149.608942][T12435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.868531][T12432] netlink: 'syz.4.2067': attribute type 2 has an invalid length. [ 1149.966248][T12430] block nbd4: Disconnected due to user request. [ 1149.972962][T12430] block nbd4: shutting down sockets [ 1150.399593][ T9915] Bluetooth: hci4: unexpected cc 0x1001 length: 1 < 9 [ 1150.407158][ T9915] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1150.443963][T12450] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2070'. [ 1150.729490][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.850278][T12470] fuse: Unknown parameter 'user_i00000000000000000000' [ 1151.994814][ T45] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1152.110355][T12462] batadv0: entered allmulticast mode [ 1152.327858][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.338433][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1152.466914][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1152.476637][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.490205][ T45] usb 5-1: Product: syz [ 1152.496270][ T45] usb 5-1: Manufacturer: syz [ 1152.501195][ T45] usb 5-1: SerialNumber: syz [ 1152.832155][ T45] usb 5-1: 0:2 : does not exist [ 1152.905486][T12459] loop0: detected capacity change from 0 to 8192 [ 1152.990293][ T45] usb 5-1: USB disconnect, device number 111 [ 1153.157441][ T30] audit: type=1800 audit(1747195078.641:152): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2072" name="bus" dev="loop0" ino=22 res=0 errno=0 [ 1153.635326][T12481] batadv0: entered allmulticast mode [ 1153.724464][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.744482][ T5848] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1154.997382][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.008600][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1155.019807][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.159632][ T5848] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1155.169558][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.178448][ T5848] usb 4-1: Product: syz [ 1155.182905][ T5848] usb 4-1: Manufacturer: syz [ 1155.188174][ T5848] usb 4-1: SerialNumber: syz [ 1155.256708][ T5848] usb 4-1: config 0 descriptor?? [ 1155.273197][ T5848] usb 4-1: ucan: probing device on interface #0 [ 1155.280173][ T5848] usb 4-1: ucan: invalid EP count (0) [ 1155.286086][ T5848] usb 4-1: ucan: probe failed; try to update the device firmware [ 1155.933787][T12500] x_tables: duplicate underflow at hook 4 [ 1155.948116][ T9915] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 1155.955838][ T9915] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1155.986610][T12501] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2085'. [ 1156.114809][T12502] block nbd2: Device being setup by another task [ 1156.124713][T12500] block nbd2: NBD_DISCONNECT [ 1156.129628][T12500] block nbd2: Send disconnect failed -107 [ 1156.497792][T12500] loop2: detected capacity change from 0 to 2048 [ 1156.546739][T12500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1156.662412][T12500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.668567][T12506] fuse: Unknown parameter 'user_i00000000000000000000' [ 1156.762778][T12500] netlink: 'syz.2.2084': attribute type 2 has an invalid length. [ 1156.871091][T12497] block nbd2: Disconnected due to user request. [ 1156.878195][T12497] block nbd2: shutting down sockets [ 1157.158826][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.730572][ T5848] usb 4-1: USB disconnect, device number 110 [ 1158.502450][T12514] loop1: detected capacity change from 0 to 8192 [ 1158.711446][ T30] audit: type=1800 audit(1747195084.251:153): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2088" name="bus" dev="loop1" ino=23 res=0 errno=0 [ 1159.308014][ T9915] Bluetooth: hci4: unexpected cc 0x1001 length: 1 < 9 [ 1159.315536][ T9915] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1159.327269][T12539] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2097'. [ 1159.721418][T12543] fuse: Unknown parameter 'user_id00000000000000000000' [ 1160.221438][T12547] x_tables: duplicate underflow at hook 4 [ 1160.351297][T12549] block nbd1: Device being setup by another task [ 1160.359341][T12547] block nbd1: NBD_DISCONNECT [ 1160.376782][T12547] block nbd1: Send disconnect failed -107 [ 1160.768454][T12547] loop1: detected capacity change from 0 to 2048 [ 1160.814492][ T45] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1160.821393][T12547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1161.015916][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 1161.039886][ T45] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1161.045950][T12547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.049650][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.344329][T12548] netlink: 'syz.1.2099': attribute type 2 has an invalid length. [ 1161.367079][ T45] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1161.374754][ T45] pvrusb2: ********** [ 1161.379041][ T45] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1161.395002][ T45] pvrusb2: Important functionality might not be entirely working. [ 1161.403176][ T45] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1161.420599][ T45] pvrusb2: ********** [ 1161.738989][ T2327] pvrusb2: Invalid write control endpoint [ 1161.840269][T12545] block nbd1: Disconnected due to user request. [ 1161.847122][T12545] block nbd1: shutting down sockets [ 1161.861749][T12555] pvrusb2: Invalid write control endpoint [ 1161.931006][ T5848] usb 5-1: USB disconnect, device number 112 [ 1162.337457][ T2327] pvrusb2: Invalid write control endpoint [ 1162.343783][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1162.353880][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1162.361814][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1162.372173][ T2327] pvrusb2: Device being rendered inoperable [ 1162.378597][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1162.386067][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1162.396392][ T2327] pvrusb2: Attached sub-driver cx25840 [ 1162.402144][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1162.412666][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1162.797301][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.351264][T12561] infiniband syz1: set active [ 1163.356969][T12561] infiniband syz1: added macvlan1 [ 1163.472766][T12561] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1163.518507][ T9915] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 1163.534741][ T9915] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1163.595649][T12561] infiniband syz1: Couldn't open port 1 [ 1163.626921][T12576] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2109'. [ 1163.808956][T12561] RDS/IB: syz1: added [ 1163.813279][T12561] smc: adding ib device syz1 with port count 1 [ 1163.820396][T12561] smc: ib device syz1 port 1 has pnetid [ 1164.755226][T12577] loop1: detected capacity change from 0 to 8192 [ 1164.821738][ T30] audit: type=1800 audit(1747195090.371:154): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2107" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 1168.705507][T12613] x_tables: duplicate underflow at hook 4 [ 1168.955657][T12614] block nbd0: Device being setup by another task [ 1168.994712][T12615] block nbd0: NBD_DISCONNECT [ 1168.999752][T12615] block nbd0: Send disconnect failed -107 [ 1169.284606][T12613] loop0: detected capacity change from 0 to 2048 [ 1169.295374][T12613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1169.405022][T12613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.473295][T12613] netlink: 'syz.0.2117': attribute type 2 has an invalid length. [ 1169.506780][T12612] block nbd0: Disconnected due to user request. [ 1169.513352][T12612] block nbd0: shutting down sockets [ 1170.176779][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.039692][T12640] loop0: detected capacity change from 0 to 8192 [ 1174.165217][ T30] audit: type=1800 audit(1747195099.671:155): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2123" name="bus" dev="loop0" ino=25 res=0 errno=0 [ 1178.060447][T12653] x_tables: duplicate underflow at hook 4 [ 1178.168836][T12651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2127'. [ 1178.376819][T12655] block nbd2: NBD_DISCONNECT [ 1178.382052][T12655] block nbd2: Send disconnect failed -107 [ 1178.504895][T12655] block nbd2: Send disconnect failed -22 [ 1178.549378][T12653] loop2: detected capacity change from 0 to 2048 [ 1178.560376][T12653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1178.656606][T12653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.894776][T12653] netlink: 'syz.2.2128': attribute type 2 has an invalid length. [ 1178.999370][T12652] block nbd2: Disconnected due to user request. [ 1179.010256][T12652] block nbd2: shutting down sockets [ 1179.065686][T12659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1179.154650][T12659] EXT4-fs (loop2): Remounting filesystem read-only [ 1179.538361][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.678974][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1180.693305][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1180.703940][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1180.737946][T12675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1180.861794][T12675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1181.749845][T12675] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 1182.371671][T12689] x_tables: duplicate underflow at hook 4 [ 1182.636145][T12691] block nbd1: Device being setup by another task [ 1182.695562][T12689] block nbd1: NBD_DISCONNECT [ 1182.700501][T12689] block nbd1: Send disconnect failed -107 [ 1183.014789][T12675] Bluetooth: hci5: command tx timeout [ 1183.457946][T12689] loop1: detected capacity change from 0 to 2048 [ 1183.547455][T12689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1183.700751][T12689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.039284][T12689] netlink: 'syz.1.2141': attribute type 2 has an invalid length. [ 1184.189699][T12688] block nbd1: Disconnected due to user request. [ 1184.196561][T12688] block nbd1: shutting down sockets [ 1184.837670][T12674] chnl_net:caif_netlink_parms(): no params data found [ 1184.953384][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.065625][ T9915] Bluetooth: hci5: command tx timeout [ 1187.145573][ T9915] Bluetooth: hci5: command 0x040f tx timeout [ 1188.050491][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.058859][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.067377][T12674] bridge_slave_0: entered allmulticast mode [ 1188.078960][T12674] bridge_slave_0: entered promiscuous mode [ 1188.212178][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.226469][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.235189][T12674] bridge_slave_1: entered allmulticast mode [ 1188.420765][T12674] bridge_slave_1: entered promiscuous mode [ 1188.884392][T12674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.897742][T12753] loop2: detected capacity change from 0 to 7 [ 1188.926000][T12753] Dev loop2: unable to read RDB block 7 [ 1188.932111][T12753] loop2: AHDI p1 p2 p3 [ 1188.937077][T12753] loop2: partition table partially beyond EOD, truncated [ 1188.949365][T12753] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1188.957814][T12753] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1189.235882][ T9915] Bluetooth: hci5: command 0x040f tx timeout [ 1189.278922][ T5848] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1189.298534][T12674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.489036][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.500247][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1189.596890][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1189.606606][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.615252][ T5848] usb 2-1: Product: syz [ 1189.620199][ T5848] usb 2-1: Manufacturer: syz [ 1189.625269][ T5848] usb 2-1: SerialNumber: syz [ 1189.949615][T12674] team0: Port device team_slave_0 added [ 1190.014466][T12674] team0: Port device team_slave_1 added [ 1190.060470][ T5848] usb 2-1: 0:2 : does not exist [ 1190.073824][ T5848] usb 2-1: unit 6 not found! [ 1190.236767][ T5848] usb 2-1: USB disconnect, device number 101 [ 1190.591167][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.660044][T12674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.667488][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.700316][T12674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.909943][T12674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.917420][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.943879][T12674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.242211][T12763] x_tables: duplicate underflow at hook 4 [ 1191.304804][ T9915] Bluetooth: hci5: command 0x040f tx timeout [ 1191.477127][T12765] block nbd0: NBD_DISCONNECT [ 1191.482180][T12765] block nbd0: Send disconnect failed -107 [ 1191.591616][T12765] block nbd0: Send disconnect failed -22 [ 1191.642982][T12768] loop0: detected capacity change from 0 to 2048 [ 1191.654167][T12768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1191.731315][T12674] hsr_slave_0: entered promiscuous mode [ 1191.742048][T12674] hsr_slave_1: entered promiscuous mode [ 1191.751291][T12674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.759317][T12674] Cannot create hsr debugfs directory [ 1191.798588][T12768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.149651][T12771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1192.199642][T12771] EXT4-fs (loop0): Remounting filesystem read-only [ 1192.281169][T12765] netlink: 'syz.0.2156': attribute type 2 has an invalid length. [ 1192.979974][T12761] block nbd0: Disconnected due to user request. [ 1192.987459][T12761] block nbd0: shutting down sockets [ 1194.250546][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.399677][ T5848] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1194.768774][ T5848] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1194.783687][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.794549][ T5848] usb 2-1: Product: syz [ 1194.799281][ T5848] usb 2-1: Manufacturer: syz [ 1194.804308][ T5848] usb 2-1: SerialNumber: syz [ 1194.889195][ T5848] usb 2-1: config 0 descriptor?? [ 1195.111158][ T5848] hso 2-1:0.0: Failed to find INT IN ep [ 1195.120513][ T5848] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1195.367408][ T5848] usb 2-1: USB disconnect, device number 102 [ 1196.567743][T12674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.818997][T12674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1196.916879][T12674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1197.097172][T12674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1199.070331][T12674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.221640][T12675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1199.232188][T12675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1199.244096][T12675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1199.260758][T12675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1199.288120][T12675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1199.760443][T12674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.924822][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.932439][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.047158][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.054871][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.529547][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1201.477414][T12675] Bluetooth: hci0: command tx timeout [ 1201.980197][T12674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1202.114418][ T5848] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1202.570409][ T5848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.581274][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1202.789170][ T5848] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1202.801894][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.812541][ T5848] usb 3-1: Product: syz [ 1202.819445][ T5848] usb 3-1: Manufacturer: syz [ 1202.826812][ T5848] usb 3-1: SerialNumber: syz [ 1203.321070][ T5848] usb 3-1: 0:2 : does not exist [ 1203.326482][ T5848] usb 3-1: unit 6 not found! [ 1203.578343][T12675] Bluetooth: hci0: command tx timeout [ 1203.592253][ T5848] usb 3-1: USB disconnect, device number 107 [ 1203.865310][T12799] chnl_net:caif_netlink_parms(): no params data found [ 1203.881989][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.775859][T12822] x_tables: duplicate underflow at hook 4 [ 1204.880068][T12674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.965472][T12824] block nbd2: Device being setup by another task [ 1204.978212][ T3524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.998773][T12822] block nbd2: NBD_DISCONNECT [ 1205.003748][T12822] block nbd2: Send disconnect failed -107 [ 1205.212904][ T3524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.357092][ T3524] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1205.368979][ T3524] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 1205.421155][T12829] netlink: 'syz.0.2169': attribute type 4 has an invalid length. [ 1205.435556][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2169'. [ 1205.477769][ T3524] team0: Port device netdevsim1 removed [ 1205.496664][ T3524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.547169][T12822] loop2: detected capacity change from 0 to 2048 [ 1205.587697][T12822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1205.674456][T12675] Bluetooth: hci0: command tx timeout [ 1205.800356][ T3524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.811822][T12822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.971637][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.980936][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.989210][T12799] bridge_slave_0: entered allmulticast mode [ 1206.008235][T12799] bridge_slave_0: entered promiscuous mode [ 1206.023397][T12822] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 1206.151688][T12821] block nbd2: Disconnected due to user request. [ 1206.159280][T12821] block nbd2: shutting down sockets [ 1206.230315][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.238183][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.255035][T12799] bridge_slave_1: entered allmulticast mode [ 1206.266629][T12799] bridge_slave_1: entered promiscuous mode [ 1206.554513][ T3524] team0: left allmulticast mode [ 1206.559690][ T3524] team_slave_0: left allmulticast mode [ 1206.567781][ T3524] team_slave_1: left allmulticast mode [ 1206.573571][ T3524] team0: left promiscuous mode [ 1206.578733][ T3524] team_slave_0: left promiscuous mode [ 1206.585557][ T3524] team_slave_1: left promiscuous mode [ 1206.592911][ T3524] bridge0: port 3(team0) entered disabled state [ 1206.700602][ T3524] bridge_slave_1: left allmulticast mode [ 1206.707004][ T3524] bridge_slave_1: left promiscuous mode [ 1206.713637][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.719379][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.790831][ T3524] bridge_slave_0: left allmulticast mode [ 1206.797195][ T3524] bridge_slave_0: left promiscuous mode [ 1206.803935][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.357790][ T8756] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1207.421328][T12843] [U] ³•¯ [ 1207.440975][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.448403][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.488099][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.506842][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.534631][ T3524] bond0 (unregistering): Released all slaves [ 1207.662329][ T8756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.673518][ T8756] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1207.686508][ T8756] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1207.696212][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.707582][ T8756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.754988][T12675] Bluetooth: hci0: command tx timeout [ 1207.803522][ T8756] usb 2-1: config 0 descriptor?? [ 1207.815102][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.363272][T12799] team0: Port device team_slave_0 added [ 1208.447505][T12799] team0: Port device team_slave_1 added [ 1208.928512][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.935986][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.963056][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.068837][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.076411][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.103044][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.248004][T12674] veth0_vlan: entered promiscuous mode [ 1209.504659][ T3524] hsr_slave_0: left promiscuous mode [ 1209.524838][ T3524] hsr_slave_1: left promiscuous mode [ 1209.532952][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.541011][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.599732][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.607729][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.699934][ T3524] veth1_macvtap: left promiscuous mode [ 1209.706183][ T3524] veth0_macvtap: left promiscuous mode [ 1209.712099][ T3524] veth1_vlan: left promiscuous mode [ 1209.719506][ T3524] veth0_vlan: left promiscuous mode [ 1210.304879][ T5848] usb 2-1: USB disconnect, device number 103 [ 1210.796367][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 1210.839797][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 1211.005922][ T3524] batadv0 (unregistering): left allmulticast mode [ 1211.315397][T12674] veth1_vlan: entered promiscuous mode [ 1211.905978][T12799] hsr_slave_0: entered promiscuous mode [ 1211.916755][T12799] hsr_slave_1: entered promiscuous mode [ 1211.926007][T12799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.934278][T12799] Cannot create hsr debugfs directory [ 1212.143117][T12886] x_tables: duplicate underflow at hook 4 [ 1212.346109][T12888] block nbd0: Device being setup by another task [ 1212.366250][T12886] block nbd0: NBD_DISCONNECT [ 1212.371306][T12886] block nbd0: Send disconnect failed -107 [ 1212.555791][T12674] veth0_macvtap: entered promiscuous mode [ 1212.712174][T12674] veth1_macvtap: entered promiscuous mode [ 1212.881299][T12889] loop0: detected capacity change from 0 to 2048 [ 1212.935109][T12889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1213.038642][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.050111][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.060860][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.071994][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.082307][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.093312][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.106752][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.136794][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.154531][T12674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.319713][T12889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.415672][ T3849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.437771][T12895] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1213.451298][T12897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2184'. [ 1213.549356][T12895] EXT4-fs (loop0): Remounting filesystem read-only [ 1213.596445][ T3849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.688688][ T3849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.757619][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.768688][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.779129][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.791856][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.802194][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.813100][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.827963][T12674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.840087][T12674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.856101][T12674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.882110][T12888] netlink: 'syz.0.2182': attribute type 2 has an invalid length. [ 1213.907732][T12674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.917037][T12674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.930020][T12674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.940280][T12674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.996872][T12885] block nbd0: Disconnected due to user request. [ 1214.003635][T12885] block nbd0: shutting down sockets [ 1214.045874][ T3849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.441108][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.509181][ T3849] team0: left allmulticast mode [ 1214.515115][ T3849] team_slave_0: left allmulticast mode [ 1214.520871][ T3849] team_slave_1: left allmulticast mode [ 1214.526901][ T3849] team0: left promiscuous mode [ 1214.532000][ T3849] team_slave_0: left promiscuous mode [ 1214.545080][ T3849] team_slave_1: left promiscuous mode [ 1214.552414][ T3849] bridge0: port 3(team0) entered disabled state [ 1214.678855][ T3849] bridge_slave_1: left allmulticast mode [ 1214.686595][ T3849] bridge_slave_1: left promiscuous mode [ 1214.693309][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.725699][ T5848] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1214.777643][ T3849] bridge_slave_0: left allmulticast mode [ 1214.783699][ T3849] bridge_slave_0: left promiscuous mode [ 1214.790606][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.295277][ T3849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.319003][ T3849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.338309][ T5848] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1215.347933][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.360961][ T5848] usb 2-1: Product: syz [ 1215.366958][ T5848] usb 2-1: Manufacturer: syz [ 1215.371837][ T5848] usb 2-1: SerialNumber: syz [ 1215.388484][ T3849] bond0 (unregistering): Released all slaves [ 1215.412007][ T5848] usb 2-1: config 0 descriptor?? [ 1215.648588][ T3849] tipc: Left network mode [ 1215.727097][ T5848] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1215.941142][ T5848] usb 2-1: USB disconnect, device number 104 [ 1216.227110][T12799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1216.349439][T12799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1216.477736][T12799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1216.886821][T12799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1217.054878][ T3849] hsr_slave_0: left promiscuous mode [ 1217.094486][ T3849] hsr_slave_1: left promiscuous mode [ 1217.107410][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.115424][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.228404][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.236395][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.476288][ T3849] veth1_macvtap: left promiscuous mode [ 1217.482258][ T3849] veth0_macvtap: left promiscuous mode [ 1217.488461][ T3849] veth1_vlan: left promiscuous mode [ 1217.494883][ T3849] veth0_vlan: left promiscuous mode [ 1217.938465][ T5850] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1218.175468][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.186743][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1218.196348][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1218.304900][ T5850] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1218.315789][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.325302][ T5850] usb 2-1: Product: syz [ 1218.333073][ T5850] usb 2-1: Manufacturer: syz [ 1218.338974][ T5850] usb 2-1: SerialNumber: syz [ 1218.715890][ T5850] usb 2-1: 0:2 : does not exist [ 1218.721160][ T5850] usb 2-1: unit 6 not found! [ 1218.782054][ T3849] team0 (unregistering): Port device team_slave_1 removed [ 1218.884886][ T5850] usb 2-1: USB disconnect, device number 105 [ 1218.908712][ T3849] team0 (unregistering): Port device team_slave_0 removed [ 1219.126715][ T3849] batadv0 (unregistering): left allmulticast mode [ 1219.807379][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.236295][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 1220.660652][T12955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2194'. [ 1220.793348][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.912576][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.090307][ T3849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.098123][ T3849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.263917][ T3849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.271624][ T3849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.532746][T12675] Bluetooth: Frame is too long (len 18, expected len 4) [ 1221.615564][T12963] x_tables: duplicate underflow at hook 4 [ 1221.776965][T12963] block nbd1: NBD_DISCONNECT [ 1221.781984][T12963] block nbd1: Send disconnect failed -107 [ 1221.799014][T12963] block nbd1: Send disconnect failed -22 [ 1222.100498][T12963] loop1: detected capacity change from 0 to 2048 [ 1222.137280][T12963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1222.257603][T12963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.398498][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 1222.467380][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 1222.533384][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 1222.577410][T12963] netlink: 'syz.1.2195': attribute type 2 has an invalid length. [ 1222.757338][T12960] block nbd1: Disconnected due to user request. [ 1222.763928][T12960] block nbd1: shutting down sockets [ 1222.817898][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.075218][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.017641][T13001] loop2: detected capacity change from 0 to 7 [ 1224.076473][T13001] Dev loop2: unable to read RDB block 7 [ 1224.083843][T13001] loop2: AHDI p1 p2 p3 [ 1224.088705][T13001] loop2: partition table partially beyond EOD, truncated [ 1224.098992][T13001] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1224.107499][T13001] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1224.644550][T10057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.653194][T10057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.153328][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.161965][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.513712][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 1225.886675][T12799] veth0_vlan: entered promiscuous mode [ 1226.078302][T12799] veth1_vlan: entered promiscuous mode [ 1226.186808][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1226.546867][T12799] veth0_macvtap: entered promiscuous mode [ 1226.593180][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1226.651920][T12799] veth1_macvtap: entered promiscuous mode [ 1226.671635][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1226.717891][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1226.906658][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.917746][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.931506][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.943410][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.954386][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.965457][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.976484][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.987401][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.002816][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.341627][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.352871][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.363174][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.374986][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.386033][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.397359][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.408160][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.419225][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.434901][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.506041][T13032] x_tables: duplicate underflow at hook 4 [ 1227.685907][T13032] block nbd2: NBD_DISCONNECT [ 1227.690862][T13032] block nbd2: Send disconnect failed -107 [ 1227.742021][T12799] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.755030][T12799] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.769685][T12799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.779956][T12799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.804692][T13032] block nbd2: Send disconnect failed -22 [ 1228.419938][T13032] loop2: detected capacity change from 0 to 2048 [ 1228.497641][T13032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1228.786955][T13032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.004951][T13032] netlink: 'syz.2.2208': attribute type 2 has an invalid length. [ 1229.129543][T13031] block nbd2: Disconnected due to user request. [ 1229.136564][T13031] block nbd2: shutting down sockets [ 1229.603651][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.753947][T13072] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2216'. [ 1231.617187][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 1231.699183][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 1231.821924][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 1231.956575][T13087] warning: `syz.5.2220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1232.657431][T13093] netlink: 'syz.0.2222': attribute type 24 has an invalid length. [ 1232.937933][T13099] x_tables: duplicate underflow at hook 4 [ 1233.125646][T13099] block nbd1: NBD_DISCONNECT [ 1233.130595][T13099] block nbd1: Send disconnect failed -107 [ 1233.192087][T13099] block nbd1: Send disconnect failed -22 [ 1233.479386][T13101] loop1: detected capacity change from 0 to 2048 [ 1233.597586][T13101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1233.818000][T13101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1233.992217][ T9915] Bluetooth: hci0: command 0x0405 tx timeout [ 1234.217557][T13099] netlink: 'syz.1.2223': attribute type 2 has an invalid length. [ 1234.277337][T13098] block nbd1: Disconnected due to user request. [ 1234.285246][T13098] block nbd1: shutting down sockets [ 1234.775648][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.918362][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.927207][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.039765][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.048994][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.405383][T13136] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2229'. [ 1235.595321][T12675] Bluetooth: Frame is too long (len 18, expected len 4) [ 1236.287350][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 1236.374193][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 1236.476373][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 1237.545517][T13166] x_tables: duplicate underflow at hook 4 [ 1237.716762][T13170] block nbd6: Device being setup by another task [ 1237.788060][T13166] block nbd6: NBD_DISCONNECT [ 1237.795037][T13166] block nbd6: Send disconnect failed -107 [ 1238.149917][T13170] loop6: detected capacity change from 0 to 2048 [ 1238.257584][T13170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1238.475941][T13170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1238.593571][T13174] syzkaller0: entered promiscuous mode [ 1238.599587][T13174] syzkaller0: entered allmulticast mode [ 1238.724374][T13166] netlink: 'syz.6.2239': attribute type 2 has an invalid length. [ 1238.835565][T13163] block nbd6: Disconnected due to user request. [ 1238.842274][T13163] block nbd6: shutting down sockets [ 1239.518153][T12799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.200680][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 1240.277299][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 1240.337862][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 1240.726686][T13205] netlink: 'syz.5.2250': attribute type 25 has an invalid length. [ 1241.137978][ T5850] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1241.364303][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 1241.464875][ T5850] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1241.478349][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.488486][ T5850] usb 2-1: Product: syz [ 1241.492926][ T5850] usb 2-1: Manufacturer: syz [ 1241.498082][ T5850] usb 2-1: SerialNumber: syz [ 1241.538059][ T5850] usb 2-1: config 0 descriptor?? [ 1241.789126][ T5850] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1241.818395][T13222] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2256'. [ 1242.090726][ T5850] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1242.182709][ T5850] usb 2-1: USB disconnect, device number 106 [ 1242.416145][T13225] block nbd2: NBD_DISCONNECT [ 1242.421407][T13225] block nbd2: Send disconnect failed -107 [ 1242.441916][T13225] block nbd2: Send disconnect failed -22 [ 1242.881224][T13226] loop2: detected capacity change from 0 to 2048 [ 1242.967323][T13226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1243.249780][ T5850] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1243.279050][T13226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1243.484588][ T5850] usb 6-1: device descriptor read/64, error -71 [ 1243.501306][T13225] netlink: 'syz.2.2257': attribute type 2 has an invalid length. [ 1243.637649][T13224] block nbd2: Disconnected due to user request. [ 1243.644653][T13224] block nbd2: shutting down sockets [ 1243.764536][ T5850] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1243.944728][ T5850] usb 6-1: device descriptor read/64, error -71 [ 1244.047475][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.059756][ T5850] usb usb6-port1: attempt power cycle [ 1244.453080][ T5850] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1244.525430][ T5850] usb 6-1: device descriptor read/8, error -71 [ 1244.545525][T12699] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1244.754748][T12699] usb 2-1: Using ep0 maxpacket: 32 [ 1244.782270][T12699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.794959][T12699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.805938][T12699] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1244.815549][T12699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.835252][ T5850] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1244.912553][ T5850] usb 6-1: device descriptor read/8, error -71 [ 1244.944952][T12699] usb 2-1: config 0 descriptor?? [ 1244.967692][T12699] hub 2-1:0.0: USB hub found [ 1245.026867][ T5850] usb usb6-port1: unable to enumerate USB device [ 1245.177031][T13261] loop2: detected capacity change from 0 to 7 [ 1245.226252][T13261] Dev loop2: unable to read RDB block 7 [ 1245.232709][T13261] loop2: unable to read partition table [ 1245.235179][T12699] hub 2-1:0.0: 1 port detected [ 1245.274393][T13261] loop2: partition table beyond EOD, truncated [ 1245.281209][T13261] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1245.791231][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'. [ 1246.195668][T12699] hub 2-1:0.0: activate --> -90 [ 1246.202378][ T5848] usb 2-1: USB disconnect, device number 107 [ 1246.428425][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2267'. [ 1247.483295][T12675] Bluetooth: hci0: unexpected cc 0x1001 length: 1 < 9 [ 1247.490663][T12675] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1247.497074][T13276] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2271'. [ 1247.523452][T13278] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2270'. [ 1248.337067][T13289] x_tables: duplicate underflow at hook 4 [ 1248.475617][T13289] block nbd2: NBD_DISCONNECT [ 1248.480558][T13289] block nbd2: Send disconnect failed -107 [ 1248.545367][T13289] block nbd2: Send disconnect failed -22 [ 1248.644965][ T5848] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1248.855391][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 1248.897771][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.910628][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.921076][ T5848] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1248.930727][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.021556][T13289] loop2: detected capacity change from 0 to 2048 [ 1249.087389][ T5848] usb 6-1: config 0 descriptor?? [ 1249.116471][T13289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1249.157694][ T5848] hub 6-1:0.0: USB hub found [ 1249.418961][T13289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1249.419062][ T5848] hub 6-1:0.0: 1 port detected [ 1249.738285][T13289] netlink: 'syz.2.2274': attribute type 2 has an invalid length. [ 1249.922539][T13310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1250.006405][T13287] block nbd2: Disconnected due to user request. [ 1250.013293][T13287] block nbd2: shutting down sockets [ 1250.098975][ T5848] hub 6-1:0.0: activate --> -90 [ 1250.527166][T12699] usb 6-1: USB disconnect, device number 6 [ 1251.518397][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.674962][ T5848] usb 6-1-port1: config error [ 1252.804248][T12675] Bluetooth: hci2: unexpected cc 0x1001 length: 1 < 9 [ 1252.811605][T12675] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1252.855677][T13337] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2286'. [ 1253.395041][T13344] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2288'. [ 1254.356163][T13361] x_tables: duplicate underflow at hook 4 [ 1254.511619][T13363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'. [ 1254.598871][T13365] block nbd6: NBD_DISCONNECT [ 1254.603917][T13365] block nbd6: Send disconnect failed -107 [ 1254.707164][T13365] block nbd6: Send disconnect failed -22 [ 1255.130624][T13361] loop6: detected capacity change from 0 to 2048 [ 1255.206946][T13361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1255.558974][T13361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.645556][T13371] netlink: 'syz.5.2295': attribute type 24 has an invalid length. [ 1255.789041][T13361] netlink: 'syz.6.2292': attribute type 2 has an invalid length. [ 1255.921213][T13357] block nbd6: Disconnected due to user request. [ 1255.929104][T13357] block nbd6: shutting down sockets [ 1256.255939][T12799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.109765][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2307'. [ 1258.209184][T13396] loop5: detected capacity change from 0 to 8192 [ 1258.413447][ T30] audit: type=1800 audit(1747195183.961:156): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2302" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 1259.146512][T13423] x_tables: duplicate underflow at hook 4 [ 1259.290615][T13423] block nbd0: NBD_DISCONNECT [ 1259.295900][T13423] block nbd0: Send disconnect failed -107 [ 1259.454355][T13423] block nbd0: Send disconnect failed -22 [ 1259.776968][T13426] loop0: detected capacity change from 0 to 2048 [ 1259.831986][T13426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1260.067050][T13426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1260.384261][T13423] netlink: 'syz.0.2311': attribute type 2 has an invalid length. [ 1260.424727][ T5848] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1260.511101][T13420] block nbd0: Disconnected due to user request. [ 1260.522933][T13420] block nbd0: shutting down sockets [ 1260.654378][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 1260.702645][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.714972][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.728787][ T5848] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1260.739465][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.788143][ T5848] usb 2-1: config 0 descriptor?? [ 1260.806378][ T5848] hub 2-1:0.0: USB hub found [ 1261.078483][ T5848] hub 2-1:0.0: 1 port detected [ 1261.187549][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.965018][ T5848] usb 2-1: USB disconnect, device number 108 [ 1262.078329][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2320'. [ 1263.693923][T13461] loop5: detected capacity change from 0 to 8192 [ 1263.735736][T12699] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1263.906032][ T30] audit: type=1800 audit(1747195189.451:157): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2322" name="bus" dev="loop5" ino=27 res=0 errno=0 [ 1264.034856][T12699] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1264.044792][T12699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.053115][T12699] usb 2-1: Product: syz [ 1264.057809][T12699] usb 2-1: Manufacturer: syz [ 1264.062778][T12699] usb 2-1: SerialNumber: syz [ 1264.220660][T12699] usb 2-1: config 0 descriptor?? [ 1264.484720][T12699] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1265.791610][T13490] x_tables: duplicate underflow at hook 4 [ 1265.960662][T13490] block nbd5: NBD_DISCONNECT [ 1265.966326][T13490] block nbd5: Send disconnect failed -107 [ 1266.015184][T13490] block nbd5: Send disconnect failed -22 [ 1266.102937][T13495] loop5: detected capacity change from 0 to 2048 [ 1266.179959][T13495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1266.267629][ T5848] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1266.324657][T12699] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1266.421209][T13495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.502176][ T5848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1266.513789][ T5848] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1266.526425][ T5848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1266.657488][T13489] block nbd5: Disconnected due to user request. [ 1266.668774][T13489] block nbd5: shutting down sockets [ 1266.678643][ T5848] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1266.688523][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.697022][ T5848] usb 7-1: Product: syz [ 1266.701458][ T5848] usb 7-1: Manufacturer: syz [ 1266.706579][ T5848] usb 7-1: SerialNumber: syz [ 1266.811609][ T5848] usb 7-1: config 0 descriptor?? [ 1266.820110][T13493] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1266.854843][T13493] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1266.915783][ T5848] usb 7-1: ucan: probing device on interface #0 [ 1267.120304][T12674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.156884][ T5848] usb 7-1: ucan: could not read protocol version, ret=-32 [ 1267.165362][ T5848] usb 7-1: ucan: probe failed; try to update the device firmware [ 1267.943277][ T5848] usb 2-1: USB disconnect, device number 109 [ 1268.394438][T12945] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1268.594356][T12945] usb 6-1: Using ep0 maxpacket: 32 [ 1268.621936][T12945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.633638][T12945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.644267][T12945] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1268.653740][T12945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.763180][T12945] usb 6-1: config 0 descriptor?? [ 1268.802735][T12945] hub 6-1:0.0: USB hub found [ 1268.861160][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.868066][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1268.998564][T12945] hub 6-1:0.0: 1 port detected [ 1269.367290][T12699] usb 7-1: USB disconnect, device number 2 [ 1269.405606][ T5848] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1269.684774][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 1269.774532][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.786208][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.797586][ T5848] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1269.807963][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.882740][T12945] usb 6-1: USB disconnect, device number 7 [ 1269.997687][ T5848] usb 3-1: config 0 descriptor?? [ 1270.046336][ T5848] hub 3-1:0.0: USB hub found [ 1270.302425][ T5848] hub 3-1:0.0: 1 port detected [ 1270.516408][T13543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2343'. [ 1271.181040][ T5848] hub 3-1:0.0: activate --> -90 [ 1271.187146][T12699] usb 3-1: USB disconnect, device number 108 [ 1271.533320][T13554] x_tables: duplicate underflow at hook 4 [ 1271.707196][T13556] block nbd0: Device being setup by another task [ 1271.714983][T13554] block nbd0: NBD_DISCONNECT [ 1271.720135][T13554] block nbd0: Send disconnect failed -107 [ 1272.162374][T13554] loop0: detected capacity change from 0 to 2048 [ 1272.218802][T13554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1272.459330][T13554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.739830][T13553] block nbd0: Disconnected due to user request. [ 1272.746859][T13553] block nbd0: shutting down sockets [ 1272.924882][T12699] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1273.175736][ T5850] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1273.263131][T12699] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1273.274199][T12699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.282548][T12699] usb 3-1: Product: syz [ 1273.288218][T12699] usb 3-1: Manufacturer: syz [ 1273.293738][T12699] usb 3-1: SerialNumber: syz [ 1273.356601][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.391267][T12699] usb 3-1: config 0 descriptor?? [ 1273.436011][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1273.447987][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1273.460551][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1273.544613][ T5850] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1273.556239][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.565135][ T5850] usb 7-1: Product: syz [ 1273.570080][ T5850] usb 7-1: Manufacturer: syz [ 1273.575540][ T5850] usb 7-1: SerialNumber: syz [ 1273.671244][T12699] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1273.715233][ T5850] usb 7-1: config 0 descriptor?? [ 1273.728287][T13571] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1273.778001][T13571] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1273.864549][ T5850] usb 7-1: ucan: probing device on interface #0 [ 1274.113258][ T5850] usb 7-1: ucan: could not read protocol version, ret=-32 [ 1274.121579][ T5850] usb 7-1: ucan: probe failed; try to update the device firmware [ 1275.061525][ T5850] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1275.293891][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 1275.306727][T13591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2356'. [ 1275.359767][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.375474][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.387522][ T5850] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1275.397302][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.458314][ T5850] usb 6-1: config 0 descriptor?? [ 1275.504519][T12699] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1275.560745][ T5850] hub 6-1:0.0: USB hub found [ 1275.733376][ T5850] hub 6-1:0.0: 1 port detected [ 1276.155716][ T5848] usb 7-1: USB disconnect, device number 3 [ 1276.613361][ T5848] usb 6-1: USB disconnect, device number 8 [ 1276.995318][ T5850] usb 3-1: USB disconnect, device number 109 [ 1279.379555][T13618] block nbd6: Device being setup by another task [ 1279.396072][T13617] block nbd6: NBD_DISCONNECT [ 1279.401006][T13617] block nbd6: Send disconnect failed -107 [ 1279.812415][T13618] loop6: detected capacity change from 0 to 2048 [ 1279.919296][T13618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1280.176621][T13618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.548807][T13616] block nbd6: Disconnected due to user request. [ 1280.555646][T13616] block nbd6: shutting down sockets [ 1281.064505][T12799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.645418][ T5848] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1281.995369][ T5848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1282.005012][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.013362][ T5848] usb 2-1: Product: syz [ 1282.018134][ T5848] usb 2-1: Manufacturer: syz [ 1282.027834][ T5848] usb 2-1: SerialNumber: syz [ 1282.098722][ T5848] usb 2-1: config 0 descriptor?? [ 1282.365647][ T5848] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.485068][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2378'. [ 1284.654919][ T5848] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1285.484923][T13687] x_tables: duplicate underflow at hook 4 [ 1285.645174][T13687] block nbd2: NBD_DISCONNECT [ 1285.650133][T13687] block nbd2: Send disconnect failed -107 [ 1285.711496][T13687] block nbd2: Send disconnect failed -22 [ 1286.002225][ T5850] usb 2-1: USB disconnect, device number 110 [ 1286.114955][T13689] loop2: detected capacity change from 0 to 2048 [ 1286.181809][T13689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1286.336540][T13689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.563551][T13687] netlink: 'syz.2.2383': attribute type 2 has an invalid length. [ 1286.705129][T13686] block nbd2: Disconnected due to user request. [ 1286.711715][T13686] block nbd2: shutting down sockets [ 1286.806205][T13701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1286.863183][T13701] EXT4-fs (loop2): Remounting filesystem read-only [ 1287.297249][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.254851][ T5848] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1288.499840][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1288.511363][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1288.523750][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1288.637116][ T5848] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1288.646958][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.655514][ T5848] usb 3-1: Product: syz [ 1288.659940][ T5848] usb 3-1: Manufacturer: syz [ 1288.666884][ T5848] usb 3-1: SerialNumber: syz [ 1288.781191][ T5848] usb 3-1: config 0 descriptor?? [ 1288.807864][T13730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1288.834847][T13730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1288.897855][ T5848] usb 3-1: ucan: probing device on interface #0 [ 1289.148352][ T5848] usb 3-1: ucan: could not read protocol version, ret=0 [ 1289.155959][ T5848] usb 3-1: ucan: probe failed; try to update the device firmware [ 1289.951468][ T9915] Bluetooth: hci0: command 0x0405 tx timeout [ 1290.524969][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2400'. [ 1291.272150][ T5850] usb 3-1: USB disconnect, device number 110 [ 1292.065671][ T5848] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1292.258021][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 1292.354517][ T5848] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1292.367441][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.378279][ T5848] usb 3-1: Product: syz [ 1292.382751][ T5848] usb 3-1: Manufacturer: syz [ 1292.387853][ T5848] usb 3-1: SerialNumber: syz [ 1292.475508][ T5848] usb 3-1: config 0 descriptor?? [ 1292.725226][ T5848] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1293.394733][ T5848] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1293.480848][ T5848] usb 3-1: USB disconnect, device number 111 [ 1294.793144][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2413'. [ 1295.014468][ T5848] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1295.310497][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1295.323210][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1295.339049][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1295.429512][ T5848] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1295.442702][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.453125][ T5848] usb 2-1: Product: syz [ 1295.457775][ T5848] usb 2-1: Manufacturer: syz [ 1295.462753][ T5848] usb 2-1: SerialNumber: syz [ 1295.615622][ T5848] usb 2-1: config 0 descriptor?? [ 1295.626713][T13800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1295.676372][T13800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1295.773608][ T5848] usb 2-1: ucan: probing device on interface #0 [ 1295.979495][ T5848] usb 2-1: ucan: could not read protocol version, ret=0 [ 1295.987280][ T5848] usb 2-1: ucan: probe failed; try to update the device firmware [ 1296.384908][ T5848] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1296.621703][ T5848] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1296.631604][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.640361][ T5848] usb 7-1: Product: syz [ 1296.645192][ T5848] usb 7-1: Manufacturer: syz [ 1296.650272][ T5848] usb 7-1: SerialNumber: syz [ 1296.697271][ T5848] usb 7-1: config 0 descriptor?? [ 1296.947874][ T5848] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1298.325161][T12945] usb 2-1: USB disconnect, device number 111 [ 1299.087167][ T5848] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1299.798991][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2428'. [ 1300.423418][ T5848] usb 7-1: USB disconnect, device number 4 [ 1302.579426][ T5850] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1302.815885][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1302.827346][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1302.839622][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1303.061863][ T5850] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1303.071509][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.080680][ T5850] usb 7-1: Product: syz [ 1303.085333][ T5850] usb 7-1: Manufacturer: syz [ 1303.090185][ T5850] usb 7-1: SerialNumber: syz [ 1303.240648][ T5850] usb 7-1: config 0 descriptor?? [ 1303.249617][T13866] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1303.329995][T13866] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1303.439130][ T5850] usb 7-1: ucan: probing device on interface #0 [ 1303.686532][ T5850] usb 7-1: ucan: could not read protocol version, ret=0 [ 1303.693918][ T5850] usb 7-1: ucan: probe failed; try to update the device firmware [ 1303.952219][ T9915] Bluetooth: Frame is too long (len 18, expected len 4) [ 1304.905112][ T5850] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1305.154799][ T5850] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1305.168569][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.178505][ T5850] usb 6-1: Product: syz [ 1305.183088][ T5850] usb 6-1: Manufacturer: syz [ 1305.188110][ T5850] usb 6-1: SerialNumber: syz [ 1305.311079][ T5850] usb 6-1: config 0 descriptor?? [ 1305.585240][ T5850] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1305.707793][T12699] usb 7-1: USB disconnect, device number 5 [ 1306.505822][T12699] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1306.695743][T12699] usb 7-1: Using ep0 maxpacket: 8 [ 1306.747286][ T5802] Bluetooth: hci5: command 0x040f tx timeout [ 1306.771472][T12699] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1306.781431][T12699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.790297][T12699] usb 7-1: Product: syz [ 1306.795038][T12699] usb 7-1: Manufacturer: syz [ 1306.805370][T12699] usb 7-1: SerialNumber: syz [ 1306.857164][T12699] usb 7-1: config 0 descriptor?? [ 1307.081268][T12699] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1307.710575][T12699] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1307.785660][ T5850] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1307.832135][T12699] usb 7-1: USB disconnect, device number 6 [ 1308.852319][ T9915] Bluetooth: Frame is too long (len 18, expected len 4) [ 1309.305162][T12699] usb 6-1: USB disconnect, device number 9 [ 1312.305983][ T9915] Bluetooth: Frame is too long (len 18, expected len 4) [ 1312.478055][T12699] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1312.689943][T12699] usb 2-1: Using ep0 maxpacket: 32 [ 1312.717522][T12699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.729295][T12699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.743446][T12699] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1312.753637][T12699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.952603][T12699] usb 2-1: config 0 descriptor?? [ 1313.011042][T12699] hub 2-1:0.0: USB hub found [ 1313.175571][T12699] hub 2-1:0.0: 1 port detected [ 1313.474876][T12945] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1313.799970][T12699] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1313.808305][ T8756] usb 2-1: USB disconnect, device number 112 [ 1313.834962][T12945] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1313.845007][T12945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.853301][T12945] usb 6-1: Product: syz [ 1313.858095][T12945] usb 6-1: Manufacturer: syz [ 1313.862979][T12945] usb 6-1: SerialNumber: syz [ 1314.053243][T12945] usb 6-1: config 0 descriptor?? [ 1314.477993][T12945] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1315.625683][ T8756] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1315.806330][ T8756] usb 7-1: Using ep0 maxpacket: 8 [ 1315.909821][ T8756] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1315.923761][ T8756] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.933480][ T8756] usb 7-1: Product: syz [ 1315.938357][ T8756] usb 7-1: Manufacturer: syz [ 1315.943274][ T8756] usb 7-1: SerialNumber: syz [ 1316.014527][ T8756] usb 7-1: config 0 descriptor?? [ 1316.244536][ T8756] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1316.476422][ T8756] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1316.572052][ T8756] usb 7-1: USB disconnect, device number 7 [ 1316.691852][T12945] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1317.020648][T14007] 9pnet_fd: Insufficient options for proto=fd [ 1317.266036][T12945] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1317.397795][ T9915] Bluetooth: Frame is too long (len 18, expected len 4) [ 1317.475744][T12945] usb 3-1: Using ep0 maxpacket: 32 [ 1317.514386][T12945] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 1317.523146][T12945] usb 3-1: config 1 has no interface number 0 [ 1317.529816][T12945] usb 3-1: config 1 interface 242 has no altsetting 0 [ 1317.583277][T12945] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1317.593026][T12945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.601858][T12945] usb 3-1: Product: syz [ 1317.606375][T12945] usb 3-1: Manufacturer: syz [ 1317.611316][T12945] usb 3-1: SerialNumber: syz [ 1318.052270][ T5848] usb 6-1: USB disconnect, device number 10 [ 1319.026934][T14028] x_tables: duplicate underflow at hook 4 [ 1319.097047][T12945] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1319.125564][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2484'. [ 1319.143242][T12945] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1319.156137][T12945] ===================================================== [ 1319.163585][T12945] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 1319.171160][T12945] usbnet_probe+0x2e57/0x4390 [ 1319.176311][T12945] usb_probe_interface+0xd01/0x1310 [ 1319.181809][T12945] really_probe+0x4d1/0xd90 [ 1319.186895][T12945] __driver_probe_device+0x268/0x380 [ 1319.196437][T12945] driver_probe_device+0x70/0x8b0 [ 1319.201731][T12945] __device_attach_driver+0x4ee/0x950 [ 1319.208747][T12945] bus_for_each_drv+0x3e0/0x680 [ 1319.214280][T12945] __device_attach+0x3c8/0x5c0 [ 1319.219433][T12945] device_initial_probe+0x33/0x40 [ 1319.224945][T12945] bus_probe_device+0x3ba/0x5e0 [ 1319.230048][T12945] device_add+0x12a9/0x1c10 [ 1319.234968][T12945] usb_set_configuration+0x3493/0x3b70 [ 1319.240721][T12945] usb_generic_driver_probe+0xfc/0x290 [ 1319.246867][T12945] usb_probe_device+0x38a/0x690 [ 1319.251985][T12945] really_probe+0x4d1/0xd90 [ 1319.256846][T12945] __driver_probe_device+0x268/0x380 [ 1319.262361][T12945] driver_probe_device+0x70/0x8b0 [ 1319.264338][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2484'. [ 1319.267712][T12945] __device_attach_driver+0x4ee/0x950 [ 1319.282120][T12945] bus_for_each_drv+0x3e0/0x680 [ 1319.287415][T12945] __device_attach+0x3c8/0x5c0 [ 1319.296222][T12945] device_initial_probe+0x33/0x40 [ 1319.301460][T12945] bus_probe_device+0x3ba/0x5e0 [ 1319.308024][T12945] device_add+0x12a9/0x1c10 [ 1319.312826][T12945] usb_new_device+0x104b/0x20c0 [ 1319.318325][T12945] hub_event+0x5588/0x7580 [ 1319.323188][T12945] process_scheduled_works+0xb97/0x1d90 [ 1319.329191][T12945] worker_thread+0xedf/0x1590 [ 1319.334295][T12945] kthread+0xd59/0xf00 [ 1319.338668][T12945] ret_from_fork+0x6e/0x90 [ 1319.343509][T12945] ret_from_fork_asm+0x1a/0x30 [ 1319.348755][T12945] [ 1319.351203][T12945] Uninit was stored to memory at: [ 1319.356740][T12945] dev_addr_mod+0xb0/0x550 [ 1319.361509][T12945] aqc111_bind+0x35f/0x1150 [ 1319.366760][T12945] usbnet_probe+0xbe6/0x4390 [ 1319.371635][T12945] usb_probe_interface+0xd01/0x1310 [ 1319.377408][T12945] really_probe+0x4d1/0xd90 [ 1319.382144][T12945] __driver_probe_device+0x268/0x380 [ 1319.389725][T12945] driver_probe_device+0x70/0x8b0 [ 1319.399020][T12945] __device_attach_driver+0x4ee/0x950 [ 1319.405842][T12945] bus_for_each_drv+0x3e0/0x680 [ 1319.410964][T12945] __device_attach+0x3c8/0x5c0 [ 1319.416050][T12945] device_initial_probe+0x33/0x40 [ 1319.421324][T12945] bus_probe_device+0x3ba/0x5e0 [ 1319.427101][T12945] device_add+0x12a9/0x1c10 [ 1319.431885][T12945] usb_set_configuration+0x3493/0x3b70 [ 1319.437790][T12945] usb_generic_driver_probe+0xfc/0x290 [ 1319.443543][T12945] usb_probe_device+0x38a/0x690 [ 1319.448831][T12945] really_probe+0x4d1/0xd90 [ 1319.453556][T12945] __driver_probe_device+0x268/0x380 [ 1319.459368][T12945] driver_probe_device+0x70/0x8b0 [ 1319.464873][T12945] __device_attach_driver+0x4ee/0x950 [ 1319.470659][T12945] bus_for_each_drv+0x3e0/0x680 [ 1319.475882][T12945] __device_attach+0x3c8/0x5c0 [ 1319.480863][T12945] device_initial_probe+0x33/0x40 [ 1319.486213][T12945] bus_probe_device+0x3ba/0x5e0 [ 1319.491344][T12945] device_add+0x12a9/0x1c10 [ 1319.496320][T12945] usb_new_device+0x104b/0x20c0 [ 1319.505525][T12945] hub_event+0x5588/0x7580 [ 1319.510226][T12945] process_scheduled_works+0xb97/0x1d90 [ 1319.517978][T12945] worker_thread+0xedf/0x1590 [ 1319.522923][T12945] kthread+0xd59/0xf00 [ 1319.527399][T12945] ret_from_fork+0x6e/0x90 [ 1319.532100][T12945] ret_from_fork_asm+0x1a/0x30 [ 1319.537232][T12945] [ 1319.539679][T12945] Uninit was stored to memory at: [ 1319.545627][T12945] aqc111_bind+0x794/0x1150 [ 1319.550454][T12945] usbnet_probe+0xbe6/0x4390 [ 1319.555491][T12945] usb_probe_interface+0xd01/0x1310 [ 1319.560911][T12945] really_probe+0x4d1/0xd90 [ 1319.565746][T12945] __driver_probe_device+0x268/0x380 [ 1319.571272][T12945] driver_probe_device+0x70/0x8b0 [ 1319.577052][T12945] __device_attach_driver+0x4ee/0x950 [ 1319.582729][T12945] bus_for_each_drv+0x3e0/0x680 [ 1319.587964][T12945] __device_attach+0x3c8/0x5c0 [ 1319.592955][T12945] device_initial_probe+0x33/0x40 [ 1319.598481][T12945] bus_probe_device+0x3ba/0x5e0 [ 1319.607579][T12945] device_add+0x12a9/0x1c10 [ 1319.612883][T12945] usb_set_configuration+0x3493/0x3b70 [ 1319.620205][T12945] usb_generic_driver_probe+0xfc/0x290 [ 1319.626079][T12945] usb_probe_device+0x38a/0x690 [ 1319.631230][T12945] really_probe+0x4d1/0xd90 [ 1319.636058][T12945] __driver_probe_device+0x268/0x380 [ 1319.641585][T12945] driver_probe_device+0x70/0x8b0 [ 1319.646976][T12945] __device_attach_driver+0x4ee/0x950 [ 1319.652589][T12945] bus_for_each_drv+0x3e0/0x680 [ 1319.657887][T12945] __device_attach+0x3c8/0x5c0 [ 1319.662872][T12945] device_initial_probe+0x33/0x40 [ 1319.668366][T12945] bus_probe_device+0x3ba/0x5e0 [ 1319.673495][T12945] device_add+0x12a9/0x1c10 [ 1319.678580][T12945] usb_new_device+0x104b/0x20c0 [ 1319.683687][T12945] hub_event+0x5588/0x7580 [ 1319.688613][T12945] process_scheduled_works+0xb97/0x1d90 [ 1319.694622][T12945] worker_thread+0xedf/0x1590 [ 1319.699742][T12945] kthread+0xd59/0xf00 [ 1319.708316][T12945] ret_from_fork+0x6e/0x90 [ 1319.713050][T12945] ret_from_fork_asm+0x1a/0x30 [ 1319.719445][T12945] [ 1319.721922][T12945] Local variable buf.i created at: [ 1319.727365][T12945] aqc111_bind+0x221/0x1150 [ 1319.732127][T12945] usbnet_probe+0xbe6/0x4390 [ 1319.737362][T12945] [ 1319.739878][T12945] CPU: 0 UID: 0 PID: 12945 Comm: kworker/0:0 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1319.752924][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1319.763445][T12945] Workqueue: usb_hub_wq hub_event [ 1319.768890][T12945] ===================================================== [ 1319.776131][T12945] Disabling lock debugging due to kernel taint [ 1319.782456][T12945] Kernel panic - not syncing: kmsan.panic set ... [ 1319.789081][T12945] CPU: 0 UID: 0 PID: 12945 Comm: kworker/0:0 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1319.803203][T12945] Tainted: [B]=BAD_PAGE [ 1319.807528][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1319.817921][T12945] Workqueue: usb_hub_wq hub_event [ 1319.823324][T12945] Call Trace: [ 1319.826782][T12945] [ 1319.829886][T12945] __dump_stack+0x26/0x30 [ 1319.834543][T12945] dump_stack_lvl+0x53/0x270 [ 1319.839403][T12945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1319.845512][T12945] dump_stack+0x1e/0x25 [ 1319.849929][T12945] panic+0x4bd/0xd50 [ 1319.854177][T12945] kmsan_report+0x29d/0x2a0 [ 1319.858950][T12945] ? __netdev_printk+0x677/0xa00 [ 1319.864192][T12945] ? __msan_warning+0x96/0x120 [ 1319.869291][T12945] ? usbnet_probe+0x2e57/0x4390 [ 1319.874429][T12945] ? usb_probe_interface+0xd01/0x1310 [ 1319.880085][T12945] ? really_probe+0x4d1/0xd90 [ 1319.885546][T12945] ? __driver_probe_device+0x268/0x380 [ 1319.891250][T12945] ? driver_probe_device+0x70/0x8b0 [ 1319.896867][T12945] ? __device_attach_driver+0x4ee/0x950 [ 1319.902659][T12945] ? bus_for_each_drv+0x3e0/0x680 [ 1319.907950][T12945] ? __device_attach+0x3c8/0x5c0 [ 1319.913220][T12945] ? device_initial_probe+0x33/0x40 [ 1319.919136][T12945] ? bus_probe_device+0x3ba/0x5e0 [ 1319.924454][T12945] ? device_add+0x12a9/0x1c10 [ 1319.929503][T12945] ? usb_set_configuration+0x3493/0x3b70 [ 1319.935611][T12945] ? usb_generic_driver_probe+0xfc/0x290 [ 1319.941718][T12945] ? usb_probe_device+0x38a/0x690 [ 1319.947083][T12945] ? really_probe+0x4d1/0xd90 [ 1319.951991][T12945] ? __driver_probe_device+0x268/0x380 [ 1319.957734][T12945] ? driver_probe_device+0x70/0x8b0 [ 1319.963121][T12945] ? __device_attach_driver+0x4ee/0x950 [ 1319.968867][T12945] ? bus_for_each_drv+0x3e0/0x680 [ 1319.974138][T12945] ? __device_attach+0x3c8/0x5c0 [ 1319.979273][T12945] ? device_initial_probe+0x33/0x40 [ 1319.984651][T12945] ? bus_probe_device+0x3ba/0x5e0 [ 1319.989916][T12945] ? device_add+0x12a9/0x1c10 [ 1319.994936][T12945] ? usb_new_device+0x104b/0x20c0 [ 1320.000209][T12945] ? hub_event+0x5588/0x7580 [ 1320.005026][T12945] ? process_scheduled_works+0xb97/0x1d90 [ 1320.010954][T12945] ? worker_thread+0xedf/0x1590 [ 1320.016116][T12945] ? kthread+0xd59/0xf00 [ 1320.020685][T12945] ? ret_from_fork+0x6e/0x90 [ 1320.025543][T12945] ? ret_from_fork_asm+0x1a/0x30 [ 1320.030785][T12945] ? kmsan_get_metadata+0x105/0x1b0 [ 1320.036213][T12945] ? kmsan_get_metadata+0x105/0x1b0 [ 1320.041728][T12945] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1320.048188][T12945] ? kmsan_get_metadata+0x105/0x1b0 [ 1320.053617][T12945] __msan_warning+0x96/0x120 [ 1320.058408][T12945] usbnet_probe+0x2e57/0x4390 [ 1320.063338][T12945] ? pm_runtime_enable+0x3b2/0x4d0 [ 1320.068879][T12945] ? __pfx_usbnet_probe+0x10/0x10 [ 1320.074152][T12945] usb_probe_interface+0xd01/0x1310 [ 1320.079582][T12945] ? __pfx_usb_probe_interface+0x10/0x10 [ 1320.085491][T12945] really_probe+0x4d1/0xd90 [ 1320.090234][T12945] __driver_probe_device+0x268/0x380 [ 1320.095761][T12945] driver_probe_device+0x70/0x8b0 [ 1320.101093][T12945] ? kmsan_get_metadata+0x105/0x1b0 [ 1320.106653][T12945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1320.112761][T12945] __device_attach_driver+0x4ee/0x950 [ 1320.118562][T12945] bus_for_each_drv+0x3e0/0x680 [ 1320.123673][T12945] ? __pfx___device_attach_driver+0x10/0x10 [ 1320.129921][T12945] __device_attach+0x3c8/0x5c0 [ 1320.134924][T12945] device_initial_probe+0x33/0x40 [ 1320.140188][T12945] bus_probe_device+0x3ba/0x5e0 [ 1320.145798][T12945] device_add+0x12a9/0x1c10 [ 1320.151117][T12945] usb_set_configuration+0x3493/0x3b70 [ 1320.156968][T12945] usb_generic_driver_probe+0xfc/0x290 [ 1320.162706][T12945] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1320.169143][T12945] usb_probe_device+0x38a/0x690 [ 1320.174305][T12945] ? __pfx_usb_probe_device+0x10/0x10 [ 1320.179952][T12945] really_probe+0x4d1/0xd90 [ 1320.184698][T12945] __driver_probe_device+0x268/0x380 [ 1320.190304][T12945] driver_probe_device+0x70/0x8b0 [ 1320.195554][T12945] ? kmsan_get_metadata+0x105/0x1b0 [ 1320.201038][T12945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1320.207144][T12945] __device_attach_driver+0x4ee/0x950 [ 1320.212795][T12945] bus_for_each_drv+0x3e0/0x680 [ 1320.217919][T12945] ? __pfx___device_attach_driver+0x10/0x10 [ 1320.224201][T12945] __device_attach+0x3c8/0x5c0 [ 1320.229255][T12945] device_initial_probe+0x33/0x40 [ 1320.234530][T12945] bus_probe_device+0x3ba/0x5e0 [ 1320.239750][T12945] device_add+0x12a9/0x1c10 [ 1320.244562][T12945] usb_new_device+0x104b/0x20c0 [ 1320.250133][T12945] hub_event+0x5588/0x7580 [ 1320.254866][T12945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1320.261075][T12945] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 1320.266994][T12945] ? kmsan_get_metadata+0x105/0x1b0 [ 1320.272571][T12945] ? __pfx_hub_event+0x10/0x10 [ 1320.277588][T12945] process_scheduled_works+0xb97/0x1d90 [ 1320.283586][T12945] worker_thread+0xedf/0x1590 [ 1320.288501][T12945] kthread+0xd59/0xf00 [ 1320.292773][T12945] ? __pfx_worker_thread+0x10/0x10 [ 1320.298188][T12945] ? __pfx_kthread+0x10/0x10 [ 1320.303112][T12945] ret_from_fork+0x6e/0x90 [ 1320.307757][T12945] ? __pfx_kthread+0x10/0x10 [ 1320.312548][T12945] ret_from_fork_asm+0x1a/0x30 [ 1320.318019][T12945] [ 1320.321531][T12945] Kernel Offset: disabled [ 1320.325953][T12945] Rebooting in 86400 seconds..