last executing test programs: 16.657095328s ago: executing program 2 (id=2198): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x7ff) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b24, &(0x7f0000000040)) 11.682752439s ago: executing program 2 (id=2207): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) getrlimit(0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd25, 0x1, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 10.793107349s ago: executing program 0 (id=2209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500009804c0002800c00018008000140000000070c00018008000140000000010c00018008000140000000030c00018008000140000000f0bb00"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.679393493s ago: executing program 0 (id=2211): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x24000000) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x40, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x4, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 9.687406017s ago: executing program 0 (id=2213): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x7ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0xe8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x6f) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b24, &(0x7f0000000040)) 8.640975773s ago: executing program 0 (id=2214): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bd3e66208205ce7438ba0102030109022400020902b0000904dd0100ff9348090904dd4001621866ff09050a", @ANYRES64=r2, @ANYRES8=0x0], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.489577038s ago: executing program 2 (id=2216): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.248839647s ago: executing program 2 (id=2219): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 7.497837412s ago: executing program 1 (id=2220): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xce) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = landlock_create_ruleset(0x0, 0x24, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100}, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x64, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_open={0xf, 0x1, {0x4100, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x1000, 0x1, 0x1, 0x0, {0xc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x6, 0x81}}}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.591077444s ago: executing program 1 (id=2221): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac", 0x75}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308433219872eeda0c235f8be3088a880", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.493130067s ago: executing program 3 (id=2222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) setrlimit(0xf, &(0x7f0000000540)={0x93, 0x8}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x24001, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000500)={0x80000000, 0x86, {r0}, {}, 0x9, 0x9}) socket$isdn(0x22, 0x2, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) 4.484491236s ago: executing program 0 (id=2223): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x20002, 0x9, {0x0}, {0xee00}, 0x700000000000, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000003c0)=@generic={0x1f, "6fa0cdb098606708a3b923f5e5aeca63cbe3147b6416b883a48ea59b8b05980f5b5ed619a3aa87ff18121684d11845be301af25a24af53f22ecd5b5c1a56f35ceca2a1107c63fed526e1306027fbf01a2478f4eed3c0469d67cc945bd6d0bf931e3142994124460690ce4492a3fd936792d9c0dca4413428d7e72cfcc49b"}, 0x80, 0x0}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 4.435951898s ago: executing program 1 (id=2224): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4.316742452s ago: executing program 2 (id=2225): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f00000003c0)="9a49dc6aa930167f35c44e61e4cb4183f9408ed186431fce8731dbc23f0801dc140f7146cc0871619fa11872dd8c532182bf6ba3f32af3af066caed07d2ed1d808002943308956eab43e3fac405f348cf845eb") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000002c0)='./file0/file1\x00', 0x200) listen(0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x6, 0xcead, 0xffff, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x7, 0x79, 0xfffffffe, 0xb, 0x1, 0x2000, 0x6, r4, r5, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x0, 0x6, 0x2008, 0x8000, 0xe44, r4, r5, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20048840) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) 4.315990812s ago: executing program 3 (id=2226): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x13, "71feaf33432ed6fe90107884be157e88b3e578"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) close(0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 3.633143035s ago: executing program 3 (id=2227): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xce) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = landlock_create_ruleset(0x0, 0x24, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100}, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x3) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000008c0)={0x2, 0x7}, 0x2) write(0xffffffffffffffff, 0x0, 0x0) 3.080094694s ago: executing program 2 (id=2228): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x40) r2 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000240)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, 0x0, 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) r9 = openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$SNDCTL_TMR_STOP(r9, 0x5403) 2.470411965s ago: executing program 0 (id=2229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x4, 0x2000002, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b1b, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.470181645s ago: executing program 3 (id=2230): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80300, 0x14) name_to_handle_at(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=@OVL_FILEID_V1={0x98, 0xf8, {'\x00', {0x0, 0xfb, 0x95, 0x3, 0xcb, "cb855c16fdeb8034a74432cec71df33d", "09d828ae6f149ed4b9fdf209497ea90d52fff15e13f14dc388648b91f711371e9fd5ded95ce75f8ee6ed6122eea11ca1c3da1260bd5548ec6fdd6639531788687c98e17ef71ad7a2d51da0397c3b61a56c18d23c4b62a0e21c9d4a0298df1a5d6c777efe98d28043d52ae9a01c009c0e4d7624811feb697611f47649c8f69c17"}}}, &(0x7f0000000500), 0x600) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x40, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x4, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1.1748844s ago: executing program 1 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.002082946s ago: executing program 3 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 775.740643ms ago: executing program 1 (id=2233): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac", 0x75}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.62083ms ago: executing program 1 (id=2234): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$setperm(0x5, 0x0, 0x40808) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=2235): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x13, "71feaf33432ed6fe90107884be157e88b3e578"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) close(0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ctors(): unaligned read [ 478.250990][T10267] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 478.356793][T10290] delete_channel: no stack [ 479.078264][T10293] hpfs: hpfs_map_4sectors(): unaligned read [ 479.113876][T10293] hpfs: hpfs_map_sector(): read error [ 481.172319][T10303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1137'. [ 481.734959][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 481.955560][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 482.017261][ T28] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 482.033340][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.043911][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.075929][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.118630][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.152801][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.174175][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.410862][ T28] usb 1-1: usb_control_msg returned -32 [ 483.713741][ T28] usbtmc 1-1:16.0: can't read capabilities [ 484.098380][T10329] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 484.188279][T10331] loop3: detected capacity change from 0 to 128 [ 484.224831][T10331] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 484.253523][T10331] hpfs: filesystem error: improperly stopped [ 484.280128][T10331] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 484.313586][T10331] hpfs: You really don't want any checks? You are crazy... [ 484.321051][T10331] hpfs: hpfs_map_sector(): read error [ 484.343550][T10331] hpfs: code page support is disabled [ 484.349471][T10331] hpfs: hpfs_map_4sectors(): unaligned read [ 484.363935][T10331] hpfs: hpfs_map_4sectors(): unaligned read [ 484.370292][T10331] hpfs: filesystem error: unable to find root dir [ 484.512581][T10331] hpfs: hpfs_map_4sectors(): unaligned read [ 484.750852][ T6414] usb 1-1: USB disconnect, device number 14 [ 485.431768][T10345] hpfs: hpfs_map_4sectors(): unaligned read [ 485.450499][T10345] hpfs: hpfs_map_sector(): read error [ 489.446742][T10380] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 490.025316][T10372] delete_channel: no stack [ 492.175363][ T6414] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 492.177600][T10408] loop0: detected capacity change from 0 to 8 [ 492.338242][T10408] SQUASHFS error: lzo decompression failed, data probably corrupt [ 492.346130][T10408] SQUASHFS error: Failed to read block 0x0: -5 [ 492.352325][T10408] SQUASHFS error: Failed to read block 0xff: -5 [ 492.359105][T10408] SQUASHFS error: lzo decompression failed, data probably corrupt [ 492.366956][T10408] SQUASHFS error: Failed to read block 0x0: -5 [ 492.373489][ T27] audit: type=1800 audit(1775212678.155:14): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1168" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 492.425592][ T6414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 492.492548][ T6414] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 492.501335][ T6414] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 492.512964][ T6414] usb 4-1: config 129 has no interface number 0 [ 492.560153][ T6414] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 492.644576][ T6414] usb 4-1: config 129 interface 135 has no altsetting 0 [ 492.681141][ T6414] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 493.075081][ T6414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.083230][ T6414] usb 4-1: Product: syz [ 493.506576][ T6414] usb 4-1: Manufacturer: syz [ 493.511217][ T6414] usb 4-1: SerialNumber: syz [ 493.703424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 495.010989][ T6414] usb 4-1: USB disconnect, device number 10 [ 495.306152][T10426] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1172'. [ 498.270516][T10451] syzkaller0: entered promiscuous mode [ 498.277338][T10451] syzkaller0: entered allmulticast mode [ 498.313483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 499.745341][ T5834] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 499.952641][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 499.970931][ T5834] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 499.989980][ T5834] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 500.017180][ T5834] usb 3-1: config 129 has no interface number 0 [ 500.038173][ T5834] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 500.053140][ T5834] usb 3-1: config 129 interface 135 has no altsetting 0 [ 500.068433][ T5834] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 500.082525][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.763601][ T5834] usb 3-1: Product: syz [ 500.767816][ T5834] usb 3-1: Manufacturer: syz [ 500.772427][ T5834] usb 3-1: SerialNumber: syz [ 501.556411][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.562744][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.919419][ T5834] usb 3-1: USB disconnect, device number 11 [ 504.425805][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 504.524614][T10500] syzkaller0: entered promiscuous mode [ 504.530273][T10500] syzkaller0: entered allmulticast mode [ 505.705232][ T6414] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 507.594271][ T6414] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.611264][ T6414] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 507.668021][ T6414] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 507.725058][ T6414] usb 3-1: config 129 has no interface number 0 [ 507.741620][ T6414] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 508.073498][ T6414] usb 3-1: config 129 interface 135 has no altsetting 0 [ 508.127160][ T6414] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 508.137335][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.146618][ T6414] usb 3-1: Product: syz [ 508.150769][ T6414] usb 3-1: Manufacturer: syz [ 508.324131][ T6414] usb 3-1: SerialNumber: syz [ 508.367920][ T6414] usb 3-1: can't set config #129, error -71 [ 508.407743][ T6414] usb 3-1: USB disconnect, device number 12 [ 508.613631][T10535] syzkaller0: entered promiscuous mode [ 508.624072][T10535] syzkaller0: entered allmulticast mode [ 512.771625][T10559] delete_channel: no stack [ 513.653742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 514.072493][T10571] loop0: detected capacity change from 0 to 512 [ 514.159968][T10571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.220706][T10571] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.440544][T10571] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 514.455216][T10571] Quota error (device loop0): write_blk: dquota write failed [ 514.462699][T10571] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 514.473021][T10571] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1218: Failed to acquire dquot type 0 [ 514.700805][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.282155][T10590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.216693][T10604] delete_channel: no stack [ 518.773729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 519.120538][T10620] loop1: detected capacity change from 0 to 512 [ 519.229631][T10620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.273663][T10620] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.608593][T10623] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 519.656272][T10620] Quota error (device loop1): write_blk: dquota write failed [ 519.664328][T10620] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 519.674267][T10620] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1232: Failed to acquire dquot type 0 [ 519.816871][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.031809][T10633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.099482][T10667] loop0: detected capacity change from 0 to 512 [ 524.248956][T10667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.328225][T10667] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.674819][T10678] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 524.689770][T10678] Quota error (device loop0): write_blk: dquota write failed [ 524.697587][T10678] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 524.707725][T10678] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1243: Failed to acquire dquot type 0 [ 526.886636][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.979407][T10690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.588431][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1253'. [ 529.193827][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 529.377265][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 529.394070][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 529.405723][ T23] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 529.419290][ T23] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 529.438606][ T23] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 529.471070][ T23] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 529.507122][ T23] usb 1-1: config 9 has no interface number 0 [ 529.536242][ T23] usb 1-1: config 9 interface 221 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.585505][ T23] usb 1-1: config 9 interface 221 has no altsetting 0 [ 529.597972][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 529.609779][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.620482][ T23] usb 1-1: Product: syz [ 529.628501][ T23] usb 1-1: Manufacturer: syz [ 529.633903][ T23] usb 1-1: SerialNumber: syz [ 530.406106][ T23] usb 1-1: USB disconnect, device number 15 [ 530.443079][T10726] loop3: detected capacity change from 0 to 512 [ 530.457071][ T7569] udevd[7569]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.689117][T10715] syz.2.1257 (10715): drop_caches: 2 [ 530.732012][T10726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.774445][T10726] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.088262][T10739] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 531.104955][T10739] Quota error (device loop3): write_blk: dquota write failed [ 531.112838][T10739] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 531.122875][T10739] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1259: Failed to acquire dquot type 0 [ 531.171721][T10733] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 531.210642][T10733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.224189][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 532.771295][T10756] loop1: detected capacity change from 0 to 512 [ 532.944107][T10756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.958496][T10756] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.301268][T10756] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 533.318107][T10756] Quota error (device loop1): write_blk: dquota write failed [ 533.326512][T10756] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 533.336647][T10756] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1268: Failed to acquire dquot type 0 [ 533.568563][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.332780][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.964961][T10773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1272'. [ 535.096619][T10777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 535.627994][T10781] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 536.075480][T10781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.191263][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 536.217675][T10788] netlink: 'syz.0.1270': attribute type 20 has an invalid length. [ 536.236719][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 537.600430][T10799] loop1: detected capacity change from 0 to 512 [ 538.919587][T10788] syz.0.1270 (10788): drop_caches: 2 [ 539.180572][T10799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.227196][T10799] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.195694][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.235120][T10832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1287'. [ 545.277913][T10827] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 545.441871][T10827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 546.770412][T10851] loop1: detected capacity change from 0 to 512 [ 546.855586][T10851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.888107][T10851] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.241114][T10859] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 547.255847][T10859] Quota error (device loop1): write_blk: dquota write failed [ 547.263389][T10859] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 547.273303][T10859] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1293: Failed to acquire dquot type 0 [ 547.569500][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 547.607060][T10847] netlink: 'syz.3.1290': attribute type 20 has an invalid length. [ 547.635819][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 547.985376][T10872] delete_channel: no stack [ 548.751832][T10860] syz.3.1290 (10860): drop_caches: 2 [ 550.032107][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.084402][T10892] netlink: 'syz.2.1301': attribute type 1 has an invalid length. [ 552.738268][T10892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 553.223018][T10906] loop1: detected capacity change from 0 to 512 [ 553.310423][T10906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.323624][T10906] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.602683][T10906] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 553.617970][T10906] Quota error (device loop1): write_blk: dquota write failed [ 553.625597][T10906] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 553.635525][T10906] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1305: Failed to acquire dquot type 0 [ 553.776861][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.740752][T10927] loop1: detected capacity change from 0 to 512 [ 554.893697][T10927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.906966][T10927] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.287324][T10938] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 556.302074][T10938] Quota error (device loop1): write_blk: dquota write failed [ 556.309631][T10938] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 556.319588][T10938] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1308: Failed to acquire dquot type 0 [ 557.822554][T10950] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 558.144541][T10950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.256683][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.430734][T10957] loop1: detected capacity change from 0 to 512 [ 558.558443][T10957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.616401][T10957] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.980032][T10957] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 558.995923][T10957] Quota error (device loop1): write_blk: dquota write failed [ 559.004064][T10957] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 559.014165][T10957] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1317: Failed to acquire dquot type 0 [ 559.258061][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.881475][T10987] loop2: detected capacity change from 0 to 512 [ 562.045989][T10987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.101049][T10987] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.246534][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 562.458699][T10991] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 562.488350][T10992] netlink: 'syz.0.1326': attribute type 1 has an invalid length. [ 562.507577][T11000] Quota error (device loop2): write_blk: dquota write failed [ 562.515419][T11000] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 562.525685][T11000] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1325: Failed to acquire dquot type 0 [ 562.577599][T10992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.004575][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.012956][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.412443][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.655589][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 566.734695][T11038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.083160][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 567.928742][T11057] loop3: detected capacity change from 0 to 512 [ 568.017173][T11057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.060247][T11057] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.586577][T11068] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 568.601212][T11068] Quota error (device loop3): write_blk: dquota write failed [ 568.608732][T11068] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 568.618580][T11068] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1342: Failed to acquire dquot type 0 [ 569.999353][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.928742][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 570.974642][T11086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.590703][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 572.380786][T11108] loop0: detected capacity change from 0 to 512 [ 572.440478][T11108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.508687][T11108] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.765412][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 572.900467][T11120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 572.911650][T11125] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 572.926691][T11125] Quota error (device loop0): write_blk: dquota write failed [ 572.934220][T11125] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 572.945060][T11125] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1356: Failed to acquire dquot type 0 [ 575.339927][T11136] delete_channel: no stack [ 577.495957][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 577.554520][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.788491][T11151] syzkaller0: entered promiscuous mode [ 577.794799][T11151] syzkaller0: entered allmulticast mode [ 578.503038][ T6057] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 578.730917][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 578.773172][T11167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 578.866422][ T6057] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 578.885446][ T6057] usb 1-1: config 5 has no interface number 0 [ 578.903786][ T6057] usb 1-1: config 5 interface 75 has no altsetting 0 [ 578.937883][T11173] loop2: detected capacity change from 0 to 512 [ 578.950666][ T6057] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 578.991629][ T6057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.010617][ T6057] usb 1-1: Product: syz [ 579.019026][T11173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.028288][ T6057] usb 1-1: Manufacturer: syz [ 579.032708][T11173] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.057969][ T6057] usb 1-1: SerialNumber: syz [ 579.273185][T11173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 579.287994][T11173] Quota error (device loop2): write_blk: dquota write failed [ 579.296076][T11173] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 579.306018][T11173] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1374: Failed to acquire dquot type 0 [ 579.447806][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.629789][T11184] loop2: detected capacity change from 0 to 512 [ 579.716432][T11184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.824268][T11184] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.528627][T11190] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 580.543669][T11190] Quota error (device loop2): write_blk: dquota write failed [ 580.551277][T11190] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 580.561341][T11190] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1375: Failed to acquire dquot type 0 [ 581.428096][ T6057] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 581.442932][ T6057] gspca_sunplus: reg_w_riv err -71 [ 581.462667][ T6057] sunplus: probe of 1-1:5.75 failed with error -71 [ 581.532737][ T6057] usb 1-1: USB disconnect, device number 16 [ 582.391834][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.110960][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 584.366581][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 584.540526][T11213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.851302][T11230] loop0: detected capacity change from 0 to 512 [ 585.924803][T11230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.986946][T11230] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.376163][T11235] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 586.390870][T11235] Quota error (device loop0): write_blk: dquota write failed [ 586.398397][T11235] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 586.408289][T11235] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1387: Failed to acquire dquot type 0 [ 588.570455][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.640796][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 588.670182][T11253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.118773][T11280] loop1: detected capacity change from 0 to 512 [ 591.634756][T11280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.693676][T11280] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.593406][T11290] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 592.610488][T11290] Quota error (device loop1): write_blk: dquota write failed [ 592.618856][T11290] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 592.629017][T11290] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1400: Failed to acquire dquot type 0 [ 592.747130][T11285] delete_channel: no stack [ 593.515903][T11292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 595.124677][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.505074][ T27] audit: type=1326 audit(1775212781.265:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.0.1407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85a899c819 code=0x0 [ 595.594615][T11320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 596.912822][T11324] delete_channel: no stack [ 598.079585][T11335] delete_channel: no stack [ 598.341482][T11339] loop2: detected capacity change from 0 to 512 [ 599.020026][T11339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.038111][T11339] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.698986][T11352] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 599.714628][T11352] Quota error (device loop2): write_blk: dquota write failed [ 599.722738][T11352] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 599.732823][T11352] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1417: Failed to acquire dquot type 0 [ 600.607661][T11358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 602.049911][T11367] delete_channel: no stack [ 603.213941][ T6057] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 603.433535][ T6057] usb 4-1: Using ep0 maxpacket: 16 [ 603.490395][ T6057] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.513478][ T6057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.524811][ T6057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.538915][ T6057] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 603.548226][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.650307][ T6057] usb 4-1: config 0 descriptor?? [ 604.418044][ T6057] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x6 [ 604.489405][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.514454][ T6057] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found [ 604.537412][ T6057] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found [ 604.622755][ T6057] usb 4-1: USB disconnect, device number 11 [ 604.670062][T11393] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 604.681688][T11393] (unnamed net_device) (uninitialized): option mode: invalid value (255) [ 606.103479][ T5773] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 606.414070][ T5773] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 606.422320][ T5773] usb 1-1: config 5 has no interface number 0 [ 606.433555][ T5773] usb 1-1: config 5 interface 75 has no altsetting 0 [ 607.937212][ T5773] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 607.946984][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.955886][ T5773] usb 1-1: Product: syz [ 608.012703][ T5773] usb 1-1: Manufacturer: syz [ 608.028970][ T5773] usb 1-1: SerialNumber: syz [ 609.240397][T11424] loop2: detected capacity change from 0 to 512 [ 609.267074][T11424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.443289][T11424] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.537865][T11432] netlink: 'syz.3.1442': attribute type 1 has an invalid length. [ 609.546084][T11432] (unnamed net_device) (uninitialized): option mode: invalid value (255) [ 609.738567][T11433] delete_channel: no stack [ 611.002292][ T5773] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 611.009355][ T5773] gspca_sunplus: reg_w_riv err -71 [ 611.019224][ T5773] sunplus: probe of 1-1:5.75 failed with error -71 [ 611.040416][ T5773] usb 1-1: USB disconnect, device number 17 [ 611.327650][T11440] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 611.347543][T11440] Quota error (device loop2): write_blk: dquota write failed [ 611.355483][T11440] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 611.365360][T11440] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1440: Failed to acquire dquot type 0 [ 612.927969][T11456] loop0: detected capacity change from 0 to 512 [ 613.031202][T11456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.120465][T11456] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.562770][T11456] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 613.577733][T11456] Quota error (device loop0): write_blk: dquota write failed [ 613.585279][T11456] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 613.595868][T11456] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1448: Failed to acquire dquot type 0 [ 613.815958][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.545855][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.555079][T11477] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 614.568711][T11477] (unnamed net_device) (uninitialized): option mode: invalid value (255) [ 615.158963][T11494] loop0: detected capacity change from 0 to 8 [ 615.362898][T11483] IPVS: dh: FWM 3 0x00000003 - no destination available [ 615.765070][T11496] SQUASHFS error: lzo decompression failed, data probably corrupt [ 615.772969][T11496] SQUASHFS error: Failed to read block 0x0: -5 [ 615.779330][T11496] SQUASHFS error: Failed to read block 0xff: -5 [ 615.785808][T11496] SQUASHFS error: lzo decompression failed, data probably corrupt [ 615.793709][T11496] SQUASHFS error: Failed to read block 0x0: -5 [ 615.803174][ T6414] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 615.810893][ T27] audit: type=1800 audit(1775212801.575:16): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1456" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 616.133185][ T6414] usb 2-1: Using ep0 maxpacket: 8 [ 616.159502][ T6414] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 616.205802][ T6414] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 616.225262][ T6414] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.235766][ T6414] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.249576][ T6414] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.259128][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.555775][ T6414] usb 2-1: usb_control_msg returned -32 [ 616.933905][ T6414] usbtmc 2-1:16.0: can't read capabilities [ 617.839503][T11513] loop0: detected capacity change from 0 to 128 [ 617.848786][T11513] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 617.879780][T11513] hpfs: filesystem error: improperly stopped [ 617.914184][T11513] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 617.921952][T11513] hpfs: You really don't want any checks? You are crazy... [ 617.942695][T11515] loop2: detected capacity change from 0 to 512 [ 617.952809][T11513] hpfs: hpfs_map_sector(): read error [ 617.961774][T11513] hpfs: code page support is disabled [ 617.971459][T11513] hpfs: hpfs_map_4sectors(): unaligned read [ 617.979133][T11513] hpfs: hpfs_map_4sectors(): unaligned read [ 618.073745][T11513] hpfs: filesystem error: unable to find root dir [ 618.278914][T11515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.308827][ T5806] usb 2-1: USB disconnect, device number 13 [ 618.318382][T11515] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.340446][T11513] hpfs: hpfs_map_4sectors(): unaligned read [ 619.058090][T11530] hpfs: hpfs_map_4sectors(): unaligned read [ 619.073279][T11530] hpfs: hpfs_map_sector(): read error [ 619.185636][T11532] tipc: Enabling of bearer rejected, failed to enable media [ 619.213828][T11532] syzkaller0: entered promiscuous mode [ 619.222153][T11533] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 619.228405][T11532] syzkaller0: entered allmulticast mode [ 619.237912][T11533] Quota error (device loop2): write_blk: dquota write failed [ 619.250441][T11533] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 619.260342][T11533] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1461: Failed to acquire dquot type 0 [ 619.709005][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 621.347787][T11550] IPVS: dh: FWM 3 0x00000003 - no destination available [ 621.467549][T11551] IPVS: dh: FWM 3 0x00000003 - no destination available [ 624.296910][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.444860][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.452167][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.639919][T11559] delete_channel: no stack [ 626.242597][T11564] tipc: Enabling of bearer rejected, failed to enable media [ 626.251938][T11564] syzkaller0: entered promiscuous mode [ 626.257955][T11564] syzkaller0: entered allmulticast mode [ 626.561436][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 627.092442][T11576] loop1: detected capacity change from 0 to 128 [ 627.178821][T11576] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 627.221128][T11576] hpfs: filesystem error: improperly stopped [ 627.227357][T11576] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 627.235658][T11576] hpfs: You really don't want any checks? You are crazy... [ 627.244694][T11576] hpfs: hpfs_map_sector(): read error [ 627.254492][T11576] hpfs: code page support is disabled [ 627.260026][T11576] hpfs: hpfs_map_4sectors(): unaligned read [ 627.267048][T11576] hpfs: hpfs_map_4sectors(): unaligned read [ 627.272967][T11576] hpfs: filesystem error: unable to find root dir [ 628.373553][T11576] hpfs: hpfs_map_4sectors(): unaligned read [ 628.379247][T11589] loop3: detected capacity change from 0 to 512 [ 628.789370][T11589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.856827][T11589] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.016200][T11596] hpfs: hpfs_map_4sectors(): unaligned read [ 629.022447][T11596] hpfs: hpfs_map_sector(): read error [ 629.228888][T11600] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 629.243775][T11600] Quota error (device loop3): write_blk: dquota write failed [ 629.251306][T11600] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 629.260259][T11598] IPVS: dh: FWM 3 0x00000003 - no destination available [ 629.261188][T11600] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1480: Failed to acquire dquot type 0 [ 630.892176][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.374897][T11615] tipc: Enabling of bearer rejected, failed to enable media [ 631.393086][T11615] syzkaller0: entered promiscuous mode [ 631.399913][T11615] syzkaller0: entered allmulticast mode [ 632.049041][T11604] IPVS: dh: FWM 3 0x00000003 - no destination available [ 634.879287][T11647] loop3: detected capacity change from 0 to 512 [ 634.965571][T11647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.000716][T11647] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.183748][T11665] IPVS: dh: FWM 3 0x00000003 - no destination available [ 637.633917][T11651] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 637.750283][T11680] tipc: Enabling of bearer rejected, failed to enable media [ 637.759906][T11680] syzkaller0: entered promiscuous mode [ 637.771823][T11680] syzkaller0: entered allmulticast mode [ 637.860623][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.973469][ T5806] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 638.173432][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 638.188357][ T5806] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 638.199854][ T5806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 638.210055][ T5806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.237623][ T5806] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.272734][ T5806] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.283033][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.508272][ T5806] usb 3-1: usb_control_msg returned -32 [ 638.515484][ T5806] usbtmc 3-1:16.0: can't read capabilities [ 639.170873][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 640.384537][T11717] loop0: detected capacity change from 0 to 512 [ 640.449563][T11717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.473235][T11717] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.533813][T11722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1508'. [ 640.613754][T11721] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 640.830008][ T6057] usb 3-1: USB disconnect, device number 13 [ 640.948498][T11725] tipc: Enabling of bearer rejected, failed to enable media [ 640.958839][T11725] syzkaller0: entered promiscuous mode [ 640.964783][T11725] syzkaller0: entered allmulticast mode [ 641.823434][ T6057] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 642.017749][ T6057] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 642.037756][ T6057] usb 4-1: config 5 has no interface number 0 [ 642.068416][ T6057] usb 4-1: config 5 interface 75 has no altsetting 0 [ 642.095831][ T6057] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 642.113628][ T6057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.121917][ T6057] usb 4-1: Product: syz [ 642.138487][ T6057] usb 4-1: Manufacturer: syz [ 642.159084][ T6057] usb 4-1: SerialNumber: syz [ 642.318658][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.130388][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 644.670492][T11767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1520'. [ 644.810961][ T6057] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 644.843850][ T6057] gspca_sunplus: reg_w_riv err -71 [ 644.849067][ T6057] sunplus: probe of 4-1:5.75 failed with error -71 [ 645.010364][ T6057] usb 4-1: USB disconnect, device number 12 [ 646.157387][T11786] loop1: detected capacity change from 0 to 512 [ 646.493008][T11786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.663666][T11786] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.773347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 647.983400][T11795] delete_channel: no stack [ 648.203897][T11782] sctp: failed to load transform for md5: -4 [ 650.993850][T11794] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 652.739268][T11819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1533'. [ 654.367671][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.550304][T11828] tipc: Enabling of bearer rejected, failed to enable media [ 654.561799][T11828] syzkaller0: entered promiscuous mode [ 654.568559][T11828] syzkaller0: entered allmulticast mode [ 654.594796][T11829] loop3: detected capacity change from 0 to 512 [ 654.950961][T11829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.984543][T11829] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.607607][T11842] IPVS: dh: FWM 3 0x00000003 - no destination available [ 655.696357][T11829] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 655.711066][T11829] Quota error (device loop3): write_blk: dquota write failed [ 655.719054][T11829] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 655.729448][T11829] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1537: Failed to acquire dquot type 0 [ 655.894414][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.479327][T11861] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1544'. [ 658.866057][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'. [ 659.596371][T11892] loop1: detected capacity change from 0 to 512 [ 659.643829][T11892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.664186][T11892] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.910684][T11902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1553'. [ 660.203693][T11892] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 660.218350][T11892] Quota error (device loop1): write_blk: dquota write failed [ 660.225824][T11892] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 660.235685][T11892] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1551: Failed to acquire dquot type 0 [ 660.380131][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.752738][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 662.767676][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 662.964686][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 663.094844][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 663.133508][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 663.170491][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 663.223423][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.243622][T11937] loop2: detected capacity change from 0 to 512 [ 663.250039][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.262381][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.301333][T11937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.337848][T11937] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.763579][ T23] usb 4-1: usb_control_msg returned -32 [ 663.816563][T11937] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 663.832280][T11937] Quota error (device loop2): write_blk: dquota write failed [ 663.840404][T11937] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 663.850538][T11937] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1563: Failed to acquire dquot type 0 [ 663.880365][ T23] usbtmc 4-1:16.0: can't read capabilities [ 663.890471][T11942] tipc: Enabling of bearer rejected, failed to enable media [ 663.980348][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.240369][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1565'. [ 665.593972][ T5773] usb 4-1: USB disconnect, device number 13 [ 666.404111][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 666.771398][T11996] loop3: detected capacity change from 0 to 512 [ 666.781857][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1575'. [ 666.831577][T11996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.918129][T11996] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.948309][T12001] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 666.975578][ T6057] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 667.072190][T12003] syzkaller0: entered promiscuous mode [ 667.083536][T12003] syzkaller0: entered allmulticast mode [ 667.175279][T11996] Quota error (device loop3): write_blk: dquota write failed [ 667.184407][T11996] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 667.194315][T11996] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1574: Failed to acquire dquot type 0 [ 667.304326][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.405209][ T6057] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 667.432675][ T6057] usb 3-1: config 5 has no interface number 0 [ 667.453629][ T6057] usb 3-1: config 5 interface 75 has no altsetting 0 [ 667.472201][ T6057] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 667.518262][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.551350][ T6057] usb 3-1: Product: syz [ 667.577334][ T6057] usb 3-1: Manufacturer: syz [ 667.599409][ T6057] usb 3-1: SerialNumber: syz [ 670.047761][ T6057] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 670.054319][ T6057] gspca_sunplus: reg_w_riv err -71 [ 670.059544][ T6057] sunplus: probe of 3-1:5.75 failed with error -71 [ 670.068962][ T6057] usb 3-1: USB disconnect, device number 14 [ 672.147271][T12045] loop2: detected capacity change from 0 to 512 [ 672.257970][T12045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.273669][T12045] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.460474][ T5806] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 672.496546][T12045] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 672.511255][T12045] Quota error (device loop2): write_blk: dquota write failed [ 672.518791][T12045] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 672.528675][T12045] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1586: Failed to acquire dquot type 0 [ 672.634929][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.710359][ T5806] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 672.751943][ T5806] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 672.783440][ T5806] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 672.792505][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.698689][T12056] loop3: detected capacity change from 0 to 32768 [ 673.706684][ T5806] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 673.734936][ T5806] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 673.778802][T12056] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 673.798026][ T5806] input: failed to attach handler kbd to device input6, error: -5 [ 673.907749][ T5806] usb 1-1: USB disconnect, device number 18 [ 673.956454][T12056] XFS (loop3): Ending clean mount [ 673.998745][T12056] XFS (loop3): Quotacheck needed: Please wait. [ 674.093240][T12056] XFS (loop3): Quotacheck: Done. [ 674.873667][ T6057] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 675.133526][ T6057] usb 2-1: config 5 has an invalid interface number: 75 but max is 0 [ 675.239348][ T6057] usb 2-1: config 5 has no interface number 0 [ 675.368948][ T6057] usb 2-1: config 5 interface 75 has no altsetting 0 [ 675.427844][ T6057] usb 2-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 675.471345][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.525588][ T6057] usb 2-1: Product: syz [ 675.529787][ T6057] usb 2-1: Manufacturer: syz [ 675.552936][ T6057] usb 2-1: SerialNumber: syz [ 675.738311][T12083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1594'. [ 678.903150][ T6057] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 678.914449][ T6057] gspca_sunplus: reg_w_riv err -71 [ 678.919648][ T6057] sunplus: probe of 2-1:5.75 failed with error -71 [ 678.945301][ T6057] usb 2-1: USB disconnect, device number 14 [ 679.495042][T12098] IPVS: dh: FWM 3 0x00000003 - no destination available [ 679.628921][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 680.452050][T12108] syzkaller0: entered promiscuous mode [ 680.469949][T12108] syzkaller0: entered allmulticast mode [ 681.816695][T12125] delete_channel: no stack [ 682.897332][T12128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1603'. [ 685.878910][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.885435][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.323655][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 686.564058][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 686.655547][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 686.683418][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 686.707906][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.766085][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.784033][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 686.793104][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.038982][ T9] usb 3-1: usb_control_msg returned -32 [ 687.054169][ T9] usbtmc 3-1:16.0: can't read capabilities [ 687.503809][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 689.173903][ T5773] usb 3-1: USB disconnect, device number 15 [ 689.935925][T12189] IPVS: dh: FWM 3 0x00000003 - no destination available [ 692.853623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 693.098945][ T6414] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 693.305288][ T6414] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 693.323353][ T6414] usb 3-1: config 5 has no interface number 0 [ 693.329472][ T6414] usb 3-1: config 5 interface 75 has no altsetting 0 [ 693.355830][ T6414] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 693.387768][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.403694][ T6414] usb 3-1: Product: syz [ 693.407884][ T6414] usb 3-1: Manufacturer: syz [ 693.423367][ T6414] usb 3-1: SerialNumber: syz [ 693.995160][T12214] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 694.024403][T12214] cramfs: wrong magic [ 695.382017][T12224] delete_channel: no stack [ 697.223662][T12233] IPVS: dh: FWM 3 0x00000003 - no destination available [ 697.735725][ T6414] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 697.742479][ T6414] gspca_sunplus: reg_w_riv err -71 [ 697.748092][ T6414] sunplus: probe of 3-1:5.75 failed with error -71 [ 697.757141][ T6414] usb 3-1: USB disconnect, device number 16 [ 698.988530][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 700.327605][T12271] delete_channel: no stack [ 701.304029][ T28] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 701.633508][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 701.644878][ T28] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 702.153323][T12277] IPVS: dh: FWM 3 0x00000003 - no destination available [ 702.195475][ T28] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 702.239973][ T28] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.268917][ T28] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.459283][ T28] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.624957][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.064315][ T28] usb 2-1: usb_control_msg returned -32 [ 703.069955][ T28] usbtmc 2-1:16.0: can't read capabilities [ 703.597972][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 703.742485][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 704.256817][T12310] syzkaller0: entered promiscuous mode [ 704.284789][T12310] syzkaller0: entered allmulticast mode [ 704.877338][ T6414] usb 2-1: USB disconnect, device number 15 [ 705.007017][T12316] IPVS: dh: FWM 3 0x00000003 - no destination available [ 706.384712][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 707.307303][T12345] syzkaller0: entered promiscuous mode [ 707.312888][T12345] syzkaller0: entered allmulticast mode [ 707.893383][ T5773] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 708.103504][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 708.112978][ T5773] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 708.143703][ T5773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 708.163354][ T5773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.183410][ T5773] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.203339][ T5773] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.233743][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.473501][ T5773] usb 4-1: usb_control_msg returned -32 [ 708.479131][ T5773] usbtmc 4-1:16.0: can't read capabilities [ 708.744867][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1663'. [ 708.835125][T12366] IPVS: dh: FWM 3 0x00000003 - no destination available [ 710.626612][ T6414] usb 4-1: USB disconnect, device number 14 [ 711.726571][T12389] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1670'. [ 713.883390][ T6414] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 715.441481][ T6414] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 715.453957][ T6414] usb 3-1: config 5 has no interface number 0 [ 715.460071][ T6414] usb 3-1: config 5 interface 75 has no altsetting 0 [ 715.486146][ T6414] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 715.503418][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.511432][ T6414] usb 3-1: Product: syz [ 715.517263][ T6414] usb 3-1: Manufacturer: syz [ 715.521879][ T6414] usb 3-1: SerialNumber: syz [ 715.540231][T12416] IPVS: dh: FWM 3 0x00000003 - no destination available [ 718.588999][ T6414] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 718.603414][ T6414] gspca_sunplus: reg_w_riv err -71 [ 718.608620][ T6414] sunplus: probe of 3-1:5.75 failed with error -71 [ 718.680626][ T6414] usb 3-1: USB disconnect, device number 17 [ 718.698581][T12434] IPVS: dh: FWM 3 0x00000003 - no destination available [ 719.870206][T12437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1680'. [ 720.663885][T12444] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 720.670832][T12444] cramfs: wrong magic [ 721.368991][T12460] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 721.397308][T12460] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.486133][T12464] IPVS: dh: FWM 3 0x00000003 - no destination available [ 721.963509][ T6414] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 722.165272][ T6414] usb 2-1: config 5 has an invalid interface number: 75 but max is 0 [ 722.198743][ T6414] usb 2-1: config 5 has no interface number 0 [ 722.223390][ T6414] usb 2-1: config 5 interface 75 has no altsetting 0 [ 722.265656][ T6414] usb 2-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 722.295450][ T6414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.323473][ T6414] usb 2-1: Product: syz [ 722.335109][ T6414] usb 2-1: Manufacturer: syz [ 722.354421][ T6414] usb 2-1: SerialNumber: syz [ 725.381712][T12482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1692'. [ 725.564072][ T6414] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 725.571114][ T6414] gspca_sunplus: reg_w_riv err -71 [ 725.577151][ T6414] sunplus: probe of 2-1:5.75 failed with error -71 [ 725.585961][ T6414] usb 2-1: USB disconnect, device number 16 [ 725.878655][T12494] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 725.908735][T12494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.290493][T12497] loop0: detected capacity change from 0 to 32768 [ 726.543172][T12497] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 726.888359][T12497] XFS (loop0): Ending clean mount [ 726.976307][T12497] XFS (loop0): Quotacheck needed: Please wait. [ 727.058748][T12497] XFS (loop0): Quotacheck: Done. [ 727.234563][T12511] IPVS: dh: FWM 3 0x00000003 - no destination available [ 727.519967][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 729.273450][ T6414] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 729.432381][T12530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1703'. [ 729.488861][ T6414] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 729.556093][ T6414] usb 1-1: config 5 has no interface number 0 [ 729.622043][ T6414] usb 1-1: config 5 interface 75 has no altsetting 0 [ 729.740952][ T6414] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 729.857024][ T6414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.994171][ T6414] usb 1-1: Product: syz [ 731.002952][ T6414] usb 1-1: Manufacturer: syz [ 731.008281][ T6414] usb 1-1: SerialNumber: syz [ 731.244331][T12536] IPVS: dh: FWM 3 0x00000003 - no destination available [ 731.274042][T12535] syzkaller0: entered promiscuous mode [ 731.283352][T12535] syzkaller0: entered allmulticast mode [ 733.267508][ T6414] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 733.282731][ T6414] gspca_sunplus: reg_w_riv err -71 [ 733.300839][ T6414] sunplus: probe of 1-1:5.75 failed with error -71 [ 733.356821][ T6414] usb 1-1: USB disconnect, device number 19 [ 734.020581][T12558] netlink: 'syz.2.1710': attribute type 6 has an invalid length. [ 734.041657][T12558] netlink: 'syz.2.1710': attribute type 6 has an invalid length. [ 734.186052][T12566] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 734.429301][T12566] 8021q: adding VLAN 0 to HW filter on device bond9 [ 734.622850][T12576] syzkaller0: entered promiscuous mode [ 734.653464][T12576] syzkaller0: entered allmulticast mode [ 734.683902][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 734.794933][T12587] IPVS: dh: FWM 3 0x00000003 - no destination available [ 735.834134][ T6414] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 736.015020][ T6414] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 736.035590][ T6414] usb 3-1: config 5 has no interface number 0 [ 736.041708][ T6414] usb 3-1: config 5 interface 75 has no altsetting 0 [ 736.067573][ T6414] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 736.079394][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.096704][ T6414] usb 3-1: Product: syz [ 736.105661][ T6414] usb 3-1: Manufacturer: syz [ 736.110277][ T6414] usb 3-1: SerialNumber: syz [ 737.739283][T12606] process 'syz.3.1724' launched '/dev/fd/9' with NULL argv: empty string added [ 737.771895][T12610] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 737.853088][T12610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 738.362946][T12622] IPVS: dh: FWM 3 0x00000003 - no destination available [ 739.065659][ T6414] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 739.072259][ T6414] gspca_sunplus: reg_w_riv err -71 [ 739.077626][ T6414] sunplus: probe of 3-1:5.75 failed with error -71 [ 739.089012][ T6414] usb 3-1: USB disconnect, device number 18 [ 739.200020][T12629] syzkaller0: entered promiscuous mode [ 739.208350][T12629] syzkaller0: entered allmulticast mode [ 739.688286][T12642] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 739.767145][T12642] 8021q: adding VLAN 0 to HW filter on device bond10 [ 739.971153][T12645] IPVS: dh: FWM 3 0x00000003 - no destination available [ 741.643694][ T28] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 741.893121][ T28] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 741.901930][ T28] usb 4-1: config 5 has no interface number 0 [ 741.911805][ T28] usb 4-1: config 5 interface 75 has no altsetting 0 [ 741.921274][ T28] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 741.945344][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.980153][ T28] usb 4-1: Product: syz [ 741.984888][ T28] usb 4-1: Manufacturer: syz [ 741.990218][ T28] usb 4-1: SerialNumber: syz [ 741.995175][ T5773] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 742.155913][T12673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 742.187366][T12673] kvm: kvm [12672]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 742.206453][T12673] kvm: kvm [12672]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 742.325675][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 742.338390][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 742.383902][ T5773] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 743.239862][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.248463][ T5773] usb 1-1: Product: syz [ 743.339776][ T5773] usb 1-1: Manufacturer: syz [ 743.463460][ T5773] usb 1-1: SerialNumber: syz [ 743.488707][ T5773] usb 1-1: config 0 descriptor?? [ 743.531895][T12678] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 743.540073][ T5773] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 743.563127][ T5773] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 743.571955][T12678] 8021q: adding VLAN 0 to HW filter on device bond11 [ 743.771355][ T5773] usb 1-1: USB disconnect, device number 20 [ 744.669309][ T28] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 744.677079][ T28] gspca_sunplus: reg_w_riv err -71 [ 744.682294][ T28] sunplus: probe of 4-1:5.75 failed with error -71 [ 744.695600][ T28] usb 4-1: USB disconnect, device number 15 [ 744.844304][T12697] IPVS: dh: FWM 3 0x00000003 - no destination available [ 746.152035][T12713] syzkaller0: entered promiscuous mode [ 746.173431][T12713] syzkaller0: entered allmulticast mode [ 746.203760][T12716] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 746.277064][T12716] 8021q: adding VLAN 0 to HW filter on device bond9 [ 747.319261][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.325909][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.450376][T12687] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 747.658802][T12687] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 747.691852][T12687] usb 3-1: config 5 has no interface number 0 [ 747.713853][T12687] usb 3-1: config 5 interface 75 has no altsetting 0 [ 747.733573][T12687] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 747.843592][T12687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.854328][T12687] usb 3-1: Product: syz [ 747.859571][T12687] usb 3-1: Manufacturer: syz [ 747.865560][T12687] usb 3-1: SerialNumber: syz [ 750.076051][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 750.088767][T12750] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 750.363023][T12687] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 750.384354][T12687] gspca_sunplus: reg_w_riv err -71 [ 750.389560][T12687] sunplus: probe of 3-1:5.75 failed with error -71 [ 750.428042][T12687] usb 3-1: USB disconnect, device number 19 [ 751.474694][T12755] syzkaller0: entered promiscuous mode [ 751.491796][T12755] syzkaller0: entered allmulticast mode [ 751.793823][T12762] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 751.801828][T12762] cramfs: wrong magic [ 754.085069][T12780] delete_channel: no stack [ 755.496081][T12792] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 755.503937][T12792] cramfs: wrong magic [ 756.160111][ T5773] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 757.241966][ T5773] usb 3-1: device descriptor read/all, error -71 [ 759.119670][T12816] IPVS: dh: FWM 3 0x00000003 - no destination available [ 759.179297][T12817] delete_channel: no stack [ 759.561254][T12822] tipc: Enabled bearer , priority 0 [ 759.615588][T12822] tipc: Resetting bearer [ 759.707915][T12821] tipc: Disabling bearer [ 763.283471][ T6057] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 763.823783][ T6057] usb 3-1: config 5 has an invalid interface number: 75 but max is 0 [ 763.831922][ T6057] usb 3-1: config 5 has no interface number 0 [ 763.853571][ T6057] usb 3-1: config 5 interface 75 has no altsetting 0 [ 763.867077][ T6057] usb 3-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 763.884011][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.898343][ T6057] usb 3-1: Product: syz [ 763.902569][ T6057] usb 3-1: Manufacturer: syz [ 763.923506][ T6057] usb 3-1: SerialNumber: syz [ 764.533327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 764.593272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 764.743284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 764.793286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 765.119899][T12849] delete_channel: no stack [ 765.466845][T12857] mmap: syz.1.1795 (12857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 767.319821][ T6057] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 767.336685][ T6057] gspca_sunplus: reg_w_riv err -71 [ 767.341913][ T6057] sunplus: probe of 3-1:5.75 failed with error -71 [ 767.389894][ T6057] usb 3-1: USB disconnect, device number 22 [ 769.504538][T12878] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 769.511560][T12878] cramfs: wrong magic [ 771.630361][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 774.333666][ T5773] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 774.733390][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 774.915635][ T8] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 774.925016][ T8] usb 4-1: config 5 has no interface number 0 [ 774.931128][ T8] usb 4-1: config 5 interface 75 has no altsetting 0 [ 774.948554][ T8] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 774.960403][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.971013][ T8] usb 4-1: Product: syz [ 774.977555][ T8] usb 4-1: Manufacturer: syz [ 774.986118][ T8] usb 4-1: SerialNumber: syz [ 775.503329][ T5773] usb 2-1: Using ep0 maxpacket: 32 [ 775.511709][ T5773] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 775.520145][ T5773] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 775.925108][T12905] delete_channel: no stack [ 776.126488][ T5773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 776.135820][ T5773] usb 2-1: config 1 has no interface number 0 [ 776.142042][ T5773] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.153075][ T5773] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 776.176849][ T5773] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 776.221099][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.257374][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 776.306833][ T5773] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 776.920879][T12917] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 776.928225][T12917] cramfs: wrong magic [ 777.090225][ T5773] snd_usb_pod 2-1:1.1: set_interface failed [ 777.121208][ T5773] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 777.159817][ T5773] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 777.607070][ T5773] usb 2-1: USB disconnect, device number 17 [ 778.847564][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 778.864285][ T8] gspca_sunplus: reg_w_riv err -71 [ 778.874132][ T8] sunplus: probe of 4-1:5.75 failed with error -71 [ 779.006485][ T8] usb 4-1: USB disconnect, device number 16 [ 779.617900][ T5805] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 779.814642][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 779.826548][ T5805] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 779.835782][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.889561][ T5805] usb 3-1: config 0 descriptor?? [ 779.905556][T12924] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 780.453395][ T5805] usbhid 3-1:0.0: can't add hid device: -71 [ 780.473432][ T5805] usbhid: probe of 3-1:0.0 failed with error -71 [ 780.482823][ T5805] usb 3-1: USB disconnect, device number 23 [ 780.494203][ T6414] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 781.239176][ T6414] usb 2-1: Using ep0 maxpacket: 8 [ 782.592707][ T6414] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 782.613470][ T6414] usb 2-1: config 179 has no interface number 0 [ 782.619831][ T6414] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 782.645545][ T6414] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 782.665611][ T6414] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 782.685443][ T6414] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 782.715862][ T6414] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 782.742799][ T6414] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 782.880116][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.332155][T12946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 783.332355][ T6414] usb 2-1: can't set config #179, error -71 [ 783.372309][ T6414] usb 2-1: USB disconnect, device number 18 [ 783.641932][T12955] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 783.649068][T12955] cramfs: wrong magic [ 784.333421][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 784.513419][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 784.519976][ T8] usb 4-1: config 9 has an invalid interface number: 221 but max is 1 [ 784.545382][ T8] usb 4-1: config 9 has an invalid interface number: 221 but max is 1 [ 784.583013][ T8] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 784.596445][T12956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 784.618023][ T8] usb 4-1: config 9 has no interface number 0 [ 784.624458][ T8] usb 4-1: config 9 interface 221 altsetting 64 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 784.646122][ T8] usb 4-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 784.657379][ T8] usb 4-1: config 9 interface 221 has no altsetting 0 [ 784.678069][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 784.691497][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.701948][ T8] usb 4-1: Product: syz [ 784.718690][ T8] usb 4-1: Manufacturer: syz [ 784.728358][ T8] usb 4-1: SerialNumber: syz [ 786.116735][T12964] delete_channel: no stack [ 786.798464][ T8] usb 4-1: USB disconnect, device number 17 [ 787.170703][ T7569] udevd[7569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.615275][ T6057] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 788.823335][ T6057] usb 3-1: Using ep0 maxpacket: 32 [ 788.831609][ T6057] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 788.850470][ T6057] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 788.861002][ T6057] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 788.883291][ T6057] usb 3-1: config 1 has no interface number 0 [ 788.894917][ T6057] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.920432][ T6057] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 788.947017][ T6057] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 788.966415][ T6057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.055094][ T6057] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 789.255582][T12984] IPVS: dh: FWM 3 0x00000003 - no destination available [ 789.498253][T12971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.518083][T12971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.579776][ T6057] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 790.466372][ T5773] usb 3-1: USB disconnect, device number 24 [ 790.489417][T12995] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 790.499747][T12995] cramfs: wrong magic [ 790.639914][ T6057] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 791.138608][ T5773] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 791.509627][T12999] delete_channel: no stack [ 792.792708][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 793.028146][ T8] usb 2-1: config 5 has an invalid interface number: 75 but max is 0 [ 793.043181][ T8] usb 2-1: config 5 has no interface number 0 [ 793.053298][ T8] usb 2-1: config 5 interface 75 has no altsetting 0 [ 793.075260][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 793.096070][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.108755][ T8] usb 2-1: Product: syz [ 793.112972][ T8] usb 2-1: Manufacturer: syz [ 793.120180][ T8] usb 2-1: SerialNumber: syz [ 793.264169][ T6414] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 793.350858][T13022] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 793.357993][T13022] cramfs: wrong magic [ 794.633202][ T6414] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 794.650644][ T6414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.668554][ T6414] usb 1-1: config 0 descriptor?? [ 794.891287][ T6414] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 794.905345][ T6414] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 795.011252][T13033] IPVS: dh: FWM 3 0x00000003 - no destination available [ 795.155367][ T6414] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 795.166149][ T6414] [drm] Initialized udl on minor 2 [ 795.303777][ T6414] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 795.332573][ T6414] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 795.367232][ T6414] usb 1-1: USB disconnect, device number 21 [ 795.373711][ T6057] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 795.385479][ T6057] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 795.534860][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 795.547465][ T8] gspca_sunplus: reg_w_riv err -71 [ 795.552711][ T8] sunplus: probe of 2-1:5.75 failed with error -71 [ 795.569103][ T8] usb 2-1: USB disconnect, device number 19 [ 796.044878][T13042] IPVS: dh: FWM 3 0x00000003 - no destination available [ 797.988741][T13061] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 797.995884][T13061] cramfs: wrong magic [ 798.156252][T13060] delete_channel: no stack [ 799.350145][T13071] tipc: Enabled bearer , priority 0 [ 799.358690][T13071] syzkaller0: entered promiscuous mode [ 799.364650][T13071] syzkaller0: entered allmulticast mode [ 799.377735][T13071] tipc: Resetting bearer [ 799.390083][T13070] tipc: Resetting bearer [ 799.442317][T13072] IPVS: dh: FWM 3 0x00000003 - no destination available [ 799.484370][T13070] tipc: Disabling bearer [ 801.395030][T13091] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 802.710626][T13091] 8021q: adding VLAN 0 to HW filter on device bond10 [ 803.326558][T13104] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 804.300984][T13109] IPVS: dh: FWM 3 0x00000003 - no destination available [ 804.309053][T13108] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 804.318276][T13108] cramfs: wrong magic [ 804.841421][T13114] tipc: Enabled bearer , priority 0 [ 804.860529][T13114] syzkaller0: entered promiscuous mode [ 804.870551][T13114] syzkaller0: entered allmulticast mode [ 805.036661][T13114] tipc: Resetting bearer [ 805.091477][T13113] tipc: Resetting bearer [ 805.689644][T13113] tipc: Disabling bearer [ 805.781596][T13122] delete_channel: no stack [ 807.498770][T13127] dvmrp1: entered allmulticast mode [ 807.550939][T13125] dvmrp1: left allmulticast mode [ 807.889833][T13142] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 808.016942][T13142] 8021q: adding VLAN 0 to HW filter on device bond9 [ 808.258215][T13149] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 808.734553][T13149] veth0_vlan: left promiscuous mode [ 808.756837][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.766712][T13149] veth0_vlan: entered promiscuous mode [ 808.772819][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.827528][T13149] team0: Device veth0_vlan failed to register rx_handler [ 809.065071][T13155] loop0: detected capacity change from 0 to 32768 [ 809.129373][T13155] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 809.327222][T13165] IPVS: dh: FWM 3 0x00000003 - no destination available [ 809.489696][T13155] XFS (loop0): Ending clean mount [ 809.498553][T13155] XFS (loop0): Quotacheck needed: Please wait. [ 809.674999][T13155] XFS (loop0): Quotacheck: Done. [ 811.643551][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 811.730775][T13180] delete_channel: no stack [ 812.394172][T13190] Bluetooth: MGMT ver 1.22 [ 812.868626][T13198] IPVS: dh: FWM 3 0x00000003 - no destination available [ 816.077155][T13219] lo speed is unknown, defaulting to 1000 [ 816.085334][T13219] lo speed is unknown, defaulting to 1000 [ 816.116485][T13220] delete_channel: no stack [ 816.135291][T13219] lo speed is unknown, defaulting to 1000 [ 816.181207][T13219] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 816.251162][T13219] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 816.629173][T13219] lo speed is unknown, defaulting to 1000 [ 816.637993][T13219] lo speed is unknown, defaulting to 1000 [ 816.644818][T13219] lo speed is unknown, defaulting to 1000 [ 816.651262][T13219] lo speed is unknown, defaulting to 1000 [ 816.802633][T13222] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 816.810784][T13222] veth0_vlan: left promiscuous mode [ 816.819109][T13222] veth0_vlan: entered promiscuous mode [ 816.825777][T13222] team0: Device veth0_vlan failed to register rx_handler [ 818.873671][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 819.737149][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.854212][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 820.437955][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.458445][ T8] usb 2-1: config 0 descriptor?? [ 820.469605][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 820.882640][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 820.896273][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 820.924242][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 820.950027][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 820.990714][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 821.009353][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 821.017047][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 821.048342][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 821.267983][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 821.478361][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 821.491954][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 821.522139][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 821.585385][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 821.602527][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 821.624086][ T8] pwc: Registered as video103. [ 821.810175][T13266] IPVS: dh: FWM 3 0x00000003 - no destination available [ 821.849897][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 822.059699][ T8] usb 2-1: USB disconnect, device number 20 [ 822.675166][T13283] tipc: Enabled bearer , priority 0 [ 822.682979][T13283] syzkaller0: entered promiscuous mode [ 822.694073][T13283] syzkaller0: entered allmulticast mode [ 822.740564][T13285] tipc: Resetting bearer [ 823.671117][T13282] tipc: Resetting bearer [ 823.731880][T13282] tipc: Disabling bearer [ 824.045391][T13290] loop2: detected capacity change from 0 to 32768 [ 824.126188][T13290] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 824.298015][T13290] XFS (loop2): Ending clean mount [ 824.314316][T13290] XFS (loop2): Quotacheck needed: Please wait. [ 824.492504][T13290] XFS (loop2): Quotacheck: Done. [ 825.147798][ T5762] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 825.605206][T13308] IPVS: dh: FWM 3 0x00000003 - no destination available [ 827.658355][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 827.883605][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 827.899897][ T8] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 827.914493][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.931341][ T8] usb 3-1: Product: syz [ 827.939897][ T8] usb 3-1: Manufacturer: syz [ 828.061216][ T8] usb 3-1: SerialNumber: syz [ 828.095496][ T8] usb 3-1: config 0 descriptor?? [ 828.105080][ T8] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 828.119173][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 828.273276][ T8] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 828.944564][T13343] IPVS: dh: FWM 3 0x00000003 - no destination available [ 829.297081][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 829.302871][ T8] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 829.490800][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.687436][ T8] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 829.717288][ T8] usb 3-1: media controller created [ 831.286705][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.335786][ T8] usb 3-1: selecting invalid altsetting 3 [ 831.352402][ T8] ttusb2: set interface to alts=3 failed [ 832.771626][ T8] DVB: Unable to find symbol tda10086_attach() [ 832.787874][ T8] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 833.053096][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 833.262017][ T8] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 833.333479][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 833.381982][ T8] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 833.423968][ T8] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 833.457204][ T8] usb 3-1: USB disconnect, device number 25 [ 833.525169][ T8] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 834.466046][T13385] IPVS: dh: FWM 3 0x00000003 - no destination available [ 841.605921][T13428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 842.931313][T13426] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1940'. [ 843.343569][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 843.877314][ T9] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 843.889846][ T9] usb 1-1: config 5 has no interface number 0 [ 844.008265][ T9] usb 1-1: config 5 interface 75 has no altsetting 0 [ 844.032070][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 844.512683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.992182][ T9] usb 1-1: Product: syz [ 845.145300][ T9] usb 1-1: Manufacturer: syz [ 845.200603][ T9] usb 1-1: SerialNumber: syz [ 845.395293][T13457] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 846.819631][T13475] ªªªªªª: renamed from vlan0 [ 847.752036][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 847.815709][ T9] gspca_sunplus: reg_w_riv err -71 [ 847.820888][ T9] sunplus: probe of 1-1:5.75 failed with error -71 [ 847.954036][ T9] usb 1-1: USB disconnect, device number 22 [ 848.342808][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 848.359039][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 848.368307][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 848.377968][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 848.386981][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 848.511670][T13486] loop5: detected capacity change from 0 to 7 [ 848.543700][T13486] Dev loop5: unable to read RDB block 7 [ 848.557807][T13486] loop5: AHDI p1 p2 p3 [ 848.567983][T13486] loop5: partition table partially beyond EOD, truncated [ 848.583670][T13486] loop5: p1 start 1818582900 is beyond EOD, truncated [ 848.600881][T13486] loop5: p3 start 335544320 is beyond EOD, truncated [ 849.765303][T13502] IPVS: dh: FWM 3 0x00000003 - no destination available [ 850.239807][T13507] tipc: Enabled bearer , priority 0 [ 850.264566][T13507] syzkaller0: entered promiscuous mode [ 850.331887][T13507] syzkaller0: entered allmulticast mode [ 850.354339][T13507] tipc: Resetting bearer [ 850.363034][T13503] tipc: Resetting bearer [ 850.423635][T13503] tipc: Disabling bearer [ 852.919053][T13532] IPVS: dh: FWM 3 0x00000003 - no destination available [ 854.744565][T13544] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 854.752375][T13544] cramfs: wrong magic [ 854.951283][T13547] tipc: Enabled bearer , priority 0 [ 854.983651][T13547] syzkaller0: entered promiscuous mode [ 855.001141][T13547] syzkaller0: entered allmulticast mode [ 855.138675][T13547] tipc: Resetting bearer [ 856.809721][T13553] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 856.816761][T13553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 856.850588][T13553] vhci_hcd vhci_hcd.0: Device attached [ 856.865967][T13546] tipc: Resetting bearer [ 857.089896][T13555] vhci_hcd: connection closed [ 857.201859][ T49] vhci_hcd: stop threads [ 857.309683][T13546] tipc: Disabling bearer [ 857.324239][ T49] vhci_hcd: release socket [ 857.334219][ T6414] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 857.384898][ T49] vhci_hcd: disconnect device [ 857.620239][ T5773] tipc: Node number set to 535987565 [ 858.051942][T13570] IPVS: dh: FWM 3 0x00000003 - no destination available [ 858.510832][T13563] binder: 13561:13563 ioctl c0306201 0 returned -14 [ 859.214495][T13582] tmpfs: Unknown parameter 'ÿÿ' [ 859.431618][T13581] tty tty2: ldisc open failed (-12), clearing slot 1 [ 861.151258][T13598] IPVS: dh: FWM 3 0x00000003 - no destination available [ 862.051435][T13605] can0: slcan on ttyS3. [ 862.513421][ T6414] vhci_hcd: vhci_device speed not set [ 863.413859][T13602] can0 (unregistered): slcan off ttyS3. [ 867.203067][T13645] tipc: Enabled bearer , priority 0 [ 867.234968][T13645] syzkaller0: entered promiscuous mode [ 867.257470][T13645] syzkaller0: entered allmulticast mode [ 867.306735][T13645] tipc: Resetting bearer [ 868.093663][T13644] tipc: Resetting bearer [ 868.204700][T13644] tipc: Disabling bearer [ 870.215018][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.221469][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.235614][T13684] netlink: 'syz.2.2003': attribute type 10 has an invalid length. [ 870.456598][T13684] veth0_vlan: left promiscuous mode [ 870.521533][T13684] veth0_vlan: entered promiscuous mode [ 870.689382][T13690] IPVS: dh: FWM 3 0x00000003 - no destination available [ 870.701427][T13684] team0: Device veth0_vlan failed to register rx_handler [ 871.170221][T13697] IPVS: dh: FWM 3 0x00000003 - no destination available [ 872.033406][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 872.040628][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 874.242146][T13708] tipc: Enabled bearer , priority 0 [ 874.250519][T13708] syzkaller0: entered promiscuous mode [ 874.256209][T13708] syzkaller0: entered allmulticast mode [ 874.323040][T13708] tipc: Resetting bearer [ 874.402872][T13707] tipc: Resetting bearer [ 874.498307][T13707] tipc: Disabling bearer [ 874.660705][T13711] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 875.727832][T13720] delete_channel: no stack [ 876.266205][ T28] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 876.455260][ T28] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 876.470538][ T28] usb 1-1: config 5 has no interface number 0 [ 876.477321][ T28] usb 1-1: config 5 interface 75 has no altsetting 0 [ 876.491581][ T28] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 876.501481][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.520055][ T28] usb 1-1: Product: syz [ 876.526865][ T28] usb 1-1: Manufacturer: syz [ 876.531510][ T28] usb 1-1: SerialNumber: syz [ 876.673393][ T5773] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 878.211566][ T5773] usb 2-1: Using ep0 maxpacket: 32 [ 878.243136][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.351081][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.373977][ T5773] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 878.383141][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.496579][ T28] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 878.505772][ T28] gspca_sunplus: reg_w_riv err -71 [ 878.510943][ T28] sunplus: probe of 1-1:5.75 failed with error -71 [ 878.517888][ T5773] usb 2-1: config 0 descriptor?? [ 878.533663][ T28] usb 1-1: USB disconnect, device number 23 [ 878.964956][ T5773] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 878.991372][ T5773] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 879.149017][ T5773] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 879.351963][T13736] IPVS: dh: FWM 3 0x00000003 - no destination available [ 879.364400][ T5773] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 880.493352][ T5773] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup [ 880.514741][ T5773] ft260 0003:0403:6030.0004: failed to retrieve status: -71 [ 881.503463][ T5773] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 882.513525][ T5773] usb 2-1: USB disconnect, device number 21 [ 883.811822][T13749] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20005 [ 884.144380][T13754] IPVS: dh: FWM 3 0x00000003 - no destination available [ 887.881618][T13773] tipc: Enabled bearer , priority 0 [ 888.088529][T13773] tipc: Resetting bearer [ 888.224323][T13772] tipc: Disabling bearer [ 888.933557][ T28] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 889.155141][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 889.196339][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.217032][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 889.240730][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 889.261015][ T28] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 889.366879][T13792] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.420122][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.469224][ T28] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 889.478389][ T28] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 889.487180][ T28] usb 3-1: Manufacturer: syz [ 889.509468][ T28] usb 3-1: config 0 descriptor?? [ 889.553542][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 890.520219][T13795] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2030'. [ 890.766848][ T8] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 890.873971][ T8] usb 1-1: config 5 has no interface number 0 [ 890.943971][ T8] usb 1-1: config 5 interface 75 has no altsetting 0 [ 891.032011][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 891.123833][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.162814][ T8] usb 1-1: Product: syz [ 891.171021][ T8] usb 1-1: Manufacturer: syz [ 891.965850][ T8] usb 1-1: SerialNumber: syz [ 892.025702][ T28] rc_core: IR keymap rc-hauppauge not found [ 892.036151][ T28] Registered IR keymap rc-empty [ 892.041696][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.075120][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.136813][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 892.182702][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 892.326980][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.413720][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.463444][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.513591][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.543991][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.573503][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.603477][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.633467][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.663384][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.693457][ T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.736685][ T28] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 892.753816][ T28] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 892.769171][ T28] usb 3-1: USB disconnect, device number 26 [ 893.577662][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 893.594294][ T8] gspca_sunplus: reg_w_riv err -71 [ 893.599533][ T8] sunplus: probe of 1-1:5.75 failed with error -71 [ 893.628964][ T8] usb 1-1: USB disconnect, device number 24 [ 893.708873][T13816] tipc: Enabled bearer , priority 0 [ 893.737717][T13816] syzkaller0: entered promiscuous mode [ 893.763342][T13816] syzkaller0: entered allmulticast mode [ 893.837872][T13816] tipc: Resetting bearer [ 893.857687][T13815] tipc: Resetting bearer [ 893.893990][T13815] tipc: Disabling bearer [ 895.479607][T13839] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 895.487345][T13839] cramfs: wrong magic [ 895.683335][T13029] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 895.793657][T12687] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 895.876530][T13029] usb 4-1: config 5 has an invalid interface number: 75 but max is 0 [ 895.884814][T13029] usb 4-1: config 5 has no interface number 0 [ 895.890952][T13029] usb 4-1: config 5 interface 75 has no altsetting 0 [ 895.900003][T13029] usb 4-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 895.920870][T13029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.933825][T13029] usb 4-1: Product: syz [ 895.938038][T13029] usb 4-1: Manufacturer: syz [ 895.963429][T13029] usb 4-1: SerialNumber: syz [ 895.985303][T12687] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.000982][T12687] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.011141][T12687] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.026451][T12687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.060896][T13841] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 896.097295][T12687] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 896.724895][T13859] ubi31: attaching mtd0 [ 896.750396][T13859] ubi31: scanning is finished [ 897.011998][T13859] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 897.019923][T13859] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 897.027367][T13859] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 897.034574][T13859] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 897.042471][T13859] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 897.050092][T13859] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 897.058318][T13859] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1463516297 [ 897.069296][T13859] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 897.082129][T13861] ubi31: background thread "ubi_bgt31d" started, PID 13861 [ 898.619259][ T5773] usb 2-1: USB disconnect, device number 22 [ 898.746550][T13029] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 898.759230][T13029] gspca_sunplus: reg_w_riv err -71 [ 898.764536][T13029] sunplus: probe of 4-1:5.75 failed with error -71 [ 898.774994][T13029] usb 4-1: USB disconnect, device number 18 [ 900.873382][ T5773] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 901.083843][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 901.089570][T13892] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.128478][ T5773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.153760][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.157120][T13893] batman_adv: batadv0: Adding interface: dummy0 [ 901.164912][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 901.172566][T13893] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.180833][ T5773] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 901.180863][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.182391][ T5773] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 901.215990][T13893] batman_adv: batadv0: Interface activated: dummy0 [ 901.263959][ T5773] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 901.286171][T13896] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 901.293015][ T5773] usb 1-1: Manufacturer: syz [ 901.325211][T13896] cramfs: wrong magic [ 901.455309][ T5773] usb 1-1: config 0 descriptor?? [ 901.691551][T13894] batadv0: mtu less than device minimum [ 901.746110][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.759175][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.771613][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.784063][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.796493][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.808889][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.821326][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.833776][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.846292][T13894] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.913338][ T5773] rc_core: IR keymap rc-hauppauge not found [ 901.919341][ T5773] Registered IR keymap rc-empty [ 901.933398][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 901.976743][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 902.040848][ T5773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 902.060029][T13902] input: syz1 as /devices/virtual/input/input10 [ 902.246384][ T5773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 902.526284][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 902.539608][ C1] mceusb 1-1:0.0: long-range (0x75) receiver active [ 902.684363][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 903.973489][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.011329][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.046195][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.083391][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.127517][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.175477][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.225397][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.256334][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.303375][ T5773] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.354689][ T5773] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version b6 [ 904.368765][ T5773] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x75 active) [ 904.418521][ T5773] usb 1-1: USB disconnect, device number 25 [ 904.483589][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 904.693412][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 904.723985][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.755856][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 904.785275][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 904.804801][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.851791][ T9] usb 2-1: config 0 descriptor?? [ 905.292269][ T9] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 905.352476][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 905.382839][ T9] HID 045e:07da: Invalid code 768 type 1 [ 905.411343][ T9] HID 045e:07da: Invalid code 769 type 1 [ 905.443718][ T9] HID 045e:07da: Invalid code 770 type 1 [ 905.489702][ T9] HID 045e:07da: Invalid code 771 type 1 [ 905.516380][ T9] HID 045e:07da: Invalid code 772 type 1 [ 905.535165][ T9] HID 045e:07da: Invalid code 773 type 1 [ 905.549109][ T9] HID 045e:07da: Invalid code 774 type 1 [ 905.562110][ T9] HID 045e:07da: Invalid code 775 type 1 [ 905.573820][ T9] HID 045e:07da: Invalid code 776 type 1 [ 905.644771][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input11 [ 905.824247][ T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 905.893680][ T9] usb 2-1: USB disconnect, device number 23 [ 906.062024][T13928] fido_id[13928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 906.239469][T13929] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 906.239469][T13929] program syz.2.2070 not setting count and/or reply_len properly [ 906.903659][T13938] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 906.910692][T13938] cramfs: wrong magic [ 908.213468][ T28] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 908.413392][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 908.432890][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.448251][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 908.464330][ T28] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 908.477877][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.509868][ T28] usb 1-1: config 0 descriptor?? [ 908.659308][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 908.699065][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 908.728543][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 908.748683][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 909.256321][ T28] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 909.265308][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 909.283471][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 909.327610][T13949] ceph: No mds server is up or the cluster is laggy [ 909.350009][ T28] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input12 [ 909.499080][ T28] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 909.600897][T13962] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 909.607471][T13962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 909.615458][T13962] vhci_hcd vhci_hcd.0: Device attached [ 909.685049][ T28] usb 1-1: USB disconnect, device number 26 [ 910.049851][ T5773] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 910.445900][T13963] vhci_hcd: connection reset by peer [ 910.522026][ T1135] vhci_hcd: stop threads [ 910.608854][ T1135] vhci_hcd: release socket [ 910.688503][ T1135] vhci_hcd: disconnect device [ 911.012491][T13961] fido_id[13961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 912.923370][T12687] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 913.125749][T12687] usb 2-1: Using ep0 maxpacket: 32 [ 913.142749][T12687] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 913.163426][T12687] usb 2-1: config 0 has no interface number 0 [ 913.169601][T12687] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 913.203306][T12687] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 913.233715][T12687] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 913.242829][T12687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.277566][T12687] usb 2-1: Product: syz [ 913.281789][T12687] usb 2-1: Manufacturer: syz [ 913.303543][T12687] usb 2-1: SerialNumber: syz [ 913.310636][T12687] usb 2-1: config 0 descriptor?? [ 913.563468][T12687] radio-si470x 2-1:0.35: this is not a si470x device. [ 913.611499][T13986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 913.619581][T12687] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 913.655790][T12687] usb 2-1: USB disconnect, device number 24 [ 914.212806][T13994] ±ÿ: renamed from lo [ 915.484289][ T5773] vhci_hcd: vhci_device speed not set [ 915.973858][ T5805] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 916.261036][T14022] sp0: Synchronizing with TNC [ 916.332960][ T5805] usb 2-1: config 0 has no interfaces? [ 916.338783][ T5805] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 916.439458][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.477049][ T5805] usb 2-1: config 0 descriptor?? [ 916.866655][ T5805] usb 2-1: USB disconnect, device number 25 [ 917.153398][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 917.159941][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 917.995947][ T5773] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 918.193240][ T5773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.204052][ T5773] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.227004][ T5773] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 918.239253][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 918.266928][ T5773] usb 4-1: Product: syz [ 918.271253][ T5773] usb 4-1: SerialNumber: syz [ 918.296306][ T5773] usb 4-1: selecting invalid altsetting 1 [ 919.332882][ T5773] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 919.339131][ T5773] cdc_ncm 4-1:1.0: bind() failure [ 919.353484][ T5773] usb 4-1: USB disconnect, device number 19 [ 920.859567][T14057] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 920.890747][T14057] cramfs: wrong magic [ 920.941736][T14046] net_ratelimit: 10 callbacks suppressed [ 920.941805][T14046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 926.253986][T14096] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 926.313768][T14096] cramfs: wrong magic [ 926.358215][T14103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2122'. [ 929.354980][T14148] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 929.370917][T14148] cramfs: wrong magic [ 931.530743][T14169] netlink: 'syz.1.2142': attribute type 6 has an invalid length. [ 931.542697][T14169] netlink: 'syz.1.2142': attribute type 6 has an invalid length. [ 931.553277][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 931.637731][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.644298][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.591978][T14189] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 932.628625][T14189] cramfs: wrong magic [ 935.643867][ T5805] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 935.833403][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 935.840562][ T5805] usb 3-1: config 2 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.863360][ T5805] usb 3-1: config 2 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 935.913371][ T5805] usb 3-1: config 2 interface 0 has no altsetting 0 [ 935.920051][ T5805] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 935.981823][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.460849][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.489844][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.503246][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.520246][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.530353][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.543323][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.570803][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.583592][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.610866][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x7 [ 936.620849][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.639366][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.653354][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.668652][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.685014][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.886941][ T5805] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 936.893996][ T5805] elo 0003:04E7:0030.0007: unexpected long global item [ 936.901503][ T5805] elo 0003:04E7:0030.0007: parse failed [ 936.907293][ T5805] elo: probe of 0003:04E7:0030.0007 failed with error -22 [ 936.919267][ T5805] usb 3-1: USB disconnect, device number 27 [ 938.030306][T14253] IPv6: NLM_F_CREATE should be specified when creating new route [ 938.763841][T14270] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 938.775008][T14270] cramfs: wrong magic [ 941.349565][T14302] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 941.356926][T14302] cramfs: wrong magic [ 941.557519][T14301] Trying to write to read-only block-device nullb0 [ 941.747464][T14303] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 942.097727][T14307] UBIFS error (pid: 14307): cannot open "./file0", error -22 [ 942.684169][T14316] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 942.700960][T14316] veth0_vlan: left promiscuous mode [ 942.724873][T14316] veth0_vlan: entered promiscuous mode [ 942.764720][T14316] team0: Device veth0_vlan failed to register rx_handler [ 944.368932][T14335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2195'. [ 946.924000][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 947.783490][ T5834] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 947.982292][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 948.045733][ T5834] usb 1-1: not running at top speed; connect to a high speed hub [ 948.134488][ T5834] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 948.163473][ T5834] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 948.183135][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.192218][ T5834] usb 1-1: Product: syz [ 948.233216][ T5834] usb 1-1: Manufacturer: syz [ 948.267592][ T5834] usb 1-1: SerialNumber: syz [ 948.601312][ T5834] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 948.631503][ T5834] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 948.705258][ T5834] usb 1-1: USB disconnect, device number 27 [ 949.992335][T14378] netlink: 'syz.3.2200': attribute type 10 has an invalid length. [ 950.279670][T14378] veth0_vlan: left promiscuous mode [ 950.289822][T14378] veth0_vlan: entered promiscuous mode [ 950.297901][T14378] team0: Device veth0_vlan failed to register rx_handler [ 950.686057][T14383] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.693349][T14383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.716420][T14383] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 951.815636][T14397] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 953.164307][ T5834] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 953.915130][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 954.030495][ T5834] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 954.068047][ T5834] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 954.231810][ T5834] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 954.422344][ T5834] usb 1-1: config 9 has no interface number 0 [ 954.511136][ T5834] usb 1-1: config 9 interface 221 altsetting 64 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 954.629383][ T5834] usb 1-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 954.717371][ T5834] usb 1-1: config 9 interface 221 has no altsetting 0 [ 954.819127][ T5834] usb 1-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 954.863441][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.916685][ T5834] usb 1-1: Product: syz [ 954.920908][ T5834] usb 1-1: Manufacturer: syz [ 954.933730][ T5834] usb 1-1: SerialNumber: syz [ 955.865697][T14429] delete_channel: no stack [ 957.079221][ T5834] usb 1-1: USB disconnect, device number 28 [ 957.184027][ T7569] udevd[7569]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.723307][T14450] misc userio: The device must be registered before sending interrupts [ 960.013338][ T28] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 960.217248][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 960.236502][ T28] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 960.254954][ T28] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 960.266565][ T28] usb 3-1: config 129 has no interface number 0 [ 960.279291][ T28] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 960.306479][T14465] tipc: Enabled bearer , priority 0 [ 960.315686][T14465] syzkaller0: entered promiscuous mode [ 960.321450][T14465] syzkaller0: entered allmulticast mode [ 960.323514][ T28] usb 3-1: config 129 interface 135 has no altsetting 0 [ 960.366206][T14465] tipc: Resetting bearer [ 960.369775][ T28] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 960.381952][T14464] tipc: Resetting bearer [ 960.403456][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.412932][T14464] tipc: Disabling bearer [ 960.420005][ T28] usb 3-1: Product: syz [ 960.434126][ T28] usb 3-1: Manufacturer: syz [ 960.441470][ T28] usb 3-1: SerialNumber: syz [ 993.079499][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.085979][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.963147][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1066.970175][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1135/1:b..l [ 1066.978811][ C0] rcu: (detected by 0, t=10502 jiffies, g=75721, q=225 ncpus=2) [ 1066.986655][ C0] task:kworker/u4:6 state:R running task stack:22000 pid:1135 ppid:2 flags:0x00004000 [ 1066.999400][ C0] Workqueue: bat_events batadv_nc_worker [ 1067.005092][ C0] Call Trace: [ 1067.008413][ C0] [ 1067.011371][ C0] __schedule+0x1553/0x45a0 [ 1067.015937][ C0] ? asan.module_dtor+0x20/0x20 [ 1067.020819][ C0] ? mark_lock+0x94/0x320 [ 1067.025193][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1067.031213][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 1067.036624][ C0] preempt_schedule_irq+0xbf/0x150 [ 1067.041771][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1067.047536][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1067.053527][ C0] irqentry_exit+0x67/0x70 [ 1067.057983][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1067.064017][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1067.069334][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1067.088977][ C0] RSP: 0018:ffffc9000488fa40 EFLAGS: 00000206 [ 1067.095081][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 87126fd1746a6600 [ 1067.103072][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c89a0 [ 1067.111064][ C0] RBP: ffffc9000488fb48 R08: dffffc0000000000 R09: 1ffffffff22386a0 [ 1067.119061][ C0] R10: dffffc0000000000 R11: fffffbfff22386a1 R12: 1ffff92000911f54 [ 1067.127065][ C0] R13: ffffffff8d1320a0 R14: 0000000000000246 R15: dffffc0000000000 [ 1067.135093][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1067.140062][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1067.145464][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1067.151478][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1067.156456][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1067.161422][ C0] batadv_nc_worker+0xef/0x610 [ 1067.166215][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1067.171181][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1067.176934][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1067.182531][ C0] ? worker_attach_to_pool+0x380/0x380 [ 1067.188019][ C0] ? assign_work+0x3d2/0x5d0 [ 1067.192642][ C0] worker_thread+0xa55/0xfc0 [ 1067.197260][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1067.203191][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1067.208066][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1067.214012][ C0] kthread+0x2fa/0x390 [ 1067.218103][ C0] ? pr_cont_work+0x560/0x560 [ 1067.222815][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1067.227425][ C0] ret_from_fork+0x48/0x80 [ 1067.231870][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1067.236493][ C0] ret_from_fork_asm+0x11/0x20 [ 1067.241303][ C0] [ 1067.244340][ C0] rcu: rcu_preempt kthread starved for 10510 jiffies! g75721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1067.255562][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1067.265565][ C0] rcu: RCU grace-period kthread stack dump: [ 1067.271468][ C0] task:rcu_preempt state:R running task stack:27080 pid:17 ppid:2 flags:0x00004000 [ 1067.282286][ C0] Call Trace: [ 1067.285581][ C0] [ 1067.288538][ C0] __schedule+0x1553/0x45a0 [ 1067.293114][ C0] ? _raw_spin_unlock+0x31/0x40 [ 1067.298011][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1067.304021][ C0] ? asan.module_dtor+0x20/0x20 [ 1067.308904][ C0] ? enqueue_timer+0x23d/0x550 [ 1067.313693][ C0] ? __mod_timer+0x984/0xdb0 [ 1067.318323][ C0] schedule+0xbd/0x170 [ 1067.322421][ C0] schedule_timeout+0x188/0x2d0 [ 1067.327305][ C0] ? console_conditional_schedule+0x40/0x40 [ 1067.333240][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1067.339173][ C0] ? update_process_times+0x1b0/0x1b0 [ 1067.344576][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1067.350150][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 1067.355034][ C0] ? rcu_gp_init+0x1162/0x1560 [ 1067.359827][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1067.364698][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1067.370889][ C0] ? rcu_gp_init+0x1560/0x1560 [ 1067.375868][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 1067.380746][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1067.385968][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1067.391199][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1067.395823][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1067.400966][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1067.405937][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1067.410985][ C0] kthread+0x2fa/0x390 [ 1067.415077][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1067.420216][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1067.424822][ C0] ret_from_fork+0x48/0x80 [ 1067.429262][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1067.433873][ C0] ret_from_fork_asm+0x11/0x20 [ 1067.438685][ C0] [ 1067.441728][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1067.448079][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1067.455142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1067.465334][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1067.471011][ C0] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1067.490661][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1067.496756][ C0] RAX: 9f38d0011c0a3100 RBX: ffffffff8162a8c1 RCX: 9f38d0011c0a3100 [ 1067.504748][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 1067.512829][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1067.520819][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 1067.528818][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1067.536812][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1067.545794][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1067.552399][ C0] CR2: 00007f85a8be7158 CR3: 0000000077920000 CR4: 00000000003526f0 [ 1067.560389][ C0] Call Trace: [ 1067.563690][ C0] [ 1067.566632][ C0] default_idle+0x13/0x20 [ 1067.570990][ C0] default_idle_call+0x6c/0xa0 [ 1067.575781][ C0] do_idle+0x221/0x590 [ 1067.579877][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1067.585096][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1067.590788][ C0] cpu_startup_entry+0x43/0x60 [ 1067.595664][ C0] rest_init+0x2e2/0x300 [ 1067.599936][ C0] ? time_init+0x40/0x40 [ 1067.604201][ C0] arch_call_rest_init+0xe/0x10 [ 1067.609073][ C0] start_kernel+0x459/0x4e0 [ 1067.613599][ C0] x86_64_start_reservations+0x2a/0x30 [ 1067.619087][ C0] x86_64_start_kernel+0x60/0x60 [ 1067.624055][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1067.630163][ C0] [ 1068.325421][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1068.331783][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.396258][ T5138] udevd[5138]: worker [7569] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 1068.632826][T13029] usb 3-1: USB disconnect, device number 28 SYZFAIL: failed to send rpc fd=3 want=10624 sent=0 n=-1 (errno 32: Broken pipe) [ 1069.084515][T14488] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1069.253176][T14488] CPU: 1 PID: 14488 Comm: syz-executor Not tainted syzkaller #0 [ 1069.260856][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.270906][T14488] Call Trace: [ 1069.274180][T14488] [ 1069.277104][T14488] dump_stack_lvl+0x18c/0x250 [ 1069.281785][T14488] ? show_regs_print_info+0x20/0x20 [ 1069.286982][T14488] ? load_image+0x400/0x400 [ 1069.291581][T14488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1069.297991][T14488] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1069.304485][T14488] warn_alloc+0x246/0x340 [ 1069.308821][T14488] ? zone_watermark_ok_safe+0x230/0x230 [ 1069.314367][T14488] ? _raw_spin_unlock+0x28/0x40 [ 1069.319215][T14488] __vmalloc_node_range+0x662/0x1330 [ 1069.324511][T14488] ? __asan_memset+0x22/0x40 [ 1069.329108][T14488] ? free_vm_area+0x50/0x50 [ 1069.333612][T14488] ? kcov_remote_reset+0xc0/0xc0 [ 1069.338542][T14488] vmalloc_user+0x74/0x80 [ 1069.342865][T14488] ? kcov_ioctl+0x58/0x620 [ 1069.347275][T14488] kcov_ioctl+0x58/0x620 [ 1069.351511][T14488] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1069.356442][T14488] ? security_file_ioctl+0x80/0xa0 [ 1069.361550][T14488] ? kcov_remote_reset+0xc0/0xc0 [ 1069.366481][T14488] __se_sys_ioctl+0xfd/0x170 [ 1069.371078][T14488] do_syscall_64+0x55/0xa0 [ 1069.375489][T14488] ? clear_bhb_loop+0x40/0x90 [ 1069.380161][T14488] ? clear_bhb_loop+0x40/0x90 [ 1069.384834][T14488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.390723][T14488] RIP: 0033:0x7f56ba39c4ab [ 1069.395146][T14488] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1069.414750][T14488] RSP: 002b:00007fff168afaa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.423162][T14488] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f56ba39c4ab [ 1069.431123][T14488] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 1069.439118][T14488] RBP: 00007f56ba616038 R08: 0000000000000000 R09: 0000000000000000 [ 1069.447182][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.455150][T14488] R13: 0000000000000003 R14: 00007fff168afd58 R15: 0000000000000000 [ 1069.463137][T14488] [ 1069.683321][T14488] Mem-Info: [ 1069.686886][T14488] active_anon:3827 inactive_anon:0 isolated_anon:0 [ 1069.686886][T14488] active_file:18547 inactive_file:40303 isolated_file:0 [ 1069.686886][T14488] unevictable:768 dirty:47 writeback:0 [ 1069.686886][T14488] slab_reclaimable:6765 slab_unreclaimable:97434 [ 1069.686886][T14488] mapped:2841 shmem:1384 pagetables:331 [ 1069.686886][T14488] sec_pagetables:0 bounce:0 [ 1069.686886][T14488] kernel_misc_reclaimable:0 [ 1069.686886][T14488] free:1356484 free_pcp:11606 free_cma:0 [ 1069.763393][T14488] Node 0 active_anon:15308kB inactive_anon:0kB active_file:74188kB inactive_file:161012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:11364kB dirty:188kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:1324kB sec_pagetables:0kB all_unreclaimable? no [ 1069.923166][T14488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1070.046117][T14488] Node 0 DMA free:15264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 1070.165436][T14488] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1070.171278][T14488] Node 0 DMA32 free:1611248kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:15196kB inactive_anon:0kB active_file:74188kB inactive_file:160188kB unevictable:1536kB writepending:16kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:38348kB local_pcp:19576kB free_cma:0kB [ 1070.300682][T14488] lowmem_reserve[]: 0 0 0 0 0 [ 1070.318506][T14488] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1070.393204][T14488] lowmem_reserve[]: 0 0 0 0 0 [ 1070.398011][T14488] Node 1 Normal free:3886136kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24280kB local_pcp:10776kB free_cma:0kB [ 1070.473171][T14488] lowmem_reserve[]: 0 0 0 0 0 [ 1070.477947][T14488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15264kB [ 1070.518193][T14488] Node 0 DMA32: 2813*4kB (UM) 1171*8kB (UME) 1053*16kB (UME) 1410*32kB (UME) 615*64kB (UME) 164*128kB (UME) 117*256kB (UME) 70*512kB (UME) 54*1024kB (UME) 27*2048kB (UM) 334*4096kB (UM) = 1687388kB [ 1070.563168][T14488] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1070.587408][T14488] Node 1 Normal: 296*4kB (UME) 57*8kB (UME) 45*16kB (UME) 34*32kB (UME) 13*64kB (UME) 9*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (ME) 3*2048kB (UME) 945*4096kB (M) = 3886136kB [ 1070.612412][T14488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1070.622676][T14488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1070.643648][T14488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1070.653799][T14488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1070.659788][ T7352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.663295][T14488] 55929 total pagecache pages [ 1070.663315][T14488] 0 pages in swap cache [ 1070.663321][T14488] Free swap = 124472kB [ 1070.663328][T14488] Total swap = 124996kB [ 1070.663337][T14488] 2097051 pages RAM [ 1070.663343][T14488] 0 pages HighMem/MovableOnly [ 1070.663349][T14488] 416926 pages reserved [ 1070.663356][T14488] 0 pages cma reserved [ 1070.818322][ T7352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.964003][ T7352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.051792][ T7352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.208183][ T7352] tipc: Left network mode [ 1071.348482][ T7352] bond1: (slave ip6erspan0): Releasing active interface [ 1072.262693][ T7352] hsr_slave_0: left promiscuous mode [ 1072.269133][ T7352] hsr_slave_1: left promiscuous mode [ 1072.286105][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.293897][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.302598][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.311366][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.319637][ T7352] bridge_slave_1: left allmulticast mode [ 1072.325696][ T7352] bridge_slave_1: left promiscuous mode [ 1072.334313][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.350141][ T7352] bridge_slave_0: left allmulticast mode [ 1072.356109][ T7352] bridge_slave_0: left promiscuous mode [ 1072.361869][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.445697][ T7352] veth1_macvtap: left promiscuous mode [ 1072.453618][ T7352] veth0_macvtap: left promiscuous mode [ 1072.459372][ T7352] veth1_vlan: left promiscuous mode [ 1072.771671][ T7352] bond11 (unregistering): Released all slaves [ 1072.898917][ T7352] bond10 (unregistering): Released all slaves [ 1073.028207][ T7352] bond9 (unregistering): Released all slaves [ 1073.157500][ T7352] bond8 (unregistering): Released all slaves [ 1073.286152][ T7352] bond7 (unregistering): Released all slaves [ 1073.420400][ T7352] bond6 (unregistering): Released all slaves [ 1073.555042][ T7352] bond5 (unregistering): Released all slaves [ 1073.684640][ T7352] bond4 (unregistering): Released all slaves [ 1073.817407][ T7352] bond3 (unregistering): Released all slaves [ 1073.948012][ T7352] bond2 (unregistering): Released all slaves [ 1074.076786][ T7352] bond1 (unregistering): Released all slaves [ 1074.570273][ T7352] team0 (unregistering): Port device team_slave_1 removed [ 1074.619728][ T7352] team0 (unregistering): Port device team_slave_0 removed [ 1074.667060][ T7352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.715891][ T7352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.109679][ T7352] bond0 (unregistering): Released all slaves [ 1075.256215][ T23] lo speed is unknown, defaulting to 1000 [ 1075.725990][ T7352] IPVS: stop unused estimator thread 0... [ 1075.989701][ T7352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.087408][ T7352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.182646][ T7352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.289830][ T7352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.868014][ T7352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.941447][ T7352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0