last executing test programs: 10.68597994s ago: executing program 0 (id=5455): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x7, 0x5000, 0x2000, &(0x7f00009f2000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) clock_gettime(0x5, &(0x7f0000000000)) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_op={0x1, 0x1e}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000740)={0xf000, 0x118000}) 9.689211157s ago: executing program 0 (id=5459): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019080)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f00000190c0)='./file0\x00', &(0x7f0000019100), 0x1000000, &(0x7f0000019140)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f0000019180)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000191c0)={[{@noswap}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]}) connect$unix(r0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019300)=@bpf_lsm={0x6, 0x8002, &(0x7f00000193c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000019400)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 9.025896236s ago: executing program 2 (id=5469): syz_emit_vhci(0x0, 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$BSG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f000000c340)={0xa803100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0xffffffc5, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x3, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0xe, {0x5, 0x3}, 0x8, 0x5}}}) 6.920258148s ago: executing program 0 (id=5463): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000500)={0x7, "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"}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, 0x0, 0x0) connect$802154_dgram(r2, &(0x7f0000001480)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000180)) 5.412761333s ago: executing program 2 (id=5465): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000600)={{@my=0x1, 0x2}, @my=0x1, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0x80000000}) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') close(r0) 5.382139852s ago: executing program 3 (id=5466): r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x8000, "8712c0a3833598f85991b897c0065fdb2f9d38dba565e353ee57fceeca13e8e1", 0xffffffffffffffff}) sendfile(r1, r2, &(0x7f0000000140)=0x80000001, 0xfffffffa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100000100001400128009000100626f6e64000000000400028008000300", @ANYRES32=r5], 0x3c}}, 0x24000840) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x30000001}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) 5.05805911s ago: executing program 0 (id=5467): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x2, '\x00', '\x00', '\x00', 0xffdfffff, 0x1ff, 0xfffffffd, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x59) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) open_by_handle_at(r6, 0x0, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000940)=0x8) 5.057033496s ago: executing program 3 (id=5468): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x2, '\x00', '\x00', '\x00', 0xffdfffff, 0x1ff, 0xfffffffd, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x59) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) open_by_handle_at(r6, 0x0, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000940)=0x8) 4.770503848s ago: executing program 1 (id=5470): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) getpgid(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x6, 0xa2, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x1, 0x1, 0x28, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xe, [@midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x3, 0x4, [{0xff, 0x1}, {0x9, 0x6}, {0xd3, 0x3}, {0x1, 0x4}], 0xdc}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x79ed, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0x40, 0x10}, {0x2, 0x7}, {0x5, 0x1}, {0xf, 0x1}]}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x2, 0x8, 0xff, {0x13, 0x25, 0x1, 0xf, "cffe55852e07ddc35eb3ed095717d6"}}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xf7, 0x7, 0xf, {0xd, 0x25, 0x1, 0x9, "e09b37d206e5cc0378"}}}, {{0x9, 0x5, 0x5, 0x4, 0x438, 0x0, 0xca, 0x9, {0x11, 0x25, 0x1, 0xd, "335e3d872edb9db13d21e491af"}}}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc9, 0xd, 0xd, 0x20, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x525b}}, {0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "d3a166b033d2984a2100dd580a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282ef7d0f131fcb5}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "036b7cd2094ea514d830bb3b14f5691df686ba4f78e9f3bec73de807c03f7531370e84e8348b388cf2058422c574edba6828ac6a4b5c8185a1910cd717ef47e42c324996d137239eb90983378075cb21c71e0edaceae4ee0ae5aba94d8aa71a278d42b72b046a43114c551f076bf1010c655db55d89d3a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_connect$midi(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 4.550331559s ago: executing program 2 (id=5471): io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000400)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000200025a729bd7000fcdbdf250a000000fe0000010200010008000600fe7f00008682636150c0b11afb75bc5b20385df7b50a3556dbe017ed0457ed4d07000000b4"], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008000100000101000800040001"], 0x2c}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000806b8bbbbbbbbbbaaaaaaaaaa2986dd6d002008001011ff20010000000000000000000000000000ff0200000000000000000000000000014f0000000000001000080001167bb59e9e92fc0720e3d80f8e29658b2456ebe8c3de4de52c62b013ec4378a90a92cf8e51ab7a70ec2e5832ef36183f6ccd14186242daaa6708f31c6a173f3304760d302495eda839e43ccf2e25dd54525d28d8a7ff5e7b6ab2572070e0977169db33be9b65488d08fadedb9ff5297fd7505d92e2c4444eaa3b1d063c03ed4d1f8c1f5560ceab500d4dcb16c4e0a959afb056770a21c4e44f870b794617759acf88717ab898837a6485c722b3cef58ac56659f430fe629180cd0448c86349803d0b9d353a3ebab39d80"], 0x4a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x90, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) socket$igmp(0x2, 0x3, 0x2) 4.113879984s ago: executing program 3 (id=5472): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) clock_gettime(0x0, 0x0) clock_settime(0x4, &(0x7f00000003c0)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000540), 0x1, 0x2) pread64(r0, &(0x7f0000000440)=""/75, 0x4b, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000004c0)=0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000005c0)=""/131, 0x83) set_mempolicy(0x8006, &(0x7f00000000c0)=0xfff, 0x5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000500)=0x22, 0x46) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c86550fcc783c67ba00000000000000020000000000ff03000000002c1be6222efeb757b72443b6406eaaf5d26fa51eedd89d663683190d8a7e052cf2bf539c56ccf7774ad3a368e1fbad309c7effb3177affe44e06aa8e451e4af25ff9f77641d2a9920139e8c9ac334f1c690918a69ff0e3e022666e038c09b917e8d1be7f"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c0000000906010200000000000000000100000524000880100007800c001b400000000000000101100007800900120073797a31000000000500010007000000380008800c00078008001c40ff10fffa0c00078008001c4000000030100007800c00194000000000000008000c00078008000a40000007e014000880100007800900130073797a3200000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.027139198s ago: executing program 3 (id=5473): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1, 0x0, r5}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, 0x0) 4.022500308s ago: executing program 0 (id=5481): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x2, '\x00', '\x00', '\x00', 0xffdfffff, 0x1ff, 0xfffffffd, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x59) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) open_by_handle_at(r6, 0x0, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000940)=0x8) 3.119704612s ago: executing program 2 (id=5474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3ce2", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) syz_clone(0x84100000, &(0x7f0000000fc0)="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", 0xfff, &(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)="c59f502fcfb9b286fcb949d98d6c771752adba8f5e4caffc9bc73fc363e76f12daea7dde55970905e22bfe3faad8484431bc8e0272f5c7005d240d7e847ad601c08474c771a865dcdb14e1e3a107552070b58b269a5ad4eb75efae0bf4d2621ef8626e75e8c693b8bfa07aeebaa942179d4f9360b92586f962ccb894c984a0432ccec5328770e3c3691484b4f47d5e09986593cdd4334e1cbb5c7d691edc1256a79ab098afe944bbb23b089f61b3d2d2fd84e5a099e4b959ae037e44f5006c") r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000280)=@bridge_getvlan={0x20, 0x72, 0x301, 0x100000, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) shutdown(r0, 0x1) 2.566769405s ago: executing program 3 (id=5475): syz_emit_vhci(0x0, 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$BSG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f000000c340)={0xa803100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0xffffffc5, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x3, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0xe, {0x5, 0x3}, 0x8, 0x5}}}) 2.402563044s ago: executing program 0 (id=5476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x20000044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000000740)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x1004, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000019780), 0x42, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000197c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x3401) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x0, 0x1}, 0x5fffe, 0x0, &(0x7f0000000140)={0x20, 0x3, 0xfffe, 0xfffe}, 0x8, 0x10000, 0xffefffc0, 0x0, 0x5, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x0, &(0x7f00000002c0)={[{}]}) 2.373070654s ago: executing program 1 (id=5477): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, 0x0, 0x22000054) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pidfd(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) mq_open(&(0x7f00000044c0)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2DvF\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b\x95\xcdq\xcc\xe6\x91X\xd6\xcc\xea$\xfd\xc4\n\x01&\x8d\xd2\x02\x83\x18(+\'4xq\xfebM\x84\x16+4\xc6Wf\xba\xb9\xaf\xac\xfe\x99\x95\x97[\x9bb\xd2\xfdr\x84&\x94\x7fcV\xa8m\\\x9bP\xfbFf\x0f \xd8R\xc9X+N\x9d\xbfx\xd0EZY\xea\\\xc1\x86{?jm\xec\x1b\x16\x83\xdeR~\x92\x8cg(@\xb3\xb2\x97\xdf\x1b\x9b\xcdtJw~\x99jd(\x034\xaa\x967\xd6OW# \xc3\xbf\xf2z\xf4\x8f\x91\xe3', 0x40, 0x80, 0x0) connect$inet(r2, &(0x7f00000045c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004600), 0x4000095, 0xfffe) add_key(&(0x7f0000004640)='pkcs7_test\x00', 0x0, &(0x7f0000004680)="100c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) 1.929716257s ago: executing program 2 (id=5478): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x2, '\x00', '\x00', '\x00', 0xffdfffff, 0x1ff, 0xfffffffd, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x59) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) open_by_handle_at(r6, 0x0, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000940)=0x8) 1.573494978s ago: executing program 1 (id=5479): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000600)={{@my=0x1, 0x2}, @my=0x1, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0x80000000}) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') close(r0) 875.543974ms ago: executing program 2 (id=5480): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x2, 0x9, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @local, {[@end, @end]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000008380)=@acquire={0x14c, 0x17, 0x0, 0x70bd2c, 0x25dfdbff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in=@broadcast, {@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0xbc4d, 0x4e20, 0x0, 0x2}, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x120, 0xa0, 0x3a}, {0xffffffffffffff7f, 0x7, 0x7fd7, 0x3, 0x7, 0x8000, 0x143, 0x2}, {0x5f0, 0x2, 0x6, 0x5}, 0x9, 0x6e6bbd, 0x2, 0x1, 0x2}, 0x40, 0x2, 0x4, 0x70bd25}, [@iptfs_pkt_size={0x8, 0x29, 0x59f}, @sa_dir={0x5, 0x21, 0x2}, @tfcpad={0x8, 0x16, 0x1}, @iptfs_pkt_size={0x8}, @iptfs_max_qsize={0x8, 0x28, 0x6}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_rdma(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x4060, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8063f90e041b6c1d68c036918033f210aba1baa733be085"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) 490.171043ms ago: executing program 1 (id=5482): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x2275, &(0x7f0000000340)={0x22, 0x5, 0x48, 0x7}) 201.804134ms ago: executing program 3 (id=5483): r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x8000, "8712c0a3833598f85991b897c0065fdb2f9d38dba565e353ee57fceeca13e8e1", 0xffffffffffffffff}) sendfile(r1, r2, &(0x7f0000000140)=0x80000001, 0xfffffffa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100000100001400128009000100626f6e64000000000400028008000300", @ANYRES32=r5], 0x3c}}, 0x24000840) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x30000001}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r8, 0x2275, &(0x7f0000000340)={0x22, 0x5, 0x48, 0x7}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 70.40031ms ago: executing program 1 (id=5484): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x8000, "8712c0a3833598f85991b897c0065fdb2f9d38dba565e353ee57fceeca13e8e1", 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000140)=0x80000001, 0xfffffffa) 0s ago: executing program 1 (id=5485): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x2, 0x0, 0xb7, 0xfffffefe, 0xffffff7e}}, 0xe4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) kernel console output (not intermixed with test programs): ll Trace: [ 1729.979088][T26759] [ 1729.979093][T26759] dump_stack_lvl+0x100/0x190 [ 1729.979114][T26759] sysfs_warn_dup.cold+0x1c/0x28 [ 1729.979132][T26759] sysfs_create_dir_ns+0x24b/0x2b0 [ 1729.979152][T26759] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1729.979166][T26759] ? find_held_lock+0x2b/0x80 [ 1729.979180][T26759] ? kobject_add_internal+0x25f/0x930 [ 1729.979192][T26759] ? kobject_add_internal+0x25f/0x930 [ 1729.979205][T26759] ? class_dir_child_ns_type+0xd/0x60 [ 1729.979218][T26759] kobject_add_internal+0x2c8/0x930 [ 1729.979232][T26759] kobject_add+0x16a/0x1e0 [ 1729.979242][T26759] ? __pfx_kobject_add+0x10/0x10 [ 1729.979254][T26759] ? get_device_parent+0x1b3/0x4c0 [ 1729.979271][T26759] ? kobject_put+0xb9/0x640 [ 1729.979285][T26759] device_add+0x294/0x1970 [ 1729.979296][T26759] ? lockdep_init_map_type+0x5c/0x250 [ 1729.979309][T26759] ? __pfx_device_add+0x10/0x10 [ 1729.979320][T26759] ? lockdep_init_map_type+0x5c/0x250 [ 1729.979333][T26759] ? __init_waitqueue_head+0xca/0x150 [ 1729.979349][T26759] tty_register_device_attr+0x388/0x810 [ 1729.979364][T26759] ? lockdep_init_map_type+0x5c/0x250 [ 1729.979376][T26759] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1729.979394][T26759] ? tty_port_init+0x156/0x1c0 [ 1729.979410][T26759] gsm_activate_mux+0x155/0x2a0 [ 1729.979424][T26759] gsmld_ioctl+0xbbc/0x15c0 [ 1729.979443][T26759] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1729.979470][T26759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1729.979486][T26759] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1729.979501][T26759] tty_compat_ioctl+0x396/0x420 [ 1729.979514][T26759] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1729.979528][T26759] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1729.979547][T26759] __do_fast_syscall_32+0x14b/0x8c0 [ 1729.979564][T26759] do_fast_syscall_32+0x32/0x70 [ 1729.979578][T26759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1729.979592][T26759] RIP: 0023:0xf7fa5fbc [ 1729.979622][T26759] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1729.979634][T26759] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1729.979647][T26759] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 1729.979656][T26759] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.979663][T26759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1729.979669][T26759] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1729.979675][T26759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.979689][T26759] [ 1729.979721][T26759] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1729.981280][T26749] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 1729.996558][ T42] audit: type=1800 audit(1794417268.187:17262): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384131 res=0 errno=-22 [ 1730.009065][ T42] audit: type=1800 audit(1794417268.207:17263): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384143 res=0 errno=-22 [ 1730.030484][ T42] audit: type=1800 audit(1794417268.217:17264): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384155 res=0 errno=-22 [ 1730.040183][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5157'. [ 1730.052874][ T42] audit: type=1800 audit(1794417268.237:17265): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384167 res=0 errno=-22 [ 1730.064879][T26756] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1730.101329][ T42] audit: type=1800 audit(1794417268.297:17266): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384180 res=0 errno=-22 [ 1730.147672][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1730.166869][T26749] bond7: entered promiscuous mode [ 1730.167097][T26749] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1730.239277][ T42] audit: type=1800 audit(1794417268.437:17267): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=384192 res=0 errno=-22 [ 1730.242720][T26749] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1730.242879][T26749] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1730.243200][T26749] bond7: (slave wireguard1): Error -95 calling set_mac_address [ 1732.013944][T26781] bridge0: port 1(syz_tun) entered blocking state [ 1732.019433][T26781] bridge0: port 1(syz_tun) entered disabled state [ 1732.019566][T26781] syz_tun: entered allmulticast mode [ 1732.020810][T26781] syz_tun: entered promiscuous mode [ 1732.390209][T26792] syzkaller1: entered promiscuous mode [ 1732.390223][T26792] syzkaller1: entered allmulticast mode [ 1732.437583][T26792] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (�h\E3�~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 1732.864210][T19276] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1733.025788][T19276] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1733.026701][T19276] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1733.026724][T19276] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1733.026743][T19276] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1733.028645][T19276] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1733.028664][T19276] usb 6-1: Product: syz [ 1733.028675][T19276] usb 6-1: Manufacturer: syz [ 1733.028687][T19276] usb 6-1: SerialNumber: syz [ 1733.031144][T19276] usb 6-1: config 0 descriptor?? [ 1733.031882][T26795] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1733.041950][T19276] usb 6-1: selecting invalid altsetting 0 [ 1733.184191][T23169] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1733.214534][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1733.214560][ T1134] ata1.00: irq_stat 0x40000000 [ 1733.214578][ T1134] ata1.00: failed command: READ DMA EXT [ 1733.214589][ T1134] ata1.00: cmd 25/00:78:ce:3a:01/00:0a:00:00:00/e0 tag 30 dma 1372160 in [ 1733.214589][ T1134] res 41/04:78:ce:3a:01/00:0a:00:00:00/e0 Emask 0x1 (device error) [ 1733.214637][ T1134] ata1.00: status: { DRDY ERR } [ 1733.214649][ T1134] ata1.00: error: { ABRT } [ 1733.215493][ T1134] ata1.00: configured for UDMA/33 [ 1733.215684][ T1134] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1733.215724][ T1134] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1733.215756][ T1134] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1733.215790][ T1134] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 3a ce 00 0a 78 00 [ 1733.215814][ T1134] I/O error, dev sda, sector 80590 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1733.216071][ T1134] ata1: EH complete [ 1733.354184][T23169] usb 8-1: Using ep0 maxpacket: 16 [ 1733.357519][T23169] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1733.357545][T23169] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1733.364375][T23169] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.364390][T23169] usb 8-1: Product: syz [ 1733.364397][T23169] usb 8-1: Manufacturer: syz [ 1733.364403][T23169] usb 8-1: SerialNumber: syz [ 1733.600268][T23169] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1733.714132][T23169] usb 8-1: USB disconnect, device number 81 [ 1733.741215][T26806] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1733.818339][T26709] udevd[26709]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1734.069181][T23258] usb 6-1: USB disconnect, device number 78 [ 1734.464874][T26821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1735.050342][T26820] Invalid ELF header magic: != ELF [ 1735.869240][T26839] all (unregistering): Released all slaves [ 1736.973547][T26851] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1739.167806][T26875] overlayfs: failed to resolve './bus': -2 [ 1739.566269][T26888] overlayfs: failed to resolve './bus': -2 [ 1739.709614][T26890] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1740.078451][T26896] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1740.695944][T26900] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1740.696120][T26900] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1741.019450][ T42] kauditd_printk_skb: 255 callbacks suppressed [ 1741.019469][ T42] audit: type=1800 audit(1794417279.217:17523): pid=26911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34473 res=0 errno=-22 [ 1741.026931][ T42] audit: type=1800 audit(1794417279.227:17524): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34496 res=0 errno=-22 [ 1741.224387][T16083] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1741.400481][T16083] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1741.410544][T16083] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.410584][T16083] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.412489][T16083] usb 6-1: config 0 descriptor?? [ 1741.429865][ T42] audit: type=1800 audit(1794417279.627:17525): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=387780 res=0 errno=-22 [ 1741.447430][ T42] audit: type=1800 audit(1794417279.647:17526): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=387809 res=0 errno=-22 [ 1741.451200][ T42] audit: type=1800 audit(1794417279.647:17527): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=387787 res=0 errno=-22 [ 1741.453343][ T42] audit: type=1800 audit(1794417279.647:17528): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=387788 res=0 errno=-22 [ 1741.453515][ T42] audit: type=1800 audit(1794417279.647:17529): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=387789 res=0 errno=-22 [ 1741.694964][ T42] audit: type=1800 audit(1794417279.897:17530): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34523 res=0 errno=-22 [ 1741.702172][T16083] usbhid 6-1:0.0: can't add hid device: -71 [ 1741.702225][T16083] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1741.703617][T16083] usb 6-1: USB disconnect, device number 79 [ 1741.730860][ T42] audit: type=1800 audit(1794417279.927:17531): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34546 res=0 errno=-22 [ 1741.794891][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1741.794908][ T1134] ata1.00: irq_stat 0x40000000 [ 1741.794918][ T1134] ata1.00: failed command: READ DMA EXT [ 1741.794924][ T1134] ata1.00: cmd 25/00:00:0e:4c:01/00:0b:00:00:00/e0 tag 14 dma 1441792 in [ 1741.794924][ T1134] res 41/04:00:0e:4c:01/00:0b:00:00:00/e0 Emask 0x1 (device error) [ 1741.794951][ T1134] ata1.00: status: { DRDY ERR } [ 1741.794958][ T1134] ata1.00: error: { ABRT } [ 1741.797535][ T1134] ata1.00: configured for UDMA/33 [ 1741.797673][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1741.797702][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1741.797721][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1741.797740][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 4c 0e 00 0b 00 00 [ 1741.797752][ T1134] I/O error, dev sda, sector 85006 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1741.797880][ T1134] ata1: EH complete [ 1741.894442][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1741.894458][ T1134] ata1.00: irq_stat 0x40000000 [ 1741.894468][ T1134] ata1.00: failed command: READ DMA EXT [ 1741.894474][ T1134] ata1.00: cmd 25/00:90:46:5b:01/00:07:00:00:00/e0 tag 30 dma 991232 in [ 1741.894474][ T1134] res 41/04:90:46:5b:01/00:07:00:00:00/e0 Emask 0x1 (device error) [ 1741.894501][ T1134] ata1.00: status: { DRDY ERR } [ 1741.894508][ T1134] ata1.00: error: { ABRT } [ 1741.895174][ T1134] ata1.00: configured for UDMA/33 [ 1741.895276][ T1134] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1741.895298][ T1134] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1741.895316][ T1134] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1741.895334][ T1134] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 5b 46 00 07 90 00 [ 1741.895346][ T1134] I/O error, dev sda, sector 88902 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1741.896054][ T1134] ata1: EH complete [ 1741.914397][T23258] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1741.938965][ T42] audit: type=1800 audit(1794417280.137:17532): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=29632 res=0 errno=-22 [ 1742.008461][T26922] Invalid ELF header magic: != ELF [ 1742.074996][T23258] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1742.075020][T23258] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1742.075814][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.075837][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.075848][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.076569][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.076589][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.076599][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.077324][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.077344][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.077354][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.078073][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.078092][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.078103][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.078590][T26922] overlay: Unknown parameter '/' [ 1742.078828][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.078855][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.078865][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.082061][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.082084][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.082094][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.082825][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.082846][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.082856][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.083613][T23258] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1742.083635][T23258] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1742.083645][T23258] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.138192][T23258] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1742.138208][T23258] usb 7-1: Product: syz [ 1742.138215][T23258] usb 7-1: Manufacturer: syz [ 1742.138222][T23258] usb 7-1: SerialNumber: syz [ 1742.146488][T23258] usb 7-1: config 0 descriptor?? [ 1742.182377][T23258] yurex 7-1:0.0: Could not find endpoints [ 1742.438625][T26929] tipc: Resetting bearer [ 1742.741650][T26917] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 1742.743222][T20007] usb 7-1: USB disconnect, device number 83 [ 1743.749289][T26916] Process accounting resumed [ 1743.837920][T26941] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1744.204520][T26946] bond1: (slave lo): Releasing backup interface [ 1744.206143][T26946] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1744.260515][T26952] overlayfs: failed to resolve './bus': -2 [ 1744.311875][T26946] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1745.309548][T26967] overlayfs: failed to resolve './bus': -2 [ 1746.380512][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 1746.380532][ T42] audit: type=1800 audit(1794417284.577:17547): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389891 res=0 errno=-22 [ 1746.426512][ T42] audit: type=1800 audit(1794417284.607:17548): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389901 res=0 errno=-22 [ 1747.208914][ T42] audit: type=1800 audit(1794417285.407:17549): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34573 res=0 errno=-22 [ 1747.216592][ T42] audit: type=1800 audit(1794417285.417:17550): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34596 res=0 errno=-22 [ 1747.698109][T27005] CIFS: Attempting to mount //127.0.0.1/share [ 1748.525576][T19429] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1748.591552][T27005] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1748.591581][T27005] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1748.681167][T19429] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1748.682815][T19429] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1748.682858][T19429] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1748.692844][T19429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.692928][T19429] usb 8-1: Product: syz [ 1748.692987][T19429] usb 8-1: Manufacturer: á°‰ [ 1748.692997][T19429] usb 8-1: SerialNumber: syz [ 1748.701156][ T42] audit: type=1800 audit(1794417286.897:17551): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389928 res=0 errno=-22 [ 1748.703033][ T42] audit: type=1800 audit(1794417286.897:17552): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=389960 res=0 errno=-22 [ 1748.708414][ T42] audit: type=1800 audit(1794417286.907:17553): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=389935 res=0 errno=-22 [ 1748.709628][ T42] audit: type=1800 audit(1794417286.907:17554): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=389936 res=0 errno=-22 [ 1749.883053][T19429] cdc_ncm 8-1:1.0: bind() failure [ 1749.890493][T19429] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1749.890531][T19429] cdc_ncm 8-1:1.1: bind() failure [ 1749.893686][ T42] audit: type=1800 audit(1794417288.087:17555): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=389957 res=0 errno=-22 [ 1749.905028][ T42] audit: type=1800 audit(1794417288.107:17556): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=389958 res=0 errno=-22 [ 1749.917269][T19429] usb 8-1: USB disconnect, device number 82 [ 1750.532932][T27015] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1750.955675][T23267] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1751.107394][T23267] usb 8-1: Using ep0 maxpacket: 16 [ 1751.112337][T23267] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1751.112377][T23267] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1751.120572][T23267] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.120596][T23267] usb 8-1: Product: syz [ 1751.120608][T23267] usb 8-1: Manufacturer: syz [ 1751.120619][T23267] usb 8-1: SerialNumber: syz [ 1751.215811][T27030] syz_tun: entered allmulticast mode [ 1751.427746][ T42] kauditd_printk_skb: 110 callbacks suppressed [ 1751.427759][ T42] audit: type=1326 audit(1794417289.627:17667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.3.5222" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1751.427929][ T42] audit: type=1326 audit(1794417289.627:17668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.3.5222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1751.428063][ T42] audit: type=1326 audit(1794417289.627:17669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.3.5222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1751.928938][T23267] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1751.980117][T23267] usb 8-1: USB disconnect, device number 83 [ 1752.002153][ T42] audit: type=1800 audit(1794417290.197:17670): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=390342 res=0 errno=-19 [ 1752.053439][T27029] syz_tun: left allmulticast mode [ 1752.180107][ T42] audit: type=1800 audit(1794417290.377:17671): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=29942 res=0 errno=-22 [ 1752.180956][T27045] udevd[27045]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1752.296052][T27048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5229'. [ 1752.885538][T27060] Invalid ELF header magic: != ELF [ 1753.596869][ T42] audit: type=1800 audit(1794417291.787:17672): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=392184 res=0 errno=-22 [ 1753.634697][T27066] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1753.634741][T27066] CPU: 2 UID: 0 PID: 27066 Comm: syz.1.5232 Tainted: G L syzkaller #0 PREEMPT(full) [ 1753.634770][T27066] Tainted: [L]=SOFTLOCKUP [ 1753.634775][T27066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1753.634782][T27066] Call Trace: [ 1753.634788][T27066] [ 1753.634794][T27066] dump_stack_lvl+0x100/0x190 [ 1753.634814][T27066] sysfs_warn_dup.cold+0x1c/0x28 [ 1753.634832][T27066] sysfs_create_dir_ns+0x24b/0x2b0 [ 1753.634847][T27066] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1753.634861][T27066] ? find_held_lock+0x2b/0x80 [ 1753.634876][T27066] ? kobject_add_internal+0x25f/0x930 [ 1753.634886][T27066] ? kobject_add_internal+0x25f/0x930 [ 1753.634898][T27066] ? class_dir_child_ns_type+0xd/0x60 [ 1753.634912][T27066] kobject_add_internal+0x2c8/0x930 [ 1753.634922][T27066] ? kobject_add+0x141/0x1e0 [ 1753.634934][T27066] kobject_add+0x16a/0x1e0 [ 1753.634945][T27066] ? __pfx_kobject_add+0x10/0x10 [ 1753.634956][T27066] ? get_device_parent+0x1b3/0x4c0 [ 1753.634972][T27066] ? kobject_put+0xb9/0x640 [ 1753.634986][T27066] device_add+0x294/0x1970 [ 1753.634997][T27066] ? lockdep_init_map_type+0x5c/0x250 [ 1753.635009][T27066] ? __pfx_device_add+0x10/0x10 [ 1753.635019][T27066] ? lockdep_init_map_type+0x5c/0x250 [ 1753.635032][T27066] ? __init_waitqueue_head+0xca/0x150 [ 1753.635049][T27066] tty_register_device_attr+0x388/0x810 [ 1753.635065][T27066] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1753.635082][T27066] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1753.635099][T27066] gsm_activate_mux+0x155/0x2a0 [ 1753.635114][T27066] gsmld_ioctl+0xbbc/0x15c0 [ 1753.635137][T27066] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1753.635174][T27066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1753.635198][T27066] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1753.635220][T27066] tty_compat_ioctl+0x396/0x420 [ 1753.635241][T27066] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1753.635262][T27066] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1753.635290][T27066] __do_fast_syscall_32+0x14b/0x8c0 [ 1753.635314][T27066] do_fast_syscall_32+0x32/0x70 [ 1753.635336][T27066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1753.635357][T27066] RIP: 0023:0xf742efbc [ 1753.635371][T27066] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1753.635386][T27066] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1753.635404][T27066] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 1753.635415][T27066] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.635427][T27066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1753.635436][T27066] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1753.635445][T27066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.635468][T27066] [ 1753.635824][T27066] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1753.687933][T27066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'. [ 1753.713599][ T42] audit: type=1800 audit(1794417291.867:17673): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=392196 res=0 errno=-22 [ 1753.721090][ T42] audit: type=1800 audit(1794417291.917:17674): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=392208 res=0 errno=-22 [ 1753.798603][ T42] audit: type=1800 audit(1794417291.967:17675): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=392220 res=0 errno=-22 [ 1753.859014][ T42] audit: type=1800 audit(1794417292.057:17676): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=392232 res=0 errno=-22 [ 1754.659235][T27072] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1754.834136][T23169] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1754.994117][T23169] usb 8-1: Using ep0 maxpacket: 16 [ 1755.016380][T23169] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1755.016406][T23169] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1755.025500][T23169] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.025531][T23169] usb 8-1: Product: syz [ 1755.025538][T23169] usb 8-1: Manufacturer: syz [ 1755.025545][T23169] usb 8-1: SerialNumber: syz [ 1755.184677][T27092] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 1755.184693][T27092] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 1755.314534][T23169] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1755.387398][T23169] usb 8-1: USB disconnect, device number 84 [ 1755.537530][T27082] udevd[27082]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1756.237018][T27094] all (unregistering): Released all slaves [ 1756.746242][ T42] kauditd_printk_skb: 172 callbacks suppressed [ 1756.746255][ T42] audit: type=1326 audit(1794417294.947:17849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.746359][ T42] audit: type=1326 audit(1794417294.947:17850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.746636][ T42] audit: type=1326 audit(1794417294.947:17851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.746724][ T42] audit: type=1326 audit(1794417294.947:17852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.746816][ T42] audit: type=1326 audit(1794417294.947:17853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.747097][ T42] audit: type=1326 audit(1794417294.947:17854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.747297][ T42] audit: type=1326 audit(1794417294.947:17855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.747631][ T42] audit: type=1326 audit(1794417294.947:17856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.747733][ T42] audit: type=1326 audit(1794417294.947:17857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1756.748044][ T42] audit: type=1326 audit(1794417294.947:17858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27122 comm="syz.1.5249" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1757.024219][T23258] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1757.107195][T23267] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1757.178552][T27136] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1757.178627][T27136] CPU: 3 UID: 0 PID: 27136 Comm: syz.0.5252 Tainted: G L syzkaller #0 PREEMPT(full) [ 1757.178656][T27136] Tainted: [L]=SOFTLOCKUP [ 1757.178661][T27136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1757.178668][T27136] Call Trace: [ 1757.178673][T27136] [ 1757.178678][T27136] dump_stack_lvl+0x100/0x190 [ 1757.178698][T27136] sysfs_warn_dup.cold+0x1c/0x28 [ 1757.178717][T27136] sysfs_create_dir_ns+0x24b/0x2b0 [ 1757.178733][T27136] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1757.178748][T27136] ? find_held_lock+0x2b/0x80 [ 1757.178762][T27136] ? kobject_add_internal+0x25f/0x930 [ 1757.178775][T27136] ? kobject_add_internal+0x25f/0x930 [ 1757.178788][T27136] ? class_dir_child_ns_type+0xd/0x60 [ 1757.178801][T27136] kobject_add_internal+0x2c8/0x930 [ 1757.178814][T27136] kobject_add+0x16a/0x1e0 [ 1757.178825][T27136] ? __pfx_kobject_add+0x10/0x10 [ 1757.178840][T27136] ? get_device_parent+0x1b3/0x4c0 [ 1757.178857][T27136] ? kobject_put+0xb9/0x640 [ 1757.178872][T27136] device_add+0x294/0x1970 [ 1757.178884][T27136] ? lockdep_init_map_type+0x5c/0x250 [ 1757.178896][T27136] ? __pfx_device_add+0x10/0x10 [ 1757.178905][T27136] ? lockdep_init_map_type+0x5c/0x250 [ 1757.178918][T27136] ? __init_waitqueue_head+0xca/0x150 [ 1757.178949][T27136] tty_register_device_attr+0x388/0x810 [ 1757.178963][T27136] ? lockdep_init_map_type+0x5c/0x250 [ 1757.178975][T27136] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1757.178993][T27136] ? tty_port_init+0x156/0x1c0 [ 1757.179009][T27136] gsm_activate_mux+0x155/0x2a0 [ 1757.179030][T27136] gsmld_ioctl+0xbbc/0x15c0 [ 1757.179052][T27136] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1757.179071][T27136] ? irqentry_exit+0x202/0xab0 [ 1757.179086][T27136] ? lockdep_hardirqs_on+0x7d/0x110 [ 1757.179107][T27136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1757.179125][T27136] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1757.179141][T27136] tty_compat_ioctl+0x396/0x420 [ 1757.179156][T27136] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1757.179170][T27136] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1757.179189][T27136] __do_fast_syscall_32+0x14b/0x8c0 [ 1757.179205][T27136] do_fast_syscall_32+0x32/0x70 [ 1757.179220][T27136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1757.179234][T27136] RIP: 0023:0xf7f07fbc [ 1757.179247][T27136] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1757.179257][T27136] RSP: 002b:00000000f537450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1757.179268][T27136] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 1757.179275][T27136] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1757.179281][T27136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1757.179287][T27136] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1757.179293][T27136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.179307][T27136] [ 1757.179448][T27136] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1757.264905][T23267] usb 7-1: Using ep0 maxpacket: 16 [ 1757.269668][T23267] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1757.269695][T23267] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1757.272956][T23267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.272971][T23267] usb 7-1: Product: syz [ 1757.272979][T23267] usb 7-1: Manufacturer: syz [ 1757.272986][T23267] usb 7-1: SerialNumber: syz [ 1757.285326][T23258] usb 6-1: Using ep0 maxpacket: 16 [ 1757.378333][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5252'. [ 1757.470823][T23258] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1757.472363][T23258] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1757.520674][T23258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.520698][T23258] usb 6-1: Product: syz [ 1757.520746][T23258] usb 6-1: Manufacturer: syz [ 1757.520793][T23258] usb 6-1: SerialNumber: syz [ 1757.630883][T23267] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1757.672160][T23267] usb 7-1: USB disconnect, device number 84 [ 1757.859246][T27079] udevd[27079]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1757.917710][T27141] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1757.917972][T23258] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1758.544659][T23258] usb 6-1: USB disconnect, device number 80 [ 1758.669163][T27086] udevd[27086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1758.998325][T27148] all (unregistering): Released all slaves [ 1759.325515][T23267] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1759.566751][T23267] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1759.568248][T23267] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1759.568314][T23267] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1759.571289][T23267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.571351][T23267] usb 7-1: Product: syz [ 1759.571360][T23267] usb 7-1: Manufacturer: á°‰ [ 1759.571418][T23267] usb 7-1: SerialNumber: syz [ 1759.699492][T27172] syzkaller1: entered promiscuous mode [ 1759.699514][T27172] syzkaller1: entered allmulticast mode [ 1759.803729][T27170] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 1759.879930][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1760.016598][T27170] bond9: entered promiscuous mode [ 1760.018988][T27170] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1760.078801][T27174] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1760.079767][T27174] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1760.096337][T27174] bond9: (slave wireguard0): Error -95 calling set_mac_address [ 1760.586327][T27182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5265'. [ 1760.695807][T27184] loop7: detected capacity change from 0 to 7 [ 1761.104562][T27184] Dev loop7: unable to read RDB block 7 [ 1761.104606][T27184] loop7: unable to read partition table [ 1761.104784][T27184] loop7: partition table beyond EOD, truncated [ 1761.104829][T27184] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1761.215220][T27079] Buffer I/O error on dev loop7, logical block 0, async page read [ 1761.215741][T27079] Buffer I/O error on dev loop7, logical block 0, async page read [ 1761.216070][T27079] Buffer I/O error on dev loop7, logical block 0, async page read [ 1761.224643][T27079] Buffer I/O error on dev loop7, logical block 0, async page read [ 1761.225066][T27079] Buffer I/O error on dev loop7, logical block 0, async page read [ 1761.795380][T20007] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1761.896620][T23267] cdc_ncm 7-1:1.0: bind() failure [ 1761.901698][T23267] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1761.901735][T23267] cdc_ncm 7-1:1.1: bind() failure [ 1761.905945][ T42] kauditd_printk_skb: 278 callbacks suppressed [ 1761.905959][ T42] audit: type=1800 audit(1794417300.107:18137): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=395298 res=0 errno=-22 [ 1761.906572][T23267] usb 7-1: USB disconnect, device number 85 [ 1761.913904][ T42] audit: type=1800 audit(1794417300.107:18138): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=395299 res=0 errno=-19 [ 1761.914698][ T42] audit: type=1800 audit(1794417300.107:18139): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=395300 res=0 errno=-22 [ 1761.946064][T20007] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1761.947014][T20007] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1761.947039][T20007] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1761.947058][T20007] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1761.949134][T20007] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1761.949155][T20007] usb 6-1: Product: syz [ 1761.949167][T20007] usb 6-1: Manufacturer: syz [ 1761.949185][T20007] usb 6-1: SerialNumber: syz [ 1761.951336][T20007] usb 6-1: config 0 descriptor?? [ 1761.953053][T27192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1761.960231][ T42] audit: type=1800 audit(1794417300.157:18140): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=395956 res=0 errno=-22 [ 1761.962601][T20007] usb 6-1: selecting invalid altsetting 0 [ 1761.967317][ T42] audit: type=1800 audit(1794417300.167:18141): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=395988 res=0 errno=-22 [ 1761.967360][ T42] audit: type=1800 audit(1794417300.167:18142): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=395963 res=0 errno=-22 [ 1761.969532][ T42] audit: type=1800 audit(1794417300.167:18143): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=395964 res=0 errno=-22 [ 1761.999393][ T42] audit: type=1800 audit(1794417300.197:18144): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=395985 res=0 errno=-22 [ 1761.999976][ T42] audit: type=1800 audit(1794417300.197:18145): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=395986 res=0 errno=-22 [ 1762.000403][ T42] audit: type=1800 audit(1794417300.197:18146): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=395965 res=0 errno=-22 [ 1762.188407][T19429] usb 6-1: USB disconnect, device number 81 [ 1762.314232][T27209] bond3: (slave 04±ÿ)”ëfl): Releasing backup interface [ 1762.345030][T27209] bond3: (slave 04±ÿ)”ëfl): last VLAN challenged slave left bond - VLAN blocking is removed [ 1762.345462][T27209] syz_tun: left allmulticast mode [ 1762.345473][T27209] syz_tun: left promiscuous mode [ 1762.349370][T27209] bridge0: port 1(syz_tun) entered disabled state [ 1762.353638][T27209] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1762.594465][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1762.594492][ T1134] ata1.00: irq_stat 0x40000000 [ 1762.594507][ T1134] ata1.00: failed command: READ DMA EXT [ 1762.594517][ T1134] ata1.00: cmd 25/00:58:3e:14:08/00:0f:00:00:00/e0 tag 11 dma 2011136 in [ 1762.594517][ T1134] res 41/04:58:3e:14:08/00:0f:00:00:00/e0 Emask 0x1 (device error) [ 1762.594560][ T1134] ata1.00: status: { DRDY ERR } [ 1762.594571][ T1134] ata1.00: error: { ABRT } [ 1762.596248][ T1134] ata1.00: configured for UDMA/33 [ 1762.596358][ T1134] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1762.596391][ T1134] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 1762.596410][ T1134] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 1762.596438][ T1134] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 08 14 3e 00 0f 58 00 [ 1762.596452][ T1134] I/O error, dev sda, sector 529470 op 0x0:(READ) flags 0x80700 phys_seg 47 prio class 2 [ 1762.596641][ T1134] ata1: EH complete [ 1764.391801][T27239] bond5: (slave lo): Releasing backup interface [ 1764.393010][T27239] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1764.405157][T27239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1764.657147][T27243] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1765.484226][T23258] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1765.634270][T23258] usb 7-1: Using ep0 maxpacket: 16 [ 1765.638264][T23258] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1765.638292][T23258] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1765.642180][T23258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.642196][T23258] usb 7-1: Product: syz [ 1765.642203][T23258] usb 7-1: Manufacturer: syz [ 1765.642210][T23258] usb 7-1: SerialNumber: syz [ 1765.867595][T23258] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1765.888166][T23258] usb 7-1: USB disconnect, device number 86 [ 1765.931184][T27086] udevd[27086]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.725206][T27266] Invalid ELF header magic: != ELF [ 1767.800715][ T42] kauditd_printk_skb: 132 callbacks suppressed [ 1767.800728][ T42] audit: type=1326 audit(1794417305.997:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.800840][ T42] audit: type=1326 audit(1794417305.997:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.802168][ T42] audit: type=1326 audit(1794417305.997:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.802212][ T42] audit: type=1326 audit(1794417305.997:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.802248][ T42] audit: type=1326 audit(1794417305.997:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.802790][ T42] audit: type=1326 audit(1794417305.997:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.803014][ T42] audit: type=1326 audit(1794417305.997:18285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.803287][ T42] audit: type=1326 audit(1794417305.997:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.803627][ T42] audit: type=1326 audit(1794417305.997:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.803797][ T42] audit: type=1326 audit(1794417305.997:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1767.996504][T27275] overlayfs: failed to resolve './bus': -2 [ 1768.094139][T23169] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1768.244111][T23169] usb 6-1: Using ep0 maxpacket: 16 [ 1768.246781][T23169] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1768.246809][T23169] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1768.250615][T23169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.250629][T23169] usb 6-1: Product: syz [ 1768.250636][T23169] usb 6-1: Manufacturer: syz [ 1768.250643][T23169] usb 6-1: SerialNumber: syz [ 1768.473944][T23169] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1768.529449][T23169] usb 6-1: USB disconnect, device number 82 [ 1768.594768][T27086] udevd[27086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1768.801349][T27292] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 1768.801416][T27292] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 1768.812327][T27292] ±ÿ)”ëfl: renamed from lo [ 1769.026727][T27294] FAULT_INJECTION: forcing a failure. [ 1769.026727][T27294] name failslab, interval 1, probability 5, space 0, times 9995 [ 1769.026748][T27294] CPU: 0 UID: 0 PID: 27294 Comm: syz.1.5297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1769.026770][T27294] Tainted: [L]=SOFTLOCKUP [ 1769.026777][T27294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1769.026786][T27294] Call Trace: [ 1769.026792][T27294] [ 1769.026799][T27294] dump_stack_lvl+0x100/0x190 [ 1769.026831][T27294] should_fail_ex.cold+0x5/0xa [ 1769.026856][T27294] should_failslab+0xc2/0x120 [ 1769.026877][T27294] __kmalloc_noprof+0xfc/0x840 [ 1769.026894][T27294] ? ops_init+0x77/0x5f0 [ 1769.026913][T27294] ops_init+0x77/0x5f0 [ 1769.026930][T27294] setup_net+0x118/0x3a0 [ 1769.026945][T27294] ? __pfx_setup_net+0x10/0x10 [ 1769.026962][T27294] ? bpf_lsm_namespace_init+0x9/0x10 [ 1769.026977][T27294] copy_net_ns+0x340/0x7a0 [ 1769.026989][T27294] create_new_namespaces+0x3ea/0xac0 [ 1769.027005][T27294] unshare_nsproxy_namespaces+0xf6/0x210 [ 1769.027018][T27294] ksys_unshare+0x44f/0x980 [ 1769.027030][T27294] ? __pfx_ksys_unshare+0x10/0x10 [ 1769.027043][T27294] ? __might_fault+0xc5/0x140 [ 1769.027061][T27294] __ia32_sys_unshare+0x30/0x40 [ 1769.027072][T27294] __do_fast_syscall_32+0x14b/0x8c0 [ 1769.027089][T27294] do_fast_syscall_32+0x32/0x70 [ 1769.027103][T27294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.027116][T27294] RIP: 0023:0xf742efbc [ 1769.027126][T27294] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1769.027136][T27294] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1769.027147][T27294] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1769.027153][T27294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1769.027159][T27294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1769.027165][T27294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1769.027171][T27294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.027185][T27294] [ 1769.622306][T27306] loop7: detected capacity change from 0 to 7 [ 1769.687506][T27306] Dev loop7: unable to read RDB block 7 [ 1769.687540][T27306] loop7: unable to read partition table [ 1769.687712][T27306] loop7: partition table beyond EOD, truncated [ 1769.687757][T27306] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1769.774660][T26912] Buffer I/O error on dev loop7, logical block 0, async page read [ 1769.932925][T27313] overlayfs: failed to resolve './bus': -2 [ 1770.203583][T27319] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1770.277475][T27321] overlayfs: failed to resolve './bus': -2 [ 1770.782027][T27327] overlayfs: failed to resolve './bus': -2 [ 1771.126531][T27334] overlayfs: failed to resolve './bus': -2 [ 1771.287880][T27342] CIFS: Attempting to mount //127.0.0.1/share [ 1772.403135][T27342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1772.403175][T27342] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1773.186582][T27356] overlayfs: failed to resolve './bus': -2 [ 1773.606556][T27365] overlayfs: failed to resolve './bus': -2 [ 1773.832734][ T42] kauditd_printk_skb: 177 callbacks suppressed [ 1773.832747][ T42] audit: type=1800 audit(1794417312.027:18466): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4887 res=0 errno=-22 [ 1773.911852][T27374] bond3: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1773.913928][T27374] bond3: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1773.915308][T27374] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1774.991022][T27396] CIFS: Attempting to mount //127.0.0.1/share [ 1776.124905][T27396] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1776.124944][T27396] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1778.176935][T27427] overlayfs: failed to resolve './bus': -2 [ 1778.235753][ T42] audit: type=1326 audit(1794417316.427:18467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235798][ T42] audit: type=1326 audit(1794417316.427:18468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235830][ T42] audit: type=1326 audit(1794417316.427:18469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235860][ T42] audit: type=1326 audit(1794417316.427:18470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235892][ T42] audit: type=1326 audit(1794417316.427:18471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235922][ T42] audit: type=1326 audit(1794417316.427:18472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235953][ T42] audit: type=1326 audit(1794417316.427:18473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.235984][ T42] audit: type=1326 audit(1794417316.427:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.236013][ T42] audit: type=1326 audit(1794417316.427:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.474484][T23267] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1778.625241][T23267] usb 8-1: Using ep0 maxpacket: 16 [ 1778.629989][T23267] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1778.630031][T23267] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1778.641992][T23267] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.642013][T23267] usb 8-1: Product: syz [ 1778.642026][T23267] usb 8-1: Manufacturer: syz [ 1778.642037][T23267] usb 8-1: SerialNumber: syz [ 1778.848607][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 1778.848625][ T42] audit: type=1326 audit(1794417317.047:18570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.848666][ T42] audit: type=1326 audit(1794417317.047:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.859925][ T42] audit: type=1326 audit(1794417317.047:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.863833][ T42] audit: type=1326 audit(1794417317.047:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.863879][ T42] audit: type=1326 audit(1794417317.057:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27432 comm="syz.3.5331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1778.869814][T23267] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1778.940969][ T42] audit: type=1800 audit(1794417317.137:18575): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=397535 res=0 errno=-22 [ 1778.941737][T23267] usb 8-1: USB disconnect, device number 85 [ 1778.941808][ T42] audit: type=1800 audit(1794417317.137:18576): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=397536 res=0 errno=-22 [ 1779.772567][ T42] audit: type=1800 audit(1794417317.967:18577): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=397515 res=0 errno=-22 [ 1779.773507][ T42] audit: type=1800 audit(1794417317.967:18578): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=397537 res=0 errno=-22 [ 1779.803807][T27444] udevd[27444]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1780.139658][T27460] Invalid ELF header magic: != ELF [ 1780.605033][T23267] usb 8-1: new full-speed USB device number 86 using dummy_hcd [ 1780.856111][T23267] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1780.857096][T23267] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1780.857113][T23267] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 1780.857125][T23267] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1780.858757][T23267] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1780.858770][T23267] usb 8-1: Product: syz [ 1780.858777][T23267] usb 8-1: Manufacturer: syz [ 1780.858784][T23267] usb 8-1: SerialNumber: syz [ 1780.862655][T23267] usb 8-1: config 0 descriptor?? [ 1780.863223][T27449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1780.863895][ T42] audit: type=1800 audit(1794417319.057:18579): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=397737 res=0 errno=-22 [ 1780.868425][T23267] usb 8-1: selecting invalid altsetting 0 [ 1781.126024][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.126297][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.126475][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.130203][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.130360][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.130514][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.130682][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.130880][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.131046][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.131205][T27449] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1781.271713][T27470] bond0: (slave lo): Releasing backup interface [ 1781.277636][T27470] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1781.291421][T23267] usb 8-1: USB disconnect, device number 86 [ 1781.310905][T27470] tipc: Resetting bearer [ 1781.363113][T27470] batman_adv: batadv0: Interface deactivated: dummy0 [ 1781.363305][T27470] batman_adv: batadv0: Removing interface: dummy0 [ 1781.525872][T27470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1781.679286][T27483] xfrm0: entered allmulticast mode [ 1781.679482][T27483] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1781.852543][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5341'. [ 1781.895145][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5341'. [ 1781.934165][ T5864] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1781.945369][ T5864] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1781.945393][ T5864] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1781.945514][ T5864] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1782.833266][T27503] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1783.569431][T27513] syz_tun: entered allmulticast mode [ 1783.672251][T27512] syz_tun: left allmulticast mode [ 1783.684805][T20007] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1783.694172][T19429] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1783.834854][T20007] usb 6-1: Using ep0 maxpacket: 16 [ 1783.837306][T20007] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1783.837331][T20007] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1783.843590][T20007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.843604][T20007] usb 6-1: Product: syz [ 1783.843611][T20007] usb 6-1: Manufacturer: syz [ 1783.843618][T20007] usb 6-1: SerialNumber: syz [ 1783.846584][T19429] usb 8-1: Using ep0 maxpacket: 16 [ 1783.858022][ T42] kauditd_printk_skb: 203 callbacks suppressed [ 1783.858038][ T42] audit: type=1326 audit(1794417322.057:18783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.873105][T27515] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1783.880305][T27515] bond1: (slave lo): Enslaving as an active interface with an up link [ 1783.880413][T27515] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1783.883991][ T42] audit: type=1326 audit(1794417322.077:18784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.884440][ T42] audit: type=1326 audit(1794417322.087:18785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.913954][ T42] audit: type=1326 audit(1794417322.107:18786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.923547][ T42] audit: type=1326 audit(1794417322.117:18787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.933243][ T42] audit: type=1326 audit(1794417322.117:18788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.933647][ T42] audit: type=1326 audit(1794417322.127:18789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.933845][T19429] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1783.933888][T19429] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1783.952889][ T42] audit: type=1326 audit(1794417322.127:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.953210][ T42] audit: type=1326 audit(1794417322.147:18791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.978996][ T42] audit: type=1326 audit(1794417322.177:18792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.3.5345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1783.993745][T19429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.993785][T19429] usb 8-1: Product: syz [ 1783.993799][T19429] usb 8-1: Manufacturer: syz [ 1783.993810][T19429] usb 8-1: SerialNumber: syz [ 1784.062022][T20007] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1784.102480][T20007] usb 6-1: USB disconnect, device number 83 [ 1784.221818][T27522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1784.356161][T27443] udevd[27443]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1784.435514][T19429] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1784.487637][T19429] usb 8-1: USB disconnect, device number 87 [ 1784.525378][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1784.930277][T27529] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1786.374184][T27546] FAULT_INJECTION: forcing a failure. [ 1786.374184][T27546] name failslab, interval 1, probability 5, space 0, times 9994 [ 1786.374207][T27546] CPU: 2 UID: 0 PID: 27546 Comm: syz.0.5356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.374223][T27546] Tainted: [L]=SOFTLOCKUP [ 1786.374228][T27546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1786.374236][T27546] Call Trace: [ 1786.374240][T27546] [ 1786.374245][T27546] dump_stack_lvl+0x100/0x190 [ 1786.374266][T27546] should_fail_ex.cold+0x5/0xa [ 1786.374282][T27546] should_failslab+0xc2/0x120 [ 1786.374297][T27546] __kmalloc_noprof+0xfc/0x840 [ 1786.374311][T27546] ? __register_sysctl_table+0xac/0x1650 [ 1786.374333][T27546] __register_sysctl_table+0xac/0x1650 [ 1786.374352][T27546] ? lock_acquire+0x1d1/0x380 [ 1786.374373][T27546] ? __pfx___register_sysctl_table+0x10/0x10 [ 1786.374389][T27546] ? is_module_address+0x5f/0xf0 [ 1786.374405][T27546] ? is_module_address+0x5f/0xf0 [ 1786.374423][T27546] register_net_sysctl_sz+0x325/0x420 [ 1786.374443][T27546] ? __asan_memcpy+0x3c/0x60 [ 1786.374460][T27546] ? __pfx_unix_net_init+0x10/0x10 [ 1786.374477][T27546] unix_sysctl_register+0x8e/0x180 [ 1786.374492][T27546] unix_net_init+0x54/0x350 [ 1786.374509][T27546] ? __pfx_unix_net_init+0x10/0x10 [ 1786.374526][T27546] ops_init+0x1e2/0x5f0 [ 1786.374545][T27546] setup_net+0x118/0x3a0 [ 1786.374561][T27546] ? __pfx_setup_net+0x10/0x10 [ 1786.374578][T27546] ? bpf_lsm_namespace_init+0x9/0x10 [ 1786.374593][T27546] copy_net_ns+0x340/0x7a0 [ 1786.374606][T27546] create_new_namespaces+0x3ea/0xac0 [ 1786.374621][T27546] unshare_nsproxy_namespaces+0xf6/0x210 [ 1786.374634][T27546] ksys_unshare+0x44f/0x980 [ 1786.374646][T27546] ? __pfx_ksys_unshare+0x10/0x10 [ 1786.374659][T27546] ? __might_fault+0xc5/0x140 [ 1786.374677][T27546] __ia32_sys_unshare+0x30/0x40 [ 1786.374689][T27546] __do_fast_syscall_32+0x14b/0x8c0 [ 1786.374705][T27546] do_fast_syscall_32+0x32/0x70 [ 1786.374719][T27546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1786.374732][T27546] RIP: 0023:0xf7f07fbc [ 1786.374742][T27546] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1786.374752][T27546] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1786.374762][T27546] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1786.374769][T27546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1786.374775][T27546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1786.374781][T27546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1786.374787][T27546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1786.374801][T27546] [ 1786.522935][T27548] syz_tun: entered allmulticast mode [ 1786.655860][T27547] syz_tun: left allmulticast mode [ 1787.038090][T27568] ±ÿ)”ëfl: renamed from lo [ 1787.364227][T23169] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1787.514238][T23169] usb 7-1: Using ep0 maxpacket: 16 [ 1787.518798][T23169] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1787.518840][T23169] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1787.526839][T23169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.526862][T23169] usb 7-1: Product: syz [ 1787.526875][T23169] usb 7-1: Manufacturer: syz [ 1787.526887][T23169] usb 7-1: SerialNumber: syz [ 1787.747588][T23169] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1787.781411][T27572] overlayfs: failed to resolve './bus': -2 [ 1787.792986][T23169] usb 7-1: USB disconnect, device number 87 [ 1787.820218][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1788.236751][T27581] overlayfs: failed to resolve './bus': -2 [ 1788.557294][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1788.557321][ T1134] ata1.00: irq_stat 0x40000000 [ 1788.557336][ T1134] ata1.00: failed command: READ DMA EXT [ 1788.557346][ T1134] ata1.00: cmd 25/00:28:b6:12:08/00:0c:00:00:00/e0 tag 14 dma 1593344 in [ 1788.557346][ T1134] res 41/04:28:b6:12:08/00:0c:00:00:00/e0 Emask 0x1 (device error) [ 1788.557393][ T1134] ata1.00: status: { DRDY ERR } [ 1788.557405][ T1134] ata1.00: error: { ABRT } [ 1788.558140][ T1134] ata1.00: configured for UDMA/33 [ 1788.558244][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1788.558269][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1788.558287][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1788.558306][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 12 b6 00 0c 28 00 [ 1788.558318][ T1134] I/O error, dev sda, sector 529078 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1788.558519][ T1134] ata1: EH complete [ 1788.881437][ T42] kauditd_printk_skb: 161 callbacks suppressed [ 1788.881452][ T42] audit: type=1800 audit(1794417327.077:18954): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=399593 res=0 errno=-22 [ 1789.256050][T27591] bond1: (slave lo): Releasing backup interface [ 1789.259275][T27591] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1789.259964][T27591] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1789.620674][T27601] overlayfs: failed to resolve './bus': -2 [ 1790.270969][ T42] audit: type=1800 audit(1794417328.457:18955): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=399860 res=0 errno=-22 [ 1790.312967][ T42] audit: type=1800 audit(1794417328.507:18956): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=399870 res=0 errno=-22 [ 1790.759177][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 1790.759255][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.525870][T27624] bond5: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1791.528615][T27624] bond5: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1791.528776][T27624] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1792.434862][T27634] overlayfs: failed to resolve './bus': -2 [ 1792.691098][T27641] all (unregistering): Released all slaves [ 1792.816686][ T42] audit: type=1800 audit(1794417331.017:18957): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34523 res=0 errno=-22 [ 1793.034953][T19506] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1793.081983][T27637] bond0: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1793.084006][T27637] bond0: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1793.092337][T27637] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1793.249463][T19506] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1793.253041][T19506] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1793.253059][T19506] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1793.272082][T19506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.272106][T19506] usb 7-1: Product: syz [ 1793.272116][T19506] usb 7-1: Manufacturer: á°‰ [ 1793.272128][T19506] usb 7-1: SerialNumber: syz [ 1793.278057][ T42] audit: type=1800 audit(1794417331.467:18958): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=400169 res=0 errno=-22 [ 1793.283927][ T42] audit: type=1800 audit(1794417331.477:18959): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=400201 res=0 errno=-22 [ 1793.286702][ T42] audit: type=1800 audit(1794417331.487:18960): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=400176 res=0 errno=-22 [ 1793.292886][ T42] audit: type=1800 audit(1794417331.487:18961): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=400177 res=0 errno=-22 [ 1793.643432][T27649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1793.867910][T27655] bond0: (slave 04±ÿ)”ëfl): Releasing backup interface [ 1793.868765][T27655] bond0: (slave 04±ÿ)”ëfl): last VLAN challenged slave left bond - VLAN blocking is removed [ 1793.869453][T27655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1794.590870][T27661] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1794.756022][T27667] Invalid ELF header magic: != ELF [ 1795.557824][T27670] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1795.693381][T19506] cdc_ncm 7-1:1.0: bind() failure [ 1795.745671][T27670] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1795.745796][T27670] overlayfs: failed to look up (tracing) for ino (-66) [ 1795.804792][T27675] overlayfs: failed to resolve './bus': -2 [ 1795.856746][ T34] kworker/3:0 (34) used greatest stack depth: 16536 bytes left [ 1795.906607][T19506] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1795.915212][T19506] cdc_ncm 7-1:1.1: bind() failure [ 1795.958318][ T42] audit: type=1800 audit(1794417334.157:18962): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=400198 res=0 errno=-22 [ 1795.959191][ T42] audit: type=1800 audit(1794417334.157:18963): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=400199 res=0 errno=-22 [ 1795.959743][ T42] audit: type=1800 audit(1794417334.157:18964): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=400178 res=0 errno=-22 [ 1795.960180][ T42] audit: type=1800 audit(1794417334.157:18965): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=400200 res=0 errno=-22 [ 1796.000088][T19506] usb 7-1: USB disconnect, device number 88 [ 1796.035616][T27683] overlayfs: failed to resolve './bus': -2 [ 1796.123423][T27679] bond3: (slave 04±ÿ)”ëfl): Releasing backup interface [ 1796.136524][T27679] bond3: (slave 04±ÿ)”ëfl): last VLAN challenged slave left bond - VLAN blocking is removed [ 1796.136932][T27679] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1797.370406][T27694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1797.497973][T27699] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 1797.762939][T27714] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1798.897993][ T42] audit: type=1800 audit(1794417337.097:18966): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=401536 res=0 errno=-22 [ 1798.898949][ T42] audit: type=1800 audit(1794417337.097:18967): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=401546 res=0 errno=-22 [ 1799.453033][T27728] overlayfs: failed to resolve './bus': -2 [ 1799.647160][T27727] bond0: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1799.657377][T27727] bond0: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1799.657564][T27727] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1799.944147][ T42] audit: type=1326 audit(1794417338.137:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1799.944331][ T42] audit: type=1326 audit(1794417338.147:18969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1799.944635][ T42] audit: type=1326 audit(1794417338.147:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5403" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1799.944921][ T42] audit: type=1326 audit(1794417338.147:18971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.3.5403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1800.031038][T27722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1800.315460][T19506] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1800.329462][T27737] overlayfs: failed to resolve './bus': -2 [ 1800.474265][T19506] usb 8-1: Using ep0 maxpacket: 16 [ 1800.480747][T19506] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1800.480772][T19506] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1800.488966][T19506] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.488988][T19506] usb 8-1: Product: syz [ 1800.488999][T19506] usb 8-1: Manufacturer: syz [ 1800.489011][T19506] usb 8-1: SerialNumber: syz [ 1800.710096][T27755] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 1800.711841][T19506] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.751401][T19506] usb 8-1: USB disconnect, device number 88 [ 1800.944665][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1800.944691][ T1134] ata1.00: irq_stat 0x40000000 [ 1800.944707][ T1134] ata1.00: failed command: READ DMA EXT [ 1800.944717][ T1134] ata1.00: cmd 25/00:00:6e:3b:01/00:20:00:00:00/e0 tag 14 dma 4194304 in [ 1800.944717][ T1134] res 41/04:00:6e:3b:01/00:20:00:00:00/e0 Emask 0x1 (device error) [ 1800.944764][ T1134] ata1.00: status: { DRDY ERR } [ 1800.944776][ T1134] ata1.00: error: { ABRT } [ 1800.945702][ T1134] ata1.00: configured for UDMA/33 [ 1800.945806][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1800.945830][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1800.945847][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1800.945866][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3b 6e 00 20 00 00 [ 1800.945879][ T1134] I/O error, dev sda, sector 80750 op 0x0:(READ) flags 0x80700 phys_seg 110 prio class 2 [ 1800.946174][ T1134] ata1: EH complete [ 1801.118047][ T42] kauditd_printk_skb: 109 callbacks suppressed [ 1801.118059][ T42] audit: type=1800 audit(1794417339.317:19081): pid=27445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=29942 res=0 errno=-22 [ 1801.125759][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.650300][T27762] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1802.256054][ T42] audit: type=1326 audit(1794417340.457:19082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.256101][ T42] audit: type=1326 audit(1794417340.457:19083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.257343][ T42] audit: type=1326 audit(1794417340.457:19084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.257391][ T42] audit: type=1326 audit(1794417340.457:19085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.257426][ T42] audit: type=1326 audit(1794417340.457:19086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.260375][ T42] audit: type=1326 audit(1794417340.457:19087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.260414][ T42] audit: type=1326 audit(1794417340.457:19088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.260448][ T42] audit: type=1326 audit(1794417340.457:19089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.260886][ T42] audit: type=1326 audit(1794417340.457:19090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.2.5411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fbc code=0x7ffc0000 [ 1802.489141][T27781] overlayfs: failed to resolve './bus': -2 [ 1802.678324][T27790] CIFS: Attempting to mount //127.0.0.1/share [ 1802.704647][T23169] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1802.854184][T23169] usb 7-1: Using ep0 maxpacket: 16 [ 1802.857985][T23169] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1802.858026][T23169] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1802.863839][T23169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.863862][T23169] usb 7-1: Product: syz [ 1802.863874][T23169] usb 7-1: Manufacturer: syz [ 1802.863886][T23169] usb 7-1: SerialNumber: syz [ 1802.896129][T27787] bond0: (slave 04±ÿ)”ëfl): Releasing backup interface [ 1802.897522][T27787] bond0: (slave 04±ÿ)”ëfl): last VLAN challenged slave left bond - VLAN blocking is removed [ 1802.898904][T27787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1803.084832][T23169] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1803.125866][T23169] usb 7-1: USB disconnect, device number 89 [ 1803.166769][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1803.286853][T27796] bond3: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1803.288761][T27796] bond3: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1803.288884][T27796] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1803.563512][T27790] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1803.563556][T27790] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1803.834399][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1803.834417][ T1134] ata1.00: irq_stat 0x40000000 [ 1803.834427][ T1134] ata1.00: failed command: READ DMA EXT [ 1803.834433][ T1134] ata1.00: cmd 25/00:78:be:6b:09/00:05:00:00:00/e0 tag 30 dma 716800 in [ 1803.834433][ T1134] res 41/04:78:be:6b:09/00:05:00:00:00/e0 Emask 0x1 (device error) [ 1803.834464][ T1134] ata1.00: status: { DRDY ERR } [ 1803.834471][ T1134] ata1.00: error: { ABRT } [ 1803.835218][ T1134] ata1.00: configured for UDMA/33 [ 1803.835296][ T1134] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1803.835320][ T1134] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1803.835338][ T1134] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1803.835356][ T1134] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 09 6b be 00 05 78 00 [ 1803.835369][ T1134] I/O error, dev sda, sector 617406 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 2 [ 1803.835462][ T1134] ata1: EH complete [ 1803.969581][T27803] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1804.319325][T27814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1806.089777][T27828] bond5: (slave 04±ÿ)”ëfl): Releasing backup interface [ 1806.090410][T27828] bond5: (slave 04±ÿ)”ëfl): last VLAN challenged slave left bond - VLAN blocking is removed [ 1806.090823][T27828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1806.733755][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 1806.733768][ T42] audit: type=1326 audit(1794417344.927:19193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.733897][ T42] audit: type=1326 audit(1794417344.927:19194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.753790][ T42] audit: type=1326 audit(1794417344.947:19195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.753818][ T42] audit: type=1326 audit(1794417344.947:19196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.753837][ T42] audit: type=1326 audit(1794417344.947:19197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.778085][ T42] audit: type=1326 audit(1794417344.977:19198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.778212][ T42] audit: type=1326 audit(1794417344.977:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.778374][ T42] audit: type=1326 audit(1794417344.977:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.778765][ T42] audit: type=1326 audit(1794417344.977:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1806.778950][ T42] audit: type=1326 audit(1794417344.977:19202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.3.5426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 1807.044319][T16083] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1807.204228][T16083] usb 8-1: Using ep0 maxpacket: 16 [ 1807.207701][T16083] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1807.207744][T16083] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1807.213069][T16083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.213093][T16083] usb 8-1: Product: syz [ 1807.213104][T16083] usb 8-1: Manufacturer: syz [ 1807.213117][T16083] usb 8-1: SerialNumber: syz [ 1807.459765][T16083] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1807.481151][T16083] usb 8-1: USB disconnect, device number 89 [ 1808.165506][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1808.165531][ T1134] ata1.00: irq_stat 0x40000000 [ 1808.165546][ T1134] ata1.00: failed command: READ DMA EXT [ 1808.165557][ T1134] ata1.00: cmd 25/00:d8:96:4a:01/00:08:00:00:00/e0 tag 14 dma 1159168 in [ 1808.165557][ T1134] res 41/04:d8:96:4a:01/00:08:00:00:00/e0 Emask 0x1 (device error) [ 1808.165603][ T1134] ata1.00: status: { DRDY ERR } [ 1808.165615][ T1134] ata1.00: error: { ABRT } [ 1808.166413][ T1134] ata1.00: configured for UDMA/33 [ 1808.166570][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1808.166605][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1808.166632][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1808.166664][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 4a 96 00 08 d8 00 [ 1808.166685][ T1134] I/O error, dev sda, sector 84630 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1808.166918][ T1134] ata1: EH complete [ 1808.323605][T27840] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1808.417000][T27842] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1808.434563][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1808.666244][T20007] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1808.915448][T20007] usb 7-1: Using ep0 maxpacket: 16 [ 1809.006752][T20007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1809.006804][T20007] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1809.018920][T20007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.018944][T20007] usb 7-1: Product: syz [ 1809.018957][T20007] usb 7-1: Manufacturer: syz [ 1809.018969][T20007] usb 7-1: SerialNumber: syz [ 1809.335309][T20007] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1809.370415][T20007] usb 7-1: USB disconnect, device number 90 [ 1809.477020][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1809.765009][T23267] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1810.245438][T23267] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1810.246246][T23267] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1810.246261][T23267] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 1810.246274][T23267] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1810.247857][T23267] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1810.247869][T23267] usb 6-1: Product: syz [ 1810.247876][T23267] usb 6-1: Manufacturer: syz [ 1810.247883][T23267] usb 6-1: SerialNumber: syz [ 1810.249056][T23267] usb 6-1: config 0 descriptor?? [ 1810.249505][T27863] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1810.252517][T23267] usb 6-1: selecting invalid altsetting 0 [ 1810.327415][T27872] bond5: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1810.329710][T27872] bond5: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1810.329814][T27872] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1810.364986][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1810.365012][ T1134] ata1.00: irq_stat 0x40000000 [ 1810.365026][ T1134] ata1.00: failed command: READ DMA EXT [ 1810.365036][ T1134] ata1.00: cmd 25/00:98:7e:27:01/00:1e:00:00:00/e0 tag 21 dma 4009984 in [ 1810.365036][ T1134] res 41/04:98:7e:27:01/00:1e:00:00:00/e0 Emask 0x1 (device error) [ 1810.365075][ T1134] ata1.00: status: { DRDY ERR } [ 1810.365086][ T1134] ata1.00: error: { ABRT } [ 1810.366471][ T1134] ata1.00: configured for UDMA/33 [ 1810.366814][ T1134] sd 0:0:0:0: [sda] tag#21 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1810.366865][ T1134] sd 0:0:0:0: [sda] tag#21 Sense Key : Aborted Command [current] [ 1810.366894][ T1134] sd 0:0:0:0: [sda] tag#21 Add. Sense: No additional sense information [ 1810.366928][ T1134] sd 0:0:0:0: [sda] tag#21 CDB: Read(10) 28 00 00 01 27 7e 00 1e 98 00 [ 1810.366950][ T1134] I/O error, dev sda, sector 75646 op 0x0:(READ) flags 0x80700 phys_seg 163 prio class 2 [ 1810.369872][ T1134] ata1: EH complete [ 1810.473454][T27863] snd_usb_endpoint_start: 236 callbacks suppressed [ 1810.473470][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.473628][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.473784][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.473973][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.475034][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.475205][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.475399][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.475559][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.475699][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.475837][T27863] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1810.836729][T23169] usb 6-1: USB disconnect, device number 84 [ 1811.520681][T27886] FAULT_INJECTION: forcing a failure. [ 1811.520681][T27886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1811.520702][T27886] CPU: 3 UID: 0 PID: 27886 Comm: syz.2.5438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.520717][T27886] Tainted: [L]=SOFTLOCKUP [ 1811.520721][T27886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1811.520727][T27886] Call Trace: [ 1811.520732][T27886] [ 1811.520736][T27886] dump_stack_lvl+0x100/0x190 [ 1811.520757][T27886] should_fail_ex.cold+0x5/0xa [ 1811.520774][T27886] should_fail_alloc_page+0xeb/0x140 [ 1811.520790][T27886] prepare_alloc_pages+0x1f0/0x5b0 [ 1811.520802][T27886] ? is_bpf_text_address+0x94/0x1a0 [ 1811.520819][T27886] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 1811.520835][T27886] ? arch_stack_walk+0xa6/0xf0 [ 1811.520855][T27886] ? stack_trace_save+0x8e/0xc0 [ 1811.520867][T27886] ? __pfx_stack_trace_save+0x10/0x10 [ 1811.520879][T27886] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1811.520896][T27886] ? kasan_save_stack+0x3f/0x50 [ 1811.520907][T27886] ? kasan_save_stack+0x30/0x50 [ 1811.520916][T27886] ? kasan_save_track+0x14/0x30 [ 1811.520927][T27886] ? __kasan_slab_alloc+0x89/0x90 [ 1811.520937][T27886] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 1811.520963][T27886] ? alloc_vmap_area+0x1829/0x2bc0 [ 1811.520973][T27886] ? __get_vm_area_node+0x1ed/0x350 [ 1811.520984][T27886] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 1811.520996][T27886] ? __vmalloc_node_noprof+0xad/0xf0 [ 1811.521008][T27886] ? copy_process+0x80b/0x8510 [ 1811.521019][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.521030][T27886] ? __do_compat_sys_ia32_clone+0xd4/0x120 [ 1811.521042][T27886] ? __do_fast_syscall_32+0x14b/0x8c0 [ 1811.521056][T27886] ? do_fast_syscall_32+0x32/0x70 [ 1811.521069][T27886] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1811.521089][T27886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1811.521103][T27886] ? policy_nodemask+0xed/0x5e0 [ 1811.521118][T27886] alloc_pages_mpol+0x201/0x560 [ 1811.521132][T27886] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1811.521150][T27886] alloc_pages_noprof+0x1a/0x160 [ 1811.521166][T27886] get_free_pages_noprof+0x10/0xb0 [ 1811.521177][T27886] __kasan_populate_vmalloc+0xa0/0x210 [ 1811.521196][T27886] alloc_vmap_area+0x963/0x2bc0 [ 1811.521211][T27886] ? kasan_save_track+0x14/0x30 [ 1811.521221][T27886] ? __kasan_kmalloc+0xaa/0xb0 [ 1811.521232][T27886] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1811.521243][T27886] ? __get_vm_area_node+0x124/0x350 [ 1811.521256][T27886] __get_vm_area_node+0x1ed/0x350 [ 1811.521270][T27886] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 1811.521283][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.521293][T27886] ? lock_acquire+0x1d1/0x380 [ 1811.521304][T27886] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 1811.521321][T27886] ? find_held_lock+0x2b/0x80 [ 1811.521336][T27886] ? rcu_read_unlock+0x17/0x60 [ 1811.521350][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.521362][T27886] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 1811.521378][T27886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1811.521392][T27886] ? rcu_is_watching+0x13/0xc0 [ 1811.521430][T27886] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1811.521444][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.521456][T27886] __vmalloc_node_noprof+0xad/0xf0 [ 1811.521468][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.521482][T27886] copy_process+0x80b/0x8510 [ 1811.521493][T27886] ? __futex_wait+0x2ac/0x360 [ 1811.521506][T27886] ? __pfx___futex_wait+0x10/0x10 [ 1811.521518][T27886] ? futex_hash+0x311/0x400 [ 1811.521537][T27886] ? __pfx_copy_process+0x10/0x10 [ 1811.521548][T27886] ? __pfx_get_futex_key+0x10/0x10 [ 1811.521570][T27886] kernel_clone+0x176/0x9d0 [ 1811.521581][T27886] ? find_held_lock+0x2b/0x80 [ 1811.521596][T27886] ? __pfx_kernel_clone+0x10/0x10 [ 1811.521610][T27886] ? ksys_write+0x190/0x250 [ 1811.521624][T27886] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1811.521636][T27886] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1811.521647][T27886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1811.521667][T27886] ? __might_fault+0xc5/0x140 [ 1811.521679][T27886] ? __might_fault+0xc5/0x140 [ 1811.521696][T27886] __do_fast_syscall_32+0x14b/0x8c0 [ 1811.521709][T27886] ? lockdep_hardirqs_on+0x7d/0x110 [ 1811.521724][T27886] do_fast_syscall_32+0x32/0x70 [ 1811.521738][T27886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1811.521751][T27886] RIP: 0023:0xf7fa5fbc [ 1811.521761][T27886] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1811.521771][T27886] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1811.521783][T27886] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 1811.521789][T27886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.521795][T27886] RBP: 00000000f54565ec R08: 0000000000000000 R09: 0000000000000000 [ 1811.521802][T27886] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1811.521808][T27886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1811.521821][T27886] [ 1811.521851][T27886] syz.2.5438: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1811.521888][T27886] CPU: 3 UID: 0 PID: 27886 Comm: syz.2.5438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.521903][T27886] Tainted: [L]=SOFTLOCKUP [ 1811.521907][T27886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1811.521914][T27886] Call Trace: [ 1811.521918][T27886] [ 1811.521923][T27886] dump_stack_lvl+0x100/0x190 [ 1811.521940][T27886] warn_alloc.cold+0x9e/0xb2 [ 1811.521960][T27886] ? __pfx_warn_alloc+0x10/0x10 [ 1811.521975][T27886] ? lockdep_hardirqs_on+0x7d/0x110 [ 1811.521991][T27886] ? __get_vm_area_node+0x2f0/0x350 [ 1811.522006][T27886] ? __get_vm_area_node+0x22b/0x350 [ 1811.522021][T27886] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 1811.522035][T27886] ? lock_acquire+0x1d1/0x380 [ 1811.522047][T27886] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 1811.522065][T27886] ? find_held_lock+0x2b/0x80 [ 1811.522081][T27886] ? rcu_read_unlock+0x17/0x60 [ 1811.522096][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.522109][T27886] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 1811.522125][T27886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1811.522139][T27886] ? rcu_is_watching+0x13/0xc0 [ 1811.522153][T27886] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1811.522167][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.522177][T27886] __vmalloc_node_noprof+0xad/0xf0 [ 1811.522189][T27886] ? kernel_clone+0x176/0x9d0 [ 1811.522201][T27886] copy_process+0x80b/0x8510 [ 1811.522211][T27886] ? __futex_wait+0x2ac/0x360 [ 1811.522223][T27886] ? __pfx___futex_wait+0x10/0x10 [ 1811.522233][T27886] ? futex_hash+0x311/0x400 [ 1811.522251][T27886] ? __pfx_copy_process+0x10/0x10 [ 1811.522262][T27886] ? __pfx_get_futex_key+0x10/0x10 [ 1811.522281][T27886] kernel_clone+0x176/0x9d0 [ 1811.522292][T27886] ? find_held_lock+0x2b/0x80 [ 1811.522306][T27886] ? __pfx_kernel_clone+0x10/0x10 [ 1811.522320][T27886] ? ksys_write+0x190/0x250 [ 1811.522334][T27886] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1811.522346][T27886] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1811.522357][T27886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1811.522377][T27886] ? __might_fault+0xc5/0x140 [ 1811.522388][T27886] ? __might_fault+0xc5/0x140 [ 1811.522405][T27886] __do_fast_syscall_32+0x14b/0x8c0 [ 1811.522418][T27886] ? lockdep_hardirqs_on+0x7d/0x110 [ 1811.522432][T27886] do_fast_syscall_32+0x32/0x70 [ 1811.522446][T27886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1811.522459][T27886] RIP: 0023:0xf7fa5fbc [ 1811.522467][T27886] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1811.522477][T27886] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1811.522486][T27886] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 1811.522492][T27886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.522498][T27886] RBP: 00000000f54565ec R08: 0000000000000000 R09: 0000000000000000 [ 1811.522504][T27886] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1811.522510][T27886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1811.522524][T27886] [ 1811.522528][T27886] Mem-Info: [ 1811.522534][T27886] active_anon:5380 inactive_anon:2419 isolated_anon:0 [ 1811.522534][T27886] active_file:3982 inactive_file:9862 isolated_file:0 [ 1811.522534][T27886] unevictable:0 dirty:92 writeback:1 [ 1811.522534][T27886] slab_reclaimable:7219 slab_unreclaimable:67273 [ 1811.522534][T27886] mapped:30395 shmem:5757 pagetables:1393 [ 1811.522534][T27886] sec_pagetables:391 bounce:0 [ 1811.522534][T27886] kernel_misc_reclaimable:0 [ 1811.522534][T27886] free:24274 free_pcp:1146 free_cma:0 [ 1811.522557][T27886] Node 0 active_anon:0kB inactive_anon:68kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7488kB pagetables:1388kB sec_pagetables:1224kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1811.522582][T27886] Node 1 active_anon:21520kB inactive_anon:9608kB active_file:15928kB inactive_file:39312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121556kB dirty:368kB writeback:4kB shmem:23028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10144kB pagetables:4184kB sec_pagetables:340kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1811.522606][T27886] Node 0 DMA free:3360kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1811.522637][T27886] lowmem_reserve[]: 0 256 256 256 256 [ 1811.522705][T27886] Node 0 DMA32 free:31200kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:48kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:380kB present:1032196kB managed:262372kB mlocked:0kB bounce:0kB free_pcp:1204kB local_pcp:128kB free_cma:0kB [ 1811.522737][T27886] lowmem_reserve[]: 0 0 0 0 0 [ 1811.522755][T27886] Node 1 DMA32 free:62536kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21520kB inactive_anon:9608kB active_file:15928kB inactive_file:39312kB unevictable:0kB writepending:372kB zspages:6628kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3364kB local_pcp:320kB free_cma:0kB [ 1811.522786][T27886] lowmem_reserve[]: 0 0 0 0 0 [ 1811.522804][T27886] Node 0 DMA: 200*4kB (U) 46*8kB (U) 25*16kB (U) 22*32kB (U) 15*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3360kB [ 1811.522874][T27886] Node 0 DMA32: 312*4kB (U) 196*8kB (UME) 146*16kB (UME) 204*32kB (UME) 95*64kB (UME) 45*128kB (UM) 18*256kB (UME) 6*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 31200kB [ 1811.522949][T27886] Node 1 DMA32: 1321*4kB (UME) 465*8kB (UE) 288*16kB (UME) 118*32kB (UME) 135*64kB (UME) 79*128kB (UME) 28*256kB (UME) 33*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 62252kB [ 1811.523029][T27886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.523038][T27886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.523046][T27886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.523054][T27886] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1811.523063][T27886] 21380 total pagecache pages [ 1811.523067][T27886] 1739 pages in swap cache [ 1811.523071][T27886] Free swap = 94416kB [ 1811.523074][T27886] Total swap = 124996kB [ 1811.523079][T27886] 524155 pages RAM [ 1811.523083][T27886] 0 pages HighMem/MovableOnly [ 1811.523087][T27886] 217670 pages reserved [ 1811.523091][T27886] 0 pages cma reserved [ 1812.457364][T27889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1812.533131][T27893] overlayfs: failed to resolve './bus': -2 [ 1813.285935][ T42] kauditd_printk_skb: 240 callbacks suppressed [ 1813.285948][ T42] audit: type=1326 audit(1794417351.487:19443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.286054][ T42] audit: type=1326 audit(1794417351.487:19444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.286448][ T42] audit: type=1326 audit(1794417351.487:19445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.286539][ T42] audit: type=1326 audit(1794417351.487:19446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.286654][ T42] audit: type=1326 audit(1794417351.487:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.286928][ T42] audit: type=1326 audit(1794417351.487:19448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.287024][ T42] audit: type=1326 audit(1794417351.487:19449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.287186][ T42] audit: type=1326 audit(1794417351.487:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.287423][ T42] audit: type=1326 audit(1794417351.487:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.287832][ T42] audit: type=1326 audit(1794417351.487:19452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27909 comm="syz.1.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1813.544245][T19429] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1813.635617][T27916] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1813.714185][T19429] usb 6-1: Using ep0 maxpacket: 16 [ 1813.717663][T19429] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1813.717695][T19429] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1813.724581][T19429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.724601][T19429] usb 6-1: Product: syz [ 1813.724612][T19429] usb 6-1: Manufacturer: syz [ 1813.724623][T19429] usb 6-1: SerialNumber: syz [ 1813.821171][T27921] all (unregistering): Released all slaves [ 1813.945122][T19429] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1813.978602][T19429] usb 6-1: USB disconnect, device number 85 [ 1814.078828][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1814.731786][T27937] overlayfs: failed to resolve './bus': -2 [ 1814.760707][T27939] ±ÿ)”ëfl: renamed from lo [ 1814.837638][T27925] bond3: (slave 04±ÿ)”ëfl): Releasing backup interface [ 1814.845678][T27925] bond3: (slave 04±ÿ)”ëfl): last VLAN challenged slave left bond - VLAN blocking is removed [ 1814.847168][T27925] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1814.891116][T27933] overlayfs: failed to resolve './bus': -2 [ 1815.740890][T27950] all (unregistering): Released all slaves [ 1816.154219][T16083] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1816.334155][T16083] usb 8-1: Using ep0 maxpacket: 16 [ 1816.338404][T16083] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1816.338443][T16083] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1816.344718][T16083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.344741][T16083] usb 8-1: Product: syz [ 1816.344772][T16083] usb 8-1: Manufacturer: syz [ 1816.344784][T16083] usb 8-1: SerialNumber: syz [ 1816.628155][T16083] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1816.906494][T27966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1817.001583][T16083] usb 8-1: USB disconnect, device number 90 [ 1818.081222][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1818.081269][ T1134] ata1.00: irq_stat 0x40000000 [ 1818.081311][ T1134] ata1.00: failed command: READ DMA EXT [ 1818.081348][ T1134] ata1.00: cmd 25/00:30:46:25:01/00:06:00:00:00/e0 tag 30 dma 811008 in [ 1818.081348][ T1134] res 41/04:30:46:25:01/00:06:00:00:00/e0 Emask 0x1 (device error) [ 1818.081438][ T1134] ata1.00: status: { DRDY ERR } [ 1818.081448][ T1134] ata1.00: error: { ABRT } [ 1818.082782][ T1134] ata1.00: configured for UDMA/33 [ 1818.083136][ T1134] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1818.083262][ T1134] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1818.083365][ T1134] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1818.083491][ T1134] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 25 46 00 06 30 00 [ 1818.083764][ T1134] I/O error, dev sda, sector 75078 op 0x0:(READ) flags 0x80700 phys_seg 89 prio class 2 [ 1818.087904][ T1134] ata1: EH complete [ 1818.302567][T27984] nvmet: disable ns before setting buffered_io value. [ 1818.317951][ T42] kauditd_printk_skb: 214 callbacks suppressed [ 1818.318046][ T42] audit: type=1800 audit(1794417356.497:19667): pid=27984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5462" name="buffered_io" dev="configfs" ino=89709 res=0 errno=-22 [ 1818.318331][ T42] audit: type=1800 audit(1794417356.497:19668): pid=27984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5462" name="enable" dev="configfs" ino=89710 res=0 errno=-22 [ 1818.321288][ T42] audit: type=1800 audit(1794417356.517:19669): pid=27984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5462" name="addr_trtype" dev="configfs" ino=89712 res=0 errno=-22 [ 1818.545124][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1818.545166][ T1134] ata1.00: irq_stat 0x40000000 [ 1818.545202][ T1134] ata1.00: failed command: READ DMA EXT [ 1818.545295][ T1134] ata1.00: cmd 25/00:70:e6:4b:01/00:06:00:00:00/e0 tag 30 dma 843776 in [ 1818.545295][ T1134] res 41/04:70:e6:4b:01/00:06:00:00:00/e0 Emask 0x1 (device error) [ 1818.545350][ T1134] ata1.00: status: { DRDY ERR } [ 1818.545385][ T1134] ata1.00: error: { ABRT } [ 1818.550082][ T1134] ata1.00: configured for UDMA/33 [ 1818.552481][ T1134] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1818.552928][ T1134] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1818.553038][ T1134] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1818.553392][ T1134] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 4b e6 00 06 70 00 [ 1818.553472][ T1134] I/O error, dev sda, sector 84966 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1818.603970][ T1134] ata1: EH complete [ 1818.818725][T27984] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1818.868825][ T42] audit: type=1800 audit(1794417357.067:19670): pid=27445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=29942 res=0 errno=-22 [ 1818.872346][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1819.065372][ T42] audit: type=1800 audit(1794417357.267:19671): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405716 res=0 errno=-22 [ 1819.184031][ T9009] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:2f628b87-2704-49ff-8209-459eb74b83a3. [ 1819.199929][T27984] nvme nvme7: creating 4 I/O queues. [ 1819.302910][T27984] nvme nvme7: new ctrl: "testsubsys" [ 1819.343519][ T42] audit: type=1800 audit(1794417357.537:19672): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=405716 res=0 errno=-22 [ 1820.435651][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1820.435710][ T1134] ata1.00: irq_stat 0x40000000 [ 1820.435809][ T1134] ata1.00: failed command: READ DMA EXT [ 1820.435851][ T1134] ata1.00: cmd 25/00:30:06:ac:09/00:05:00:00:00/e0 tag 14 dma 679936 in [ 1820.435851][ T1134] res 41/04:30:06:ac:09/00:05:00:00:00/e0 Emask 0x1 (device error) [ 1820.436231][ T1134] ata1.00: status: { DRDY ERR } [ 1820.436245][ T1134] ata1.00: error: { ABRT } [ 1820.439658][ T1134] ata1.00: configured for UDMA/33 [ 1820.440648][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1820.440847][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1820.441155][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1820.441324][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 09 ac 06 00 05 30 00 [ 1820.441569][ T1134] I/O error, dev sda, sector 633862 op 0x0:(READ) flags 0x80700 phys_seg 165 prio class 2 [ 1820.443472][ T1134] ata1: EH complete [ 1820.890323][T27996] overlayfs: failed to resolve './bus': -2 [ 1820.941129][T27994] overlayfs: failed to resolve './bus': -2 [ 1820.992660][T28000] all (unregistering): Released all slaves [ 1821.360646][T28006] bond1: (slave 04±ÿ)”ëfl): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1821.364171][T28006] bond1: (slave 04±ÿ)”ëfl): Enslaving as an active interface with an up link [ 1821.364283][T28006] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1821.481962][ T42] audit: type=1326 audit(1794417359.677:19673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28011 comm="syz.1.5470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1821.482124][ T42] audit: type=1326 audit(1794417359.677:19674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28011 comm="syz.1.5470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1821.482553][ T42] audit: type=1326 audit(1794417359.677:19675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28011 comm="syz.1.5470" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1821.482685][ T42] audit: type=1326 audit(1794417359.677:19676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28011 comm="syz.1.5470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 1821.744351][T19429] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1822.064288][T19429] usb 6-1: Using ep0 maxpacket: 16 [ 1822.180298][T19429] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1822.180343][T19429] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 1822.405829][T19429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.405857][T19429] usb 6-1: Product: syz [ 1822.405869][T19429] usb 6-1: Manufacturer: syz [ 1822.405882][T19429] usb 6-1: SerialNumber: syz [ 1823.122279][T19429] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1823.167975][T28024] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1823.174612][T19429] usb 6-1: USB disconnect, device number 86 [ 1823.363649][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 1823.363663][ T42] audit: type=1800 audit(1794417361.557:19783): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=406058 res=0 errno=-22 [ 1823.363687][ T42] audit: type=1800 audit(1794417361.557:19784): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=406037 res=0 errno=-22 [ 1823.363710][ T42] audit: type=1800 audit(1794417361.557:19785): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=406059 res=0 errno=-22 [ 1823.614719][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1823.614744][ T1134] ata1.00: irq_stat 0x40000000 [ 1823.614758][ T1134] ata1.00: failed command: READ DMA EXT [ 1823.614768][ T1134] ata1.00: cmd 25/00:c0:3e:3f:01/00:05:00:00:00/e0 tag 14 dma 753664 in [ 1823.614768][ T1134] res 41/04:c0:3e:3f:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 1823.614841][ T1134] ata1.00: status: { DRDY ERR } [ 1823.614854][ T1134] ata1.00: error: { ABRT } [ 1823.615645][ T1134] ata1.00: configured for UDMA/33 [ 1823.615791][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1823.615829][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1823.615859][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1823.615897][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3f 3e 00 05 c0 00 [ 1823.615920][ T1134] I/O error, dev sda, sector 81726 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1823.616031][ T1134] ata1: EH complete [ 1823.868212][ T42] audit: type=1800 audit(1794417362.067:19786): pid=27445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=29632 res=0 errno=-22 [ 1823.875900][T27445] udevd[27445]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1824.423437][T28045] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1824.423455][T28045] PKCS7: Only support pkcs7_signedData type [ 1824.648134][T28049] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1824.826105][T28056] overlayfs: failed to resolve './bus': -2 [ 1826.238008][T28071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1826.358843][T28067] all (unregistering): Released all slaves [ 1826.371262][T28070] ------------[ cut here ]------------ [ 1826.371276][T28070] current->flags & PF_MEMALLOC [ 1826.371284][T28070] WARNING: mm/page_alloc.c:4800 at __alloc_frozen_pages_noprof+0x1d63/0x3280, CPU#3: syz.1.5485/28070 [ 1826.382386][T28070] Modules linked in: [ 1826.384435][T28070] CPU: 3 UID: 0 PID: 28070 Comm: syz.1.5485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.387872][T28070] Tainted: [L]=SOFTLOCKUP [ 1826.389392][T28070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1826.393241][T28070] RIP: 0010:__alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.396283][T28070] Code: 38 d0 7c 08 84 d2 0f 85 ae 12 00 00 65 48 8b 05 eb 3d 41 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6b e7 ff ff 90 <0f> 0b 90 e9 62 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1826.403755][T28070] RSP: 0000:ffffc9000052e4d8 EFLAGS: 00010202 [ 1826.406088][T28070] RAX: ffff88805a114b00 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 1826.409344][T28070] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1826.412468][T28070] RBP: 0000000000008000 R08: 0000000000000001 R09: 000000000000257d [ 1826.416023][T28070] R10: 0000000000000000 R11: 0000000000048c40 R12: ffff88805a114b2c [ 1826.419109][T28070] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff920000a5cb5 [ 1826.422222][T28070] FS: 0000000000000000(0000) GS:ffff88809557e000(0063) knlGS:00000000569f8480 [ 1826.426046][T28070] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1826.428435][T28070] CR2: 00000000f73f3e18 CR3: 0000000059f2d000 CR4: 0000000000352ef0 [ 1826.431033][T28070] Call Trace: [ 1826.432127][T28070] [ 1826.433083][T28070] ? rcu_is_watching+0x13/0xc0 [ 1826.434734][T28070] ? find_held_lock+0x2b/0x80 [ 1826.436258][T28070] ? folio_referenced_one+0x1194/0x1700 [ 1826.438042][T28070] ? folio_referenced_one+0x1194/0x1700 [ 1826.439814][T28070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1826.441798][T28070] ? folio_referenced_one+0x4a1/0x1700 [ 1826.443527][T28070] ? __pfx_folio_referenced_one+0x10/0x10 [ 1826.445420][T28070] ? page_vma_mapped_walk+0x7a3/0x30f0 [ 1826.447133][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.449287][T28070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1826.451865][T28070] ? policy_nodemask+0xed/0x5e0 [ 1826.453548][T28070] alloc_pages_mpol+0x201/0x560 [ 1826.455191][T28070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1826.457226][T28070] ? filemap_get_entry+0x22d/0x450 [ 1826.458892][T28070] ? filemap_get_entry+0x22d/0x450 [ 1826.460610][T28070] folio_alloc_noprof+0x22/0x250 [ 1826.462338][T28070] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1826.464454][T28070] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1826.466596][T28070] ? lock_acquire+0x1d1/0x380 [ 1826.468138][T28070] ? ext4_get_group_info+0x177/0x4b0 [ 1826.470057][T28070] ? find_held_lock+0x2b/0x80 [ 1826.472076][T28070] __filemap_get_folio_mpol+0x64e/0x1230 [ 1826.474387][T28070] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 1826.476389][T28070] ext4_discard_preallocations+0x584/0x10c0 [ 1826.478283][T28070] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1826.480340][T28070] ? __pfx_xa_destroy+0x10/0x10 [ 1826.481880][T28070] ? inode_wait_for_writeback+0x171/0x390 [ 1826.483675][T28070] ? inode_lru_isolate+0x30/0x11d0 [ 1826.485441][T28070] ext4_clear_inode+0x6e/0x280 [ 1826.486944][T28070] ext4_evict_inode+0x1de/0x1890 [ 1826.488538][T28070] ? evict+0x37e/0xad0 [ 1826.489877][T28070] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1826.491575][T28070] evict+0x3c2/0xad0 [ 1826.492817][T28070] ? _raw_spin_unlock+0x28/0x50 [ 1826.494406][T28070] ? __list_lru_walk_one+0x26d/0x550 [ 1826.496114][T28070] ? __pfx_evict+0x10/0x10 [ 1826.497531][T28070] ? xa_load+0x149/0x2c0 [ 1826.499141][T28070] ? xa_load+0x149/0x2c0 [ 1826.500729][T28070] dispose_list+0x117/0x1e0 [ 1826.502313][T28070] prune_icache_sb+0xea/0x150 [ 1826.503929][T28070] ? list_lru_count_one+0x147/0x320 [ 1826.506046][T28070] ? __pfx_prune_icache_sb+0x10/0x10 [ 1826.507818][T28070] super_cache_scan+0x37c/0x560 [ 1826.509417][T28070] do_shrink_slab+0x411/0x1200 [ 1826.510928][T28070] shrink_slab+0xa78/0x12d0 [ 1826.512368][T28070] ? shrink_slab+0x68b/0x12d0 [ 1826.513842][T28070] ? __pfx_shrink_slab+0x10/0x10 [ 1826.515440][T28070] ? page_counter_calculate_protection+0x348/0x730 [ 1826.517516][T28070] shrink_node+0x7c1/0x4410 [ 1826.519070][T28070] ? __pfx_shrink_node+0x10/0x10 [ 1826.520754][T28070] ? queue_work_on+0x11b/0x1e0 [ 1826.522260][T28070] ? lockdep_hardirqs_on+0x7d/0x110 [ 1826.523895][T28070] ? queue_work_on+0x141/0x1e0 [ 1826.525445][T28070] ? do_try_to_free_pages+0x2da/0x1500 [ 1826.527193][T28070] do_try_to_free_pages+0x2da/0x1500 [ 1826.528924][T28070] try_to_free_pages+0x2a0/0x740 [ 1826.530582][T28070] ? __pfx_try_to_free_pages+0x10/0x10 [ 1826.532511][T28070] ? find_held_lock+0x2b/0x80 [ 1826.534622][T28070] ? fs_reclaim_acquire+0x70/0x100 [ 1826.536626][T28070] ? fs_reclaim_acquire+0x70/0x100 [ 1826.538726][T28070] __alloc_frozen_pages_noprof+0x1119/0x3280 [ 1826.540826][T28070] ? zswap_load+0x3f0/0x9f0 [ 1826.542391][T28070] ? swapin_readahead+0xf0/0x260 [ 1826.544518][T28070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1826.546526][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.548147][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.549757][T28070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1826.551963][T28070] ? policy_nodemask+0xed/0x5e0 [ 1826.553551][T28070] alloc_pages_mpol+0x201/0x560 [ 1826.555224][T28070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1826.556973][T28070] ? do_raw_spin_lock+0x128/0x260 [ 1826.558573][T28070] ? find_held_lock+0x2b/0x80 [ 1826.560301][T28070] ? __swap_cache_alloc_folio+0x374/0xc50 [ 1826.562438][T28070] folio_alloc_mpol_noprof+0x36/0x260 [ 1826.564635][T28070] __swap_cache_alloc_folio+0x3d7/0xc50 [ 1826.567017][T28070] ? __pfx___swap_cache_alloc_folio+0x10/0x10 [ 1826.569405][T28070] ? swap_cache_get_folio+0x35c/0x4f0 [ 1826.571470][T28070] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1826.573574][T28070] ? find_held_lock+0x2b/0x80 [ 1826.575483][T28070] ? debug_object_activate+0x343/0x4b0 [ 1826.577472][T28070] ? debug_object_activate+0x343/0x4b0 [ 1826.579614][T28070] swap_cache_read_folio+0x47/0x150 [ 1826.581459][T28070] swap_cluster_readahead+0x477/0x5d0 [ 1826.583301][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.585166][T28070] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1826.587086][T28070] ? lock_acquire+0x1d1/0x380 [ 1826.588605][T28070] swapin_readahead+0xf0/0x260 [ 1826.590561][T28070] ? __pfx_swapin_readahead+0x10/0x10 [ 1826.592795][T28070] ? __pfx_get_swap_device+0x10/0x10 [ 1826.595084][T28070] do_swap_page+0xf95/0x53c0 [ 1826.597046][T28070] ? rcu_is_watching+0x13/0xc0 [ 1826.599029][T28070] ? __pte_offset_map+0x1e9/0x470 [ 1826.601120][T28070] ? __pfx_do_swap_page+0x10/0x10 [ 1826.603256][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.605440][T28070] ? hrtimer_active+0x1c8/0x240 [ 1826.607528][T28070] ? pgd_none+0x9f/0xe0 [ 1826.609283][T28070] ? __pfx_pgd_none+0x10/0x10 [ 1826.611298][T28070] __handle_mm_fault+0x15bd/0x2f60 [ 1826.613474][T28070] ? lock_vma_under_rcu+0x11d/0x590 [ 1826.615794][T28070] ? __pfx___handle_mm_fault+0x10/0x10 [ 1826.618098][T28070] ? lock_vma_under_rcu+0x17c/0x590 [ 1826.620342][T28070] handle_mm_fault+0x363/0xa20 [ 1826.622377][T28070] do_user_addr_fault+0x59c/0x12f0 [ 1826.624662][T28070] exc_page_fault+0x6f/0xd0 [ 1826.626600][T28070] asm_exc_page_fault+0x26/0x30 [ 1826.628666][T28070] RIP: 0023:0xf7086b24 [ 1826.630388][T28070] Code: 82 61 17 00 00 8b 85 b0 fe ff ff 8b 8d dc fe ff ff 8b b5 68 fe ff ff 8b bd 6c fe ff ff 69 c0 84 00 00 00 8d 84 01 ac 8f ee ff <8b> 58 18 8b 50 1c 89 f8 39 de 19 d0 73 2a 8b b9 a0 65 b6 00 8b 81 [ 1826.638165][T28070] RSP: 002b:00000000ffdb16a0 EFLAGS: 00010206 [ 1826.640725][T28070] RAX: 00000000f73f3e00 RBX: 0000000000001c98 RCX: 00000000f741eff4 [ 1826.644020][T28070] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1826.647192][T28070] RBP: 00000000ffdb18e8 R08: 0000000000000000 R09: 0000000000000000 [ 1826.650510][T28070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1826.653843][T28070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1826.657272][T28070] [ 1826.658606][T28070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1826.661552][T28070] CPU: 3 UID: 0 PID: 28070 Comm: syz.1.5485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.666075][T28070] Tainted: [L]=SOFTLOCKUP [ 1826.667915][T28070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1826.672103][T28070] Call Trace: [ 1826.673569][T28070] [ 1826.674835][T28070] dump_stack_lvl+0x100/0x190 [ 1826.676850][T28070] vpanic+0x2dc/0x6f8 [ 1826.678540][T28070] panic+0xd1/0xe0 [ 1826.680146][T28070] ? __pfx_panic+0x10/0x10 [ 1826.682041][T28070] check_panic_on_warn.cold+0x19/0x34 [ 1826.684292][T28070] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.686901][T28070] __warn.cold+0x191/0x321 [ 1826.688795][T28070] __report_bug+0x30f/0x440 [ 1826.690724][T28070] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.693316][T28070] ? __pfx___report_bug+0x10/0x10 [ 1826.695472][T28070] ? lockdep_hardirqs_on+0x7d/0x110 [ 1826.697659][T28070] ? irqentry_exit+0x202/0xab0 [ 1826.699694][T28070] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.702282][T28070] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.704915][T28070] report_bug+0xb3/0x220 [ 1826.706739][T28070] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.709336][T28070] handle_bug+0x16a/0x2a0 [ 1826.711207][T28070] exc_invalid_op+0x17/0x50 [ 1826.713135][T28070] asm_exc_invalid_op+0x1a/0x20 [ 1826.715202][T28070] RIP: 0010:__alloc_frozen_pages_noprof+0x1d63/0x3280 [ 1826.718017][T28070] Code: 38 d0 7c 08 84 d2 0f 85 ae 12 00 00 65 48 8b 05 eb 3d 41 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6b e7 ff ff 90 <0f> 0b 90 e9 62 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1826.725965][T28070] RSP: 0000:ffffc9000052e4d8 EFLAGS: 00010202 [ 1826.728522][T28070] RAX: ffff88805a114b00 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 1826.731844][T28070] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1826.735077][T28070] RBP: 0000000000008000 R08: 0000000000000001 R09: 000000000000257d [ 1826.737705][T28070] R10: 0000000000000000 R11: 0000000000048c40 R12: ffff88805a114b2c [ 1826.740867][T28070] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff920000a5cb5 [ 1826.744038][T28070] ? __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 1826.746511][T28070] ? rcu_is_watching+0x13/0xc0 [ 1826.748110][T28070] ? find_held_lock+0x2b/0x80 [ 1826.749676][T28070] ? folio_referenced_one+0x1194/0x1700 [ 1826.751485][T28070] ? folio_referenced_one+0x1194/0x1700 [ 1826.753276][T28070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1826.755342][T28070] ? folio_referenced_one+0x4a1/0x1700 [ 1826.757122][T28070] ? __pfx_folio_referenced_one+0x10/0x10 [ 1826.758968][T28070] ? page_vma_mapped_walk+0x7a3/0x30f0 [ 1826.761193][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.763349][T28070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1826.765943][T28070] ? policy_nodemask+0xed/0x5e0 [ 1826.768080][T28070] alloc_pages_mpol+0x201/0x560 [ 1826.770167][T28070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1826.772519][T28070] ? filemap_get_entry+0x22d/0x450 [ 1826.774544][T28070] ? filemap_get_entry+0x22d/0x450 [ 1826.776382][T28070] folio_alloc_noprof+0x22/0x250 [ 1826.778213][T28070] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1826.780774][T28070] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1826.783463][T28070] ? lock_acquire+0x1d1/0x380 [ 1826.785207][T28070] ? ext4_get_group_info+0x177/0x4b0 [ 1826.787347][T28070] ? find_held_lock+0x2b/0x80 [ 1826.788835][T28070] __filemap_get_folio_mpol+0x64e/0x1230 [ 1826.790577][T28070] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 1826.792285][T28070] ext4_discard_preallocations+0x584/0x10c0 [ 1826.794124][T28070] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1826.796085][T28070] ? __pfx_xa_destroy+0x10/0x10 [ 1826.797654][T28070] ? inode_wait_for_writeback+0x171/0x390 [ 1826.799446][T28070] ? inode_lru_isolate+0x30/0x11d0 [ 1826.801046][T28070] ext4_clear_inode+0x6e/0x280 [ 1826.802544][T28070] ext4_evict_inode+0x1de/0x1890 [ 1826.804072][T28070] ? evict+0x37e/0xad0 [ 1826.805357][T28070] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1826.807026][T28070] evict+0x3c2/0xad0 [ 1826.808314][T28070] ? _raw_spin_unlock+0x28/0x50 [ 1826.809828][T28070] ? __list_lru_walk_one+0x26d/0x550 [ 1826.811488][T28070] ? __pfx_evict+0x10/0x10 [ 1826.812914][T28070] ? xa_load+0x149/0x2c0 [ 1826.814246][T28070] ? xa_load+0x149/0x2c0 [ 1826.815607][T28070] dispose_list+0x117/0x1e0 [ 1826.817026][T28070] prune_icache_sb+0xea/0x150 [ 1826.818496][T28070] ? list_lru_count_one+0x147/0x320 [ 1826.820130][T28070] ? __pfx_prune_icache_sb+0x10/0x10 [ 1826.821777][T28070] super_cache_scan+0x37c/0x560 [ 1826.823306][T28070] do_shrink_slab+0x411/0x1200 [ 1826.824818][T28070] shrink_slab+0xa78/0x12d0 [ 1826.826265][T28070] ? shrink_slab+0x68b/0x12d0 [ 1826.827757][T28070] ? __pfx_shrink_slab+0x10/0x10 [ 1826.829301][T28070] ? page_counter_calculate_protection+0x348/0x730 [ 1826.831331][T28070] shrink_node+0x7c1/0x4410 [ 1826.832771][T28070] ? __pfx_shrink_node+0x10/0x10 [ 1826.834324][T28070] ? queue_work_on+0x11b/0x1e0 [ 1826.835856][T28070] ? lockdep_hardirqs_on+0x7d/0x110 [ 1826.837465][T28070] ? queue_work_on+0x141/0x1e0 [ 1826.838973][T28070] ? do_try_to_free_pages+0x2da/0x1500 [ 1826.840648][T28070] do_try_to_free_pages+0x2da/0x1500 [ 1826.842300][T28070] try_to_free_pages+0x2a0/0x740 [ 1826.843854][T28070] ? __pfx_try_to_free_pages+0x10/0x10 [ 1826.845745][T28070] ? find_held_lock+0x2b/0x80 [ 1826.847649][T28070] ? fs_reclaim_acquire+0x70/0x100 [ 1826.849659][T28070] ? fs_reclaim_acquire+0x70/0x100 [ 1826.851689][T28070] __alloc_frozen_pages_noprof+0x1119/0x3280 [ 1826.854034][T28070] ? zswap_load+0x3f0/0x9f0 [ 1826.855860][T28070] ? swapin_readahead+0xf0/0x260 [ 1826.857813][T28070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1826.860296][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.862241][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.864216][T28070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1826.866542][T28070] ? policy_nodemask+0xed/0x5e0 [ 1826.868472][T28070] alloc_pages_mpol+0x201/0x560 [ 1826.870377][T28070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1826.872523][T28070] ? do_raw_spin_lock+0x128/0x260 [ 1826.874522][T28070] ? find_held_lock+0x2b/0x80 [ 1826.876388][T28070] ? __swap_cache_alloc_folio+0x374/0xc50 [ 1826.878624][T28070] folio_alloc_mpol_noprof+0x36/0x260 [ 1826.880737][T28070] __swap_cache_alloc_folio+0x3d7/0xc50 [ 1826.882906][T28070] ? __pfx___swap_cache_alloc_folio+0x10/0x10 [ 1826.885313][T28070] ? swap_cache_get_folio+0x35c/0x4f0 [ 1826.887466][T28070] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1826.889689][T28070] ? find_held_lock+0x2b/0x80 [ 1826.891553][T28070] ? debug_object_activate+0x343/0x4b0 [ 1826.893658][T28070] ? debug_object_activate+0x343/0x4b0 [ 1826.895399][T28070] swap_cache_read_folio+0x47/0x150 [ 1826.897127][T28070] swap_cluster_readahead+0x477/0x5d0 [ 1826.898825][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.900402][T28070] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1826.902260][T28070] ? lock_acquire+0x1d1/0x380 [ 1826.903771][T28070] swapin_readahead+0xf0/0x260 [ 1826.905286][T28070] ? __pfx_swapin_readahead+0x10/0x10 [ 1826.906997][T28070] ? __pfx_get_swap_device+0x10/0x10 [ 1826.908683][T28070] do_swap_page+0xf95/0x53c0 [ 1826.910146][T28070] ? rcu_is_watching+0x13/0xc0 [ 1826.911679][T28070] ? __pte_offset_map+0x1e9/0x470 [ 1826.913266][T28070] ? __pfx_do_swap_page+0x10/0x10 [ 1826.914866][T28070] ? __lock_acquire+0x5c0/0x1f40 [ 1826.916465][T28070] ? hrtimer_active+0x1c8/0x240 [ 1826.917998][T28070] ? pgd_none+0x9f/0xe0 [ 1826.919321][T28070] ? __pfx_pgd_none+0x10/0x10 [ 1826.920824][T28070] __handle_mm_fault+0x15bd/0x2f60 [ 1826.922431][T28070] ? lock_vma_under_rcu+0x11d/0x590 [ 1826.924069][T28070] ? __pfx___handle_mm_fault+0x10/0x10 [ 1826.925813][T28070] ? lock_vma_under_rcu+0x17c/0x590 [ 1826.927464][T28070] handle_mm_fault+0x363/0xa20 [ 1826.928974][T28070] do_user_addr_fault+0x59c/0x12f0 [ 1826.930589][T28070] exc_page_fault+0x6f/0xd0 [ 1826.932047][T28070] asm_exc_page_fault+0x26/0x30 [ 1826.933581][T28070] RIP: 0023:0xf7086b24 [ 1826.934905][T28070] Code: 82 61 17 00 00 8b 85 b0 fe ff ff 8b 8d dc fe ff ff 8b b5 68 fe ff ff 8b bd 6c fe ff ff 69 c0 84 00 00 00 8d 84 01 ac 8f ee ff <8b> 58 18 8b 50 1c 89 f8 39 de 19 d0 73 2a 8b b9 a0 65 b6 00 8b 81 [ 1826.942352][T28070] RSP: 002b:00000000ffdb16a0 EFLAGS: 00010206 [ 1826.944730][T28070] RAX: 00000000f73f3e00 RBX: 0000000000001c98 RCX: 00000000f741eff4 [ 1826.947832][T28070] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1826.950736][T28070] RBP: 00000000ffdb18e8 R08: 0000000000000000 R09: 0000000000000000 [ 1826.953522][T28070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1826.956190][T28070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1826.958961][T28070] [ 1826.960654][T28070] Kernel Offset: disabled [ 1826.961845][T28070] Rebooting in 86400 seconds..