last executing test programs: 9.690409872s ago: executing program 0 (id=940): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 8.610807737s ago: executing program 0 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 8.609916788s ago: executing program 2 (id=944): iopl(0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 8.428665802s ago: executing program 3 (id=945): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 7.591152171s ago: executing program 1 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a1200010102000109022000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) 7.578192362s ago: executing program 2 (id=947): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 7.472793944s ago: executing program 2 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$kcm(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, 0x0, 0x0, 0x0, 0x3000, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 7.471860504s ago: executing program 0 (id=950): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8008) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @mcast1}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='sockfs\x00', 0x203100d, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r7, r7, 0x0, 0x6) accept4(r6, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 6.632565504s ago: executing program 3 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xec2fa4b81eaeea5e}, {0x6, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54015}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.431896039s ago: executing program 2 (id=952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000840)={&(0x7f00000000c0)={0xa, 0x4e23, 0xc, @private2, 0x4}, 0x17, 0x0, 0x0, &(0x7f0000000800)=[@flowinfo={{0x10, 0x29, 0xb, 0x4263}}], 0x10}, 0x80) 6.430944239s ago: executing program 0 (id=953): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 6.290150902s ago: executing program 3 (id=954): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7ff}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd497}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 5.437422912s ago: executing program 1 (id=955): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) 5.437032892s ago: executing program 3 (id=956): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x30, @mcast1, 0x4}}}, 0x90) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) io_setup(0x9, 0x0) 5.436091962s ago: executing program 0 (id=963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000940)='dummy_udc.0', 0xb) 4.193659332s ago: executing program 1 (id=957): iopl(0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 4.051105365s ago: executing program 2 (id=958): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 3.996389406s ago: executing program 1 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 3.842304s ago: executing program 1 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$kcm(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, 0x0, 0x0, 0x0, 0x3000, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 3.798626301s ago: executing program 3 (id=961): mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11) openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) 3.706316793s ago: executing program 2 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0000:00:1d.7', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:1d.7', 0xc) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) accept4$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff02000000000000000000000000000100000000000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x104}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) 84.655298ms ago: executing program 0 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a12000101"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)) 71.428559ms ago: executing program 1 (id=965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) 0s ago: executing program 3 (id=966): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x756b, 0xb}}]}) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000) kernel console output (not intermixed with test programs): k, BSSID 50:50:50:50:50:50 [ 67.903197][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.914129][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.926014][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.936872][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.948160][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.958095][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.968778][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.980344][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.007958][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.018743][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.029067][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.042090][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.053725][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.072285][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.082285][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.091311][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.100370][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.114037][ T5770] veth0_macvtap: entered promiscuous mode [ 68.124434][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.134423][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.143457][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.152473][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169458][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.180462][ T5770] veth1_macvtap: entered promiscuous mode [ 68.184853][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.326815][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.365843][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.380940][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.391518][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.402247][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.419017][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.430703][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.464128][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.482889][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.498992][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.509695][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.524192][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.537301][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.551071][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.562004][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.573312][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.597735][ T5834] : renamed from virt_wifi0 [ 68.610171][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.619802][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.629397][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.655215][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.680143][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.688286][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.717189][ T5836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.772763][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.781712][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.823118][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.845156][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.883140][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.897611][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.963295][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.992335][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.710176][ T5780] Bluetooth: hci0: command tx timeout [ 69.714350][ T5775] Bluetooth: hci3: command tx timeout [ 69.783026][ T5780] Bluetooth: hci1: command tx timeout [ 69.789451][ T5780] Bluetooth: hci2: command tx timeout [ 70.524145][ T5867] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 70.542206][ T5867] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.536528][ T5874] fuse: Bad value for 'fd' [ 71.541832][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.555112][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.757015][ T5775] Bluetooth: hci0: command tx timeout [ 71.762452][ T5780] Bluetooth: hci3: command tx timeout [ 71.834712][ T5775] Bluetooth: hci2: command tx timeout [ 71.840182][ T5775] Bluetooth: hci1: command tx timeout [ 72.840599][ T5889] netlink: 'syz.1.18': attribute type 3 has an invalid length. [ 76.239937][ T5915] fuse: Invalid rootmode [ 76.246566][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.769918][ T5934] netlink: 'syz.1.29': attribute type 3 has an invalid length. [ 80.682230][ T5938] netlink: 68 bytes leftover after parsing attributes in process `syz.1.32'. [ 80.995491][ T5945] syzkaller0: entered promiscuous mode [ 81.001031][ T5945] syzkaller0: entered allmulticast mode [ 81.103894][ T5948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34'. [ 81.492383][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 83.434600][ T5968] netlink: 'syz.1.40': attribute type 3 has an invalid length. [ 85.282749][ T5975] netlink: 68 bytes leftover after parsing attributes in process `syz.0.42'. [ 85.838099][ T5977] syzkaller0: entered promiscuous mode [ 85.912900][ T5977] syzkaller0: entered allmulticast mode [ 86.414721][ T5981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'. [ 86.768862][ T5994] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 86.775185][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.875968][ T791] cfg80211: failed to load regulatory.db [ 86.901708][ T6003] tipc: Enabling of bearer rejected, failed to enable media [ 86.958628][ T5998] TCP: TCP_TX_DELAY enabled [ 86.969371][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.994080][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 87.019517][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.033717][ T27] usb 4-1: Product: syz [ 87.042614][ T27] usb 4-1: Manufacturer: syz [ 87.092758][ T27] usb_debug 4-1:1.0: debug converter detected [ 87.129702][ T27] usb 4-1: debug converter now attached to ttyUSB0 [ 87.309852][ T791] usb 4-1: USB disconnect, device number 2 [ 87.320019][ T6017] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 87.338801][ T791] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 87.359733][ T791] usb_debug 4-1:1.0: device disconnected [ 87.371072][ T6017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.994650][ T791] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.113055][ T6040] program syz.3.60 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.125770][ T6040] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 88.217712][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.234418][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.259946][ T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.278304][ T791] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.287868][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.308991][ T791] usb 2-1: config 0 descriptor?? [ 88.813846][ T791] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 88.828038][ T791] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 88.915012][ T6049] Invalid ELF header magic: != ELF [ 88.937047][ T791] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.704708][ T27] usb 2-1: USB disconnect, device number 2 [ 89.866737][ T6055] fido_id[6055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 89.951216][ T6055] fido_id (6055) used greatest stack depth: 20904 bytes left [ 90.065186][ T6064] syzkaller0: entered promiscuous mode [ 90.091444][ T6064] syzkaller0: entered allmulticast mode [ 90.167475][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 90.308467][ T12] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 90.328006][ T12] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90150) [ 90.341681][ T2987] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 90.341812][ T12] device offline error, dev sda, sector 721222 op 0x1:(WRITE) flags 0x4000 phys_seg 7 prio class 2 [ 90.403073][ T2987] Buffer I/O error on device sda1, logical block 90112 [ 90.537645][ T12] device offline error, dev sda, sector 721728 op 0x1:(WRITE) flags 0x0 phys_seg 19 prio class 2 [ 90.623834][ T12] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90216) [ 90.715167][ T2987] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 90.845203][ T2987] Buffer I/O error on device sda1, logical block 90114 [ 90.946898][ T2987] Buffer I/O error on device sda1, logical block 90115 [ 90.999500][ T12] device offline error, dev sda, sector 722118 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 91.038940][ T2987] Buffer I/O error on device sda1, logical block 90116 [ 91.143840][ T12] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90264) [ 91.168166][ T2987] Buffer I/O error on device sda1, logical block 90117 [ 91.242228][ T2987] Buffer I/O error on device sda1, logical block 90118 [ 91.366819][ T12] device offline error, dev sda, sector 722246 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 91.386943][ T2987] Buffer I/O error on device sda1, logical block 90119 [ 91.393846][ T2987] Buffer I/O error on device sda1, logical block 90120 [ 91.408683][ T12] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90280) [ 91.424634][ T12] device offline error, dev sda, sector 722318 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2 [ 91.439437][ T5104] device offline error, dev sda, sector 1050110 op 0x1:(WRITE) flags 0x9800 phys_seg 9 prio class 2 [ 91.450666][ T12] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90289) [ 91.464556][ T96] device offline error, dev sda, sector 722646 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 91.475792][ T96] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90330) [ 91.487913][ T2987] Buffer I/O error on device sda1, logical block 90121 [ 91.496172][ T2987] Buffer I/O error on device sda1, logical block 90122 [ 91.506414][ T2987] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.519397][ T2987] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.524273][ T5104] Aborting journal on device sda1-8. [ 91.537734][ T2987] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.550919][ T2987] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.578630][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 244 with max blocks 32 with error 30 [ 91.588078][ T96] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 91.602254][ T96] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 91.613462][ T96] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 91.623032][ T5104] JBD2: I/O error when updating journal superblock for sda1-8. [ 91.639301][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 91.639301][ T12] [ 91.686894][ T12] EXT4-fs error (device sda1) in ext4_do_writepages:2734: Journal has aborted [ 91.717646][ T55] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 91.718003][ T6082] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.1.72: Detected aborted journal [ 91.730371][ T5774] EXT4-fs (sda1): I/O error while writing superblock [ 91.744787][ T6082] EXT4-fs (sda1): previous I/O error to superblock detected [ 91.758298][ T6069] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 91.761777][ T96] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 91.783282][ T6069] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 91.803721][ T6069] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 91.812789][ T6069] Buffer I/O error on dev sda1, logical block 4247, lost async page write [ 91.840157][ T6069] Buffer I/O error on dev sda1, logical block 4260, lost async page write [ 91.851372][ T6069] Buffer I/O error on dev sda1, logical block 5752, lost async page write [ 91.863720][ T6069] Buffer I/O error on dev sda1, logical block 5753, lost async page write [ 91.933783][ T6085] syz.0.71[6085]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.071223][ T6095] Invalid ELF header magic: != ELF [ 93.693754][ T6069] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 94.197400][ T6107] tipc: Enabling of bearer rejected, failed to enable media [ 95.929402][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 96.925234][ T6147] vlan0: entered promiscuous mode [ 96.965202][ T6147] vlan0: entered allmulticast mode [ 96.970469][ T6147] veth0_vlan: entered allmulticast mode [ 97.339054][ T6151] Invalid ELF header magic: != ELF [ 97.482358][ T6163] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 100.977727][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 101.022194][ T6190] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 101.038296][ T6190] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 101.282725][ T6199] tipc: Started in network mode [ 101.288690][ T6199] tipc: Node identity 36d8e993f6e3, cluster identity 4711 [ 101.298288][ T6199] tipc: Enabled bearer , priority 0 [ 101.427495][ T6198] tipc: Disabling bearer [ 101.457513][ T6201] Invalid ELF header magic: != ELF [ 102.439508][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 103.291089][ T6248] tipc: Started in network mode [ 103.296139][ T6248] tipc: Node identity 4691a2aed482, cluster identity 4711 [ 103.303873][ T6248] tipc: Enabled bearer , priority 0 [ 103.311809][ T6246] Invalid ELF header magic: != ELF [ 103.341198][ T6247] tipc: Disabling bearer [ 103.481288][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 103.502452][ T5511] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block [ 103.969357][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 104.898931][ T6277] Invalid ELF header magic: != ELF [ 105.455998][ T6285] syzkaller0: entered promiscuous mode [ 105.465064][ T6285] syzkaller0: entered allmulticast mode [ 105.572919][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 105.889894][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 106.379102][ T6317] Invalid ELF header magic: != ELF [ 106.670882][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 108.011359][ T6347] syzkaller0: entered promiscuous mode [ 108.029210][ T6347] syzkaller0: entered allmulticast mode [ 108.110751][ T6347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.140'. [ 108.913418][ T6362] Invalid ELF header magic: != ELF [ 108.941498][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'. [ 109.219184][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.282664][ T6369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.338562][ T6381] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.347905][ T6381] bond1: (slave team0): Enslaving as an active interface with an up link [ 109.357022][ T6384] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 109.431968][ T6384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.442537][ T6369] bond1: entered promiscuous mode [ 109.450828][ T6369] team0: entered promiscuous mode [ 109.456497][ T6369] team_slave_0: entered promiscuous mode [ 109.462452][ T6369] team_slave_1: entered promiscuous mode [ 109.471119][ T6369] bond1: entered allmulticast mode [ 109.476391][ T6369] team0: entered allmulticast mode [ 109.481681][ T6369] team_slave_0: entered allmulticast mode [ 109.491913][ T6369] team_slave_1: entered allmulticast mode [ 109.530088][ T6386] bond1: (slave ip6erspan0): making interface the new active one [ 109.562180][ T6386] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 109.740455][ T6394] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 109.769784][ T6392] syzkaller0: entered promiscuous mode [ 109.784867][ T6392] syzkaller0: entered allmulticast mode [ 109.823507][ T6392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.151'. [ 109.878166][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 111.068380][ T6404] Invalid ELF header magic: != ELF [ 111.419248][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'. [ 111.472133][ T6418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.479990][ T6426] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 111.532921][ T6428] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 111.564884][ T6426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.634276][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.659893][ T6429] bond2: (slave team0): Enslaving as an active interface with an up link [ 111.689422][ T6418] bond2: entered promiscuous mode [ 111.698705][ T6418] team0: entered promiscuous mode [ 111.715336][ T6418] team_slave_0: entered promiscuous mode [ 111.721398][ T6418] team_slave_1: entered promiscuous mode [ 111.739235][ T6418] bond2: entered allmulticast mode [ 111.745165][ T6418] team0: entered allmulticast mode [ 111.750435][ T6418] team_slave_0: entered allmulticast mode [ 111.757433][ T6418] team_slave_1: entered allmulticast mode [ 111.803470][ T6443] syzkaller0: entered promiscuous mode [ 111.810991][ T6443] syzkaller0: entered allmulticast mode [ 111.847169][ T6434] netlink: 44 bytes leftover after parsing attributes in process `syz.2.164'. [ 111.921865][ T6448] syzkaller0: entered promiscuous mode [ 111.927864][ T6448] syzkaller0: entered allmulticast mode [ 112.174088][ T6375] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 113.297030][ T6462] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 113.452541][ T6466] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 113.495503][ T6466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.575162][ T6469] syzkaller0: entered promiscuous mode [ 113.589012][ T6469] syzkaller0: entered allmulticast mode [ 113.666952][ T6469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.176'. [ 113.690663][ T6455] Invalid ELF header magic: != ELF [ 113.785010][ T6473] syzkaller0: entered promiscuous mode [ 113.794009][ T6473] syzkaller0: entered allmulticast mode [ 113.871802][ T6477] autofs4:pid:6477:autofs_fill_super: called with bogus options [ 115.105639][ T6495] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 115.224700][ T6500] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 115.397031][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.449039][ T6504] bond1: (slave ip6erspan0): making interface the new active one [ 115.462227][ T6504] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 115.486956][ T6514] Zero length message leads to an empty skb [ 115.517717][ T6511] syzkaller0: entered promiscuous mode [ 115.523258][ T6511] syzkaller0: entered allmulticast mode [ 115.549471][ T6520] Invalid ELF header magic: != ELF [ 115.624765][ T6506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.188'. [ 115.745257][ T6522] syzkaller0: entered promiscuous mode [ 115.765531][ T6522] syzkaller0: entered allmulticast mode [ 116.805783][ T6538] netlink: 68 bytes leftover after parsing attributes in process `syz.1.196'. [ 116.950740][ T6542] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 117.038506][ T6546] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 117.062533][ T6546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.191976][ T6551] syzkaller0: entered promiscuous mode [ 117.204679][ T6551] syzkaller0: entered allmulticast mode [ 117.232662][ T6551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.202'. [ 117.454365][ T6552] Invalid ELF header magic: != ELF [ 118.579153][ T6562] syzkaller0: entered promiscuous mode [ 118.585901][ T6562] syzkaller0: entered allmulticast mode [ 118.620011][ T6566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.208'. [ 118.715603][ T6569] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 118.889192][ T6575] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 118.920402][ T6575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.955220][ T6577] syzkaller0: entered promiscuous mode [ 118.967510][ T6577] syzkaller0: entered allmulticast mode [ 119.009423][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 119.066251][ T6584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.083895][ T6591] fuse: Unknown parameter 'user_id00000000000000000000' [ 119.084845][ T6592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.211'. [ 119.103478][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.112871][ T6590] bond2: (slave team0): Enslaving as an active interface with an up link [ 119.153601][ T6584] bond2: entered promiscuous mode [ 119.159384][ T6584] team0: entered promiscuous mode [ 119.167592][ T6584] team_slave_0: entered promiscuous mode [ 119.173596][ T6584] team_slave_1: entered promiscuous mode [ 119.179861][ T6584] bond2: entered allmulticast mode [ 119.194568][ T6584] team0: entered allmulticast mode [ 119.199834][ T6584] team_slave_0: entered allmulticast mode [ 119.214546][ T6584] team_slave_1: entered allmulticast mode [ 120.338745][ T6601] netlink: 68 bytes leftover after parsing attributes in process `syz.1.219'. [ 120.494093][ T6596] Invalid ELF header magic: != ELF [ 120.546086][ T6608] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 120.745965][ T6612] syzkaller0: entered promiscuous mode [ 120.754951][ T6612] syzkaller0: entered allmulticast mode [ 120.830018][ T6617] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 120.876039][ T6617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.883908][ T6614] syzkaller0: entered promiscuous mode [ 120.890065][ T6614] syzkaller0: entered allmulticast mode [ 120.914688][ T6614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.224'. [ 121.059487][ T6629] fuse: Unknown parameter 'user_id00000000000000000000' [ 121.092868][ T6632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.229'. [ 121.260709][ T6638] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 121.737588][ T6644] Invalid ELF header magic: != ELF [ 121.978524][ T6649] syzkaller0: entered promiscuous mode [ 121.984058][ T6649] syzkaller0: entered allmulticast mode [ 122.091158][ T6654] syzkaller0: entered promiscuous mode [ 122.097491][ T6654] syzkaller0: entered allmulticast mode [ 122.105606][ T6656] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 122.128806][ T6656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.228564][ T6659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.237'. [ 122.340031][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 122.399847][ T6670] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 122.467127][ T6664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.546817][ T6673] bond2: (slave team0): Releasing backup interface [ 122.588820][ T6673] team0: left promiscuous mode [ 122.611470][ T6673] team_slave_0: left promiscuous mode [ 122.618152][ T6673] team_slave_1: left promiscuous mode [ 122.640151][ T6673] team0: left allmulticast mode [ 122.662305][ T6673] team_slave_0: left allmulticast mode [ 122.670176][ T6673] team_slave_1: left allmulticast mode [ 122.684241][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.694223][ T6673] bond4: (slave team0): Enslaving as an active interface with an up link [ 122.712199][ T6664] bond4: entered promiscuous mode [ 122.720790][ T6664] team0: entered promiscuous mode [ 122.727223][ T6664] team_slave_0: entered promiscuous mode [ 122.737269][ T6664] team_slave_1: entered promiscuous mode [ 122.759697][ T6664] bond4: entered allmulticast mode [ 122.776514][ T6664] team0: entered allmulticast mode [ 122.783813][ T6664] team_slave_0: entered allmulticast mode [ 122.806003][ T6664] team_slave_1: entered allmulticast mode [ 122.981354][ T6688] fuse: Unknown parameter 'user_id00000000000000000000' [ 123.013611][ T6675] Invalid ELF header magic: != ELF [ 123.263334][ T6696] syzkaller0: entered promiscuous mode [ 123.269850][ T6696] syzkaller0: entered allmulticast mode [ 123.388684][ T6698] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 123.459513][ T6698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.559614][ T6704] syzkaller0: entered promiscuous mode [ 123.565440][ T6704] syzkaller0: entered allmulticast mode [ 123.586938][ T6704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.251'. [ 123.762133][ T6708] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 124.924260][ T6719] Invalid ELF header magic: != ELF [ 124.943218][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 124.970009][ T6728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.259'. [ 125.095741][ T6714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.140313][ T6721] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.242158][ T6721] bond4: (slave team0): Enslaving as an active interface with an up link [ 125.269863][ T6726] bond4: entered promiscuous mode [ 125.284175][ T6726] team0: entered promiscuous mode [ 125.291761][ T6726] team_slave_0: entered promiscuous mode [ 125.299046][ T6726] team_slave_1: entered promiscuous mode [ 125.308042][ T6726] bond4: entered allmulticast mode [ 125.313295][ T6726] team0: entered allmulticast mode [ 125.323096][ T6726] team_slave_0: entered allmulticast mode [ 125.330011][ T6726] team_slave_1: entered allmulticast mode [ 125.380940][ T6744] syzkaller0: entered promiscuous mode [ 125.394639][ T6744] syzkaller0: entered allmulticast mode [ 125.443453][ T6737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.262'. [ 125.453624][ T6749] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 125.505399][ T6749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.521084][ T6752] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 125.614453][ T6755] fuse: Bad value for 'fd' [ 126.669615][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.268'. [ 126.899358][ T6770] Invalid ELF header magic: != ELF [ 127.266612][ T6784] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 127.295496][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.385802][ T6779] 8021q: adding VLAN 0 to HW filter on device bond6 [ 127.422085][ T6795] fuse: Bad value for 'fd' [ 127.433483][ T6779] bond4: (slave team0): Releasing backup interface [ 127.443213][ T6779] team0: left promiscuous mode [ 127.448456][ T6779] team_slave_0: left promiscuous mode [ 127.454093][ T6779] team_slave_1: left promiscuous mode [ 127.459911][ T6779] team0: left allmulticast mode [ 127.465094][ T6779] team_slave_0: left allmulticast mode [ 127.471127][ T6779] team_slave_1: left allmulticast mode [ 127.480586][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.489736][ T6779] bond6: (slave team0): Enslaving as an active interface with an up link [ 127.499282][ T6796] bond6: entered promiscuous mode [ 127.504391][ T6796] team0: entered promiscuous mode [ 127.509997][ T6796] team_slave_0: entered promiscuous mode [ 127.516065][ T6796] team_slave_1: entered promiscuous mode [ 127.522173][ T6796] bond6: entered allmulticast mode [ 127.529277][ T6796] team0: entered allmulticast mode [ 127.534724][ T6796] team_slave_0: entered allmulticast mode [ 127.540479][ T6796] team_slave_1: entered allmulticast mode [ 127.552484][ T6794] syzkaller0: entered promiscuous mode [ 127.561498][ T6794] syzkaller0: entered allmulticast mode [ 127.590201][ T6794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.467742][ T6812] netlink: 68 bytes leftover after parsing attributes in process `syz.1.280'. [ 130.832070][ T6817] Invalid ELF header magic: != ELF [ 130.857468][ T6824] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 131.223596][ T6832] syzkaller0: entered promiscuous mode [ 131.232904][ T6832] syzkaller0: entered allmulticast mode [ 131.239581][ T6838] fuse: Bad value for 'fd' [ 131.299158][ T6832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.287'. [ 132.556184][ T6855] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 132.578554][ T6857] netlink: 68 bytes leftover after parsing attributes in process `syz.3.294'. [ 132.633693][ T6855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 132.782226][ T6870] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 132.962067][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968592][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005363][ T6873] syzkaller0: entered promiscuous mode [ 133.037720][ T6873] syzkaller0: entered allmulticast mode [ 133.086473][ T6868] Invalid ELF header magic: != ELF [ 133.112174][ T6876] netlink: 44 bytes leftover after parsing attributes in process `syz.1.298'. [ 133.359332][ T6886] fuse: Unknown parameter '0x0000000000000003' [ 134.302730][ T6897] syzkaller0: entered promiscuous mode [ 134.309696][ T6897] syzkaller0: entered allmulticast mode [ 134.424663][ T6899] netlink: 68 bytes leftover after parsing attributes in process `syz.0.304'. [ 134.459377][ T6901] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 134.576002][ T6901] 8021q: adding VLAN 0 to HW filter on device bond7 [ 134.751868][ T6911] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 135.685228][ T6913] Invalid ELF header magic: != ELF [ 135.764766][ T6922] fuse: Unknown parameter '0x0000000000000003' [ 135.777483][ T6920] syzkaller0: entered promiscuous mode [ 135.783054][ T6920] syzkaller0: entered allmulticast mode [ 135.801414][ T6920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.310'. [ 136.960759][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 137.055850][ T6934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.120152][ T6942] bond2: (slave team0): Releasing backup interface [ 137.150396][ T6942] team0: left promiscuous mode [ 137.174678][ T6942] team_slave_0: left promiscuous mode [ 137.189235][ T6942] team_slave_1: left promiscuous mode [ 137.205074][ T6942] team0: left allmulticast mode [ 137.209988][ T6942] team_slave_0: left allmulticast mode [ 137.234704][ T6942] team_slave_1: left allmulticast mode [ 137.242665][ T6942] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.274335][ T6942] bond3: (slave team0): Enslaving as an active interface with an up link [ 137.303359][ T6934] bond3: entered promiscuous mode [ 137.313146][ T6934] team0: entered promiscuous mode [ 137.318697][ T6934] team_slave_0: entered promiscuous mode [ 137.328836][ T6934] team_slave_1: entered promiscuous mode [ 137.335016][ T6934] bond3: entered allmulticast mode [ 137.340169][ T6934] team0: entered allmulticast mode [ 137.345523][ T6934] team_slave_0: entered allmulticast mode [ 137.351661][ T6934] team_slave_1: entered allmulticast mode [ 137.364611][ T6947] syzkaller0: entered promiscuous mode [ 137.371583][ T6947] syzkaller0: entered allmulticast mode [ 137.552788][ T6955] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 137.680912][ T6955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.912375][ T6962] Invalid ELF header magic: != ELF [ 138.001888][ T6973] syzkaller0: entered promiscuous mode [ 138.008195][ T6973] syzkaller0: entered allmulticast mode [ 138.031785][ T6973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.322'. [ 138.218822][ T6978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.326'. [ 138.570599][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 138.613523][ T6986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 138.680583][ T6986] bond1: (slave team0): Releasing backup interface [ 138.699672][ T6986] team0: left promiscuous mode [ 138.710062][ T6986] team_slave_0: left promiscuous mode [ 138.717158][ T6986] team_slave_1: left promiscuous mode [ 138.723557][ T6986] team0: left allmulticast mode [ 138.729518][ T6986] team_slave_0: left allmulticast mode [ 138.736835][ T6986] team_slave_1: left allmulticast mode [ 138.752596][ T6986] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.763892][ T6986] bond8: (slave team0): Enslaving as an active interface with an up link [ 138.786910][ T6995] bond8: entered promiscuous mode [ 138.792805][ T6995] team0: entered promiscuous mode [ 138.798284][ T6995] team_slave_0: entered promiscuous mode [ 138.804294][ T6995] team_slave_1: entered promiscuous mode [ 138.810538][ T6995] bond8: entered allmulticast mode [ 138.815827][ T6995] team0: entered allmulticast mode [ 138.822155][ T6995] team_slave_0: entered allmulticast mode [ 138.828081][ T6995] team_slave_1: entered allmulticast mode [ 138.851967][ T6994] syzkaller0: entered promiscuous mode [ 138.877448][ T6994] syzkaller0: entered allmulticast mode [ 138.885568][ T6999] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 139.002422][ T6999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.128006][ T7003] Invalid ELF header magic: != ELF [ 139.284825][ T7011] syzkaller0: entered promiscuous mode [ 139.290363][ T7011] syzkaller0: entered allmulticast mode [ 139.397974][ T7011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.336'. [ 139.512995][ T7019] netlink: 68 bytes leftover after parsing attributes in process `syz.2.339'. [ 139.815347][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 139.868644][ T7030] 8021q: adding VLAN 0 to HW filter on device bond9 [ 139.928513][ T7030] bond8: (slave team0): Releasing backup interface [ 139.982523][ T7030] team0: left promiscuous mode [ 140.004225][ T7030] team_slave_0: left promiscuous mode [ 140.016251][ T7030] team_slave_1: left promiscuous mode [ 140.025164][ T7030] team0: left allmulticast mode [ 140.032454][ T7030] team_slave_0: left allmulticast mode [ 140.039294][ T7030] team_slave_1: left allmulticast mode [ 140.056623][ T7030] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.073503][ T7030] bond9: (slave team0): Enslaving as an active interface with an up link [ 140.116095][ T7038] bond9: entered promiscuous mode [ 140.123177][ T7038] team0: entered promiscuous mode [ 140.128934][ T7038] team_slave_0: entered promiscuous mode [ 140.136319][ T7038] team_slave_1: entered promiscuous mode [ 140.142516][ T7038] bond9: entered allmulticast mode [ 140.148662][ T7038] team0: entered allmulticast mode [ 140.154018][ T7038] team_slave_0: entered allmulticast mode [ 140.160276][ T7038] team_slave_1: entered allmulticast mode [ 140.216794][ T7041] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 140.279009][ T7041] 8021q: adding VLAN 0 to HW filter on device bond5 [ 140.362561][ T7044] Invalid ELF header magic: != ELF [ 140.512797][ T7051] syzkaller0: entered promiscuous mode [ 140.524820][ T7051] syzkaller0: entered allmulticast mode [ 140.901100][ T7063] syzkaller0: entered promiscuous mode [ 140.944564][ T7063] syzkaller0: entered allmulticast mode [ 140.968948][ T7068] netlink: 68 bytes leftover after parsing attributes in process `syz.0.353'. [ 141.030646][ T7063] netlink: 44 bytes leftover after parsing attributes in process `syz.3.351'. [ 141.257020][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 141.308867][ T7073] 8021q: adding VLAN 0 to HW filter on device bond7 [ 141.385263][ T7073] bond6: (slave team0): Releasing backup interface [ 141.418228][ T7073] team0: left promiscuous mode [ 141.423209][ T7073] team_slave_0: left promiscuous mode [ 141.447109][ T7073] team_slave_1: left promiscuous mode [ 141.453587][ T7073] team0: left allmulticast mode [ 141.463111][ T7073] team_slave_0: left allmulticast mode [ 141.480592][ T7073] team_slave_1: left allmulticast mode [ 141.494121][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.517676][ T7073] bond7: (slave team0): Enslaving as an active interface with an up link [ 141.573325][ T7088] bond7: entered promiscuous mode [ 141.582894][ T7088] team0: entered promiscuous mode [ 141.589069][ T7088] team_slave_0: entered promiscuous mode [ 141.603279][ T7088] team_slave_1: entered promiscuous mode [ 141.655289][ T7088] bond7: entered allmulticast mode [ 141.661209][ T7088] team0: entered allmulticast mode [ 141.666487][ T7088] team_slave_0: entered allmulticast mode [ 141.672454][ T7088] team_slave_1: entered allmulticast mode [ 141.679606][ T7087] Invalid ELF header magic: != ELF [ 141.846142][ T7092] autofs4:pid:7092:autofs_fill_super: called with bogus options [ 142.741539][ T7099] syzkaller0: entered promiscuous mode [ 142.758690][ T7099] syzkaller0: entered allmulticast mode [ 142.989713][ T7109] syzkaller0: entered promiscuous mode [ 143.003567][ T7109] syzkaller0: entered allmulticast mode [ 143.055467][ T7109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.365'. [ 143.127587][ T7115] netlink: 68 bytes leftover after parsing attributes in process `syz.1.367'. [ 143.562757][ T7120] Invalid ELF header magic: != ELF [ 144.643443][ T7130] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 144.702831][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 144.732616][ T7138] autofs4:pid:7138:autofs_fill_super: called with bogus options [ 147.027264][ T7132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.109321][ T7140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.213516][ T7140] bond6: (slave bond0): Enslaving as an active interface with an up link [ 147.324997][ T7141] bond6: entered promiscuous mode [ 147.340957][ T7141] bond0: entered promiscuous mode [ 147.364640][ T7141] bond_slave_0: entered promiscuous mode [ 147.384931][ T7141] bond_slave_1: entered promiscuous mode [ 147.403828][ T7141] bond6: entered allmulticast mode [ 147.421644][ T7141] bond0: entered allmulticast mode [ 147.431956][ T7141] bond_slave_0: entered allmulticast mode [ 147.438638][ T7141] bond_slave_1: entered allmulticast mode [ 147.522203][ T7149] syzkaller0: entered promiscuous mode [ 147.536917][ T7149] syzkaller0: entered allmulticast mode [ 147.634080][ T7159] syzkaller0: entered promiscuous mode [ 147.639912][ T7159] syzkaller0: entered allmulticast mode [ 147.670695][ T7159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.378'. [ 148.048048][ T7164] Invalid ELF header magic: != ELF [ 148.206130][ T7177] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 149.514130][ T7192] autofs4:pid:7192:autofs_fill_super: called with bogus options [ 150.185807][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 150.222051][ T7187] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.320939][ T7190] bond8: entered promiscuous mode [ 150.326120][ T7190] bond8: entered allmulticast mode [ 150.628531][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.390'. [ 150.726097][ T7206] netlink: 'syz.3.390': attribute type 3 has an invalid length. [ 151.132561][ T7207] syzkaller0: entered promiscuous mode [ 151.279254][ T7207] syzkaller0: entered allmulticast mode [ 151.598034][ T7225] netlink: 68 bytes leftover after parsing attributes in process `syz.2.393'. [ 151.655594][ T7222] Invalid ELF header magic: != ELF [ 152.774437][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 152.850200][ T7233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.906865][ T7237] bond6: (slave bond0): Releasing backup interface [ 152.955494][ T7237] bond0: left promiscuous mode [ 152.968195][ T7237] bond_slave_0: left promiscuous mode [ 152.987403][ T7237] bond_slave_1: left promiscuous mode [ 152.993199][ T7237] bond0: left allmulticast mode [ 153.000028][ T7237] bond_slave_0: left allmulticast mode [ 153.017564][ T7237] bond_slave_1: left allmulticast mode [ 153.042920][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.061912][ T7237] bond7: (slave bond0): Enslaving as an active interface with an up link [ 153.127276][ T7249] bond7: entered promiscuous mode [ 153.133237][ T7249] bond0: entered promiscuous mode [ 153.144933][ T7249] bond_slave_0: entered promiscuous mode [ 153.175608][ T7249] bond_slave_1: entered promiscuous mode [ 153.211639][ T7249] bond7: entered allmulticast mode [ 153.248747][ T7249] bond0: entered allmulticast mode [ 153.303091][ T7249] bond_slave_0: entered allmulticast mode [ 153.395296][ T7249] bond_slave_1: entered allmulticast mode [ 154.165804][ T7259] syzkaller0: entered promiscuous mode [ 154.179154][ T7263] netlink: 68 bytes leftover after parsing attributes in process `syz.3.402'. [ 154.179383][ T7259] syzkaller0: entered allmulticast mode [ 155.516379][ T7277] Invalid ELF header magic: != ELF [ 155.754699][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 156.731851][ T7285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 156.817867][ T7295] bond4: (slave team0): Releasing backup interface [ 156.841183][ T7295] team0: left promiscuous mode [ 156.867522][ T7295] team_slave_0: left promiscuous mode [ 156.892003][ T7295] team_slave_1: left promiscuous mode [ 156.979302][ T7295] team0: left allmulticast mode [ 157.042348][ T7295] team_slave_0: left allmulticast mode [ 157.110820][ T7295] team_slave_1: left allmulticast mode [ 157.489626][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.668346][ T7295] bond8: (slave team0): Enslaving as an active interface with an up link [ 157.739647][ T7297] bond8: entered promiscuous mode [ 157.774138][ T7297] team0: entered promiscuous mode [ 157.784902][ T7297] team_slave_0: entered promiscuous mode [ 157.791603][ T7297] team_slave_1: entered promiscuous mode [ 157.810401][ T7297] bond8: entered allmulticast mode [ 157.838676][ T7297] team0: entered allmulticast mode [ 157.865446][ T7297] team_slave_0: entered allmulticast mode [ 157.900330][ T7297] team_slave_1: entered allmulticast mode [ 158.803353][ T7326] syzkaller0: entered promiscuous mode [ 158.808933][ T7326] syzkaller0: entered allmulticast mode [ 160.356564][ T7336] Invalid ELF header magic: != ELF [ 160.932755][ T7345] netlink: 'syz.1.425': attribute type 3 has an invalid length. [ 160.944114][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 163.245595][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 163.305117][ T7351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 163.355127][ T7351] bond8: (slave team0): Releasing backup interface [ 163.367140][ T7351] team0: left promiscuous mode [ 163.383511][ T7351] team_slave_0: left promiscuous mode [ 163.399644][ T7351] team_slave_1: left promiscuous mode [ 163.415784][ T7351] team0: left allmulticast mode [ 163.421045][ T7351] team_slave_0: left allmulticast mode [ 163.430636][ T7351] team_slave_1: left allmulticast mode [ 163.440497][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.457360][ T7351] bond9: (slave team0): Enslaving as an active interface with an up link [ 163.493482][ T7363] bond9: entered promiscuous mode [ 163.499023][ T7363] team0: entered promiscuous mode [ 163.587239][ T7363] team_slave_0: entered promiscuous mode [ 163.619121][ T7363] team_slave_1: entered promiscuous mode [ 163.648581][ T7363] bond9: entered allmulticast mode [ 163.671856][ T7363] team0: entered allmulticast mode [ 163.714739][ T7363] team_slave_0: entered allmulticast mode [ 163.741519][ T7363] team_slave_1: entered allmulticast mode [ 164.994799][ T7389] fuse: Unknown parameter 'fd0x0000000000000003' [ 165.010846][ T7385] syzkaller0: entered promiscuous mode [ 165.027250][ T7385] syzkaller0: entered allmulticast mode [ 165.206745][ T7390] Invalid ELF header magic: != ELF [ 166.173784][ T7401] syzkaller0: entered promiscuous mode [ 166.181919][ T7401] syzkaller0: entered allmulticast mode [ 166.308209][ T7401] netlink: 44 bytes leftover after parsing attributes in process `syz.0.439'. [ 166.470389][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 167.926703][ T7411] netlink: 68 bytes leftover after parsing attributes in process `syz.1.443'. [ 167.955982][ T7408] netlink: 'syz.3.442': attribute type 3 has an invalid length. [ 168.273616][ T7425] fuse: Unknown parameter 'fd0x0000000000000003' [ 169.449696][ T7437] Invalid ELF header magic: != ELF [ 170.695028][ T7455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.454'. [ 171.016389][ T7460] syzkaller0: entered promiscuous mode [ 171.034961][ T7460] syzkaller0: entered allmulticast mode [ 171.067786][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.455'. [ 172.525932][ T7483] Invalid ELF header magic: != ELF [ 173.030852][ T7504] syzkaller0: entered promiscuous mode [ 173.036738][ T7504] syzkaller0: entered allmulticast mode [ 173.065428][ T7504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.468'. [ 174.469966][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 174.476973][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.566857][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 174.804725][ T8] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 175.455344][ T7526] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 175.625688][ T7535] Invalid ELF header magic: != ELF [ 175.669774][ T7526] bond10: option mode: invalid value (18) [ 175.739135][ T7526] bond10 (unregistering): Released all slaves [ 175.917242][ T7527] vhci_hcd: connection reset by peer [ 175.960887][ T11] vhci_hcd: stop threads [ 175.977475][ T11] vhci_hcd: release socket [ 176.011895][ T11] vhci_hcd: disconnect device [ 176.113104][ T7549] syzkaller0: entered promiscuous mode [ 176.118764][ T7549] syzkaller0: entered allmulticast mode [ 176.137373][ T7549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.480'. [ 178.277271][ T7586] syzkaller0: entered promiscuous mode [ 178.283316][ T7586] syzkaller0: entered allmulticast mode [ 178.352449][ T7590] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 178.358031][ T7586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'. [ 178.359099][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.382408][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 178.400562][ T7592] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 178.403583][ T6805] vhci_hcd: stop threads [ 178.403608][ T6805] vhci_hcd: release socket [ 178.403625][ T6805] vhci_hcd: disconnect device [ 178.455632][ T7590] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 178.490976][ T7590] bond6: option mode: invalid value (17) [ 178.503272][ T7590] bond6 (unregistering): Released all slaves [ 179.924786][ T8] vhci_hcd: vhci_device speed not set [ 180.470324][ T7630] syzkaller0: entered promiscuous mode [ 180.514015][ T7630] syzkaller0: entered allmulticast mode [ 180.868150][ T7634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 180.874821][ T7634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.019148][ T7634] vhci_hcd vhci_hcd.0: Device attached [ 181.408401][ T7638] vhci_hcd: connection closed [ 181.412769][ T2941] vhci_hcd: stop threads [ 181.439381][ T7639] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 181.442721][ T2941] vhci_hcd: release socket [ 181.453057][ T2941] vhci_hcd: disconnect device [ 181.480987][ T7639] bond10: option mode: invalid value (18) [ 181.508422][ T7639] bond10 (unregistering): Released all slaves [ 181.662516][ T7653] tipc: Enabling of bearer rejected, failed to enable media [ 181.672926][ T7653] syzkaller0: entered promiscuous mode [ 181.688997][ T7653] syzkaller0: entered allmulticast mode [ 183.667330][ T7686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 183.673999][ T7686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.707069][ T7686] vhci_hcd vhci_hcd.0: Device attached [ 183.723085][ T7691] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 1 [ 183.735010][ T7686] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 183.745284][ T2987] vhci_hcd: stop threads [ 183.763670][ T2987] vhci_hcd: release socket [ 183.782747][ T2987] vhci_hcd: disconnect device [ 183.896473][ T7686] bond10: option mode: invalid value (17) [ 183.913613][ T7686] bond10 (unregistering): Released all slaves [ 184.303975][ T7706] Invalid ELF header magic: != ELF [ 186.247538][ T7741] Invalid ELF header magic: != ELF [ 186.315157][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 186.321271][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 186.321297][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 186.327359][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 186.475321][ T7748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 186.481988][ T7748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.540172][ T7748] vhci_hcd vhci_hcd.0: Device attached [ 186.565637][ T7748] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 186.695934][ T7748] bond10: option mode: invalid value (18) [ 186.720398][ T7748] bond10 (unregistering): Released all slaves [ 186.814620][ T5774] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 186.824114][ T7749] vhci_hcd: connection closed [ 186.825471][ T7750] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 186.853328][ T2987] vhci_hcd: stop threads [ 186.858388][ T2987] vhci_hcd: release socket [ 186.863684][ T2987] vhci_hcd: disconnect device [ 186.978893][ T7768] autofs4:pid:7768:autofs_fill_super: called with bogus options [ 188.556148][ T7785] Invalid ELF header magic: != ELF [ 188.576565][ T7793] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 188.583221][ T7793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.613260][ T7793] vhci_hcd vhci_hcd.0: Device attached [ 188.625113][ T7794] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 188.634344][ T3505] vhci_hcd: stop threads [ 188.653506][ T3505] vhci_hcd: release socket [ 188.661213][ T3505] vhci_hcd: disconnect device [ 188.819253][ T7793] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 188.850327][ T7793] bond6: option mode: invalid value (18) [ 188.860316][ T7793] bond6 (unregistering): Released all slaves [ 189.236561][ T7812] autofs4:pid:7812:autofs_fill_super: called with bogus options [ 190.689595][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 190.804728][ T7828] 8021q: adding VLAN 0 to HW filter on device bond10 [ 190.933785][ T7829] Invalid ELF header magic: != ELF [ 190.985753][ T7836] bond9: (slave team0): Releasing backup interface [ 191.015425][ T7836] team0: left promiscuous mode [ 191.020296][ T7836] team_slave_0: left promiscuous mode [ 191.045069][ T7836] team_slave_1: left promiscuous mode [ 191.050882][ T7836] team0: left allmulticast mode [ 191.069429][ T7836] team_slave_0: left allmulticast mode [ 191.083283][ T7836] team_slave_1: left allmulticast mode [ 191.101892][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.111146][ T7836] bond10: (slave team0): Enslaving as an active interface with an up link [ 191.137811][ T7840] bond10: entered promiscuous mode [ 191.143102][ T7840] team0: entered promiscuous mode [ 191.150783][ T7840] team_slave_0: entered promiscuous mode [ 191.157559][ T7840] team_slave_1: entered promiscuous mode [ 191.165302][ T7840] bond10: entered allmulticast mode [ 191.179979][ T7840] team0: entered allmulticast mode [ 191.186411][ T7840] team_slave_0: entered allmulticast mode [ 191.200416][ T7840] team_slave_1: entered allmulticast mode [ 191.342249][ T7852] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 191.348912][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.358867][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 191.365990][ T7853] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 1 [ 191.381985][ T7852] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 191.392003][ T6805] vhci_hcd: stop threads [ 191.401299][ T6805] vhci_hcd: release socket [ 191.411764][ T7852] bond11: option mode: invalid value (18) [ 191.415008][ T6805] vhci_hcd: disconnect device [ 191.427720][ T7852] bond11 (unregistering): Released all slaves [ 191.653311][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 191.919547][ T5774] vhci_hcd: vhci_device speed not set [ 192.348388][ T7875] Invalid ELF header magic: != ELF [ 192.453951][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 193.154532][ T7908] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 193.161200][ T7908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.184956][ T7908] vhci_hcd vhci_hcd.0: Device attached [ 193.217897][ T7909] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 193.227326][ T12] vhci_hcd: stop threads [ 193.227338][ T12] vhci_hcd: release socket [ 193.227354][ T12] vhci_hcd: disconnect device [ 193.245593][ T7908] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 193.281893][ T7908] bond9: option mode: invalid value (18) [ 193.302271][ T7908] bond9 (unregistering): Released all slaves [ 193.454740][ T6078] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 193.768930][ T7924] Invalid ELF header magic: != ELF [ 194.259448][ T6078] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 194.411650][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.418744][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.633228][ T7951] Invalid ELF header magic: != ELF [ 195.449452][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 195.488583][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 195.825527][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.860695][ T7982] Invalid ELF header magic: != ELF [ 195.872046][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 195.881782][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 195.890152][ T9] usb 3-1: Product: syz [ 195.894650][ T9] usb 3-1: Manufacturer: syz [ 195.906048][ T9] usb_debug 3-1:1.0: debug converter detected [ 195.915707][ T9] usb 3-1: debug converter now attached to ttyUSB0 [ 196.120705][ T177] usb 3-1: USB disconnect, device number 2 [ 196.198695][ T7990] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 196.213343][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 196.263227][ T177] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 196.460200][ T177] usb_debug 3-1:1.0: device disconnected [ 197.924992][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 198.048208][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 198.226755][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.248591][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 198.266978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 198.285304][ T9] usb 1-1: Product: syz [ 198.296345][ T9] usb 1-1: Manufacturer: syz [ 198.316361][ T8005] syz.3.610: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 198.334904][ T8005] CPU: 1 PID: 8005 Comm: syz.3.610 Not tainted syzkaller #0 [ 198.339095][ T9] usb_debug 1-1:1.0: debug converter detected [ 198.342206][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.358384][ T8005] Call Trace: [ 198.361668][ T8005] [ 198.364602][ T8005] dump_stack_lvl+0x18c/0x250 [ 198.369301][ T8005] ? show_regs_print_info+0x20/0x20 [ 198.374513][ T8005] ? load_image+0x420/0x420 [ 198.379026][ T8005] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.385467][ T8005] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 198.392003][ T8005] warn_alloc+0x246/0x340 [ 198.396357][ T8005] ? zone_watermark_ok_safe+0x230/0x230 [ 198.401952][ T8005] ? _raw_spin_unlock+0x28/0x40 [ 198.406852][ T8005] __vmalloc_node_range+0x661/0x1320 [ 198.412151][ T8005] ? __asan_memset+0x22/0x40 [ 198.416767][ T8005] ? free_vm_area+0x50/0x50 [ 198.421278][ T8005] ? rcu_is_watching+0x15/0xb0 [ 198.426050][ T8005] ? kvmalloc_node+0x70/0x180 [ 198.430761][ T8005] ? trace_kmalloc+0x1f/0xa0 [ 198.435365][ T8005] kvmalloc_node+0x13f/0x180 [ 198.439961][ T8005] ? xp_create_and_assign_umem+0x173/0xbf0 [ 198.445819][ T8005] xp_create_and_assign_umem+0x173/0xbf0 [ 198.451486][ T8005] ? dev_get_by_index+0x22/0x2d0 [ 198.456458][ T8005] xsk_bind+0x30f/0xc50 [ 198.460641][ T8005] __sys_bind+0x2f0/0x3f0 [ 198.464999][ T8005] ? __ia32_sys_socketpair+0xb0/0xb0 [ 198.470284][ T8005] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 198.476287][ T8005] __x64_sys_bind+0x7a/0x90 [ 198.480794][ T8005] do_syscall_64+0x55/0xb0 [ 198.485216][ T8005] ? clear_bhb_loop+0x40/0x90 [ 198.489898][ T8005] ? clear_bhb_loop+0x40/0x90 [ 198.494589][ T8005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.500518][ T8005] RIP: 0033:0x7f730059de99 [ 198.504944][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.524558][ T8005] RSP: 002b:00007f72fe391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 198.532979][ T8005] RAX: ffffffffffffffda RBX: 00007f7300826270 RCX: 00007f730059de99 [ 198.540953][ T8005] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 198.548926][ T8005] RBP: 00007f7300633eaf R08: 0000000000000000 R09: 0000000000000000 [ 198.556924][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.564898][ T8005] R13: 00007f7300826308 R14: 00007f7300826270 R15: 00007ffd7fac44e8 [ 198.572920][ T8005] [ 198.584641][ T8005] Mem-Info: [ 198.587900][ T8005] active_anon:6205 inactive_anon:0 isolated_anon:0 [ 198.587900][ T8005] active_file:1118 inactive_file:38647 isolated_file:0 [ 198.587900][ T8005] unevictable:768 dirty:413 writeback:0 [ 198.587900][ T8005] slab_reclaimable:10141 slab_unreclaimable:92533 [ 198.587900][ T8005] mapped:27692 shmem:1359 pagetables:594 [ 198.587900][ T8005] sec_pagetables:0 bounce:0 [ 198.587900][ T8005] kernel_misc_reclaimable:0 [ 198.587900][ T8005] free:1358666 free_pcp:10624 free_cma:0 [ 198.646848][ T9] usb 1-1: debug converter now attached to ttyUSB0 [ 198.646894][ T8005] Node 0 active_anon:24820kB inactive_anon:0kB active_file:4472kB inactive_file:154456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110768kB dirty:1652kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:2376kB sec_pagetables:0kB all_unreclaimable? no [ 198.659290][ T9] usb 1-1: USB disconnect, device number 2 [ 198.761741][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 198.771854][ T9] usb_debug 1-1:1.0: device disconnected [ 198.779358][ T8005] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 198.815655][ T8005] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.843976][ T8005] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 198.850621][ T8005] Node 0 DMA32 free:1520172kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27072kB inactive_anon:0kB active_file:4472kB inactive_file:153656kB unevictable:1536kB writepending:1652kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:23068kB local_pcp:9116kB free_cma:0kB [ 198.881814][ T8005] lowmem_reserve[]: 0 0 0 0 0 [ 198.886660][ T8005] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:800kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 198.921271][ T8005] lowmem_reserve[]: 0 0 0 0 0 [ 198.926244][ T8005] Node 1 Normal free:3896364kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20860kB local_pcp:6980kB free_cma:0kB [ 198.956029][ T8005] lowmem_reserve[]: 0 0 0 0 0 [ 198.960813][ T8005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.973538][ T8005] Node 0 DMA32: 13*4kB (UE) 1*8kB (E) 3*16kB (UME) 78*32kB (UM) 48*64kB (UM) 20*128kB (UME) 36*256kB (UME) 35*512kB (UME) 42*1024kB (UME) 16*2048kB (UME) 344*4096kB (M) = 1520172kB [ 198.991741][ T8005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 199.003994][ T8005] Node 1 Normal: 235*4kB (UME) 54*8kB (UME) 39*16kB (UME) 55*32kB (UME) 12*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3896364kB [ 199.021694][ T8005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.031569][ T8005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.040988][ T8005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.052722][ T8005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.062129][ T8005] 41124 total pagecache pages [ 199.067003][ T8005] 0 pages in swap cache [ 199.071187][ T8005] Free swap = 124996kB [ 199.078708][ T8005] Total swap = 124996kB [ 199.082923][ T8005] 2097051 pages RAM [ 199.086784][ T8005] 0 pages HighMem/MovableOnly [ 199.091486][ T8005] 416955 pages reserved [ 199.098227][ T8005] 0 pages cma reserved [ 199.482723][ T8023] Invalid ELF header magic: != ELF [ 199.816416][ T8033] netlink: 'syz.0.620': attribute type 3 has an invalid length. [ 199.829587][ T8033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 205.395079][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 205.405626][ T8060] syzkaller0: entered promiscuous mode [ 205.411687][ T8060] syzkaller0: entered allmulticast mode [ 205.474640][ T5774] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 205.664519][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 205.669706][ T5774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.695405][ T5774] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 205.714501][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 205.734992][ T5774] usb 1-1: Product: syz [ 205.739212][ T5774] usb 1-1: Manufacturer: syz [ 205.762145][ T5774] usb_debug 1-1:1.0: debug converter detected [ 205.784032][ T5774] usb 1-1: debug converter now attached to ttyUSB0 [ 205.847229][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.938302][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.633'. [ 206.180700][ T5774] usb 1-1: USB disconnect, device number 3 [ 206.426794][ T5774] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 206.613105][ T5774] usb_debug 1-1:1.0: device disconnected [ 206.665110][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 206.678471][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 206.687259][ T8] usb 3-1: Product: syz [ 206.692207][ T8] usb 3-1: Manufacturer: syz [ 206.702563][ T8] usb_debug 3-1:1.0: debug converter detected [ 206.714239][ T8] usb 3-1: debug converter now attached to ttyUSB0 [ 206.747740][ T8071] netlink: 'syz.3.633': attribute type 3 has an invalid length. [ 206.921423][ T8] usb 3-1: USB disconnect, device number 3 [ 206.941184][ T8] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 206.972406][ T8] usb_debug 3-1:1.0: device disconnected [ 210.560340][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 210.713536][ T8105] syzkaller0: entered promiscuous mode [ 210.767862][ T8105] syzkaller0: entered allmulticast mode [ 211.053365][ T8110] netlink: 'syz.2.646': attribute type 3 has an invalid length. [ 211.062121][ T8110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 211.425581][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 211.842059][ T8123] 8021q: adding VLAN 0 to HW filter on device bond11 [ 212.605073][ T8135] bond10: (slave team0): Releasing backup interface [ 212.626003][ T8135] team0: left promiscuous mode [ 212.634668][ T8135] team_slave_0: left promiscuous mode [ 212.640263][ T8135] team_slave_1: left promiscuous mode [ 212.691327][ T8135] team0: left allmulticast mode [ 212.705456][ T8135] team_slave_0: left allmulticast mode [ 212.713287][ T8135] team_slave_1: left allmulticast mode [ 212.742715][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.766978][ T8135] bond11: (slave team0): Enslaving as an active interface with an up link [ 212.815202][ T8138] bond11: entered promiscuous mode [ 212.871456][ T8138] team0: entered promiscuous mode [ 212.925989][ T8138] team_slave_0: entered promiscuous mode [ 213.597231][ T8138] team_slave_1: entered promiscuous mode [ 213.603285][ T8138] bond11: entered allmulticast mode [ 213.609913][ T8138] team0: entered allmulticast mode [ 213.615238][ T8138] team_slave_0: entered allmulticast mode [ 213.621080][ T8138] team_slave_1: entered allmulticast mode [ 214.178821][ T8163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 215.545372][ T8158] tipc: Enabling of bearer rejected, failed to enable media [ 215.556270][ T8158] syzkaller0: entered promiscuous mode [ 215.561876][ T8158] syzkaller0: entered allmulticast mode [ 215.696757][ T8162] netlink: 'syz.3.659': attribute type 3 has an invalid length. [ 216.806247][ T8180] autofs4:pid:8180:autofs_fill_super: called with bogus options [ 218.444562][ T6078] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 219.462797][ T6078] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.547593][ T6078] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 219.564591][ T6078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 219.572669][ T6078] usb 3-1: Product: syz [ 219.577123][ T6078] usb 3-1: Manufacturer: syz [ 219.597531][ T6078] usb_debug 3-1:1.0: debug converter detected [ 219.616819][ T6078] usb 3-1: debug converter now attached to ttyUSB0 [ 219.712466][ T23] usb 3-1: USB disconnect, device number 4 [ 219.756698][ T23] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 219.767184][ T23] usb_debug 3-1:1.0: device disconnected [ 219.767699][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 220.024519][ T6078] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 220.692324][ T8191] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.756803][ T8205] bond3: (slave team0): Releasing backup interface [ 220.802966][ T8205] team0: left promiscuous mode [ 220.808917][ T8205] team_slave_0: left promiscuous mode [ 220.815667][ T8205] team_slave_1: left promiscuous mode [ 220.821499][ T8205] team0: left allmulticast mode [ 220.826553][ T8205] team_slave_0: left allmulticast mode [ 220.832063][ T8205] team_slave_1: left allmulticast mode [ 220.839954][ T8205] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.850737][ T8205] bond6: (slave team0): Enslaving as an active interface with an up link [ 220.856498][ T6078] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.871882][ T6078] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 220.881231][ T8209] bond6: entered promiscuous mode [ 220.882008][ T6078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.895017][ T8209] team0: entered promiscuous mode [ 220.900154][ T8209] team_slave_0: entered promiscuous mode [ 220.900483][ T6078] usb 2-1: Product: syz [ 220.910215][ T6078] usb 2-1: Manufacturer: syz [ 220.911170][ T8209] team_slave_1: entered promiscuous mode [ 220.920685][ T6078] usb_debug 2-1:1.0: debug converter detected [ 220.931909][ T6078] usb 2-1: debug converter now attached to ttyUSB0 [ 220.933068][ T8209] bond6: entered allmulticast mode [ 220.949255][ T8209] team0: entered allmulticast mode [ 220.955518][ T8209] team_slave_0: entered allmulticast mode [ 220.961926][ T8209] team_slave_1: entered allmulticast mode [ 220.985954][ T8217] tipc: Enabling of bearer rejected, failed to enable media [ 221.000965][ T8213] syzkaller0: entered promiscuous mode [ 221.013759][ T8213] syzkaller0: entered allmulticast mode [ 221.401029][ T5774] usb 2-1: USB disconnect, device number 3 [ 221.541443][ T5774] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 221.668997][ T5774] usb_debug 2-1:1.0: device disconnected [ 222.155135][ T8228] autofs4:pid:8228:autofs_fill_super: called with bogus options [ 225.324516][ T6078] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 226.015428][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 226.073610][ T8246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.147225][ T6078] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.912856][ T6078] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 226.934666][ T6078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 226.946035][ T6078] usb 2-1: Product: syz [ 226.952983][ T6078] usb 2-1: Manufacturer: syz [ 226.986347][ T6078] usb_debug 2-1:1.0: debug converter detected [ 227.007187][ T8246] bond6: (slave team0): Releasing backup interface [ 227.014378][ T6078] usb 2-1: debug converter now attached to ttyUSB0 [ 227.023501][ T8246] team0: left promiscuous mode [ 227.123790][ T8246] team_slave_0: left promiscuous mode [ 227.178832][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 227.241941][ T8246] team_slave_1: left promiscuous mode [ 227.346319][ T8246] team0: left allmulticast mode [ 227.376473][ T23] usb 2-1: USB disconnect, device number 4 [ 227.532924][ T8246] team_slave_0: left allmulticast mode [ 227.597340][ T23] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 227.648941][ T8246] team_slave_1: left allmulticast mode [ 227.702850][ T23] usb_debug 2-1:1.0: device disconnected [ 227.763213][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.889552][ T8246] bond7: (slave team0): Enslaving as an active interface with an up link [ 227.899972][ T8251] bond7: entered promiscuous mode [ 227.909778][ T8251] team0: entered promiscuous mode [ 227.915012][ T8251] team_slave_0: entered promiscuous mode [ 227.920877][ T8251] team_slave_1: entered promiscuous mode [ 227.927857][ T8251] bond7: entered allmulticast mode [ 227.933282][ T8251] team0: entered allmulticast mode [ 227.940303][ T8251] team_slave_0: entered allmulticast mode [ 227.946536][ T8251] team_slave_1: entered allmulticast mode [ 227.967792][ T8261] netlink: 'syz.2.688': attribute type 3 has an invalid length. [ 228.507479][ T6078] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 229.307335][ T8286] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 229.365880][ T8284] netlink: 68 bytes leftover after parsing attributes in process `syz.2.694'. [ 230.171806][ T8295] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 230.178463][ T8295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.188759][ T8295] vhci_hcd vhci_hcd.0: Device attached [ 230.226844][ T8295] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 230.454610][ T9] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 230.484951][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'. [ 230.578459][ T8295] bond12: option mode: invalid value (18) [ 230.689897][ T8295] bond12 (unregistering): Released all slaves [ 231.394970][ T8296] vhci_hcd: connection reset by peer [ 231.397443][ T8302] netlink: 'syz.0.699': attribute type 3 has an invalid length. [ 231.411235][ T138] vhci_hcd: stop threads [ 231.418413][ T138] vhci_hcd: release socket [ 231.423062][ T138] vhci_hcd: disconnect device [ 231.554993][ T6078] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 231.605339][ T8308] warn_alloc: 1 callbacks suppressed [ 231.605355][ T8308] syz.3.698: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 231.629082][ T8308] CPU: 0 PID: 8308 Comm: syz.3.698 Not tainted syzkaller #0 [ 231.636410][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.646492][ T8308] Call Trace: [ 231.649797][ T8308] [ 231.652750][ T8308] dump_stack_lvl+0x18c/0x250 [ 231.657463][ T8308] ? show_regs_print_info+0x20/0x20 [ 231.662871][ T8308] ? load_image+0x420/0x420 [ 231.667415][ T8308] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 231.673918][ T8308] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 231.673954][ T8308] warn_alloc+0x246/0x340 [ 231.673978][ T8308] ? zone_watermark_ok_safe+0x230/0x230 [ 231.674004][ T8308] ? _raw_spin_unlock+0x28/0x40 [ 231.695225][ T8308] __vmalloc_node_range+0x661/0x1320 [ 231.700527][ T8308] ? __asan_memset+0x22/0x40 [ 231.705139][ T8308] ? free_vm_area+0x50/0x50 [ 231.709651][ T8308] ? rcu_is_watching+0x15/0xb0 [ 231.714417][ T8308] ? kvmalloc_node+0x70/0x180 [ 231.719096][ T8308] ? trace_kmalloc+0x1f/0xa0 [ 231.723719][ T8308] kvmalloc_node+0x13f/0x180 [ 231.728317][ T8308] ? xp_create_and_assign_umem+0x173/0xbf0 [ 231.734128][ T8308] xp_create_and_assign_umem+0x173/0xbf0 [ 231.739852][ T8308] ? dev_get_by_index+0x22/0x2d0 [ 231.744797][ T8308] xsk_bind+0x30f/0xc50 [ 231.748964][ T8308] __sys_bind+0x2f0/0x3f0 [ 231.753312][ T8308] ? __ia32_sys_socketpair+0xb0/0xb0 [ 231.758594][ T8308] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 231.764593][ T8308] __x64_sys_bind+0x7a/0x90 [ 231.769097][ T8308] do_syscall_64+0x55/0xb0 [ 231.773512][ T8308] ? clear_bhb_loop+0x40/0x90 [ 231.778208][ T8308] ? clear_bhb_loop+0x40/0x90 [ 231.782932][ T8308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.788841][ T8308] RIP: 0033:0x7f730059de99 [ 231.793261][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.812867][ T8308] RSP: 002b:00007f72fe391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 231.821282][ T8308] RAX: ffffffffffffffda RBX: 00007f7300826270 RCX: 00007f730059de99 [ 231.829250][ T8308] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 231.837217][ T8308] RBP: 00007f7300633eaf R08: 0000000000000000 R09: 0000000000000000 [ 231.845191][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.853157][ T8308] R13: 00007f7300826308 R14: 00007f7300826270 R15: 00007ffd7fac44e8 [ 231.861140][ T8308] [ 231.864250][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.879544][ T8308] Mem-Info: [ 231.893238][ T8308] active_anon:6308 inactive_anon:0 isolated_anon:0 [ 231.893238][ T8308] active_file:1118 inactive_file:38647 isolated_file:0 [ 231.893238][ T8308] unevictable:768 dirty:423 writeback:0 [ 231.893238][ T8308] slab_reclaimable:10207 slab_unreclaimable:92284 [ 231.893238][ T8308] mapped:27691 shmem:1359 pagetables:600 [ 231.893238][ T8308] sec_pagetables:0 bounce:0 [ 231.893238][ T8308] kernel_misc_reclaimable:0 [ 231.893238][ T8308] free:1362666 free_pcp:6570 free_cma:0 [ 231.938521][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.947367][ T8308] Node 0 active_anon:25232kB inactive_anon:0kB active_file:4472kB inactive_file:154456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110764kB dirty:1692kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11928kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 231.979639][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.987203][ T8308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 232.037401][ T8308] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.165086][ T8308] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 232.220211][ T8308] Node 0 DMA32 free:1538940kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27196kB inactive_anon:0kB active_file:4472kB inactive_file:153656kB unevictable:1536kB writepending:1692kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:3948kB local_pcp:3052kB free_cma:0kB [ 232.581211][ T8308] lowmem_reserve[]: 0 0 0 0 0 [ 232.629383][ T8308] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:800kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 232.909958][ T8308] lowmem_reserve[]: 0 0 0 0 0 [ 232.977253][ T8308] Node 1 Normal free:3896364kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20892kB local_pcp:7012kB free_cma:0kB [ 233.020136][ T8327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.705'. [ 233.027100][ T8308] lowmem_reserve[]: 0 0 0 0 0 [ 233.033868][ T8308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.051676][ T8308] Node 0 DMA32: 1*4kB (M) 13*8kB (E) 1*16kB (U) 4*32kB (ME) 161*64kB (UME) 84*128kB (UME) 56*256kB (UM) 36*512kB (UME) 46*1024kB (UME) 13*2048kB (UME) 342*4096kB (M) = 1528636kB [ 233.070233][ T8308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 233.082416][ T8308] Node 1 Normal: 235*4kB (UME) 54*8kB (UME) 39*16kB (UME) 55*32kB (UME) 12*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3896364kB [ 233.100972][ T8308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.110732][ T8308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.120329][ T8308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.130014][ T8308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.132212][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 233.139482][ T8308] 41124 total pagecache pages [ 233.139496][ T8308] 0 pages in swap cache [ 233.139504][ T8308] Free swap = 124996kB [ 233.139512][ T8308] Total swap = 124996kB [ 233.139523][ T8308] 2097051 pages RAM [ 233.139530][ T8308] 0 pages HighMem/MovableOnly [ 233.139538][ T8308] 416955 pages reserved [ 233.139545][ T8308] 0 pages cma reserved [ 233.373311][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.413149][ T5838] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 233.442696][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 233.560231][ T5838] usb 1-1: Product: syz [ 233.617501][ T5838] usb 1-1: Manufacturer: syz [ 233.869969][ T5838] usb_debug 1-1:1.0: debug converter detected [ 234.085853][ T5838] usb 1-1: debug converter now attached to ttyUSB0 [ 234.124854][ T5838] usb 1-1: USB disconnect, device number 4 [ 234.152099][ T8332] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 234.173109][ T5838] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 234.233830][ T5838] usb_debug 1-1:1.0: device disconnected [ 235.391924][ T8347] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 235.404872][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.712'. [ 235.418326][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 236.360524][ T8355] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 236.367196][ T8355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.380360][ T8355] vhci_hcd vhci_hcd.0: Device attached [ 236.407458][ T8355] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 236.464134][ T8355] bond8: option mode: invalid value (18) [ 236.474558][ T9] vhci_hcd: vhci_device speed not set [ 236.488753][ T8355] bond8 (unregistering): Released all slaves [ 236.711216][ T177] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 236.840670][ T8368] netlink: 68 bytes leftover after parsing attributes in process `syz.0.715'. [ 237.264848][ T8356] vhci_hcd: connection reset by peer [ 237.319000][ T42] vhci_hcd: stop threads [ 237.325166][ T42] vhci_hcd: release socket [ 237.329698][ T42] vhci_hcd: disconnect device [ 237.436738][ T8374] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 238.411123][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 238.458171][ T8378] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.483917][ T8386] bond7: (slave team0): Releasing backup interface [ 238.501913][ T8386] team0: left promiscuous mode [ 238.507415][ T8386] team_slave_0: left promiscuous mode [ 238.513106][ T8386] team_slave_1: left promiscuous mode [ 238.524888][ T8386] team0: left allmulticast mode [ 238.542718][ T8386] team_slave_0: left allmulticast mode [ 238.549150][ T8386] team_slave_1: left allmulticast mode [ 238.558076][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.573844][ T8386] bond9: (slave team0): Enslaving as an active interface with an up link [ 238.585629][ T8378] bond9: entered promiscuous mode [ 238.590840][ T8378] team0: entered promiscuous mode [ 238.596948][ T8378] team_slave_0: entered promiscuous mode [ 238.602967][ T8378] team_slave_1: entered promiscuous mode [ 238.609402][ T8378] bond9: entered allmulticast mode [ 238.615581][ T8378] team0: entered allmulticast mode [ 238.621267][ T8378] team_slave_0: entered allmulticast mode [ 238.627535][ T8378] team_slave_1: entered allmulticast mode [ 238.893024][ T8395] autofs4:pid:8395:autofs_fill_super: called with bogus options [ 240.475721][ T6078] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 241.763922][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.875243][ T8409] netlink: 68 bytes leftover after parsing attributes in process `syz.2.726'. [ 241.914785][ T177] vhci_hcd: vhci_device speed not set [ 242.922544][ T8413] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 243.100075][ T8424] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 243.106747][ T8424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.114290][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 243.131206][ T8424] vhci_hcd vhci_hcd.0: Device attached [ 243.162772][ T8421] 8021q: adding VLAN 0 to HW filter on device bond12 [ 243.180095][ T8424] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 243.217981][ T8424] bond10: option mode: invalid value (18) [ 243.230475][ T8424] bond10 (unregistering): Released all slaves [ 243.238338][ T6078] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 243.271836][ T8421] bond11: (slave team0): Releasing backup interface [ 243.281136][ T8421] team0: left promiscuous mode [ 243.314494][ T8421] team_slave_0: left promiscuous mode [ 243.330609][ T8421] team_slave_1: left promiscuous mode [ 243.341598][ T8421] team0: left allmulticast mode [ 243.347660][ T8421] team_slave_0: left allmulticast mode [ 243.353271][ T8421] team_slave_1: left allmulticast mode [ 243.361080][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.370085][ T8421] bond12: (slave team0): Enslaving as an active interface with an up link [ 243.383252][ T8429] vhci_hcd: connection closed [ 243.383354][ T8437] bond12: entered promiscuous mode [ 243.383621][ T148] vhci_hcd: stop threads [ 243.388124][ T8437] team0: entered promiscuous mode [ 243.388140][ T8437] team_slave_0: entered promiscuous mode [ 243.388332][ T8437] team_slave_1: entered promiscuous mode [ 243.388635][ T8437] bond12: entered allmulticast mode [ 243.401048][ T6078] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 243.402968][ T8437] team0: entered allmulticast mode [ 243.433001][ T148] vhci_hcd: release socket [ 243.435499][ T8437] team_slave_0: entered allmulticast mode [ 243.438675][ T148] vhci_hcd: disconnect device [ 243.449589][ T8437] team_slave_1: entered allmulticast mode [ 243.460179][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.735'. [ 243.580346][ T8445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.736'. [ 243.704559][ T8447] autofs4:pid:8447:autofs_fill_super: called with bogus options [ 244.431957][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.786942][ T8455] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 245.800362][ T8467] syzkaller0: entered promiscuous mode [ 245.850219][ T8467] syzkaller0: entered allmulticast mode [ 246.769262][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 246.857047][ T8475] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.895893][ T8482] bond9: (slave team0): Releasing backup interface [ 246.915163][ T8482] team0: left promiscuous mode [ 246.921598][ T8482] team_slave_0: left promiscuous mode [ 246.929643][ T8482] team_slave_1: left promiscuous mode [ 246.938717][ T8482] team0: left allmulticast mode [ 246.944303][ T8482] team_slave_0: left allmulticast mode [ 246.951454][ T8482] team_slave_1: left allmulticast mode [ 246.961931][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.978211][ T8482] bond10: (slave team0): Enslaving as an active interface with an up link [ 246.991828][ T8488] bond10: entered promiscuous mode [ 246.997854][ T8488] team0: entered promiscuous mode [ 247.003010][ T8488] team_slave_0: entered promiscuous mode [ 247.009557][ T8488] team_slave_1: entered promiscuous mode [ 247.016036][ T8488] bond10: entered allmulticast mode [ 247.064724][ T8488] team0: entered allmulticast mode [ 247.089339][ T8488] team_slave_0: entered allmulticast mode [ 247.117479][ T8491] autofs4:pid:8491:autofs_fill_super: called with bogus options [ 247.156189][ T8488] team_slave_1: entered allmulticast mode [ 248.103703][ T8496] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 248.664798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.946722][ T8498] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 248.953392][ T8498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.968452][ T8498] vhci_hcd vhci_hcd.0: Device attached [ 248.995680][ T6078] vhci_hcd: vhci_device speed not set [ 249.003828][ T8505] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 249.264721][ T177] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 249.504224][ T8505] bond13: option mode: invalid value (19) [ 249.572704][ T8505] bond13 (unregistering): Released all slaves [ 249.810426][ T8500] vhci_hcd: connection reset by peer [ 249.838495][ T8352] vhci_hcd: stop threads [ 249.843948][ T8352] vhci_hcd: release socket [ 249.864057][ T8352] vhci_hcd: disconnect device [ 250.609724][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 250.634260][ T8531] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.658426][ T8531] bond7: (slave team0): Releasing backup interface [ 250.666310][ T8531] team0: left promiscuous mode [ 250.671112][ T8531] team_slave_0: left promiscuous mode [ 250.677882][ T8531] team_slave_1: left promiscuous mode [ 250.683470][ T8531] team0: left allmulticast mode [ 250.688714][ T8531] team_slave_0: left allmulticast mode [ 250.694215][ T8531] team_slave_1: left allmulticast mode [ 250.701761][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.711087][ T8531] bond8: (slave team0): Enslaving as an active interface with an up link [ 250.721056][ T5812] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.732667][ T8536] bond8: entered promiscuous mode [ 250.737965][ T8536] team0: entered promiscuous mode [ 250.743019][ T8536] team_slave_0: entered promiscuous mode [ 250.751315][ T8536] team_slave_1: entered promiscuous mode [ 250.757513][ T8536] bond8: entered allmulticast mode [ 250.762660][ T8536] team0: entered allmulticast mode [ 250.772050][ T8536] team_slave_0: entered allmulticast mode [ 250.778330][ T8536] team_slave_1: entered allmulticast mode [ 250.850990][ T8538] netlink: 68 bytes leftover after parsing attributes in process `syz.1.762'. [ 250.875075][ T5812] usb 3-1: device descriptor read/64, error -71 [ 251.174921][ T5812] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 251.426154][ T8545] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 251.574544][ T5812] usb 3-1: device descriptor read/64, error -71 [ 251.726262][ T5812] usb usb3-port1: attempt power cycle [ 252.202271][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 252.255250][ T5812] usb 3-1: device descriptor read/8, error -71 [ 252.456083][ T8563] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 252.462739][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.471085][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 252.479784][ T8564] usbip_core: unknown command [ 252.487232][ T8564] vhci_hcd: unknown pdu 795108726 [ 252.493917][ T8563] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 252.501825][ T8564] usbip_core: unknown command [ 252.507929][ T6807] vhci_hcd: stop threads [ 252.512249][ T6807] vhci_hcd: release socket [ 252.529928][ T6807] vhci_hcd: disconnect device [ 252.539186][ T8563] bond10: option mode: invalid value (18) [ 252.545090][ T5812] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 252.555326][ T8563] bond10 (unregistering): Released all slaves [ 252.574948][ T5812] usb 3-1: device descriptor read/8, error -71 [ 252.704915][ T5812] usb usb3-port1: unable to enumerate USB device [ 252.879259][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 252.903901][ T8576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.922490][ T8576] bond8: (slave team0): Releasing backup interface [ 252.929817][ T8576] team0: left promiscuous mode [ 252.934725][ T8576] team_slave_0: left promiscuous mode [ 252.940303][ T8576] team_slave_1: left promiscuous mode [ 252.946105][ T8576] team0: left allmulticast mode [ 252.950977][ T8576] team_slave_0: left allmulticast mode [ 252.957139][ T8576] team_slave_1: left allmulticast mode [ 252.966735][ T8576] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.976229][ T8576] bond9: (slave team0): Enslaving as an active interface with an up link [ 252.991882][ T8581] bond9: entered promiscuous mode [ 252.997125][ T8581] team0: entered promiscuous mode [ 253.002159][ T8581] team_slave_0: entered promiscuous mode [ 253.008142][ T8581] team_slave_1: entered promiscuous mode [ 253.013993][ T8581] bond9: entered allmulticast mode [ 253.019302][ T8581] team0: entered allmulticast mode [ 253.024483][ T8581] team_slave_0: entered allmulticast mode [ 253.030254][ T8581] team_slave_1: entered allmulticast mode [ 254.278982][ T8596] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 254.480511][ T177] vhci_hcd: vhci_device speed not set [ 255.839427][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.846328][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.070113][ T8626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 257.076805][ T8626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.086143][ T8626] vhci_hcd vhci_hcd.0: Device attached [ 257.092930][ T8627] usbip_core: unknown command [ 257.099751][ T8627] vhci_hcd: unknown pdu 795108726 [ 257.111424][ T8627] usbip_core: unknown command [ 257.120802][ T3505] vhci_hcd: stop threads [ 257.130441][ T3505] vhci_hcd: release socket [ 257.135831][ T3505] vhci_hcd: disconnect device [ 257.164704][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 257.222278][ T8623] 8021q: adding VLAN 0 to HW filter on device bond10 [ 257.284056][ T8619] bond9: (slave team0): Releasing backup interface [ 257.306374][ T8619] team0: left promiscuous mode [ 257.311286][ T8619] team_slave_0: left promiscuous mode [ 257.319335][ T8619] team_slave_1: left promiscuous mode [ 257.327096][ T8619] team0: left allmulticast mode [ 257.332490][ T8619] team_slave_0: left allmulticast mode [ 257.338758][ T8619] team_slave_1: left allmulticast mode [ 257.362341][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.400432][ T8619] bond10: (slave team0): Enslaving as an active interface with an up link [ 257.413904][ T8626] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 257.738411][ T8626] bond13: option mode: invalid value (18) [ 258.031161][ T8626] bond13 (unregistering): Released all slaves [ 258.272729][ T8629] bond10: entered promiscuous mode [ 258.286105][ T8629] team0: entered promiscuous mode [ 258.309183][ T8629] team_slave_0: entered promiscuous mode [ 258.331745][ T8629] team_slave_1: entered promiscuous mode [ 258.338304][ T8629] bond10: entered allmulticast mode [ 258.398916][ T8629] team0: entered allmulticast mode [ 258.430136][ T8629] team_slave_0: entered allmulticast mode [ 258.438059][ T8629] team_slave_1: entered allmulticast mode [ 258.540615][ T5813] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 258.687389][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.724529][ T177] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 258.902427][ T177] usb 1-1: device descriptor read/64, error -71 [ 259.770263][ T177] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 259.924505][ T177] usb 1-1: device descriptor read/64, error -71 [ 260.593218][ T8675] warn_alloc: 1 callbacks suppressed [ 260.593273][ T8675] syz.3.793: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 260.683300][ T177] usb usb1-port1: attempt power cycle [ 260.690994][ T8675] CPU: 1 PID: 8675 Comm: syz.3.793 Not tainted syzkaller #0 [ 260.698330][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 260.708420][ T8675] Call Trace: [ 260.711718][ T8675] [ 260.714677][ T8675] dump_stack_lvl+0x18c/0x250 [ 260.719396][ T8675] ? show_regs_print_info+0x20/0x20 [ 260.724607][ T8675] ? load_image+0x420/0x420 [ 260.729181][ T8675] ? __rcu_read_unlock+0x7c/0xd0 [ 260.734140][ T8675] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.740591][ T8675] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 260.747139][ T8675] warn_alloc+0x246/0x340 [ 260.751505][ T8675] ? zone_watermark_ok_safe+0x230/0x230 [ 260.757132][ T8675] ? _raw_spin_unlock+0x28/0x40 [ 260.762033][ T8675] __vmalloc_node_range+0x661/0x1320 [ 260.767367][ T8675] ? __asan_memset+0x22/0x40 [ 260.772019][ T8675] ? memset_orig+0x33/0xac [ 260.776479][ T8675] ? free_vm_area+0x50/0x50 [ 260.781023][ T8675] ? rcu_is_watching+0x15/0xb0 [ 260.785826][ T8675] ? kvmalloc_node+0x70/0x180 [ 260.790533][ T8675] ? trace_kmalloc+0x1f/0xa0 [ 260.795204][ T8675] kvmalloc_node+0x13f/0x180 [ 260.799830][ T8675] ? xp_create_and_assign_umem+0x173/0xbf0 [ 260.805662][ T8675] xp_create_and_assign_umem+0x173/0xbf0 [ 260.811319][ T8675] ? dev_get_by_index+0x22/0x2d0 [ 260.816258][ T8675] xsk_bind+0x30f/0xc50 [ 260.820417][ T8675] __sys_bind+0x2f0/0x3f0 [ 260.824749][ T8675] ? __ia32_sys_socketpair+0xb0/0xb0 [ 260.830035][ T8675] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 260.835931][ T8675] __x64_sys_bind+0x7a/0x90 [ 260.840426][ T8675] do_syscall_64+0x55/0xb0 [ 260.844840][ T8675] ? clear_bhb_loop+0x40/0x90 [ 260.849541][ T8675] ? clear_bhb_loop+0x40/0x90 [ 260.854254][ T8675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.860142][ T8675] RIP: 0033:0x7f730059de99 [ 260.864570][ T8675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.884181][ T8675] RSP: 002b:00007f72fe391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 260.892627][ T8675] RAX: ffffffffffffffda RBX: 00007f7300826270 RCX: 00007f730059de99 [ 260.900611][ T8675] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 260.908589][ T8675] RBP: 00007f7300633eaf R08: 0000000000000000 R09: 0000000000000000 [ 260.916561][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.924562][ T8675] R13: 00007f7300826308 R14: 00007f7300826270 R15: 00007ffd7fac44e8 [ 260.932547][ T8675] [ 260.974367][ T8675] Mem-Info: [ 260.991812][ T8675] active_anon:6310 inactive_anon:0 isolated_anon:0 [ 260.991812][ T8675] active_file:1118 inactive_file:38647 isolated_file:0 [ 260.991812][ T8675] unevictable:768 dirty:429 writeback:0 [ 260.991812][ T8675] slab_reclaimable:9991 slab_unreclaimable:92858 [ 260.991812][ T8675] mapped:27699 shmem:1360 pagetables:613 [ 260.991812][ T8675] sec_pagetables:0 bounce:0 [ 260.991812][ T8675] kernel_misc_reclaimable:0 [ 260.991812][ T8675] free:1363365 free_pcp:6758 free_cma:0 [ 261.036874][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.053396][ T8675] Node 0 active_anon:25300kB inactive_anon:0kB active_file:4472kB inactive_file:154456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110832kB dirty:1720kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12308kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no [ 261.085908][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.843364][ T8675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 261.874868][ T8675] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.875421][ T177] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.902376][ T8675] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 261.915593][ T8675] Node 0 DMA32 free:1541352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25256kB inactive_anon:0kB active_file:4472kB inactive_file:153656kB unevictable:1536kB writepending:1720kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:6080kB local_pcp:2944kB free_cma:0kB [ 261.984852][ T8675] lowmem_reserve[]: 0 0 0 0 0 [ 261.989779][ T8675] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:800kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 262.024523][ T177] usb 1-1: device descriptor read/8, error -71 [ 262.031683][ T8675] lowmem_reserve[]: 0 0 0 0 0 [ 262.044461][ T8675] Node 1 Normal free:3896364kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20892kB local_pcp:13880kB free_cma:0kB [ 262.074019][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.102736][ T5813] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 262.135990][ T8675] lowmem_reserve[]: 0 0 0 0 0 [ 262.140793][ T8675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.158229][ T8675] Node 0 DMA32: 644*4kB (ME) 337*8kB (ME) 197*16kB (ME) 80*32kB (UME) 133*64kB (UME) 103*128kB (UME) 68*256kB (UME) 45*512kB (UME) 54*1024kB (UME) 18*2048kB (UME) 336*4096kB (UM) = 1541544kB [ 262.225364][ T8675] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 262.242356][ T8675] Node 1 Normal: 235*4kB (UME) 54*8kB (UME) 39*16kB (UME) 55*32kB (UME) 12*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3896364kB [ 262.262840][ T8675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.272496][ T8675] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.286292][ T8675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.322198][ T8675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.390296][ T8675] 41274 total pagecache pages [ 262.412093][ T8675] 0 pages in swap cache [ 262.440123][ T8675] Free swap = 124996kB [ 262.469712][ T8675] Total swap = 124996kB [ 262.497767][ T8675] 2097051 pages RAM [ 262.528199][ T8675] 0 pages HighMem/MovableOnly [ 262.562071][ T8675] 416955 pages reserved [ 262.594970][ T8675] 0 pages cma reserved [ 264.964766][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 265.074791][ T5812] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 265.352433][ T5812] usb 1-1: device descriptor read/64, error -71 [ 265.730276][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 265.768660][ T9] usb 3-1: device descriptor read/64, error -71 [ 265.837158][ T5812] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 266.104191][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 266.424978][ T9] usb 3-1: device descriptor read/64, error -71 [ 266.534524][ T5812] usb 1-1: device descriptor read/64, error -71 [ 266.544798][ T9] usb usb3-port1: attempt power cycle [ 266.656581][ T5812] usb usb1-port1: attempt power cycle [ 266.994632][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.084640][ T5812] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 267.486162][ T9] usb 3-1: device descriptor read/8, error -71 [ 267.543970][ T8739] netlink: 'syz.1.813': attribute type 3 has an invalid length. [ 267.556744][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'. [ 269.035828][ T5812] usb 1-1: device descriptor read/8, error -71 [ 269.184655][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.639358][ T9] usb 3-1: device descriptor read/8, error -71 [ 270.775778][ T9] usb usb3-port1: unable to enumerate USB device [ 270.795476][ T8743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.295594][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 274.184499][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 274.994551][ T5813] usb 4-1: device descriptor read/64, error -71 [ 275.274540][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 275.328631][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.345521][ T5812] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 275.434508][ T5813] usb 4-1: device descriptor read/64, error -71 [ 275.524640][ T5812] usb 3-1: device descriptor read/64, error -71 [ 275.566158][ T5813] usb usb4-port1: attempt power cycle [ 275.794535][ T5812] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 275.944522][ T5812] usb 3-1: device descriptor read/64, error -71 [ 275.975088][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 276.036726][ T5813] usb 4-1: device descriptor read/8, error -71 [ 276.344155][ T5813] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 276.399542][ T5813] usb 4-1: device descriptor read/8, error -71 [ 276.547616][ T5813] usb usb4-port1: unable to enumerate USB device [ 276.864737][ T5812] usb usb3-port1: attempt power cycle [ 276.942478][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 277.274690][ T5812] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 277.328381][ T5812] usb 3-1: device descriptor read/8, error -71 [ 277.634891][ T5812] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 277.707694][ T5812] usb 3-1: device descriptor read/8, error -71 [ 277.862506][ T5812] usb usb3-port1: unable to enumerate USB device [ 278.074575][ T177] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.288118][ T8802] syzkaller0: entered promiscuous mode [ 278.308021][ T8802] syzkaller0: entered allmulticast mode [ 279.328392][ T8814] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 279.903333][ T177] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 280.096751][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 280.184659][ T177] usb 2-1: device descriptor read/64, error -71 [ 280.376714][ T5812] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.454795][ T177] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 280.634483][ T5812] usb 1-1: device descriptor read/64, error -71 [ 280.664643][ T177] usb 2-1: device descriptor read/64, error -71 [ 280.797190][ T177] usb usb2-port1: attempt power cycle [ 280.914575][ T5812] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 281.074533][ T5812] usb 1-1: device descriptor read/64, error -71 [ 281.224706][ T177] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 281.275020][ T5812] usb usb1-port1: attempt power cycle [ 282.637577][ T177] usb 2-1: device descriptor read/8, error -71 [ 282.797669][ T8834] netlink: 'syz.1.843': attribute type 3 has an invalid length. [ 282.811219][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.843'. [ 282.944677][ T5812] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 283.654974][ T8838] syzkaller0: entered promiscuous mode [ 283.665459][ T8838] syzkaller0: entered allmulticast mode [ 283.671522][ T5812] usb 1-1: device descriptor read/8, error -71 [ 285.091380][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 285.218826][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 285.283670][ T8859] 8021q: adding VLAN 0 to HW filter on device bond11 [ 285.308263][ T8866] bond10: (slave team0): Releasing backup interface [ 285.380854][ T8866] team0: left promiscuous mode [ 285.443604][ T8866] team_slave_0: left promiscuous mode [ 285.464704][ T8866] team_slave_1: left promiscuous mode [ 285.491020][ T8866] team0: left allmulticast mode [ 285.504591][ T5774] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 285.519515][ T8866] team_slave_0: left allmulticast mode [ 285.560316][ T8866] team_slave_1: left allmulticast mode [ 285.635103][ T8866] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.723846][ T8866] bond11: (slave team0): Enslaving as an active interface with an up link [ 285.802210][ T8859] bond11: entered promiscuous mode [ 285.864848][ T8859] team0: entered promiscuous mode [ 285.909161][ T8859] team_slave_0: entered promiscuous mode [ 285.950349][ T8859] team_slave_1: entered promiscuous mode [ 285.982546][ T8859] bond11: entered allmulticast mode [ 286.060875][ T8859] team0: entered allmulticast mode [ 286.160745][ T8859] team_slave_0: entered allmulticast mode [ 286.177672][ T8859] team_slave_1: entered allmulticast mode [ 286.294562][ T5774] usb 3-1: device descriptor read/64, error -71 [ 286.356848][ T8876] netlink: 'syz.1.855': attribute type 3 has an invalid length. [ 286.369567][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.855'. [ 287.204638][ T8880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.857'. [ 287.274788][ T5774] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 287.521223][ T5774] usb 3-1: device descriptor read/64, error -71 [ 287.727764][ T5774] usb usb3-port1: attempt power cycle [ 288.554506][ T5774] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 288.570730][ T8890] syzkaller0: entered promiscuous mode [ 288.576784][ T8890] syzkaller0: entered allmulticast mode [ 288.633729][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 288.784501][ T5774] usb 3-1: device not accepting address 20, error -71 [ 289.661139][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 289.706441][ T8900] 8021q: adding VLAN 0 to HW filter on device bond12 [ 289.741780][ T8900] bond11: (slave team0): Releasing backup interface [ 289.754851][ T8900] team0: left promiscuous mode [ 289.759760][ T8900] team_slave_0: left promiscuous mode [ 289.770473][ T8900] team_slave_1: left promiscuous mode [ 289.777026][ T8900] team0: left allmulticast mode [ 289.782053][ T8900] team_slave_0: left allmulticast mode [ 289.795135][ T8900] team_slave_1: left allmulticast mode [ 289.819866][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.861030][ T8900] bond12: (slave team0): Enslaving as an active interface with an up link [ 289.888743][ T8906] bond12: entered promiscuous mode [ 289.912746][ T8911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 289.929144][ T8906] team0: entered promiscuous mode [ 289.981646][ T8906] team_slave_0: entered promiscuous mode [ 290.042745][ T8906] team_slave_1: entered promiscuous mode [ 290.073535][ T8906] bond12: entered allmulticast mode [ 290.092818][ T8906] team0: entered allmulticast mode [ 290.113641][ T8906] team_slave_0: entered allmulticast mode [ 290.155836][ T8906] team_slave_1: entered allmulticast mode [ 290.220722][ T8910] netlink: 'syz.2.866': attribute type 3 has an invalid length. [ 290.731388][ T8913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.867'. [ 290.863084][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 291.064905][ T5774] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 291.860980][ T8922] Config c/1 of g1 needs at least one function. [ 291.868851][ T8922] udc dummy_udc.0: failed to start g1: -22 [ 291.877644][ T8922] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 291.973457][ T8922] UDC core: g1: couldn't find an available UDC or it's busy [ 291.994669][ T5774] usb 4-1: device descriptor read/64, error -71 [ 292.974558][ T5774] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 293.040829][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'. [ 293.164940][ T5774] usb 4-1: device descriptor read/64, error -71 [ 293.289725][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 293.303278][ T8938] 8021q: adding VLAN 0 to HW filter on device bond11 [ 293.454869][ T8945] netlink: 'syz.0.877': attribute type 3 has an invalid length. [ 293.612910][ T8946] bond10: (slave team0): Releasing backup interface [ 293.674682][ T8946] team0: left promiscuous mode [ 293.709560][ T8946] team_slave_0: left promiscuous mode [ 293.750584][ T8946] team_slave_1: left promiscuous mode [ 293.956071][ T8946] team0: left allmulticast mode [ 294.006898][ T8946] team_slave_0: left allmulticast mode [ 294.014978][ T8946] team_slave_1: left allmulticast mode [ 294.028908][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.038816][ T8946] bond11: (slave team0): Enslaving as an active interface with an up link [ 294.067419][ T8948] bond11: entered promiscuous mode [ 294.095525][ T5774] usb usb4-port1: attempt power cycle [ 294.104576][ T8948] team0: entered promiscuous mode [ 294.109662][ T8948] team_slave_0: entered promiscuous mode [ 294.253513][ T8948] team_slave_1: entered promiscuous mode [ 294.264898][ T8948] bond11: entered allmulticast mode [ 294.270334][ T8948] team0: entered allmulticast mode [ 294.275924][ T8948] team_slave_0: entered allmulticast mode [ 294.281906][ T8948] team_slave_1: entered allmulticast mode [ 295.197653][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 295.349110][ T8960] netlink: 68 bytes leftover after parsing attributes in process `syz.2.881'. [ 296.140561][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 297.185161][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 297.364502][ T5813] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 297.545066][ T5813] usb 4-1: no configurations [ 297.549700][ T5813] usb 4-1: can't read configurations, error -22 [ 297.890181][ T8978] 8021q: adding VLAN 0 to HW filter on device bond13 [ 297.930211][ T8983] bond12: (slave team0): Releasing backup interface [ 297.947454][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 297.986785][ T8983] team0: left promiscuous mode [ 297.992302][ T8983] team_slave_0: left promiscuous mode [ 297.998601][ T8983] team_slave_1: left promiscuous mode [ 298.047919][ T8983] team0: left allmulticast mode [ 298.079807][ T8983] team_slave_0: left allmulticast mode [ 298.105307][ T8983] team_slave_1: left allmulticast mode [ 298.215869][ T5813] usb 4-1: no configurations [ 298.249295][ T5813] usb 4-1: can't read configurations, error -22 [ 298.536930][ T8996] Config c/1 of g1 needs at least one function. [ 298.598143][ T5813] usb usb4-port1: attempt power cycle [ 298.652798][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.671802][ T8996] udc dummy_udc.0: failed to start g1: -22 [ 298.691280][ T8996] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 298.702090][ T8996] UDC core: g1: couldn't find an available UDC or it's busy [ 298.764018][ T8983] bond13: (slave team0): Enslaving as an active interface with an up link [ 298.839346][ T8991] bond13: entered promiscuous mode [ 298.847437][ T177] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 298.882969][ T8991] team0: entered promiscuous mode [ 298.888304][ T8991] team_slave_0: entered promiscuous mode [ 298.899015][ T8991] team_slave_1: entered promiscuous mode [ 298.905303][ T8991] bond13: entered allmulticast mode [ 298.910634][ T8991] team0: entered allmulticast mode [ 298.916100][ T8991] team_slave_0: entered allmulticast mode [ 298.921989][ T8991] team_slave_1: entered allmulticast mode [ 299.094972][ T5813] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.148272][ T5813] usb 4-1: no configurations [ 299.221471][ T5813] usb 4-1: can't read configurations, error -22 [ 300.270148][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 300.284549][ T5813] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 300.534604][ T5813] usb 4-1: device not accepting address 13, error -71 [ 300.545019][ T5813] usb usb4-port1: unable to enumerate USB device [ 303.299762][ T5813] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 304.364135][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 304.693330][ T9040] 8021q: adding VLAN 0 to HW filter on device bond12 [ 304.783762][ T9048] bond11: (slave team0): Releasing backup interface [ 304.840084][ T9048] team0: left promiscuous mode [ 304.852246][ T9048] team_slave_0: left promiscuous mode [ 304.894955][ T9048] team_slave_1: left promiscuous mode [ 304.922167][ T9048] team0: left allmulticast mode [ 304.947567][ T9048] team_slave_0: left allmulticast mode [ 304.953102][ T9048] team_slave_1: left allmulticast mode [ 305.005838][ T9048] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.028352][ T9048] bond12: (slave team0): Enslaving as an active interface with an up link [ 305.144625][ T9051] bond12: entered promiscuous mode [ 305.149809][ T9051] team0: entered promiscuous mode [ 305.173052][ T9051] team_slave_0: entered promiscuous mode [ 305.207549][ T9051] team_slave_1: entered promiscuous mode [ 305.232619][ T9054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.907'. [ 305.248061][ T9051] bond12: entered allmulticast mode [ 305.287103][ T9051] team0: entered allmulticast mode [ 305.313654][ T9051] team_slave_0: entered allmulticast mode [ 305.327700][ T9051] team_slave_1: entered allmulticast mode [ 305.534872][ T177] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 306.405271][ T177] usb 3-1: no configurations [ 306.418469][ T177] usb 3-1: can't read configurations, error -22 [ 306.574523][ T177] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 307.505949][ T177] usb 3-1: no configurations [ 307.510713][ T177] usb 3-1: can't read configurations, error -22 [ 307.517526][ T177] usb usb3-port1: attempt power cycle [ 307.552878][ T9084] netlink: 68 bytes leftover after parsing attributes in process `syz.3.917'. [ 307.679054][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 307.702993][ T9088] 8021q: adding VLAN 0 to HW filter on device bond13 [ 307.723938][ T9088] bond12: (slave team0): Releasing backup interface [ 307.731417][ T9088] team0: left promiscuous mode [ 307.736383][ T9088] team_slave_0: left promiscuous mode [ 307.742096][ T9088] team_slave_1: left promiscuous mode [ 307.748214][ T9088] team0: left allmulticast mode [ 307.753890][ T9088] team_slave_0: left allmulticast mode [ 307.760634][ T9088] team_slave_1: left allmulticast mode [ 307.767898][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.777225][ T9088] bond13: (slave team0): Enslaving as an active interface with an up link [ 307.788474][ T9093] bond13: entered promiscuous mode [ 307.793626][ T9093] team0: entered promiscuous mode [ 307.798858][ T9093] team_slave_0: entered promiscuous mode [ 307.804838][ T9093] team_slave_1: entered promiscuous mode [ 307.810824][ T9093] bond13: entered allmulticast mode [ 307.816103][ T9093] team0: entered allmulticast mode [ 307.821329][ T9093] team_slave_0: entered allmulticast mode [ 307.827326][ T9093] team_slave_1: entered allmulticast mode [ 307.924784][ T177] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 307.961441][ T177] usb 3-1: no configurations [ 307.983608][ T177] usb 3-1: can't read configurations, error -22 [ 308.176270][ T177] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 308.242730][ T177] usb 3-1: no configurations [ 308.275307][ T177] usb 3-1: can't read configurations, error -22 [ 308.339272][ T177] usb usb3-port1: unable to enumerate USB device [ 309.949487][ T9106] tipc: Started in network mode [ 309.964509][ T9106] tipc: Node identity b2596fa55ca3, cluster identity 4711 [ 309.973154][ T9106] tipc: Enabled bearer , priority 0 [ 309.981912][ T9106] syzkaller0: entered promiscuous mode [ 309.987583][ T9106] syzkaller0: entered allmulticast mode [ 310.006958][ T9106] tipc: Resetting bearer [ 310.033223][ T9105] tipc: Resetting bearer [ 310.112508][ T9105] tipc: Disabling bearer [ 310.160453][ T9114] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 314.426137][ T5812] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 315.369964][ T9150] tipc: Enabled bearer , priority 0 [ 315.390165][ T9150] syzkaller0: entered promiscuous mode [ 315.398340][ T9150] syzkaller0: entered allmulticast mode [ 315.417303][ T9150] tipc: Resetting bearer [ 315.436182][ T9149] tipc: Resetting bearer [ 315.486562][ T9149] tipc: Disabling bearer [ 316.372779][ T9158] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 317.283059][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355814][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 317.372875][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.110297][ T5813] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 318.437798][ T9182] tipc: Enabled bearer , priority 0 [ 318.446088][ T9182] syzkaller0: entered promiscuous mode [ 318.451602][ T9182] syzkaller0: entered allmulticast mode [ 318.465187][ T9182] tipc: Resetting bearer [ 318.478250][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.489231][ T9181] tipc: Resetting bearer [ 318.507120][ T5813] usb 2-1: config 0 has no interfaces? [ 318.515686][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 318.525195][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 318.553951][ T9181] tipc: Disabling bearer [ 318.562634][ T5813] usb 2-1: Product: syz [ 318.567313][ T5813] usb 2-1: Manufacturer: syz [ 318.582493][ T5813] usb 2-1: config 0 descriptor?? [ 318.987173][ T5813] usb 2-1: USB disconnect, device number 10 [ 319.682471][ T9195] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 320.754469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 321.103411][ T5813] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 321.390863][ T9212] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 321.414577][ T5838] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 321.564755][ T9212] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 321.572691][ T9212] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 321.723534][ T9216] netlink: 'syz.2.962': attribute type 3 has an invalid length. [ 321.739790][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.962'. [ 321.775610][ T5838] usb 1-1: Dual-Role OTG device on HNP port [ 323.337521][ T5838] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 324.870311][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.888397][ T5838] gspca_main: spca501-2.14.0 probing 0000:0000 [ 324.895356][ T5838] gspca_spca501: reg write: error -32 [ 324.900952][ T5838] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 325.001579][ T5838] spca501: probe of 1-1:1.0 failed with error -22 [ 325.017923][ C1] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 325.029706][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 325.038149][ C1] CPU: 1 PID: 5838 Comm: kworker/1:8 Not tainted syzkaller #0 [ 325.045625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.055693][ C1] Workqueue: usb_hub_wq hub_event [ 325.060749][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 325.066394][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 325.086008][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 325.092103][ C1] RAX: 00000000000000e6 RBX: ffff8880523cc120 RCX: ffff888023de5a00 [ 325.100087][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 325.108050][ C1] RBP: ffff8880523cc100 R08: 0000000000000000 R09: 00000000eed9a316 [ 325.116008][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff8880523cc730 [ 325.123963][ C1] R13: dffffc0000000000 R14: ffff8880523cc128 R15: 0000000000000730 [ 325.131937][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 325.140853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.147420][ C1] CR2: 00007f9a82bed2f8 CR3: 000000003004e000 CR4: 00000000003506e0 [ 325.155380][ C1] Call Trace: [ 325.158645][ C1] [ 325.161478][ C1] f_midi2_set_alt+0x100/0x800 [ 325.166236][ C1] composite_setup+0x1ffe/0x33a0 [ 325.171165][ C1] configfs_composite_setup+0xc7/0x100 [ 325.176608][ C1] dummy_timer+0x1309/0x3420 [ 325.181186][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 325.186193][ C1] ? lock_chain_count+0x20/0x20 [ 325.191032][ C1] ? dummy_free_streams+0x520/0x520 [ 325.196255][ C1] ? dummy_free_streams+0x520/0x520 [ 325.201437][ C1] __hrtimer_run_queues+0x525/0xc10 [ 325.206636][ C1] ? hrtimer_interrupt+0x980/0x980 [ 325.211729][ C1] ? read_tsc+0x9/0x20 [ 325.215782][ C1] hrtimer_run_softirq+0x177/0x290 [ 325.220877][ C1] handle_softirqs+0x27d/0x820 [ 325.225621][ C1] ? read_tsc+0x9/0x20 [ 325.229669][ C1] ? ktime_get+0x24b/0x280 [ 325.234069][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 325.238814][ C1] ? do_softirq+0x1a0/0x1a0 [ 325.243299][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 325.248485][ C1] __irq_exit_rcu+0xd3/0x190 [ 325.253061][ C1] ? irq_exit_rcu+0x20/0x20 [ 325.257547][ C1] irq_exit_rcu+0x9/0x20 [ 325.261773][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 325.267393][ C1] [ 325.270307][ C1] [ 325.273226][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.279191][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 325.285713][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 325.305309][ C1] RSP: 0018:ffffc900048a6880 EFLAGS: 00000206 [ 325.311368][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 653676af5ac53b00 [ 325.319348][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 325.327316][ C1] RBP: ffffc900048a6910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 325.335305][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 325.343263][ C1] R13: dffffc0000000000 R14: ffff888023c5c000 R15: 1ffff92000914d10 [ 325.351229][ C1] ? _raw_spin_unlock+0x40/0x40 [ 325.356097][ C1] ? kobject_get+0xcc/0x120 [ 325.360605][ C1] dummy_urb_enqueue+0x587/0x780 [ 325.365535][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 325.370635][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 325.376185][ C1] usb_start_wait_urb+0x140/0x580 [ 325.381196][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 325.386991][ C1] usb_control_msg+0x235/0x3e0 [ 325.391769][ C1] usb_set_interface+0x51f/0x13f0 [ 325.396785][ C1] snd_usb_midi_v2_create+0x62f/0x48a0 [ 325.402230][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 325.407852][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 325.413057][ C1] ? validate_midi_out_jack+0xb0/0xb0 [ 325.418428][ C1] ? usb_match_id+0x63/0x1e0 [ 325.423034][ C1] ? usb_ifnum_to_if+0x262/0x2e0 [ 325.427965][ C1] snd_usb_create_stream+0x262/0x5d0 [ 325.433247][ C1] usb_audio_probe+0xead/0x1f00 [ 325.438088][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 325.443101][ C1] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 325.448374][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 325.454261][ C1] usb_probe_interface+0x5c2/0xaf0 [ 325.459379][ C1] ? usb_register_driver+0x3c0/0x3c0 [ 325.464661][ C1] really_probe+0x247/0xae0 [ 325.469172][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 325.474382][ C1] __driver_probe_device+0x1f5/0x390 [ 325.479672][ C1] driver_probe_device+0x4f/0x420 [ 325.484714][ C1] __device_attach_driver+0x2ca/0x510 [ 325.490080][ C1] bus_for_each_drv+0x252/0x2e0 [ 325.494918][ C1] ? coredump_store+0x90/0x90 [ 325.499581][ C1] ? bus_find_device+0x300/0x300 [ 325.504505][ C1] __device_attach+0x2c1/0x420 [ 325.509259][ C1] ? device_attach+0x20/0x20 [ 325.513835][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 325.519022][ C1] bus_probe_device+0x180/0x260 [ 325.523857][ C1] device_add+0x87c/0xc40 [ 325.528174][ C1] usb_set_configuration+0x1ad0/0x2150 [ 325.533636][ C1] usb_generic_driver_probe+0x8d/0x150 [ 325.539103][ C1] usb_probe_device+0x12a/0x260 [ 325.543943][ C1] ? usb_register_device_driver+0x230/0x230 [ 325.549823][ C1] really_probe+0x247/0xae0 [ 325.554313][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 325.559498][ C1] __driver_probe_device+0x1f5/0x390 [ 325.564774][ C1] driver_probe_device+0x4f/0x420 [ 325.569788][ C1] __device_attach_driver+0x2ca/0x510 [ 325.575159][ C1] bus_for_each_drv+0x252/0x2e0 [ 325.580002][ C1] ? coredump_store+0x90/0x90 [ 325.584694][ C1] ? bus_find_device+0x300/0x300 [ 325.589622][ C1] __device_attach+0x2c1/0x420 [ 325.594375][ C1] ? device_attach+0x20/0x20 [ 325.598967][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 325.603981][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 325.609226][ C1] bus_probe_device+0x180/0x260 [ 325.614080][ C1] device_add+0x87c/0xc40 [ 325.618462][ C1] usb_new_device+0x995/0x1550 [ 325.623217][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 325.628071][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.633275][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 325.638464][ C1] hub_event+0x29d5/0x4a80 [ 325.642875][ C1] ? hub_post_resume+0x120/0x120 [ 325.647799][ C1] ? read_lock_is_recursive+0x20/0x20 [ 325.653204][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.658391][ C1] ? process_scheduled_works+0x975/0x1600 [ 325.664099][ C1] ? process_scheduled_works+0x975/0x1600 [ 325.669828][ C1] process_scheduled_works+0xa60/0x1600 [ 325.675369][ C1] ? worker_attach_to_pool+0x370/0x370 [ 325.680815][ C1] ? assign_work+0x3cc/0x5d0 [ 325.685392][ C1] worker_thread+0xa5e/0xfe0 [ 325.689987][ C1] ? _raw_spin_unlock+0x40/0x40 [ 325.694841][ C1] ? __kthread_parkme+0x71/0x1c0 [ 325.699773][ C1] kthread+0x2fa/0x390 [ 325.703826][ C1] ? pr_cont_work+0x550/0x550 [ 325.708490][ C1] ? kthread_blkcg+0xd0/0xd0 [ 325.713062][ C1] ret_from_fork+0x48/0x80 [ 325.717466][ C1] ? kthread_blkcg+0xd0/0xd0 [ 325.722069][ C1] ret_from_fork_asm+0x11/0x20 [ 325.726839][ C1] [ 325.729873][ C1] Modules linked in: [ 325.733758][ C1] ---[ end trace 0000000000000000 ]--- [ 325.739196][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 325.744836][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 325.764432][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 325.770484][ C1] RAX: 00000000000000e6 RBX: ffff8880523cc120 RCX: ffff888023de5a00 [ 325.778445][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 325.786404][ C1] RBP: ffff8880523cc100 R08: 0000000000000000 R09: 00000000eed9a316 [ 325.794357][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff8880523cc730 [ 325.802341][ C1] R13: dffffc0000000000 R14: ffff8880523cc128 R15: 0000000000000730 [ 325.810298][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 325.819235][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.825844][ C1] CR2: 00007f9a82bed2f8 CR3: 000000003004e000 CR4: 00000000003506e0 [ 325.833803][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 325.841251][ C1] Kernel Offset: disabled [ 325.845595][ C1] Rebooting in 86400 seconds..