last executing test programs: 8.392169586s ago: executing program 0 (id=1825): bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20060840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000380)={0x1f, 0x7}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000200)) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) 7.028781698s ago: executing program 2 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x400000c) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x802], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0xfffffffd, 0x4}, {0x0, 0xfffffffe}, {}, {}, {0x1}, {0x0, 0xe68b}], 0x100000c, 0x0, 0x0, 0x0, 0x0, 0x500}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB], 0x50) 5.737578523s ago: executing program 2 (id=1838): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 5.370026363s ago: executing program 1 (id=1842): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x40000000003}, {0xffffffff}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000400)={0x4, 0x8, 0x7f}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x4000002, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.217378615s ago: executing program 1 (id=1844): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x7}}], 0x1, 0x4004000) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 4.647216611s ago: executing program 0 (id=1846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) setrlimit(0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.213564337s ago: executing program 1 (id=1848): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TCXONC(r3, 0x4b3a, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) 3.547245511s ago: executing program 0 (id=1849): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="bcfcffffffffffff840000000200"], 0x20}], 0x1, 0x80) 3.383300324s ago: executing program 1 (id=1850): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) 3.273640863s ago: executing program 0 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.242511326s ago: executing program 3 (id=1852): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x40000000003}, {0xffffffff}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000400)={0x4, 0x8, 0x7f}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x4000002, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.225012447s ago: executing program 2 (id=1853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000300)="0f01c1b8005000000f23c80f21f8350800b0000f23f8440f20c0c4e23da8959f170000440f22c0f083960000000098b8a80000000f23d00f21f8353000000e0f23f8b974030000b85d8f4b83ba000000000f303ef081845e8a3e00000c00000067640fc73d3ef40f35", 0x1a}], 0xaaaaaaaaaaaac95, 0x7, 0x0, 0xfffffffffffffe8d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.18513035s ago: executing program 1 (id=1854): bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20060840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x7}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000200)) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) 3.119420226s ago: executing program 0 (id=1855): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x20, 0x8, 0x46, {0x46, 0x21, "f55c10de9b8300ffd08a25211254aa82c9d5bd4018f0f6150b15fd369b1265c4130e98e3b392ae53bfa88113c38f63a6aed73f85631c02ba5017b036a150f1c2a748d1d2"}}, 0x0}, 0x0) poll(0x0, 0x0, 0x616a) 3.118777846s ago: executing program 3 (id=1856): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x31, 0x8, 0x9, 0xffffffffffffffff, 0x401, 0x5}) 3.001574876s ago: executing program 2 (id=1857): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) 2.840363159s ago: executing program 3 (id=1858): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TCXONC(r3, 0x4b3a, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) 2.488393337s ago: executing program 3 (id=1859): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) shmat(0x0, &(0x7f0000275000/0x4000)=nil, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0xb, 0x2, 0xfffffff1, 0x1, 0xe6c}, 0x14) 1.384607247s ago: executing program 3 (id=1860): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 1.371776648s ago: executing program 2 (id=1861): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.303115754s ago: executing program 3 (id=1862): r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000280)=0x21b0, 0xff0c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000080)=0xa4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r2 = openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000440)=""/203, &(0x7f0000000540)=0xcb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000340)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r5 = open(0x0, 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x7d, 0x4, 0x0, 0x0, 0x2401}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x1, @mcast2}}, {{0xa, 0x0, 0xffffffff, @mcast1}}}, 0x108) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000580)=""/155, 0x9b}], 0x1, 0x284, 0xfffffffd) r8 = fanotify_init(0x20, 0x800) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x401) r10 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r8, 0x641, 0x1020, r10, 0x0) pidfd_getfd(0xffffffffffffffff, r10, 0x0) 1.221637211s ago: executing program 2 (id=1863): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r2, 0x0, 0x0) 231.397721ms ago: executing program 1 (id=1864): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f0000000280)={[{@nobh}, {@init_itable}, {@block_validity}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$eJzs3c9rHFUcAPDvbLL9rU2hFPUggR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/gyYvH4j/gX1HQQpES9OAlMpvZdNPdTbbJtkm7nw9M8t7M7L757sz38WbfLhvAwBrN/hQiXo2Ib5OIwy3bhiPfOLq63/LD61PZksTKymd/J5Hk65r7J/n/g3nllYj4/euIk4X2dmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sw7kxPvv/du32J98/y/P3x696Mz3xxf/v6X+0duJ3E2DuXbWuPYhhutldEYzV+TYpx9bMfxPjS2myQ7fQBsyVCe58XI+oDDMZRnPfDi+yoiVoABlch/GFDNcUDz3r5P98HPjQcfrt4Atcc/vPreSOxr3BsdWE7W3Rll97sjfWg/a+O3v+7czpbo3/sQAJu6cTMiTg8Pt/d/Sd7/bd3pHvZ5vA39Hzw7d7Pxz1udxj+FtfFPdBj/HOyQu1uxef4X7vehma6y8d8HHce/a5NWI0N57aXGmK+YXLxUSbO+7eWIOBHFvVl9o/mcM8v3Vtav+XWt1Dr+y5as/eZYMD+O+8N71z96ulwvbzfupgc3I17rOP5N1s5/0uH8Z6/H+R7bOJbeeb3bts3jf7pWfo54o+P5fzSjlWw8PznWuB7GmldFu39uHfujW/s9xF/sY7htsvN/YOP4R5LW+dpat2fqPm/0077/0m7btnr970k+b5T35Ouulev1+fGIPckn7esnHj22WW/un8V/4vjG/V+n639/RHzRNeL1bh291XXXnb7+s/inn+j8P3nh3sdf/tit/d7O/9uN0ol8TS/9X68HuJ3XDgAAAAAAAHabQkQciqRQWisXCqXS6uc7jsaBQqVaq5+8WF24PB2N78qORLHQnOk+3PJ5iPH887DN+sRj9cmIOBIR3w3tb9RLU9XK9E4HDwAAAAAAAAAAAAAAAAAAALvEwYh9nb7/n/lzaKePDnjq2n66QeLDwOj+0y35ln780hOwK3XPf+BFJ/9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAPrq/Llz2bKy/PD6VFafvrq4MFu9emo6rc2W5hamSlPV+SulmWp1ppKWpqpzmz1fpVq9Mj4RC9fG6mmtPlZbXLowV124XL9waa48k15Ii88kKgAAAAAAAAAAAAAAAAAAAHi+1BaXZsuVSjqvoLClwvDuOAyFPhd2umcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEf+DwAA//9MBzmC") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x62042, 0x113) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000240)="12", 0x1}], 0x1, 0xcfbc, 0x3, 0x0) sendfile(r2, r2, 0x0, 0x7a680003) fallocate(r1, 0x20, 0x0, 0x8000) 0s ago: executing program 0 (id=1865): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x40000000003}, {0xffffffff}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000400)={0x4, 0x8, 0x7f}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x4000002, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 103.321499][ T6210] No buffer was provided with the request [ 103.379212][ T54] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 103.396562][ T54] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 103.420332][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.849654][ T6224] ubi: mtd0 is already attached to ubi31 [ 104.097820][ T6225] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 104.109767][ T6225] ubi: mtd0 is already attached to ubi31 [ 104.978709][ T6141] usb 1-1: USB disconnect, device number 2 [ 107.405562][ T6246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 107.417161][ T6246] ubi: mtd0 is already attached to ubi31 [ 108.196915][ T6250] No buffer was provided with the request [ 109.008853][ T6256] ceph: No mds server is up or the cluster is laggy [ 109.027519][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.040467][ T6253] sctp: failed to load transform for md5: -2 [ 109.259206][ T6273] ubi: mtd0 is already attached to ubi31 [ 109.366027][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 109.908253][ T5826] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 109.925146][ T788] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 109.938633][ T788] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 109.949334][ T788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.959042][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.198572][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.218975][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.161228][ T6291] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 113.172432][ T6291] ubi: mtd0 is already attached to ubi31 [ 113.947103][ T8] usb 4-1: USB disconnect, device number 3 [ 114.139036][ T6295] syz.2.115: attempt to access beyond end of device [ 114.139036][ T6295] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 114.156209][ T6295] syz.2.115: attempt to access beyond end of device [ 114.156209][ T6295] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 114.169677][ T6295] Mount JFS Failure: -5 [ 114.555813][ T6299] can0: slcan on ptm0. [ 114.758073][ T6298] can0 (unregistered): slcan off ptm0. [ 116.406139][ T6316] ubi: mtd0 is already attached to ubi31 [ 117.588779][ T6318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.655058][ T788] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 118.769376][ T6334] ubi: mtd0 is already attached to ubi31 [ 119.496439][ T788] usb 2-1: device descriptor read/64, error -71 [ 120.426279][ T788] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 124.535010][ T6370] No buffer was provided with the request [ 126.995420][ T6382] can0: slcan on ptm0. [ 127.056918][ T6381] can0 (unregistered): slcan off ptm0. [ 127.125364][ T6384] netlink: 14 bytes leftover after parsing attributes in process `syz.1.142'. [ 128.218384][ T6401] No buffer was provided with the request [ 130.244823][ T6418] loop7: detected capacity change from 0 to 7 [ 130.274869][ T5794] Dev loop7: unable to read RDB block 7 [ 130.282087][ T5794] loop7: unable to read partition table [ 130.305293][ T5794] loop7: partition table beyond EOD, truncated [ 130.325095][ T6418] Dev loop7: unable to read RDB block 7 [ 130.332172][ T6418] loop7: unable to read partition table [ 130.353194][ T6418] loop7: partition table beyond EOD, truncated [ 130.399943][ T6418] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 130.514023][ T6420] fuse: Bad value for 'rootmode' [ 130.762681][ T6422] can0: slcan on ptm0. [ 131.360637][ T6421] can0 (unregistered): slcan off ptm0. [ 132.943129][ T6446] No buffer was provided with the request [ 133.305661][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.312086][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.549139][ T6453] can0: slcan on ptm0. [ 134.669724][ T6451] can0 (unregistered): slcan off ptm0. [ 134.698461][ T6459] loop7: detected capacity change from 0 to 7 [ 134.705545][ T6459] Dev loop7: unable to read RDB block 7 [ 134.723752][ T6459] loop7: unable to read partition table [ 134.760856][ T6459] loop7: partition table beyond EOD, truncated [ 134.818997][ T6459] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.897786][ T6466] bridge0: entered promiscuous mode [ 134.911460][ T6466] macsec1: entered promiscuous mode [ 136.615095][ T6482] Bluetooth: MGMT ver 1.22 [ 136.696066][ T6141] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.287801][ T6141] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.303917][ T6141] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.329493][ T6141] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.452631][ T6489] No buffer was provided with the request [ 137.608942][ T6141] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.694996][ T6141] usb 2-1: Product: syz [ 137.727933][ T6141] usb 2-1: Manufacturer: syz [ 137.776904][ T6141] usb 2-1: SerialNumber: syz [ 137.794444][ T6481] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 137.829179][ T6141] usb 2-1: config 0 descriptor?? [ 137.863393][ T6141] usb 2-1: selecting invalid altsetting 0 [ 138.116638][ T5789] Bluetooth: hci3: unexpected event 0x3e length: 262 > 260 [ 138.116670][ T5789] Bluetooth: hci3: unexpected subevent 0x0d length: 261 > 260 [ 138.131732][ T5789] Bluetooth: hci3: adv larger than maximum supported [ 138.131794][ T5789] Bluetooth: hci3: adv larger than maximum supported [ 138.158449][ T5826] usb 2-1: USB disconnect, device number 4 [ 139.407832][ T6507] loop7: detected capacity change from 0 to 7 [ 139.479490][ T6507] Dev loop7: unable to read RDB block 7 [ 139.485254][ T6507] loop7: unable to read partition table [ 139.510446][ T6507] loop7: partition table beyond EOD, truncated [ 139.544040][ T6507] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 139.896575][ T5801] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.398443][ T6521] bridge0: entered promiscuous mode [ 140.480452][ T6521] macsec1: entered promiscuous mode [ 140.550069][ T6524] No buffer was provided with the request [ 146.798590][ T6558] loop7: detected capacity change from 0 to 7 [ 146.856636][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 146.894384][ T6558] Dev loop7: unable to read RDB block 7 [ 146.929378][ T6558] loop7: unable to read partition table [ 146.953548][ T6558] loop7: partition table beyond EOD, truncated [ 146.973283][ T6558] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 147.102143][ T6565] fuse: Unknown parameter 'use00000000000000000000' [ 147.200650][ T6568] No buffer was provided with the request [ 150.042931][ T6602] ubi: mtd0 is already attached to ubi31 [ 150.909124][ T6606] No buffer was provided with the request [ 151.388585][ T6611] fuse: Unknown parameter 'use00000000000000000000' [ 151.766758][ T6614] loop7: detected capacity change from 0 to 7 [ 151.789074][ T6553] Dev loop7: unable to read RDB block 7 [ 151.800575][ T6553] loop7: unable to read partition table [ 151.820543][ T6553] loop7: partition table beyond EOD, truncated [ 151.828962][ T6614] Dev loop7: unable to read RDB block 7 [ 151.860119][ T6614] loop7: unable to read partition table [ 151.867796][ T6614] loop7: partition table beyond EOD, truncated [ 151.883546][ T6614] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 152.917769][ T5160] Dev loop7: unable to read RDB block 7 [ 152.931211][ T5160] loop7: unable to read partition table [ 152.949521][ T5160] loop7: partition table beyond EOD, truncated [ 153.364054][ T6636] ubi: mtd0 is already attached to ubi31 [ 154.126176][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.184414][ T6638] No buffer was provided with the request [ 154.378349][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 154.403381][ T5835] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.412803][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.472332][ T5835] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.480080][ T5835] pvrusb2: ********** [ 154.484176][ T5835] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.507313][ T5835] pvrusb2: Important functionality might not be entirely working. [ 154.527935][ T5835] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.546138][ T5835] pvrusb2: ********** [ 155.578993][ T2316] pvrusb2: Invalid write control endpoint [ 155.752727][ T2316] pvrusb2: Invalid write control endpoint [ 155.887360][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.911117][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.568308][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.690407][ T2316] pvrusb2: Device being rendered inoperable [ 156.744590][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 156.802270][ T8] usb 1-1: USB disconnect, device number 3 [ 156.866049][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 156.946066][ T2316] pvrusb2: Attached sub-driver cx25840 [ 156.977463][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 157.035670][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 157.137162][ T6671] loop7: detected capacity change from 0 to 7 [ 157.252528][ T6671] Dev loop7: unable to read RDB block 7 [ 157.272190][ T6671] loop7: unable to read partition table [ 157.289555][ T6671] loop7: partition table beyond EOD, truncated [ 157.322573][ T6671] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 157.891086][ T5160] Dev loop7: unable to read RDB block 7 [ 157.906056][ T5160] loop7: unable to read partition table [ 157.933149][ T5160] loop7: partition table beyond EOD, truncated [ 158.204691][ T6675] syz.2.221: attempt to access beyond end of device [ 158.204691][ T6675] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 158.217914][ T6675] syz.2.221: attempt to access beyond end of device [ 158.217914][ T6675] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 158.230981][ T6675] Mount JFS Failure: -5 [ 158.335768][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'. [ 159.830883][ T5801] Bluetooth: hci0: unexpected event 0x3e length: 262 > 260 [ 159.830917][ T5801] Bluetooth: hci0: unexpected subevent 0x0d length: 261 > 260 [ 159.856049][ T5801] Bluetooth: hci0: adv larger than maximum supported [ 159.856106][ T5801] Bluetooth: hci0: adv larger than maximum supported [ 159.934210][ T6706] loop7: detected capacity change from 0 to 7 [ 159.982779][ T6706] Dev loop7: unable to read RDB block 7 [ 159.991346][ T6706] loop7: unable to read partition table [ 160.001201][ T6706] loop7: partition table beyond EOD, truncated [ 160.009778][ T6706] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 161.979168][ T6719] syz.2.233: attempt to access beyond end of device [ 161.979168][ T6719] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 161.992024][ T6719] syz.2.233: attempt to access beyond end of device [ 161.992024][ T6719] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 162.004858][ T6719] Mount JFS Failure: -5 [ 162.098716][ T6723] No buffer was provided with the request [ 163.053085][ T6732] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 163.062135][ T6732] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.244435][ T6746] bridge0: entered promiscuous mode [ 165.252381][ T6746] macsec1: entered promiscuous mode [ 165.664557][ T6753] loop7: detected capacity change from 0 to 7 [ 165.686831][ T6753] Dev loop7: unable to read RDB block 7 [ 165.692627][ T6753] loop7: unable to read partition table [ 165.703144][ T6753] loop7: partition table beyond EOD, truncated [ 165.736023][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 165.753238][ T6753] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 165.957618][ T5835] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.990543][ T5835] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.004606][ T5835] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.018381][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.027053][ T5835] usb 3-1: Product: syz [ 166.033666][ T5835] usb 3-1: Manufacturer: syz [ 166.040726][ T5835] usb 3-1: SerialNumber: syz [ 166.088919][ T5835] usb 3-1: config 0 descriptor?? [ 166.110468][ T5835] usb 3-1: selecting invalid altsetting 0 [ 166.299995][ T6760] syz.3.245: attempt to access beyond end of device [ 166.299995][ T6760] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 166.312903][ T6760] syz.3.245: attempt to access beyond end of device [ 166.312903][ T6760] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 166.326063][ T6760] Mount JFS Failure: -5 [ 166.625029][ T6769] fuse: Bad value for 'fd' [ 166.720130][ T6141] usb 3-1: USB disconnect, device number 2 [ 168.867906][ T6796] overlayfs: failed to resolve './file1': -2 [ 169.155003][ T6804] loop7: detected capacity change from 0 to 7 [ 169.177860][ T6804] Dev loop7: unable to read RDB block 7 [ 169.184768][ T6804] loop7: unable to read partition table [ 169.201802][ T6804] loop7: partition table beyond EOD, truncated [ 169.227817][ T6804] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 170.123365][ T6808] syz.1.257: attempt to access beyond end of device [ 170.123365][ T6808] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 170.136662][ T6808] syz.1.257: attempt to access beyond end of device [ 170.136662][ T6808] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 170.149514][ T6808] Mount JFS Failure: -5 [ 170.955697][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 171.453399][ T6827] fuse: Bad value for 'fd' [ 172.122482][ T6834] loop7: detected capacity change from 0 to 7 [ 172.148727][ T6834] Dev loop7: unable to read RDB block 7 [ 172.162889][ T6834] loop7: unable to read partition table [ 172.184138][ T6834] loop7: partition table beyond EOD, truncated [ 172.201078][ T6834] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 173.545596][ T6843] overlayfs: failed to resolve './file1': -2 [ 173.774880][ T6849] mkiss: ax0: crc mode is auto. [ 174.164558][ T28] audit: type=1326 audit(1754004378.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f851458eb69 code=0x0 [ 176.889234][ T6869] tipc: Enabled bearer , priority 0 [ 176.897106][ T6869] syzkaller0: entered promiscuous mode [ 176.902853][ T6869] syzkaller0: entered allmulticast mode [ 177.008149][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 177.023952][ T6869] tipc: Resetting bearer [ 177.037584][ T6868] tipc: Resetting bearer [ 177.183743][ T6868] tipc: Disabling bearer [ 177.286211][ T6876] overlayfs: failed to resolve './file1': -2 [ 177.962203][ T5835] tipc: Node number set to 3124382165 [ 178.357287][ T6880] loop7: detected capacity change from 0 to 7 [ 178.698668][ T6880] Dev loop7: unable to read RDB block 7 [ 178.872065][ T6883] orangefs_mount: mount request failed with -4 [ 178.872346][ T6880] loop7: unable to read partition table [ 178.884327][ T6880] loop7: partition table beyond EOD, truncated [ 178.891161][ T6880] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.323671][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 179.337761][ T6901] geneve2: entered promiscuous mode [ 179.343008][ T6901] geneve2: entered allmulticast mode [ 180.198323][ T5160] Dev loop7: unable to read RDB block 7 [ 180.206351][ T5160] loop7: unable to read partition table [ 180.413549][ T5160] loop7: partition table beyond EOD, truncated [ 180.432305][ T6907] overlayfs: conflicting lowerdir path [ 181.567590][ T6920] tipc: Started in network mode [ 181.572466][ T6920] tipc: Node identity b2daddb76ae2, cluster identity 4711 [ 181.676818][ T6920] tipc: Enabled bearer , priority 0 [ 181.685235][ T6925] syzkaller0: entered promiscuous mode [ 182.683222][ T6925] syzkaller0: entered allmulticast mode [ 182.792260][ T6921] overlayfs: failed to resolve './file1': -2 [ 182.813382][ T9] tipc: Node number set to 3627605431 [ 182.952863][ T6920] tipc: Resetting bearer [ 182.972777][ T6919] tipc: Resetting bearer [ 183.067424][ T6919] tipc: Disabling bearer [ 185.161592][ T6945] syz.3.297: attempt to access beyond end of device [ 185.161592][ T6945] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 185.174931][ T6945] syz.3.297: attempt to access beyond end of device [ 185.174931][ T6945] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 185.188186][ T6945] Mount JFS Failure: -5 [ 185.684230][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 185.693417][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 186.647805][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 186.654025][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 186.660207][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 187.203227][ T6961] overlayfs: failed to resolve './file1': -2 [ 188.119826][ T6984] syz.1.310: attempt to access beyond end of device [ 188.119826][ T6984] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 188.274016][ T6984] syz.1.310: attempt to access beyond end of device [ 188.274016][ T6984] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 188.579857][ T6984] Mount JFS Failure: -5 [ 191.306890][ T6994] overlayfs: failed to resolve './file1': -2 [ 192.698567][ T7012] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.322'. [ 193.229104][ T5801] Bluetooth: hci3: unexpected event 0x3e length: 262 > 260 [ 193.229208][ T5801] Bluetooth: hci3: unexpected subevent 0x0d length: 261 > 260 [ 193.245631][ T5801] Bluetooth: hci3: adv larger than maximum supported [ 193.245656][ T5801] Bluetooth: hci3: adv larger than maximum supported [ 194.158725][ T7035] overlayfs: failed to resolve './file1': -2 [ 194.496864][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503499][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.815322][ T7052] syz.0.335[7052]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 196.826617][ T7052] process 'syz.0.335' launched '/dev/fd/6' with NULL argv: empty string added [ 196.900079][ T7055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 197.216325][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.445965][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 197.457584][ T788] usb 2-1: config 1 interface 0 has no altsetting 0 [ 197.472773][ T788] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.40 [ 197.495348][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.554155][ T788] usb 2-1: Product: syz [ 197.610399][ T788] usb 2-1: Manufacturer: syz [ 197.671362][ T788] usb 2-1: SerialNumber: syz [ 198.270882][ T7077] orangefs_mount: mount request failed with -4 [ 198.357632][ T788] usbhid 2-1:1.0: can't add hid device: -71 [ 198.404640][ T788] usbhid: probe of 2-1:1.0 failed with error -71 [ 198.547849][ T788] usb 2-1: USB disconnect, device number 5 [ 201.618206][ T7128] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 202.395292][ T7133] tipc: Started in network mode [ 202.412207][ T7133] tipc: Node identity aeb993d22b64, cluster identity 4711 [ 202.441542][ T7133] tipc: Enabled bearer , priority 0 [ 202.458825][ T7133] syzkaller0: entered promiscuous mode [ 202.465027][ T7133] syzkaller0: entered allmulticast mode [ 202.509267][ T7133] tipc: Resetting bearer [ 202.524229][ T7130] tipc: Resetting bearer [ 202.670535][ T7130] tipc: Disabling bearer [ 203.752010][ T7156] syz.1.371: attempt to access beyond end of device [ 203.752010][ T7156] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 203.780306][ T7156] syz.1.371: attempt to access beyond end of device [ 203.780306][ T7156] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 203.796014][ T7156] Mount JFS Failure: -5 [ 205.026517][ T7175] bridge0: entered promiscuous mode [ 205.032789][ T7175] macsec1: entered promiscuous mode [ 205.790602][ T7182] overlayfs: failed to resolve './file1': -2 [ 207.548037][ T7186] tipc: Enabled bearer , priority 0 [ 207.586558][ T7186] syzkaller0: entered promiscuous mode [ 207.616731][ T7186] syzkaller0: entered allmulticast mode [ 207.657684][ T7186] tipc: Resetting bearer [ 207.687330][ T7185] tipc: Resetting bearer [ 207.772343][ T7185] tipc: Disabling bearer [ 207.805453][ T7192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 208.321068][ T7197] syz.1.383: attempt to access beyond end of device [ 208.321068][ T7197] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 208.354975][ T7197] syz.1.383: attempt to access beyond end of device [ 208.354975][ T7197] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 208.869866][ T7197] Mount JFS Failure: -5 [ 210.447436][ T7209] overlayfs: failed to resolve './file1': -2 [ 211.294222][ T7228] No buffer was provided with the request [ 213.977640][ T7253] overlayfs: failed to resolve './file1': -2 [ 215.999101][ T7257] syz.0.401: attempt to access beyond end of device [ 215.999101][ T7257] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 216.013144][ T7257] syz.0.401: attempt to access beyond end of device [ 216.013144][ T7257] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 216.026968][ T7257] Mount JFS Failure: -5 [ 216.141334][ T7260] fuse: Bad value for 'fd' [ 216.142554][ T7261] No buffer was provided with the request [ 216.947981][ T7268] loop7: detected capacity change from 0 to 7 [ 216.975050][ T7268] Dev loop7: unable to read RDB block 7 [ 216.998304][ T7268] loop7: unable to read partition table [ 217.063384][ T7268] loop7: partition table beyond EOD, truncated [ 217.076061][ T7268] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 217.388050][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 217.482386][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 219.015407][ T7286] overlayfs: failed to resolve './file1': -2 [ 220.635353][ T7297] fuse: Unknown parameter '0x0000000000000005' [ 220.721535][ T7300] fuse: Bad value for 'fd' [ 221.604220][ T7307] ubi: mtd0 is already attached to ubi31 [ 223.693375][ T7318] loop7: detected capacity change from 0 to 7 [ 223.719834][ T7318] Dev loop7: unable to read RDB block 7 [ 223.745441][ T7318] loop7: unable to read partition table [ 223.774902][ T7318] loop7: partition table beyond EOD, truncated [ 223.806546][ T7318] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 223.971680][ T7327] overlayfs: failed to resolve './file1': -2 [ 224.083688][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 224.602723][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 224.651073][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 224.685998][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.752101][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 224.780332][ T7331] fuse: Unknown parameter 'fd0x0000000000000005' [ 224.798941][ T27] pvrusb2: ********** [ 224.808272][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 224.846632][ T27] pvrusb2: Important functionality might not be entirely working. [ 224.867923][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 224.892186][ T27] pvrusb2: ********** [ 225.639610][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.696487][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.651500][ T2316] pvrusb2: Invalid write control endpoint [ 226.863939][ T2316] pvrusb2: Invalid write control endpoint [ 226.870709][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 226.880229][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 226.901116][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 226.972880][ T2316] pvrusb2: Device being rendered inoperable [ 227.060460][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 227.129703][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 227.201306][ T2316] pvrusb2: Attached sub-driver cx25840 [ 227.308256][ T7353] tipc: Enabled bearer , priority 0 [ 227.371158][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 227.423214][ T7354] loop7: detected capacity change from 0 to 7 [ 227.436034][ T7356] syzkaller0: entered promiscuous mode [ 227.442178][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 227.444408][ T7356] syzkaller0: entered allmulticast mode [ 227.462880][ T7354] Dev loop7: unable to read RDB block 7 [ 227.480876][ T7354] loop7: unable to read partition table [ 227.487168][ T7354] loop7: partition table beyond EOD, truncated [ 227.493507][ T7354] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 227.532224][ T7351] tipc: Resetting bearer [ 227.567085][ T7351] tipc: Disabling bearer [ 227.676138][ T27] usb 1-1: USB disconnect, device number 4 [ 227.760746][ T7360] ubi: mtd0 is already attached to ubi31 [ 229.362210][ T7370] fuse: Unknown parameter 'fd0x0000000000000005' [ 229.506775][ T7371] overlayfs: failed to resolve './file1': -2 [ 230.799963][ T7388] tipc: Enabled bearer , priority 0 [ 230.977689][ T7388] syzkaller0: entered promiscuous mode [ 230.983181][ T7388] syzkaller0: entered allmulticast mode [ 231.046384][ T7387] tipc: Resetting bearer [ 231.113626][ T7387] tipc: Disabling bearer [ 231.186146][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.266249][ T7396] loop7: detected capacity change from 0 to 7 [ 231.323839][ T6553] Dev loop7: unable to read RDB block 7 [ 231.353795][ T6553] loop7: unable to read partition table [ 231.466377][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 231.482236][ T6553] loop7: partition table beyond EOD, truncated [ 231.484241][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 231.499018][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.509968][ T7396] Dev loop7: unable to read RDB block 7 [ 231.513257][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 231.516796][ T7396] loop7: unable to read partition table [ 232.193498][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.225773][ T7396] loop7: partition table beyond EOD, truncated [ 232.257250][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.316794][ T7396] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 232.524590][ T27] pvrusb2: ********** [ 232.531083][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 232.553666][ T27] pvrusb2: Important functionality might not be entirely working. [ 233.041774][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 233.154409][ T7411] overlayfs: failed to resolve './file1': -2 [ 233.668751][ T27] pvrusb2: ********** [ 233.679873][ T2316] pvrusb2: Invalid write control endpoint [ 234.178948][ T7416] fuse: Unknown parameter 'fd0x0000000000000005' [ 234.250234][ T2316] pvrusb2: Invalid write control endpoint [ 234.285090][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 234.334622][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 234.373591][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 234.419192][ T2316] pvrusb2: Device being rendered inoperable [ 234.429992][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 234.442481][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 234.452218][ T2316] pvrusb2: Attached sub-driver cx25840 [ 234.461641][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 234.474116][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.795537][ T788] usb 2-1: USB disconnect, device number 6 [ 236.056157][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 236.214441][ T7444] loop7: detected capacity change from 0 to 7 [ 236.223162][ T7444] Dev loop7: unable to read RDB block 7 [ 236.246800][ T7444] loop7: unable to read partition table [ 236.252623][ T7444] loop7: partition table beyond EOD, truncated [ 236.260420][ T7444] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 236.284047][ T8] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 236.292687][ T8] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 236.301799][ T8] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 236.312704][ T8] usb 4-1: config 8 has no interface number 0 [ 236.319036][ T8] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 236.330450][ T8] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.347948][ T8] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 236.358266][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.366486][ T8] usb 4-1: Product: syz [ 236.370818][ T8] usb 4-1: Manufacturer: syz [ 236.375470][ T8] usb 4-1: SerialNumber: syz [ 238.507224][ T8] usb 4-1: USB disconnect, device number 4 [ 238.592023][ T7465] usb usb8: usbfs: process 7465 (syz.1.460) did not claim interface 0 before use [ 238.798169][ T7471] syz.0.462: attempt to access beyond end of device [ 238.798169][ T7471] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 238.857200][ T7471] syz.0.462: attempt to access beyond end of device [ 238.857200][ T7471] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 238.875598][ T7471] Mount JFS Failure: -5 [ 239.026283][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.201310][ T7480] loop7: detected capacity change from 0 to 7 [ 239.216140][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 239.216566][ T7480] Dev loop7: unable to read RDB block 7 [ 239.228250][ T7480] loop7: unable to read partition table [ 239.235442][ T7480] loop7: partition table beyond EOD, truncated [ 239.241958][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 239.245184][ T7480] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 239.288285][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.336680][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 239.345402][ T8] pvrusb2: ********** [ 239.350635][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 239.361525][ T8] pvrusb2: Important functionality might not be entirely working. [ 239.369754][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 239.381722][ T8] pvrusb2: ********** [ 239.548917][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.567253][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.592564][ T2316] pvrusb2: Invalid write control endpoint [ 241.117792][ T2316] pvrusb2: Invalid write control endpoint [ 241.123577][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 241.151511][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 241.165018][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 241.183726][ T2316] pvrusb2: Device being rendered inoperable [ 241.191322][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 241.205815][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 241.216185][ T2316] pvrusb2: Attached sub-driver cx25840 [ 241.224855][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 241.247062][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 241.537187][ T6141] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 241.670111][ T5835] usb 4-1: USB disconnect, device number 5 [ 241.766126][ T6141] usb 3-1: Using ep0 maxpacket: 16 [ 241.783367][ T6141] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 241.861848][ T6141] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.890574][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.918624][ T6141] usb 3-1: Product: syz [ 241.940631][ T6141] usb 3-1: Manufacturer: syz [ 241.951070][ T6141] usb 3-1: SerialNumber: syz [ 241.984518][ T6141] usb 3-1: config 0 descriptor?? [ 242.922364][ T7510] orangefs_mount: mount request failed with -4 [ 243.573057][ T7529] loop7: detected capacity change from 0 to 7 [ 243.576013][ T6141] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 243.597846][ T6553] Dev loop7: unable to read RDB block 7 [ 243.603627][ T6553] loop7: unable to read partition table [ 243.614444][ T6553] loop7: partition table beyond EOD, truncated [ 243.646678][ T7529] Dev loop7: unable to read RDB block 7 [ 243.652539][ T7529] loop7: unable to read partition table [ 243.663687][ T7529] loop7: partition table beyond EOD, truncated [ 243.681522][ T7529] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 243.777599][ T6141] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.790678][ T6141] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.804348][ T6141] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 243.816915][ T6141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.834474][ T6141] usb 4-1: Product: syz [ 243.840847][ T6141] usb 4-1: Manufacturer: syz [ 243.851378][ T6141] usb 4-1: SerialNumber: syz [ 244.270912][ T5835] usb 3-1: USB disconnect, device number 3 [ 244.974220][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 245.166724][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 245.173486][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 245.182819][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.200967][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 245.208114][ T9] pvrusb2: ********** [ 245.212205][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 245.222416][ T9] pvrusb2: Important functionality might not be entirely working. [ 245.230361][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 245.241798][ T9] pvrusb2: ********** [ 245.315969][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 245.399537][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.409681][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.518512][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.534852][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.549216][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.566180][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.578214][ T8] usb 2-1: Product: syz [ 245.582537][ T8] usb 2-1: Manufacturer: syz [ 245.591770][ T8] usb 2-1: SerialNumber: syz [ 246.447965][ T6141] pxrc 4-1:1.0: Could not find endpoint [ 246.462071][ T2316] pvrusb2: Invalid write control endpoint [ 246.470294][ T8] usb 2-1: 0:2 : does not exist [ 246.478008][ T6141] usb 4-1: USB disconnect, device number 6 [ 246.577641][ T8] usb 2-1: USB disconnect, device number 7 [ 246.778726][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.801251][ T2316] pvrusb2: Invalid write control endpoint [ 246.848166][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 246.868052][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 246.875788][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 246.890510][ T2316] pvrusb2: Device being rendered inoperable [ 246.939906][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 246.947173][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 246.957544][ T2316] pvrusb2: Attached sub-driver cx25840 [ 246.963481][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 246.973695][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 247.312278][ T7561] netlink: 'syz.0.485': attribute type 21 has an invalid length. [ 247.329182][ T7561] netlink: 156 bytes leftover after parsing attributes in process `syz.0.485'. [ 247.718477][ T6141] usb 3-1: USB disconnect, device number 4 [ 247.986408][ T7572] loop7: detected capacity change from 0 to 7 [ 248.016249][ T7572] Dev loop7: unable to read RDB block 7 [ 248.051387][ T7572] loop7: unable to read partition table [ 248.080889][ T7572] loop7: partition table beyond EOD, truncated [ 248.102020][ T7572] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 251.082497][ T6141] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 251.725973][ T6141] usb 3-1: Using ep0 maxpacket: 8 [ 251.748852][ T6141] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 251.761241][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.794538][ T6141] pvrusb2: Hardware description: Terratec Grabster AV400 [ 251.806045][ T6141] pvrusb2: ********** [ 251.810393][ T6141] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 251.825942][ T6141] pvrusb2: Important functionality might not be entirely working. [ 251.837667][ T6141] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 251.892819][ T6141] pvrusb2: ********** [ 252.888706][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.899166][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.106978][ T7625] loop7: detected capacity change from 0 to 7 [ 253.118584][ T6553] Dev loop7: unable to read RDB block 7 [ 253.124189][ T6553] loop7: unable to read partition table [ 253.149193][ T6553] loop7: partition table beyond EOD, truncated [ 253.804345][ T2316] pvrusb2: Invalid write control endpoint [ 253.881848][ T7625] Dev loop7: unable to read RDB block 7 [ 253.921303][ T2316] pvrusb2: Invalid write control endpoint [ 253.943843][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 253.956772][ T7625] loop7: unable to read partition table [ 253.961183][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 253.973208][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 253.987209][ T2316] pvrusb2: Device being rendered inoperable [ 253.993370][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 254.004896][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 254.019343][ T7625] loop7: partition table beyond EOD, truncated [ 254.020253][ T2316] pvrusb2: Attached sub-driver cx25840 [ 254.031499][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 254.042054][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 254.158903][ T7625] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 254.217012][ T7632] ubi: mtd0 is already attached to ubi31 [ 255.722141][ T5835] usb 3-1: USB disconnect, device number 5 [ 255.766066][ T7643] syz.3.509: attempt to access beyond end of device [ 255.766066][ T7643] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 255.784670][ T7643] syz.3.509: attempt to access beyond end of device [ 255.784670][ T7643] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 255.797981][ T7643] Mount JFS Failure: -5 [ 255.856722][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869672][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.027240][ T7696] ubi: mtd0 is already attached to ubi31 [ 263.337426][ T5801] Bluetooth: hci2: adv larger than maximum supported [ 265.059883][ T7731] No buffer was provided with the request [ 265.729678][ T7742] syzkaller0: entered promiscuous mode [ 265.752900][ T7742] syzkaller0: entered allmulticast mode [ 266.596130][ T5801] Bluetooth: hci3: adv larger than maximum supported [ 266.681069][ T7749] ubi: mtd0 is already attached to ubi31 [ 270.112912][ T7766] No buffer was provided with the request [ 270.690793][ T5801] Bluetooth: hci3: adv larger than maximum supported [ 270.925981][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.885980][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 271.896439][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 272.151498][ T7789] fuse: Unknown parameter 'group_i00000000000000000000' [ 272.493401][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.622443][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 272.644013][ T8] pvrusb2: ********** [ 272.648922][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 272.660327][ T8] pvrusb2: Important functionality might not be entirely working. [ 272.668461][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 272.680271][ T8] pvrusb2: ********** [ 272.834369][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.846827][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.315144][ T7792] overlayfs: failed to resolve './file1': -2 [ 274.101975][ T2316] pvrusb2: Invalid write control endpoint [ 274.633841][ T2316] pvrusb2: Invalid write control endpoint [ 274.658150][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 275.352245][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 275.410546][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 275.934836][ T2316] pvrusb2: Device being rendered inoperable [ 275.935298][ T54] usb 4-1: USB disconnect, device number 7 [ 275.982269][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 276.030457][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 276.067311][ T2316] pvrusb2: Attached sub-driver cx25840 [ 276.113408][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 276.124095][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 276.342495][ T7813] ubi: mtd0 is already attached to ubi31 [ 277.403992][ T7807] No buffer was provided with the request [ 277.721088][ T5801] Bluetooth: hci0: adv larger than maximum supported [ 277.836277][ T7821] loop7: detected capacity change from 0 to 7 [ 278.327522][ T7821] Dev loop7: unable to read RDB block 7 [ 278.335042][ T7821] loop7: unable to read partition table [ 278.348401][ T7821] loop7: partition table beyond EOD, truncated [ 278.382155][ T7821] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 278.863236][ T7832] fuse: Unknown parameter 'group_id00000000000000000000' [ 279.946202][ T788] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 280.106058][ T788] usb 3-1: device descriptor read/64, error -71 [ 280.380190][ T788] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 280.576041][ T788] usb 3-1: device descriptor read/64, error -71 [ 280.636884][ T7851] No buffer was provided with the request [ 280.718092][ T788] usb usb3-port1: attempt power cycle [ 281.057441][ T7855] syz.0.570: attempt to access beyond end of device [ 281.057441][ T7855] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 281.185928][ T7855] syz.0.570: attempt to access beyond end of device [ 281.185928][ T7855] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 281.199071][ T7855] Mount JFS Failure: -5 [ 281.206256][ T788] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 281.247470][ T7856] loop7: detected capacity change from 0 to 7 [ 281.268548][ T788] usb 3-1: device descriptor read/8, error -71 [ 281.293476][ T7856] Dev loop7: unable to read RDB block 7 [ 281.299208][ T7856] loop7: unable to read partition table [ 281.305341][ T7856] loop7: partition table beyond EOD, truncated [ 281.315919][ T7856] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 281.716236][ T788] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 281.758227][ T7866] ubi: mtd0 is already attached to ubi31 [ 281.819160][ T788] usb 3-1: device descriptor read/8, error -71 [ 282.079574][ T788] usb usb3-port1: unable to enumerate USB device [ 282.558047][ T7871] unsupported nlmsg_type 40 [ 284.323977][ T7889] No buffer was provided with the request [ 284.735214][ T7895] loop7: detected capacity change from 0 to 7 [ 284.742840][ T7895] Dev loop7: unable to read RDB block 7 [ 284.752974][ T7895] loop7: unable to read partition table [ 284.763015][ T7895] loop7: partition table beyond EOD, truncated [ 284.772558][ T7895] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 285.639008][ T54] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 285.806057][ T54] usb 1-1: device descriptor read/64, error -71 [ 286.455982][ T54] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 286.614644][ T7921] ubi: mtd0 is already attached to ubi31 [ 287.283831][ T7924] No buffer was provided with the request [ 287.295279][ T54] usb 1-1: device descriptor read/64, error -71 [ 287.492566][ T54] usb usb1-port1: attempt power cycle [ 288.185997][ T54] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 288.247118][ T54] usb 1-1: device descriptor read/8, error -71 [ 288.402743][ T7934] loop7: detected capacity change from 0 to 7 [ 288.431010][ T7934] Dev loop7: unable to read RDB block 7 [ 288.441273][ T7934] loop7: unable to read partition table [ 288.494311][ T7934] loop7: partition table beyond EOD, truncated [ 288.540441][ T7934] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 290.281259][ T7957] No buffer was provided with the request [ 292.065317][ T7974] loop7: detected capacity change from 0 to 7 [ 292.189003][ T6553] Dev loop7: unable to read RDB block 7 [ 292.201004][ T6553] loop7: unable to read partition table [ 292.215718][ T6553] loop7: partition table beyond EOD, truncated [ 292.345528][ T7980] fuse: Bad value for 'user_id' [ 292.721307][ T7974] Dev loop7: unable to read RDB block 7 [ 292.745293][ T7974] loop7: unable to read partition table [ 292.756753][ T7974] loop7: partition table beyond EOD, truncated [ 293.006003][ T7974] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 294.390946][ T7995] No buffer was provided with the request [ 294.534774][ T8003] usb usb8: usbfs: process 8003 (syz.2.619) did not claim interface 0 before use [ 295.355629][ T8015] fuse: Bad value for 'user_id' [ 295.720409][ T5853] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 296.226035][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 296.241284][ T5853] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 296.276351][ T8026] loop7: detected capacity change from 0 to 7 [ 296.283835][ T8026] Dev loop7: unable to read RDB block 7 [ 296.292355][ T8026] loop7: unable to read partition table [ 296.298603][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.298865][ T8026] loop7: partition table beyond EOD, truncated [ 296.313772][ T8026] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 296.351288][ T5853] pvrusb2: Hardware description: Terratec Grabster AV400 [ 296.390226][ T5853] pvrusb2: ********** [ 296.472145][ T5853] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 296.508053][ T5853] pvrusb2: Important functionality might not be entirely working. [ 296.552931][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.566259][ T5853] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 296.580384][ T8031] ubi: mtd0 is already attached to ubi31 [ 296.586629][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.599854][ T5853] pvrusb2: ********** [ 296.936002][ T2316] pvrusb2: Invalid write control endpoint [ 297.079540][ T8037] pvrusb2: Invalid write control endpoint [ 297.936727][ T2316] pvrusb2: Invalid write control endpoint [ 298.013368][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 298.077502][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 298.113486][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 298.133089][ T2316] pvrusb2: Device being rendered inoperable [ 298.142773][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 298.154319][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 298.171703][ T2316] pvrusb2: Attached sub-driver cx25840 [ 298.188582][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 298.208342][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 298.221970][ T8043] No buffer was provided with the request [ 298.670876][ T5853] usb 4-1: USB disconnect, device number 8 [ 298.935794][ T8048] usb usb8: usbfs: process 8048 (syz.3.630) did not claim interface 0 before use [ 299.367338][ T8054] fuse: Bad value for 'user_id' [ 300.427411][ T8062] loop7: detected capacity change from 0 to 7 [ 300.450411][ T8062] Dev loop7: unable to read RDB block 7 [ 300.575290][ T8062] loop7: unable to read partition table [ 300.708313][ T8072] Bluetooth: MGMT ver 1.22 [ 300.802779][ T8062] loop7: partition table beyond EOD, truncated [ 301.404490][ T8062] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 302.725939][ T5801] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 302.951291][ T8080] usb usb8: usbfs: process 8080 (syz.1.640) did not claim interface 0 before use [ 303.046063][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 303.106027][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 303.896104][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 303.925451][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 304.017152][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.069269][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 304.086057][ T8] pvrusb2: ********** [ 304.094817][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 304.122004][ T8] pvrusb2: Important functionality might not be entirely working. [ 304.161655][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 304.205523][ T8] pvrusb2: ********** [ 304.265080][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.284279][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.298204][ T8088] No buffer was provided with the request [ 304.963139][ T2316] pvrusb2: Invalid write control endpoint [ 305.356377][ T2316] pvrusb2: Invalid write control endpoint [ 305.376862][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 305.398390][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 305.406414][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 305.416952][ T2316] pvrusb2: Device being rendered inoperable [ 305.426062][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 305.433412][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 305.456869][ T2316] pvrusb2: Attached sub-driver cx25840 [ 305.463456][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.473825][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 306.251148][ T8100] ubi: mtd0 is already attached to ubi31 [ 306.346609][ T8] usb 3-1: USB disconnect, device number 10 [ 306.591222][ T8104] tipc: Enabled bearer , priority 0 [ 306.624449][ T8104] tipc: Resetting bearer [ 306.658817][ T8102] tipc: Disabling bearer [ 306.730961][ T8110] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[8110] [ 306.745519][ T8108] loop7: detected capacity change from 0 to 7 [ 306.756329][ T8108] Dev loop7: unable to read RDB block 7 [ 306.768875][ T8108] loop7: unable to read partition table [ 306.816299][ T8108] loop7: partition table beyond EOD, truncated [ 306.824767][ T8108] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 309.050308][ T6141] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.290590][ T6141] usb 2-1: Using ep0 maxpacket: 8 [ 309.303132][ T6141] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 309.314905][ T6141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.323061][ T6141] usb 2-1: Product: syz [ 309.329736][ T6141] usb 2-1: Manufacturer: syz [ 309.335255][ T6141] usb 2-1: SerialNumber: syz [ 309.350554][ T6141] usb 2-1: config 0 descriptor?? [ 309.361524][ T6141] gspca_main: sq905-2.14.0 probing 2770:9120 [ 309.683601][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 310.045026][ T6141] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 310.077185][ T6141] sq905: probe of 2-1:0.0 failed with error -110 [ 310.803520][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 311.119782][ T5853] usb 2-1: USB disconnect, device number 8 [ 311.255943][ T6141] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 311.456687][ T6141] usb 4-1: Using ep0 maxpacket: 8 [ 311.466967][ T6141] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 311.497228][ T6141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.550227][ T6141] pvrusb2: Hardware description: Terratec Grabster AV400 [ 311.559983][ T6141] pvrusb2: ********** [ 311.564000][ T6141] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 311.578226][ T6141] pvrusb2: Important functionality might not be entirely working. [ 311.586249][ T6141] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 311.597906][ T6141] pvrusb2: ********** [ 311.637469][ T8122] syz.1.651 (8122) used greatest stack depth: 20872 bytes left [ 311.743549][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.744605][ T8143] No buffer was provided with the request [ 311.786122][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.144775][ T2316] pvrusb2: Invalid write control endpoint [ 315.299744][ T2316] pvrusb2: Invalid write control endpoint [ 315.305727][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 315.316617][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 315.325413][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 315.360767][ T2316] pvrusb2: Device being rendered inoperable [ 315.403194][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 315.427821][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 315.468839][ T2316] pvrusb2: Attached sub-driver cx25840 [ 316.344997][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 316.355223][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 316.396304][ T27] usb 4-1: USB disconnect, device number 9 [ 316.711359][ T8163] loop7: detected capacity change from 0 to 7 [ 316.720863][ T8163] Dev loop7: unable to read RDB block 7 [ 316.728745][ T8163] loop7: unable to read partition table [ 316.734953][ T8163] loop7: partition table beyond EOD, truncated [ 316.768402][ T8163] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 316.804448][ T8167] syz.1.663: attempt to access beyond end of device [ 316.804448][ T8167] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 316.838108][ T8167] syz.1.663: attempt to access beyond end of device [ 316.838108][ T8167] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 316.865077][ T8167] Mount JFS Failure: -5 [ 317.292021][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.298498][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.816210][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 319.106341][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 319.375975][ T5853] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 319.406957][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.513762][ T5853] pvrusb2: Hardware description: Terratec Grabster AV400 [ 319.618854][ T5853] pvrusb2: ********** [ 319.675431][ T5853] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 320.322112][ T5853] pvrusb2: Important functionality might not be entirely working. [ 320.372815][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.412178][ T5853] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 320.470946][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.478895][ T5853] pvrusb2: ********** [ 322.208331][ T2316] pvrusb2: Invalid write control endpoint [ 322.576695][ T8206] fuse: Bad value for 'fd' [ 323.023609][ T2316] pvrusb2: Invalid write control endpoint [ 323.029395][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 323.038782][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 323.046379][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 323.056975][ T2316] pvrusb2: Device being rendered inoperable [ 323.063308][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 323.080201][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 323.467307][ T2316] pvrusb2: Attached sub-driver cx25840 [ 323.515942][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 323.706282][ T54] usb 4-1: USB disconnect, device number 10 [ 323.706301][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 326.911101][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 327.380864][ T8254] fuse: Bad value for 'fd' [ 330.129810][ T8281] fuse: Bad value for 'fd' [ 330.789322][ T8295] fuse: Bad value for 'fd' [ 331.666582][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 332.018594][ T8305] syz.0.702 (8305) used greatest stack depth: 20688 bytes left [ 334.821918][ T8320] fuse: Bad value for 'fd' [ 335.833145][ T8] IPVS: starting estimator thread 0... [ 336.047109][ T8338] IPVS: using max 18 ests per chain, 43200 per kthread [ 337.719178][ T8354] fuse: Invalid rootmode [ 338.343589][ T6141] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 338.783665][ T6141] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 338.827131][ T6141] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 338.846845][ T6141] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 338.861988][ T6141] usb 1-1: config 8 has no interface number 0 [ 338.869686][ T6141] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 338.881069][ T6141] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.897482][ T6141] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 338.909124][ T6141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.919754][ T6141] usb 1-1: Product: syz [ 338.924011][ T6141] usb 1-1: Manufacturer: syz [ 338.929909][ T6141] usb 1-1: SerialNumber: syz [ 342.622910][ T6141] usb 1-1: USB disconnect, device number 9 [ 342.763374][ T8369] fuse: Invalid rootmode [ 347.058385][ T8406] fuse: Invalid rootmode [ 347.340351][ T8410] fuse: Invalid rootmode [ 348.325946][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 353.391913][ T8428] loop7: detected capacity change from 0 to 7 [ 353.403796][ T8425] Dev loop7: unable to read RDB block 7 [ 353.411659][ T8425] loop7: unable to read partition table [ 353.417827][ T8425] loop7: partition table beyond EOD, truncated [ 353.424744][ T8428] Dev loop7: unable to read RDB block 7 [ 353.433025][ T8428] loop7: unable to read partition table [ 353.479999][ T8428] loop7: partition table beyond EOD, truncated [ 353.570307][ T8428] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 353.893840][ T27] IPVS: starting estimator thread 0... [ 354.178902][ T8437] IPVS: using max 19 ests per chain, 45600 per kthread [ 354.609481][ T8446] fuse: Invalid rootmode [ 355.666745][ T6141] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 356.845912][ T6141] usb 3-1: Using ep0 maxpacket: 32 [ 356.871849][ T6141] usb 3-1: unable to get BOS descriptor or descriptor too short [ 356.940536][ T8467] fuse: Bad value for 'rootmode' [ 357.018915][ T6141] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 357.303742][ T6141] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 357.319466][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.357777][ T6141] usb 3-1: Product: syz [ 357.398782][ T6141] usb 3-1: Manufacturer: syz [ 357.439851][ T6141] usb 3-1: SerialNumber: syz [ 357.691013][ T6141] usb 3-1: Cannot retrieve CPort count: -71 [ 357.714108][ T6141] usb 3-1: Cannot retrieve CPort count: -71 [ 357.721092][ T6141] es2_ap_driver: probe of 3-1:7.0 failed with error -71 [ 357.731838][ T6141] usb 3-1: USB disconnect, device number 11 [ 357.935945][ T8474] syz.3.745: attempt to access beyond end of device [ 357.935945][ T8474] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 358.001522][ T8474] syz.3.745: attempt to access beyond end of device [ 358.001522][ T8474] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 358.016690][ T8474] Mount JFS Failure: -5 [ 358.432791][ T8479] loop7: detected capacity change from 0 to 7 [ 358.448471][ T8479] Dev loop7: unable to read RDB block 7 [ 358.482709][ T8479] loop7: unable to read partition table [ 358.506391][ T8479] loop7: partition table beyond EOD, truncated [ 358.519834][ T8479] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 358.939771][ T8489] fuse: Bad value for 'rootmode' [ 360.943438][ T8506] fuse: Bad value for 'rootmode' [ 361.934587][ T8513] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 362.059108][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.296260][ T8515] vlan2: entered allmulticast mode [ 362.579419][ T8515] veth1: entered allmulticast mode [ 362.603522][ T8515] bond1: (slave vlan2): making interface the new active one [ 363.877423][ T8515] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 365.046229][ T8534] loop7: detected capacity change from 0 to 7 [ 365.066036][ T8438] Dev loop7: unable to read RDB block 7 [ 365.071719][ T8438] loop7: unable to read partition table [ 365.096220][ T8438] loop7: partition table beyond EOD, truncated [ 365.158767][ T8534] Dev loop7: unable to read RDB block 7 [ 365.196400][ T8534] loop7: unable to read partition table [ 365.202183][ T8534] loop7: partition table beyond EOD, truncated [ 365.221124][ T8534] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 365.277959][ T8540] fuse: Bad value for 'rootmode' [ 365.616227][ T8544] ubi: mtd0 is already attached to ubi31 [ 366.405428][ T8551] fuse: Bad value for 'rootmode' [ 366.415748][ T54] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 367.146146][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 367.159059][ T54] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 367.187900][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.305555][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 367.466508][ T54] pvrusb2: ********** [ 367.481424][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 367.515981][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.524718][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.546976][ T54] pvrusb2: Important functionality might not be entirely working. [ 367.579597][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 367.801434][ T54] pvrusb2: ********** [ 368.617748][ T2316] pvrusb2: Invalid write control endpoint [ 368.822305][ T8557] pvrusb2: Invalid write control endpoint [ 369.283302][ T2316] pvrusb2: Invalid write control endpoint [ 369.297513][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 369.397841][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 369.661071][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 369.671596][ T2316] pvrusb2: Device being rendered inoperable [ 369.680978][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 369.692069][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 369.711281][ T2316] pvrusb2: Attached sub-driver cx25840 [ 369.720029][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 369.732127][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 370.842715][ T27] usb 3-1: USB disconnect, device number 12 [ 371.379989][ T8582] fuse: Unknown parameter 'use00000000000000000000' [ 372.146323][ T8584] loop7: detected capacity change from 0 to 7 [ 372.350322][ T8584] Dev loop7: unable to read RDB block 7 [ 372.381472][ T8584] loop7: unable to read partition table [ 372.390586][ T8584] loop7: partition table beyond EOD, truncated [ 372.412600][ T8584] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 374.226044][ T788] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 374.390682][ T8607] No buffer was provided with the request [ 374.530502][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.540740][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.565040][ T788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.611285][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.627492][ T788] usb 3-1: Product: syz [ 374.631860][ T788] usb 3-1: Manufacturer: syz [ 374.637598][ T788] usb 3-1: SerialNumber: syz [ 374.911173][ T8608] ubi: mtd0 is already attached to ubi31 [ 375.019136][ T788] usb 3-1: 0:1 : does not exist [ 375.024033][ T788] usb 3-1: 0:2 : does not exist [ 375.078318][ T788] usb 3-1: USB disconnect, device number 13 [ 375.167995][ T8438] udevd[8438]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.989652][ T8620] rtc_cmos 00:00: Alarms can be up to one day in the future [ 376.090097][ T8622] loop7: detected capacity change from 0 to 7 [ 376.109004][ T8622] Dev loop7: unable to read RDB block 7 [ 376.154173][ T8622] loop7: unable to read partition table [ 376.161061][ T8622] loop7: partition table beyond EOD, truncated [ 376.252608][ T8622] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 377.227000][ T8636] No buffer was provided with the request [ 378.730963][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.977367][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.183581][ T8643] ubi: mtd0 is already attached to ubi31 [ 381.598931][ T8] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 381.868901][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.903353][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.949185][ T8] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 381.973449][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.993889][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.170110][ T8] usb 4-1: Product: syz [ 382.174327][ T8] usb 4-1: Manufacturer: syz [ 382.180320][ T8] usb 4-1: SerialNumber: syz [ 382.235624][ T8663] loop7: detected capacity change from 0 to 7 [ 382.250112][ T8663] Dev loop7: unable to read RDB block 7 [ 382.260122][ T8663] loop7: unable to read partition table [ 382.268275][ T8663] loop7: partition table beyond EOD, truncated [ 382.274880][ T8663] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 382.416823][ T8] usb 4-1: 0:1 : does not exist [ 382.421735][ T8] usb 4-1: 0:2 : does not exist [ 382.496841][ T8] usb 4-1: USB disconnect, device number 11 [ 382.577614][ T8438] udevd[8438]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.899700][ T8681] ubi: mtd0 is already attached to ubi31 [ 384.919648][ T8680] tipc: Enabled bearer , priority 0 [ 385.817501][ T8686] tipc: Resetting bearer [ 386.010533][ T7548] tipc: Node number set to 1046794341 [ 386.547245][ T8678] tipc: Disabling bearer [ 387.557119][ T8702] loop7: detected capacity change from 0 to 7 [ 387.819253][ T8702] Dev loop7: unable to read RDB block 7 [ 387.879975][ T8702] loop7: unable to read partition table [ 387.998476][ T8702] loop7: partition table beyond EOD, truncated [ 388.087710][ T8702] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 388.681597][ T8719] fuse: Unknown parameter 'user_i00000000000000000000' [ 390.216438][ T54] IPVS: starting estimator thread 0... [ 390.594262][ T8726] IPVS: using max 20 ests per chain, 48000 per kthread [ 391.612461][ T8736] syzkaller0: entered promiscuous mode [ 391.618967][ T8736] syzkaller0: entered allmulticast mode [ 392.813144][ T8746] loop7: detected capacity change from 0 to 7 [ 392.825363][ T8746] Dev loop7: unable to read RDB block 7 [ 392.863111][ T8746] loop7: unable to read partition table [ 392.887427][ T8746] loop7: partition table beyond EOD, truncated [ 392.893908][ T8746] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 393.006108][ T7548] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 393.092782][ T8755] fuse: Unknown parameter 'user_id00000000000000000000' [ 393.347543][ T7548] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.528580][ T7548] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.568292][ T7548] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 393.631399][ T7548] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.639448][ T5160] Dev loop7: unable to read RDB block 7 [ 393.646757][ T5160] loop7: unable to read partition table [ 393.646819][ T7548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.652783][ T5160] loop7: partition table beyond EOD, truncated [ 394.078500][ T7548] usb 2-1: Product: syz [ 394.120454][ T7548] usb 2-1: Manufacturer: syz [ 394.125086][ T7548] usb 2-1: SerialNumber: syz [ 394.547150][ T7548] usb 2-1: 0:1 : does not exist [ 394.663644][ T7548] usb 2-1: 0:2 : does not exist [ 394.786548][ T7548] usb 2-1: USB disconnect, device number 9 [ 394.841363][ T8438] udevd[8438]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.826980][ T8788] loop7: detected capacity change from 0 to 7 [ 396.839083][ T8438] Dev loop7: unable to read RDB block 7 [ 396.845012][ T8438] loop7: unable to read partition table [ 396.854421][ T8438] loop7: partition table beyond EOD, truncated [ 396.862798][ T8788] Dev loop7: unable to read RDB block 7 [ 396.871583][ T8788] loop7: unable to read partition table [ 396.914605][ T8788] loop7: partition table beyond EOD, truncated [ 396.938154][ T8788] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 399.111511][ T8826] loop7: detected capacity change from 0 to 7 [ 399.146138][ T8826] Dev loop7: unable to read RDB block 7 [ 399.166849][ T8826] loop7: unable to read partition table [ 399.246330][ T8826] loop7: partition table beyond EOD, truncated [ 399.252564][ T8826] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 402.461985][ T8866] loop7: detected capacity change from 0 to 7 [ 402.489727][ T8866] Dev loop7: unable to read RDB block 7 [ 402.499646][ T8866] loop7: unable to read partition table [ 402.508651][ T8866] loop7: partition table beyond EOD, truncated [ 402.518399][ T8866] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 404.555200][ T8892] syzkaller0: entered promiscuous mode [ 404.573167][ T8892] syzkaller0: entered allmulticast mode [ 404.576121][ T8893] No buffer was provided with the request [ 404.615931][ T6141] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 404.796063][ T6141] usb 3-1: Using ep0 maxpacket: 8 [ 404.803187][ T6141] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 404.820375][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.851014][ T6141] pvrusb2: Hardware description: Terratec Grabster AV400 [ 404.858567][ T6141] pvrusb2: ********** [ 404.864855][ T6141] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 404.894454][ T6141] pvrusb2: Important functionality might not be entirely working. [ 404.929704][ T6141] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 404.968604][ T6141] pvrusb2: ********** [ 405.061912][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.076650][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.758375][ T2316] pvrusb2: Invalid write control endpoint [ 406.212132][ T2316] pvrusb2: Invalid write control endpoint [ 406.236294][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 406.246658][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 406.254413][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 406.265530][ T2316] pvrusb2: Device being rendered inoperable [ 406.278354][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 406.303271][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 406.317949][ T2316] pvrusb2: Attached sub-driver cx25840 [ 406.333455][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 406.344171][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 407.268573][ T788] usb 3-1: USB disconnect, device number 14 [ 409.035212][ T8916] loop7: detected capacity change from 0 to 7 [ 409.056411][ T8438] Dev loop7: unable to read RDB block 7 [ 409.134511][ T8438] loop7: unable to read partition table [ 409.496946][ T8438] loop7: partition table beyond EOD, truncated [ 409.516357][ T8916] Dev loop7: unable to read RDB block 7 [ 409.543542][ T8916] loop7: unable to read partition table [ 409.553007][ T8916] loop7: partition table beyond EOD, truncated [ 409.578927][ T8916] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 409.852155][ T8929] syzkaller0: entered promiscuous mode [ 409.865241][ T8929] syzkaller0: entered allmulticast mode [ 410.369041][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 410.475995][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 410.648538][ T54] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 410.694184][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 410.704302][ T8] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 410.907341][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.956900][ T8] usb 1-1: Product: syz [ 410.966415][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 410.997549][ T8] usb 1-1: Manufacturer: syz [ 411.012798][ T54] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 411.155856][ T8] usb 1-1: SerialNumber: syz [ 411.165502][ T8] usb 1-1: config 0 descriptor?? [ 411.174395][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.201389][ T8] gspca_main: sq905-2.14.0 probing 2770:9120 [ 411.239990][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 411.264989][ T54] pvrusb2: ********** [ 411.269697][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 411.290440][ T54] pvrusb2: Important functionality might not be entirely working. [ 411.302812][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 411.315713][ T54] pvrusb2: ********** [ 411.412766][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 411.439414][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.455730][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.492566][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 411.597460][ T8950] loop7: detected capacity change from 0 to 7 [ 411.631823][ T8470] Dev loop7: unable to read RDB block 7 [ 411.651782][ T8470] loop7: unable to read partition table [ 411.683847][ T8470] loop7: partition table beyond EOD, truncated [ 411.693987][ T8950] Dev loop7: unable to read RDB block 7 [ 411.707345][ T8950] loop7: unable to read partition table [ 411.715612][ T8950] loop7: partition table beyond EOD, truncated [ 411.740416][ T8950] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 412.483684][ T8] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 412.503906][ T2316] pvrusb2: Invalid write control endpoint [ 412.509904][ T8] sq905: probe of 1-1:0.0 failed with error -71 [ 412.526381][ T8] usb 1-1: USB disconnect, device number 10 [ 412.637352][ T2316] pvrusb2: Invalid write control endpoint [ 412.643119][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 412.685556][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 412.694678][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 412.717670][ T2316] pvrusb2: Device being rendered inoperable [ 412.740492][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 412.765398][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 412.798645][ T2316] pvrusb2: Attached sub-driver cx25840 [ 412.833015][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 412.863559][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 412.888629][ T8962] tmpfs: Bad value for 'huge' [ 413.896291][ T7548] usb 3-1: USB disconnect, device number 15 [ 415.948265][ T8992] loop7: detected capacity change from 0 to 7 [ 415.996476][ T8992] Dev loop7: unable to read RDB block 7 [ 416.002105][ T8992] loop7: unable to read partition table [ 416.019680][ T8992] loop7: partition table beyond EOD, truncated [ 416.030586][ T8992] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 416.035193][ T9001] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 416.050941][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.425142][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 416.463984][ T9006] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 416.470633][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.506018][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 416.578325][ T9001] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 416.622669][ T9001] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 416.629299][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 416.645998][ T5853] vhci_hcd: vhci_device speed not set [ 416.672356][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 416.773953][ T5853] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 416.796311][ T9006] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 416.802951][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 416.825294][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 417.116517][ T9001] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 417.123166][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 417.576574][ T9006] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.616586][ T9006] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.646282][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 417.669428][ T9001] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.726037][ T9001] vhci_hcd vhci_hcd.0: port 0 already used [ 417.757956][ T9016] vhci_hcd: connection closed [ 417.758677][ T9013] vhci_hcd: connection closed [ 417.758833][ T9007] vhci_hcd: connection closed [ 417.763425][ T9009] vhci_hcd: connection closed [ 417.771446][ T9028] syzkaller0: entered promiscuous mode [ 417.787909][ T1086] vhci_hcd: stop threads [ 417.792886][ T1086] vhci_hcd: release socket [ 417.798560][ T9002] vhci_hcd: connection reset by peer [ 417.805021][ T9028] syzkaller0: entered allmulticast mode [ 417.814708][ T1086] vhci_hcd: disconnect device [ 417.829394][ T1086] vhci_hcd: stop threads [ 417.833739][ T1086] vhci_hcd: release socket [ 417.842723][ T1086] vhci_hcd: disconnect device [ 417.852320][ T1086] vhci_hcd: stop threads [ 417.859652][ T1086] vhci_hcd: release socket [ 417.891611][ T1086] vhci_hcd: disconnect device [ 417.900273][ T1086] vhci_hcd: stop threads [ 417.904979][ T1086] vhci_hcd: release socket [ 417.911747][ T1086] vhci_hcd: disconnect device [ 417.920266][ T1086] vhci_hcd: stop threads [ 417.925344][ T1086] vhci_hcd: release socket [ 417.934571][ T1086] vhci_hcd: disconnect device [ 417.939771][ T54] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 418.286826][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 418.398641][ T54] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 418.474407][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.591848][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 418.602848][ T54] pvrusb2: ********** [ 418.626220][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 418.663072][ T54] pvrusb2: Important functionality might not be entirely working. [ 418.687213][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 418.844036][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.852612][ T54] pvrusb2: ********** [ 418.867886][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.828043][ T9042] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 419.837770][ T9042] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 419.847506][ T9042] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 420.623309][ T28] audit: type=1800 audit(1754004624.760:3): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.902" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 420.644690][ T2316] pvrusb2: Invalid write control endpoint [ 420.735332][ T2316] pvrusb2: Invalid write control endpoint [ 420.778965][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 420.877707][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 420.939479][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 421.013209][ T2316] pvrusb2: Device being rendered inoperable [ 421.020291][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 421.047917][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 421.100719][ T2316] pvrusb2: Attached sub-driver cx25840 [ 421.143287][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 421.221037][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 421.259869][ T9052] loop7: detected capacity change from 0 to 7 [ 421.297179][ T9052] Dev loop7: unable to read RDB block 7 [ 421.333322][ T9052] loop7: unable to read partition table [ 421.408556][ T9052] loop7: partition table beyond EOD, truncated [ 421.457327][ T9052] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 421.720205][ T788] usb 3-1: USB disconnect, device number 16 [ 422.073590][ T5853] vhci_hcd: vhci_device speed not set [ 422.132098][ T9065] ubi: mtd0 is already attached to ubi31 [ 422.763006][ T9069] syzkaller0: entered promiscuous mode [ 422.783445][ T9069] syzkaller0: entered allmulticast mode [ 423.926871][ T9085] No buffer was provided with the request [ 424.367501][ T27] usb usb36-port1: attempt power cycle [ 426.366931][ T27] usb usb36-port1: unable to enumerate USB device [ 430.761781][ T9146] ubi: mtd0 is already attached to ubi31 [ 435.633887][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 435.803869][ T9201] ubi: mtd0 is already attached to ubi31 [ 435.935850][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 435.951899][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 435.967374][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.989716][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 436.008825][ T8] pvrusb2: ********** [ 436.015346][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 436.030231][ T8] pvrusb2: Important functionality might not be entirely working. [ 436.042874][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 436.118032][ T8] pvrusb2: ********** [ 436.530062][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.544300][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.980373][ T2316] pvrusb2: Invalid write control endpoint [ 437.197164][ T9210] pvrusb2: Invalid write control endpoint [ 437.954662][ T2316] pvrusb2: Invalid write control endpoint [ 437.959513][ T9216] tmpfs: Bad value for 'huge' [ 437.976479][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 437.986961][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 437.995341][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 438.009910][ T2316] pvrusb2: Device being rendered inoperable [ 438.272514][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 438.289351][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 438.317761][ T2316] pvrusb2: Attached sub-driver cx25840 [ 438.336613][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 438.347443][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 439.326193][ T27] usb 1-1: USB disconnect, device number 11 [ 439.444169][ T9227] syzkaller0: entered promiscuous mode [ 439.476371][ T9227] syzkaller0: entered allmulticast mode [ 440.237315][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243979][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.386348][ T9252] loop7: detected capacity change from 0 to 7 [ 441.601892][ T9252] Dev loop7: unable to read RDB block 7 [ 441.678723][ T9252] loop7: unable to read partition table [ 441.837294][ T9252] loop7: partition table beyond EOD, truncated [ 441.973437][ T9252] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 445.863012][ T9277] No buffer was provided with the request [ 448.328797][ T9297] loop7: detected capacity change from 0 to 7 [ 448.344826][ T8470] Dev loop7: unable to read RDB block 7 [ 448.350643][ T8470] loop7: unable to read partition table [ 448.363939][ T8470] loop7: partition table beyond EOD, truncated [ 448.376550][ T9302] No buffer was provided with the request [ 448.458590][ T9304] syzkaller0: entered promiscuous mode [ 448.470964][ T9297] Dev loop7: unable to read RDB block 7 [ 448.486927][ T9297] loop7: unable to read partition table [ 448.492692][ T9297] loop7: partition table beyond EOD, truncated [ 448.516055][ T9304] syzkaller0: entered allmulticast mode [ 448.570173][ T9297] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 449.888141][ T9333] No buffer was provided with the request [ 450.515053][ T9342] loop7: detected capacity change from 0 to 7 [ 450.543328][ T8438] Dev loop7: unable to read RDB block 7 [ 450.555940][ T8438] loop7: unable to read partition table [ 450.578394][ T8438] loop7: partition table beyond EOD, truncated [ 450.596032][ T9342] Dev loop7: unable to read RDB block 7 [ 450.641804][ T9342] loop7: unable to read partition table [ 450.672611][ T9342] loop7: partition table beyond EOD, truncated [ 450.697965][ T9342] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 450.817467][ T9350] syzkaller0: entered promiscuous mode [ 450.829304][ T9350] syzkaller0: entered allmulticast mode [ 451.282650][ T5160] Dev loop7: unable to read RDB block 7 [ 451.288713][ T5160] loop7: unable to read partition table [ 451.302885][ T5160] loop7: partition table beyond EOD, truncated [ 451.417534][ T9361] No buffer was provided with the request [ 452.870136][ T9379] syz.3.995: attempt to access beyond end of device [ 452.870136][ T9379] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 452.883704][ T9379] syz.3.995: attempt to access beyond end of device [ 452.883704][ T9379] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 452.896978][ T9379] Mount JFS Failure: -5 [ 453.555580][ T9383] syzkaller0: entered promiscuous mode [ 453.583265][ T9383] syzkaller0: entered allmulticast mode [ 454.029835][ T9394] loop7: detected capacity change from 0 to 7 [ 454.044763][ T9394] Dev loop7: unable to read RDB block 7 [ 454.054545][ T9394] loop7: unable to read partition table [ 454.066306][ T9394] loop7: partition table beyond EOD, truncated [ 454.082423][ T9394] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 457.081305][ T9435] loop7: detected capacity change from 0 to 7 [ 457.090890][ T9435] Dev loop7: unable to read RDB block 7 [ 457.101868][ T9435] loop7: unable to read partition table [ 457.109760][ T9435] loop7: partition table beyond EOD, truncated [ 457.125389][ T9435] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 459.045914][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 459.306490][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 459.381639][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 459.665346][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.800213][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 459.895904][ T9474] loop7: detected capacity change from 0 to 7 [ 459.897208][ T27] pvrusb2: ********** [ 459.933313][ T9474] Dev loop7: unable to read RDB block 7 [ 459.943064][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 459.955668][ T9474] loop7: unable to read partition table [ 459.961756][ T27] pvrusb2: Important functionality might not be entirely working. [ 459.974968][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 459.981185][ T9474] loop7: partition table beyond EOD, truncated [ 459.994381][ T9463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.002767][ T9474] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 460.016081][ T27] pvrusb2: ********** [ 460.035221][ T9463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.971642][ T2316] pvrusb2: Invalid write control endpoint [ 461.197353][ T9486] pvrusb2: Invalid write control endpoint [ 461.695901][ T2316] pvrusb2: Invalid write control endpoint [ 461.708127][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 461.719803][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 461.734119][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 461.753495][ T2316] pvrusb2: Device being rendered inoperable [ 461.769068][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 461.829978][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 461.849690][ T2316] pvrusb2: Attached sub-driver cx25840 [ 461.867457][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 461.888813][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 462.664806][ T27] usb 4-1: USB disconnect, device number 12 [ 463.333944][ T9520] overlayfs: failed to resolve './file1/file0': -2 [ 464.346407][ T9528] loop7: detected capacity change from 0 to 7 [ 464.369495][ T8438] Dev loop7: unable to read RDB block 7 [ 464.375146][ T8438] loop7: unable to read partition table [ 464.418626][ T8438] loop7: partition table beyond EOD, truncated [ 464.510079][ T9528] Dev loop7: unable to read RDB block 7 [ 464.519079][ T9528] loop7: unable to read partition table [ 464.721931][ T9528] loop7: partition table beyond EOD, truncated [ 464.939705][ T9528] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 465.175642][ T9535] fuse: Bad value for 'fd' [ 466.409684][ T9563] overlayfs: overlapping lowerdir path [ 467.899569][ T9572] loop7: detected capacity change from 0 to 7 [ 467.922652][ T9572] Dev loop7: unable to read RDB block 7 [ 467.951461][ T9572] loop7: unable to read partition table [ 467.980857][ T9572] loop7: partition table beyond EOD, truncated [ 467.996056][ T9572] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 468.900226][ T5160] Dev loop7: unable to read RDB block 7 [ 468.906010][ T5160] loop7: unable to read partition table [ 468.919172][ T5160] loop7: partition table beyond EOD, truncated [ 470.027971][ T9602] syz.0.1055: attempt to access beyond end of device [ 470.027971][ T9602] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 470.042881][ T9602] syz.0.1055: attempt to access beyond end of device [ 470.042881][ T9602] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 470.056161][ T9602] Mount JFS Failure: -5 [ 470.536823][ T9606] overlayfs: overlapping lowerdir path [ 473.607841][ T9634] loop7: detected capacity change from 0 to 7 [ 473.628129][ T9634] Dev loop7: unable to read RDB block 7 [ 473.657252][ T9634] loop7: unable to read partition table [ 473.686389][ T9634] loop7: partition table beyond EOD, truncated [ 473.753257][ T9634] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 474.011010][ T9644] ubi: mtd0 is already attached to ubi31 [ 475.558265][ T9655] overlayfs: overlapping lowerdir path [ 477.383763][ T9670] syzkaller0: entered promiscuous mode [ 477.402456][ T9670] syzkaller0: entered allmulticast mode [ 477.766337][ T5775] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 477.975987][ T5775] usb 1-1: Using ep0 maxpacket: 8 [ 477.987084][ T5775] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 477.998962][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.666533][ T5775] pvrusb2: Hardware description: Terratec Grabster AV400 [ 478.676428][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.689676][ T5775] pvrusb2: ********** [ 478.693690][ T5775] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 478.704549][ T5775] pvrusb2: Important functionality might not be entirely working. [ 478.712654][ T5775] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 478.724381][ T5775] pvrusb2: ********** [ 478.765001][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.312221][ T9697] ubi: mtd0 is already attached to ubi31 [ 480.235846][ T2316] pvrusb2: Invalid write control endpoint [ 480.623726][ T2316] pvrusb2: Invalid write control endpoint [ 480.630629][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 480.759723][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 480.770975][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 480.781612][ T2316] pvrusb2: Device being rendered inoperable [ 480.812838][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 481.038000][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 481.059769][ T2316] pvrusb2: Attached sub-driver cx25840 [ 481.072828][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 481.175842][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 481.556349][ T9702] syz.3.1083: attempt to access beyond end of device [ 481.556349][ T9702] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 481.579678][ T9702] syz.3.1083: attempt to access beyond end of device [ 481.579678][ T9702] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 481.593246][ T9702] Mount JFS Failure: -5 [ 482.353387][ T6141] usb 1-1: USB disconnect, device number 12 [ 482.847721][ T9715] syzkaller0: entered promiscuous mode [ 482.853491][ T9715] syzkaller0: entered allmulticast mode [ 484.825883][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 485.036342][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 485.161761][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 485.196128][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.416209][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 485.456645][ T8] pvrusb2: ********** [ 485.467062][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 485.478608][ T8] pvrusb2: Important functionality might not be entirely working. [ 485.486674][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 485.499999][ T8] pvrusb2: ********** [ 485.564180][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.573440][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.915949][ T2316] pvrusb2: Invalid write control endpoint [ 486.116962][ T9755] pvrusb2: Invalid write control endpoint [ 486.842031][ T2316] pvrusb2: Invalid write control endpoint [ 486.859490][ T9764] syzkaller0: entered promiscuous mode [ 486.865596][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 486.876060][ T9764] syzkaller0: entered allmulticast mode [ 486.903417][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 486.930503][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 486.953911][ T2316] pvrusb2: Device being rendered inoperable [ 487.008786][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 487.019153][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 487.041332][ T2316] pvrusb2: Attached sub-driver cx25840 [ 487.052248][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 487.065427][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 487.915311][ T27] usb 2-1: USB disconnect, device number 10 [ 492.463789][ T9833] syzkaller0: entered promiscuous mode [ 492.586161][ T9833] syzkaller0: entered allmulticast mode [ 497.434366][ T9879] syzkaller0: entered promiscuous mode [ 497.440590][ T9879] syzkaller0: entered allmulticast mode [ 499.551181][ T9901] ubi: mtd0 is already attached to ubi31 [ 501.611127][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.650888][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.737936][ T5853] IPVS: starting estimator thread 0... [ 504.916058][ T9935] IPVS: using max 21 ests per chain, 50400 per kthread [ 506.256293][ T9953] ubi: mtd0 is already attached to ubi31 [ 510.443875][ T9979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 510.450436][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.461083][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 510.746055][ T7548] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 511.805896][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 511.995909][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 512.002659][ T9] usb 1-1: config 0 has no interfaces? [ 512.008794][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 512.019483][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.030229][ T9] usb 1-1: config 0 descriptor?? [ 512.088392][ T9994] ubi: mtd0 is already attached to ubi31 [ 512.845389][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 512.952942][ T5853] usb 1-1: USB disconnect, device number 13 [ 512.965986][ T9980] vhci_hcd: connection closed [ 512.974031][ T187] vhci_hcd: stop threads [ 513.003767][ T187] vhci_hcd: release socket [ 513.006550][ T7548] usb 33-1: device descriptor read/64, error -65536 [ 513.018891][ T187] vhci_hcd: disconnect device [ 513.206312][ T7548] vhci_hcd: vhci_device speed not set [ 518.064511][T10054] netlink: 'syz.2.1186': attribute type 4 has an invalid length. [ 518.152835][T10057] netlink: 'syz.2.1186': attribute type 4 has an invalid length. [ 523.698546][T10114] orangefs_mount: mount request failed with -4 [ 527.800691][T10164] orangefs_mount: mount request failed with -4 [ 528.365840][ T5775] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 528.565985][ T5775] usb 2-1: Using ep0 maxpacket: 8 [ 528.639138][ T5775] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 528.723074][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.900529][ T5775] pvrusb2: Hardware description: Terratec Grabster AV400 [ 528.911198][ T5775] pvrusb2: ********** [ 528.921372][ T5775] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 528.931583][ T5775] pvrusb2: Important functionality might not be entirely working. [ 528.941929][ T5775] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 528.953453][ T5775] pvrusb2: ********** [ 529.166291][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.215423][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.964439][ T2316] pvrusb2: Invalid write control endpoint [ 531.971051][ T5775] usb 2-1: USB disconnect, device number 11 [ 532.077044][ T2316] pvrusb2: Invalid write control endpoint [ 532.094194][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 532.117331][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 532.125450][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 532.136433][ T2316] pvrusb2: Device being rendered inoperable [ 532.142879][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 532.159088][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 532.247359][ T2316] pvrusb2: Attached sub-driver cx25840 [ 532.365001][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 532.657108][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 533.581419][T10218] overlayfs: missing 'lowerdir' [ 534.715987][ T6141] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 535.154243][ T6141] usb 2-1: Using ep0 maxpacket: 8 [ 535.161202][ T6141] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 535.172172][ T6141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.217284][ T6141] pvrusb2: Hardware description: Terratec Grabster AV400 [ 535.224330][ T6141] pvrusb2: ********** [ 535.231007][ T6141] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 535.241844][ T6141] pvrusb2: Important functionality might not be entirely working. [ 535.254164][ T6141] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 535.275935][ T6141] pvrusb2: ********** [ 535.437313][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.456345][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.985887][ T2316] pvrusb2: Invalid write control endpoint [ 536.630422][ T2316] pvrusb2: Invalid write control endpoint [ 536.637863][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 536.650734][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 536.660125][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 536.671776][ T2316] pvrusb2: Device being rendered inoperable [ 536.681333][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 536.692080][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 536.715246][ T2316] pvrusb2: Attached sub-driver cx25840 [ 536.721272][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 536.735449][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 537.153269][T10248] overlayfs: missing 'lowerdir' [ 538.782623][ T5775] usb 2-1: USB disconnect, device number 12 [ 538.997428][T10258] syzkaller0: entered promiscuous mode [ 539.016249][T10258] syzkaller0: entered allmulticast mode [ 539.628961][T10266] can0: slcan on ptm0. [ 539.727634][T10264] can0 (unregistered): slcan off ptm0. [ 542.131455][T10291] overlayfs: missing 'lowerdir' [ 542.215816][ T5775] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 543.001363][T10299] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 543.146202][ T5775] usb 2-1: Using ep0 maxpacket: 8 [ 543.325159][ T5775] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 543.334596][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.391495][ T5775] pvrusb2: Hardware description: Terratec Grabster AV400 [ 543.398657][ T5775] pvrusb2: ********** [ 543.402668][ T5775] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 543.613576][ T5775] pvrusb2: Important functionality might not be entirely working. [ 543.636325][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.644859][ T5775] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 543.661616][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.714046][T10305] can0: slcan on ptm0. [ 543.740252][ T5775] pvrusb2: ********** [ 544.614763][ T2316] pvrusb2: Invalid write control endpoint [ 544.750625][ T2316] pvrusb2: Invalid write control endpoint [ 545.211700][T10300] can0 (unregistered): slcan off ptm0. [ 545.223220][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 545.263182][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 545.312971][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 545.375803][ T2316] pvrusb2: Device being rendered inoperable [ 545.422026][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 545.457023][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 545.472823][ T2316] pvrusb2: Attached sub-driver cx25840 [ 545.506090][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 545.524502][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 545.827605][ T9] usb 2-1: USB disconnect, device number 13 [ 549.538147][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 550.037748][T10393] syz.3.1276: attempt to access beyond end of device [ 550.037748][T10393] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 550.078883][T10393] syz.3.1276: attempt to access beyond end of device [ 550.078883][T10393] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 550.125123][T10393] Mount JFS Failure: -5 [ 550.947749][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'. [ 553.324802][T10441] syz.3.1288: attempt to access beyond end of device [ 553.324802][T10441] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 553.338531][T10441] syz.3.1288: attempt to access beyond end of device [ 553.338531][T10441] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 553.351783][T10441] Mount JFS Failure: -5 [ 553.446313][ T7548] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 553.802376][ T7548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.856017][ T7548] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 553.916131][ T7548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.985457][ T7548] usb 3-1: config 0 descriptor?? [ 554.269455][ T7548] usbhid 3-1:0.0: can't add hid device: -71 [ 554.286668][ T7548] usbhid: probe of 3-1:0.0 failed with error -71 [ 554.307998][ T7548] usb 3-1: USB disconnect, device number 17 [ 554.343802][T10453] can0: slcan on ptm0. [ 554.875800][ T7548] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 555.255855][ T7548] usb 3-1: Using ep0 maxpacket: 16 [ 555.270412][ T7548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.688201][ T7548] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 555.707165][ T7548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.730827][ T7548] usb 3-1: config 0 descriptor?? [ 555.866237][T10449] can0 (unregistered): slcan off ptm0. [ 556.197586][ T7548] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 556.607759][ T7548] usb 3-1: USB disconnect, device number 18 [ 557.474322][T10488] orangefs_mount: mount request failed with -4 [ 559.726872][T10509] delete_channel: no stack [ 563.050216][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.056604][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.343128][T10643] overlayfs: failed to resolve './file0': -2 [ 573.684607][T10649] vxcan1: entered allmulticast mode [ 578.291776][T10728] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1366'. [ 583.524225][T10749] overlayfs: failed to resolve './file1': -2 [ 584.772937][T10759] syz.1.1376: attempt to access beyond end of device [ 584.772937][T10759] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 584.936789][T10759] syz.1.1376: attempt to access beyond end of device [ 584.936789][T10759] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 584.953798][T10759] Mount JFS Failure: -5 [ 585.576746][T10765] syz.3.1378 (10765) used greatest stack depth: 17928 bytes left [ 585.752373][T10783] overlayfs: failed to resolve './file1': -2 [ 586.749384][T10787] orangefs_mount: mount request failed with -4 [ 586.761079][T10790] delete_channel: no stack [ 588.398931][T10822] delete_channel: no stack [ 589.526607][T10827] orangefs_mount: mount request failed with -4 [ 590.721200][T10849] delete_channel: no stack [ 592.676212][T10902] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1424'. [ 592.702397][T10882] delete_channel: no stack [ 594.133321][T10929] tipc: Enabled bearer , priority 0 [ 594.161387][T10929] syzkaller0: entered promiscuous mode [ 594.179507][T10929] syzkaller0: entered allmulticast mode [ 594.221824][T10929] tipc: Resetting bearer [ 594.277401][T10928] tipc: Resetting bearer [ 594.321690][T10928] tipc: Disabling bearer [ 594.595232][T10939] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 594.605493][T10939] team0: Device bond0 is up. Set it down before adding it as a team port [ 595.208850][T10951] can0: slcan on ptm0. [ 595.467182][T10942] can0 (unregistered): slcan off ptm0. [ 595.862993][T10973] devtmpfs: Too few inodes for current use [ 598.943619][T11047] tipc: New replicast peer: 255.255.255.255 [ 598.958663][T11047] tipc: Enabled bearer , priority 10 [ 598.970963][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 598.981532][T11047] tipc: Disabling bearer [ 600.292907][T11079] vxcan1: entered allmulticast mode [ 600.956204][T11074] delete_channel: no stack [ 602.854390][T11108] delete_channel: no stack [ 603.675914][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 603.867072][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 603.916245][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 603.949282][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 603.967413][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.005217][ T9] usb 2-1: Product: syz [ 604.024823][ T9] usb 2-1: Manufacturer: syz [ 604.032088][ T9] usb 2-1: SerialNumber: syz [ 604.066655][ T9] usb 2-1: config 0 descriptor?? [ 604.086979][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 604.115497][ T9] usb 2-1: setting power ON [ 604.139176][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 604.183329][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.201214][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 604.227514][ T9] usb 2-1: media controller created [ 604.280524][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.294194][T11139] dvb-usb: bulk message failed: -22 (3/0) [ 604.308458][T11139] dvb-usb: bulk message failed: -22 (3/0) [ 604.365476][ T9] usb 2-1: selecting invalid altsetting 6 [ 604.506147][ T9] usb 2-1: digital interface selection failed (-22) [ 604.523852][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 604.560516][ T9] usb 2-1: setting power OFF [ 604.565520][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 604.574471][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 604.598355][ T9] (NULL device *): no alternate interface [ 604.678386][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 604.698587][ T9] usb 2-1: USB disconnect, device number 14 [ 605.180836][T11149] delete_channel: no stack [ 605.281030][T11163] tipc: Enabling of bearer rejected, failed to enable media [ 605.345105][T11167] overlayfs: failed to clone upperpath [ 605.632419][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1514'. [ 606.387079][T11197] tipc: Enabled bearer , priority 0 [ 606.395012][T11197] syzkaller0: entered promiscuous mode [ 606.400880][T11197] syzkaller0: entered allmulticast mode [ 606.416539][T11197] tipc: Resetting bearer [ 606.427989][T11195] tipc: Resetting bearer [ 606.465081][T11195] tipc: Disabling bearer [ 606.530039][T11200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1524'. [ 606.834731][T11186] delete_channel: no stack [ 607.065845][ T5853] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 607.269322][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.287070][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.299347][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 607.328901][ T5853] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 607.351412][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.368927][T11224] tipc: Enabling of bearer rejected, failed to enable media [ 607.374006][ T5853] usb 2-1: config 0 descriptor?? [ 607.968530][ T5853] glorious 0003:258A:0036.0002: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0 [ 608.041768][ T8] usb 2-1: USB disconnect, device number 15 [ 608.141361][T11239] fido_id[11239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 608.252326][T11225] delete_channel: no stack [ 608.340880][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 609.386331][T11256] tipc: Enabled bearer , priority 0 [ 609.417222][T11256] syzkaller0: entered promiscuous mode [ 609.440396][T11256] syzkaller0: entered allmulticast mode [ 609.457731][T11256] tipc: Resetting bearer [ 609.467443][T11255] tipc: Resetting bearer [ 609.506643][T11255] tipc: Disabling bearer [ 610.981636][T11270] delete_channel: no stack [ 613.034048][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 613.814737][T11298] TCP: TCP_TX_DELAY enabled [ 615.163861][T11304] tipc: Enabling of bearer rejected, failed to enable media [ 616.409899][T11328] overlayfs: missing 'lowerdir' [ 616.926438][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 619.157469][T11372] overlayfs: missing 'lowerdir' [ 619.197787][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 619.530014][T11369] mmap: syz.3.1579 (11369) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 620.714275][T11397] overlayfs: missing 'workdir' [ 620.994296][T11407] overlayfs: failed to clone upperpath [ 621.074366][T11411] tipc: Enabling of bearer rejected, failed to enable media [ 621.388234][T11424] overlayfs: missing 'workdir' [ 622.457837][T11442] tipc: Enabling of bearer rejected, failed to enable media [ 624.500636][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.515829][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.511222][T11509] overlayfs: missing 'lowerdir' [ 626.940296][T11521] @: renamed from vlan0 (while UP) [ 630.135989][T11589] tipc: Enabling of bearer rejected, failed to enable media [ 630.743491][T11594] delete_channel: no stack [ 633.110597][T11623] delete_channel: no stack [ 633.566463][T11631] tipc: Enabling of bearer rejected, failed to enable media [ 633.723489][T11637] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 633.762775][T11637] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 635.562483][T11671] tipc: Enabling of bearer rejected, failed to enable media [ 635.619937][T11673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 635.632286][T11673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 635.933788][T11660] delete_channel: no stack [ 637.169664][T11701] overlayfs: failed to clone upperpath [ 637.408501][T11705] tipc: Enabling of bearer rejected, failed to enable media [ 638.681952][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 638.875315][T11731] overlayfs: failed to clone upperpath [ 639.990261][T11740] tipc: Enabling of bearer rejected, failed to enable media [ 640.620089][T11734] delete_channel: no stack [ 641.208036][T11759] overlayfs: failed to clone upperpath [ 642.557562][T11782] overlayfs: failed to clone upperpath [ 644.297181][T11788] delete_channel: no stack [ 644.759701][T11813] overlayfs: failed to clone upperpath [ 647.401785][T11851] overlayfs: failed to clone upperpath [ 648.561203][T11856] delete_channel: no stack [ 649.345953][T11878] @: renamed from vlan0 (while UP) [ 649.426740][T11886] overlayfs: failed to clone upperpath [ 652.924637][T11935] overlayfs: failed to clone upperpath [ 663.706906][T12110] syz_tun: entered allmulticast mode [ 663.747318][T12110] veth0_vlan: entered allmulticast mode [ 663.949640][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 664.196754][T12113] bond0: (slave bond_slave_1): Releasing backup interface [ 667.253959][ T28] audit: type=1326 audit(1754004872.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.2.1863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f851458eb69 code=0x0 [ 686.016305][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.022666][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.565624][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 773.572617][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1129/1:b..l [ 773.581040][ C1] rcu: (detected by 1, t=10502 jiffies, g=53253, q=25 ncpus=2) [ 773.588675][ C1] task:kworker/u4:8 state:R running task stack:22224 pid:1129 ppid:2 flags:0x00004000 [ 773.600510][ C1] Workqueue: bat_events batadv_nc_worker [ 773.606207][ C1] Call Trace: [ 773.609494][ C1] [ 773.612441][ C1] __schedule+0x14d2/0x44d0 [ 773.616978][ C1] ? __bfs+0x5a0/0x5c0 [ 773.621067][ C1] ? asan.module_dtor+0x20/0x20 [ 773.625933][ C1] ? mark_lock+0x94/0x320 [ 773.630276][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 773.636305][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 773.641793][ C1] preempt_schedule_irq+0xb5/0x140 [ 773.646916][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 773.652657][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 773.658477][ C1] irqentry_exit+0x67/0x70 [ 773.662905][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 773.668900][ C1] RIP: 0010:lock_acquire+0x1f2/0x410 [ 773.674198][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 773.693816][ C1] RSP: 0018:ffffc900048e7a40 EFLAGS: 00000206 [ 773.699893][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 931fa394eb026300 [ 773.707868][ C1] RDX: 0000000000000000 RSI: ffffffff8aaacbc0 RDI: ffffffff8afc6700 [ 773.715931][ C1] RBP: ffffc900048e7b48 R08: dffffc0000000000 R09: 1ffffffff21b46a4 [ 773.723925][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 1ffff9200091cf54 [ 773.731907][ C1] R13: ffffffff8cd2fba0 R14: 0000000000000246 R15: dffffc0000000000 [ 773.740088][ C1] ? batadv_nc_worker+0xd2/0x610 [ 773.745041][ C1] ? read_lock_is_recursive+0x20/0x20 [ 773.750428][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 773.756427][ C1] ? batadv_nc_worker+0xd2/0x610 [ 773.761379][ C1] batadv_nc_worker+0xef/0x610 [ 773.766154][ C1] ? batadv_nc_worker+0xd2/0x610 [ 773.771107][ C1] ? process_scheduled_works+0x957/0x15b0 [ 773.776834][ C1] process_scheduled_works+0xa45/0x15b0 [ 773.782418][ C1] ? assign_work+0x400/0x400 [ 773.787028][ C1] ? assign_work+0x39e/0x400 [ 773.791635][ C1] worker_thread+0xa55/0xfc0 [ 773.796237][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 773.802149][ C1] ? _raw_spin_unlock+0x40/0x40 [ 773.807009][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 773.812934][ C1] kthread+0x2fa/0x390 [ 773.817010][ C1] ? pr_cont_work+0x560/0x560 [ 773.821701][ C1] ? kthread_blkcg+0xd0/0xd0 [ 773.826303][ C1] ret_from_fork+0x48/0x80 [ 773.830725][ C1] ? kthread_blkcg+0xd0/0xd0 [ 773.835320][ C1] ret_from_fork_asm+0x11/0x20 [ 773.840119][ C1] [ 773.843145][ C1] rcu: rcu_preempt kthread starved for 9938 jiffies! g53253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 773.854254][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 773.864229][ C1] rcu: RCU grace-period kthread stack dump: [ 773.870114][ C1] task:rcu_preempt state:R running task stack:27528 pid:17 ppid:2 flags:0x00004000 [ 773.880906][ C1] Call Trace: [ 773.884191][ C1] [ 773.887132][ C1] __schedule+0x14d2/0x44d0 [ 773.891669][ C1] ? asan.module_dtor+0x20/0x20 [ 773.896530][ C1] ? enqueue_timer+0x225/0x530 [ 773.901311][ C1] ? __mod_timer+0x984/0xdb0 [ 773.905918][ C1] schedule+0xbd/0x170 [ 773.910003][ C1] schedule_timeout+0x160/0x280 [ 773.914867][ C1] ? console_conditional_schedule+0x40/0x40 [ 773.920770][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 773.926675][ C1] ? update_process_times+0x1b0/0x1b0 [ 773.932066][ C1] ? prepare_to_swait_event+0x339/0x360 [ 773.937622][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 773.942496][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 773.948658][ C1] ? rcu_gp_init+0x1510/0x1510 [ 773.953434][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 773.958302][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 773.963517][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 773.968731][ C1] rcu_gp_kthread+0x99/0x380 [ 773.973336][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 773.978466][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 773.983416][ C1] ? __kthread_parkme+0x162/0x1c0 [ 773.988458][ C1] kthread+0x2fa/0x390 [ 773.992531][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 773.997658][ C1] ? kthread_blkcg+0xd0/0xd0 [ 774.002251][ C1] ret_from_fork+0x48/0x80 [ 774.006682][ C1] ? kthread_blkcg+0xd0/0xd0 [ 774.011282][ C1] ret_from_fork_asm+0x11/0x20 [ 774.016072][ C1] [ 774.019097][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 774.025442][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.100-syzkaller #0 [ 774.033175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.043237][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 774.049000][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 774.068620][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 774.074694][ C1] RAX: 5a018354701f3600 RBX: ffffffff81619a5b RCX: 5a018354701f3600 [ 774.082670][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 774.090646][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 774.098620][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7da8 [ 774.107208][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 774.115187][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 774.124117][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.130705][ C1] CR2: 00007fc2d4424589 CR3: 0000000030008000 CR4: 00000000003506e0 [ 774.138672][ C1] Call Trace: [ 774.141940][ C1] [ 774.144867][ C1] default_idle+0x13/0x20 [ 774.149193][ C1] default_idle_call+0x6c/0xa0 [ 774.153950][ C1] do_idle+0x1eb/0x510 [ 774.158015][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 774.163198][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 774.168388][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 774.174539][ C1] cpu_startup_entry+0x43/0x60 [ 774.179291][ C1] start_secondary+0xee/0xf0 [ 774.183872][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 774.189938][ C1] [ 774.248261][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 774.254811][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 775.678655][T11957] syz_tun (unregistering): left allmulticast mode [ 775.743327][ T1086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.823266][ T1086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.923690][ T1086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.030149][ T1086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.191090][ T1086] tipc: Left network mode [ 777.124596][ T1086] hsr_slave_0: left promiscuous mode [ 777.141719][ T1086] hsr_slave_1: left promiscuous mode [ 777.148196][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.155739][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.164188][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.172647][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.180814][ T1086] bridge_slave_1: left allmulticast mode [ 777.190872][ T1086] bridge_slave_1: left promiscuous mode [ 777.200608][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.213810][ T1086] bridge_slave_0: left allmulticast mode [ 777.220143][ T1086] bridge_slave_0: left promiscuous mode [ 777.226145][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.292994][ T1086] bridge0: left promiscuous mode [ 777.300338][ T1086] veth1_macvtap: left promiscuous mode [ 777.312890][ T1086] veth0_macvtap: left promiscuous mode [ 777.319564][ T1086] veth1_vlan: left promiscuous mode [ 777.325214][ T1086] veth0_vlan: left promiscuous mode [ 777.939135][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 777.979409][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 778.016934][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.059779][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.453669][ T1086] bond0 (unregistering): Released all slaves [ 778.801057][ T1086] IPVS: stop unused estimator thread 0... [ 778.914463][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.022759][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.099155][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.182666][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.396101][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.466074][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.540902][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.611319][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.789163][ T1086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.878777][ T1086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.971803][ T1086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.042291][ T1086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.243418][ T1086] tipc: Left network mode [ 780.262897][ T1086] tipc: Left network mode [ 780.280605][ T1086] tipc: Left network mode [ 781.991581][ T1086] hsr_slave_0: left promiscuous mode [ 781.999200][ T1086] hsr_slave_1: left promiscuous mode [ 782.005338][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.016304][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.024180][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.034575][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.044179][ T1086] bridge_slave_1: left allmulticast mode [ 782.052318][ T1086] bridge_slave_1: left promiscuous mode [ 782.059571][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.072394][ T1086] bridge_slave_0: left allmulticast mode [ 782.080038][ T1086] bridge_slave_0: left promiscuous mode [ 782.089415][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.111833][ T1086] hsr_slave_0: left promiscuous mode [ 782.118766][ T1086] hsr_slave_1: left promiscuous mode [ 782.124848][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.142140][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.150517][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.160855][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.168906][ T1086] bridge_slave_1: left allmulticast mode [ 782.174568][ T1086] bridge_slave_1: left promiscuous mode [ 782.181525][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.193712][ T1086] bridge_slave_0: left allmulticast mode [ 782.201926][ T1086] bridge_slave_0: left promiscuous mode [ 782.209110][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.248866][ T1086] hsr_slave_0: left promiscuous mode [ 782.254898][ T1086] hsr_slave_1: left promiscuous mode [ 782.268709][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.276328][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.284289][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.291799][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.299703][ T1086] bridge_slave_1: left allmulticast mode [ 782.305382][ T1086] bridge_slave_1: left promiscuous mode [ 782.311208][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.323953][ T1086] bridge_slave_0: left allmulticast mode [ 782.341100][ T1086] bridge_slave_0: left promiscuous mode [ 782.347053][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.398559][ T1086] bridge0: left promiscuous mode [ 782.403848][ T1086] veth1_macvtap: left promiscuous mode [ 782.409457][ T1086] veth0_macvtap: left promiscuous mode [ 782.417323][ T1086] veth1_vlan: left promiscuous mode [ 782.422604][ T1086] veth0_vlan: left promiscuous mode [ 782.429562][ T1086] bridge0: left promiscuous mode [ 782.434799][ T1086] veth1_macvtap: left promiscuous mode [ 782.440491][ T1086] veth0_macvtap: left promiscuous mode [ 782.446338][ T1086] veth1_vlan: left promiscuous mode [ 782.451650][ T1086] veth0_vlan: left promiscuous mode [ 782.459339][ T1086] bridge0: left promiscuous mode [ 782.464590][ T1086] veth1_macvtap: left promiscuous mode [ 782.470160][ T1086] veth0_macvtap: left promiscuous mode [ 782.476044][ T1086] veth1_vlan: left promiscuous mode [ 782.481326][ T1086] veth0_vlan: left promiscuous mode [ 782.738061][ T1086] bond1 (unregistering): (slave vlan2): Releasing active interface [ 782.849630][ T1086] bond1 (unregistering): Released all slaves [ 783.243136][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 783.282858][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 783.321855][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.356603][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface