last executing test programs: 33.518411772s ago: executing program 0 (id=2454): io_setup(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0xfdef) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0b475173ddd486dd6000000000200601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2991cf6fd2b053e279e9dcc7f06e734ee72120000907800001e0c6c000900000000f20000"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 32.43536796s ago: executing program 0 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r0, &(0x7f0000000440)="f700040000000000", 0x8, 0x830) 9.117842312s ago: executing program 3 (id=2503): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141d, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x20000001, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) r5 = syz_io_uring_complete(r2, r3) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) 7.626707449s ago: executing program 2 (id=2507): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r1, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 7.470073733s ago: executing program 2 (id=2509): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) 7.278707288s ago: executing program 2 (id=2511): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="9ccdb4dce733a8376cc815d6324c65f6055d5d0f31865616bbf84d6bcbe794be82329825cbc29352f78a75f315dfa28151c01dd585f89694dae1aec62b7690c4000000000000dac6551ba6fbd14084b54828e7ee39fd9aba4d90a1bb7b639710e854935a9e9837cc566981ef595d9c6acb50091591a3de461adee8b60e210592bc51526b6e31562e40929187f69f55acf0469ec5e4de8052642a87e660ff702ce4628e8626", @ANYRES64=r0], 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="26f30f1ecc0f08f20f30b8d5a9cf520f23d00f21f8351000000a0f23f80f0dbe6e0000003e801d5200000001b989000000b8257e0000ba000000000f30660f38818b050000003e260fae833137f16964f080b0030000000a", 0x58}], 0x1, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000280)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x119, 0x9, 0x0, 0xe) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x30, r5, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3, 0xe037, 0x9, 0x200}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 6.754644581s ago: executing program 3 (id=2512): io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0xfdef) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x402) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0b475173ddd486dd6000000000200601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2991cf6fd2b053e279e9dcc7f06e734ee72120000907800001e0c6c000900000000f20000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.170294306s ago: executing program 2 (id=2513): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="48010000100001000000000800000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000c3259ac7e100000000006c000000ac1414bb00000000000000000000000000000000020000000074b2633d90df86ddb165654bc4532400000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000d55cfa4b000000000000000000612c9b788e61dead85951b00000000000a00010600000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008cfb5130785bf578445946a8ba2dd2aae0703189d077f66cc31b956c34ab33ed100537c21b9253531cc1c9b271f0f35724d76d15e1dc4ddd4dac74bfcd6038c1abac6a0e77ba7ec7c938d4e52112"], 0x148}}, 0x20000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a7204d0b5c94a69a", 0xf}], 0x2}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffee6, 0x0}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) write(r3, &(0x7f0000000200)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r6, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl(r6, 0x400c0930, 0x0) ioctl(r6, 0x933, &(0x7f0000000440)="02") ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000001c0)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000000000000000000000f0300000063d038000000000000000f01000000de0000"], 0x0, 0x36}, 0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000300)) 3.699269467s ago: executing program 3 (id=2514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) lseek(r4, 0x4, 0x100000000000000) 3.508573232s ago: executing program 2 (id=2516): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r1, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3.19031585s ago: executing program 1 (id=2518): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="3c5c413ecd2d036a2762bb626c65640a", 0x10) 3.175269161s ago: executing program 2 (id=2519): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141d, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x20000001, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) r5 = syz_io_uring_complete(r2, r3) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000900)=@device_b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) 2.41120713s ago: executing program 0 (id=2458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 2.234780144s ago: executing program 0 (id=2520): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.194157895s ago: executing program 1 (id=2521): io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0xfdef) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x402) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0b475173ddd486dd6000000000200601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2991cf6fd2b053e279e9dcc7f06e734ee72120000907800001e0c6c000900000000f20000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.027663204s ago: executing program 0 (id=2523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="48010000100001000000000800000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x148}}, 0x20000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a7204d0b5c94a69a", 0xf}], 0x2}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffee6, 0x0}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) write(r3, &(0x7f0000000200)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r6, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl(r6, 0x400c0930, 0x0) ioctl(r6, 0x933, &(0x7f0000000440)="02") ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000001c0)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000000000000000000000f0300000063d038000000000000000f01000000de0000"], 0x0, 0x36}, 0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000300)) 1.010115615s ago: executing program 3 (id=2524): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x5, @sliced={0x0, [0x2, 0xa, 0x7f, 0x8, 0x7, 0xf, 0x9, 0xf, 0x7, 0x8, 0x7, 0x1728, 0x7, 0xe, 0xee, 0x3, 0x5, 0x2, 0x1, 0x8ce, 0x2fd, 0xffff, 0x2, 0xb, 0x8001, 0xde1, 0x7, 0x2ff, 0xb58a, 0x5, 0xfff, 0x2, 0x5, 0x0, 0x5, 0x2, 0x3, 0x5, 0x3, 0xa20, 0x6, 0x8e, 0x7fff, 0xa030, 0x2, 0xedb4, 0x4, 0x200], 0x737}}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x2, 0x183, 0x400000000, 0x5, 0xee, 0x200000000000091a, 0x1, 0x7, 0xfffc, 0x100000000003, 0xf, 0xfffffffffffffffd, 0x3, 0x20000000000ab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 879.941148ms ago: executing program 1 (id=2525): socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 622.709504ms ago: executing program 1 (id=2526): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r1, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 581.654485ms ago: executing program 3 (id=2527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1400000009000000", 0x8) 310.588592ms ago: executing program 1 (id=2528): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 106.686537ms ago: executing program 3 (id=2529): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="3c5c413ecd2d036a2762bb626c65640a", 0x10) 88.882618ms ago: executing program 0 (id=2530): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x2}, {0xd, '\x00', @data=0x1, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x8, '\x00', @data=0x80, 0x8}]}) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 0s ago: executing program 1 (id=2531): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, 0x0, 0x4000020) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="3202020800000000ff020000000000000000e514ee1c5698eb000000000001"], 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000002c0)=""/43, 0x2b) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x808}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x194) write(r6, &(0x7f0000000400)='1', 0x1) kernel console output (not intermixed with test programs): 36 bytes leftover after parsing attributes in process `syz.0.1509'. [ 614.875082][T11084] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1515'. [ 614.906825][T11084] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 614.935424][T11084] md: couldn't update array info. -22 [ 614.965886][T11084] md: could not open device unknown-block(1,1). [ 614.972351][T11084] md: md_import_device returned -16 [ 614.997469][T11084] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 615.132299][T11093] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 615.138838][T11093] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 615.146628][T11093] vhci_hcd vhci_hcd.0: Device attached [ 615.200612][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 615.637283][ T27] vhci_hcd: vhci_device speed not set [ 615.945799][T11094] vhci_hcd: connection closed [ 616.032163][ T8625] vhci_hcd: stop threads [ 616.053356][ T27] usb 35-1: new full-speed USB device number 14 using vhci_hcd [ 616.176801][ T8625] vhci_hcd: release socket [ 616.242361][ T8625] vhci_hcd: disconnect device [ 616.772804][T11105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 616.805657][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1521'. [ 616.883593][T11105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1521'. [ 617.060654][T11123] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1527'. [ 617.150395][T11126] md: couldn't update array info. -22 [ 617.159039][T11123] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 617.159438][T11126] md: could not open device unknown-block(1,1). [ 617.176335][T11126] md: md_import_device returned -16 [ 617.187776][T11126] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 617.225375][T11127] ip_tables: iptables: counters copy to user failed while replacing table [ 617.432763][T11136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 617.439334][T11136] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 617.447288][T11136] vhci_hcd vhci_hcd.0: Device attached [ 617.563011][ T5857] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 618.698162][ T5836] vhci_hcd: vhci_device speed not set [ 618.703785][T11138] vhci_hcd: connection closed [ 618.714139][ T48] vhci_hcd: stop threads [ 618.751100][ T48] vhci_hcd: release socket [ 618.760782][ T48] vhci_hcd: disconnect device [ 618.813174][ T5836] usb 33-1: new full-speed USB device number 10 using vhci_hcd [ 618.820955][ T5836] usb 33-1: enqueue for inactive port 0 [ 618.875758][ T5857] usb 3-1: not running at top speed; connect to a high speed hub [ 618.903570][ T5857] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 618.922579][ T5857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.937322][ T5836] vhci_hcd: vhci_device speed not set [ 618.943089][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 618.952017][ T5857] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 618.982988][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.046828][T11149] syz.0.1533 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 619.108014][T11149] CPU: 1 PID: 11149 Comm: syz.0.1533 Not tainted syzkaller #0 [ 619.115518][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.125597][T11149] Call Trace: [ 619.128892][T11149] [ 619.131843][T11149] dump_stack_lvl+0x18c/0x250 [ 619.136555][T11149] ? show_regs_print_info+0x20/0x20 [ 619.141789][T11149] ? load_image+0x420/0x420 [ 619.146323][T11149] ? ___ratelimit+0x478/0x610 [ 619.151037][T11149] ? radix_tree_cpu_dead+0x160/0x160 [ 619.156357][T11149] dump_header+0xd8/0x820 [ 619.160725][T11149] oom_kill_process+0x390/0x580 [ 619.165618][T11149] out_of_memory+0xe0e/0x1200 [ 619.170331][T11149] ? lockdep_hardirqs_on+0x98/0x150 [ 619.175560][T11149] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 619.181224][T11149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.187402][T11149] ? mutex_lock_nested+0x20/0x20 [ 619.192379][T11149] ? unregister_oom_notifier+0x20/0x20 [ 619.197881][T11149] mem_cgroup_out_of_memory+0x2c2/0x390 [ 619.203462][T11149] ? try_charge_memcg+0xc91/0x17c0 [ 619.208603][T11149] ? drain_local_stock+0x630/0x630 [ 619.213756][T11149] ? do_raw_spin_unlock+0x121/0x230 [ 619.218999][T11149] try_charge_memcg+0xca1/0x17c0 [ 619.224000][T11149] ? folio_flags+0x120/0x120 [ 619.228624][T11149] ? percpu_ref_tryget+0x15/0x180 [ 619.233682][T11149] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 619.239438][T11149] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 619.245447][T11149] ? percpu_ref_tryget+0x15/0x180 [ 619.250498][T11149] ? percpu_ref_tryget+0x15/0x180 [ 619.255563][T11149] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 619.261314][T11149] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 619.267069][T11149] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 619.272908][T11149] obj_cgroup_charge+0x36e/0x630 [ 619.277883][T11149] ? obj_cgroup_charge+0xed/0x630 [ 619.282934][T11149] ? mod_objcg_mlstate+0x320/0x320 [ 619.288083][T11149] ? percpu_ref_put+0x12/0x100 [ 619.292875][T11149] ? percpu_ref_put+0x12/0x100 [ 619.297665][T11149] slab_pre_alloc_hook+0x2e2/0x300 [ 619.302804][T11149] ? slab_pre_alloc_hook+0xb1/0x300 [ 619.308036][T11149] kmem_cache_alloc_lru+0x4d/0x2b0 [ 619.313180][T11149] ? new_inode_pseudo+0x82/0x1d0 [ 619.318145][T11149] ? lookup_one_common+0x450/0x450 [ 619.323283][T11149] new_inode_pseudo+0x82/0x1d0 [ 619.328076][T11149] new_inode+0x22/0x1d0 [ 619.332257][T11149] ? start_creating+0x1f5/0x310 [ 619.337139][T11149] __debugfs_create_file+0x147/0x500 [ 619.342457][T11149] kvm_create_vm_debugfs+0x6de/0x980 [ 619.347779][T11149] ? hardware_enable_all+0x210/0x210 [ 619.353098][T11149] ? __raw_spin_lock_init+0x45/0x100 [ 619.358425][T11149] kvm_dev_ioctl+0x1426/0x1810 [ 619.363222][T11149] ? kvm_resume+0x1e0/0x1e0 [ 619.367756][T11149] ? bpf_lsm_file_ioctl+0x9/0x10 [ 619.372716][T11149] ? security_file_ioctl+0x80/0xa0 [ 619.377869][T11149] ? kvm_resume+0x1e0/0x1e0 [ 619.382398][T11149] __se_sys_ioctl+0xfd/0x170 [ 619.387016][T11149] do_syscall_64+0x55/0xb0 [ 619.391452][T11149] ? clear_bhb_loop+0x40/0x90 [ 619.396145][T11149] ? clear_bhb_loop+0x40/0x90 [ 619.400851][T11149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.406771][T11149] RIP: 0033:0x7f8eee19e1d9 [ 619.411207][T11149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.430838][T11149] RSP: 002b:00007f8eef0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.439277][T11149] RAX: ffffffffffffffda RBX: 00007f8eee425fa0 RCX: 00007f8eee19e1d9 [ 619.447270][T11149] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 619.455257][T11149] RBP: 00007f8eee235888 R08: 0000000000000000 R09: 0000000000000000 [ 619.463245][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.471234][T11149] R13: 00007f8eee426038 R14: 00007f8eee425fa0 R15: 00007ffd9e5510a8 [ 619.479240][T11149] [ 619.482387][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.515232][T11149] memory: usage 96kB, limit 96kB, failcnt 43 [ 619.521241][T11149] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 619.532981][T11149] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 619.555947][T11149] Memory cgroup stats for /syz0/test: [ 619.556334][T11149] cache 0 [ 619.577548][T11149] rss 0 [ 619.590349][T11149] rss_huge 0 [ 619.603127][T11149] shmem 0 [ 619.606218][T11149] mapped_file 0 [ 619.609742][T11149] dirty 0 [ 619.627005][T11149] writeback 0 [ 619.653207][T11149] workingset_refault_anon 0 [ 619.672208][T11149] workingset_refault_file 0 [ 619.679115][T11149] swap 0 [ 619.685431][T11149] pgpgin 0 [ 619.689237][T11149] pgpgout 0 [ 619.695849][T11149] pgfault 4 [ 619.699191][T11149] pgmajfault 0 [ 619.702885][T11149] inactive_anon 0 [ 619.708028][T11149] active_anon 0 [ 619.711645][T11149] inactive_file 0 [ 619.728027][T11158] __nla_validate_parse: 1 callbacks suppressed [ 619.728041][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 619.748142][T11149] active_file 0 [ 619.754183][T11149] unevictable 0 [ 619.773159][T11149] hierarchical_memory_limit 98304 [ 619.783189][T11158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1536'. [ 619.819644][T11149] hierarchical_memsw_limit 9223372036854771712 [ 619.844014][T11149] total_cache 0 [ 619.847996][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1536'. [ 619.854830][T11149] total_rss 0 [ 619.861184][T11149] total_rss_huge 0 [ 619.872159][T11149] total_shmem 0 [ 619.879130][T11149] total_mapped_file 0 [ 619.890268][T11149] total_dirty 0 [ 619.897379][T11149] total_writeback 0 [ 619.911085][T11149] total_workingset_refault_anon 0 [ 619.993318][T11149] total_workingset_refault_file 0 [ 620.009841][T11149] total_swap 0 [ 620.035625][T11149] total_pgpgin 0 [ 620.088598][T11149] total_pgpgout 0 [ 620.118178][T11149] total_pgfault 4 [ 620.128546][T11149] total_pgmajfault 0 [ 620.140798][T11149] total_inactive_anon 0 [ 620.157721][T11149] total_active_anon 0 [ 620.175353][T11149] total_inactive_file 0 [ 620.188639][T11149] total_active_file 0 [ 620.206812][T11149] total_unevictable 0 [ 620.261364][T11149] anon_cost 0 [ 620.279165][T11149] file_cost 0 [ 620.293866][T11149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1533,pid=11147,uid=0 [ 620.331958][T11149] Memory cgroup out of memory: Killed process 11149 (syz.0.1533) total-vm:102252kB, anon-rss:1256kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 620.352595][T11163] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1538'. [ 620.363908][T11163] netlink: 'syz.3.1538': attribute type 10 has an invalid length. [ 620.380538][T11149] debugfs: out of free dentries, can not create file 'blocking' [ 620.390957][T11163] md: couldn't update array info. -22 [ 620.396716][T11163] md: could not open device unknown-block(1,1). [ 620.415902][T11163] md: md_import_device returned -16 [ 620.435522][T11163] netlink: 'syz.3.1538': attribute type 10 has an invalid length. [ 621.017313][ T5857] usb 3-1: string descriptor 0 read error: -71 [ 621.079651][ T5857] usb 3-1: Found UVC 1.00 device (046d:0825) [ 621.112601][ T5857] usb 3-1: No valid video chain found. [ 621.149217][ T5857] usb 3-1: USB disconnect, device number 17 [ 621.269960][ T27] vhci_hcd: vhci_device speed not set [ 621.291290][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 621.448567][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'. [ 621.491462][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1545'. [ 621.511771][T11186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1545'. [ 621.720485][T11195] jffs2: notice: (11195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 622.013221][ T178] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 622.114341][T11199] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1548'. [ 622.124956][T11199] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 622.149591][T11199] md: couldn't update array info. -22 [ 622.157686][T11199] md: could not open device unknown-block(1,1). [ 622.168995][T11199] md: md_import_device returned -16 [ 622.177622][T11199] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 622.225529][ T178] usb 4-1: unable to get BOS descriptor or descriptor too short [ 622.266518][T11201] syz.0.1549 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 622.283058][T11201] CPU: 1 PID: 11201 Comm: syz.0.1549 Not tainted syzkaller #0 [ 622.290554][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 622.300638][T11201] Call Trace: [ 622.303924][T11201] [ 622.306868][T11201] dump_stack_lvl+0x18c/0x250 [ 622.311558][T11201] ? show_regs_print_info+0x20/0x20 [ 622.316756][T11201] ? load_image+0x420/0x420 [ 622.321261][T11201] ? ___ratelimit+0x478/0x610 [ 622.325944][T11201] ? radix_tree_cpu_dead+0x160/0x160 [ 622.331233][T11201] dump_header+0xd8/0x820 [ 622.335570][T11201] oom_kill_process+0x390/0x580 [ 622.340432][T11201] out_of_memory+0xe0e/0x1200 [ 622.345119][T11201] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 622.350757][T11201] ? print_unlock_imbalance_bug+0x160/0x160 [ 622.356658][T11201] ? mutex_lock_nested+0x20/0x20 [ 622.361603][T11201] ? unregister_oom_notifier+0x20/0x20 [ 622.367094][T11201] mem_cgroup_out_of_memory+0x2c2/0x390 [ 622.372659][T11201] ? try_charge_memcg+0xc91/0x17c0 [ 622.377776][T11201] ? drain_local_stock+0x630/0x630 [ 622.382895][T11201] ? do_raw_spin_unlock+0x121/0x230 [ 622.388102][T11201] try_charge_memcg+0xca1/0x17c0 [ 622.393073][T11201] ? folio_flags+0x120/0x120 [ 622.397668][T11201] ? percpu_ref_tryget+0x15/0x180 [ 622.402692][T11201] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 622.408440][T11201] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 622.414424][T11201] ? percpu_ref_tryget+0x15/0x180 [ 622.419447][T11201] ? percpu_ref_tryget+0x15/0x180 [ 622.424469][T11201] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 622.430188][T11201] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 622.435908][T11201] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 622.441716][T11201] obj_cgroup_charge+0x36e/0x630 [ 622.446664][T11201] ? obj_cgroup_charge+0xed/0x630 [ 622.451692][T11201] ? mod_objcg_mlstate+0x320/0x320 [ 622.456814][T11201] ? percpu_ref_put+0x12/0x100 [ 622.461573][T11201] ? percpu_ref_put+0x12/0x100 [ 622.466338][T11201] slab_pre_alloc_hook+0x2e2/0x300 [ 622.471444][T11201] ? slab_pre_alloc_hook+0xb1/0x300 [ 622.476648][T11201] kmem_cache_alloc_lru+0x4d/0x2b0 [ 622.481766][T11201] ? new_inode_pseudo+0x82/0x1d0 [ 622.486705][T11201] ? lookup_one_common+0x450/0x450 [ 622.491835][T11201] new_inode_pseudo+0x82/0x1d0 [ 622.496606][T11201] new_inode+0x22/0x1d0 [ 622.500763][T11201] ? start_creating+0x1f5/0x310 [ 622.505617][T11201] __debugfs_create_file+0x147/0x500 [ 622.510920][T11201] kvm_create_vm_debugfs+0x6de/0x980 [ 622.516217][T11201] ? hardware_enable_all+0x210/0x210 [ 622.521507][T11201] ? __raw_spin_lock_init+0x45/0x100 [ 622.526803][T11201] kvm_dev_ioctl+0x1426/0x1810 [ 622.531576][T11201] ? kvm_resume+0x1e0/0x1e0 [ 622.536085][T11201] ? bpf_lsm_file_ioctl+0x9/0x10 [ 622.541018][T11201] ? security_file_ioctl+0x80/0xa0 [ 622.546141][T11201] ? kvm_resume+0x1e0/0x1e0 [ 622.550655][T11201] __se_sys_ioctl+0xfd/0x170 [ 622.555250][T11201] do_syscall_64+0x55/0xb0 [ 622.559668][T11201] ? clear_bhb_loop+0x40/0x90 [ 622.564342][T11201] ? clear_bhb_loop+0x40/0x90 [ 622.569014][T11201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.574917][T11201] RIP: 0033:0x7f8eee19e1d9 [ 622.579330][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.598934][T11201] RSP: 002b:00007f8eef0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.607351][T11201] RAX: ffffffffffffffda RBX: 00007f8eee425fa0 RCX: 00007f8eee19e1d9 [ 622.615334][T11201] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 622.623314][T11201] RBP: 00007f8eee235888 R08: 0000000000000000 R09: 0000000000000000 [ 622.631288][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.639254][T11201] R13: 00007f8eee426038 R14: 00007f8eee425fa0 R15: 00007ffd9e5510a8 [ 622.647244][T11201] [ 622.650288][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.693044][ T178] usb 4-1: not running at top speed; connect to a high speed hub [ 622.745581][T11201] memory: usage 96kB, limit 96kB, failcnt 139 [ 622.751761][T11201] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 622.762326][T11201] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 622.778242][T11201] Memory cgroup stats for /syz0/test: [ 622.778355][T11201] cache 0 [ 622.790168][T11201] rss 0 [ 622.800306][T11201] rss_huge 0 [ 622.810412][T11201] shmem 0 [ 622.817778][T11201] mapped_file 0 [ 622.821761][T11201] dirty 0 [ 622.828834][T11201] writeback 0 [ 622.829043][ T178] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 622.843496][ T178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.851476][ T178] usb 4-1: Product: syz [ 622.855844][T11201] workingset_refault_anon 0 [ 622.860351][T11201] workingset_refault_file 0 [ 622.873987][ T178] usb 4-1: Manufacturer: syz [ 622.888231][T11201] swap 0 [ 622.891111][T11201] pgpgin 0 [ 622.894333][ T178] usb 4-1: SerialNumber: syz [ 622.903500][T11201] pgpgout 0 [ 622.906650][T11201] pgfault 12 [ 622.927087][T11201] pgmajfault 0 [ 622.930472][T11201] inactive_anon 0 [ 622.936222][T11201] active_anon 0 [ 622.943055][T11201] inactive_file 0 [ 622.946767][T11201] active_file 0 [ 622.950330][T11201] unevictable 0 [ 622.965575][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 622.965583][ T28] audit: type=1326 audit(1791599301.883:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 623.836674][T11201] hierarchical_memory_limit 98304 [ 623.866198][ T28] audit: type=1326 audit(1791599301.883:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 623.890590][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.900021][T11201] hierarchical_memsw_limit 9223372036854771712 [ 623.994614][T11201] total_cache 0 [ 624.028165][T11201] total_rss 0 [ 624.075870][T11201] total_rss_huge 0 [ 624.107531][T11201] total_shmem 0 [ 624.140169][T11201] total_mapped_file 0 [ 624.160740][T11201] total_dirty 0 [ 624.178539][T11201] total_writeback 0 [ 624.198703][ T28] audit: type=1326 audit(1791599301.913:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 624.223005][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.239322][T11201] total_workingset_refault_anon 0 [ 624.277198][T11201] total_workingset_refault_file 0 [ 624.312577][T11201] total_swap 0 [ 624.336530][T11201] total_pgpgin 0 [ 624.361713][T11201] total_pgpgout 0 [ 624.403243][T11201] total_pgfault 12 [ 624.444730][T11201] total_pgmajfault 0 [ 624.478588][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.482896][ T28] audit: type=1326 audit(1791599301.913:14775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 624.504309][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.509044][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.516322][T11201] total_inactive_anon 0 [ 624.566255][T11201] total_active_anon 0 [ 624.603955][T11201] total_inactive_file 0 [ 624.648999][T11201] total_active_file 0 [ 624.689462][T11201] total_unevictable 0 [ 624.724555][ T28] audit: type=1326 audit(1791599301.913:14776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 624.767149][T11201] anon_cost 0 [ 624.945745][T11201] file_cost 0 [ 625.431192][T11201] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1549,pid=11200,uid=0 [ 625.556149][ T28] audit: type=1326 audit(1791599301.913:14777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 625.585737][T11201] Memory cgroup out of memory: Killed process 11201 (syz.0.1549) total-vm:102252kB, anon-rss:1384kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 625.672568][ T178] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 625.781888][ T28] audit: type=1326 audit(1791599301.913:14778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 625.806635][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.956865][ T178] usb 4-1: MIDIStreaming interface descriptor not found [ 625.973702][T11201] debugfs: out of free dentries, can not create file 'blocking' [ 626.003308][ T178] usb 4-1: USB disconnect, device number 11 [ 626.045526][ T28] audit: type=1326 audit(1791599301.913:14779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 626.102130][T11213] udevd[11213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.114541][ T28] audit: type=1326 audit(1791599301.913:14780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 626.142176][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.393323][ T28] audit: type=1326 audit(1791599301.913:14781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.2.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f683219e1d9 code=0x7ffc0000 [ 627.215181][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 627.237238][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'. [ 627.251872][T11232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1555'. [ 627.325512][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 627.391243][T11239] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1557'. [ 627.406856][T11239] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 627.426280][T11239] md: couldn't update array info. -22 [ 627.432122][T11239] md: could not open device unknown-block(1,1). [ 627.441647][T11239] md: md_import_device returned -16 [ 627.449612][T11239] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 627.599766][T11247] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1560'. [ 627.601693][T11247] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 627.613164][T11247] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 627.973614][ T28] kauditd_printk_skb: 305 callbacks suppressed [ 627.973627][ T28] audit: type=1326 audit(1791599306.893:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.976604][ T28] audit: type=1326 audit(1791599306.893:15088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.977867][ T28] audit: type=1326 audit(1791599306.893:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.979141][ T28] audit: type=1326 audit(1791599306.893:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.980387][ T28] audit: type=1326 audit(1791599306.893:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.981775][ T28] audit: type=1326 audit(1791599306.893:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.984167][ T28] audit: type=1326 audit(1791599306.903:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.987092][ T28] audit: type=1326 audit(1791599306.903:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.988398][ T28] audit: type=1326 audit(1791599306.903:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.989620][ T28] audit: type=1326 audit(1791599306.903:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 627.999261][T11253] warn_alloc: 2 callbacks suppressed [ 627.999274][T11253] syz.3.1563: vmalloc error: size 28672, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=test,mems_allowed=0-1 [ 628.000333][T11253] CPU: 1 PID: 11253 Comm: syz.3.1563 Not tainted syzkaller #0 [ 628.000356][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.000369][T11253] Call Trace: [ 628.000377][T11253] [ 628.000386][T11253] dump_stack_lvl+0x18c/0x250 [ 628.000415][T11253] ? show_regs_print_info+0x20/0x20 [ 628.000435][T11253] ? load_image+0x420/0x420 [ 628.000464][T11253] ? __rcu_read_unlock+0x7c/0xd0 [ 628.000483][T11253] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 628.000509][T11253] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 628.000537][T11253] warn_alloc+0x246/0x340 [ 628.000563][T11253] ? zone_watermark_ok_safe+0x230/0x230 [ 628.000583][T11253] ? mod_memcg_page_state+0x4bd/0x940 [ 628.000628][T11253] __vmalloc_node_range+0x1055/0x1320 [ 628.000683][T11253] ? free_vm_area+0x50/0x50 [ 628.000708][T11253] ? vscnprintf+0x80/0x80 [ 628.000724][T11253] ? alloc_fd+0x590/0x640 [ 628.000739][T11253] ? kvm_dev_ioctl+0x208/0x1810 [ 628.000751][T11253] __vmalloc+0x7a/0x90 [ 628.000765][T11253] ? kvm_dev_ioctl+0x208/0x1810 [ 628.000778][T11253] kvm_dev_ioctl+0x208/0x1810 [ 628.000801][T11253] ? __fget_files+0x28/0x460 [ 628.000830][T11253] ? kvm_resume+0x1e0/0x1e0 [ 628.000857][T11253] ? bpf_lsm_file_ioctl+0x9/0x10 [ 628.000882][T11253] ? security_file_ioctl+0x80/0xa0 [ 628.000911][T11253] ? kvm_resume+0x1e0/0x1e0 [ 628.000931][T11253] __se_sys_ioctl+0xfd/0x170 [ 628.000947][T11253] do_syscall_64+0x55/0xb0 [ 628.000956][T11253] ? clear_bhb_loop+0x40/0x90 [ 628.000967][T11253] ? clear_bhb_loop+0x40/0x90 [ 628.000978][T11253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.000994][T11253] RIP: 0033:0x7f1883d9e1d9 [ 628.001005][T11253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.001015][T11253] RSP: 002b:00007f1884bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.001027][T11253] RAX: ffffffffffffffda RBX: 00007f1884025fa0 RCX: 00007f1883d9e1d9 [ 628.001035][T11253] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 628.001042][T11253] RBP: 00007f1883e35888 R08: 0000000000000000 R09: 0000000000000000 [ 628.001050][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.001056][T11253] R13: 00007f1884026038 R14: 00007f1884025fa0 R15: 00007fff0796c868 [ 628.001073][T11253] [ 628.001490][T11253] Mem-Info: [ 628.001499][T11253] active_anon:5960 inactive_anon:0 isolated_anon:0 [ 628.001499][T11253] active_file:13305 inactive_file:41914 isolated_file:0 [ 628.001499][T11253] unevictable:768 dirty:226 writeback:1 [ 628.001499][T11253] slab_reclaimable:12354 slab_unreclaimable:94270 [ 628.001499][T11253] mapped:24696 shmem:1362 pagetables:680 [ 628.001499][T11253] sec_pagetables:0 bounce:0 [ 628.001499][T11253] kernel_misc_reclaimable:0 [ 628.001499][T11253] free:1336683 free_pcp:5527 free_cma:0 [ 628.001558][T11253] Node 0 active_anon:23840kB inactive_anon:0kB active_file:53220kB inactive_file:167456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98784kB dirty:904kB writeback:4kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no [ 628.001617][T11253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 628.001670][T11253] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.001728][T11253] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 628.001772][T11253] Node 0 DMA32 free:1427628kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:23804kB inactive_anon:0kB active_file:53220kB inactive_file:166364kB unevictable:1536kB writepending:908kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:7356kB local_pcp:4280kB free_cma:0kB [ 628.001834][T11253] lowmem_reserve[]: 0 0 1 1 1 [ 628.001875][T11253] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1092kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.002636][T11253] lowmem_reserve[]: 0 0 0 0 0 [ 628.002659][T11253] Node 1 Normal free:3903744kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14752kB local_pcp:4352kB free_cma:0kB [ 628.002693][T11253] lowmem_reserve[]: 0 0 0 0 0 [ 628.002715][T11253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 628.002787][T11253] Node 0 DMA32: 1623*4kB (UME) 840*8kB (UME) 815*16kB (UME) 1067*32kB (UME) 287*64kB (UME) 104*128kB (UME) 43*256kB (UME) 35*512kB (UM) 12*1024kB (UME) 4*2048kB (UM) 314*4096kB (M) = 1427628kB [ 628.002889][T11253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 628.004138][T11253] Node 1 Normal: 250*4kB (UME) 55*8kB (UME) 38*16kB (UME) 152*32kB (UME) 48*64kB (UME) 8*128kB (UE) 0*256kB 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3903744kB [ 628.004327][T11253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.004345][T11253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.004362][T11253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.004379][T11253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.004396][T11253] 56606 total pagecache pages [ 628.004405][T11253] 0 pages in swap cache [ 628.004412][T11253] Free swap = 124948kB [ 628.004420][T11253] Total swap = 124996kB [ 628.004428][T11253] 2097051 pages RAM [ 628.004436][T11253] 0 pages HighMem/MovableOnly [ 628.004443][T11253] 421118 pages reserved [ 628.004451][T11253] 0 pages cma reserved [ 629.923835][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.951293][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.095159][T11254] ima: policy update failed [ 630.188850][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.571270][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.604509][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.638217][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.622378][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.717389][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.815506][T11276] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1568'. [ 631.823470][T11276] netlink: 'syz.0.1568': attribute type 10 has an invalid length. [ 631.838828][T11276] md: couldn't update array info. -22 [ 631.839080][T11276] md: could not open device unknown-block(1,1). [ 631.839131][T11276] md: md_import_device returned -16 [ 631.865025][T11276] netlink: 'syz.0.1568': attribute type 10 has an invalid length. [ 631.892985][T11278] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1569'. [ 631.927248][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1567'. [ 631.939643][T11278] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 631.963082][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1567'. [ 631.974208][T11278] md: couldn't update array info. -22 [ 632.002127][T11278] md: could not open device unknown-block(1,1). [ 632.002179][T11278] md: md_import_device returned -16 [ 632.004199][T11278] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 632.059657][T11278] team0: Port device dummy0 removed [ 632.339157][T11288] syz.0.1573 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 632.391441][T11288] CPU: 1 PID: 11288 Comm: syz.0.1573 Not tainted syzkaller #0 [ 632.398955][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 632.409033][T11288] Call Trace: [ 632.412331][T11288] [ 632.415274][T11288] dump_stack_lvl+0x18c/0x250 [ 632.419981][T11288] ? show_regs_print_info+0x20/0x20 [ 632.425210][T11288] ? load_image+0x420/0x420 [ 632.429741][T11288] ? ___ratelimit+0x478/0x610 [ 632.434455][T11288] ? radix_tree_cpu_dead+0x160/0x160 [ 632.439777][T11288] dump_header+0xd8/0x820 [ 632.444146][T11288] oom_kill_process+0x390/0x580 [ 632.449019][T11288] out_of_memory+0xe0e/0x1200 [ 632.453712][T11288] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 632.459351][T11288] ? print_unlock_imbalance_bug+0x160/0x160 [ 632.465251][T11288] ? mutex_lock_nested+0x20/0x20 [ 632.470194][T11288] ? unregister_oom_notifier+0x20/0x20 [ 632.475667][T11288] mem_cgroup_out_of_memory+0x2c2/0x390 [ 632.481221][T11288] ? try_charge_memcg+0xc91/0x17c0 [ 632.486337][T11288] ? drain_local_stock+0x630/0x630 [ 632.491459][T11288] ? do_raw_spin_unlock+0x121/0x230 [ 632.496668][T11288] try_charge_memcg+0xca1/0x17c0 [ 632.501628][T11288] ? folio_flags+0x120/0x120 [ 632.506222][T11288] ? percpu_ref_tryget+0x15/0x180 [ 632.511248][T11288] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 632.516977][T11288] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 632.522966][T11288] ? percpu_ref_tryget+0x15/0x180 [ 632.527992][T11288] ? percpu_ref_tryget+0x15/0x180 [ 632.533019][T11288] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 632.538738][T11288] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 632.544464][T11288] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 632.550275][T11288] obj_cgroup_charge+0x36e/0x630 [ 632.555221][T11288] ? obj_cgroup_charge+0xed/0x630 [ 632.560249][T11288] ? mod_objcg_mlstate+0x320/0x320 [ 632.565367][T11288] ? percpu_ref_put+0x12/0x100 [ 632.570129][T11288] ? percpu_ref_put+0x12/0x100 [ 632.574897][T11288] slab_pre_alloc_hook+0x2e2/0x300 [ 632.580006][T11288] ? slab_pre_alloc_hook+0xb1/0x300 [ 632.585208][T11288] kmem_cache_alloc_lru+0x4d/0x2b0 [ 632.590328][T11288] ? new_inode_pseudo+0x82/0x1d0 [ 632.595269][T11288] ? lookup_one_common+0x450/0x450 [ 632.600381][T11288] new_inode_pseudo+0x82/0x1d0 [ 632.605147][T11288] new_inode+0x22/0x1d0 [ 632.609302][T11288] ? start_creating+0x1f5/0x310 [ 632.614161][T11288] __debugfs_create_file+0x147/0x500 [ 632.619457][T11288] kvm_create_vm_debugfs+0x6de/0x980 [ 632.624753][T11288] ? hardware_enable_all+0x210/0x210 [ 632.630048][T11288] ? __raw_spin_lock_init+0x45/0x100 [ 632.635346][T11288] kvm_dev_ioctl+0x1426/0x1810 [ 632.640124][T11288] ? kvm_resume+0x1e0/0x1e0 [ 632.644635][T11288] ? bpf_lsm_file_ioctl+0x9/0x10 [ 632.649572][T11288] ? security_file_ioctl+0x80/0xa0 [ 632.654691][T11288] ? kvm_resume+0x1e0/0x1e0 [ 632.659195][T11288] __se_sys_ioctl+0xfd/0x170 [ 632.663799][T11288] do_syscall_64+0x55/0xb0 [ 632.668214][T11288] ? clear_bhb_loop+0x40/0x90 [ 632.672890][T11288] ? clear_bhb_loop+0x40/0x90 [ 632.677572][T11288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.683470][T11288] RIP: 0033:0x7f8eee19e1d9 [ 632.687883][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.707496][T11288] RSP: 002b:00007f8eef0ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.715912][T11288] RAX: ffffffffffffffda RBX: 00007f8eee425fa0 RCX: 00007f8eee19e1d9 [ 632.723880][T11288] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 632.731849][T11288] RBP: 00007f8eee235888 R08: 0000000000000000 R09: 0000000000000000 [ 632.739816][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.747811][T11288] R13: 00007f8eee426038 R14: 00007f8eee425fa0 R15: 00007ffd9e5510a8 [ 632.755799][T11288] [ 632.758906][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.765498][T11288] memory: usage 96kB, limit 96kB, failcnt 235 [ 632.771940][T11288] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 632.779670][T11286] __nla_validate_parse: 1 callbacks suppressed [ 632.779684][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 633.022543][T11288] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 633.290452][T11288] Memory cgroup stats for /syz0/test: [ 633.290616][T11288] cache 0 [ 633.299116][T11288] rss 0 [ 633.301927][T11288] rss_huge 0 [ 633.305246][T11288] shmem 0 [ 633.308199][T11288] mapped_file 0 [ 633.311672][T11288] dirty 0 [ 633.314725][T11288] writeback 0 [ 633.318054][T11288] workingset_refault_anon 0 [ 633.322574][T11288] workingset_refault_file 0 [ 633.327166][T11288] swap 0 [ 633.330037][T11288] pgpgin 0 [ 633.333172][T11288] pgpgout 0 [ 633.336317][T11288] pgfault 23 [ 633.339529][T11288] pgmajfault 0 [ 633.342976][T11288] inactive_anon 0 [ 633.346623][T11288] active_anon 0 [ 633.350097][T11288] inactive_file 0 [ 633.354167][T11288] active_file 0 [ 633.357648][T11288] unevictable 0 [ 633.361121][T11288] hierarchical_memory_limit 98304 [ 633.366251][T11288] hierarchical_memsw_limit 9223372036854771712 [ 633.372445][T11288] total_cache 0 [ 633.376086][T11288] total_rss 0 [ 633.379392][T11288] total_rss_huge 0 [ 633.383204][T11288] total_shmem 0 [ 633.386958][T11288] total_mapped_file 0 [ 633.390959][T11288] total_dirty 0 [ 633.394652][T11288] total_writeback 0 [ 633.398480][T11288] total_workingset_refault_anon 0 [ 633.403593][T11288] total_workingset_refault_file 0 [ 633.408617][T11288] total_swap 0 [ 633.411971][T11288] total_pgpgin 0 [ 633.415589][T11288] total_pgpgout 0 [ 633.419243][T11288] total_pgfault 23 [ 633.423174][T11288] total_pgmajfault 0 [ 633.427842][T11288] total_inactive_anon 0 [ 633.433119][T11288] total_active_anon 0 [ 633.441145][T11288] total_inactive_file 0 [ 633.449631][T11288] total_active_file 0 [ 633.457549][T11288] total_unevictable 0 [ 633.465405][T11288] anon_cost 0 [ 633.472088][T11288] file_cost 0 [ 633.478255][T11288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1573,pid=11287,uid=0 [ 633.494460][T11288] Memory cgroup out of memory: Killed process 11288 (syz.0.1573) total-vm:102252kB, anon-rss:1384kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 633.516419][T11288] debugfs: out of free dentries, can not create file 'blocking' [ 633.968804][T11309] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1578'. [ 634.195840][T11309] netlink: 'syz.1.1578': attribute type 10 has an invalid length. [ 634.456023][T11309] md: couldn't update array info. -22 [ 634.470370][T11309] md: could not open device unknown-block(1,1). [ 634.490716][T11309] md: md_import_device returned -16 [ 634.496353][T11314] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 634.511792][T11309] netlink: 'syz.1.1578': attribute type 10 has an invalid length. [ 634.514062][T11314] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 634.687788][T11322] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 634.783600][T11323] hub 1-0:1.0: USB hub found [ 634.790097][T11323] hub 1-0:1.0: 1 port detected [ 635.069287][T11325] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1583'. [ 635.481121][T11325] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 635.561925][T11329] syz.3.1584: attempt to access beyond end of device [ 635.561925][T11329] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 635.593237][T11328] md: couldn't update array info. -22 [ 635.606323][T11325] md: could not open device unknown-block(1,1). [ 635.612665][T11329] FAT-fs (loop7): unable to read boot sector [ 635.633057][T11325] md: md_import_device returned -16 [ 635.647990][T11325] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 635.774811][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 635.807222][T11340] fuse: Bad value for 'fd' [ 635.832865][T11341] netlink: 'syz.2.1586': attribute type 11 has an invalid length. [ 635.853597][T11341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1586'. [ 635.946679][T11345] device-mapper: table: 248:0: multipath: invalid initial priority group number (-EINVAL) [ 635.972687][T11345] device-mapper: ioctl: error adding target to table [ 637.138648][T11361] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1595'. [ 637.149163][T11361] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 637.165104][T11361] md: couldn't update array info. -22 [ 637.170926][T11361] md: could not open device unknown-block(1,1). [ 637.172695][T11362] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 637.177421][T11361] md: md_import_device returned -16 [ 637.179009][T11361] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 637.243813][T11362] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 637.279188][T11367] fuse: Bad value for 'fd' [ 637.280932][T11365] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 637.424858][T11370] hub 1-0:1.0: USB hub found [ 637.431111][T11370] hub 1-0:1.0: 1 port detected [ 638.342146][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 638.807382][T11389] netlink: 'syz.0.1602': attribute type 11 has an invalid length. [ 638.931861][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1602'. [ 640.175660][T11403] fuse: Bad value for 'fd' [ 640.192012][T11405] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1606'. [ 640.232545][T11405] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 640.272888][T11409] warn_alloc: 2 callbacks suppressed [ 640.278725][T11409] syz.2.1609: vmalloc error: size 28672, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=test,mems_allowed=0-1 [ 640.300511][T11409] CPU: 0 PID: 11409 Comm: syz.2.1609 Not tainted syzkaller #0 [ 640.308008][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.318081][T11409] Call Trace: [ 640.321376][T11409] [ 640.324320][T11409] dump_stack_lvl+0x18c/0x250 [ 640.329024][T11409] ? show_regs_print_info+0x20/0x20 [ 640.334250][T11409] ? load_image+0x420/0x420 [ 640.338791][T11409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 640.339961][T11413] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 640.345218][T11409] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 640.345257][T11409] warn_alloc+0x246/0x340 [ 640.358198][T11413] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 640.360576][T11409] ? zone_watermark_ok_safe+0x230/0x230 [ 640.366812][T11405] md: couldn't update array info. -22 [ 640.372834][T11409] ? mod_memcg_page_state+0x4bd/0x940 [ 640.372882][T11409] __vmalloc_node_range+0x1055/0x1320 [ 640.381117][T11405] md: could not open device unknown-block(1,1). [ 640.383777][T11409] ? free_vm_area+0x50/0x50 [ 640.391069][T11405] md: md_import_device returned -16 [ 640.394492][T11409] ? vscnprintf+0x80/0x80 [ 640.394522][T11409] ? alloc_fd+0x590/0x640 [ 640.404795][T11405] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 640.405249][T11409] ? kvm_dev_ioctl+0x208/0x1810 [ 640.405277][T11409] __vmalloc+0x7a/0x90 [ 640.435930][T11409] ? kvm_dev_ioctl+0x208/0x1810 [ 640.440807][T11409] kvm_dev_ioctl+0x208/0x1810 [ 640.445515][T11409] ? __fget_files+0x28/0x460 [ 640.450126][T11409] ? kvm_resume+0x1e0/0x1e0 [ 640.454625][T11409] ? bpf_lsm_file_ioctl+0x9/0x10 [ 640.459550][T11409] ? security_file_ioctl+0x80/0xa0 [ 640.464657][T11409] ? kvm_resume+0x1e0/0x1e0 [ 640.469149][T11409] __se_sys_ioctl+0xfd/0x170 [ 640.473745][T11409] do_syscall_64+0x55/0xb0 [ 640.478179][T11409] ? clear_bhb_loop+0x40/0x90 [ 640.482865][T11409] ? clear_bhb_loop+0x40/0x90 [ 640.487529][T11409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.493414][T11409] RIP: 0033:0x7f683219e1d9 [ 640.497835][T11409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.517429][T11409] RSP: 002b:00007f6833105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.525829][T11409] RAX: ffffffffffffffda RBX: 00007f6832425fa0 RCX: 00007f683219e1d9 [ 640.533807][T11409] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 640.541786][T11409] RBP: 00007f6832235888 R08: 0000000000000000 R09: 0000000000000000 [ 640.549746][T11409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.557712][T11409] R13: 00007f6832426038 R14: 00007f6832425fa0 R15: 00007ffcbd322ea8 [ 640.565688][T11409] [ 640.570213][T11409] Mem-Info: [ 640.574172][T11409] active_anon:5575 inactive_anon:0 isolated_anon:0 [ 640.574172][T11409] active_file:13305 inactive_file:40173 isolated_file:0 [ 640.574172][T11409] unevictable:768 dirty:76 writeback:0 [ 640.574172][T11409] slab_reclaimable:12006 slab_unreclaimable:93362 [ 640.574172][T11409] mapped:24595 shmem:1363 pagetables:590 [ 640.574172][T11409] sec_pagetables:0 bounce:0 [ 640.574172][T11409] kernel_misc_reclaimable:0 [ 640.574172][T11409] free:1336677 free_pcp:11091 free_cma:0 [ 640.619548][T11409] Node 0 active_anon:22300kB inactive_anon:0kB active_file:53220kB inactive_file:160492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98380kB dirty:304kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no [ 640.652037][T11409] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 640.682944][T11409] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.732610][T11409] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 640.745346][T11417] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 640.753360][T11409] Node 0 DMA32 free:1427604kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:22164kB inactive_anon:0kB active_file:53220kB inactive_file:159400kB unevictable:1536kB writepending:304kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:29184kB local_pcp:20780kB free_cma:0kB [ 640.787556][T11409] lowmem_reserve[]: 0 0 1 1 1 [ 640.810762][T11409] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1092kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.869354][T11420] hub 1-0:1.0: USB hub found [ 640.874932][T11420] hub 1-0:1.0: 1 port detected [ 640.929440][T11409] lowmem_reserve[]: 0 0 0 0 0 [ 640.956319][T11409] Node 1 Normal free:3903744kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14756kB local_pcp:4352kB free_cma:0kB [ 641.137505][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 641.171456][T11409] lowmem_reserve[]: 0 0 0 0 0 [ 641.307706][T11409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 641.626211][T11409] Node 0 DMA32: 1027*4kB (UM) 1117*8kB (UM) 790*16kB (UME) 950*32kB (UME) 288*64kB (UME) 105*128kB (UME) 43*256kB (UME) 35*512kB (UM) 12*1024kB (UME) 4*2048kB (UM) 315*4096kB (UM) = 1427604kB [ 641.660400][T11409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 641.703392][T11409] Node 1 Normal: 250*4kB (UME) 55*8kB (UME) 38*16kB (UME) 152*32kB (UME) 48*64kB (UME) 8*128kB (UE) 0*256kB 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3903744kB [ 641.758461][T11409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 641.768820][T11409] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 641.783131][T11409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 641.793390][T11409] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 641.802973][T11409] 54838 total pagecache pages [ 641.807835][T11409] 0 pages in swap cache [ 641.812095][T11409] Free swap = 124948kB [ 641.816496][T11409] Total swap = 124996kB [ 641.820782][T11409] 2097051 pages RAM [ 641.841958][T11409] 0 pages HighMem/MovableOnly [ 641.881847][T11409] 421118 pages reserved [ 642.572829][T11409] 0 pages cma reserved [ 642.662438][T11439] fuse: Bad value for 'fd' [ 643.773185][T11456] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 643.782214][T11456] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 644.697743][ T27] IPVS: starting estimator thread 0... [ 644.764845][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 644.813054][T11467] IPVS: using max 34 ests per chain, 81600 per kthread [ 644.865412][T11473] fuse: Invalid rootmode [ 646.032601][T11495] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 646.041632][T11495] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 648.052237][T11506] fuse: Invalid rootmode [ 648.672123][T11529] jffs2: notice: (11529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 648.784482][T11537] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 648.793879][T11537] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 649.739906][T11544] fuse: Invalid rootmode [ 649.817708][T11547] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 649.881712][T11547] udc usbip-vudc.0: failed to start g1: -19 [ 649.940886][T11547] UDC core: g1: couldn't find an available UDC or it's busy [ 650.533113][T11563] jffs2: notice: (11563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 650.558118][ T28] kauditd_printk_skb: 343 callbacks suppressed [ 650.558130][ T28] audit: type=1326 audit(1791599329.473:15440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 650.609835][ T28] audit: type=1326 audit(1791599329.473:15441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 650.673456][ T28] audit: type=1326 audit(1791599329.513:15442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.248392][ T28] audit: type=1326 audit(1791599329.513:15443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.273057][ T28] audit: type=1326 audit(1791599329.513:15444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.298125][ T28] audit: type=1326 audit(1791599329.513:15445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.322979][ T28] audit: type=1326 audit(1791599329.513:15446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.351148][ T28] audit: type=1326 audit(1791599329.513:15447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.421862][ T28] audit: type=1326 audit(1791599329.513:15448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.464926][T11573] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 652.474212][T11573] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 652.539491][ T28] audit: type=1326 audit(1791599329.513:15449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 652.747494][T11565] ima: policy update failed [ 652.774907][T11577] fuse: Bad value for 'rootmode' [ 652.823921][T11579] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 653.545720][T11592] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 653.560289][T11592] udc usbip-vudc.0: failed to start g1: -19 [ 653.568102][T11592] UDC core: g1: couldn't find an available UDC or it's busy [ 653.682751][T11598] gadgetfs: bound to dummy_udc driver [ 655.222042][T11609] fuse: Bad value for 'rootmode' [ 655.566071][ T28] kauditd_printk_skb: 694 callbacks suppressed [ 655.566124][ T28] audit: type=1326 audit(1791599334.443:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 656.004054][T11612] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 656.041248][ T28] audit: type=1326 audit(1791599334.443:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 656.332322][ T28] audit: type=1326 audit(1791599334.453:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.126331][ T28] audit: type=1326 audit(1791599334.453:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.150979][ T28] audit: type=1326 audit(1791599334.453:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.175745][ T28] audit: type=1326 audit(1791599334.453:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.201284][ T28] audit: type=1326 audit(1791599334.453:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.234712][T11601] ima: policy update failed [ 657.321485][ T28] audit: type=1326 audit(1791599334.453:16151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.496908][ T28] audit: type=1326 audit(1791599334.463:16152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.521426][ T28] audit: type=1326 audit(1791599334.463:16153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.1.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2855ea0e code=0x7ffc0000 [ 657.568127][T11620] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 657.719457][T11621] hub 1-0:1.0: USB hub found [ 657.726922][T11621] hub 1-0:1.0: 1 port detected [ 660.431508][T11622] ima: policy update failed [ 660.613608][T11641] fuse: Bad value for 'rootmode' [ 660.614649][T11639] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 660.631146][T11639] udc usbip-vudc.0: failed to start g1: -19 [ 660.637496][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 660.637506][ T28] audit: type=1326 audit(1791599339.553:16388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1883d5ea0e code=0x7ffc0000 [ 660.647251][T11639] UDC core: g1: couldn't find an available UDC or it's busy [ 660.746773][ T28] audit: type=1326 audit(1791599339.663:16389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1883d5ea0e code=0x7ffc0000 [ 660.849944][T11645] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 660.856505][T11645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 660.864199][T11645] vhci_hcd vhci_hcd.0: Device attached [ 660.914849][ T28] audit: type=1326 audit(1791599339.763:16390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1883d5ea0e code=0x7ffc0000 [ 661.083730][ T973] vhci_hcd: vhci_device speed not set [ 661.102309][ T28] audit: type=1326 audit(1791599339.873:16391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1883d5ea0e code=0x7ffc0000 [ 661.212357][ T973] usb 33-1: new full-speed USB device number 11 using vhci_hcd [ 661.357062][ T28] audit: type=1326 audit(1791599339.973:16392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1883d9e1d9 code=0x7ffc0000 [ 661.555932][T11646] vhci_hcd: connection reset by peer [ 661.586286][ T8625] vhci_hcd: stop threads [ 661.619584][ T8625] vhci_hcd: release socket [ 661.676140][ T8625] vhci_hcd: disconnect device [ 662.198545][T11656] FAULT_INJECTION: forcing a failure. [ 662.198545][T11656] name failslab, interval 1, probability 0, space 0, times 0 [ 662.255700][T11656] CPU: 0 PID: 11656 Comm: syz.2.1690 Not tainted syzkaller #0 [ 662.263220][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 662.273303][T11656] Call Trace: [ 662.276571][T11656] [ 662.279491][T11656] dump_stack_lvl+0x18c/0x250 [ 662.284163][T11656] ? show_regs_print_info+0x20/0x20 [ 662.289348][T11656] ? load_image+0x420/0x420 [ 662.293857][T11656] ? __might_sleep+0xe0/0xe0 [ 662.298451][T11656] ? __lock_acquire+0x7eb0/0x7eb0 [ 662.303473][T11656] should_fail_ex+0x394/0x4c0 [ 662.308141][T11656] should_failslab+0x9/0x20 [ 662.312630][T11656] slab_pre_alloc_hook+0x59/0x300 [ 662.317641][T11656] ? kasan_set_track+0x5f/0x70 [ 662.322406][T11656] ? v9fs_session_init+0xb5/0x1960 [ 662.327513][T11656] ? v9fs_session_init+0xb5/0x1960 [ 662.332617][T11656] __kmem_cache_alloc_node+0x53/0x250 [ 662.337976][T11656] ? kasan_set_track+0x5f/0x70 [ 662.342730][T11656] ? v9fs_session_init+0xb5/0x1960 [ 662.347830][T11656] __kmalloc_node_track_caller+0xa4/0x230 [ 662.353559][T11656] kstrdup+0x3b/0x80 [ 662.357492][T11656] v9fs_session_init+0xb5/0x1960 [ 662.362468][T11656] ? v9fs_show_options+0x700/0x700 [ 662.367614][T11656] v9fs_mount+0xd0/0xb40 [ 662.371866][T11656] ? kfree+0x31/0x1a0 [ 662.375841][T11656] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 662.381634][T11656] ? vfs_parse_fs_param+0x420/0x420 [ 662.386826][T11656] legacy_get_tree+0xea/0x180 [ 662.391507][T11656] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 662.397302][T11656] vfs_get_tree+0x8c/0x280 [ 662.401725][T11656] do_new_mount+0x24a/0xa40 [ 662.406219][T11656] __se_sys_mount+0x2e7/0x3d0 [ 662.410884][T11656] ? __x64_sys_mount+0xc0/0xc0 [ 662.415647][T11656] ? lockdep_hardirqs_on+0x98/0x150 [ 662.420829][T11656] ? __x64_sys_mount+0x20/0xc0 [ 662.425578][T11656] do_syscall_64+0x55/0xb0 [ 662.429980][T11656] ? clear_bhb_loop+0x40/0x90 [ 662.434644][T11656] ? clear_bhb_loop+0x40/0x90 [ 662.439307][T11656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.445190][T11656] RIP: 0033:0x7f683219e1d9 [ 662.449597][T11656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.469199][T11656] RSP: 002b:00007f6833105028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 662.477603][T11656] RAX: ffffffffffffffda RBX: 00007f6832425fa0 RCX: 00007f683219e1d9 [ 662.485558][T11656] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0 [ 662.493515][T11656] RBP: 00007f6832235888 R08: 0000200000000480 R09: 0000000000000000 [ 662.501466][T11656] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000000 [ 662.509422][T11656] R13: 00007f6832426038 R14: 00007f6832425fa0 R15: 00007ffcbd322ea8 [ 662.517387][T11656] [ 662.571794][T11665] fuse: Unknown parameter 'use00000000000000000000' [ 662.699388][ T28] audit: type=1326 audit(1791599341.613:16393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 662.711544][T11671] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 662.770626][ T28] audit: type=1326 audit(1791599341.643:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 662.809416][T11671] udc usbip-vudc.0: failed to start g1: -19 [ 663.017260][T11671] UDC core: g1: couldn't find an available UDC or it's busy [ 663.089063][ T28] audit: type=1326 audit(1791599341.643:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 663.143852][T11673] tipc: Enabled bearer , priority 1 [ 663.382566][T11672] tipc: Resetting bearer [ 663.466803][ T28] audit: type=1326 audit(1791599341.643:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 664.983378][ T28] audit: type=1326 audit(1791599341.643:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 665.009711][T11672] tipc: Disabling bearer [ 665.039525][ T27] tipc: Node number set to 2740111997 [ 666.112575][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 666.112623][ T28] audit: type=1326 audit(1791599344.793:16475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.274086][T11686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 666.280657][T11686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 666.288480][T11686] vhci_hcd vhci_hcd.0: Device attached [ 666.423703][T11666] ima: policy update failed [ 666.428376][T11687] vhci_hcd: connection closed [ 666.428796][ T143] vhci_hcd: stop threads [ 666.447750][ T143] vhci_hcd: release socket [ 666.452210][ T143] vhci_hcd: disconnect device [ 666.519682][ T28] audit: type=1326 audit(1791599345.063:16476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.545299][ T973] vhci_hcd: vhci_device speed not set [ 666.592101][ T28] audit: type=1326 audit(1791599345.063:16477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.605297][T11700] fuse: Unknown parameter 'use00000000000000000000' [ 666.660131][ T28] audit: type=1326 audit(1791599345.063:16478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.697300][ T28] audit: type=1326 audit(1791599345.073:16479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.727774][ T28] audit: type=1326 audit(1791599345.073:16480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.794050][ T28] audit: type=1326 audit(1791599345.073:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.834331][ T28] audit: type=1326 audit(1791599345.073:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.886315][ T28] audit: type=1326 audit(1791599345.073:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 666.922167][T11711] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 666.934828][ T28] audit: type=1326 audit(1791599345.083:16484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 667.284144][T11717] hub 1-0:1.0: USB hub found [ 667.291628][T11717] hub 1-0:1.0: 1 port detected [ 667.810931][T11715] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 667.817500][T11715] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 667.825176][T11715] vhci_hcd vhci_hcd.0: Device attached [ 667.846570][T11716] vhci_hcd: connection closed [ 668.033626][ T27] vhci_hcd: vhci_device speed not set [ 668.048588][ T9935] vhci_hcd: stop threads [ 668.094998][ T9935] vhci_hcd: release socket [ 668.374627][ T9935] vhci_hcd: disconnect device [ 668.378810][ T27] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 668.395474][ T27] usb 37-1: enqueue for inactive port 0 [ 668.485280][T11723] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 668.492560][T11723] udc usbip-vudc.0: failed to start g1: -19 [ 668.523962][ T27] vhci_hcd: vhci_device speed not set [ 668.530784][T11723] UDC core: g1: couldn't find an available UDC or it's busy [ 668.569066][T11730] fuse: Unknown parameter 'use00000000000000000000' [ 668.951159][T11743] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 668.960745][T11743] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 669.122351][ T973] IPVS: starting estimator thread 0... [ 669.253476][T11745] IPVS: using max 17 ests per chain, 40800 per kthread [ 669.807680][T11748] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 669.814246][T11748] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 669.822324][T11748] vhci_hcd vhci_hcd.0: Device attached [ 670.043807][ T27] vhci_hcd: vhci_device speed not set [ 670.915084][T11749] vhci_hcd: connection closed [ 670.923327][ T2950] vhci_hcd: stop threads [ 670.942597][ T2950] vhci_hcd: release socket [ 670.956892][ T2950] vhci_hcd: disconnect device [ 671.013228][ T27] usb 39-1: new full-speed USB device number 13 using vhci_hcd [ 671.058204][ T27] usb 39-1: enqueue for inactive port 0 [ 671.223573][ T27] vhci_hcd: vhci_device speed not set [ 672.173765][T11761] gadgetfs: bound to dummy_udc driver [ 672.473518][T11763] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 672.539081][T11762] jffs2: notice: (11762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 673.312451][T11779] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 673.331422][T11782] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 673.339290][T11782] udc usbip-vudc.0: failed to start g1: -19 [ 673.357972][T11782] UDC core: g1: couldn't find an available UDC or it's busy [ 673.467732][T11786] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 673.476895][T11786] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 675.187106][T11797] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 675.196346][T11797] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 675.627967][T11800] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 675.724329][T11803] hub 1-0:1.0: USB hub found [ 675.729919][T11803] hub 1-0:1.0: 1 port detected [ 676.659794][T11811] jffs2: notice: (11811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 676.808715][T11819] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 676.816567][T11819] udc usbip-vudc.0: failed to start g1: -19 [ 676.858553][T11821] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 676.867612][T11821] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 676.903030][T11819] UDC core: g1: couldn't find an available UDC or it's busy [ 678.860995][T11834] jffs2: notice: (11834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 679.803883][T11841] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 679.813583][T11841] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 679.880643][T11840] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 680.693349][T11843] hub 1-0:1.0: USB hub found [ 680.698781][T11843] hub 1-0:1.0: 1 port detected [ 680.883592][T11847] syz.3.1753: vmalloc error: size 28672, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=test,mems_allowed=0-1 [ 680.911460][T11847] CPU: 0 PID: 11847 Comm: syz.3.1753 Not tainted syzkaller #0 [ 680.918962][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 680.929036][T11847] Call Trace: [ 680.932336][T11847] [ 680.935284][T11847] dump_stack_lvl+0x18c/0x250 [ 680.939988][T11847] ? show_regs_print_info+0x20/0x20 [ 680.945211][T11847] ? load_image+0x420/0x420 [ 680.949759][T11847] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 680.956209][T11847] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 680.962750][T11847] warn_alloc+0x246/0x340 [ 680.967110][T11847] ? zone_watermark_ok_safe+0x230/0x230 [ 680.972676][T11847] ? mod_memcg_page_state+0x4bd/0x940 [ 680.978100][T11847] __vmalloc_node_range+0x1055/0x1320 [ 680.983530][T11847] ? free_vm_area+0x50/0x50 [ 680.988065][T11847] ? vscnprintf+0x80/0x80 [ 680.992425][T11847] ? alloc_fd+0x590/0x640 [ 680.996783][T11847] ? kvm_dev_ioctl+0x208/0x1810 [ 681.001665][T11847] __vmalloc+0x7a/0x90 [ 681.005770][T11847] ? kvm_dev_ioctl+0x208/0x1810 [ 681.010652][T11847] kvm_dev_ioctl+0x208/0x1810 [ 681.012367][T11853] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 681.015340][T11847] ? __fget_files+0x28/0x460 [ 681.015377][T11847] ? kvm_resume+0x1e0/0x1e0 [ 681.022696][T11853] udc usbip-vudc.0: failed to start g1: -19 [ 681.026976][T11847] ? bpf_lsm_file_ioctl+0x9/0x10 [ 681.027002][T11847] ? security_file_ioctl+0x80/0xa0 [ 681.027033][T11847] ? kvm_resume+0x1e0/0x1e0 [ 681.032145][T11853] UDC core: g1: couldn't find an available UDC or it's busy [ 681.037394][T11847] __se_sys_ioctl+0xfd/0x170 [ 681.037428][T11847] do_syscall_64+0x55/0xb0 [ 681.037447][T11847] ? clear_bhb_loop+0x40/0x90 [ 681.037468][T11847] ? clear_bhb_loop+0x40/0x90 [ 681.077617][T11847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.083523][T11847] RIP: 0033:0x7f1883d9e1d9 [ 681.087943][T11847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.107554][T11847] RSP: 002b:00007f1884bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.115973][T11847] RAX: ffffffffffffffda RBX: 00007f1884025fa0 RCX: 00007f1883d9e1d9 [ 681.123945][T11847] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 681.131926][T11847] RBP: 00007f1883e35888 R08: 0000000000000000 R09: 0000000000000000 [ 681.139900][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.147876][T11847] R13: 00007f1884026038 R14: 00007f1884025fa0 R15: 00007fff0796c868 [ 681.155859][T11847] [ 681.216197][T11856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.370458][T11847] Mem-Info: [ 681.392705][T11847] active_anon:5640 inactive_anon:0 isolated_anon:0 [ 681.392705][T11847] active_file:13305 inactive_file:40213 isolated_file:0 [ 681.392705][T11847] unevictable:768 dirty:187 writeback:0 [ 681.392705][T11847] slab_reclaimable:11005 slab_unreclaimable:95510 [ 681.392705][T11847] mapped:24617 shmem:1361 pagetables:609 [ 681.392705][T11847] sec_pagetables:0 bounce:0 [ 681.392705][T11847] kernel_misc_reclaimable:0 [ 681.392705][T11847] free:1335268 free_pcp:9186 free_cma:0 [ 681.689444][T11847] Node 0 active_anon:22660kB inactive_anon:0kB active_file:53220kB inactive_file:160652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98468kB dirty:748kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10856kB pagetables:2536kB sec_pagetables:0kB all_unreclaimable? no [ 682.580706][T11847] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 682.625714][T11847] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.710555][T11847] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 682.753148][T11847] Node 0 DMA32 free:1421520kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:22328kB inactive_anon:0kB active_file:53220kB inactive_file:159492kB unevictable:1536kB writepending:764kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:27588kB local_pcp:13548kB free_cma:0kB [ 682.788530][T11847] lowmem_reserve[]: 0 0 1 1 1 [ 682.797381][T11847] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1092kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.825530][T11847] lowmem_reserve[]: 0 0 0 0 0 [ 682.830303][T11847] Node 1 Normal free:3903744kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14756kB local_pcp:10404kB free_cma:0kB [ 682.861445][T11847] lowmem_reserve[]: 0 0 0 0 0 [ 682.866561][T11847] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 682.874107][T11869] jffs2: notice: (11869) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 682.879728][T11847] Node 0 DMA32: 2594*4kB (UME) 1779*8kB (UME) 995*16kB (UME) 515*32kB (UME) 297*64kB (UME) 106*128kB (UME) 44*256kB (UME) 35*512kB (UM) 12*1024kB (UME) 2*2048kB (M) 314*4096kB (M) = 1421296kB [ 682.915695][T11847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.928468][T11847] Node 1 Normal: 250*4kB (UME) 55*8kB (UME) 38*16kB (UME) 152*32kB (UME) 48*64kB (UME) 8*128kB (UE) 0*256kB 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3903744kB [ 682.958447][T11847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.981169][T11847] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.001606][T11847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.031894][T11847] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.054098][T11847] 54862 total pagecache pages [ 683.058812][T11847] 0 pages in swap cache [ 683.067524][T11847] Free swap = 124948kB [ 683.071716][T11847] Total swap = 124996kB [ 683.078155][T11847] 2097051 pages RAM [ 683.093059][T11847] 0 pages HighMem/MovableOnly [ 683.097762][T11847] 421118 pages reserved [ 683.101928][T11847] 0 pages cma reserved [ 683.114885][T11878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1762'. [ 683.271836][T11879] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 683.281035][T11879] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 684.126365][T11890] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 684.134185][T11890] udc usbip-vudc.0: failed to start g1: -19 [ 684.140888][T11890] UDC core: g1: couldn't find an available UDC or it's busy [ 684.167879][T11892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.916657][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.923055][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.238072][T11905] jffs2: notice: (11905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 687.139309][T11922] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 687.148316][T11922] udc usbip-vudc.0: failed to start g1: -19 [ 687.170489][T11922] UDC core: g1: couldn't find an available UDC or it's busy [ 687.584732][T11935] jffs2: notice: (11935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 687.738565][T11938] fuse: Bad value for 'fd' [ 687.756015][T11938] netlink: 'syz.1.1782': attribute type 11 has an invalid length. [ 687.768454][T11938] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1782'. [ 687.982262][T11948] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 687.991372][T11948] udc usbip-vudc.0: failed to start g1: -19 [ 687.998236][T11948] UDC core: g1: couldn't find an available UDC or it's busy [ 688.103848][T11952] netlink: 11820 bytes leftover after parsing attributes in process `syz.1.1789'. [ 688.184495][T11958] jffs2: notice: (11958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 688.371743][T11965] fuse: Bad value for 'fd' [ 688.391062][T11965] netlink: 'syz.1.1794': attribute type 11 has an invalid length. [ 688.401757][T11965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1794'. [ 688.854438][T11987] jffs2: notice: (11987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 688.979193][T11991] overlayfs: failed to resolve './file1': -2 [ 689.732443][T11992] netlink: 11820 bytes leftover after parsing attributes in process `syz.1.1802'. [ 689.830358][T11998] netlink: 'syz.0.1805': attribute type 11 has an invalid length. [ 689.838584][T11998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1805'. [ 691.231337][T12028] netlink: 'syz.0.1816': attribute type 11 has an invalid length. [ 691.240042][T12028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1816'. [ 691.330309][T12032] netlink: 11820 bytes leftover after parsing attributes in process `syz.0.1819'. [ 691.383032][ T973] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 691.538298][ T973] usb 3-1: device descriptor read/64, error -71 [ 692.085710][ T973] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 692.459743][T12053] netlink: 'syz.0.1827': attribute type 11 has an invalid length. [ 692.468031][T12053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1827'. [ 692.583157][ T973] usb 3-1: device descriptor read/64, error -71 [ 692.652375][T12058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 692.658935][T12058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 692.666751][T12058] vhci_hcd vhci_hcd.0: Device attached [ 692.883858][ T5857] vhci_hcd: vhci_device speed not set [ 693.003211][ T5857] usb 35-1: new full-speed USB device number 15 using vhci_hcd [ 693.319047][T12059] vhci_hcd: connection reset by peer [ 693.358175][ T48] vhci_hcd: stop threads [ 693.410673][ T48] vhci_hcd: release socket [ 693.460832][ T48] vhci_hcd: disconnect device [ 693.670414][T12064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.840473][ T973] usb usb3-port1: attempt power cycle [ 694.387246][ T973] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 694.648332][ T973] usb 3-1: device descriptor read/8, error -71 [ 694.867665][T12074] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 694.880254][T12074] netlink: 13088 bytes leftover after parsing attributes in process `syz.2.1833'. [ 695.862720][T12090] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 695.871975][T12090] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 696.152061][T12088] netlink: 'syz.3.1838': attribute type 11 has an invalid length. [ 696.203117][T12088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1838'. [ 697.099335][T12113] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 697.163064][ T5101] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 697.198868][T12115] hub 1-0:1.0: USB hub found [ 697.208641][T12115] hub 1-0:1.0: 1 port detected [ 697.353544][ T5101] usb 4-1: device descriptor read/64, error -71 [ 697.759287][ T5101] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 697.822749][T12116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.207896][ T5101] usb 4-1: device descriptor read/64, error -71 [ 698.923205][ T5101] usb usb4-port1: attempt power cycle [ 698.928883][ T5857] vhci_hcd: vhci_device speed not set [ 699.118621][T12123] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 699.126634][T12123] netlink: 13088 bytes leftover after parsing attributes in process `syz.2.1847'. [ 699.205822][T12116] syz.1.1842: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 699.237492][T12116] CPU: 1 PID: 12116 Comm: syz.1.1842 Not tainted syzkaller #0 [ 699.244983][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 699.255036][T12116] Call Trace: [ 699.258310][T12116] [ 699.261236][T12116] dump_stack_lvl+0x18c/0x250 [ 699.265918][T12116] ? show_regs_print_info+0x20/0x20 [ 699.271112][T12116] ? load_image+0x420/0x420 [ 699.275637][T12116] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 699.282071][T12116] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 699.288608][T12116] warn_alloc+0x246/0x340 [ 699.292967][T12116] ? zone_watermark_ok_safe+0x230/0x230 [ 699.298526][T12116] ? _raw_spin_unlock+0x28/0x40 [ 699.303391][T12116] ? kasan_set_track+0x5f/0x70 [ 699.308159][T12116] __vmalloc_node_range+0x661/0x1320 [ 699.313448][T12116] ? __asan_memset+0x22/0x40 [ 699.318063][T12116] ? free_vm_area+0x50/0x50 [ 699.322573][T12116] ? kvmalloc_node+0x70/0x180 [ 699.327266][T12116] ? rcu_is_watching+0x15/0xb0 [ 699.332033][T12116] ? kvmalloc_node+0x70/0x180 [ 699.336710][T12116] ? trace_kmalloc+0x1f/0xa0 [ 699.341303][T12116] kvmalloc_node+0x13f/0x180 [ 699.345898][T12116] ? hash_netiface_create+0x34b/0xf80 [ 699.351267][T12116] hash_netiface_create+0x34b/0xf80 [ 699.356458][T12116] ? __lock_acquire+0x7eb0/0x7eb0 [ 699.361483][T12116] ? __nla_parse+0x40/0x50 [ 699.365896][T12116] ? hash_netport6_gc+0x6d0/0x6d0 [ 699.370921][T12116] ip_set_create+0xad1/0x1960 [ 699.375602][T12116] ? ip_set_create+0x4fe/0x1960 [ 699.380456][T12116] ? ip_set_protocol+0x5b0/0x5b0 [ 699.385426][T12116] nfnetlink_rcv_msg+0xcaf/0x1290 [ 699.390452][T12116] ? nfnetlink_rcv_msg+0x228/0x1290 [ 699.395659][T12116] ? nfnetlink_unbind+0x160/0x160 [ 699.400697][T12116] ? __schedule+0x1805/0x4660 [ 699.405369][T12116] ? netlink_unicast+0x77b/0x930 [ 699.410305][T12116] ? netlink_sendmsg+0x8d0/0xbf0 [ 699.415243][T12116] ? mark_lock+0x94/0x320 [ 699.419574][T12116] netlink_rcv_skb+0x235/0x4c0 [ 699.424341][T12116] ? nfnetlink_unbind+0x160/0x160 [ 699.429367][T12116] ? netlink_ack+0x1160/0x1160 [ 699.434145][T12116] ? apparmor_capable+0x137/0x1a0 [ 699.439170][T12116] ? bpf_lsm_capable+0x9/0x10 [ 699.443839][T12116] ? security_capable+0x89/0xb0 [ 699.448695][T12116] nfnetlink_rcv+0x2c9/0x2490 [ 699.453384][T12116] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 699.459361][T12116] ? __lock_acquire+0x7eb0/0x7eb0 [ 699.464397][T12116] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 699.470291][T12116] ? lockdep_hardirqs_on+0x98/0x150 [ 699.475496][T12116] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 699.481040][T12116] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 699.486930][T12116] ? _raw_spin_unlock+0x40/0x40 [ 699.491789][T12116] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 699.498388][T12116] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 699.504012][T12116] ? __skb_clone+0x5c/0x6c0 [ 699.508531][T12116] ? netlink_deliver_tap+0x2e/0x1b0 [ 699.513728][T12116] ? __lock_acquire+0x7eb0/0x7eb0 [ 699.518756][T12116] ? __rcu_read_unlock+0x7c/0xd0 [ 699.523684][T12116] ? netlink_deliver_tap+0x2e/0x1b0 [ 699.528882][T12116] netlink_unicast+0x7b1/0x930 [ 699.533653][T12116] netlink_sendmsg+0x8d0/0xbf0 [ 699.538426][T12116] ? netlink_getsockopt+0x590/0x590 [ 699.543622][T12116] ? apparmor_socket_sendmsg+0x8e/0x330 [ 699.549165][T12116] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 699.554448][T12116] ? security_socket_sendmsg+0x80/0xa0 [ 699.559901][T12116] ? netlink_getsockopt+0x590/0x590 [ 699.565100][T12116] ____sys_sendmsg+0x61b/0x980 [ 699.569867][T12116] ? __asan_memset+0x22/0x40 [ 699.574456][T12116] ? __sys_sendmsg_sock+0x30/0x30 [ 699.579477][T12116] ? __import_iovec+0x5f2/0x850 [ 699.584335][T12116] ? import_iovec+0x73/0xa0 [ 699.588848][T12116] ___sys_sendmsg+0x2a6/0x360 [ 699.593528][T12116] ? __sys_sendmsg+0x2b0/0x2b0 [ 699.598323][T12116] __se_sys_sendmsg+0x1d0/0x2c0 [ 699.603176][T12116] ? __x64_sys_sendmsg+0x80/0x80 [ 699.608130][T12116] ? lockdep_hardirqs_on+0x98/0x150 [ 699.613329][T12116] do_syscall_64+0x55/0xb0 [ 699.617740][T12116] ? clear_bhb_loop+0x40/0x90 [ 699.622409][T12116] ? clear_bhb_loop+0x40/0x90 [ 699.627079][T12116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.632975][T12116] RIP: 0033:0x7f2b2859e1d9 [ 699.637388][T12116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.656989][T12116] RSP: 002b:00007f2b25aa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.665398][T12116] RAX: ffffffffffffffda RBX: 00007f2b28826450 RCX: 00007f2b2859e1d9 [ 699.673381][T12116] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 699.681343][T12116] RBP: 00007f2b28635888 R08: 0000000000000000 R09: 0000000000000000 [ 699.689312][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.697272][T12116] R13: 00007f2b288264e8 R14: 00007f2b28826450 R15: 00007ffd75d35588 [ 699.705248][T12116] [ 699.729237][T12116] Mem-Info: [ 699.732502][T12116] active_anon:5634 inactive_anon:0 isolated_anon:0 [ 699.732502][T12116] active_file:13305 inactive_file:40194 isolated_file:0 [ 699.732502][T12116] unevictable:768 dirty:31 writeback:5 [ 699.732502][T12116] slab_reclaimable:11121 slab_unreclaimable:95779 [ 699.732502][T12116] mapped:28946 shmem:1361 pagetables:610 [ 699.732502][T12116] sec_pagetables:0 bounce:0 [ 699.732502][T12116] kernel_misc_reclaimable:0 [ 699.732502][T12116] free:1337228 free_pcp:6816 free_cma:0 [ 699.779175][T12116] Node 0 active_anon:22536kB inactive_anon:0kB active_file:53220kB inactive_file:160576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115784kB dirty:124kB writeback:20kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10644kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no [ 699.812314][ T5101] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 699.820506][T12116] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 699.863191][ T5101] usb 4-1: device descriptor read/8, error -71 [ 699.869428][T12116] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.906736][T12116] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 699.912682][T12116] Node 0 DMA32 free:1429556kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:22504kB inactive_anon:0kB active_file:53220kB inactive_file:159484kB unevictable:1536kB writepending:112kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:12844kB local_pcp:11048kB free_cma:0kB [ 700.163917][ T5101] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 700.169421][T12116] lowmem_reserve[]: 0 0 1 1 1 [ 700.239701][T12116] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1092kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.540315][T12116] lowmem_reserve[]: 0 0 0 0 0 [ 700.582358][T12116] Node 1 Normal free:3903744kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14756kB local_pcp:10404kB free_cma:0kB [ 700.672995][T12116] lowmem_reserve[]: 0 0 0 0 0 [ 700.677760][T12116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 700.723119][T12116] Node 0 DMA32: 1781*4kB (UME) 2154*8kB (UME) 1205*16kB (UME) 650*32kB (UME) 350*64kB (UME) 122*128kB (UME) 50*256kB (UME) 35*512kB (UM) 14*1024kB (UME) 2*2048kB (M) 312*4096kB (M) = 1429556kB [ 700.760653][T12133] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 700.769633][T12133] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 700.926606][ T5101] usb 4-1: device not accepting address 15, error -71 [ 701.008711][ T5101] usb usb4-port1: unable to enumerate USB device [ 701.562253][T12116] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 701.574089][T12116] Node 1 Normal: 250*4kB (UME) 55*8kB (UME) 38*16kB (UME) 152*32kB (UME) 48*64kB (UME) 8*128kB (UE) 0*256kB 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3903744kB [ 701.591871][T12116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 701.609591][T12116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.619204][T12116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 701.629357][T12116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.639492][T12116] 54862 total pagecache pages [ 701.649699][T12116] 0 pages in swap cache [ 701.653968][T12116] Free swap = 124948kB [ 701.669073][T12116] Total swap = 124996kB [ 701.683187][T12116] 2097051 pages RAM [ 701.687136][T12116] 0 pages HighMem/MovableOnly [ 701.702839][T12130] netlink: 'syz.2.1849': attribute type 11 has an invalid length. [ 701.710849][T12130] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1849'. [ 701.720460][T12116] 421118 pages reserved [ 701.734929][T12116] 0 pages cma reserved [ 701.895040][T12145] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 702.035207][T12146] hub 1-0:1.0: USB hub found [ 702.040679][T12146] hub 1-0:1.0: 1 port detected [ 702.438164][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 702.438214][ T28] audit: type=1800 audit(1791599381.313:16528): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1856" name="idProduct" dev="configfs" ino=30888 res=0 errno=0 [ 702.838968][T12152] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 702.875351][T12152] netlink: 13088 bytes leftover after parsing attributes in process `syz.3.1857'. [ 703.063006][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 703.892974][ T23] usb 3-1: device descriptor read/64, error -71 [ 705.409673][T12165] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 705.440788][T12165] jffs2: notice: (12165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 705.456502][T12167] netlink: 'syz.3.1862': attribute type 11 has an invalid length. [ 705.465254][T12167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1862'. [ 705.563213][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 705.600460][T12176] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 705.609586][T12176] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 705.763184][ T23] usb 3-1: device descriptor read/64, error -71 [ 705.914312][ T23] usb usb3-port1: attempt power cycle [ 706.021033][T12180] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 706.137514][T12180] udc usbip-vudc.0: failed to start g1: -19 [ 706.221225][T12180] UDC core: g1: couldn't find an available UDC or it's busy [ 706.426459][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 706.517047][T12187] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 706.652803][T12192] hub 1-0:1.0: USB hub found [ 706.663144][T12192] hub 1-0:1.0: 1 port detected [ 706.866174][ T23] usb 3-1: device not accepting address 24, error -71 [ 707.437197][T12197] netlink: 'syz.1.1872': attribute type 11 has an invalid length. [ 707.446831][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1872'. [ 707.813151][ T5101] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 708.413409][ T5101] usb 2-1: device descriptor read/64, error -71 [ 708.495590][T12214] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 708.504736][T12214] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 708.693502][ T5101] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 708.893454][ T5101] usb 2-1: device descriptor read/64, error -71 [ 709.063921][ T5101] usb usb2-port1: attempt power cycle [ 709.391045][T12224] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 709.398592][T12224] udc usbip-vudc.0: failed to start g1: -19 [ 709.406202][T12224] UDC core: g1: couldn't find an available UDC or it's busy [ 709.477448][T12229] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 709.533189][ T5101] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 709.565091][T12231] hub 1-0:1.0: USB hub found [ 709.573645][T12231] hub 1-0:1.0: 1 port detected [ 709.601116][ T5101] usb 2-1: device descriptor read/8, error -71 [ 709.965187][ T5101] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 710.048608][ T5101] usb 2-1: device descriptor read/8, error -71 [ 710.196987][ T5101] usb usb2-port1: unable to enumerate USB device [ 711.395585][T12241] block nbd0: shutting down sockets [ 711.703329][ T5101] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 711.973944][ T5101] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 712.106415][ T5101] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 712.233397][ T5101] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.375682][ T5101] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 712.472685][ T5101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.770950][ T5101] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 712.909183][ T5101] usb 1-1: invalid MIDI out EP 0 [ 713.915981][T12251] udevd[12251]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.043638][T12255] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 714.052675][T12255] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 714.819210][ T5101] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 714.891490][ T5101] usb 1-1: USB disconnect, device number 30 [ 714.895911][T12261] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 715.259433][T12262] hub 1-0:1.0: USB hub found [ 715.265202][T12262] hub 1-0:1.0: 1 port detected [ 716.203177][ T7151] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 716.374894][ T7151] usb 1-1: device descriptor read/64, error -71 [ 716.683225][ T7151] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 717.666765][T12287] 9pnet_fd: p9_fd_create_unix (12287): problem connecting socket: ./proc: -111 [ 717.683327][ T7151] usb 1-1: device descriptor read/64, error -71 [ 717.811346][ T7151] usb usb1-port1: attempt power cycle [ 717.831944][T12293] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 717.841038][T12293] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 718.771895][T12298] block nbd3: shutting down sockets [ 719.013012][ T7151] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 720.439072][ T7151] usb 1-1: device descriptor read/8, error -71 [ 720.513368][T12302] FAULT_INJECTION: forcing a failure. [ 720.513368][T12302] name failslab, interval 1, probability 0, space 0, times 0 [ 720.530406][T12302] CPU: 0 PID: 12302 Comm: syz.2.1903 Not tainted syzkaller #0 [ 720.537910][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 720.547985][T12302] Call Trace: [ 720.551284][T12302] [ 720.554236][T12302] dump_stack_lvl+0x18c/0x250 [ 720.558945][T12302] ? show_regs_print_info+0x20/0x20 [ 720.564170][T12302] ? load_image+0x420/0x420 [ 720.568705][T12302] ? __lock_acquire+0x7eb0/0x7eb0 [ 720.573755][T12302] ? ip6mr_net_init+0x249/0x3b0 [ 720.578638][T12302] ? setup_net+0x3b6/0xa20 [ 720.583096][T12302] ? copy_net_ns+0x361/0x530 [ 720.587706][T12302] ? create_new_namespaces+0x3ce/0x700 [ 720.593176][T12302] should_fail_ex+0x394/0x4c0 [ 720.597865][T12302] should_failslab+0x9/0x20 [ 720.602373][T12302] slab_pre_alloc_hook+0x59/0x300 [ 720.607395][T12302] ? lockdep_softirqs_off+0x440/0x440 [ 720.612769][T12302] ? kvmalloc_node+0x70/0x180 [ 720.617451][T12302] ? kvmalloc_node+0x70/0x180 [ 720.622127][T12302] __kmem_cache_alloc_node+0x53/0x250 [ 720.627516][T12302] ? kvmalloc_node+0x70/0x180 [ 720.632196][T12302] __kmalloc_node+0xa6/0x240 [ 720.636794][T12302] kvmalloc_node+0x70/0x180 [ 720.641301][T12302] rhashtable_init+0x529/0xa60 [ 720.646070][T12302] rhltable_init+0x1e/0x60 [ 720.650488][T12302] mr_table_alloc+0xeb/0x240 [ 720.655081][T12302] ? ipmr_expire_process+0xc0/0xc0 [ 720.660189][T12302] ? ip6mr_update_thresholds+0x450/0x450 [ 720.665822][T12302] ip6mr_net_init+0x249/0x3b0 [ 720.670511][T12302] ops_init+0x391/0x640 [ 720.674675][T12302] setup_net+0x3b6/0xa20 [ 720.678919][T12302] ? copy_net_ns+0x530/0x530 [ 720.683512][T12302] ? copy_net_ns+0x347/0x530 [ 720.688097][T12302] ? down_read_killable+0x1d0/0x340 [ 720.693297][T12302] copy_net_ns+0x361/0x530 [ 720.697714][T12302] create_new_namespaces+0x3ce/0x700 [ 720.703012][T12302] unshare_nsproxy_namespaces+0x11a/0x160 [ 720.708750][T12302] ksys_unshare+0x4fa/0x8f0 [ 720.713257][T12302] ? sighand_ctor+0x50/0x50 [ 720.717756][T12302] ? lock_chain_count+0x20/0x20 [ 720.722611][T12302] ? syscall_enter_from_user_mode+0x25/0x80 [ 720.728516][T12302] __x64_sys_unshare+0x38/0x40 [ 720.733281][T12302] do_syscall_64+0x55/0xb0 [ 720.737695][T12302] ? clear_bhb_loop+0x40/0x90 [ 720.742370][T12302] ? clear_bhb_loop+0x40/0x90 [ 720.747045][T12302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.752944][T12302] RIP: 0033:0x7f683219e1d9 [ 720.757363][T12302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.776968][T12302] RSP: 002b:00007f6833105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 720.785386][T12302] RAX: ffffffffffffffda RBX: 00007f6832425fa0 RCX: 00007f683219e1d9 [ 720.793353][T12302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 720.801317][T12302] RBP: 00007f6832235888 R08: 0000000000000000 R09: 0000000000000000 [ 720.809280][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.817244][T12302] R13: 00007f6832426038 R14: 00007f6832425fa0 R15: 00007ffcbd322ea8 [ 720.825226][T12302] [ 720.831463][ T5101] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 721.718752][T12313] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1907'. [ 721.894138][T12313] netlink: 'syz.3.1907': attribute type 10 has an invalid length. [ 722.187106][T12313] md: couldn't update array info. -22 [ 722.259879][T12317] md: could not open device unknown-block(1,1). [ 722.336981][T12317] md: md_import_device returned -16 [ 722.450744][T12313] netlink: 'syz.3.1907': attribute type 10 has an invalid length. [ 723.030809][T12326] fuse: Bad value for 'fd' [ 723.290476][T12326] netlink: 'syz.1.1911': attribute type 11 has an invalid length. [ 723.350858][T12326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1911'. [ 723.641188][T12334] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 723.650617][T12334] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 723.743121][ T7151] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 723.986311][ T7151] usb 2-1: device descriptor read/64, error -71 [ 724.329352][ T7151] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 724.553104][ T7151] usb 2-1: device descriptor read/64, error -71 [ 724.628171][T12339] block nbd3: shutting down sockets [ 724.834164][ T7151] usb usb2-port1: attempt power cycle [ 725.013105][ T5857] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 726.377922][ T5857] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 726.398229][T12345] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1918'. [ 726.407432][ T5857] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.408126][T12345] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 726.437975][ T5857] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.438337][T12345] md: couldn't update array info. -22 [ 726.452487][ T5857] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.493240][T12345] md: could not open device unknown-block(1,1). [ 726.519734][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.531142][T12345] md: md_import_device returned -16 [ 726.551195][T12351] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 726.698166][ T5857] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 726.844901][ T5857] usb 4-1: invalid MIDI out EP 0 [ 727.488352][ T5857] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 727.551183][ T5857] usb 4-1: USB disconnect, device number 17 [ 727.716954][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 727.926044][T12367] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 728.007652][T12367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1922'. [ 728.609049][T12374] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 728.618272][T12374] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 729.411507][T12378] 9pnet_fd: p9_fd_create_unix (12378): problem connecting socket: ./proc: -111 [ 729.724564][T12390] block nbd3: shutting down sockets [ 729.732992][ T7151] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 730.013295][ T5857] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 730.236400][ T5857] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 730.331183][ T5857] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 730.436938][ T5857] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.557485][ T5857] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 730.656366][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.973804][ T5857] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 731.078457][ T5857] usb 4-1: invalid MIDI out EP 0 [ 732.148204][ T7151] usb 3-1: Using ep0 maxpacket: 8 [ 732.955412][T12300] udevd[12300]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.229858][ T5857] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 735.243876][ T5857] usb 4-1: USB disconnect, device number 18 [ 735.268000][ T7151] usb 3-1: device descriptor read/all, error -71 [ 735.454484][T12408] netlink: 'syz.3.1934': attribute type 11 has an invalid length. [ 735.476914][T12408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1934'. [ 735.558913][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 736.318674][T12417] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 736.327877][T12417] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 736.740117][T12433] block nbd2: shutting down sockets [ 736.884683][ T7151] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 737.043223][T12282] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 737.193272][ T7151] usb 2-1: Using ep0 maxpacket: 8 [ 737.305813][T12282] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 737.358268][ T7151] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 738.793224][T12282] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.804474][ T7151] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 738.829387][T12282] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.842816][ T7151] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 738.852051][ T7151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.865017][T12282] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.869320][T12443] netlink: 'syz.0.1946': attribute type 1 has an invalid length. [ 738.882247][T12443] netlink: 'syz.0.1946': attribute type 2 has an invalid length. [ 740.536482][T12282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.990581][T12282] usb 3-1: can't set config #27, error -71 [ 741.003308][T12282] usb 3-1: USB disconnect, device number 28 [ 741.023842][T12456] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 741.899894][T12458] hub 1-0:1.0: USB hub found [ 741.905423][T12458] hub 1-0:1.0: 1 port detected [ 742.155648][T12282] usb 2-1: USB disconnect, device number 22 [ 742.239704][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 742.331489][T12472] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 742.340536][T12472] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 743.763084][ T5101] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 744.413779][T12488] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 744.420353][T12488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 744.428295][T12488] vhci_hcd vhci_hcd.0: Device attached [ 744.556206][T12484] block nbd2: shutting down sockets [ 744.593996][T12489] vhci_hcd: connection closed [ 744.843051][T12282] vhci_hcd: vhci_device speed not set [ 745.741170][ T59] vhci_hcd: stop threads [ 745.773041][ T59] vhci_hcd: release socket [ 745.778360][ T59] vhci_hcd: disconnect device [ 745.810410][T12282] usb 39-1: new full-speed USB device number 14 using vhci_hcd [ 745.912890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 745.922881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 745.982884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 745.992882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 746.052889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 746.620383][T12282] usb 39-1: enqueue for inactive port 0 [ 746.703047][T12282] vhci_hcd: vhci_device speed not set [ 746.942792][ T5101] usb 3-1: device descriptor read/all, error -71 [ 747.356826][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.708231][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.885041][T12510] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 747.922807][T12510] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 747.933481][ T5101] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 748.133107][ T5101] usb 3-1: Using ep0 maxpacket: 8 [ 748.146532][ T5101] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 748.180022][ T5101] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 748.840367][ T5101] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.873005][ T5101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.040275][T12528] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 749.046839][T12528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 749.054687][T12528] vhci_hcd vhci_hcd.0: Device attached [ 749.158481][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 749.303220][ T5101] vhci_hcd: vhci_device speed not set [ 749.425012][ T5101] usb 39-1: new full-speed USB device number 15 using vhci_hcd [ 749.816769][T12529] vhci_hcd: connection reset by peer [ 749.870335][ T143] vhci_hcd: stop threads [ 749.945030][ T143] vhci_hcd: release socket [ 750.016183][ T143] vhci_hcd: disconnect device [ 751.612521][T12551] block nbd0: shutting down sockets [ 751.933245][T12282] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 753.343491][ T5857] usb 3-1: USB disconnect, device number 30 [ 753.540445][T12282] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 754.241233][T12282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 754.252909][T12282] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 754.266650][T12282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 754.275777][T12282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.285306][T12560] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 754.294307][T12560] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 754.363037][T12282] usb 1-1: can't set config #27, error -71 [ 754.392116][T12282] usb 1-1: USB disconnect, device number 35 [ 754.683479][ T5101] vhci_hcd: vhci_device speed not set [ 755.409579][T12570] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 755.416147][T12570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 755.424191][T12570] vhci_hcd vhci_hcd.0: Device attached [ 755.633503][T12282] vhci_hcd: vhci_device speed not set [ 755.743168][T12282] usb 33-1: new full-speed USB device number 12 using vhci_hcd [ 756.129615][T12571] vhci_hcd: connection reset by peer [ 756.698593][ T143] vhci_hcd: stop threads [ 756.708704][ T143] vhci_hcd: release socket [ 756.719897][ T143] vhci_hcd: disconnect device [ 757.867920][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 758.093765][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1981'. [ 758.393125][ T5857] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 759.013037][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 759.061121][ T5857] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 759.070441][T12600] block nbd1: shutting down sockets [ 759.091258][T12605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.135936][ T5857] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 760.036717][ T5101] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 760.092282][ T5857] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.653177][T12282] vhci_hcd: vhci_device speed not set [ 761.755415][ T5101] usb 2-1: unable to read config index 0 descriptor/all [ 761.762452][ T5101] usb 2-1: can't read configurations, error -71 [ 762.155233][ T5857] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 762.207557][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.223338][ T5857] usb 1-1: can't set config #16, error -71 [ 762.234599][ T5857] usb 1-1: USB disconnect, device number 36 [ 762.529008][T12620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 762.535579][T12620] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 762.543660][T12620] vhci_hcd vhci_hcd.0: Device attached [ 762.783713][ T5857] vhci_hcd: vhci_device speed not set [ 762.863141][ T5857] usb 39-1: new full-speed USB device number 16 using vhci_hcd [ 763.220141][T12622] vhci_hcd: connection reset by peer [ 763.280944][ T143] vhci_hcd: stop threads [ 763.339069][ T143] vhci_hcd: release socket [ 763.401734][ T143] vhci_hcd: disconnect device [ 764.123482][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 764.844927][T12643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1992'. [ 765.253468][ T27] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 765.493094][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 765.565155][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 765.657398][ T27] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 765.737370][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.810725][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 765.892407][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.913745][T12658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.938576][ T27] usbtmc 3-1:16.0: bulk endpoints not found [ 767.297386][T12665] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 767.303943][T12665] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 767.311466][T12665] vhci_hcd vhci_hcd.0: Device attached [ 767.326500][T12668] vhci_hcd: connection closed [ 767.333115][ T9932] vhci_hcd: stop threads [ 767.351186][ T9932] vhci_hcd: release socket [ 767.356339][ T9932] vhci_hcd: disconnect device [ 768.072968][ T5857] vhci_hcd: vhci_device speed not set [ 768.448135][T12282] usb 3-1: USB disconnect, device number 31 [ 768.842622][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 769.631936][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.166946][T12718] gadgetfs: bound to dummy_udc driver [ 771.363293][ T5857] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 771.453885][ T27] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 771.464937][ C1] gadgetfs: connected [ 771.482051][ T27] gadgetfs: disconnected [ 771.573706][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 771.591115][ T5857] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 771.649403][ T5857] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 771.714697][ C1] gadgetfs: connected [ 771.722573][ T27] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.779240][ T5857] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.821906][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 771.913999][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.934942][ T5857] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.949348][T12714] gadgetfs: suspended from state 3 [ 771.954741][T12714] gadgetfs: disconnected [ 772.023794][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.031988][ T27] usb 2-1: can't set config #1, error -71 [ 772.053006][ T27] usb 2-1: USB disconnect, device number 25 [ 772.140522][ T5857] usbtmc 1-1:16.0: bulk endpoints not found [ 772.189526][T12722] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 772.196078][T12722] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 772.203777][T12722] vhci_hcd vhci_hcd.0: Device attached [ 772.433316][ T23] vhci_hcd: vhci_device speed not set [ 772.577427][ T23] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 772.852504][T12723] vhci_hcd: connection reset by peer [ 772.899096][ T59] vhci_hcd: stop threads [ 772.955093][ T59] vhci_hcd: release socket [ 772.993398][ T59] vhci_hcd: disconnect device [ 773.674398][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 774.349047][ T7151] usb 1-1: USB disconnect, device number 37 [ 774.717343][T12758] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2022'. [ 774.738655][T12758] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 774.760109][T12758] md: couldn't update array info. -22 [ 774.766459][T12758] md: could not open device unknown-block(1,1). [ 774.773238][T12758] md: md_import_device returned -16 [ 774.780325][T12758] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 774.831160][T12760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.326615][T12764] gadgetfs: bound to dummy_udc driver [ 777.773248][T12282] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 777.962950][T12282] usb 2-1: Using ep0 maxpacket: 8 [ 778.024426][T12282] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 778.119038][T12282] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 778.210842][ T23] vhci_hcd: vhci_device speed not set [ 778.233943][T12282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.344513][T12282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 778.402916][T12282] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 778.406734][T12776] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 778.501212][T12779] hub 1-0:1.0: USB hub found [ 778.506726][T12779] hub 1-0:1.0: 1 port detected [ 778.543329][T12282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 778.684793][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 778.697692][T12282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.984707][T12282] usbtmc 2-1:16.0: bulk endpoints not found [ 779.570200][T12791] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2032'. [ 779.581344][T12791] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 779.600397][T12791] md: couldn't update array info. -22 [ 779.609943][T12791] md: could not open device unknown-block(1,1). [ 779.617702][T12791] md: md_import_device returned -16 [ 779.627918][T12791] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 779.906171][T12797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 779.912742][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 779.920658][T12797] vhci_hcd vhci_hcd.0: Device attached [ 780.125176][T12282] vhci_hcd: vhci_device speed not set [ 780.225799][T12282] usb 37-1: new full-speed USB device number 11 using vhci_hcd [ 780.587418][T12798] vhci_hcd: connection reset by peer [ 780.614567][ T8625] vhci_hcd: stop threads [ 780.646678][ T8625] vhci_hcd: release socket [ 780.685489][ T8625] vhci_hcd: disconnect device [ 781.167832][ T7151] usb 2-1: USB disconnect, device number 26 [ 781.351297][T12807] gadgetfs: bound to dummy_udc driver [ 781.643281][ T23] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 781.740406][ C1] gadgetfs: connected [ 782.070129][T12803] gadgetfs: suspended from state 3 [ 782.075518][T12803] gadgetfs: disconnected [ 782.109560][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.086105][T12819] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 784.208602][T12821] hub 1-0:1.0: USB hub found [ 784.214056][T12821] hub 1-0:1.0: 1 port detected [ 785.145375][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 785.203057][T12833] netlink: 'syz.0.2042': attribute type 11 has an invalid length. [ 785.213812][T12833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2042'. [ 785.436205][T12839] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 785.442769][T12839] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 785.450778][T12839] vhci_hcd vhci_hcd.0: Device attached [ 785.593019][T12282] vhci_hcd: vhci_device speed not set [ 785.683271][ T27] vhci_hcd: vhci_device speed not set [ 785.795922][ T27] usb 35-1: new full-speed USB device number 16 using vhci_hcd [ 786.175656][T12840] vhci_hcd: connection reset by peer [ 786.256108][ T59] vhci_hcd: stop threads [ 786.314756][ T59] vhci_hcd: release socket [ 786.395202][ T59] vhci_hcd: disconnect device [ 786.845945][T12851] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 786.852511][T12851] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 786.860179][T12851] vhci_hcd vhci_hcd.0: Device attached [ 787.093252][ T973] vhci_hcd: vhci_device speed not set [ 788.142946][T12852] vhci_hcd: connection closed [ 788.143216][ T973] usb 39-1: new full-speed USB device number 17 using vhci_hcd [ 788.148657][T12858] jffs2: notice: (12858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 788.176667][ T59] vhci_hcd: stop threads [ 788.180948][ T59] vhci_hcd: release socket [ 788.207139][ T59] vhci_hcd: disconnect device [ 788.252062][T12856] gadgetfs: bound to dummy_udc driver [ 789.647339][T12878] tipc: Enabling of bearer rejected, failed to enable media [ 789.775764][T12881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 789.782335][T12881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 789.790189][T12881] vhci_hcd vhci_hcd.0: Device attached [ 790.457696][T12883] vhci_hcd: connection closed [ 790.486794][ T8625] vhci_hcd: stop threads [ 790.574554][ T8625] vhci_hcd: release socket [ 790.654699][ T8625] vhci_hcd: disconnect device [ 791.052957][ T27] vhci_hcd: vhci_device speed not set [ 791.980376][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 793.352976][ T973] vhci_hcd: vhci_device speed not set [ 793.848219][T12914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.154021][T12930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 795.160565][T12930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 795.174887][T12930] vhci_hcd vhci_hcd.0: Device attached [ 795.184712][T12931] vhci_hcd: connection closed [ 795.192250][ T1311] vhci_hcd: stop threads [ 795.225342][ T1311] vhci_hcd: release socket [ 795.229798][ T1311] vhci_hcd: disconnect device [ 795.502018][T12941] tipc: Enabling of bearer rejected, failed to enable media [ 795.515715][T12940] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 795.522253][T12940] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 795.530006][T12940] vhci_hcd vhci_hcd.0: Device attached [ 795.813297][ T973] vhci_hcd: vhci_device speed not set [ 796.184749][T12942] vhci_hcd: connection closed [ 796.733518][ T42] vhci_hcd: stop threads [ 796.742493][ T42] vhci_hcd: release socket [ 796.767654][T12953] netlink: 'syz.1.2067': attribute type 1 has an invalid length. [ 796.782955][T12953] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2067'. [ 796.810254][ T973] usb 39-1: new full-speed USB device number 18 using vhci_hcd [ 796.847147][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'. [ 796.852999][ T42] vhci_hcd: disconnect device [ 796.949471][T12959] netlink: 'syz.1.2069': attribute type 11 has an invalid length. [ 796.976070][T12959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2069'. [ 799.174460][T12979] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 799.181033][T12979] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 799.188711][T12979] vhci_hcd vhci_hcd.0: Device attached [ 799.210581][T12981] vhci_hcd: connection closed [ 799.211907][ T9935] vhci_hcd: stop threads [ 799.346783][ T9935] vhci_hcd: release socket [ 799.403330][ T9935] vhci_hcd: disconnect device [ 799.453894][ T23] vhci_hcd: vhci_device speed not set [ 799.622176][T12991] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 799.631303][T12991] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 800.423616][T12996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.435814][T12993] Bluetooth: hci0: unsupported parameter 5135 [ 800.448679][T12993] Bluetooth: hci0: unsupported parameter 8192 [ 800.463405][T12993] Bluetooth: hci0: unsupported parameter 5135 [ 800.469511][T12993] Bluetooth: hci0: unsupported parameter 8192 [ 801.616511][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 801.983057][ T973] vhci_hcd: vhci_device speed not set [ 802.734462][T13019] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 802.741032][T13019] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 802.748721][T13019] vhci_hcd vhci_hcd.0: Device attached [ 802.954840][ T7151] vhci_hcd: vhci_device speed not set [ 803.089745][ T7151] usb 37-1: new full-speed USB device number 12 using vhci_hcd [ 803.964443][T13020] vhci_hcd: connection closed [ 804.822185][ T9932] vhci_hcd: stop threads [ 805.019968][ T9932] vhci_hcd: release socket [ 805.024672][ T9932] vhci_hcd: disconnect device [ 805.171471][T13036] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 805.180473][T13036] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 806.064729][T13043] Bluetooth: hci0: unsupported parameter 5135 [ 806.070870][T13043] Bluetooth: hci0: unsupported parameter 8192 [ 806.098888][T13043] Bluetooth: hci0: unsupported parameter 5135 [ 806.120622][T13047] FAULT_INJECTION: forcing a failure. [ 806.120622][T13047] name fail_futex, interval 1, probability 0, space 0, times 0 [ 806.133716][T13043] Bluetooth: hci0: unsupported parameter 8192 [ 806.145756][T13047] CPU: 0 PID: 13047 Comm: syz.0.2090 Not tainted syzkaller #0 [ 806.153248][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 806.163309][T13047] Call Trace: [ 806.166588][T13047] [ 806.169515][T13047] dump_stack_lvl+0x18c/0x250 [ 806.174198][T13047] ? show_regs_print_info+0x20/0x20 [ 806.179394][T13047] ? load_image+0x420/0x420 [ 806.183907][T13047] should_fail_ex+0x394/0x4c0 [ 806.188591][T13047] get_futex_key+0x136/0x1030 [ 806.193268][T13047] ? verify_lock_unused+0x140/0x140 [ 806.198470][T13047] ? futex_setup_timer+0xc0/0xc0 [ 806.203409][T13047] futex_wait_setup+0xbc/0x270 [ 806.208173][T13047] ? futex_wait_multiple+0x920/0x920 [ 806.213466][T13047] futex_wait+0x1bc/0x5c0 [ 806.217791][T13047] ? futex_setup_timer+0xc0/0xc0 [ 806.222742][T13047] ? futex_wait_setup+0x270/0x270 [ 806.227790][T13047] ? file_end_write+0x159/0x250 [ 806.232651][T13047] ? vfs_write+0x5de/0x9a0 [ 806.237072][T13047] do_futex+0x2ff/0x3e0 [ 806.241232][T13047] ? __ia32_sys_get_robust_list+0x110/0x110 [ 806.247131][T13047] __se_sys_futex+0x3a9/0x440 [ 806.251813][T13047] ? __x64_sys_futex+0xf0/0xf0 [ 806.256583][T13047] ? __x64_sys_futex+0x21/0xf0 [ 806.261345][T13047] do_syscall_64+0x55/0xb0 [ 806.265759][T13047] ? clear_bhb_loop+0x40/0x90 [ 806.270431][T13047] ? clear_bhb_loop+0x40/0x90 [ 806.275104][T13047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.281042][T13047] RIP: 0033:0x7f8eee19e1d9 [ 806.285464][T13047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.305073][T13047] RSP: 002b:00007f8eef0ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 806.313492][T13047] RAX: ffffffffffffffda RBX: 00007f8eee425fa8 RCX: 00007f8eee19e1d9 [ 806.321460][T13047] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8eee425fa8 [ 806.329429][T13047] RBP: 00007f8eee425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 806.337397][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.345361][T13047] R13: 00007f8eee426038 R14: 00007ffd9e550fc0 R15: 00007ffd9e5510a8 [ 806.353340][T13047] [ 806.369596][T13047] 9pnet_fd: p9_fd_create_unix (13047): problem connecting socket: ./proc: -111 [ 806.607996][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 807.508889][T13068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 807.515464][T13068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 807.523243][T13068] vhci_hcd vhci_hcd.0: Device attached [ 807.733233][ T27] vhci_hcd: vhci_device speed not set [ 807.833454][ T27] usb 33-1: new full-speed USB device number 13 using vhci_hcd [ 808.215465][T13069] vhci_hcd: connection closed [ 808.733141][ T9935] vhci_hcd: stop threads [ 808.742126][ T9935] vhci_hcd: release socket [ 808.766519][T13072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.788124][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.794498][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.805951][T13071] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 808.812460][T13071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 808.820140][T13071] vhci_hcd vhci_hcd.0: Device attached [ 808.834184][T13075] vhci_hcd: connection closed [ 808.875314][ T9935] vhci_hcd: disconnect device [ 808.898998][ T9935] vhci_hcd: stop threads [ 808.917412][ T9935] vhci_hcd: release socket [ 808.952870][ T9935] vhci_hcd: disconnect device [ 809.923000][ T7151] vhci_hcd: vhci_device speed not set [ 810.996440][T13089] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 811.005477][T13089] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 811.968533][T13096] Bluetooth: hci0: unsupported parameter 5135 [ 811.989984][T13096] Bluetooth: hci0: unsupported parameter 8192 [ 812.018630][T13096] Bluetooth: hci0: unsupported parameter 5135 [ 812.033754][T13096] Bluetooth: hci0: unsupported parameter 8192 [ 812.176755][T13101] gadgetfs: bound to dummy_udc driver [ 813.345123][T13115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 813.351690][T13115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 813.359410][T13115] vhci_hcd vhci_hcd.0: Device attached [ 813.573431][ T7151] vhci_hcd: vhci_device speed not set [ 813.673179][ T7151] usb 35-1: new full-speed USB device number 18 using vhci_hcd [ 813.903005][ T27] vhci_hcd: vhci_device speed not set [ 814.049182][T13116] vhci_hcd: connection reset by peer [ 814.082528][ T48] vhci_hcd: stop threads [ 814.117013][ T48] vhci_hcd: release socket [ 814.155273][ T48] vhci_hcd: disconnect device [ 815.961579][T13135] Bluetooth: hci0: unsupported parameter 5135 [ 816.020655][T13135] Bluetooth: hci0: unsupported parameter 8192 [ 816.027297][T13135] Bluetooth: hci0: unsupported parameter 5135 [ 816.033678][T13135] Bluetooth: hci0: unsupported parameter 8192 [ 816.122539][T13139] gadgetfs: bound to dummy_udc driver [ 816.392926][ T5101] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 816.399890][T13134] gadgetfs: suspended from state 2 [ 817.038512][T13147] overlayfs: failed to resolve './file0': -2 [ 817.055078][T13146] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 817.061600][T13146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 817.069043][T13146] vhci_hcd vhci_hcd.0: Device attached [ 817.077439][T13149] vhci_hcd: connection closed [ 817.077795][ T1311] vhci_hcd: stop threads [ 817.097727][ T1311] vhci_hcd: release socket [ 817.102173][ T1311] vhci_hcd: disconnect device [ 818.874698][ T7151] vhci_hcd: vhci_device speed not set [ 819.004047][T13172] Bluetooth: hci0: unsupported parameter 5135 [ 819.061050][T13172] Bluetooth: hci0: unsupported parameter 8192 [ 819.129699][T13172] Bluetooth: hci0: unsupported parameter 5135 [ 819.201294][T13172] Bluetooth: hci0: unsupported parameter 8192 [ 819.474856][T13183] gadgetfs: bound to dummy_udc driver [ 819.773738][T13174] gadgetfs: suspended from state 2 [ 819.803851][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 822.147818][T13196] overlayfs: failed to resolve './file0': -2 [ 824.285587][T13223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 824.292153][T13223] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 824.300123][T13223] vhci_hcd vhci_hcd.0: Device attached [ 824.533200][T12283] vhci_hcd: vhci_device speed not set [ 824.637149][T12283] usb 33-1: new full-speed USB device number 14 using vhci_hcd [ 825.031016][T13224] vhci_hcd: connection reset by peer [ 825.085589][ T143] vhci_hcd: stop threads [ 825.134681][ T143] vhci_hcd: release socket [ 825.185478][ T143] vhci_hcd: disconnect device [ 825.744388][T13230] gadgetfs: bound to dummy_udc driver [ 825.914048][T13239] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 825.937163][T13240] overlayfs: failed to resolve './file0': -2 [ 825.956678][T13239] md: couldn't update array info. -22 [ 825.971916][T13234] kvm: pic: single mode not supported [ 825.972058][T13234] kvm: pic: level sensitive irq not supported [ 825.979995][T13239] md: could not open device unknown-block(1,1). [ 826.000649][T13234] kvm: pic: non byte read [ 826.005910][T13239] md: md_import_device returned -16 [ 826.019847][T13234] kvm: pic: non byte read [ 826.026301][T13228] gadgetfs: suspended from state 2 [ 826.032960][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 826.083821][T13234] kvm: pic: level sensitive irq not supported [ 826.083888][T13234] kvm: pic: non byte read [ 826.088822][T13239] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 826.090306][T13234] kvm: pic: non byte read [ 826.107161][T13234] kvm: pic: level sensitive irq not supported [ 826.107231][T13234] kvm: pic: non byte read [ 826.120191][T13234] kvm: pic: non byte read [ 826.124911][T13234] kvm: pic: level sensitive irq not supported [ 826.124981][T13234] kvm: pic: non byte read [ 827.132625][T13248] Bluetooth: hci0: unsupported parameter 5135 [ 827.155673][T13248] Bluetooth: hci0: unsupported parameter 8192 [ 827.193141][T13248] Bluetooth: hci0: unsupported parameter 5135 [ 827.249818][T13254] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 827.256366][T13254] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 827.266859][T13254] vhci_hcd vhci_hcd.0: Device attached [ 827.311996][T13248] Bluetooth: hci0: unsupported parameter 8192 [ 827.970370][T13255] vhci_hcd: connection closed [ 827.974359][ T143] vhci_hcd: stop threads [ 828.092047][ T143] vhci_hcd: release socket [ 828.150197][ T143] vhci_hcd: disconnect device [ 828.581207][T13268] netlink: 'syz.2.2157': attribute type 10 has an invalid length. [ 828.601527][T13268] md: couldn't update array info. -22 [ 828.619340][T13268] md: could not open device unknown-block(1,1). [ 828.635701][T13268] md: md_import_device returned -16 [ 828.642652][T13268] netlink: 'syz.2.2157': attribute type 10 has an invalid length. [ 828.792771][T13274] overlayfs: failed to resolve './file0': -2 [ 828.889893][T13276] gadgetfs: bound to dummy_udc driver [ 829.203091][ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 829.309824][ C0] gadgetfs: connected [ 829.316159][ T9] gadgetfs: disconnected [ 829.553895][ C0] gadgetfs: connected [ 829.561638][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 829.626713][T13273] gadgetfs: suspended from state 3 [ 829.632015][T13273] gadgetfs: disconnected [ 829.673762][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 829.700238][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.735890][ T9] usb 1-1: can't set config #1, error -71 [ 829.746128][T13280] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 829.760882][ T9] usb 1-1: USB disconnect, device number 43 [ 829.828183][T12283] vhci_hcd: vhci_device speed not set [ 831.650449][T13296] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 831.657019][T13296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 831.670988][T13296] vhci_hcd vhci_hcd.0: Device attached [ 831.728932][T13295] Bluetooth: hci0: unsupported parameter 5135 [ 831.812706][T13295] Bluetooth: hci0: unsupported parameter 8192 [ 831.893405][T12283] vhci_hcd: vhci_device speed not set [ 831.937062][T13295] Bluetooth: hci0: unsupported parameter 5135 [ 832.008969][T13295] Bluetooth: hci0: unsupported parameter 8192 [ 832.043049][T12283] usb 35-1: new full-speed USB device number 19 using vhci_hcd [ 832.390390][T13297] vhci_hcd: connection reset by peer [ 832.413876][ T143] vhci_hcd: stop threads [ 832.469750][ T143] vhci_hcd: release socket [ 832.521369][ T143] vhci_hcd: disconnect device [ 832.975403][T13306] netlink: 'syz.3.2166': attribute type 10 has an invalid length. [ 832.988594][T13306] md: couldn't update array info. -22 [ 832.994514][T13306] md: could not open device unknown-block(1,1). [ 833.000950][T13306] md: md_import_device returned -16 [ 833.008263][T13306] netlink: 'syz.3.2166': attribute type 10 has an invalid length. [ 833.054735][T13307] overlayfs: failed to resolve './file0': -2 [ 833.157470][T13311] gadgetfs: bound to dummy_udc driver [ 833.443223][ T27] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 833.546768][ C1] gadgetfs: connected [ 833.559003][ T27] gadgetfs: disconnected [ 833.697620][T13317] jffs2: notice: (13317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 833.823498][ C1] gadgetfs: connected [ 833.831129][ T27] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 833.854105][T13304] gadgetfs: suspended from state 3 [ 833.859297][T13304] gadgetfs: disconnected [ 833.907153][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 834.031857][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.166907][ T28] audit: type=1800 audit(1791599512.993:16529): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2169" name="file0" dev="overlay" ino=3092 res=0 errno=0 [ 834.250805][ T27] usb 1-1: can't set config #1, error -71 [ 834.417280][ T27] usb 1-1: USB disconnect, device number 44 [ 834.685800][T13324] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 835.647970][T13331] hub 1-0:1.0: USB hub found [ 835.656465][T13331] hub 1-0:1.0: 1 port detected [ 837.302097][T12283] vhci_hcd: vhci_device speed not set [ 837.477072][T13349] netlink: 'syz.0.2178': attribute type 10 has an invalid length. [ 837.492328][T13349] md: couldn't update array info. -22 [ 837.498366][T13349] md: could not open device unknown-block(1,1). [ 837.506471][T13349] md: md_import_device returned -16 [ 837.514260][T13349] netlink: 'syz.0.2178': attribute type 10 has an invalid length. [ 837.655013][T13357] jffs2: notice: (13357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 838.575412][T13366] overlayfs: failed to resolve './file1': -2 [ 838.782484][T13371] Bluetooth: hci0: unsupported parameter 5135 [ 838.790582][T13371] Bluetooth: hci0: unsupported parameter 8192 [ 838.797657][T13371] Bluetooth: hci0: unsupported parameter 5135 [ 838.803962][T13371] Bluetooth: hci0: unsupported parameter 8192 [ 838.923457][T13375] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 838.966273][T13375] md: couldn't update array info. -22 [ 838.983172][T13375] md: could not open device unknown-block(1,1). [ 838.989494][T13375] md: md_import_device returned -16 [ 839.008175][T13375] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 840.237096][T13396] jffs2: notice: (13396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 841.137803][T13397] syz.2.2194 (13397) used greatest stack depth: 17112 bytes left [ 841.209570][T13402] Bluetooth: hci0: unsupported parameter 5135 [ 841.216846][T13402] Bluetooth: hci0: unsupported parameter 8192 [ 841.224210][T13402] Bluetooth: hci0: unsupported parameter 5135 [ 841.231236][T13402] Bluetooth: hci0: unsupported parameter 8192 [ 841.363686][T13411] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2200'. [ 841.377469][T13411] netlink: 'syz.1.2200': attribute type 10 has an invalid length. [ 841.390471][ T28] audit: type=1800 audit(1791599520.303:16530): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2201" name="idProduct" dev="configfs" ino=35983 res=0 errno=0 [ 841.396664][T13411] md: couldn't update array info. -22 [ 841.456924][T13411] md: could not open device unknown-block(1,1). [ 841.472970][T13411] md: md_import_device returned -16 [ 841.480066][T13411] netlink: 'syz.1.2200': attribute type 10 has an invalid length. [ 841.923018][T12283] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 842.144923][T12283] usb 4-1: unable to get BOS descriptor or descriptor too short [ 842.195274][T12283] usb 4-1: config 254 has an invalid interface number: 213 but max is 0 [ 842.317828][T12283] usb 4-1: config 254 has no interface number 0 [ 842.357786][T12283] usb 4-1: config 254 interface 213 has no altsetting 0 [ 842.399904][T12283] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 842.418490][T12283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.467853][T12283] usb 4-1: Product: syz [ 842.485004][T12283] usb 4-1: Manufacturer: syz [ 842.491223][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2206'. [ 842.502447][T12283] usb 4-1: SerialNumber: syz [ 842.514227][T13433] netlink: 'syz.1.2205': attribute type 11 has an invalid length. [ 842.529442][T13433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2205'. [ 842.910956][T12283] usb_ehset_test: probe of 4-1:254.213 failed with error -32 [ 842.926680][T12283] usb 4-1: USB disconnect, device number 19 [ 843.039947][T13442] Bluetooth: hci0: unsupported parameter 5135 [ 843.047406][T13442] Bluetooth: hci0: unsupported parameter 8192 [ 843.056036][T13442] Bluetooth: hci0: unsupported parameter 5135 [ 843.062163][T13442] Bluetooth: hci0: unsupported parameter 8192 [ 843.197785][T13448] overlayfs: missing 'lowerdir' [ 843.292605][T13449] gadgetfs: bound to dummy_udc driver [ 843.617345][T12283] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 843.709429][ C0] gadgetfs: connected [ 843.720183][T12283] gadgetfs: disconnected [ 843.826575][T13451] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 843.973761][ C0] gadgetfs: connected [ 844.025433][T13447] gadgetfs: suspended from state 3 [ 844.030691][T13447] gadgetfs: disconnected [ 844.055341][T12283] usb 1-1: unable to read config index 0 descriptor/all [ 844.420644][T12283] usb 1-1: can't read configurations, error -71 [ 844.453861][T13459] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2213'. [ 844.769429][T13459] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 845.013591][T13459] md: couldn't update array info. -22 [ 845.068334][T13461] md: could not open device unknown-block(1,1). [ 845.181105][T13461] md: md_import_device returned -16 [ 845.249652][T13459] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 845.325348][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 845.387682][T13472] Bluetooth: hci0: unsupported parameter 5135 [ 845.396389][T13472] Bluetooth: hci0: unsupported parameter 8192 [ 845.402504][T13472] Bluetooth: hci0: unsupported parameter 5135 [ 845.408864][T13472] Bluetooth: hci0: unsupported parameter 8192 [ 845.763114][T13484] netlink: 'syz.1.2221': attribute type 11 has an invalid length. [ 845.770972][T13484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2221'. [ 845.949031][T13490] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 845.958179][T13490] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 846.863188][T13492] gadgetfs: bound to dummy_udc driver [ 847.146416][T13496] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 847.939167][T13496] hub 1-0:1.0: USB hub found [ 847.944834][T13496] hub 1-0:1.0: 1 port detected [ 847.978284][T13501] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2226'. [ 848.028174][T13502] Bluetooth: hci0: unsupported parameter 5135 [ 848.038396][T13501] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 848.046079][T13502] Bluetooth: hci0: unsupported parameter 8192 [ 848.052395][T13502] Bluetooth: hci0: unsupported parameter 5135 [ 848.063087][T13502] Bluetooth: hci0: unsupported parameter 8192 [ 848.087756][T13501] md: couldn't update array info. -22 [ 848.095771][T13501] md: could not open device unknown-block(1,1). [ 848.102271][T13501] md: md_import_device returned -16 [ 848.152475][T13501] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 848.268793][T13513] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 848.319843][T13513] jffs2: notice: (13513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 848.342526][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 848.384745][T13522] netlink: 'syz.0.2232': attribute type 11 has an invalid length. [ 848.392629][T13522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2232'. [ 849.536767][T13531] gadgetfs: bound to dummy_udc driver [ 850.302069][T13530] Bluetooth: hci0: unsupported parameter 5135 [ 850.314117][ T28] audit: type=1326 audit(1791599529.203:16531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 850.680154][T13530] Bluetooth: hci0: unsupported parameter 8192 [ 851.893848][T13530] Bluetooth: hci0: unsupported parameter 5135 [ 851.900096][T13530] Bluetooth: hci0: unsupported parameter 8192 [ 851.912009][ T28] audit: type=1326 audit(1791599529.213:16532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 851.939481][ T28] audit: type=1326 audit(1791599529.213:16533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 851.983646][ T28] audit: type=1326 audit(1791599529.213:16534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 852.030178][T13540] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2240'. [ 852.040720][T13540] netlink: 'syz.1.2240': attribute type 10 has an invalid length. [ 852.080419][T13540] md: couldn't update array info. -22 [ 852.146203][ T28] audit: type=1326 audit(1791599529.213:16535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 852.192068][T13543] md: could not open device unknown-block(1,1). [ 852.245654][T13543] md: md_import_device returned -16 [ 852.356776][T13540] netlink: 'syz.1.2240': attribute type 10 has an invalid length. [ 852.395776][ T28] audit: type=1326 audit(1791599529.213:16536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 852.636116][ T28] audit: type=1326 audit(1791599529.213:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 852.836546][ T28] audit: type=1326 audit(1791599529.213:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 852.861213][ T28] audit: type=1326 audit(1791599529.213:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 852.886633][ T28] audit: type=1326 audit(1791599529.213:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.0.2237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eee19e1d9 code=0x7ffc0000 [ 854.086706][T13561] jffs2: notice: (13561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 854.160025][T13568] netlink: 'syz.3.2246': attribute type 11 has an invalid length. [ 854.203432][T13568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2246'. [ 855.003897][T13574] gadgetfs: bound to dummy_udc driver [ 855.500303][T13577] Bluetooth: hci0: unsupported parameter 5135 [ 855.510766][T13577] Bluetooth: hci0: unsupported parameter 8192 [ 855.517251][T13577] Bluetooth: hci0: unsupported parameter 5135 [ 855.523412][T13577] Bluetooth: hci0: unsupported parameter 8192 [ 855.542131][T13581] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2250'. [ 855.569982][T13581] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 855.605702][T13581] md: couldn't update array info. -22 [ 855.621199][T13581] md: could not open device unknown-block(1,1). [ 855.638366][T13581] md: md_import_device returned -16 [ 856.523324][T13581] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 857.744501][T13609] jffs2: notice: (13609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 857.882655][T13616] Bluetooth: hci0: unsupported parameter 5135 [ 857.895893][T13616] Bluetooth: hci0: unsupported parameter 8192 [ 857.910361][T13616] Bluetooth: hci0: unsupported parameter 5135 [ 857.917308][T13616] Bluetooth: hci0: unsupported parameter 8192 [ 857.925896][T13618] netlink: 'syz.3.2260': attribute type 11 has an invalid length. [ 857.950423][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2260'. [ 858.000334][T13599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.827137][T13624] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 858.836217][T13624] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 858.899506][T13625] overlayfs: failed to resolve './file0': -2 [ 859.366205][T13636] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2267'. [ 859.378568][T13636] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 859.395629][T13636] md: couldn't update array info. -22 [ 859.401650][T13636] md: could not open device unknown-block(1,1). [ 859.410834][T13636] md: md_import_device returned -16 [ 859.433845][T13636] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 859.593764][T13642] Bluetooth: hci0: unsupported parameter 5135 [ 859.600230][T13642] Bluetooth: hci0: unsupported parameter 8192 [ 859.640466][T13642] Bluetooth: hci0: unsupported parameter 5135 [ 859.646839][T13642] Bluetooth: hci0: unsupported parameter 8192 [ 861.149552][T13658] netlink: 'syz.2.2273': attribute type 11 has an invalid length. [ 861.165911][T13658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2273'. [ 862.128988][T13656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.023364][T13673] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2278'. [ 863.075113][T13676] overlayfs: failed to resolve './file0': -2 [ 863.100099][T13673] netlink: 'syz.1.2278': attribute type 10 has an invalid length. [ 863.174984][T13678] Bluetooth: hci0: unsupported parameter 5135 [ 863.177948][T13673] md: couldn't update array info. -22 [ 863.195511][T13673] md: could not open device unknown-block(1,1). [ 863.201772][T13678] Bluetooth: hci0: unsupported parameter 8192 [ 863.201790][T13678] Bluetooth: hci0: unsupported parameter 5135 [ 863.201804][T13678] Bluetooth: hci0: unsupported parameter 8192 [ 863.226445][T13673] md: md_import_device returned -16 [ 863.239467][T13673] netlink: 'syz.1.2278': attribute type 10 has an invalid length. [ 863.448948][T13685] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 863.455524][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 863.463489][T13685] vhci_hcd vhci_hcd.0: Device attached [ 863.673389][ T7151] vhci_hcd: vhci_device speed not set [ 863.827214][ T7151] usb 33-1: new full-speed USB device number 15 using vhci_hcd [ 864.141429][T13686] vhci_hcd: connection reset by peer [ 864.729599][ T1311] vhci_hcd: stop threads [ 864.741405][ T1311] vhci_hcd: release socket [ 864.746073][ T1311] vhci_hcd: disconnect device [ 864.795389][T13695] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 864.829063][T13695] hub 1-0:1.0: USB hub found [ 864.833954][T13695] hub 1-0:1.0: 1 port detected [ 865.331582][T13713] Bluetooth: hci0: unsupported parameter 5135 [ 865.367129][T13713] Bluetooth: hci0: unsupported parameter 8192 [ 865.388452][T13713] Bluetooth: hci0: unsupported parameter 5135 [ 865.409096][T13713] Bluetooth: hci0: unsupported parameter 8192 [ 866.311983][T13722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.213036][T13723] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 867.219587][T13723] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 867.227127][T13723] vhci_hcd vhci_hcd.0: Device attached [ 867.235357][T13725] vhci_hcd: connection closed [ 867.235728][ T143] vhci_hcd: stop threads [ 867.257885][T13728] overlayfs: failed to resolve './file0': -2 [ 867.283965][ T143] vhci_hcd: release socket [ 867.288427][ T143] vhci_hcd: disconnect device [ 867.381550][T13733] jffs2: notice: (13733) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 868.635678][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 868.635722][ T28] audit: type=1800 audit(1791599546.473:16600): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2295" name="file0" dev="overlay" ino=3503 res=0 errno=0 [ 869.184508][ T7151] vhci_hcd: vhci_device speed not set [ 869.225993][T13739] 9pnet_fd: p9_fd_create_unix (13739): problem connecting socket: ./proc: -111 [ 869.352029][T13744] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 869.421379][T13747] syz.1.2299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 869.579781][T13749] hub 1-0:1.0: USB hub found [ 869.592930][T13749] hub 1-0:1.0: 1 port detected [ 870.236456][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.346412][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.795565][T13753] Bluetooth: hci0: unsupported parameter 5135 [ 871.802034][T13753] Bluetooth: hci0: unsupported parameter 8192 [ 871.809827][T13753] Bluetooth: hci0: unsupported parameter 5135 [ 871.816462][T13753] Bluetooth: hci0: unsupported parameter 8192 [ 872.014859][T12282] kernel write not supported for file /input/event0 (pid: 12282 comm: kworker/0:0) [ 872.260344][T13775] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 872.266919][T13775] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 872.274657][T13775] vhci_hcd vhci_hcd.0: Device attached [ 872.493619][T12282] vhci_hcd: vhci_device speed not set [ 872.574501][T12282] usb 33-1: new full-speed USB device number 16 using vhci_hcd [ 873.011936][T13776] vhci_hcd: connection reset by peer [ 873.061328][ T1311] vhci_hcd: stop threads [ 873.097762][T13779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.115790][ T1311] vhci_hcd: release socket [ 873.160766][ T1311] vhci_hcd: disconnect device [ 874.267383][T13786] 9pnet_fd: p9_fd_create_unix (13786): problem connecting socket: ./proc: -111 [ 874.636363][T13787] overlayfs: failed to resolve './file0': -2 [ 874.670868][T13792] jffs2: notice: (13792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 874.883898][T13799] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 874.955775][T13799] hub 1-0:1.0: USB hub found [ 874.960590][T13799] hub 1-0:1.0: 1 port detected [ 875.272306][T13808] Bluetooth: hci0: unsupported parameter 5135 [ 875.322433][T13808] Bluetooth: hci0: unsupported parameter 8192 [ 875.333269][T13808] Bluetooth: hci0: unsupported parameter 5135 [ 875.343181][T13808] Bluetooth: hci0: unsupported parameter 8192 [ 875.648089][T13817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.665868][T13817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.674028][T13817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.683219][T13817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.690854][T13817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 875.698530][T13817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 876.828650][T13825] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 876.852040][T13825] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 877.021862][ T1311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.154363][ T1311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.256765][T13789] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 877.267295][ T1311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.293943][T13789] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 [ 877.338461][T13789] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f] [ 877.395571][T13840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 877.402104][T13840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 877.410109][T13840] vhci_hcd vhci_hcd.0: Device attached [ 877.462176][T13789] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f] [ 877.613355][ T5101] vhci_hcd: vhci_device speed not set [ 877.733207][ T5101] usb 37-1: new full-speed USB device number 13 using vhci_hcd [ 877.798276][T12282] vhci_hcd: vhci_device speed not set [ 877.827351][T13817] Bluetooth: hci3: command tx timeout [ 877.899948][ T1311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.062519][T13789] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned [ 878.095484][T13841] vhci_hcd: connection reset by peer [ 878.139683][ T143] vhci_hcd: stop threads [ 878.213479][ T143] vhci_hcd: release socket [ 878.231666][T13789] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f]: assigned [ 878.277726][ T143] vhci_hcd: disconnect device [ 878.634441][ T9] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 878.957121][ T1311] tipc: Left network mode [ 879.109693][T13815] chnl_net:caif_netlink_parms(): no params data found [ 879.292596][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.307562][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.316015][T13815] bridge_slave_0: entered allmulticast mode [ 879.327972][T13815] bridge_slave_0: entered promiscuous mode [ 879.358017][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.367398][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.376671][T13815] bridge_slave_1: entered allmulticast mode [ 879.384280][T13815] bridge_slave_1: entered promiscuous mode [ 879.454837][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.483637][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.557172][T13815] team0: Port device team_slave_0 added [ 879.571967][T13815] team0: Port device team_slave_1 added [ 879.602080][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.610749][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.642094][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.690667][ T1311] bond1: (slave gretap1): Releasing active interface [ 879.708468][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.715572][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.755826][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.841039][T13815] hsr_slave_0: entered promiscuous mode [ 879.849151][T13815] hsr_slave_1: entered promiscuous mode [ 879.861927][T13815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.871928][T13815] Cannot create hsr debugfs directory [ 879.908752][T13817] Bluetooth: hci3: command tx timeout [ 880.420952][ T1311] hsr_slave_0: left promiscuous mode [ 880.428046][ T1311] hsr_slave_1: left promiscuous mode [ 880.437957][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.445628][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.454982][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.462408][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.471538][ T1311] bridge_slave_1: left allmulticast mode [ 880.477524][ T1311] bridge_slave_1: left promiscuous mode [ 880.485082][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.496599][ T1311] bridge_slave_0: left allmulticast mode [ 880.502262][ T1311] bridge_slave_0: left promiscuous mode [ 880.523095][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.604323][ T1311] veth1_macvtap: left promiscuous mode [ 880.610420][ T1311] veth0_macvtap: left promiscuous mode [ 880.634237][ T1311] veth1_vlan: left promiscuous mode [ 880.639830][ T1311] veth0_vlan: left promiscuous mode [ 880.897972][ T1311] bond1 (unregistering): Released all slaves [ 881.418080][ T1311] team0 (unregistering): Port device team_slave_1 removed [ 881.459336][ T1311] team0 (unregistering): Port device team_slave_0 removed [ 881.498597][ T1311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.539732][ T1311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.810259][ T1311] bond0 (unregistering): Released all slaves [ 881.982903][T13817] Bluetooth: hci3: command tx timeout [ 882.086773][T13815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 882.112364][T13815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 882.138893][T13815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 882.150353][T13815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 882.239169][ T1311] IPVS: stop unused estimator thread 0... [ 882.362280][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.401038][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.413724][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.420791][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.441959][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.449070][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.494215][T13815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 882.504695][T13815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 882.756790][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.835660][T13815] veth0_vlan: entered promiscuous mode [ 882.852362][T13815] veth1_vlan: entered promiscuous mode [ 882.890514][T13815] veth0_macvtap: entered promiscuous mode [ 882.901584][T13815] veth1_macvtap: entered promiscuous mode [ 882.919422][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.930962][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.941674][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.943048][ T5101] vhci_hcd: vhci_device speed not set [ 882.952595][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.968959][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.987935][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.998851][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.011085][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.026903][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.040193][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.065077][T13815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.074018][T13815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.082714][T13815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.097980][T13815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.220276][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.235498][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.284908][ T8625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.296410][ T8625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.062967][T13817] Bluetooth: hci3: command tx timeout [ 902.430972][T13970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 902.473417][T13975] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 902.502369][T13976] Bluetooth: hci0: unsupported parameter 5135 [ 902.518992][T13975] hub 1-0:1.0: USB hub found [ 902.523982][T13975] hub 1-0:1.0: 1 port detected [ 902.549117][T13976] Bluetooth: hci0: unsupported parameter 8192 [ 902.579489][T13976] Bluetooth: hci0: unsupported parameter 5135 [ 902.593121][T13976] Bluetooth: hci0: unsupported parameter 8192 [ 902.724925][T13986] overlayfs: failed to resolve './file0': -2 [ 902.796132][T13988] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 902.805694][T13988] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 902.849323][ T5857] IPVS: starting estimator thread 0... [ 902.905784][T13992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.942964][T13991] IPVS: using max 34 ests per chain, 81600 per kthread [ 905.858417][T14003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 905.864990][T14003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 905.873198][T14003] vhci_hcd vhci_hcd.0: Device attached [ 906.445644][T14004] vhci_hcd: connection closed [ 906.484714][ T59] vhci_hcd: stop threads [ 906.608727][ T59] vhci_hcd: release socket [ 906.684575][ T59] vhci_hcd: disconnect device [ 908.102612][T14022] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 908.111546][T14022] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 908.131090][ T5101] libceph: connect (1)[c::]:6789 error -101 [ 908.139404][ T5101] libceph: mon0 (1)[c::]:6789 connect error [ 908.151541][ T5101] libceph: connect (1)[c::]:6789 error -101 [ 908.157933][ T5101] libceph: mon0 (1)[c::]:6789 connect error [ 908.265681][T14018] ceph: No mds server is up or the cluster is laggy [ 908.287367][T14034] overlayfs: failed to resolve './file0': -2 [ 908.553544][T14040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 908.560117][T14040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 908.567792][T14040] vhci_hcd vhci_hcd.0: Device attached [ 908.773315][ T973] vhci_hcd: vhci_device speed not set [ 908.878767][ T973] usb 35-1: new full-speed USB device number 20 using vhci_hcd [ 909.475542][T14042] vhci_hcd: connection closed [ 909.783081][ T1311] vhci_hcd: stop threads [ 909.812993][ T1311] vhci_hcd: release socket [ 909.833296][T14046] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 909.839840][T14046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 909.847733][ T1311] vhci_hcd: disconnect device [ 909.860646][T14046] vhci_hcd vhci_hcd.0: Device attached [ 909.881412][T14049] vhci_hcd: connection closed [ 909.882133][ T143] vhci_hcd: stop threads [ 909.892540][ T143] vhci_hcd: release socket [ 909.897293][ T143] vhci_hcd: disconnect device [ 909.902306][T14054] jffs2: notice: (14054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 909.940917][T14056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.978326][T14057] overlayfs: failed to resolve './file1': -2 [ 912.846836][T14076] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 912.855809][T14076] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 913.913322][T14085] 9pnet_virtio: no channels available for device syz [ 913.947057][T14087] FAULT_INJECTION: forcing a failure. [ 913.947057][T14087] name failslab, interval 1, probability 0, space 0, times 0 [ 913.970069][T14087] CPU: 1 PID: 14087 Comm: syz.0.2345 Tainted: G S syzkaller #0 [ 913.979051][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 913.989138][T14087] Call Trace: [ 913.992436][T14087] [ 913.995381][T14087] dump_stack_lvl+0x18c/0x250 [ 914.000059][T14087] ? show_regs_print_info+0x20/0x20 [ 914.005251][T14087] ? load_image+0x420/0x420 [ 914.009749][T14087] ? __lock_acquire+0x7eb0/0x7eb0 [ 914.014769][T14087] should_fail_ex+0x394/0x4c0 [ 914.019443][T14087] should_failslab+0x9/0x20 [ 914.023941][T14087] slab_pre_alloc_hook+0x59/0x300 [ 914.028958][T14087] ? snd_midi_event_new+0x95/0x1e0 [ 914.034082][T14087] ? snd_midi_event_new+0x95/0x1e0 [ 914.039212][T14087] __kmem_cache_alloc_node+0x53/0x250 [ 914.044589][T14087] ? snd_midi_event_new+0x95/0x1e0 [ 914.049691][T14087] __kmalloc+0xa7/0x240 [ 914.053853][T14087] snd_midi_event_new+0x95/0x1e0 [ 914.058811][T14087] snd_virmidi_output_open+0xf8/0x5c0 [ 914.064201][T14087] open_substream+0x3e5/0x760 [ 914.068895][T14087] rawmidi_open_priv+0xc4/0x620 [ 914.073763][T14087] snd_rawmidi_open+0x465/0xaf0 [ 914.078635][T14087] ? snd_rawmidi_ioctl_compat+0x800/0x800 [ 914.084362][T14087] ? do_task_dead+0xd0/0xd0 [ 914.088886][T14087] ? __kobject_del+0x2e0/0x2e0 [ 914.093662][T14087] ? __asan_memset+0x22/0x40 [ 914.098264][T14087] ? snd_open+0x302/0x390 [ 914.102616][T14087] chrdev_open+0x58c/0x600 [ 914.107043][T14087] ? cd_forget+0x160/0x160 [ 914.111469][T14087] ? fsnotify_perm+0x3ed/0x5e0 [ 914.116255][T14087] do_dentry_open+0x880/0x14b0 [ 914.121041][T14087] ? cd_forget+0x160/0x160 [ 914.125479][T14087] path_openat+0x284f/0x3270 [ 914.130099][T14087] ? do_sys_openat2+0xda/0x1d0 [ 914.134873][T14087] ? __x64_sys_openat+0x139/0x160 [ 914.139921][T14087] ? verify_lock_unused+0x140/0x140 [ 914.145136][T14087] ? do_filp_open+0x430/0x430 [ 914.149837][T14087] do_filp_open+0x1f2/0x430 [ 914.154353][T14087] ? vfs_tmpfile+0x620/0x620 [ 914.158971][T14087] ? _raw_spin_unlock+0x28/0x40 [ 914.163832][T14087] ? alloc_fd+0x590/0x640 [ 914.168182][T14087] do_sys_openat2+0x134/0x1d0 [ 914.172876][T14087] ? do_sys_open+0xe0/0xe0 [ 914.177303][T14087] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 914.183293][T14087] ? lock_chain_count+0x20/0x20 [ 914.188149][T14087] ? lock_chain_count+0x20/0x20 [ 914.193006][T14087] __x64_sys_openat+0x139/0x160 [ 914.197870][T14087] do_syscall_64+0x55/0xb0 [ 914.202289][T14087] ? clear_bhb_loop+0x40/0x90 [ 914.206972][T14087] ? clear_bhb_loop+0x40/0x90 [ 914.211653][T14087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.217557][T14087] RIP: 0033:0x7f8eee15ea0e [ 914.221976][T14087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 914.241593][T14087] RSP: 002b:00007f8eef0adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 914.250022][T14087] RAX: ffffffffffffffda RBX: 00007f8eef0ae6c0 RCX: 00007f8eee15ea0e [ 914.258096][T14087] RDX: 0000000000141102 RSI: 00007f8eef0adc00 RDI: ffffffffffffff9c [ 914.266080][T14087] RBP: 00007f8eef0adc00 R08: 0000000000000000 R09: 0000000000000000 [ 914.274061][T14087] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 914.282039][T14087] R13: 00007f8eee426038 R14: 00007f8eee425fa0 R15: 00007ffd9e5510a8 [ 914.290039][T14087] [ 914.314247][T14089] overlayfs: failed to resolve './file0': -2 [ 914.642960][ T973] vhci_hcd: vhci_device speed not set [ 915.958444][T14101] jffs2: notice: (14101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 916.777850][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 916.793426][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 916.806406][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 916.820533][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 916.839749][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 916.848674][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 917.180457][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.236575][T14117] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 917.245503][T14117] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 917.307518][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.390958][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.476005][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.571780][T14123] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 917.599173][T14123] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 917.767519][ T42] tipc: Left network mode [ 917.988548][T14111] chnl_net:caif_netlink_parms(): no params data found [ 918.269610][T14144] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 918.276187][T14144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 918.283868][T14144] vhci_hcd vhci_hcd.0: Device attached [ 918.952879][ T5784] Bluetooth: hci1: command tx timeout [ 919.517741][ T5101] vhci_hcd: vhci_device speed not set [ 919.523256][T14146] vhci_hcd: connection closed [ 919.553571][T14149] overlayfs: failed to resolve './file0': -2 [ 919.570998][ T143] vhci_hcd: stop threads [ 919.593245][ T143] vhci_hcd: release socket [ 919.597891][ T143] vhci_hcd: disconnect device [ 919.643003][ T5101] usb 33-1: new full-speed USB device number 17 using vhci_hcd [ 919.650629][ T5101] usb 33-1: enqueue for inactive port 0 [ 919.738420][ T5101] vhci_hcd: vhci_device speed not set [ 919.764411][T14154] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 919.773695][T14154] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 920.056545][T14158] jffs2: notice: (14158) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 921.524856][ T5784] Bluetooth: hci1: command tx timeout [ 921.580742][T14111] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.600902][T14111] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.611308][T14111] bridge_slave_0: entered allmulticast mode [ 921.619823][T14111] bridge_slave_0: entered promiscuous mode [ 921.628706][T14111] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.636423][T14111] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.643740][T14111] bridge_slave_1: entered allmulticast mode [ 921.650452][T14111] bridge_slave_1: entered promiscuous mode [ 921.672835][T14111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.684838][T14111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.712116][T14111] team0: Port device team_slave_0 added [ 921.720404][T14111] team0: Port device team_slave_1 added [ 921.816744][T14111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.862539][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.725807][T14111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.824155][T14111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.837913][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.880876][T14111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.963089][T14180] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 922.972013][T14180] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 923.054070][T14111] hsr_slave_0: entered promiscuous mode [ 923.060398][T14111] hsr_slave_1: entered promiscuous mode [ 923.069446][T14111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 923.077853][T14111] Cannot create hsr debugfs directory [ 923.289149][ T42] hsr_slave_0: left promiscuous mode [ 923.298164][ T42] hsr_slave_1: left promiscuous mode [ 923.308540][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.334881][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.348305][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.356178][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.364724][ T42] bridge_slave_1: left allmulticast mode [ 923.370588][ T42] bridge_slave_1: left promiscuous mode [ 923.376658][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.387645][ T42] bridge_slave_0: left allmulticast mode [ 923.401363][ T42] bridge_slave_0: left promiscuous mode [ 923.415332][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.458049][ T42] veth1_macvtap: left promiscuous mode [ 923.469121][ T42] veth0_macvtap: left promiscuous mode [ 923.478132][ T42] veth1_vlan: left promiscuous mode [ 923.487419][ T42] veth0_vlan: left promiscuous mode [ 923.583010][ T5784] Bluetooth: hci1: command tx timeout [ 923.859499][T14205] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 923.866067][T14205] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 923.874179][T14205] vhci_hcd vhci_hcd.0: Device attached [ 924.123838][ T5101] vhci_hcd: vhci_device speed not set [ 924.697918][ T5101] usb 37-1: new full-speed USB device number 14 using vhci_hcd [ 924.717005][T14206] vhci_hcd: connection closed [ 924.727797][ T48] vhci_hcd: stop threads [ 925.145993][ T48] vhci_hcd: release socket [ 925.183398][ T48] vhci_hcd: disconnect device [ 925.219894][T14208] block nbd3: shutting down sockets [ 925.533153][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 925.823889][ T5784] Bluetooth: hci1: command tx timeout [ 926.318722][ T23] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 926.329782][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.349341][ T23] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 926.367959][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.377160][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.439112][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 926.456998][ T23] usb 4-1: invalid MIDI out EP 0 [ 926.591348][T14013] udevd[14013]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.642325][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 926.715656][ T23] usb 4-1: USB disconnect, device number 20 [ 926.941111][ T42] team0 (unregistering): Port device team_slave_1 removed [ 927.009722][ T42] team0 (unregistering): Port device team_slave_0 removed [ 927.102490][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.233628][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.699786][ T42] bond0 (unregistering): Released all slaves [ 927.790263][T14216] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 927.813004][T14216] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 929.374885][T14242] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 929.383900][T14242] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 929.394567][T14238] netlink: 'syz.3.2373': attribute type 11 has an invalid length. [ 929.409679][T14238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2373'. [ 929.539921][T14247] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 929.546499][T14247] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 929.554425][T14247] vhci_hcd vhci_hcd.0: Device attached [ 929.783684][ T23] vhci_hcd: vhci_device speed not set [ 929.923316][ T23] usb 33-1: new full-speed USB device number 18 using vhci_hcd [ 930.223282][ T5101] vhci_hcd: vhci_device speed not set [ 930.261656][T14248] vhci_hcd: connection reset by peer [ 930.316776][ T1311] vhci_hcd: stop threads [ 930.380499][ T1311] vhci_hcd: release socket [ 930.441421][ T1311] vhci_hcd: disconnect device [ 930.896885][T14254] netlink: 'syz.2.2376': attribute type 1 has an invalid length. [ 930.945089][ T42] IPVS: stop unused estimator thread 0... [ 930.960175][T14254] netlink: 'syz.2.2376': attribute type 2 has an invalid length. [ 930.983855][T14259] block nbd0: shutting down sockets [ 931.674902][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.681234][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.982952][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 933.024371][T14111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 933.104557][T14111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 933.136881][T14111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 933.183562][T14111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 933.207646][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 933.284067][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 933.357340][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 933.443080][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 933.500214][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.714871][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 933.786583][ T9] usb 1-1: invalid MIDI out EP 0 [ 934.154447][T14273] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 934.169140][T14273] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 934.231631][ T9] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 934.278698][ T9] usb 1-1: USB disconnect, device number 47 [ 934.382082][T14111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.440262][T14111] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.474531][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.481660][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.527258][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.535266][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.485950][ T23] vhci_hcd: vhci_device speed not set [ 935.762706][T14296] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 935.771792][T14296] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 937.486818][T14300] jffs2: notice: (14300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 938.543201][T14304] vhci_hcd vhci_hcd.0: failed to lookup sock [ 940.525151][ T28] audit: type=1800 audit(1791599618.113:16601): pid=14310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2385" name="file0" dev="overlay" ino=3548 res=0 errno=0 [ 941.461274][T14313] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 941.498963][T14313] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 941.580620][T14319] syzkaller0: entered promiscuous mode [ 941.598452][T14319] syzkaller0: entered allmulticast mode [ 941.626803][T14319] tc mirred to Houston: device batadv_slave_0 is down [ 941.665207][T14324] block nbd2: shutting down sockets [ 941.774023][T14111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.955219][ T7151] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 941.964710][T14111] veth0_vlan: entered promiscuous mode [ 942.029486][T14111] veth1_vlan: entered promiscuous mode [ 942.408897][T14111] veth0_macvtap: entered promiscuous mode [ 942.448639][T14111] veth1_macvtap: entered promiscuous mode [ 942.522303][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.564370][ T7151] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 942.582858][ T7151] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 942.602824][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.613249][ T7151] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.632872][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.652955][ T7151] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 942.662140][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.683939][ T7151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.708704][T14111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.756818][ T7151] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 942.766872][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.798576][ T7151] usb 3-1: invalid MIDI out EP 0 [ 942.822841][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.832709][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.885409][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.934355][T14111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.960654][T14126] udevd[14126]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.987317][ T7151] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 943.018289][T14111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.055054][T14111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.085934][T14111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.099384][ T7151] usb 3-1: USB disconnect, device number 32 [ 943.115195][T14111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.308845][ T9932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.336812][ T9932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.402360][ T9935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.411657][ T9935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.687672][T14371] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 943.696766][T14371] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 944.680047][T14382] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2395'. [ 944.690992][T14382] netlink: 'syz.3.2395': attribute type 10 has an invalid length. [ 944.764291][T14386] md: couldn't update array info. -22 [ 944.809225][T14386] md: could not open device unknown-block(1,1). [ 944.882867][T14382] team0: Port device dummy0 added [ 944.992061][T14386] md: md_import_device returned -16 [ 945.290993][T14382] netlink: 'syz.3.2395': attribute type 10 has an invalid length. [ 946.805910][T14382] team0: Port device dummy0 removed [ 946.840634][T14391] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 946.849645][T14391] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 947.162463][ T23] libceph: connect (1)[c::]:6789 error -101 [ 947.169804][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 947.319647][T14417] block nbd0: shutting down sockets [ 947.444739][ T23] libceph: connect (1)[c::]:6789 error -101 [ 947.459248][T14420] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 947.468639][T14420] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 947.595373][ T973] IPVS: starting estimator thread 0... [ 947.657095][T12283] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 947.733348][T14422] IPVS: using max 18 ests per chain, 43200 per kthread [ 947.956295][T12283] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 947.986472][T14406] ceph: No mds server is up or the cluster is laggy [ 948.084782][T12283] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 948.205021][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 948.222463][T12283] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.315452][T12283] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 948.373058][T12283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.448416][T12283] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 948.485404][T12283] usb 1-1: invalid MIDI out EP 0 [ 949.106832][T12283] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 949.407408][T12283] usb 1-1: USB disconnect, device number 48 [ 949.496282][T14444] jffs2: notice: (14444) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 949.668612][T14452] overlayfs: failed to resolve './file1': -2 [ 951.881665][T14465] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2408'. [ 951.926567][T14465] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 951.967077][T14465] md: couldn't update array info. -22 [ 951.977198][T14465] md: could not open device unknown-block(1,1). [ 951.999436][T14465] md: md_import_device returned -16 [ 952.044071][T14465] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 952.097839][ T27] libceph: connect (1)[c::]:6789 error -101 [ 952.106249][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 952.348050][T14491] block nbd1: shutting down sockets [ 952.393066][ T27] libceph: connect (1)[c::]:6789 error -101 [ 952.809139][T14467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.910199][T14473] ceph: No mds server is up or the cluster is laggy [ 953.324006][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 953.475621][T14499] jffs2: notice: (14499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 953.639531][ T27] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 953.769682][T14505] overlayfs: failed to resolve './file1': -2 [ 954.548299][ T27] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 954.679887][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 954.880296][ T27] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.092084][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 955.290315][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.347187][T14517] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2422'. [ 955.357963][T14517] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 955.367918][ T27] usb 2-1: can't set config #27, error -71 [ 955.390638][T14517] team0: Port device dummy0 added [ 955.413124][ T27] usb 2-1: USB disconnect, device number 27 [ 955.442295][T14517] md: couldn't update array info. -22 [ 955.452229][T14517] md: could not open device unknown-block(1,1). [ 955.461779][T14517] md: md_import_device returned -16 [ 955.500325][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'. [ 955.502286][T14517] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 955.687856][T14517] team0: Port device dummy0 removed [ 955.749210][ T9] libceph: connect (1)[c::]:6789 error -101 [ 955.755385][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 955.812459][T14527] block nbd3: shutting down sockets [ 956.023323][ T9] libceph: connect (1)[c::]:6789 error -101 [ 956.029378][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 956.103014][ T27] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 956.287054][T14547] hub 1-0:1.0: USB hub found [ 956.292630][T14547] hub 1-0:1.0: 1 port detected [ 956.315325][ T27] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 956.558570][ T973] libceph: connect (1)[c::]:6789 error -101 [ 956.594471][T14531] ceph: No mds server is up or the cluster is laggy [ 956.611082][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 957.066314][ T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 957.077616][ T27] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.090824][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 957.100127][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.119268][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 957.127441][ T27] usb 4-1: invalid MIDI out EP 0 [ 957.168830][ T27] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 957.219890][T14276] udevd[14276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.356012][T14554] block nbd0: shutting down sockets [ 958.175506][T14553] netlink: 'syz.1.2432': attribute type 11 has an invalid length. [ 958.205055][ T5101] usb 4-1: USB disconnect, device number 21 [ 958.215683][T14553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2432'. [ 958.353221][ T27] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 958.851742][ T27] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 958.866980][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.896614][ T27] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.921658][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 958.932348][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.961750][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 958.987156][ T27] usb 1-1: invalid MIDI out EP 0 [ 959.103920][T14125] udevd[14125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.127662][ T27] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 959.188744][ T973] libceph: connect (1)[c::]:6789 error -101 [ 959.198268][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 959.207835][ T27] usb 1-1: USB disconnect, device number 49 [ 959.473161][ T973] libceph: connect (1)[c::]:6789 error -101 [ 960.223180][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 960.241454][T14580] ceph: No mds server is up or the cluster is laggy [ 960.368445][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 961.081637][T14607] block nbd1: shutting down sockets [ 961.363413][ T973] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 961.578164][ T973] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 961.659247][ T973] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 961.741926][ T973] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.839323][ T973] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 961.901141][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.055994][ T973] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 962.089657][ T973] usb 2-1: invalid MIDI out EP 0 [ 962.233721][T14625] block nbd2: shutting down sockets [ 962.258388][ T973] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 962.553312][ T27] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 962.789982][ T27] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 962.919142][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 963.082284][ T973] usb 2-1: USB disconnect, device number 28 [ 963.086426][ T27] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.175966][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 963.202842][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.242230][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 963.254961][ T23] libceph: connect (1)[c::]:6789 error -101 [ 963.280497][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 963.289824][ T27] usb 3-1: invalid MIDI out EP 0 [ 963.425165][ T27] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 963.487558][ T27] usb 3-1: USB disconnect, device number 33 [ 963.553695][ T23] libceph: connect (1)[c::]:6789 error -101 [ 963.559736][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 963.818466][T13817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 963.828733][T13817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 963.837751][T13817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 963.852477][T13817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 963.860211][T13817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 963.868543][T13817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 964.014358][T14631] ceph: No mds server is up or the cluster is laggy [ 964.638512][T14659] block nbd3: shutting down sockets [ 965.132993][ T27] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 965.912873][ T5784] Bluetooth: hci4: command tx timeout [ 966.556131][ T27] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 967.341105][ T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 967.352623][ T27] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.372806][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 967.402864][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.427511][ T27] usb 4-1: can't set config #27, error -71 [ 967.439691][ T27] usb 4-1: USB disconnect, device number 22 [ 967.644083][T14680] tipc: Enabling of bearer rejected, failed to enable media [ 967.972211][ T1311] tipc: Left network mode [ 967.992898][ T5784] Bluetooth: hci4: command tx timeout [ 967.999259][T14688] netlink: 'syz.2.2470': attribute type 11 has an invalid length. [ 968.023243][T14688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2470'. [ 968.141707][T14700] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 968.289460][T14703] block nbd1: shutting down sockets [ 968.451412][T14704] jffs2: notice: (14704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 968.643779][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 968.993054][ T27] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 969.171578][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 969.378859][ T27] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 969.599353][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 969.769733][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.072806][ T5784] Bluetooth: hci4: command tx timeout [ 970.330305][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 970.549269][ T27] usb 2-1: invalid MIDI out EP 0 [ 971.489872][T14646] chnl_net:caif_netlink_parms(): no params data found [ 971.645576][ T27] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 971.713306][ T27] usb 2-1: USB disconnect, device number 29 [ 972.520067][ T5784] Bluetooth: hci4: command tx timeout [ 974.091351][T14746] tipc: Enabling of bearer rejected, failed to enable media [ 975.108059][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.129564][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.142673][T14646] bridge_slave_0: entered allmulticast mode [ 975.161492][T14646] bridge_slave_0: entered promiscuous mode [ 975.250286][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.285713][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.289598][T14768] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2484'. [ 975.302406][T14646] bridge_slave_1: entered allmulticast mode [ 975.317668][T14646] bridge_slave_1: entered promiscuous mode [ 975.373901][T14769] jffs2: notice: (14769) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 975.460361][T14775] md: couldn't update array info. -22 [ 975.469120][T14768] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 975.473171][T14775] md: could not open device unknown-block(1,1). [ 975.498375][T14775] md: md_import_device returned -16 [ 975.547236][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.649307][T14779] block nbd3: shutting down sockets [ 975.922842][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.962939][T12283] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 976.158776][T14768] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 976.306388][T12283] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 976.447818][T12283] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 976.628456][T12283] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.844888][T12283] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.986956][T12283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.390615][T14646] team0: Port device team_slave_0 added [ 977.559773][T12283] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 977.690114][T14646] team0: Port device team_slave_1 added [ 977.766590][T12283] usb 4-1: invalid MIDI out EP 0 [ 978.949293][T14790] netlink: 'syz.1.2488': attribute type 11 has an invalid length. [ 978.984215][T14790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2488'. [ 979.020776][T12283] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 979.051079][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.074248][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.077444][T12283] usb 4-1: USB disconnect, device number 23 [ 979.152819][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.186389][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.206233][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.234783][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.275714][ T1311] hsr_slave_0: left promiscuous mode [ 979.282432][ T1311] hsr_slave_1: left promiscuous mode [ 979.294505][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.302705][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.318105][ T1311] bridge_slave_1: left allmulticast mode [ 979.334800][ T1311] bridge_slave_1: left promiscuous mode [ 979.343838][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.362768][ T1311] bridge_slave_0: left allmulticast mode [ 979.370748][ T1311] bridge_slave_0: left promiscuous mode [ 979.384320][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.411269][ T1311] bond1 (unregistering): (slave geneve2): Releasing active interface [ 979.570691][ T1311] bond1 (unregistering): Released all slaves [ 980.711955][ T1311] team0 (unregistering): Port device team_slave_1 removed [ 980.754690][ T1311] team0 (unregistering): Port device team_slave_0 removed [ 980.754700][T14661] s: rxe_query_port: returned err = -19 [ 980.786282][ T9935] smc: removing ib device s [ 980.822138][ T1311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.926685][ T1311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.641211][ T1311] bond0 (unregistering): Released all slaves [ 981.681570][T14803] tipc: Enabling of bearer rejected, failed to enable media [ 981.849608][T14646] hsr_slave_0: entered promiscuous mode [ 981.864667][T14646] hsr_slave_1: entered promiscuous mode [ 981.924095][T14818] jffs2: notice: (14818) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 982.000003][T14820] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2494'. [ 982.023660][T14820] netlink: 'syz.3.2494': attribute type 10 has an invalid length. [ 982.056781][T14820] md: couldn't update array info. -22 [ 982.069383][T14820] md: could not open device unknown-block(1,1). [ 982.076019][T14820] md: md_import_device returned -16 [ 982.096753][T14820] netlink: 'syz.3.2494': attribute type 10 has an invalid length. [ 982.384498][ T1311] IPVS: stop unused estimator thread 0... [ 982.520324][T14836] block nbd3: shutting down sockets [ 982.913078][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 983.198832][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 983.420585][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 983.639439][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.911599][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 984.056504][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.436759][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 984.624941][ T9] usb 4-1: invalid MIDI out EP 0 [ 985.625085][T14844] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 985.697571][ T9] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 985.774583][T14850] hub 1-0:1.0: USB hub found [ 985.780793][T14850] hub 1-0:1.0: 1 port detected [ 986.459746][ T9] usb 4-1: USB disconnect, device number 24 [ 986.604824][T14646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 986.674687][T14646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 986.740730][T14859] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2504'. [ 986.860792][T14646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 987.204093][T14859] md: couldn't update array info. -22 [ 987.244682][T14646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 987.361313][T14867] md: could not open device unknown-block(1,1). [ 987.462615][T14866] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 987.501606][T14867] md: md_import_device returned -16 [ 987.590094][T14859] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 987.730258][T14873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.767672][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.898159][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.958393][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.965544][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.995210][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.002376][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.473954][T14895] block nbd1: shutting down sockets [ 988.762967][T12282] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 989.078188][T12282] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 989.275349][T12282] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 989.498133][T12282] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.800841][T12282] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 990.000424][T12282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.523222][T12282] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 990.762143][T12282] usb 2-1: invalid MIDI out EP 0 [ 991.502449][T12282] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 991.519009][T14125] udevd[14125]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 991.519587][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.543697][T12282] usb 2-1: USB disconnect, device number 30 [ 991.561012][T14642] udevd[14642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.670697][T14646] veth0_vlan: entered promiscuous mode [ 991.699130][T14646] veth1_vlan: entered promiscuous mode [ 991.737132][T14915] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2513'. [ 991.763473][T14915] netlink: 'syz.2.2513': attribute type 10 has an invalid length. [ 991.791265][T14646] veth0_macvtap: entered promiscuous mode [ 991.805065][T14915] md: couldn't update array info. -22 [ 991.824138][T14646] veth1_macvtap: entered promiscuous mode [ 991.830241][T14915] md: could not open device unknown-block(1,1). [ 991.852295][T14915] md: md_import_device returned -16 [ 991.888889][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.920561][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.936463][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.952207][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.965297][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.983198][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.996623][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.004967][T14915] netlink: 'syz.2.2513': attribute type 10 has an invalid length. [ 992.094302][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.119373][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.146409][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.157806][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.169765][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.190452][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.236541][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.249144][T14646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.262353][T14646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.282123][T14646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.291083][T14646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.680631][ T9935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.731049][ T9935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.876709][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.896564][ T8625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.906885][ T8625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.157824][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.164948][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.847717][T14965] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2523'. [ 994.907762][T14965] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 994.973945][T14971] md: couldn't update array info. -22 [ 995.003326][T14971] md: could not open device unknown-block(1,1). [ 995.009782][T14971] md: md_import_device returned -16 [ 995.054373][T14965] team0: Port device dummy0 added [ 995.059974][T14971] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 995.247643][T14971] team0: Port device dummy0 removed [ 995.557475][T13817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 995.583860][T13817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 995.595910][T13817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 995.604376][T13817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 995.612381][T13817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 995.620029][T13817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 996.212669][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.448232][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.663840][T13817] Bluetooth: hci0: command tx timeout [ 997.913530][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.102542][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.160936][T15028] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2537'. [ 998.256867][T15028] netlink: 'syz.0.2537': attribute type 10 has an invalid length. [ 998.297170][T15028] md: couldn't update array info. -22 [ 998.323242][T15028] md: could not open device unknown-block(1,1). [ 998.329633][T15028] md: md_import_device returned -16 [ 998.351584][T15028] netlink: 'syz.0.2537': attribute type 10 has an invalid length. [ 998.483142][T14982] chnl_net:caif_netlink_parms(): no params data found [ 998.632375][ T42] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.884152][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.891427][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.908093][T14982] bridge_slave_0: entered allmulticast mode [ 998.916203][T14982] bridge_slave_0: entered promiscuous mode [ 998.925161][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.939387][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.947716][T14982] bridge_slave_1: entered allmulticast mode [ 998.961331][T14982] bridge_slave_1: entered promiscuous mode [ 999.050241][T14982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.059993][ T42] tipc: Left network mode [ 999.081470][T14982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.172008][T14982] team0: Port device team_slave_0 added [ 999.182145][T14982] team0: Port device team_slave_1 added [ 999.245101][T14982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.252163][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.280214][T14982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.310257][T14982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.317412][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.345794][T14982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.408362][T14982] hsr_slave_0: entered promiscuous mode [ 999.420166][T14982] hsr_slave_1: entered promiscuous mode [ 999.429313][T14982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.439290][T14982] Cannot create hsr debugfs directory [ 999.755900][ T5784] Bluetooth: hci0: command tx timeout [ 1000.199785][ T42] hsr_slave_0: left promiscuous mode [ 1000.206120][ T42] hsr_slave_1: left promiscuous mode [ 1000.212299][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.226650][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.235073][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.242523][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.254948][ T42] bridge_slave_1: left allmulticast mode [ 1000.261239][ T42] bridge_slave_1: left promiscuous mode [ 1000.267610][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.278251][ T42] bridge_slave_0: left allmulticast mode [ 1000.284058][ T42] bridge_slave_0: left promiscuous mode [ 1000.289827][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.302854][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.336159][ T42] veth1_macvtap: left promiscuous mode [ 1000.341754][ T42] veth0_macvtap: left promiscuous mode [ 1000.347904][ T42] veth1_vlan: left promiscuous mode [ 1000.355157][ T42] veth0_vlan: left promiscuous mode [ 1001.121151][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1001.167701][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1001.209586][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.258412][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.584808][ T42] bond0 (unregistering): Released all slaves [ 1001.639912][T14982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1001.650839][T14982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1001.661471][T14982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1001.672414][T14982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1001.797202][T14982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.828964][T13817] Bluetooth: hci0: command tx timeout [ 1001.860996][T14982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.901041][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.908268][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.926946][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.934145][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.031743][ T42] IPVS: stop unused estimator thread 0... [ 1002.300672][T14982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.374206][T14982] veth0_vlan: entered promiscuous mode [ 1002.397383][T14982] veth1_vlan: entered promiscuous mode [ 1002.436018][T14982] veth0_macvtap: entered promiscuous mode [ 1002.452076][T14982] veth1_macvtap: entered promiscuous mode [ 1002.489192][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.501672][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.516605][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.527142][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.537184][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.548119][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.559548][T14982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.573528][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.584562][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.595002][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.606468][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.617283][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.627896][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.639338][T14982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.650587][T14982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.659522][T14982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.668445][T14982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.677250][T14982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.767407][ T9932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.780044][ T9932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.818574][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.828406][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.094768][T15120] block nbd2: shutting down sockets [ 1003.434453][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1003.697013][ T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.785972][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1003.895114][ T23] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.902833][T13817] Bluetooth: hci0: command tx timeout [ 1004.011378][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1004.090685][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.308375][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1004.414571][ T23] usb 3-1: invalid MIDI out EP 0 [ 1005.611732][ T23] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1006.102508][T14661] usb 3-1: USB disconnect, device number 34 [ 1041.262947][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.545894][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.552226][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1087.343037][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 1115.987321][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.993820][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.068351][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 1177.427184][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.433797][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.865903][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.872240][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.305475][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.311809][ T1290] ieee802154 phy1 wpan1: encryption failed: -22