last executing test programs: 2.384776866s ago: executing program 3 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.235670228s ago: executing program 3 (id=2222): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xfff, 0x4) 1.631266926s ago: executing program 1 (id=2230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.476656689s ago: executing program 1 (id=2233): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 1.297041651s ago: executing program 3 (id=2235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 1.259469412s ago: executing program 1 (id=2236): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) 1.200793753s ago: executing program 3 (id=2237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0x6, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00242f01000000000000003cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 1.095518744s ago: executing program 1 (id=2239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x5c}, 0x1, 0xba01}, 0x0) 1.069122134s ago: executing program 2 (id=2240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x571f68543cec8180) 914.942517ms ago: executing program 2 (id=2242): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000431661fc6eeb2de7fcf4ffffff0000000020ff0000a5000000367000008500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x1, 0x3, 0x10, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x3, 0x81}]}}}}}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r3, @ANYBLOB="0800020096a6"], 0x20}}, 0x40000c0) 914.482057ms ago: executing program 1 (id=2243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xfff, 0x4) 762.771709ms ago: executing program 1 (id=2244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 756.842829ms ago: executing program 0 (id=2245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 649.086721ms ago: executing program 0 (id=2246): unshare(0x22020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x3) 526.419073ms ago: executing program 2 (id=2247): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) 497.497183ms ago: executing program 3 (id=2248): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x7f, 0x6, @multicast}, 0x14) 487.669583ms ago: executing program 0 (id=2249): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) 297.038566ms ago: executing program 3 (id=2250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, 0x0, 0x0) 296.905406ms ago: executing program 2 (id=2251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xd0}}, 0x571f68543cec8180) 234.442206ms ago: executing program 0 (id=2252): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xfff, 0x4) 156.873558ms ago: executing program 0 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 140.651698ms ago: executing program 2 (id=2254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 22.86267ms ago: executing program 2 (id=2255): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000002100)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/124, 0x7c}, {&(0x7f0000001d00)=""/3, 0x3}, {&(0x7f0000001d40)=""/224, 0xe0}, {0x0}, {&(0x7f0000001f80)=""/153, 0x99}, {&(0x7f0000002040)=""/129, 0x81}], 0x7, 0x1, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010101, 0x0, "12ceaac82ab7d944e84b6fbd610900000000000000ede26c85ee73daab4158e8", 0x1ff, 0xb745, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000c40)=""/3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 0 (id=2256): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): T5865] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.027335][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.033922][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.994015][ T5812] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 564.061143][ T5811] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 564.181186][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 564.194260][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.205029][ T5812] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 564.227796][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0 [ 564.237228][ T5812] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 564.256510][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 564.263543][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.279949][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.294247][ T5812] usb 4-1: config 0 descriptor?? [ 564.308679][ T5811] usb 3-1: config 0 has no interfaces? [ 564.318968][ T5812] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 564.327820][ T5811] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 564.369042][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.437299][ T5811] usb 3-1: config 0 descriptor?? [ 564.550362][T10342] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1143'. [ 564.559770][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1143'. [ 565.585309][ T5764] dvb-usb: could not initialize remote control. [ 565.614908][ T5764] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 565.660147][ T5764] usb 1-1: USB disconnect, device number 28 [ 566.559304][T10357] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1147'. [ 566.568582][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 567.202717][ T5812] usb 4-1: USB disconnect, device number 12 [ 567.221998][ T5764] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 567.242915][ T786] usb 3-1: USB disconnect, device number 20 [ 567.617309][T10367] loop3: detected capacity change from 0 to 256 [ 567.651188][ T5764] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 567.702577][ T5865] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 567.841566][ T5764] usb 1-1: Using ep0 maxpacket: 32 [ 567.854985][ T5764] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 567.875192][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.897420][ T5764] usb 1-1: config 0 descriptor?? [ 567.935968][T10375] loop2: detected capacity change from 0 to 512 [ 567.947361][T10375] EXT4-fs: Ignoring removed orlov option [ 567.974001][T10375] EXT4-fs (loop2): Test dummy encryption mode enabled [ 567.981579][T10375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 567.992760][T10375] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 568.305105][ T5764] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 568.462486][ T5764] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 568.553638][ T5764] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 568.560899][ T5764] usb 1-1: media controller created [ 568.595505][T10379] loop3: detected capacity change from 0 to 512 [ 568.622037][T10379] EXT4-fs: Ignoring removed orlov option [ 568.657149][ T5764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.683191][T10379] EXT4-fs (loop3): Test dummy encryption mode enabled [ 568.719478][T10379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 568.740174][T10379] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 568.813743][T10379] loop3: detected capacity change from 0 to 128 [ 568.820831][ T5764] DVB: Unable to find symbol dib7000p_attach() [ 568.837817][ T5764] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 569.522781][T10381] loop2: detected capacity change from 0 to 131072 [ 569.547693][T10381] F2FS-fs (loop2): invalid crc value [ 569.699932][T10381] F2FS-fs (loop2): Found nat_bits in checkpoint [ 569.737966][T10381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 569.871025][ T5764] rc_core: IR keymap rc-dib0700-rc5 not found [ 570.027550][ T5764] Registered IR keymap rc-empty [ 570.032851][ T5764] dvb-usb: could not initialize remote control. [ 570.039215][ T5764] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 570.076200][ T5764] usb 1-1: USB disconnect, device number 29 [ 570.507603][ T5764] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 570.801126][ T5835] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 570.921160][ T5812] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 570.991008][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 571.005104][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.033319][ T5835] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 571.068093][ T5835] usb 2-1: config 0 interface 0 has no altsetting 0 [ 571.086590][ T5835] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 571.118557][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.131536][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 571.141313][ T5835] usb 2-1: config 0 descriptor?? [ 571.159811][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.170105][ T5835] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 571.207308][ T5812] usb 4-1: config 0 has no interfaces? [ 571.228860][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 571.257848][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.289583][ T5812] usb 4-1: config 0 descriptor?? [ 573.178739][T10423] loop0: detected capacity change from 0 to 256 [ 573.356149][ T5835] usb 2-1: USB disconnect, device number 19 [ 574.431118][ T5835] usb 4-1: USB disconnect, device number 13 [ 574.501145][T10428] usb usb8: usbfs: process 10428 (syz.0.1165) did not claim interface 0 before use [ 574.537988][T10430] loop3: detected capacity change from 0 to 512 [ 574.550403][T10430] EXT4-fs: Ignoring removed orlov option [ 574.557111][T10430] EXT4-fs (loop3): Test dummy encryption mode enabled [ 574.601065][T10430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 574.647149][T10430] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 574.687462][T10431] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 575.373121][T10438] loop2: detected capacity change from 0 to 128 [ 576.170713][T10457] loop3: detected capacity change from 0 to 256 [ 576.178740][ T5835] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 576.212858][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 576.391743][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 576.403568][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.449654][ T5835] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.421183][ T5835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.427998][ T5835] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 577.442442][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.468295][ T5835] usb 1-1: config 0 descriptor?? [ 577.499186][ T5835] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 577.569913][T10464] loop2: detected capacity change from 0 to 512 [ 577.592351][T10464] EXT4-fs: Ignoring removed orlov option [ 577.605307][T10464] EXT4-fs (loop2): Test dummy encryption mode enabled [ 577.620996][T10464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.630864][T10464] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 577.831111][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 578.171128][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 578.210473][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 578.229424][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.245346][ T5812] usb 4-1: config 0 descriptor?? [ 578.324489][T10472] usb usb8: usbfs: process 10472 (syz.2.1179) did not claim interface 0 before use [ 578.572652][T10474] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 578.602780][ T5812] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 578.944112][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.074498][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 579.173336][ T5812] usb 4-1: media controller created [ 579.460607][T10477] loop2: detected capacity change from 0 to 512 [ 579.467989][T10477] EXT4-fs: Ignoring removed orlov option [ 579.474388][T10477] EXT4-fs (loop2): Test dummy encryption mode enabled [ 579.486527][T10477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 579.498746][T10477] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 579.508179][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.654620][T10477] loop2: detected capacity change from 0 to 128 [ 579.689525][ T5812] DVB: Unable to find symbol dib7000p_attach() [ 579.707555][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 580.158486][ T5812] rc_core: IR keymap rc-dib0700-rc5 not found [ 580.219410][ T5812] Registered IR keymap rc-empty [ 580.227564][ T5812] dvb-usb: could not initialize remote control. [ 580.261012][ T5812] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 580.331357][ T5812] usb 4-1: USB disconnect, device number 14 [ 580.416931][T10491] usb usb8: usbfs: process 10491 (syz.2.1182) did not claim interface 0 before use [ 580.536179][ T5812] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 580.697373][T10494] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 581.616599][T10500] loop3: detected capacity change from 0 to 256 [ 581.691848][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 581.864330][T10503] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1185'. [ 581.873835][T10503] tc_dump_action: action bad kind [ 582.801190][T10505] loop3: detected capacity change from 0 to 512 [ 582.827308][T10505] EXT4-fs: Ignoring removed orlov option [ 582.859339][T10505] EXT4-fs (loop3): Test dummy encryption mode enabled [ 582.904240][T10505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 582.931069][T10505] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 583.004998][ T23] usb 1-1: USB disconnect, device number 30 [ 583.045197][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 583.075525][T10505] loop3: detected capacity change from 0 to 128 [ 583.091181][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.100473][ T5765] Buffer I/O error on dev loop3, logical block 0, async page read [ 583.361015][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 583.811039][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 583.820876][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.848362][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.864699][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 583.887175][ T27] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 583.902619][ T27] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 583.922186][ T27] usb 3-1: Product: syz [ 583.931198][ T27] usb 3-1: Manufacturer: syz [ 583.940452][ T27] usb 3-1: SerialNumber: syz [ 584.175409][ T5764] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 584.361374][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 584.380583][ T5764] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 584.403068][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.432190][ T5764] usb 4-1: config 0 descriptor?? [ 584.738588][ T5764] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 584.853147][ T5764] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 586.528572][ T27] usb 3-1: skipping empty audio interface (v1) [ 586.809228][ T27] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 586.830283][ T27] usb 3-1: USB disconnect, device number 21 [ 586.878910][T10537] usb usb8: usbfs: process 10537 (syz.1.1195) did not claim interface 0 before use [ 586.884513][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.909687][T10542] loop2: detected capacity change from 0 to 256 [ 586.961790][ T5865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.147278][T10541] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 587.481233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 587.809796][T10547] loop2: detected capacity change from 0 to 512 [ 587.817680][T10547] EXT4-fs: Ignoring removed orlov option [ 587.835161][T10549] loop1: detected capacity change from 0 to 512 [ 587.844118][T10547] EXT4-fs (loop2): Test dummy encryption mode enabled [ 587.846329][T10549] EXT4-fs: Ignoring removed orlov option [ 587.863201][T10549] EXT4-fs (loop1): Test dummy encryption mode enabled [ 587.870756][T10549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 587.881271][T10549] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 587.896854][T10547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 587.909737][T10547] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 588.011253][ T786] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 588.038189][T10547] loop2: detected capacity change from 0 to 128 [ 588.231149][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 589.815306][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.218181][ T5764] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 590.225848][ T786] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.239107][ T5764] usb 4-1: media controller created [ 590.260960][ T786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 590.267652][ T786] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 590.280002][ T5764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.288825][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.312225][ T786] usb 1-1: config 0 descriptor?? [ 590.348792][ T786] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 590.390544][ T5764] DVB: Unable to find symbol dib7000p_attach() [ 590.402675][ T5764] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 591.108635][ T27] usb 1-1: USB disconnect, device number 31 [ 591.461377][ T5764] rc_core: IR keymap rc-dib0700-rc5 not found [ 591.471080][ T5764] Registered IR keymap rc-empty [ 591.477080][ T5764] dvb-usb: could not initialize remote control. [ 591.488752][ T5764] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 591.510623][ T5764] usb 4-1: USB disconnect, device number 15 [ 591.616217][ T5764] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 591.625258][T10567] usb usb8: usbfs: process 10567 (syz.2.1202) did not claim interface 0 before use [ 591.868465][T10571] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 592.231322][ T23] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 592.541076][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 593.476970][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.501005][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.509957][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 593.534343][ T23] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 593.552183][ T23] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 593.570119][ T23] usb 1-1: Product: syz [ 593.574671][ T23] usb 1-1: Manufacturer: syz [ 593.579336][ T23] usb 1-1: SerialNumber: syz [ 593.627798][T10579] usb usb8: usbfs: process 10579 (syz.2.1206) did not claim interface 0 before use [ 593.929950][T10581] loop3: detected capacity change from 0 to 256 [ 594.339992][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 595.491443][T10587] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 595.860004][T10590] loop3: detected capacity change from 0 to 512 [ 595.935823][T10590] EXT4-fs: Ignoring removed orlov option [ 595.974883][T10590] EXT4-fs (loop3): Test dummy encryption mode enabled [ 596.005661][T10590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 596.057295][T10590] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 596.622714][T10590] loop3: detected capacity change from 0 to 128 [ 597.053501][ T23] usb 1-1: skipping empty audio interface (v1) [ 597.163713][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 597.255553][ T23] usb 1-1: USB disconnect, device number 32 [ 597.358251][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.375391][T10603] usb usb8: usbfs: process 10603 (syz.2.1212) did not claim interface 0 before use [ 597.638988][T10608] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 598.574038][T10614] loop1: detected capacity change from 0 to 128 [ 600.440682][T10630] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 602.821172][ T5812] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 602.849027][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 602.858169][T10646] nbd: must specify at least one socket [ 603.088226][T10647] loop2: detected capacity change from 0 to 512 [ 603.102487][T10647] EXT4-fs: Ignoring removed orlov option [ 603.134517][T10647] EXT4-fs (loop2): Test dummy encryption mode enabled [ 603.157077][T10647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 603.208782][T10651] usb usb8: usbfs: process 10651 (syz.1.1225) did not claim interface 0 before use [ 603.242930][T10647] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 603.789739][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 604.123329][ T5812] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 604.156714][ T5812] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 604.191834][T10647] loop2: detected capacity change from 0 to 128 [ 604.211078][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.232711][ T5812] usb 1-1: config 0 descriptor?? [ 604.240752][T10651] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 604.778254][T10666] syzkaller0: entered promiscuous mode [ 604.784115][T10666] syzkaller0: entered allmulticast mode [ 605.100576][T10672] usb usb8: usbfs: process 10672 (syz.3.1230) did not claim interface 0 before use [ 606.401334][ T27] usb 1-1: USB disconnect, device number 33 [ 606.421234][T10683] usb usb8: usbfs: process 10683 (syz.2.1232) did not claim interface 0 before use [ 606.477650][T10686] loop0: detected capacity change from 0 to 128 [ 606.707895][T10690] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 607.616556][T10696] loop2: detected capacity change from 0 to 512 [ 607.624835][T10696] EXT4-fs: Ignoring removed orlov option [ 607.631489][T10696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 607.638477][T10696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 607.649833][T10696] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 607.722153][ T5865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 607.735749][T10696] loop2: detected capacity change from 0 to 128 [ 607.749912][ T5865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.787470][ T5865] Buffer I/O error on dev loop2, logical block 0, async page read [ 607.800792][T10699] loop0: detected capacity change from 0 to 128 [ 609.064008][T10708] loop3: detected capacity change from 0 to 128 [ 609.641221][T10718] syzkaller0: entered promiscuous mode [ 609.646917][T10718] syzkaller0: entered allmulticast mode [ 609.921010][ T5812] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 610.112821][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 610.132079][ T5812] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.151854][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 610.181244][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.204184][ T5812] usb 4-1: config 0 descriptor?? [ 610.494914][T10729] usb usb8: usbfs: process 10729 (syz.2.1245) did not claim interface 0 before use [ 610.759588][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 611.789258][T10743] loop2: detected capacity change from 0 to 2048 [ 611.809284][T10743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.001249][ T5812] usb 4-1: USB disconnect, device number 16 [ 613.138023][T10757] usb usb8: usbfs: process 10757 (syz.2.1250) did not claim interface 0 before use [ 615.385401][T10776] usb usb8: usbfs: process 10776 (syz.3.1256) did not claim interface 0 before use [ 615.516329][T10781] loop0: detected capacity change from 0 to 2048 [ 615.677406][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 615.914924][T10781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.215190][T10793] syzkaller0: entered promiscuous mode [ 618.222940][T10793] syzkaller0: entered allmulticast mode [ 618.378357][T10795] syzkaller0: entered promiscuous mode [ 618.384087][T10795] syzkaller0: entered allmulticast mode [ 618.481082][ T786] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 618.661064][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 618.686737][ T786] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.698193][ T786] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 618.710825][ T27] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 618.714021][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.736612][ T786] usb 2-1: config 0 descriptor?? [ 618.892982][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 618.912631][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.923846][ T27] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 618.937578][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.945417][ T27] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 618.954629][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.966834][ T27] usb 1-1: config 0 descriptor?? [ 618.994326][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 619.121107][ T786] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 619.304390][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 619.317790][ T786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.329204][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.338522][ T786] usb 4-1: config 1 interface 0 has no altsetting 0 [ 619.349537][ T786] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 619.359373][ T786] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 619.367852][ T786] usb 4-1: Product: syz [ 619.372544][ T786] usb 4-1: Manufacturer: syz [ 619.377179][ T786] usb 4-1: SerialNumber: syz [ 619.729866][ T27] usb 1-1: USB disconnect, device number 34 [ 621.237055][ T5812] usb 2-1: USB disconnect, device number 20 [ 621.727500][T10826] syzkaller0: entered promiscuous mode [ 621.733493][T10826] syzkaller0: entered allmulticast mode [ 621.762058][T10828] loop0: detected capacity change from 0 to 128 [ 622.152655][ T786] usb 4-1: skipping empty audio interface (v1) [ 622.235412][ T786] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 622.252114][ T786] usb 4-1: USB disconnect, device number 17 [ 622.293870][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.608574][T10842] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1271'. [ 622.617949][T10842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1271'. [ 623.431015][ T5812] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 623.591134][ T5812] usb 2-1: device descriptor read/64, error -71 [ 623.641037][ T5811] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 623.651062][ T786] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 623.822018][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 623.838649][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 623.846150][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.862637][ T5812] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 623.874811][ T786] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 623.884290][ T5811] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 623.904398][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.920404][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 623.933106][ T786] usb 1-1: config 0 descriptor?? [ 623.948058][ T5811] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 623.957766][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.984508][ T5811] usb 3-1: config 0 descriptor?? [ 624.015496][ T5811] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 624.051396][ T5812] usb 2-1: device descriptor read/64, error -71 [ 624.171478][ T5812] usb usb2-port1: attempt power cycle [ 624.181136][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 624.196376][ T786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 624.210383][ T786] dib0700: firmware download failed at 7 with -22 [ 624.466290][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.472977][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.601036][ T5812] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 624.641924][ T5812] usb 2-1: device descriptor read/8, error -71 [ 624.931031][ T5812] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 624.962008][ T5812] usb 2-1: device descriptor read/8, error -71 [ 625.085970][ T5812] usb usb2-port1: unable to enumerate USB device [ 625.117320][ T5812] usb 3-1: USB disconnect, device number 22 [ 625.264973][T10860] usb usb8: usbfs: process 10860 (syz.2.1278) did not claim interface 0 before use [ 625.578346][T10863] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 626.483781][ T27] usb 1-1: USB disconnect, device number 35 [ 627.313112][T10877] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1282'. [ 627.323269][T10877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1282'. [ 627.472779][T10869] loop3: detected capacity change from 0 to 131072 [ 627.486420][T10869] F2FS-fs (loop3): invalid crc value [ 627.512457][T10869] F2FS-fs (loop3): Found nat_bits in checkpoint [ 627.590320][T10869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 629.091020][ T786] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 629.110987][ T27] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 629.271202][ T5812] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 629.287029][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 629.302813][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.319400][ T786] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 629.331033][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 629.340326][ T786] usb 3-1: config 0 interface 0 has no altsetting 0 [ 629.349989][ T786] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 629.356274][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.376044][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.390515][ T786] usb 3-1: config 0 descriptor?? [ 629.391308][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.409228][ T786] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 629.441052][ T5812] usb 1-1: device descriptor read/64, error -71 [ 629.442217][ T27] usb 4-1: config 1 interface 0 has no altsetting 0 [ 629.475818][ T27] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 629.489602][ T27] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 629.508461][ T27] usb 4-1: Product: syz [ 629.516125][ T27] usb 4-1: Manufacturer: syz [ 629.525621][ T27] usb 4-1: SerialNumber: syz [ 629.731071][ T5812] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 629.891079][ T5812] usb 1-1: device descriptor read/64, error -71 [ 630.021477][ T5812] usb usb1-port1: attempt power cycle [ 630.117903][ T23] usb 3-1: USB disconnect, device number 23 [ 630.471278][ T5812] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 630.583242][ T5812] usb 1-1: device descriptor read/8, error -71 [ 630.912043][ T5812] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 631.005897][ T5812] usb 1-1: device descriptor read/8, error -71 [ 631.222691][ T5812] usb usb1-port1: unable to enumerate USB device [ 631.411347][ T786] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 631.459688][T10923] usb usb8: usbfs: process 10923 (syz.2.1291) did not claim interface 0 before use [ 631.701598][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 632.200246][ T27] usb 4-1: skipping empty audio interface (v1) [ 632.552382][ T786] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 632.567293][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.585324][ T786] usb 2-1: config 0 descriptor?? [ 632.609837][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 632.717199][T10930] syzkaller0: entered promiscuous mode [ 632.723007][T10930] syzkaller0: entered allmulticast mode [ 632.850807][ T27] usb 4-1: USB disconnect, device number 18 [ 632.903588][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.920030][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 632.942905][ T786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 632.968407][ T786] dib0700: firmware download failed at 7 with -22 [ 632.984326][T10932] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1292'. [ 632.993634][T10932] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1292'. [ 633.973303][ T786] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 634.211072][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 634.308666][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.456671][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.601025][ T786] usb 1-1: config 1 interface 0 has no altsetting 0 [ 634.634585][ T786] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 634.676724][ T5812] usb 2-1: USB disconnect, device number 25 [ 634.691355][ T786] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 634.781293][ T786] usb 1-1: Product: syz [ 634.785663][ T786] usb 1-1: Manufacturer: syz [ 634.821219][ T786] usb 1-1: SerialNumber: syz [ 635.012654][T10950] loop3: detected capacity change from 0 to 256 [ 635.296056][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 635.541719][ T5835] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 636.161161][ T5835] usb 3-1: device descriptor read/64, error -71 [ 636.682186][ T5835] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 636.806226][T10966] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1303'. [ 636.815587][T10966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1303'. [ 637.417794][ T5835] usb 3-1: device descriptor read/64, error -71 [ 637.498490][ T786] usb 1-1: skipping empty audio interface (v1) [ 637.564889][ T5835] usb usb3-port1: attempt power cycle [ 637.595873][ T786] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 637.637726][ T786] usb 1-1: USB disconnect, device number 40 [ 637.657767][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.161277][ T5835] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 638.574727][ T5835] usb 3-1: device descriptor read/8, error -71 [ 638.862192][ T5812] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 640.431217][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 640.456749][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 640.484957][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.513898][ T5812] usb 4-1: config 0 descriptor?? [ 640.787151][T10998] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1311'. [ 641.085518][ T5812] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 641.193809][ T5812] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 641.240249][ T5812] dib0700: firmware download failed at 7 with -22 [ 641.834502][T11008] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1313'. [ 641.843706][T11008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1313'. [ 642.408710][T11007] syzkaller0: entered promiscuous mode [ 642.425829][T11007] syzkaller0: entered allmulticast mode [ 642.518896][ T5812] usb 4-1: USB disconnect, device number 19 [ 642.611037][ T27] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 642.770992][ T27] usb 1-1: device descriptor read/64, error -71 [ 643.071168][ T27] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 643.327317][ T27] usb 1-1: device descriptor read/64, error -71 [ 643.492035][ T27] usb usb1-port1: attempt power cycle [ 644.016919][ T27] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 644.451844][ T27] usb 1-1: device descriptor read/8, error -71 [ 644.741169][ T27] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 644.953754][T11041] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1321'. [ 645.749397][ T27] usb 1-1: device descriptor read/8, error -71 [ 645.923717][ T27] usb usb1-port1: unable to enumerate USB device [ 646.191096][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 646.208335][T11056] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1325'. [ 646.217606][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1325'. [ 646.441243][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 646.522176][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.619236][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.697367][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 646.792474][ T23] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 646.824812][ T23] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 646.863930][ T23] usb 4-1: Product: syz [ 646.868163][ T23] usb 4-1: Manufacturer: syz [ 646.934991][ T23] usb 4-1: SerialNumber: syz [ 649.158034][ T23] usb 4-1: skipping empty audio interface (v1) [ 649.282919][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 649.300442][ T23] usb 4-1: USB disconnect, device number 20 [ 649.356377][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.585705][T11089] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1333'. [ 649.691133][ T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 650.436783][ T23] usb 4-1: device descriptor read/64, error -71 [ 650.721117][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 650.734390][T11101] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1337'. [ 650.743567][T11101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1337'. [ 650.901027][ T23] usb 4-1: device descriptor read/64, error -71 [ 651.029882][ T23] usb usb4-port1: attempt power cycle [ 651.058692][T11106] syzkaller0: entered promiscuous mode [ 651.064306][T11106] syzkaller0: entered allmulticast mode [ 652.111047][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 652.161411][ T23] usb 4-1: device descriptor read/8, error -71 [ 652.181069][ T27] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 652.391039][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 652.398478][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.413595][ T27] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 652.435836][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 652.461301][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 652.468247][ T27] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 652.483232][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.558794][ T27] usb 1-1: config 0 descriptor?? [ 652.604799][ T23] usb 4-1: device descriptor read/8, error -71 [ 652.621226][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 652.749484][ T23] usb usb4-port1: unable to enumerate USB device [ 654.011241][ T5812] usb 1-1: USB disconnect, device number 45 [ 654.120504][T11129] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1345'. [ 657.820251][ T5812] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 659.741325][ T5812] usb 4-1: device descriptor read/64, error -71 [ 659.906794][T11172] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1356'. [ 659.957051][ T786] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 660.088619][ T5812] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 660.203387][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 660.304909][ T5812] usb 4-1: device descriptor read/64, error -71 [ 660.394352][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.496899][ T786] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.548996][ T5812] usb usb4-port1: attempt power cycle [ 660.641022][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 660.728209][ T786] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 660.751061][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.942145][ T786] usb 2-1: config 0 descriptor?? [ 660.968779][ T786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 665.284182][T11204] loop2: detected capacity change from 0 to 2048 [ 665.397173][T11204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.731426][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 665.881238][T11212] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1368'. [ 666.044582][ T23] usb 4-1: device descriptor read/64, error -71 [ 666.502719][ T23] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 666.811118][ T23] usb 4-1: device descriptor read/64, error -71 [ 667.073648][ T23] usb usb4-port1: attempt power cycle [ 668.156533][ T27] usb 2-1: USB disconnect, device number 26 [ 668.451272][ T23] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 668.691160][ T23] usb 4-1: device not accepting address 30, error -71 [ 670.564269][T11247] loop0: detected capacity change from 0 to 256 [ 670.603862][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 670.701394][ T5812] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 670.891061][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 670.899033][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.909597][ T5812] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 670.923522][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0 [ 670.930340][ T5812] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 670.940434][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.951866][ T5812] usb 4-1: config 0 descriptor?? [ 670.962388][ T5812] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 670.991037][ T786] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 671.151077][ T786] usb 2-1: device descriptor read/64, error -71 [ 671.441134][ T786] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 671.503731][T11257] loop2: detected capacity change from 0 to 2048 [ 671.524951][T11257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.739251][ T27] usb 4-1: USB disconnect, device number 32 [ 671.769084][ T786] usb 2-1: device descriptor read/64, error -71 [ 671.892298][ T786] usb usb2-port1: attempt power cycle [ 673.151101][ T786] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 673.219204][ T786] usb 2-1: device descriptor read/8, error -71 [ 673.578262][ T786] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 674.530999][ T786] usb 2-1: device not accepting address 30, error -71 [ 674.559356][ T786] usb usb2-port1: unable to enumerate USB device [ 676.011185][ T23] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 676.235174][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 676.268577][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.346709][ T23] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 676.400933][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 676.408500][ T23] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 676.421713][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.505986][ T23] usb 3-1: config 0 descriptor?? [ 676.698621][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 677.082624][ T23] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 677.250994][ T23] usb 4-1: device descriptor read/64, error -71 [ 677.377342][ T27] usb 3-1: USB disconnect, device number 28 [ 677.475594][T11317] loop1: detected capacity change from 0 to 2048 [ 677.493380][T11317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.739421][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 678.561044][ T23] usb 4-1: device descriptor read/64, error -71 [ 678.641474][T11325] syzkaller0: entered promiscuous mode [ 678.647019][T11325] syzkaller0: entered allmulticast mode [ 678.707086][ T23] usb usb4-port1: attempt power cycle [ 680.792473][ T23] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 681.173446][ T23] usb 4-1: device descriptor read/8, error -71 [ 681.486062][T11347] program syz.3.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.159397][T11363] syzkaller0: entered promiscuous mode [ 682.174072][T11363] syzkaller0: entered allmulticast mode [ 686.502357][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.508726][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.880278][T11395] loop2: detected capacity change from 0 to 2048 [ 686.948556][T11395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 688.204328][T11403] loop0: detected capacity change from 0 to 131072 [ 688.256699][T11403] F2FS-fs (loop0): invalid crc value [ 688.446949][T11403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 689.464620][T11403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 689.932081][T11421] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1428'. [ 693.798346][T11449] program syz.3.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.838260][T11447] loop2: detected capacity change from 0 to 2048 [ 693.926436][T11447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 695.090577][T11460] loop1: detected capacity change from 0 to 131072 [ 695.268422][T11460] F2FS-fs (loop1): invalid crc value [ 695.314639][T11460] F2FS-fs (loop1): Found nat_bits in checkpoint [ 695.385224][T11460] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 699.180983][ T5812] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 699.231442][T11501] program syz.1.1447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.381134][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 699.381174][T11499] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1446'. [ 699.395497][T11499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1446'. [ 699.405240][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.405282][ T5812] usb 4-1: config 0 has no interfaces? [ 699.405314][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 699.405339][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.415029][ T5812] usb 4-1: config 0 descriptor?? [ 700.532733][T11508] loop2: detected capacity change from 0 to 131072 [ 700.550105][T11508] F2FS-fs (loop2): invalid crc value [ 700.567060][T11508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 700.618603][T11508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 702.101967][ T5835] usb 4-1: USB disconnect, device number 37 [ 702.141097][ T23] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 702.381194][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 702.392430][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.421140][ T23] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 702.497890][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 702.504876][ T23] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 702.517064][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.556638][ T23] usb 3-1: config 0 descriptor?? [ 702.612229][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 703.414672][T11545] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1457'. [ 703.424280][T11545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1457'. [ 703.591327][ T5812] usb 3-1: USB disconnect, device number 29 [ 705.533859][ T5812] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 705.761120][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 705.779583][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.819890][T11576] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1466'. [ 705.829060][T11576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1466'. [ 705.838140][ T5812] usb 2-1: config 0 has no interfaces? [ 705.853113][ T5812] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 705.887760][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.971753][ T5812] usb 2-1: config 0 descriptor?? [ 708.279288][ T23] usb 2-1: USB disconnect, device number 31 [ 708.881618][ T23] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 709.101977][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 709.114145][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.134161][ T23] usb 2-1: config 0 has no interfaces? [ 709.144647][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 709.162570][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.183445][ T23] usb 2-1: config 0 descriptor?? [ 711.490891][ T5835] usb 2-1: USB disconnect, device number 32 [ 715.441042][ T5835] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 715.457361][T11694] loop3: detected capacity change from 0 to 512 [ 715.472364][T11694] EXT4-fs: Ignoring removed orlov option [ 715.498454][T11694] EXT4-fs (loop3): Test dummy encryption mode enabled [ 715.506144][T11694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 715.554389][T11694] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 715.651023][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 715.663815][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.685214][ T5835] usb 3-1: config 0 has no interfaces? [ 715.696405][ T5835] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 715.716069][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.745116][ T5835] usb 3-1: config 0 descriptor?? [ 717.840316][T11717] program syz.3.1506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.898500][ T5835] usb 3-1: USB disconnect, device number 30 [ 718.086706][T11725] loop3: detected capacity change from 0 to 512 [ 718.098721][T11725] EXT4-fs: Ignoring removed orlov option [ 718.109958][T11725] EXT4-fs (loop3): Test dummy encryption mode enabled [ 718.181124][T11725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 718.247894][T11725] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 719.100788][T11725] loop3: detected capacity change from 0 to 128 [ 721.748889][T11762] loop0: detected capacity change from 0 to 2048 [ 721.792608][T11762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.227744][T11803] loop2: detected capacity change from 0 to 512 [ 725.267193][T11803] EXT4-fs: Ignoring removed orlov option [ 725.289239][T11803] EXT4-fs (loop2): Test dummy encryption mode enabled [ 725.297397][T11803] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 725.311863][T11803] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 725.363415][T11803] loop2: detected capacity change from 0 to 128 [ 727.426016][T11831] syzkaller0: entered promiscuous mode [ 727.484152][T11831] syzkaller0: entered allmulticast mode [ 728.718852][T11848] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1544'. [ 728.734315][T11848] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1544'. [ 732.491269][T11882] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1552'. [ 734.555147][T11917] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1563'. [ 735.065222][T11920] loop1: detected capacity change from 0 to 2048 [ 735.371323][T11920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 739.508009][T11958] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1574'. [ 740.795289][T11971] loop1: detected capacity change from 0 to 512 [ 740.861744][T11971] EXT4-fs: Ignoring removed orlov option [ 741.072668][ T5835] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 741.281348][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 741.297647][ T5835] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 741.778091][T11971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 741.789726][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.817702][T11971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 741.830926][T11971] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 741.843761][ T5835] usb 3-1: config 0 descriptor?? [ 741.943645][T11971] loop1: detected capacity change from 0 to 128 [ 742.056989][ T5835] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 742.087034][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 742.138138][ T5835] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 742.170954][ T5835] usb 3-1: media controller created [ 742.213535][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.421100][ T5835] DVB: Unable to find symbol dib7000p_attach() [ 742.431963][T11982] loop3: detected capacity change from 0 to 512 [ 742.443005][ T5835] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 742.458675][T11982] EXT4-fs: Ignoring removed orlov option [ 742.491436][T11982] EXT4-fs (loop3): Test dummy encryption mode enabled [ 742.508547][T11982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 742.543570][T11982] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 742.575255][T11982] loop3: detected capacity change from 0 to 128 [ 742.601126][ T5835] rc_core: IR keymap rc-dib0700-rc5 not found [ 742.681401][ T5835] Registered IR keymap rc-empty [ 742.688374][ T5835] dvb-usb: could not initialize remote control. [ 742.695376][ T5835] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 742.809190][ T5835] usb 3-1: USB disconnect, device number 31 [ 743.166155][T11999] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1586'. [ 744.079649][ T5835] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 744.456098][T12016] loop0: detected capacity change from 0 to 2048 [ 744.486820][T12016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.690531][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 745.821150][ T23] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 745.853519][T12035] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1598'. [ 746.742509][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 746.757426][ T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 747.401756][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.408148][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.756339][T12037] loop1: detected capacity change from 0 to 131072 [ 747.764506][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.777691][ T23] usb 4-1: config 0 descriptor?? [ 747.813519][T12037] F2FS-fs (loop1): invalid crc value [ 747.830475][T12037] F2FS-fs (loop1): Found nat_bits in checkpoint [ 747.860533][T12049] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 747.900981][T12037] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 747.993285][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 748.004452][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.015670][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 748.022962][ T23] usb 4-1: media controller created [ 748.070001][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.088749][T12049] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 748.138361][T12049] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 748.152856][T12049] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 748.167421][T12049] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 748.193499][T12049] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 748.216665][T12049] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 748.238683][T12049] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 748.262471][T12049] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 748.273491][T12049] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 748.375826][ T23] DVB: Unable to find symbol dib7000p_attach() [ 748.401152][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 748.611057][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 748.659066][ T23] Registered IR keymap rc-empty [ 748.667093][ T23] dvb-usb: could not initialize remote control. [ 748.673736][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 748.689900][ T23] usb 4-1: USB disconnect, device number 38 [ 748.725659][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 749.115454][T12071] syzkaller0: entered promiscuous mode [ 749.155886][T12071] syzkaller0: entered allmulticast mode [ 749.519158][T12086] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1608'. [ 750.192182][T12079] mmap: syz.2.1609 (12079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 750.331244][T12079] hub 9-0:1.0: USB hub found [ 750.393911][T12079] hub 9-0:1.0: 1 port detected [ 751.451852][T12095] loop2: detected capacity change from 0 to 131072 [ 751.494940][T12095] F2FS-fs (loop2): invalid crc value [ 751.574313][T12095] F2FS-fs (loop2): Found nat_bits in checkpoint [ 751.624552][T12095] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 752.591562][T12116] loop3: detected capacity change from 0 to 512 [ 752.608957][T12116] EXT4-fs: Ignoring removed orlov option [ 752.629448][T12116] EXT4-fs (loop3): Test dummy encryption mode enabled [ 752.639991][T12116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 752.650550][T12116] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 753.741140][ T5816] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 753.960993][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 754.071808][ T5816] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 754.081184][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.098651][ T5816] usb 3-1: config 0 descriptor?? [ 754.110175][T12127] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1618'. [ 755.162898][ T5816] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 755.182610][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 755.194972][ T5816] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 755.202231][ T5816] usb 3-1: media controller created [ 755.249299][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.438846][ T5816] DVB: Unable to find symbol dib7000p_attach() [ 755.445340][ T5816] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 755.550968][ T5816] rc_core: IR keymap rc-dib0700-rc5 not found [ 755.557117][ T5816] Registered IR keymap rc-empty [ 755.569354][ T5816] dvb-usb: could not initialize remote control. [ 755.576190][ T5816] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 755.809189][T12136] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1620'. [ 755.818531][T12136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1620'. [ 756.973503][T12102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 757.001052][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 757.187429][T12142] create_pit_timer: 184 callbacks suppressed [ 757.187449][T12142] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 757.248648][T12142] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 757.257205][T12142] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 757.271095][T12142] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 757.292122][T12142] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 757.311108][T12142] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 757.320067][T12142] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 757.350117][T12142] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 757.374611][T12142] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 757.384165][T12142] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 757.826773][T12150] usb usb8: usbfs: process 12150 (syz.1.1625) did not claim interface 0 before use [ 758.050246][T12152] netlink: 'syz.1.1625': attribute type 1 has an invalid length. [ 758.074283][ T786] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 758.401120][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 758.462184][ T786] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 758.519729][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.597330][ T786] usb 4-1: config 0 descriptor?? [ 759.026809][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 759.038613][ T786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 759.061841][ T786] dib0700: firmware download failed at 7 with -22 [ 760.393676][T12165] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1627'. [ 761.035720][ T5812] usb 3-1: USB disconnect, device number 32 [ 761.112122][ T23] usb 4-1: USB disconnect, device number 39 [ 761.173621][T12167] loop2: detected capacity change from 0 to 512 [ 761.201986][ T5812] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 761.212975][T12167] EXT4-fs: Ignoring removed orlov option [ 761.249939][T12167] EXT4-fs (loop2): Test dummy encryption mode enabled [ 761.282277][T12167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 761.349942][T12167] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 761.549881][T12173] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1629'. [ 761.559325][T12173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1629'. [ 762.345520][T12171] syzkaller0: entered promiscuous mode [ 762.367866][T12171] syzkaller0: entered allmulticast mode [ 762.403893][T12177] hub 9-0:1.0: USB hub found [ 762.423463][T12177] hub 9-0:1.0: 1 port detected [ 762.958702][T12184] create_pit_timer: 27 callbacks suppressed [ 762.958718][T12184] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 763.028334][T12184] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 763.053410][T12184] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 763.072776][T12184] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 763.098887][T12184] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 763.115537][T12184] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 763.133804][T12184] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 763.150697][T12184] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 763.173886][T12184] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 763.193064][T12184] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 765.481011][ T5836] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 765.661721][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 765.678112][ T5836] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 765.691984][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.713394][ T5836] usb 3-1: config 0 descriptor?? [ 765.797961][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 765.807294][ T5816] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 765.817573][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.826174][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.838086][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.846071][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.854109][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.863227][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.871104][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.878712][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.892267][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.899805][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.907558][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.915269][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.929183][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 765.929918][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.944654][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 765.954386][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.960214][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 765.979880][ T5836] usb 3-1: media controller created [ 765.987684][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 765.996266][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 766.004036][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 766.017416][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 766.025300][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 766.033297][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 766.041424][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 766.077244][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 766.088175][ T5816] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 766.240022][T12205] fido_id[12205]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 766.263563][ T5836] DVB: Unable to find symbol dib7000p_attach() [ 766.269800][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 766.560954][ T5836] rc_core: IR keymap rc-dib0700-rc5 not found [ 766.574794][T12213] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1638'. [ 767.279297][ T5836] Registered IR keymap rc-empty [ 767.284675][ T5836] dvb-usb: could not initialize remote control. [ 767.291196][ T5836] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 767.303802][ T5836] usb 3-1: USB disconnect, device number 33 [ 767.369302][ T5836] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 768.166960][T12237] hub 9-0:1.0: USB hub found [ 768.176237][T12237] hub 9-0:1.0: 1 port detected [ 768.290446][T12239] create_pit_timer: 40 callbacks suppressed [ 768.290457][T12239] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 768.356104][T12239] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 768.383675][T12239] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 768.412240][T12239] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 768.446874][T12239] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 768.455457][T12239] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 768.464393][T12239] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 768.497553][T12239] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 768.521259][T12239] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 768.529854][T12239] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 770.047598][T12274] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1653'. [ 771.031693][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 771.261168][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 771.273484][ T23] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 771.293087][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.319471][ T23] usb 3-1: config 0 descriptor?? [ 771.555664][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 771.575002][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 771.604882][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 771.632689][ T23] usb 3-1: media controller created [ 771.711276][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.924897][ T23] DVB: Unable to find symbol dib7000p_attach() [ 771.936404][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 772.082879][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 772.101223][ T23] Registered IR keymap rc-empty [ 772.134614][ T23] dvb-usb: could not initialize remote control. [ 772.151687][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 772.173653][ T23] usb 3-1: USB disconnect, device number 34 [ 772.254964][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 772.541798][T12309] loop0: detected capacity change from 0 to 4096 [ 772.548950][T12309] ntfs3: Unknown parameter 'Ê' [ 772.633785][T11419] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.952115][T12319] loop1: detected capacity change from 0 to 512 [ 772.959513][T12319] EXT4-fs: Ignoring removed orlov option [ 772.967525][T12319] EXT4-fs (loop1): Test dummy encryption mode enabled [ 772.975044][T12319] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 772.989273][T12319] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 773.072610][T11419] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 773.096851][T12319] loop1: detected capacity change from 0 to 128 [ 773.103701][T11419] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 773.122923][T11419] Buffer I/O error on dev loop1, logical block 0, async page read [ 773.430965][ T5836] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 773.669206][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 773.686330][ T5836] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 773.698445][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.714238][ T5836] usb 3-1: config 0 descriptor?? [ 773.946365][T12339] create_pit_timer: 160 callbacks suppressed [ 773.946376][T12339] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 773.961162][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 773.973039][ T5836] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 773.994056][ T5836] dib0700: firmware download failed at 7 with -22 [ 774.004907][T12339] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 774.032989][ T5836] usb 3-1: USB disconnect, device number 35 [ 774.044261][T12339] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 774.059169][T12339] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 774.068941][T12339] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 774.080131][T12339] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 774.090808][T12339] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 774.142891][T12339] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 774.165819][T12339] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 774.177892][T12339] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 774.460973][ T5812] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 774.651275][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 774.659592][ T5812] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 774.670601][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.696552][ T5812] usb 2-1: config 0 descriptor?? [ 774.938160][ T5812] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 774.965469][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.007608][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 775.015089][ T5812] usb 2-1: media controller created [ 775.196424][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 775.286673][ T5812] DVB: Unable to find symbol dib7000p_attach() [ 775.296103][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 775.325899][T12360] loop2: detected capacity change from 0 to 4096 [ 775.333008][T12360] ntfs3: Unknown parameter 'Ê' [ 775.386835][T11419] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 775.482035][ T5812] rc_core: IR keymap rc-dib0700-rc5 not found [ 775.498460][ T5812] Registered IR keymap rc-empty [ 775.507502][ T5812] dvb-usb: could not initialize remote control. [ 775.517780][ T5812] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 775.915762][T12374] loop3: detected capacity change from 0 to 512 [ 775.923239][T12374] EXT4-fs: Ignoring removed orlov option [ 775.964635][T12374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 775.981388][T12374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 776.030746][T12374] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 777.212397][T12390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.235909][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 777.251194][ T5836] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 777.450953][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 777.463944][ T5836] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 777.489846][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.511986][ T5836] usb 1-1: config 0 descriptor?? [ 777.735679][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 777.756477][ T5836] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 777.775101][ T5836] dib0700: firmware download failed at 7 with -22 [ 777.807081][ T5836] usb 1-1: USB disconnect, device number 46 [ 780.154368][T12427] hub 9-0:1.0: USB hub found [ 780.207251][T12427] hub 9-0:1.0: 1 port detected [ 780.757336][ T5816] usb 2-1: USB disconnect, device number 33 [ 781.805580][ T5816] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 781.881396][T12434] loop0: detected capacity change from 0 to 131072 [ 781.903241][T12434] F2FS-fs (loop0): invalid crc value [ 781.924200][T12434] F2FS-fs (loop0): Found nat_bits in checkpoint [ 781.957599][ T5835] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 781.979609][T12434] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 782.181032][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 782.321723][ T5835] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 782.340924][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.352792][ T5835] usb 3-1: config 0 descriptor?? [ 782.582398][ T5835] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 782.615347][ T5835] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 782.654119][ T5835] dib0700: firmware download failed at 7 with -22 [ 782.725637][ T5835] usb 3-1: USB disconnect, device number 36 [ 782.861454][T12457] loop0: detected capacity change from 0 to 128 [ 786.241829][ T5835] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 786.430960][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 786.441938][ T5835] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 786.460458][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.474305][ T5835] usb 1-1: config 0 descriptor?? [ 786.701053][ T5835] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 786.724229][ T5835] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 786.737309][ T5835] dib0700: firmware download failed at 7 with -22 [ 786.760298][ T5835] usb 1-1: USB disconnect, device number 47 [ 786.922760][T12486] loop1: detected capacity change from 0 to 131072 [ 786.936204][T12486] F2FS-fs (loop1): invalid crc value [ 786.954177][T12486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 787.001317][ T5836] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 787.009060][T12486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 787.216620][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 787.225078][ T5836] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 787.234844][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.246157][ T5836] usb 3-1: config 0 descriptor?? [ 787.387276][T12498] loop3: detected capacity change from 0 to 512 [ 787.419386][T12498] EXT4-fs: Ignoring removed orlov option [ 787.470434][T12498] EXT4-fs (loop3): Test dummy encryption mode enabled [ 787.487341][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 787.499417][T12498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 787.523048][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 787.543180][T12498] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 787.552190][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 787.552242][ T5836] usb 3-1: media controller created [ 787.633809][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 787.698003][T12498] loop3: detected capacity change from 0 to 128 [ 787.894626][ T5836] DVB: Unable to find symbol dib7000p_attach() [ 787.944376][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 788.102106][ T5836] rc_core: IR keymap rc-dib0700-rc5 not found [ 788.108346][ T5836] Registered IR keymap rc-empty [ 788.167937][ T5836] dvb-usb: could not initialize remote control. [ 788.325815][ T5836] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 788.717446][ T5836] usb 3-1: USB disconnect, device number 37 [ 789.155412][ T5836] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 790.265167][T12527] create_pit_timer: 81 callbacks suppressed [ 790.265185][T12527] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 790.331343][T12523] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 790.381479][T12523] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 790.440432][T12523] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 790.462161][T12532] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1716'. [ 790.471541][T12532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1716'. [ 790.491883][T12523] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 790.499943][T12523] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 790.510336][T12523] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 790.631710][T12523] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 790.661479][T12523] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 790.685773][T12523] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 791.400972][ T5816] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 791.591045][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 791.614223][ T5816] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 791.643759][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.712669][ T5816] usb 1-1: config 0 descriptor?? [ 792.528436][T12541] loop3: detected capacity change from 0 to 131072 [ 792.583478][T12541] F2FS-fs (loop3): invalid crc value [ 792.599937][T12541] F2FS-fs (loop3): Found nat_bits in checkpoint [ 792.610063][ T5816] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 792.661158][T12541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 792.675148][ T5816] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 792.733574][ T5816] dib0700: firmware download failed at 7 with -22 [ 794.216855][ T5812] usb 1-1: USB disconnect, device number 48 [ 794.738099][T12587] loop0: detected capacity change from 0 to 512 [ 794.764720][T12587] EXT4-fs: Ignoring removed orlov option [ 794.838625][T12587] EXT4-fs (loop0): Test dummy encryption mode enabled [ 794.860650][T12587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 794.911057][T12587] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 796.438337][T12601] loop1: detected capacity change from 0 to 131072 [ 796.500420][T12601] F2FS-fs (loop1): invalid crc value [ 796.596975][T12601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 796.644097][T12601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 799.242877][T12628] syz.2.1741: attempt to access beyond end of device [ 799.242877][T12628] loop2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 799.256747][T12628] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 799.431070][T12628] process 'syz.2.1741' launched '' with NULL argv: empty string added [ 801.190786][T12635] create_pit_timer: 164 callbacks suppressed [ 801.190796][T12635] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 801.359711][T12635] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 801.407236][T12635] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 801.446744][T12635] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 801.467597][T12635] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 801.491180][T12635] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 801.508946][T12635] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 801.560913][T12635] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 801.569581][T12635] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 801.584636][T12635] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 801.973536][T12649] loop3: detected capacity change from 0 to 512 [ 802.019772][T12649] EXT4-fs: Ignoring removed orlov option [ 802.030798][T12649] EXT4-fs (loop3): Test dummy encryption mode enabled [ 802.049084][T12649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 802.060010][T12649] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 803.586228][T12654] loop3: detected capacity change from 0 to 131072 [ 803.621319][T12654] F2FS-fs (loop3): invalid crc value [ 803.696955][T12654] F2FS-fs (loop3): Found nat_bits in checkpoint [ 803.841658][T12654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 804.077641][T12664] loop0: detected capacity change from 0 to 4116 [ 804.084943][T12664] ntfs3: Unknown parameter 'Ê' [ 804.966647][ T5812] hid (null): global environment stack underflow [ 804.990217][ T5812] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 805.012726][ T5812] hid-generic 0000:0000:0000.0002: global environment stack underflow [ 805.038799][ T5812] hid-generic 0000:0000:0000.0002: item 0 2 1 11 parsing failed [ 805.066694][ T5812] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 805.541281][ T5835] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 805.773095][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 806.394065][T12687] loop1: detected capacity change from 0 to 131072 [ 806.407484][ T5835] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 806.431902][T12687] F2FS-fs (loop1): invalid crc value [ 806.488114][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.519356][T12687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 806.550201][ T5835] usb 4-1: config 0 descriptor?? [ 806.611707][T12687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 806.826045][ T5835] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 806.867849][ T5835] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 806.887473][ T5835] dib0700: firmware download failed at 7 with -22 [ 806.907585][ T5835] usb 4-1: USB disconnect, device number 40 [ 808.727823][T12710] loop0: detected capacity change from 0 to 131072 [ 808.810772][T12712] loop2: detected capacity change from 0 to 4096 [ 808.818282][T12712] ntfs3: Unknown parameter 'Ê' [ 808.825490][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.833891][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.263335][T12710] F2FS-fs (loop0): invalid crc value [ 809.309696][T12710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 809.460996][T12710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 810.796213][T12725] loop3: detected capacity change from 0 to 131072 [ 810.816946][T12725] F2FS-fs (loop3): invalid crc value [ 810.856302][T12725] F2FS-fs (loop3): Found nat_bits in checkpoint [ 810.906330][T12725] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 811.214538][T12739] loop1: detected capacity change from 0 to 512 [ 811.221970][T12739] EXT4-fs: Ignoring removed orlov option [ 811.229671][T12739] EXT4-fs (loop1): Test dummy encryption mode enabled [ 811.243407][T12739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 811.259251][T12739] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 812.260783][T12755] loop0: detected capacity change from 0 to 4121 [ 812.268189][T12755] ntfs3: Unknown parameter 'Ê' [ 812.873843][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.881309][T12747] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.109978][T12747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.214086][T12747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.758569][T12783] loop1: detected capacity change from 0 to 512 [ 814.767071][T12783] EXT4-fs: Ignoring removed orlov option [ 814.797279][T12783] EXT4-fs (loop1): Test dummy encryption mode enabled [ 814.806201][T12783] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 814.821513][T12783] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 814.906686][T12783] loop1: detected capacity change from 0 to 128 [ 815.885744][T12747] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.895060][T12747] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.904472][T12747] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.921059][T12747] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.111233][T12792] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1782'. [ 816.120395][T12792] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1782'. [ 816.929030][T12747] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.938390][T12747] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.947864][T12747] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.957172][T12747] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.118397][T12747] syz.3.1769 (12747) used greatest stack depth: 20432 bytes left [ 817.247228][T12799] loop1: detected capacity change from 0 to 4117 [ 817.254584][T12799] ntfs3: Unknown parameter 'Ê' [ 817.336195][T12001] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 817.409773][T12808] loop0: detected capacity change from 0 to 512 [ 817.444587][T12808] EXT4-fs: Ignoring removed orlov option [ 817.485635][T12808] EXT4-fs (loop0): Test dummy encryption mode enabled [ 817.501985][T12808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 817.514142][T12808] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 817.943886][T12820] loop3: detected capacity change from 0 to 512 [ 817.967812][T12820] EXT4-fs: Ignoring removed orlov option [ 818.105465][T12820] EXT4-fs (loop3): Test dummy encryption mode enabled [ 818.138735][T12820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 818.182421][T12820] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 818.359694][T12824] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1792'. [ 818.368989][T12824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1792'. [ 819.391127][T12834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.546910][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 819.921243][T12842] loop0: detected capacity change from 0 to 512 [ 819.939832][T12842] EXT4-fs: Ignoring removed orlov option [ 820.122682][T12842] EXT4-fs (loop0): Test dummy encryption mode enabled [ 820.225249][T12845] loop3: detected capacity change from 0 to 4116 [ 820.232372][T12845] ntfs3: Unknown parameter 'Ê' [ 820.269565][T12842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 820.286478][T12842] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 820.355917][T11386] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 820.436399][T12842] loop0: detected capacity change from 0 to 128 [ 820.697001][T12855] loop2: detected capacity change from 0 to 512 [ 820.704427][T12855] EXT4-fs: Ignoring removed orlov option [ 820.719350][T12855] EXT4-fs (loop2): Test dummy encryption mode enabled [ 820.727781][T12855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 820.737947][T12855] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 821.049570][T12001] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 821.082590][T12855] loop2: detected capacity change from 0 to 128 [ 821.159952][T12862] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1801'. [ 821.169232][T12862] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1801'. [ 822.154351][T12872] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1804'. [ 823.116248][T12885] loop3: detected capacity change from 0 to 512 [ 823.131439][T12885] EXT4-fs: Ignoring removed orlov option [ 823.143389][T12885] EXT4-fs (loop3): Test dummy encryption mode enabled [ 823.168347][T12885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 823.202750][T12885] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 823.353552][T12885] loop3: detected capacity change from 0 to 128 [ 824.049606][T12894] loop3: detected capacity change from 0 to 4117 [ 824.056673][T12894] ntfs3: Unknown parameter 'Ê' [ 824.160890][T11419] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 824.330786][T12897] syzkaller0: entered promiscuous mode [ 824.370561][T12897] syzkaller0: entered allmulticast mode [ 824.447768][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1812'. [ 824.515344][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1812'. [ 824.613634][T12897] 0: reclassify loop, rule prio 0, protocol 800 [ 824.823233][T12903] loop3: detected capacity change from 0 to 512 [ 824.860179][T12903] EXT4-fs: Ignoring removed orlov option [ 824.906347][T12903] EXT4-fs (loop3): Test dummy encryption mode enabled [ 824.940904][T12903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 824.994461][T12903] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 825.108783][T12903] loop3: detected capacity change from 0 to 128 [ 825.753247][T12914] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1816'. [ 827.266061][T12946] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1820'. [ 827.275482][T12946] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1820'. [ 827.978397][T12945] create_pit_timer: 43 callbacks suppressed [ 827.978408][T12945] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 828.022368][T12952] loop3: detected capacity change from 0 to 512 [ 828.030046][T12952] EXT4-fs: Ignoring removed orlov option [ 828.076632][T12952] EXT4-fs (loop3): Test dummy encryption mode enabled [ 828.089523][T12952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 828.100901][T12952] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 828.153845][T11419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 828.184379][T12952] loop3: detected capacity change from 0 to 128 [ 828.188623][T11419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 828.206464][T11419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 828.230185][T11419] Buffer I/O error on dev loop3, logical block 0, async page read [ 828.865788][T12966] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1827'. [ 830.560736][T12984] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1832'. [ 830.570154][T12984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1832'. [ 832.381097][ T786] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 832.572708][ T786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.612362][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.632787][ T786] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 832.663177][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 832.714420][ T786] usb 4-1: SerialNumber: syz [ 833.106851][T13013] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1839'. [ 833.819533][T13010] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 834.728192][T13028] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1842'. [ 834.737613][T13028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1842'. [ 835.523549][ T786] usb 4-1: 0:2 : does not exist [ 835.597072][ T786] usb 4-1: USB disconnect, device number 41 [ 835.680212][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.595704][T13052] loop1: detected capacity change from 0 to 131072 [ 836.631896][T13052] F2FS-fs (loop1): invalid crc value [ 836.662122][T13052] F2FS-fs (loop1): Found nat_bits in checkpoint [ 836.774439][T13052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 836.903507][T13062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1849'. [ 839.895714][ T5811] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 840.020228][T13081] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1853'. [ 840.029650][T13081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1853'. [ 840.121035][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.282966][ T5811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.298785][ T5811] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 840.682574][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 840.690676][ T5811] usb 3-1: SerialNumber: syz [ 842.402728][T13097] loop0: detected capacity change from 0 to 131072 [ 842.427018][T13097] F2FS-fs (loop0): invalid crc value [ 842.540765][T13097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 842.586589][T13105] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1859'. [ 842.634884][T13097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 842.780554][ T5811] usb 3-1: 0:2 : does not exist [ 842.965898][ T5811] usb 3-1: USB disconnect, device number 38 [ 843.064118][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.528873][T13124] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1863'. [ 843.538187][T13124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1863'. [ 845.416949][T13155] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1870'. [ 846.545950][T13171] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1873'. [ 846.556285][T13171] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1873'. [ 847.771251][ T786] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 847.939487][T13190] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1880'. [ 848.044959][ T786] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 848.080907][ T27] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 848.088986][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.089016][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.089036][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 848.102005][ T786] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 848.256486][ T786] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 848.295594][ T786] usb 2-1: Manufacturer: syz [ 848.413734][ T786] usb 2-1: config 0 descriptor?? [ 848.887103][T13192] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 848.929830][T13197] loop0: detected capacity change from 0 to 512 [ 848.936352][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 848.942765][T13197] EXT4-fs: Ignoring removed orlov option [ 848.949234][ T786] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 848.957630][T13197] EXT4-fs (loop0): Test dummy encryption mode enabled [ 848.972061][ T27] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 848.982342][T13197] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 848.999813][ T786] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 849.001167][T13192] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 849.019434][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.028934][T13197] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 849.040486][ T27] usb 3-1: Product: syz [ 849.057554][ T786] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 849.065013][ T27] usb 3-1: Manufacturer: syz [ 849.078807][T13192] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 849.088314][ T27] usb 3-1: SerialNumber: syz [ 849.111930][T13192] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 849.212881][T13192] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 849.332056][T13192] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 849.475942][T13192] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 849.611165][T13192] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 849.787804][T13192] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 849.809750][ T27] usb 3-1: config 0 descriptor?? [ 849.867730][T13192] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 850.044062][ T27] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 850.063177][ T27] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 850.096128][ T27] usb 3-1: USB disconnect, device number 39 [ 850.698358][T13207] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1884'. [ 850.707685][T13207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1884'. [ 851.107587][ T5811] usb 2-1: USB disconnect, device number 34 [ 852.371338][ T786] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 852.762609][ T786] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 852.780928][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.792534][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.856390][T13241] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1894'. [ 852.865651][T13241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1894'. [ 853.505950][ T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 853.531066][ T786] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 853.540182][ T786] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 853.565679][ T786] usb 1-1: Manufacturer: syz [ 853.578183][ T786] usb 1-1: config 0 descriptor?? [ 854.777711][T13253] loop2: detected capacity change from 0 to 131072 [ 854.835876][T13253] F2FS-fs (loop2): invalid crc value [ 854.850011][ T786] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 854.877346][T13253] F2FS-fs (loop2): Found nat_bits in checkpoint [ 854.908314][ T786] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 854.922273][T13253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 854.990218][ T786] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 855.379782][T13267] loop1: detected capacity change from 0 to 512 [ 855.397200][T13267] EXT4-fs: Ignoring removed orlov option [ 855.408489][T13267] EXT4-fs (loop1): Test dummy encryption mode enabled [ 855.434178][T13267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 855.467420][T13267] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 855.584652][T13267] loop1: detected capacity change from 0 to 128 [ 856.814761][T13283] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1906'. [ 856.824176][T13283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1906'. [ 857.654087][T12770] usb 1-1: USB disconnect, device number 49 [ 857.982716][T13296] create_pit_timer: 82 callbacks suppressed [ 857.982728][T13296] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 858.001587][ T5836] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 858.051093][T13296] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 858.074967][T13296] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 858.086502][T13296] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 858.096841][T13296] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 858.105036][T13296] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 858.116437][T13296] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 858.127199][T13296] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 858.146181][T13296] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 858.157241][T13296] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 858.179727][T13301] syzkaller0: entered promiscuous mode [ 858.189483][T13301] syzkaller0: entered allmulticast mode [ 858.199999][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.210677][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.223960][ T5836] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.236202][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.247691][ T5836] usb 2-1: SerialNumber: syz [ 858.430901][T12770] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 858.621140][T12770] usb 1-1: Using ep0 maxpacket: 32 [ 858.642044][T12770] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 858.679731][T12770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.712988][T12770] usb 1-1: config 0 descriptor?? [ 858.969315][T12770] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 858.992020][T12770] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 859.051404][T12770] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 859.058652][T12770] usb 1-1: media controller created [ 859.117890][T12770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 859.180753][T13316] loop3: detected capacity change from 0 to 512 [ 859.236229][T13316] EXT4-fs: Ignoring removed orlov option [ 859.260264][T13316] EXT4-fs (loop3): Test dummy encryption mode enabled [ 859.268187][T13316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 859.283884][T13316] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 859.295819][T12770] DVB: Unable to find symbol dib7000p_attach() [ 859.323597][T12770] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 860.170873][T12770] rc_core: IR keymap rc-dib0700-rc5 not found [ 860.178095][T12770] Registered IR keymap rc-empty [ 860.192473][T12770] dvb-usb: could not initialize remote control. [ 860.198787][T12770] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 860.450297][ T5811] usb 1-1: USB disconnect, device number 50 [ 860.543089][ T5811] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 861.470423][T13328] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1916'. [ 861.479717][T13328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1916'. [ 863.383828][ T5836] usb 2-1: 0:2 : does not exist [ 863.911149][ T5836] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 864.091409][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 864.104654][ T5836] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 864.124046][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.136734][ T5836] usb 4-1: Product: syz [ 864.141459][ T5836] usb 4-1: Manufacturer: syz [ 864.146165][ T5836] usb 4-1: SerialNumber: syz [ 864.165823][ T5836] usb 4-1: config 0 descriptor?? [ 864.388790][ T786] usb 2-1: USB disconnect, device number 35 [ 864.429950][ T5836] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 864.457727][ T5836] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 864.510000][ T5836] usb 4-1: USB disconnect, device number 42 [ 865.445353][T13349] loop2: detected capacity change from 0 to 131072 [ 865.461695][T13349] F2FS-fs (loop2): invalid crc value [ 865.485221][T13349] F2FS-fs (loop2): Found nat_bits in checkpoint [ 865.539773][T13349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 865.927003][ T5836] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 866.111418][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 866.851407][ T5836] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 866.860528][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.892386][ T5836] usb 4-1: config 0 descriptor?? [ 867.110430][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 867.146863][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 867.184512][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 867.201438][ T5836] usb 4-1: media controller created [ 867.245347][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 867.370995][T12770] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 867.398397][ T5836] DVB: Unable to find symbol dib7000p_attach() [ 867.432183][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 867.573626][T12770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.590970][ T5836] rc_core: IR keymap rc-dib0700-rc5 not found [ 867.595661][T12770] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.609136][ T5836] Registered IR keymap rc-empty [ 867.617248][T12770] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 867.632979][T12770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 867.647581][ T5836] dvb-usb: could not initialize remote control. [ 867.658620][T12770] usb 2-1: SerialNumber: syz [ 867.663709][ T5836] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 867.968428][ T5836] usb 4-1: USB disconnect, device number 43 [ 868.073234][ T5836] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 868.370733][T12770] usb 2-1: 0:2 : does not exist [ 868.407436][T12770] usb 2-1: USB disconnect, device number 36 [ 868.463891][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.809744][T13401] syzkaller0: entered promiscuous mode [ 868.821415][T13401] syzkaller0: entered allmulticast mode [ 869.894892][T13405] loop3: detected capacity change from 0 to 131072 [ 869.917174][T13405] F2FS-fs (loop3): invalid crc value [ 870.001630][T13405] F2FS-fs (loop3): Found nat_bits in checkpoint [ 870.054130][T13405] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 870.225433][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.232203][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.950949][ T27] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 871.153344][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.172129][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.198388][ T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 871.208046][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 871.220242][ T27] usb 2-1: SerialNumber: syz [ 871.856918][ T786] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 872.059688][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 872.077435][ T786] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 872.086767][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.122022][ T786] usb 1-1: config 0 descriptor?? [ 872.366662][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 872.385520][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 872.407490][ T786] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 872.424089][ T786] usb 1-1: media controller created [ 872.465885][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 872.511082][T12770] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 872.596777][ T786] DVB: Unable to find symbol dib7000p_attach() [ 872.612782][ T786] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 872.724850][T12770] usb 4-1: Using ep0 maxpacket: 32 [ 872.726049][ T786] rc_core: IR keymap rc-dib0700-rc5 not found [ 872.742458][T12770] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.753787][ T786] Registered IR keymap rc-empty [ 872.759078][ T786] dvb-usb: could not initialize remote control. [ 872.766772][T12770] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.774083][ T786] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 872.797378][T12770] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 872.809817][T12770] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 872.824552][T12770] usb 4-1: Product: syz [ 872.835261][T12770] usb 4-1: Manufacturer: syz [ 872.851851][T12770] hub 4-1:4.0: USB hub found [ 873.015193][ T5835] usb 1-1: USB disconnect, device number 51 [ 873.073656][T12770] hub 4-1:4.0: 2 ports detected [ 873.142740][ T5835] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 873.819165][T13457] create_pit_timer: 42 callbacks suppressed [ 873.819178][T13457] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 873.870767][T13457] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 873.883007][T13457] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 873.896164][T13457] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 873.904838][T13457] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 873.912967][T13457] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 873.923343][T13457] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 873.954861][T13457] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 873.966379][T13457] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 873.995162][T13457] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 874.038458][ T27] usb 2-1: 0:2 : does not exist [ 874.053888][T12770] usb 4-1: USB disconnect, device number 44 [ 874.102667][ T27] usb 2-1: USB disconnect, device number 37 [ 874.948597][T13463] loop1: detected capacity change from 0 to 131072 [ 874.971529][T13463] F2FS-fs (loop1): invalid crc value [ 874.983734][T13463] F2FS-fs (loop1): Found nat_bits in checkpoint [ 875.014707][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.051822][T13463] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 876.641078][ T5836] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 876.841212][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 876.860299][ T5836] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 876.886654][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.921992][ T5836] usb 3-1: config 0 descriptor?? [ 877.177313][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 877.194212][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 877.234831][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 877.252494][ T5836] usb 3-1: media controller created [ 877.327984][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 877.510363][ T5836] DVB: Unable to find symbol dib7000p_attach() [ 877.535645][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 877.701181][ T5836] rc_core: IR keymap rc-dib0700-rc5 not found [ 877.713621][ T5836] Registered IR keymap rc-empty [ 877.718967][ T5836] dvb-usb: could not initialize remote control. [ 877.735348][ T5836] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 877.912465][T13502] loop0: detected capacity change from 0 to 131072 [ 877.922922][T13502] F2FS-fs (loop0): invalid crc value [ 877.945732][T13502] F2FS-fs (loop0): Found nat_bits in checkpoint [ 877.961040][ T786] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 877.999169][T12770] usb 3-1: USB disconnect, device number 40 [ 878.005777][T13502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 878.045961][T12770] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 878.080882][ T27] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 878.181100][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 878.273914][ T786] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 878.289862][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.306830][ T786] usb 2-1: Product: syz [ 878.312883][ T786] usb 2-1: Manufacturer: syz [ 878.317711][ T786] usb 2-1: SerialNumber: syz [ 878.337510][ T786] usb 2-1: config 0 descriptor?? [ 878.451301][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 878.467709][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.488519][ T27] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 878.520994][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.527700][ T27] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 878.537903][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.551963][ T27] usb 4-1: config 0 descriptor?? [ 878.581147][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 878.623219][ T786] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 878.647192][ T786] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 878.679912][ T786] usb 2-1: USB disconnect, device number 38 [ 878.770684][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1954'. [ 879.383592][T12770] usb 4-1: USB disconnect, device number 45 [ 879.585686][T13527] loop3: detected capacity change from 0 to 512 [ 879.626379][T13527] EXT4-fs: Ignoring removed orlov option [ 879.686607][T13527] EXT4-fs (loop3): Test dummy encryption mode enabled [ 879.721244][T13527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 879.745267][T13527] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 881.000908][T12770] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 881.213431][T12770] usb 3-1: Using ep0 maxpacket: 16 [ 881.251255][T12770] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 881.270357][T12770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.287786][T12770] usb 3-1: Product: syz [ 881.301019][T12770] usb 3-1: Manufacturer: syz [ 881.308077][T12770] usb 3-1: SerialNumber: syz [ 881.326763][T12770] usb 3-1: config 0 descriptor?? [ 881.555864][T12770] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 881.583431][T12770] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 881.617874][T12770] usb 3-1: USB disconnect, device number 41 [ 883.574889][T13621] syzkaller0: entered promiscuous mode [ 883.586447][T13621] syzkaller0: entered allmulticast mode [ 884.585933][T13655] tipc: Enabled bearer , priority 0 [ 884.611998][T13655] syzkaller0: entered promiscuous mode [ 884.630084][T13655] syzkaller0: entered allmulticast mode [ 884.795351][T13655] tipc: Resetting bearer [ 884.837737][T13652] tipc: Resetting bearer [ 884.938495][T13652] tipc: Disabling bearer [ 885.117873][T13676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'. [ 885.127602][T13676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'. [ 886.272728][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 886.523668][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 886.947869][T13667] Bluetooth: hci3: command 0x0406 tx timeout [ 887.264633][T13747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2040'. [ 887.518813][T13756] tipc: Failed to obtain node identity [ 887.531080][T13756] tipc: Enabling of bearer rejected, failed to enable media [ 888.224571][T13775] netlink: 'syz.1.2051': attribute type 4 has an invalid length. [ 888.276606][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 888.412146][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 888.424734][T13775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2051'. [ 889.187703][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2062'. [ 889.459838][T13811] syzkaller0: entered promiscuous mode [ 889.466072][T13811] syzkaller0: entered allmulticast mode [ 889.625582][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 890.780896][T13667] Bluetooth: hci3: command 0x0406 tx timeout [ 890.870107][T13852] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2078'. [ 890.903794][T13851] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 890.978518][T13851] bond1: entered promiscuous mode [ 891.004243][T13851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.129370][T13851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.141380][T13851] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 891.159156][T13851] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 891.183141][T13851] bond1: (slave ip6gre1): making interface the new active one [ 891.192466][T13851] ip6gre1: entered promiscuous mode [ 891.202753][T13851] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 891.425780][T13868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2083'. [ 891.864255][T13887] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2090'. [ 892.285635][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 892.825517][T13926] tipc: Started in network mode [ 892.830702][T13926] tipc: Node identity 1eeb20488ccb, cluster identity 4711 [ 892.849970][T13926] tipc: Enabled bearer , priority 0 [ 892.863795][T13667] Bluetooth: hci3: command 0x0406 tx timeout [ 892.899616][T13927] syzkaller0: entered promiscuous mode [ 892.905391][T13927] syzkaller0: entered allmulticast mode [ 893.002768][T13926] tipc: Resetting bearer [ 893.052203][T13924] tipc: Resetting bearer [ 893.093415][T13924] tipc: Disabling bearer [ 894.004710][T13962] tipc: Enabled bearer , priority 0 [ 894.085277][T13962] syzkaller0: entered promiscuous mode [ 894.094099][T13962] syzkaller0: entered allmulticast mode [ 894.100373][T13962] tipc: Resetting bearer [ 894.201152][T13961] tipc: Resetting bearer [ 897.179017][T13961] tipc: Disabling bearer [ 897.188830][T13977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2122'. [ 897.199894][ T5836] tipc: Node number set to 2451578952 [ 897.718205][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'. [ 898.144615][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 898.761488][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 898.808246][T14073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2156'. [ 898.973374][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2158'. [ 900.457327][T14024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.083095][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 903.883697][T14235] syzkaller0: entered promiscuous mode [ 903.894376][T14235] syzkaller0: entered allmulticast mode [ 904.102329][T14244] syzkaller0: entered promiscuous mode [ 904.107995][T14244] syzkaller0: entered allmulticast mode [ 904.620868][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 904.765083][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 905.068674][T14275] syzkaller0: entered promiscuous mode [ 905.079451][T14275] syzkaller0: entered allmulticast mode [ 905.103078][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 905.126666][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 905.155221][T14275] 0: reclassify loop, rule prio 0, protocol 800 [ 905.645083][T14289] syzkaller0: entered promiscuous mode [ 905.666992][T14289] syzkaller0: entered allmulticast mode [ 906.704444][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 907.703353][T10645] ------------[ cut here ]------------ [ 907.715424][T10645] WARNING: CPU: 1 PID: 10645 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 907.727307][T10645] Modules linked in: [ 907.731394][T10645] CPU: 1 PID: 10645 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 907.733330][ T6073] ------------[ cut here ]------------ [ 907.739045][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.739082][T10645] Workqueue: phy7 ieee80211_csa_finalize_work [ 907.739125][T10645] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 907.746020][ T6073] WARNING: CPU: 0 PID: 6073 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 907.755084][T10645] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 907.761250][ T6073] Modules linked in: [ 907.761269][ T6073] CPU: 0 PID: 6073 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 907.761288][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.761302][ T6073] Workqueue: phy8 ieee80211_csa_finalize_work [ 907.761333][ T6073] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 907.768673][T10645] RSP: 0018:ffffc900032b79c0 EFLAGS: 00010293 [ 907.780116][ T6073] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 907.800282][ C1] ------------[ cut here ]------------ [ 907.800327][ C1] WARNING: CPU: 1 PID: 10645 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 907.800372][ C1] Modules linked in: [ 907.800387][ C1] CPU: 1 PID: 10645 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 907.800409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.800425][ C1] Workqueue: phy7 ieee80211_csa_finalize_work [ 907.800458][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 907.800487][ C1] Code: 24 4c 89 e7 e8 be 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ad b2 82 f7 <0f> 0b e9 48 fb ff ff e8 a1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 907.800506][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 907.800526][ C1] RAX: ffffffff8a046f53 RBX: ffffffff8a045d56 RCX: ffff888021edda00 [ 907.800544][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.800558][ C1] RBP: 0000000000000000 R08: ffff888021edda00 R09: 0000000000000003 [ 907.800572][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e2b63c0 [ 907.800587][ C1] R13: dffffc0000000000 R14: ffff88805e2b68b0 R15: ffff88802cc14c24 [ 907.800605][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 907.800624][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.800640][ C1] CR2: 00007fa0acbea4c0 CR3: 0000000061ca0000 CR4: 00000000003506e0 [ 907.800661][ C1] Call Trace: [ 907.800681][ C1] [ 907.800694][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 907.804854][ T6073] RSP: 0018:ffffc900050f79c0 EFLAGS: 00010293 [ 907.812690][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 907.824132][ T6073] [ 907.828870][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 907.836418][ T6073] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff88805d9f8000 [ 907.842334][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 907.842371][ C1] __iterate_interfaces+0x243/0x500 [ 907.862084][ T6073] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 907.867477][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 907.877587][ T6073] RBP: dffffc0000000000 R08: ffff88805dcb55af R09: 1ffff1100bb96ab5 [ 907.881529][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 907.889146][ T6073] R10: dffffc0000000000 R11: ffffed100bb96ab6 R12: 0000000000000001 [ 907.899245][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 907.899274][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 907.899311][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 907.899338][ C1] __hrtimer_run_queues+0x520/0xc40 [ 907.899363][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 907.899399][ C1] ? hw_scan_work+0xf60/0xf60 [ 907.899432][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 907.899455][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 907.899493][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 907.899523][ C1] handle_softirqs+0x280/0x820 [ 907.899553][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 907.899581][ C1] ? do_softirq+0x1a0/0x1a0 [ 907.899610][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 907.899644][ C1] __irq_exit_rcu+0xd3/0x190 [ 907.899679][ C1] ? irq_exit_rcu+0x20/0x20 [ 907.899711][ C1] irq_exit_rcu+0x9/0x20 [ 907.906084][ T6073] R13: ffff88805dcb65d9 R14: ffff88801e792c70 R15: ffff88801e792ce8 [ 907.912300][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 907.932163][ T6073] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 907.938021][ C1] [ 907.946033][ T6073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.954066][ C1] [ 907.954079][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 907.954113][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 907.954149][ C1] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 907.962289][ T6073] CR2: 000000110c36ee6c CR3: 0000000061c8c000 CR4: 00000000003506f0 [ 907.970196][ C1] RSP: 0018:ffffc900032b7340 EFLAGS: 00000293 [ 907.978345][ T6073] Call Trace: [ 907.978362][ T6073] [ 907.987318][ C1] [ 907.987326][ C1] RAX: ffffffff816b9b86 RBX: ffffc900032b74df RCX: ffff888021edda00 [ 907.987342][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.987355][ C1] RBP: ffffc900032b74b0 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 907.987369][ C1] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: ffffffff8d8b9500 [ 907.987383][ C1] R13: 1ffffffff19f970c R14: ffffffff8d8b9558 R15: dffffc0000000000 [ 907.987408][ C1] ? console_flush_all+0x8a6/0xd20 [ 907.987446][ C1] ? __rwlock_init+0x150/0x150 [ 907.987472][ C1] ? console_flush_all+0x10a/0xd20 [ 907.987507][ C1] ? is_console_locked+0x20/0x20 [ 907.995310][ T6073] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 908.002174][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 908.002215][ C1] console_unlock+0xad/0x350 [ 908.002240][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 908.002270][ C1] ? vprintk_emit+0x467/0x610 [ 908.005591][ T6073] ieee80211_csa_finalize+0x5a6/0xf20 [ 908.008454][ C1] ? vprintk_emit+0x30b/0x610 [ 908.014120][ T6073] ? mutex_lock_nested+0x20/0x20 [ 908.020130][ C1] ? vprintk_emit+0x30b/0x610 [ 908.025698][ T6073] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 908.027982][ C1] vprintk_emit+0x497/0x610 [ 908.034799][ T6073] ? ieee80211_csa_finalize_work+0x140/0x140 [ 908.042817][ C1] ? vprintk_emit+0x30b/0x610 [ 908.042848][ C1] ? printk_sprint+0x460/0x460 [ 908.048395][ T6073] ? read_lock_is_recursive+0x20/0x20 [ 908.053632][ C1] ? _printk+0xde/0x130 [ 908.061663][ T6073] ieee80211_csa_finalize_work+0xf6/0x140 [ 908.067905][ C1] ? copy_from_kernel_nofault+0x1d2/0x310 [ 908.076122][ T6073] ? process_scheduled_works+0x96f/0x15d0 [ 908.083156][ C1] _printk+0xde/0x130 [ 908.091158][ T6073] process_scheduled_works+0xa5d/0x15d0 [ 908.097405][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 908.097435][ C1] ? load_image+0x420/0x420 [ 908.097473][ C1] __show_regs+0x34/0x600 [ 908.097497][ C1] ? dump_stack_print_info+0xf5/0x150 [ 908.097532][ C1] show_regs+0x44/0x90 [ 908.097557][ C1] __warn+0x160/0x470 [ 908.097579][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.097606][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.097630][ C1] report_bug+0x2be/0x4f0 [ 908.097651][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.097678][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.097704][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 908.097729][ C1] handle_bug+0xcf/0x120 [ 908.097751][ C1] exc_invalid_op+0x1a/0x50 [ 908.097772][ C1] asm_exc_invalid_op+0x1a/0x20 [ 908.097797][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.105255][ T6073] ? worker_attach_to_pool+0x380/0x380 [ 908.110068][ C1] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 908.115312][ T6073] ? assign_work+0x3d2/0x5d0 [ 908.121329][ C1] RSP: 0018:ffffc900032b79c0 EFLAGS: 00010293 [ 908.126046][ T6073] worker_thread+0xa55/0xfc0 [ 908.131283][ C1] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff888021edda00 [ 908.131303][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 908.137401][ T6073] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 908.142544][ C1] RBP: dffffc0000000000 R08: ffff88805e2b55af R09: 1ffff1100bc56ab5 [ 908.142560][ C1] R10: dffffc0000000000 R11: ffffed100bc56ab6 R12: 0000000000000001 [ 908.142574][ C1] R13: ffff88805e2b65d9 R14: ffff88801e732c70 R15: ffff88801e732ce8 [ 908.142596][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 908.147440][ T6073] kthread+0x2fa/0x390 [ 908.152251][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 908.156704][ T6073] ? pr_cont_work+0x560/0x560 [ 908.161948][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 908.166552][ T6073] ? kthread_blkcg+0xd0/0xd0 [ 908.171089][ C1] ? mutex_lock_nested+0x20/0x20 [ 908.175335][ T6073] ret_from_fork+0x48/0x80 [ 908.183345][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 908.188994][ T6073] ? kthread_blkcg+0xd0/0xd0 [ 908.197966][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 908.197996][ C1] ? read_lock_is_recursive+0x20/0x20 [ 908.198026][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 908.198054][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 908.198080][ C1] process_scheduled_works+0xa5d/0x15d0 [ 908.198130][ C1] ? worker_attach_to_pool+0x380/0x380 [ 908.198168][ C1] ? assign_work+0x3d2/0x5d0 [ 908.198198][ C1] worker_thread+0xa55/0xfc0 [ 908.198225][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 908.198251][ C1] ? _raw_spin_unlock+0x40/0x40 [ 908.198274][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 908.198320][ C1] kthread+0x2fa/0x390 [ 908.198339][ C1] ? pr_cont_work+0x560/0x560 [ 908.201634][ T6073] ret_from_fork_asm+0x11/0x20 [ 908.208103][ C1] ? kthread_blkcg+0xd0/0xd0 [ 908.211090][ T6073] [ 908.217057][ C1] ret_from_fork+0x48/0x80 [ 908.223202][ T6073] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 908.223242][ T6073] CPU: 0 PID: 6073 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 908.223290][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 908.223327][ T6073] Workqueue: phy8 ieee80211_csa_finalize_work [ 908.223406][ T6073] Call Trace: [ 908.223425][ T6073] [ 908.223445][ T6073] dump_stack_lvl+0x18c/0x250 [ 908.223539][ T6073] ? show_regs_print_info+0x20/0x20 [ 908.223618][ T6073] ? load_image+0x420/0x420 [ 908.223718][ T6073] panic+0x2dc/0x730 [ 908.223796][ T6073] ? bpf_jit_dump+0xd0/0xd0 [ 908.223884][ T6073] ? ret_from_fork_asm+0x11/0x20 [ 908.223971][ T6073] __warn+0x2e0/0x470 [ 908.224029][ T6073] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.224092][ T6073] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.224152][ T6073] report_bug+0x2be/0x4f0 [ 908.224196][ T6073] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.224276][ T6073] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.224373][ T6073] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 908.224467][ T6073] handle_bug+0xcf/0x120 [ 908.224526][ T6073] exc_invalid_op+0x1a/0x50 [ 908.224577][ T6073] asm_exc_invalid_op+0x1a/0x20 [ 908.224641][ T6073] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 908.224707][ T6073] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 908.224776][ T6073] RSP: 0018:ffffc900050f79c0 EFLAGS: 00010293 [ 908.224814][ T6073] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff88805d9f8000 [ 908.224849][ T6073] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 908.224881][ T6073] RBP: dffffc0000000000 R08: ffff88805dcb55af R09: 1ffff1100bb96ab5 [ 908.224924][ T6073] R10: dffffc0000000000 R11: ffffed100bb96ab6 R12: 0000000000000001 [ 908.224966][ T6073] R13: ffff88805dcb65d9 R14: ffff88801e792c70 R15: ffff88801e792ce8 [ 908.225033][ T6073] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 908.225168][ T6073] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 908.225256][ T6073] ieee80211_csa_finalize+0x5a6/0xf20 [ 908.225331][ T6073] ? mutex_lock_nested+0x20/0x20 [ 908.225395][ T6073] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 908.225469][ T6073] ? ieee80211_csa_finalize_work+0x140/0x140 [ 908.225538][ T6073] ? read_lock_is_recursive+0x20/0x20 [ 908.225643][ T6073] ieee80211_csa_finalize_work+0xf6/0x140 [ 908.225743][ T6073] ? process_scheduled_works+0x96f/0x15d0 [ 908.225842][ T6073] process_scheduled_works+0xa5d/0x15d0 [ 908.226000][ T6073] ? worker_attach_to_pool+0x380/0x380 [ 908.226117][ T6073] ? assign_work+0x3d2/0x5d0 [ 908.226179][ T6073] worker_thread+0xa55/0xfc0 [ 908.226247][ T6073] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 908.226373][ T6073] kthread+0x2fa/0x390 [ 908.226426][ T6073] ? pr_cont_work+0x560/0x560 [ 908.226495][ T6073] ? kthread_blkcg+0xd0/0xd0 [ 908.226539][ T6073] ret_from_fork+0x48/0x80 [ 908.226600][ T6073] ? kthread_blkcg+0xd0/0xd0 [ 908.226653][ T6073] ret_from_fork_asm+0x11/0x20 [ 908.226782][ T6073] [ 908.242543][ T6073] Kernel Offset: disabled