last executing test programs: 8m50.217562385s ago: executing program 1 (id=63): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xf88e470f, 0xed}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x800000000000009, 0x400003, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0x800000000c592, 0x1000, 0x10001, 0x3, 0x2000000000000000, 0x4000000000000b3, 0xfffffffeffffff04], 0xeeee0000, 0x201893}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}]}}}}}}, 0x0) 8m49.410159952s ago: executing program 1 (id=68): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) close(0x3) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x20040894) read$char_usb(r1, &(0x7f0000000300)=""/227, 0xe3) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 8m46.731390358s ago: executing program 1 (id=76): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x59) open_by_handle_at(r4, 0x0, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 8m45.218124869s ago: executing program 1 (id=81): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 8m45.026481872s ago: executing program 1 (id=91): chdir(&(0x7f0000000140)='./file0\x00') 8m44.662772813s ago: executing program 1 (id=85): sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f00000003c0)={&(0x7f00000002c0)="a0330a5a2cec6f5960ca94e0d0d85384e69d747262bb79c5663b991b9bb663a58ff3e7d33b5ce6511a0ed2587e4f899f3d0a0588da6440a21b00f78ff517ec54140af1aa375612d8447ba0aaf882e5fc397e7df31acae431b4dc68a050eea530f05ef4f39dd8054a0f5f0c85ac3017ab7f65b8f11f1d72c9f1a679a245", 0x7d}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 8m44.470664212s ago: executing program 32 (id=85): sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f00000003c0)={&(0x7f00000002c0)="a0330a5a2cec6f5960ca94e0d0d85384e69d747262bb79c5663b991b9bb663a58ff3e7d33b5ce6511a0ed2587e4f899f3d0a0588da6440a21b00f78ff517ec54140af1aa375612d8447ba0aaf882e5fc397e7df31acae431b4dc68a050eea530f05ef4f39dd8054a0f5f0c85ac3017ab7f65b8f11f1d72c9f1a679a245", 0x7d}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 5.52554076s ago: executing program 3 (id=3607): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e) 5.30287552s ago: executing program 3 (id=3609): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x15, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4004000) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 5.300091443s ago: executing program 0 (id=3617): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101a00, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x103, 0x80000000, 0x2, 0x10, 0x11, 0x5, 0x79, 0xfffffff9, 0x80008, 0x0, 0x0, 0x1, 0x7, 0x2, 0x4, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x1, 0x8, 0x6, 0xfffff7ff, 0xfffffff8]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000100)) 5.296267688s ago: executing program 4 (id=3610): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x786, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000400), 0x8) listen(0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsmount(r5, 0x0, 0x0) setreuid(0x0, 0xee00) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) 4.186754867s ago: executing program 4 (id=3611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) r1 = socket(0x9, 0x3, 0x8) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) syz_open_dev$vim2m(0x0, 0x800, 0x2) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000a00)) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 3.491293508s ago: executing program 3 (id=3612): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c2943657274696669636174", 0x49, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r3}, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) 3.462052576s ago: executing program 0 (id=3614): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='active', 0x6) write(r1, &(0x7f0000000540)='raid0', 0x5) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x932, 0x0) 3.427603908s ago: executing program 2 (id=3615): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0x4}) close(0x3) 3.149039875s ago: executing program 2 (id=3616): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 3.134504257s ago: executing program 4 (id=3618): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) 2.990737256s ago: executing program 0 (id=3619): socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) close(0x3) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x41) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$inet6(0xa, 0x3, 0x0) r1 = openat$dir(0xffffff9c, 0x0, 0x40800, 0x320b7f360bdc35cd) name_to_handle_at(r1, 0x0, 0x0, 0xfffffffffffffffe, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, 0x0, 0x0, 0x1200810, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) splice(r2, 0x0, r2, 0x0, 0xa99, 0xb) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 2.982608004s ago: executing program 2 (id=3620): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) 2.982124507s ago: executing program 4 (id=3621): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x24020400) 2.722101487s ago: executing program 0 (id=3622): openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000110000', 0x49) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r2 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, 0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, 0x0, r4, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) io_setup(0x239f, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 2.074380497s ago: executing program 3 (id=3623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_register(0xffffffffffffffff, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xfffffffffffffffb, 0x3a, '\xa2%:', 0x3a, '', 0x3a, './dev/sda1', 0x3a, [0x43]}, 0x2e) r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) 1.615867544s ago: executing program 2 (id=3624): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101a00, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x103, 0x80000000, 0x2, 0x10, 0x11, 0x5, 0x79, 0xfffffff9, 0x80008, 0x0, 0x0, 0x1, 0x7, 0x2, 0x4, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x1, 0x8, 0x6, 0xfffff7ff, 0xfffffff8]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000100)) 680.897245ms ago: executing program 2 (id=3625): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0x4}) close(0x3) 311.591319ms ago: executing program 0 (id=3626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 225.361272ms ago: executing program 3 (id=3627): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='65536', 0x5) 224.891207ms ago: executing program 2 (id=3628): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='active', 0x6) write(r1, &(0x7f0000000540)='raid0', 0x5) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x932, 0x0) 190.503954ms ago: executing program 4 (id=3629): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 118.150286ms ago: executing program 0 (id=3630): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x64842, 0x86) pwritev2(r0, &(0x7f00000002c0), 0x0, 0x7800, 0x0, 0x3) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8, "23ec5e", "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"}}, 0x110) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2}, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000400)=""/92, 0x5c, 0x4000000000000f3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) acct(0x0) 117.980347ms ago: executing program 4 (id=3631): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xa, &(0x7f00000001c0)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) connect$tipc(r1, 0x0, 0x0) 0s ago: executing program 3 (id=3632): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) connect$llc(r1, 0x0, 0x0) syz_emit_vhci(0x0, 0x11) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000000000000000000000000061198c00000000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x3e, r5}, 0x5) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) kernel console output (not intermixed with test programs): kdep_init_map_type+0x5c/0x250 [ 491.196075][T19457] loop_add+0x1fe/0xb60 [ 491.196100][T19457] ? __pfx_loop_add+0x10/0x10 [ 491.196139][T19457] ? __fget_files+0x34/0x3d0 [ 491.196163][T19457] ? find_held_lock+0x2b/0x80 [ 491.196183][T19457] ? __fget_files+0x215/0x3d0 [ 491.196208][T19457] loop_control_ioctl+0xae/0x620 [ 491.196234][T19457] ? __pfx_loop_control_ioctl+0x10/0x10 [ 491.196260][T19457] ? __pfx_loop_control_ioctl+0x10/0x10 [ 491.196287][T19457] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 491.196312][T19457] __do_fast_syscall_32+0x13a/0x8b0 [ 491.196338][T19457] do_fast_syscall_32+0x32/0x70 [ 491.196360][T19457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.196384][T19457] RIP: 0023:0xf709efec [ 491.196406][T19457] Code: Unable to access opcode bytes at 0xf709efc2. [ 491.196439][T19457] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 491.196460][T19457] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 491.196475][T19457] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.196487][T19457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.196500][T19457] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 491.196512][T19457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.196540][T19457] [ 491.306766][ T6186] usb 5-1: USB disconnect, device number 21 [ 491.310979][ T6186] usblp0: removed [ 491.378514][ T2449] usb 8-1: usb_control_msg returned -32 [ 491.378552][ T2449] usbtmc 8-1:16.0: can't read capabilities [ 492.148866][T19458] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 492.156159][T19458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.158240][T19458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.661495][ T5830] usb 8-1: USB disconnect, device number 26 [ 493.730011][T19463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 493.730037][T19463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.730875][T19463] vhci_hcd vhci_hcd.0: Device attached [ 493.744644][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 493.744709][T19464] bridge_slave_1: left allmulticast mode [ 493.744723][T19464] bridge_slave_1: left promiscuous mode [ 493.744848][T19464] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.750389][T19464] bridge_slave_0: left allmulticast mode [ 493.750407][T19464] bridge_slave_0: left promiscuous mode [ 493.750540][T19464] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.828313][T19468] FAULT_INJECTION: forcing a failure. [ 493.828313][T19468] name failslab, interval 1, probability 0, space 0, times 0 [ 493.828337][T19468] CPU: 2 UID: 0 PID: 19468 Comm: syz.0.3188 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.828353][T19468] Tainted: [L]=SOFTLOCKUP [ 493.828358][T19468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.828365][T19468] Call Trace: [ 493.828369][T19468] [ 493.828374][T19468] dump_stack_lvl+0x100/0x190 [ 493.828392][T19468] should_fail_ex.cold+0x5/0xa [ 493.828434][T19468] should_failslab+0xc2/0x120 [ 493.828452][T19468] __kmalloc_cache_node_noprof+0x94/0x720 [ 493.828471][T19468] ? sbitmap_queue_init_node+0x291/0x4a0 [ 493.828488][T19468] sbitmap_queue_init_node+0x291/0x4a0 [ 493.828504][T19468] blk_mq_init_tags+0x184/0x300 [ 493.828518][T19468] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 493.828539][T19468] ? blk_mq_update_queue_map+0x227/0x3a0 [ 493.828553][T19468] blk_mq_alloc_tag_set+0x848/0x1330 [ 493.828575][T19468] loop_add+0x3b7/0xb60 [ 493.828589][T19468] ? __pfx_loop_add+0x10/0x10 [ 493.828611][T19468] ? __fget_files+0x34/0x3d0 [ 493.828625][T19468] ? find_held_lock+0x2b/0x80 [ 493.828642][T19468] ? __fget_files+0x215/0x3d0 [ 493.828657][T19468] loop_control_ioctl+0xae/0x620 [ 493.828673][T19468] ? __pfx_loop_control_ioctl+0x10/0x10 [ 493.828691][T19468] ? __pfx_loop_control_ioctl+0x10/0x10 [ 493.828707][T19468] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 493.828722][T19468] __do_fast_syscall_32+0x13a/0x8b0 [ 493.828739][T19468] do_fast_syscall_32+0x32/0x70 [ 493.828753][T19468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.828768][T19468] RIP: 0023:0xf70befec [ 493.828781][T19468] Code: Unable to access opcode bytes at 0xf70befc2. [ 493.828786][T19468] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 493.828797][T19468] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 493.828804][T19468] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.828812][T19468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.828819][T19468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.828826][T19468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.828840][T19468] [ 493.828910][T19468] blk-mq: reduced tag depth (128 -> 64) [ 493.977533][ T30] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 494.037139][ T5109] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 494.187880][ T5109] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.188637][ T5109] usb 7-1: config 0 has no interfaces? [ 494.188663][ T5109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.190804][ T5109] usb 7-1: config 0 descriptor?? [ 494.281577][T19474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.407248][T19474] md: could not open device unknown-block(1,0). [ 494.461793][T19479] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.495383][ T5850] usb 7-1: USB disconnect, device number 20 [ 494.507355][T19469] usb 41-1: recv xbuf, 0 [ 494.508375][ T5787] vhci_hcd vhci_hcd.2: stop threads [ 494.508419][ T5787] vhci_hcd vhci_hcd.2: release socket [ 494.508529][ T5787] vhci_hcd vhci_hcd.2: disconnect device [ 494.599856][ T43] audit: type=1800 audit(1790384766.019:131): pid=19477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3183" name="file0" dev="overlay" ino=4912 res=0 errno=0 [ 494.672508][T19479] md/raid:md0: not clean -- starting background reconstruction [ 494.672777][T19479] md/raid:md0: device ram0 operational as raid disk 0 [ 494.685587][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 494.711847][T19479] md/raid:md0: cannot start dirty degraded array. [ 494.715750][T19485] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 494.715773][T19485] CPU: 2 UID: 0 PID: 19485 Comm: syz.4.3185 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.715801][T19485] Tainted: [L]=SOFTLOCKUP [ 494.715808][T19485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.715820][T19485] Call Trace: [ 494.715828][T19485] [ 494.715836][T19485] dump_stack_lvl+0x100/0x190 [ 494.715866][T19485] sysfs_warn_dup.cold+0x1c/0x28 [ 494.715897][T19485] sysfs_create_dir_ns+0x24b/0x2b0 [ 494.715938][T19485] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 494.715960][T19485] ? find_held_lock+0x2b/0x80 [ 494.715982][T19485] ? kobject_add_internal+0x25f/0x930 [ 494.716009][T19485] ? kobject_add_internal+0x25f/0x930 [ 494.716038][T19485] ? class_dir_child_ns_type+0xd/0x60 [ 494.716060][T19485] kobject_add_internal+0x2c8/0x930 [ 494.716094][T19485] kobject_add+0x16a/0x1e0 [ 494.716120][T19485] ? __pfx_kobject_add+0x10/0x10 [ 494.716149][T19485] ? get_device_parent+0x1b3/0x4c0 [ 494.716181][T19485] ? kobject_put+0xb9/0x640 [ 494.716213][T19485] device_add+0x294/0x1970 [ 494.716234][T19485] ? lockdep_init_map_type+0x5c/0x250 [ 494.716262][T19485] ? __pfx_device_add+0x10/0x10 [ 494.716280][T19485] ? lockdep_init_map_type+0x5c/0x250 [ 494.716308][T19485] ? __init_waitqueue_head+0xca/0x150 [ 494.716346][T19485] tty_register_device_attr+0x388/0x7f0 [ 494.716375][T19485] ? lockdep_init_map_type+0x5c/0x250 [ 494.716441][T19485] ? __pfx_tty_register_device_attr+0x10/0x10 [ 494.716478][T19485] ? tty_port_init+0x156/0x1c0 [ 494.716513][T19485] gsm_activate_mux+0x155/0x2a0 [ 494.716545][T19485] gsmld_ioctl+0xbbc/0x15c0 [ 494.716574][T19485] ? __pfx_gsmld_ioctl+0x10/0x10 [ 494.716613][T19485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.716647][T19485] ? __pfx_gsmld_ioctl+0x10/0x10 [ 494.716666][T19485] tty_compat_ioctl+0x396/0x420 [ 494.716695][T19485] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 494.716724][T19485] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 494.716748][T19485] __do_fast_syscall_32+0x13a/0x8b0 [ 494.716775][T19485] do_fast_syscall_32+0x32/0x70 [ 494.716799][T19485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.716824][T19485] RIP: 0023:0xf702efec [ 494.716845][T19485] Code: Unable to access opcode bytes at 0xf702efc2. [ 494.716854][T19485] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 494.716873][T19485] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000404c4701 [ 494.716886][T19485] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.716898][T19485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.716910][T19485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 494.716921][T19485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.716947][T19485] [ 494.847144][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 494.851342][T19485] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.279188][T19479] md/raid:md0: failed to run raid set. [ 495.279205][T19479] md: pers->run() failed ... [ 495.348307][T19488] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 495.370451][T19490] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 495.385743][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 495.405350][T19494] FAULT_INJECTION: forcing a failure. [ 495.405350][T19494] name failslab, interval 1, probability 0, space 0, times 0 [ 495.405383][T19494] CPU: 0 UID: 0 PID: 19494 Comm: syz.3.3198 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.405407][T19494] Tainted: [L]=SOFTLOCKUP [ 495.405415][T19494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.405427][T19494] Call Trace: [ 495.405434][T19494] [ 495.405444][T19494] dump_stack_lvl+0x100/0x190 [ 495.405476][T19494] should_fail_ex.cold+0x5/0xa [ 495.405525][T19494] should_failslab+0xc2/0x120 [ 495.405554][T19494] kmem_cache_alloc_noprof+0x92/0x6a0 [ 495.405579][T19494] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 495.405614][T19494] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 495.405647][T19494] idr_get_free+0x52e/0xa00 [ 495.405678][T19494] idr_alloc_u32+0x1ac/0x320 [ 495.405703][T19494] ? __pfx_idr_alloc_u32+0x10/0x10 [ 495.405727][T19494] ? __pfx___debug_object_init+0x10/0x10 [ 495.405758][T19494] idr_alloc+0xc0/0x130 [ 495.405779][T19494] ? __pfx_idr_alloc+0x10/0x10 [ 495.405800][T19494] ? lockdep_init_map_type+0x5c/0x250 [ 495.405834][T19494] loop_add+0x1fe/0xb60 [ 495.405856][T19494] ? __pfx_loop_add+0x10/0x10 [ 495.405894][T19494] ? __fget_files+0x34/0x3d0 [ 495.405918][T19494] ? find_held_lock+0x2b/0x80 [ 495.405939][T19494] ? __fget_files+0x215/0x3d0 [ 495.405962][T19494] loop_control_ioctl+0xae/0x620 [ 495.405988][T19494] ? __pfx_loop_control_ioctl+0x10/0x10 [ 495.406018][T19494] ? __pfx_loop_control_ioctl+0x10/0x10 [ 495.406043][T19494] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 495.406067][T19494] __do_fast_syscall_32+0x13a/0x8b0 [ 495.406091][T19494] do_fast_syscall_32+0x32/0x70 [ 495.406118][T19494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.406142][T19494] RIP: 0023:0xf7fa7fec [ 495.406162][T19494] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 495.406172][T19494] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 495.406190][T19494] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 495.406203][T19494] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.406216][T19494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.406229][T19494] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.406242][T19494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.406269][T19494] [ 495.626107][T19488] md/raid:md0: not clean -- starting background reconstruction [ 495.626325][T19488] md/raid:md0: device ram0 operational as raid disk 0 [ 495.639607][T19488] md/raid:md0: cannot start dirty degraded array. [ 495.821825][T19488] md/raid:md0: failed to run raid set. [ 495.821838][T19488] md: pers->run() failed ... [ 495.823944][T19490] md: could not open device unknown-block(1,0). [ 495.856004][T19501] md/raid:md0: not clean -- starting background reconstruction [ 495.856286][T19501] md/raid:md0: device ram0 operational as raid disk 0 [ 495.870702][T19501] md/raid:md0: cannot start dirty degraded array. [ 496.022682][T19501] md/raid:md0: failed to run raid set. [ 496.022701][T19501] md: pers->run() failed ... [ 496.238617][T19508] ubi0: attaching mtd0 [ 496.333733][T19508] ubi0: scanning is finished [ 496.333763][T19508] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 496.389028][T19516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 496.518403][T19508] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 496.548920][T19516] md/raid:md0: not clean -- starting background reconstruction [ 496.549191][T19516] md/raid:md0: device ram0 operational as raid disk 0 [ 496.563345][T19516] md/raid:md0: cannot start dirty degraded array. [ 496.567197][ T2449] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 496.688478][T19523] device-mapper: table: 248:0: thin-pool: Error getting data device (-ENXIO) [ 496.688502][T19523] device-mapper: ioctl: error adding target to table [ 496.689643][T19523] device-mapper: ioctl: The device has no table. [ 496.727214][ T2449] usb 9-1: Using ep0 maxpacket: 8 [ 496.727977][ T2449] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 496.728954][ T2449] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 496.728992][ T2449] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.729011][ T2449] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 496.729031][ T2449] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 496.729050][ T2449] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.729082][ T2449] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.761490][T19516] md/raid:md0: failed to run raid set. [ 496.761507][T19516] md: pers->run() failed ... [ 496.964017][ T2449] usb 9-1: usb_control_msg returned -32 [ 496.964057][ T2449] usbtmc 9-1:16.0: can't read capabilities [ 497.329273][T19534] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.387718][T19534] md: could not open device unknown-block(1,0). [ 497.425811][T19534] md/raid:md0: not clean -- starting background reconstruction [ 497.426087][T19534] md/raid:md0: device ram0 operational as raid disk 0 [ 497.449214][T19534] md/raid:md0: cannot start dirty degraded array. [ 497.528256][T19540] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.609828][T19534] md/raid:md0: failed to run raid set. [ 497.609846][T19534] md: pers->run() failed ... [ 497.637385][T19540] md: could not open device unknown-block(1,0). [ 497.713433][T19545] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.719092][T19548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.743472][T19542] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 497.745302][T19549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.745858][T19549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.900696][T19555] md/raid:md0: not clean -- starting background reconstruction [ 497.900999][T19555] md/raid:md0: device ram0 operational as raid disk 0 [ 497.927958][T19555] md/raid:md0: cannot start dirty degraded array. [ 498.459283][T19555] md/raid:md0: failed to run raid set. [ 498.459302][T19555] md: pers->run() failed ... [ 498.459735][T19545] md: could not open device unknown-block(1,0). [ 498.460006][T19554] md: could not open device unknown-block(1,0). [ 498.523604][T19563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.708496][T19563] md/raid:md0: not clean -- starting background reconstruction [ 498.708788][T19563] md/raid:md0: device ram0 operational as raid disk 0 [ 498.729724][T19563] md/raid:md0: cannot start dirty degraded array. [ 498.908347][T19563] md/raid:md0: failed to run raid set. [ 498.908361][T19563] md: pers->run() failed ... [ 499.433443][T19578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 499.446941][ T30] usb 9-1: USB disconnect, device number 19 [ 499.564244][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 499.568693][T19578] md: could not open device unknown-block(1,0). [ 499.892819][T19578] md/raid:md0: not clean -- starting background reconstruction [ 499.893113][T19578] md/raid:md0: device ram0 operational as raid disk 0 [ 499.942285][T19578] md/raid:md0: cannot start dirty degraded array. [ 500.029082][T19586] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 500.130173][T19578] md/raid:md0: failed to run raid set. [ 500.130191][T19578] md: pers->run() failed ... [ 500.157702][T19586] md: could not open device unknown-block(1,0). [ 500.205784][T19591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 500.212460][T19589] loop1: detected capacity change from 0 to 65536 [ 500.310419][T19595] device-mapper: ioctl: The device has no table. [ 500.316034][T19594] blktrace: Concurrent blktraces are not allowed on sg0 [ 500.397508][T19591] md: could not open device unknown-block(1,0). [ 500.581019][ T43] audit: type=1800 audit(1790384771.989:132): pid=19599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3215" name="file0" dev="overlay" ino=4989 res=0 errno=0 [ 500.813751][T19589] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 500.813778][T19589] device-mapper: ioctl: error adding target to table [ 501.032405][T19606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 501.196223][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.196270][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.635168][T19609] md/raid:md0: not clean -- starting background reconstruction [ 501.635441][T19609] md/raid:md0: device ram0 operational as raid disk 0 [ 501.648332][ T2449] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 501.652124][T19609] md/raid:md0: cannot start dirty degraded array. [ 501.797050][ T2449] usb 5-1: Using ep0 maxpacket: 8 [ 501.797767][ T2449] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.798747][ T2449] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 501.798788][ T2449] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.798809][ T2449] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.798831][ T2449] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.798853][ T2449] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.798886][ T2449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.928220][T19609] md/raid:md0: failed to run raid set. [ 501.928233][T19609] md: pers->run() failed ... [ 502.037802][ T2449] usb 5-1: usb_control_msg returned -32 [ 502.037826][ T2449] usbtmc 5-1:16.0: can't read capabilities [ 502.300295][ T5751] Bluetooth: hci3: command 0x0406 tx timeout [ 502.994537][T19626] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 503.114071][T19604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.120423][T19604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.727966][T19631] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 503.887317][T19631] md: could not open device unknown-block(1,0). [ 503.938251][T19636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 503.944785][T19631] md/raid:md0: not clean -- starting background reconstruction [ 503.945393][T19631] md/raid:md0: device ram0 operational as raid disk 0 [ 503.959923][T19631] md/raid:md0: cannot start dirty degraded array. [ 504.009549][T19642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.109191][T19631] md/raid:md0: failed to run raid set. [ 504.109208][T19631] md: pers->run() failed ... [ 504.113942][T19645] md: could not open device unknown-block(1,0). [ 504.148212][T19642] md: could not open device unknown-block(1,0). [ 504.200829][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 504.202432][T19648] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.245833][ T5109] usb 5-1: USB disconnect, device number 22 [ 504.396591][T19648] md/raid:md0: not clean -- starting background reconstruction [ 504.396873][T19648] md/raid:md0: device ram0 operational as raid disk 0 [ 504.447131][T19648] md/raid:md0: cannot start dirty degraded array. [ 504.649782][T19648] md/raid:md0: failed to run raid set. [ 504.649799][T19648] md: pers->run() failed ... [ 504.952423][T19661] 0x000000000001-0x000000010001 : "" [ 505.141278][T19661] ftl_cs: FTL header not found. [ 505.475145][T19665] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 505.617300][T19677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 505.647290][T19665] md: could not open device unknown-block(1,0). [ 505.847930][T19665] md/raid:md0: not clean -- starting background reconstruction [ 505.848206][T19665] md/raid:md0: device ram0 operational as raid disk 0 [ 505.884361][T19665] md/raid:md0: cannot start dirty degraded array. [ 506.102395][T19665] md/raid:md0: failed to run raid set. [ 506.102408][T19665] md: pers->run() failed ... [ 506.102781][T19683] md: could not open device unknown-block(1,0). [ 506.271279][T19689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.272109][T19690] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.467782][T19689] md/raid:md0: not clean -- starting background reconstruction [ 506.468050][T19689] md/raid:md0: device ram0 operational as raid disk 0 [ 506.491803][T19689] md/raid:md0: cannot start dirty degraded array. [ 506.585465][T19699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.777440][T19689] md/raid:md0: failed to run raid set. [ 506.777453][T19689] md: pers->run() failed ... [ 506.778265][T19690] md: could not open device unknown-block(1,0). [ 506.778430][T19692] md: could not open device unknown-block(1,0). [ 506.819204][T19699] md: could not open device unknown-block(1,0). [ 506.844489][T19706] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.867843][T19708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.904760][T19712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.996417][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 507.049848][T19706] md/raid:md0: not clean -- starting background reconstruction [ 507.050142][T19706] md/raid:md0: device ram0 operational as raid disk 0 [ 507.062149][T19706] md/raid:md0: cannot start dirty degraded array. [ 507.270332][T19706] md/raid:md0: failed to run raid set. [ 507.270352][T19706] md: pers->run() failed ... [ 507.301418][T19720] md/raid:md0: not clean -- starting background reconstruction [ 507.301844][T19720] md/raid:md0: device ram0 operational as raid disk 0 [ 507.316313][T19720] md/raid:md0: cannot start dirty degraded array. [ 507.501516][T19720] md/raid:md0: failed to run raid set. [ 507.501534][T19720] md: pers->run() failed ... [ 507.501797][T19713] md: could not open device unknown-block(1,0). [ 507.501925][T19715] md: could not open device unknown-block(1,0). [ 507.502143][T19722] md: could not open device unknown-block(1,0). [ 507.632264][T19731] 0x000000000001-0x000000010001 : "" [ 507.654819][T19732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 507.656890][T19734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 507.687478][T19731] ftl_cs: FTL header not found. [ 507.889077][T19740] md/raid:md0: not clean -- starting background reconstruction [ 507.889799][T19740] md/raid:md0: device ram0 operational as raid disk 0 [ 507.929578][T19740] md/raid:md0: cannot start dirty degraded array. [ 508.023121][T19748] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 508.090189][T19740] md/raid:md0: failed to run raid set. [ 508.090201][T19740] md: pers->run() failed ... [ 508.090403][T19734] md: could not open device unknown-block(1,0). [ 508.090554][T19739] md: could not open device unknown-block(1,0). [ 508.120481][T19748] md: could not open device unknown-block(1,0). [ 508.176241][T19754] FAULT_INJECTION: forcing a failure. [ 508.176241][T19754] name failslab, interval 1, probability 0, space 0, times 0 [ 508.176274][T19754] CPU: 0 UID: 0 PID: 19754 Comm: syz.4.3250 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.176320][T19754] Tainted: [L]=SOFTLOCKUP [ 508.176352][T19754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 508.176365][T19754] Call Trace: [ 508.176374][T19754] [ 508.176383][T19754] dump_stack_lvl+0x100/0x190 [ 508.176417][T19754] should_fail_ex.cold+0x5/0xa [ 508.176444][T19754] should_failslab+0xc2/0x120 [ 508.176469][T19754] kmem_cache_alloc_noprof+0x92/0x6a0 [ 508.176494][T19754] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 508.176540][T19754] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 508.176577][T19754] idr_get_free+0x52e/0xa00 [ 508.176609][T19754] idr_alloc_u32+0x1ac/0x320 [ 508.176634][T19754] ? __pfx_idr_alloc_u32+0x10/0x10 [ 508.176660][T19754] ? __pfx___debug_object_init+0x10/0x10 [ 508.176697][T19754] idr_alloc+0xc0/0x130 [ 508.176718][T19754] ? __pfx_idr_alloc+0x10/0x10 [ 508.176741][T19754] ? lockdep_init_map_type+0x5c/0x250 [ 508.176774][T19754] loop_add+0x1fe/0xb60 [ 508.176800][T19754] ? __pfx_loop_add+0x10/0x10 [ 508.176841][T19754] ? __fget_files+0x34/0x3d0 [ 508.176865][T19754] ? find_held_lock+0x2b/0x80 [ 508.176886][T19754] ? __fget_files+0x215/0x3d0 [ 508.176912][T19754] loop_control_ioctl+0xae/0x620 [ 508.176941][T19754] ? __pfx_loop_control_ioctl+0x10/0x10 [ 508.176973][T19754] ? __pfx_loop_control_ioctl+0x10/0x10 [ 508.176999][T19754] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 508.177022][T19754] __do_fast_syscall_32+0x13a/0x8b0 [ 508.177047][T19754] do_fast_syscall_32+0x32/0x70 [ 508.177071][T19754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.177093][T19754] RIP: 0023:0xf702efec [ 508.177113][T19754] Code: Unable to access opcode bytes at 0xf702efc2. [ 508.177123][T19754] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 508.177142][T19754] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 508.177156][T19754] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.177168][T19754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.177181][T19754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 508.177194][T19754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.177221][T19754] [ 508.851041][T19760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 509.047303][T19760] md: could not open device unknown-block(1,0). [ 509.177105][T19768] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 509.398077][T19768] md: could not open device unknown-block(1,0). [ 509.943407][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'. [ 509.996668][T19768] md/raid:md0: not clean -- starting background reconstruction [ 509.998456][T19768] md/raid:md0: device ram0 operational as raid disk 0 [ 510.302245][T19779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 510.310430][T19768] md/raid:md0: couldn't allocate thread. [ 510.324608][T19782] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 510.921406][T19768] md: pers->run() failed ... [ 510.923294][T19789] md: could not open device unknown-block(1,0). [ 511.057474][T19798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 511.061086][T19799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 511.127143][T19804] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 511.257423][T19799] md/raid:md0: not clean -- starting background reconstruction [ 511.257708][T19799] md/raid:md0: device ram0 operational as raid disk 0 [ 511.273418][T19799] md/raid:md0: cannot start dirty degraded array. [ 511.449466][T19799] md/raid:md0: failed to run raid set. [ 511.449490][T19799] md: pers->run() failed ... [ 511.480763][T19801] md/raid:md0: not clean -- starting background reconstruction [ 511.481044][T19801] md/raid:md0: device ram0 operational as raid disk 0 [ 511.502391][T19801] md/raid:md0: cannot start dirty degraded array. [ 511.589180][T19801] md/raid:md0: failed to run raid set. [ 511.589197][T19801] md: pers->run() failed ... [ 511.589608][T19798] md: could not open device unknown-block(1,0). [ 511.589773][T19805] md: could not open device unknown-block(1,0). [ 511.590225][T19812] md: could not open device unknown-block(1,0). [ 511.700727][T19820] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 511.798154][T19820] md: could not open device unknown-block(1,0). [ 511.977087][ T5109] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 512.005162][T19829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.006711][T19831] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.201366][ T5109] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 512.203245][ T5109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.203387][ T5109] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 512.203582][ T5109] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.206597][ T5109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 512.206662][ T5109] usb 5-1: Product: syz [ 512.206719][ T5109] usb 5-1: Manufacturer: syz [ 512.218872][T19836] md/raid:md0: not clean -- starting background reconstruction [ 512.219150][T19836] md/raid:md0: device ram0 operational as raid disk 0 [ 512.224539][T19818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 512.232629][ T5109] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 512.246302][T19836] md/raid:md0: cannot start dirty degraded array. [ 512.277614][ T5109] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 512.447246][ T5816] usb 5-1: USB disconnect, device number 23 [ 512.452306][ T5816] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 512.452853][ T5816] garmin_gps 5-1:1.0: device disconnected [ 512.488881][T19836] md/raid:md0: failed to run raid set. [ 512.488990][T19836] md: pers->run() failed ... [ 512.489132][T19831] md: could not open device unknown-block(1,0). [ 512.489237][T19835] md: could not open device unknown-block(1,0). [ 512.566695][T19844] FAULT_INJECTION: forcing a failure. [ 512.566695][T19844] name failslab, interval 1, probability 0, space 0, times 0 [ 512.566730][T19844] CPU: 0 UID: 0 PID: 19844 Comm: syz.2.3271 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.566783][T19844] Tainted: [L]=SOFTLOCKUP [ 512.566792][T19844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.566804][T19844] Call Trace: [ 512.566813][T19844] [ 512.566822][T19844] dump_stack_lvl+0x100/0x190 [ 512.566853][T19844] should_fail_ex.cold+0x5/0xa [ 512.566886][T19844] should_failslab+0xc2/0x120 [ 512.566912][T19844] __kvmalloc_node_noprof+0x113/0x9b0 [ 512.566955][T19844] ? sbitmap_init_node+0x1cc/0x720 [ 512.566983][T19844] sbitmap_init_node+0x1cc/0x720 [ 512.567006][T19844] ? __kmalloc_cache_node_noprof+0x231/0x720 [ 512.567031][T19844] sbitmap_queue_init_node+0x40/0x4a0 [ 512.567057][T19844] blk_mq_init_tags+0x184/0x300 [ 512.567082][T19844] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 512.567115][T19844] ? blk_mq_update_queue_map+0x227/0x3a0 [ 512.567140][T19844] blk_mq_alloc_tag_set+0x848/0x1330 [ 512.567178][T19844] loop_add+0x3b7/0xb60 [ 512.567202][T19844] ? __pfx_loop_add+0x10/0x10 [ 512.567238][T19844] ? __fget_files+0x34/0x3d0 [ 512.567261][T19844] ? find_held_lock+0x2b/0x80 [ 512.567282][T19844] ? __fget_files+0x215/0x3d0 [ 512.567307][T19844] loop_control_ioctl+0xae/0x620 [ 512.567332][T19844] ? __pfx_loop_control_ioctl+0x10/0x10 [ 512.567361][T19844] ? __pfx_loop_control_ioctl+0x10/0x10 [ 512.567386][T19844] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 512.567410][T19844] __do_fast_syscall_32+0x13a/0x8b0 [ 512.567437][T19844] do_fast_syscall_32+0x32/0x70 [ 512.567459][T19844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.567485][T19844] RIP: 0023:0xf709efec [ 512.567506][T19844] Code: Unable to access opcode bytes at 0xf709efc2. [ 512.567515][T19844] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 512.567534][T19844] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 512.567546][T19844] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.567558][T19844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.567571][T19844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.567583][T19844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.567609][T19844] [ 512.570474][T19844] blk-mq: reduced tag depth (128 -> 64) [ 512.657707][T19842] md: could not open device unknown-block(1,0). [ 512.673978][T19848] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.693486][T19842] md/raid:md0: not clean -- starting background reconstruction [ 512.693755][T19842] md/raid:md0: device ram0 operational as raid disk 0 [ 512.708406][T19842] md/raid:md0: cannot start dirty degraded array. [ 512.779890][T19853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.919172][T19842] md/raid:md0: failed to run raid set. [ 512.919190][T19842] md: pers->run() failed ... [ 512.919689][T19856] md: could not open device unknown-block(1,0). [ 512.936564][T19858] md/raid:md0: not clean -- starting background reconstruction [ 512.936807][T19858] md/raid:md0: device ram0 operational as raid disk 0 [ 512.946184][T19858] md/raid:md0: cannot start dirty degraded array. [ 512.995217][T19862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.035047][T19864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.118490][T19858] md/raid:md0: failed to run raid set. [ 513.118503][T19858] md: pers->run() failed ... [ 513.118611][T19853] md: could not open device unknown-block(1,0). [ 513.137731][T19864] md: could not open device unknown-block(1,0). [ 513.137826][T19862] md: could not open device unknown-block(1,0). [ 513.161732][T19862] md/raid:md0: not clean -- starting background reconstruction [ 513.161887][T19862] md/raid:md0: device ram0 operational as raid disk 0 [ 513.171604][T19862] md/raid:md0: cannot start dirty degraded array. [ 513.215317][T19875] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.283482][T19880] FAULT_INJECTION: forcing a failure. [ 513.283482][T19880] name failslab, interval 1, probability 0, space 0, times 0 [ 513.283516][T19880] CPU: 2 UID: 0 PID: 19880 Comm: syz.2.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.283544][T19880] Tainted: [L]=SOFTLOCKUP [ 513.283552][T19880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 513.283565][T19880] Call Trace: [ 513.283573][T19880] [ 513.283581][T19880] dump_stack_lvl+0x100/0x190 [ 513.283612][T19880] should_fail_ex.cold+0x5/0xa [ 513.283639][T19880] should_failslab+0xc2/0x120 [ 513.283668][T19880] __kmalloc_cache_noprof+0x91/0x6d0 [ 513.283689][T19880] ? find_held_lock+0x2b/0x80 [ 513.283711][T19880] ? init_srcu_struct_fields+0xa67/0xfa0 [ 513.283743][T19880] init_srcu_struct_fields+0xa67/0xfa0 [ 513.283775][T19880] blk_mq_alloc_tag_set+0x3cc/0x1330 [ 513.283803][T19880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 513.283824][T19880] ? idr_alloc+0xdd/0x130 [ 513.283845][T19880] ? __pfx_idr_alloc+0x10/0x10 [ 513.283875][T19880] loop_add+0x3b7/0xb60 [ 513.283901][T19880] ? __pfx_loop_add+0x10/0x10 [ 513.283941][T19880] ? __fget_files+0x34/0x3d0 [ 513.283964][T19880] ? find_held_lock+0x2b/0x80 [ 513.283981][T19880] ? __fget_files+0x215/0x3d0 [ 513.284007][T19880] loop_control_ioctl+0xae/0x620 [ 513.284033][T19880] ? __pfx_loop_control_ioctl+0x10/0x10 [ 513.284063][T19880] ? __pfx_loop_control_ioctl+0x10/0x10 [ 513.284089][T19880] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 513.284114][T19880] __do_fast_syscall_32+0x13a/0x8b0 [ 513.284139][T19880] do_fast_syscall_32+0x32/0x70 [ 513.284164][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.284187][T19880] RIP: 0023:0xf709efec [ 513.284208][T19880] Code: Unable to access opcode bytes at 0xf709efc2. [ 513.284217][T19880] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 513.284235][T19880] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 513.284248][T19880] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.284260][T19880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.284272][T19880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.284285][T19880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.284335][T19880] [ 513.519391][T19862] md/raid:md0: failed to run raid set. [ 513.519411][T19862] md: pers->run() failed ... [ 513.522044][T19883] md: could not open device unknown-block(1,0). [ 513.998876][T19889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.167595][T19889] md: could not open device unknown-block(1,0). [ 514.188293][T19892] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.219299][T19889] md/raid:md0: not clean -- starting background reconstruction [ 514.219589][T19889] md/raid:md0: device ram0 operational as raid disk 0 [ 514.240688][T19889] md/raid:md0: cannot start dirty degraded array. [ 514.459800][T19889] md/raid:md0: failed to run raid set. [ 514.459818][T19889] md: pers->run() failed ... [ 514.462276][T19897] md: could not open device unknown-block(1,0). [ 514.857260][T19903] md: could not open device unknown-block(1,0). [ 514.875635][T19906] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.961519][T19903] md/raid:md0: not clean -- starting background reconstruction [ 514.961852][T19903] md/raid:md0: device ram0 operational as raid disk 0 [ 514.985100][T19903] md/raid:md0: cannot start dirty degraded array. [ 515.150480][T19903] md/raid:md0: failed to run raid set. [ 515.150499][T19903] md: pers->run() failed ... [ 515.150920][T19912] md: could not open device unknown-block(1,0). [ 515.368935][T19919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 515.567569][T19919] md: could not open device unknown-block(1,0). [ 515.636353][T19917] syz.0.3295: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 515.636421][T19917] CPU: 3 UID: 0 PID: 19917 Comm: syz.0.3295 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.636456][T19917] Tainted: [L]=SOFTLOCKUP [ 515.636464][T19917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.636477][T19917] Call Trace: [ 515.636485][T19917] [ 515.636494][T19917] dump_stack_lvl+0x100/0x190 [ 515.636526][T19917] warn_alloc.cold+0x9e/0xb2 [ 515.636548][T19917] ? __pfx_warn_alloc+0x10/0x10 [ 515.636567][T19917] ? policy_nodemask+0xed/0x4f0 [ 515.636598][T19917] ? alloc_pages_mpol+0x260/0x550 [ 515.636627][T19917] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 515.636657][T19917] ? __get_vm_area_node+0x22b/0x350 [ 515.636690][T19917] __vmalloc_node_range_noprof+0x111c/0x1420 [ 515.636727][T19917] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 515.636756][T19917] ? __do_fast_syscall_32+0x13a/0x8b0 [ 515.636782][T19917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 515.636818][T19917] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 515.636843][T19917] __vmalloc_node_noprof+0xad/0xf0 [ 515.636869][T19917] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 515.636899][T19917] __vmalloc_noprof+0xa3/0x120 [ 515.636944][T19917] ? __pfx___vmalloc_noprof+0x10/0x10 [ 515.636980][T19917] bpf_prog_alloc_no_stats+0x58/0x690 [ 515.637009][T19917] bpf_prog_alloc+0x3b/0x200 [ 515.637036][T19917] bpf_prog_create_from_user+0xb4/0x2e0 [ 515.637060][T19917] ? __pfx_seccomp_check_filter+0x10/0x10 [ 515.637084][T19917] do_seccomp+0x7f7/0x2730 [ 515.637112][T19917] ? __pfx_do_seccomp+0x10/0x10 [ 515.637134][T19917] ? xfd_validate_state+0x129/0x190 [ 515.637174][T19917] __do_fast_syscall_32+0x13a/0x8b0 [ 515.637201][T19917] do_fast_syscall_32+0x32/0x70 [ 515.637225][T19917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.637249][T19917] RIP: 0023:0xf70befec [ 515.637271][T19917] Code: Unable to access opcode bytes at 0xf70befc2. [ 515.637280][T19917] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 515.637298][T19917] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 515.637311][T19917] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.637322][T19917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.637334][T19917] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 515.637346][T19917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.637370][T19917] [ 515.641110][T19917] Mem-Info: [ 515.641123][T19917] active_anon:613 inactive_anon:3676 isolated_anon:0 [ 515.641123][T19917] active_file:707 inactive_file:4646 isolated_file:0 [ 515.641123][T19917] unevictable:2573 dirty:42 writeback:0 [ 515.641123][T19917] slab_reclaimable:6338 slab_unreclaimable:59252 [ 515.641123][T19917] mapped:24280 shmem:3887 pagetables:1416 [ 515.641123][T19917] sec_pagetables:365 bounce:0 [ 515.641123][T19917] kernel_misc_reclaimable:0 [ 515.641123][T19917] free:20030 free_pcp:4220 free_cma:0 [ 515.641170][T19917] Node 0 active_anon:8kB inactive_anon:32kB active_file:24kB inactive_file:9316kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:1092kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 515.641219][T19917] Node 1 active_anon:2444kB inactive_anon:14672kB active_file:2804kB inactive_file:9268kB unevictable:8292kB isolated(anon):0kB isolated(file):0kB mapped:97056kB dirty:168kB writeback:0kB shmem:13548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5476kB pagetables:4572kB sec_pagetables:308kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 515.641265][T19917] Node 0 DMA free:1348kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:892kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:92kB free_cma:0kB [ 515.641317][T19917] lowmem_reserve[]: 0 278 278 278 278 [ 515.641348][T19917] Node 0 DMA32 free:7452kB boost:28404kB min:41028kB low:44184kB high:47340kB reserved_highatomic:2048kB free_highatomic:128kB active_anon:8kB inactive_anon:32kB active_file:24kB inactive_file:8424kB unevictable:2000kB writepending:0kB zspages:712kB present:1032196kB managed:284804kB mlocked:0kB bounce:0kB free_pcp:14472kB local_pcp:3728kB free_cma:0kB [ 515.641401][T19917] lowmem_reserve[]: 0 0 0 0 0 [ 515.641436][T19917] Node 1 DMA32 free:71320kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2444kB inactive_anon:14672kB active_file:2804kB inactive_file:9268kB unevictable:8292kB writepending:168kB zspages:6444kB present:1048432kB managed:948208kB mlocked:6292kB bounce:0kB free_pcp:2096kB local_pcp:628kB free_cma:0kB [ 515.641490][T19917] lowmem_reserve[]: 0 0 0 0 0 [ 515.641519][T19917] Node 0 DMA: 43*4kB (U) 13*8kB (UM) 3*16kB (UM) 2*32kB (U) 9*64kB (U) 1*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1348kB [ 515.641639][T19917] Node 0 DMA32: 463*4kB (UH) 98*8kB (UMEH) 19*16kB (UMEH) 77*32kB (UMEH) 16*64kB (UME) 8*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7452kB [ 515.641799][T19917] Node 1 DMA32: 2549*4kB (UME) 1767*8kB (UME) 866*16kB (UME) 132*32kB (UME) 76*64kB (UME) 43*128kB (UME) 20*256kB (UME) 6*512kB (ME) 0*1024kB 3*2048kB (UM) 1*4096kB (U) = 71212kB [ 515.641933][T19917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.641948][T19917] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.641963][T19917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.641976][T19917] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 515.641991][T19917] 10216 total pagecache pages [ 515.641998][T19917] 976 pages in swap cache [ 515.642005][T19917] Free swap = 95972kB [ 515.642012][T19917] Total swap = 124996kB [ 515.642019][T19917] 524155 pages RAM [ 515.642025][T19917] 0 pages HighMem/MovableOnly [ 515.642032][T19917] 212062 pages reserved [ 515.642038][T19917] 0 pages cma reserved [ 515.734762][T19923] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 515.967172][T19925] md: could not open device unknown-block(1,0). [ 516.062234][T19927] lo: entered allmulticast mode [ 516.109279][T19927] lo: left allmulticast mode [ 516.508098][T19940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 516.572707][T19943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3296'. [ 516.657305][T19940] md: could not open device unknown-block(1,0). [ 516.877249][T19945] md: could not open device unknown-block(1,0). [ 516.964532][T19945] md/raid:md0: not clean -- starting background reconstruction [ 516.964805][T19945] md/raid:md0: device ram0 operational as raid disk 0 [ 516.977780][T19945] md/raid:md0: cannot start dirty degraded array. [ 517.059514][T19945] md/raid:md0: failed to run raid set. [ 517.059533][T19945] md: pers->run() failed ... [ 517.277035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 517.427367][T19950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 517.503053][T19954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 517.627603][T19950] md: could not open device unknown-block(1,0). [ 517.647379][T19954] md: could not open device unknown-block(1,0). [ 517.721665][T19959] lo: entered allmulticast mode [ 517.723388][T19959] lo: left allmulticast mode [ 517.787157][T19964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 517.807261][T19961] md: array md0 already has disks! [ 517.968049][T19961] md/raid:md0: not clean -- starting background reconstruction [ 517.968514][T19961] md/raid:md0: device ram0 operational as raid disk 0 [ 518.003515][T19961] md/raid:md0: cannot start dirty degraded array. [ 518.189898][T19961] md/raid:md0: failed to run raid set. [ 518.189918][T19961] md: pers->run() failed ... [ 518.190427][T19971] md: could not open device unknown-block(1,0). [ 518.251689][T19979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 518.397938][T19979] md: could not open device unknown-block(1,0). [ 519.412209][T19985] md/raid:md0: not clean -- starting background reconstruction [ 519.413585][T19985] md/raid:md0: device ram0 operational as raid disk 0 [ 519.703248][T19985] md/raid:md0: couldn't allocate thread. [ 519.952407][ T43] audit: type=1800 audit(1790384791.379:133): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3313" name="file0" dev="overlay" ino=4969 res=0 errno=0 [ 520.010813][T20001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 520.089482][T19985] md: pers->run() failed ... [ 520.187247][T20001] md: could not open device unknown-block(1,0). [ 520.371779][T20007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 520.517215][T20008] md: could not open device unknown-block(1,0). [ 520.651030][T20012] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 520.654676][T20010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 520.880608][T20019] md/raid:md0: not clean -- starting background reconstruction [ 520.880964][T20019] md/raid:md0: device ram0 operational as raid disk 0 [ 520.898925][T20019] md/raid:md0: cannot start dirty degraded array. [ 521.019688][T20019] md/raid:md0: failed to run raid set. [ 521.019709][T20019] md: pers->run() failed ... [ 521.020078][T20012] md: could not open device unknown-block(1,0). [ 521.020361][T20016] md: could not open device unknown-block(1,0). [ 521.321791][T20030] FAULT_INJECTION: forcing a failure. [ 521.321791][T20030] name failslab, interval 1, probability 0, space 0, times 0 [ 521.321825][T20030] CPU: 2 UID: 0 PID: 20030 Comm: syz.0.3327 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.321861][T20030] Tainted: [L]=SOFTLOCKUP [ 521.321869][T20030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.321882][T20030] Call Trace: [ 521.321890][T20030] [ 521.321898][T20030] dump_stack_lvl+0x100/0x190 [ 521.321929][T20030] should_fail_ex.cold+0x5/0xa [ 521.321954][T20030] should_failslab+0xc2/0x120 [ 521.321983][T20030] kmem_cache_alloc_noprof+0x92/0x6a0 [ 521.322008][T20030] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 521.322044][T20030] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 521.322079][T20030] idr_get_free+0x52e/0xa00 [ 521.322107][T20030] idr_alloc_u32+0x1ac/0x320 [ 521.322131][T20030] ? __pfx_idr_alloc_u32+0x10/0x10 [ 521.322154][T20030] ? __pfx___debug_object_init+0x10/0x10 [ 521.322191][T20030] idr_alloc+0xc0/0x130 [ 521.322213][T20030] ? __pfx_idr_alloc+0x10/0x10 [ 521.322235][T20030] ? lockdep_init_map_type+0x5c/0x250 [ 521.322271][T20030] loop_add+0x1fe/0xb60 [ 521.322296][T20030] ? __pfx_loop_add+0x10/0x10 [ 521.322334][T20030] ? __fget_files+0x34/0x3d0 [ 521.322358][T20030] ? find_held_lock+0x2b/0x80 [ 521.322378][T20030] ? __fget_files+0x215/0x3d0 [ 521.322403][T20030] loop_control_ioctl+0xae/0x620 [ 521.322428][T20030] ? __pfx_loop_control_ioctl+0x10/0x10 [ 521.322458][T20030] ? __pfx_loop_control_ioctl+0x10/0x10 [ 521.322484][T20030] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 521.322509][T20030] __do_fast_syscall_32+0x13a/0x8b0 [ 521.322536][T20030] do_fast_syscall_32+0x32/0x70 [ 521.322558][T20030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 521.322583][T20030] RIP: 0023:0xf70befec [ 521.322604][T20030] Code: Unable to access opcode bytes at 0xf70befc2. [ 521.322613][T20030] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 521.322633][T20030] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 521.322645][T20030] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.322657][T20030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.322669][T20030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 521.322680][T20030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.322706][T20030] [ 521.597152][T20038] md: could not open device unknown-block(1,0). [ 521.716472][T20038] md/raid:md0: not clean -- starting background reconstruction [ 521.716863][T20038] md/raid:md0: device ram0 operational as raid disk 0 [ 521.738868][T20038] md/raid:md0: cannot start dirty degraded array. [ 521.948121][T20038] md/raid:md0: failed to run raid set. [ 521.948134][T20038] md: pers->run() failed ... [ 522.165939][T20045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.277219][T20045] md: could not open device unknown-block(1,0). [ 522.392969][T20051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.436125][T20053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.647347][T20053] md: could not open device unknown-block(1,0). [ 522.648806][T20051] md: could not open device unknown-block(1,0). [ 522.712971][T20061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.740044][T20063] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.911388][T20068] md/raid:md0: not clean -- starting background reconstruction [ 522.911552][T20068] md/raid:md0: device ram0 operational as raid disk 0 [ 522.924297][T20068] md/raid:md0: cannot start dirty degraded array. [ 523.418461][T20068] md/raid:md0: failed to run raid set. [ 523.418474][T20068] md: pers->run() failed ... [ 523.418951][T20066] md: could not open device unknown-block(1,0). [ 523.419294][T20067] md: could not open device unknown-block(1,0). [ 523.419434][T20075] md: array md0 already has disks! [ 523.481885][T20075] md/raid:md0: not clean -- starting background reconstruction [ 523.482129][T20075] md/raid:md0: device ram0 operational as raid disk 0 [ 523.528446][T20075] md/raid:md0: cannot start dirty degraded array. [ 523.606297][T20085] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 523.678805][T20075] md/raid:md0: failed to run raid set. [ 523.678821][T20075] md: pers->run() failed ... [ 523.707595][T20085] md: could not open device unknown-block(1,0). [ 524.719209][T20100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 524.878514][T20100] md: could not open device unknown-block(1,0). [ 524.961339][T20108] FAULT_INJECTION: forcing a failure. [ 524.961339][T20108] name failslab, interval 1, probability 0, space 0, times 0 [ 524.961361][T20108] CPU: 2 UID: 0 PID: 20108 Comm: syz.4.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.961377][T20108] Tainted: [L]=SOFTLOCKUP [ 524.961389][T20108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.961397][T20108] Call Trace: [ 524.961402][T20108] [ 524.961407][T20108] dump_stack_lvl+0x100/0x190 [ 524.961426][T20108] should_fail_ex.cold+0x5/0xa [ 524.961442][T20108] should_failslab+0xc2/0x120 [ 524.961459][T20108] kmem_cache_alloc_noprof+0x92/0x6a0 [ 524.961473][T20108] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 524.961494][T20108] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 524.961516][T20108] idr_get_free+0x52e/0xa00 [ 524.961533][T20108] idr_alloc_u32+0x1ac/0x320 [ 524.961548][T20108] ? __pfx_idr_alloc_u32+0x10/0x10 [ 524.961561][T20108] ? __pfx___debug_object_init+0x10/0x10 [ 524.961581][T20108] idr_alloc+0xc0/0x130 [ 524.961593][T20108] ? __pfx_idr_alloc+0x10/0x10 [ 524.961606][T20108] ? lockdep_init_map_type+0x5c/0x250 [ 524.961626][T20108] loop_add+0x1fe/0xb60 [ 524.961641][T20108] ? __pfx_loop_add+0x10/0x10 [ 524.961663][T20108] ? __fget_files+0x34/0x3d0 [ 524.961676][T20108] ? find_held_lock+0x2b/0x80 [ 524.961688][T20108] ? __fget_files+0x215/0x3d0 [ 524.961703][T20108] loop_control_ioctl+0xae/0x620 [ 524.961718][T20108] ? __pfx_loop_control_ioctl+0x10/0x10 [ 524.961735][T20108] ? __pfx_loop_control_ioctl+0x10/0x10 [ 524.961749][T20108] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 524.961763][T20108] __do_fast_syscall_32+0x13a/0x8b0 [ 524.961778][T20108] do_fast_syscall_32+0x32/0x70 [ 524.961791][T20108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.961805][T20108] RIP: 0023:0xf702efec [ 524.961818][T20108] Code: Unable to access opcode bytes at 0xf702efc2. [ 524.961823][T20108] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 524.961834][T20108] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 524.961842][T20108] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.961848][T20108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.961855][T20108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 524.961862][T20108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.961875][T20108] [ 525.098691][T20115] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 525.207154][ T5816] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 525.217324][T20115] md: could not open device unknown-block(1,0). [ 525.273674][T20119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 525.363930][ T5816] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 525.365873][ T5816] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.365909][ T5816] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 525.365929][ T5816] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.367944][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 525.367960][ T5816] usb 7-1: Product: syz [ 525.367969][ T5816] usb 7-1: Manufacturer: syz [ 525.376142][T20111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 525.385073][ T5816] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 525.398084][ T5816] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 525.428416][T20119] md: could not open device unknown-block(1,0). [ 525.837602][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3347'. [ 526.316243][ T10] usb 7-1: USB disconnect, device number 21 [ 526.326281][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 526.333039][ T10] garmin_gps 7-1:1.0: device disconnected [ 527.000511][T20136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 527.127728][T20136] md: could not open device unknown-block(1,0). [ 527.593104][T20150] FAULT_INJECTION: forcing a failure. [ 527.593104][T20150] name failslab, interval 1, probability 0, space 0, times 0 [ 527.593129][T20150] CPU: 3 UID: 0 PID: 20150 Comm: syz.3.3352 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.593147][T20150] Tainted: [L]=SOFTLOCKUP [ 527.593153][T20150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.593160][T20150] Call Trace: [ 527.593166][T20150] [ 527.593172][T20150] dump_stack_lvl+0x100/0x190 [ 527.593193][T20150] should_fail_ex.cold+0x5/0xa [ 527.593211][T20150] should_failslab+0xc2/0x120 [ 527.593230][T20150] __kvmalloc_node_noprof+0x113/0x9b0 [ 527.593254][T20150] ? sbitmap_init_node+0x1cc/0x720 [ 527.593280][T20150] sbitmap_init_node+0x1cc/0x720 [ 527.593303][T20150] ? __kmalloc_cache_node_noprof+0x231/0x720 [ 527.593330][T20150] sbitmap_queue_init_node+0x40/0x4a0 [ 527.593360][T20150] blk_mq_init_tags+0x184/0x300 [ 527.593383][T20150] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 527.593418][T20150] ? blk_mq_update_queue_map+0x227/0x3a0 [ 527.593443][T20150] blk_mq_alloc_tag_set+0x848/0x1330 [ 527.593487][T20150] loop_add+0x3b7/0xb60 [ 527.593514][T20150] ? __pfx_loop_add+0x10/0x10 [ 527.593557][T20150] ? __fget_files+0x34/0x3d0 [ 527.593584][T20150] ? find_held_lock+0x2b/0x80 [ 527.593608][T20150] ? __fget_files+0x215/0x3d0 [ 527.593637][T20150] loop_control_ioctl+0xae/0x620 [ 527.593665][T20150] ? __pfx_loop_control_ioctl+0x10/0x10 [ 527.593699][T20150] ? __pfx_loop_control_ioctl+0x10/0x10 [ 527.593728][T20150] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 527.593754][T20150] __do_fast_syscall_32+0x13a/0x8b0 [ 527.593784][T20150] do_fast_syscall_32+0x32/0x70 [ 527.593811][T20150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.593847][T20150] RIP: 0023:0xf7fa7fec [ 527.593865][T20150] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 527.593871][T20150] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 527.593884][T20150] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 527.593892][T20150] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.593900][T20150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.593907][T20150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.593914][T20150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.593930][T20150] [ 527.594012][T20150] blk-mq: reduced tag depth (128 -> 64) [ 528.137072][ T25] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 528.273077][ T43] audit: type=1326 audit(1790384799.699:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.273588][ T43] audit: type=1326 audit(1790384799.699:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.274342][ T43] audit: type=1326 audit(1790384799.699:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.274442][ T43] audit: type=1326 audit(1790384799.699:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.274644][ T43] audit: type=1326 audit(1790384799.699:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.274877][ T43] audit: type=1326 audit(1790384799.699:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.274970][ T43] audit: type=1326 audit(1790384799.699:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.275390][ T43] audit: type=1326 audit(1790384799.699:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.287789][ T25] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 528.288665][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.288688][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 528.288699][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.290837][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 528.290849][ T25] usb 8-1: Product: syz [ 528.290857][ T25] usb 8-1: Manufacturer: syz [ 528.297488][T20156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.301396][ T25] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 528.353393][T20162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 528.370372][ T25] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 528.415965][T20159] kvm [20158]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 528.418249][T20159] kvm [20158]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 528.423083][ T43] audit: type=1326 audit(1790384799.849:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.423261][ T43] audit: type=1326 audit(1790384799.849:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.4.3356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 528.547848][T20162] md: could not open device unknown-block(1,0). [ 528.734213][ T25] usb 8-1: USB disconnect, device number 27 [ 528.774553][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 528.783497][ T25] garmin_gps 8-1:1.0: device disconnected [ 530.004144][T20184] FAULT_INJECTION: forcing a failure. [ 530.004144][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 530.004178][T20184] CPU: 0 UID: 0 PID: 20184 Comm: syz.2.3364 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.004207][T20184] Tainted: [L]=SOFTLOCKUP [ 530.004215][T20184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.004250][T20184] Call Trace: [ 530.004259][T20184] [ 530.004268][T20184] dump_stack_lvl+0x100/0x190 [ 530.004298][T20184] should_fail_ex.cold+0x5/0xa [ 530.004324][T20184] should_failslab+0xc2/0x120 [ 530.004352][T20184] kmem_cache_alloc_noprof+0x92/0x6a0 [ 530.004377][T20184] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 530.004414][T20184] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 530.004451][T20184] idr_get_free+0x52e/0xa00 [ 530.004482][T20184] idr_alloc_u32+0x1ac/0x320 [ 530.004506][T20184] ? __pfx_idr_alloc_u32+0x10/0x10 [ 530.004530][T20184] ? __pfx___debug_object_init+0x10/0x10 [ 530.004566][T20184] idr_alloc+0xc0/0x130 [ 530.004587][T20184] ? __pfx_idr_alloc+0x10/0x10 [ 530.004609][T20184] ? lockdep_init_map_type+0x5c/0x250 [ 530.004643][T20184] loop_add+0x1fe/0xb60 [ 530.004671][T20184] ? __pfx_loop_add+0x10/0x10 [ 530.004711][T20184] ? __fget_files+0x34/0x3d0 [ 530.004734][T20184] ? find_held_lock+0x2b/0x80 [ 530.004754][T20184] ? __fget_files+0x215/0x3d0 [ 530.004801][T20184] loop_control_ioctl+0xae/0x620 [ 530.004830][T20184] ? __pfx_loop_control_ioctl+0x10/0x10 [ 530.004863][T20184] ? __pfx_loop_control_ioctl+0x10/0x10 [ 530.004891][T20184] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 530.004916][T20184] __do_fast_syscall_32+0x13a/0x8b0 [ 530.004944][T20184] do_fast_syscall_32+0x32/0x70 [ 530.004968][T20184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.004992][T20184] RIP: 0023:0xf709efec [ 530.005012][T20184] Code: Unable to access opcode bytes at 0xf709efc2. [ 530.005021][T20184] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 530.005040][T20184] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 530.005053][T20184] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.005064][T20184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.005076][T20184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 530.005087][T20184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.005112][T20184] [ 530.132911][T20186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 530.203681][T20188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 530.257171][T20186] md: could not open device unknown-block(1,0). [ 530.329257][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3368'. [ 530.337560][T20188] md: could not open device unknown-block(1,0). [ 531.806584][T20198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 532.148029][T20199] md: could not open device unknown-block(1,0). [ 533.377934][T20221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 533.712635][T20225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 533.717600][T20221] md: could not open device unknown-block(1,0). [ 533.929668][T20225] md: could not open device unknown-block(1,0). [ 533.953584][ T43] audit: type=1326 audit(1790384805.379:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.953768][ T43] audit: type=1326 audit(1790384805.379:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.954980][ T43] audit: type=1326 audit(1790384805.379:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.955148][ T43] audit: type=1326 audit(1790384805.379:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.955422][ T43] audit: type=1326 audit(1790384805.379:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.955939][ T43] audit: type=1326 audit(1790384805.379:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.956104][ T43] audit: type=1326 audit(1790384805.379:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 533.956672][ T43] audit: type=1326 audit(1790384805.379:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.3.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 534.060195][T20231] kvm [20230]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 534.998428][T20231] kvm [20230]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 535.593213][T20246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 535.728295][T20246] md: could not open device unknown-block(1,0). [ 536.127010][ T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 536.287716][ T30] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 536.288978][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.289003][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 536.289016][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.290302][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 536.290316][ T30] usb 5-1: Product: syz [ 536.290324][ T30] usb 5-1: Manufacturer: syz [ 536.295892][T20251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 536.297469][ T30] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 536.329900][ T30] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 536.580227][ T10] usb 5-1: USB disconnect, device number 24 [ 536.596564][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 536.610189][ T10] garmin_gps 5-1:1.0: device disconnected [ 537.153193][T20269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 537.165108][T20267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 537.237892][T20271] md: could not open device unknown-block(1,0). [ 537.257182][T20267] md: could not open device unknown-block(1,0). [ 537.310665][T20279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 537.417236][T20279] md: could not open device unknown-block(1,0). [ 538.386872][ T43] audit: type=1800 audit(1790384809.809:152): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3399" name="file0" dev="overlay" ino=5232 res=0 errno=0 [ 540.043609][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 540.069066][T20302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 540.452139][T20307] md: could not open device unknown-block(1,0). [ 542.003494][T20323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 542.219905][T20323] md: could not open device unknown-block(1,0). [ 542.285322][ T67] block nbd0: Receive control failed (result -107) [ 542.286757][T20326] nbd0: detected capacity change from 0 to 18 [ 542.353866][T20331] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16) [ 542.360641][T20326] nbd0: detected capacity change from 18 to 0 [ 542.361140][ T5110] block nbd0: Dead connection, failed to find a fallback [ 542.361157][ T5110] block nbd0: shutting down sockets [ 542.361171][ T5110] blk_print_req_error: 5 callbacks suppressed [ 542.361182][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.361205][ T5110] buffer_io_error: 5 callbacks suppressed [ 542.361214][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 542.362928][ T7869] ldm_validate_partition_table(): Disk read failed. [ 542.362952][ T7869] Dev nbd0: unable to read RDB block 0 [ 542.362975][ T7869] nbd0: unable to read partition table [ 542.363127][ T7869] nbd0: partition table beyond EOD, truncated [ 542.534126][ T43] audit: type=1800 audit(1790384813.959:153): pid=20333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3410" name="file0" dev="overlay" ino=5153 res=0 errno=0 [ 542.974487][T20335] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 543.568645][T20342] loop0: detected capacity change from 0 to 32768 [ 543.608188][T20337] md: could not open device unknown-block(1,0). [ 543.815355][T20359] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 544.020066][T20359] md: could not open device unknown-block(1,0). [ 545.679188][ T43] audit: type=1800 audit(1790384817.109:154): pid=20384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3423" name="file0" dev="overlay" ino=5239 res=0 errno=0 [ 545.717994][ T2449] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 546.397592][ T2449] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 546.400751][ T2449] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.400781][ T2449] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 546.400793][ T2449] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.402072][ T2449] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 546.402086][ T2449] usb 7-1: Product: syz [ 546.402093][ T2449] usb 7-1: Manufacturer: syz [ 546.403871][T20380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 546.404868][ T2449] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 546.440565][ T2449] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 546.743271][ T5109] usb 7-1: USB disconnect, device number 22 [ 546.747322][ T5109] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 546.747809][ T5109] garmin_gps 7-1:1.0: device disconnected [ 546.804212][T20392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 546.808139][T20394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 546.937064][ T30] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 546.997218][T20396] md: could not open device unknown-block(1,0). [ 546.997398][T20394] md: could not open device unknown-block(1,0). [ 547.096013][ T30] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 547.107662][ T30] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 547.107719][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.107867][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 547.108506][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.140342][ T30] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 547.140398][ T30] usb 5-1: Product: syz [ 547.140447][ T30] usb 5-1: Manufacturer: syz [ 547.176606][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 547.176630][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 547.202794][ T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 547.202849][ T30] cdc_wdm 5-1:1.0: Unknown control protocol [ 547.553687][ T30] usb 5-1: USB disconnect, device number 25 [ 548.265662][ T30] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 548.417617][ T30] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.420408][ T30] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.420434][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.420452][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.420489][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.421868][ T30] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.421889][ T30] usb 5-1: Product: syz [ 548.421903][ T30] usb 5-1: Manufacturer: syz [ 548.432369][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 548.432386][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 548.443804][ T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 548.443825][ T30] cdc_wdm 5-1:1.0: Unknown control protocol [ 549.086865][ T67] block nbd4: Receive control failed (result -107) [ 549.090435][T20417] nbd4: detected capacity change from 0 to 18 [ 549.128789][T20417] nbd4: detected capacity change from 18 to 0 [ 549.128987][ T1307] block nbd4: Dead connection, failed to find a fallback [ 549.129007][ T1307] block nbd4: shutting down sockets [ 549.129020][ T1307] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.129044][ T1307] Buffer I/O error on dev nbd4, logical block 0, async page read [ 549.129979][ T5746] ldm_validate_partition_table(): Disk read failed. [ 549.130001][ T5746] Dev nbd4: unable to read RDB block 0 [ 549.130021][ T5746] nbd4: unable to read partition table [ 549.130174][ T5746] nbd4: partition table beyond EOD, truncated [ 549.134316][T20417] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16) [ 549.261606][T20421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 549.367175][T20421] md: could not open device unknown-block(1,0). [ 549.523501][ T5850] usb 5-1: USB disconnect, device number 26 [ 550.178969][T20434] netlink: 'syz.0.3441': attribute type 1 has an invalid length. [ 550.178991][T20434] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3441'. [ 550.179005][T20434] netlink: 'syz.0.3441': attribute type 1 has an invalid length. [ 550.968796][ T30] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 551.161848][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 551.164801][ T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 551.204651][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 551.255945][ T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 551.256004][ T30] usb 7-1: Product: syz [ 551.256062][ T30] usb 7-1: Manufacturer: syz [ 551.256107][ T30] usb 7-1: SerialNumber: syz [ 551.321168][ T30] usb 7-1: config 0 descriptor?? [ 551.345381][T20443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 551.370689][ T30] hub 7-1:0.0: bad descriptor, ignoring hub [ 551.370777][ T30] hub 7-1:0.0: probe with driver hub failed with error -5 [ 551.764952][ T43] audit: type=1326 audit(1790384823.189:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.765136][ T43] audit: type=1326 audit(1790384823.189:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.768400][ T43] audit: type=1326 audit(1790384823.199:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.768984][ T43] audit: type=1326 audit(1790384823.199:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.774726][ T43] audit: type=1326 audit(1790384823.199:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.775115][ T43] audit: type=1326 audit(1790384823.199:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.775270][ T43] audit: type=1326 audit(1790384823.199:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.775766][ T43] audit: type=1326 audit(1790384823.199:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.777551][ T43] audit: type=1326 audit(1790384823.209:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.777693][ T43] audit: type=1326 audit(1790384823.209:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 551.976458][T20446] kvm [20445]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 552.066269][T20446] kvm [20445]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 552.085341][T20446] kvm [20445]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 552.122612][T20453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 552.183376][T20455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 552.287306][T20453] md: could not open device unknown-block(1,0). [ 552.357288][T20455] md: could not open device unknown-block(1,0). [ 552.457283][T19629] usb 7-1: USB disconnect, device number 23 [ 552.787059][T19629] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 552.937869][T19629] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 552.938790][T19629] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 552.940974][T19629] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 552.940994][T19629] usb 7-1: Product: syz [ 552.941006][T19629] usb 7-1: Manufacturer: syz [ 552.941018][T19629] usb 7-1: SerialNumber: syz [ 552.943224][T19629] usb 7-1: config 0 descriptor?? [ 552.943988][T20443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.945985][T19629] hub 7-1:0.0: bad descriptor, ignoring hub [ 552.946005][T19629] hub 7-1:0.0: probe with driver hub failed with error -5 [ 553.257664][T19629] usb 7-1: USB disconnect, device number 24 [ 553.710765][ T67] block nbd2: Receive control failed (result -107) [ 553.714285][T20465] nbd2: detected capacity change from 0 to 18 [ 553.715250][ T5110] block nbd2: Dead connection, failed to find a fallback [ 553.715269][ T5110] block nbd2: shutting down sockets [ 553.715278][ T5110] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.715293][ T5110] Buffer I/O error on dev nbd2, logical block 0, async page read [ 553.716018][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.716044][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 553.749147][T20465] nbd2: detected capacity change from 18 to 0 [ 553.749247][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.749272][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 553.749562][ T5746] ldm_validate_partition_table(): Disk read failed. [ 553.749625][ T5746] Dev nbd2: unable to read RDB block 0 [ 553.749688][ T5746] nbd2: unable to read partition table [ 553.749815][ T5746] nbd2: partition table beyond EOD, truncated [ 553.757602][T20465] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16) [ 553.863864][T20468] Console: switching to colour dummy device 80x25 [ 553.948114][ T5850] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 554.107008][ T5850] usb 9-1: Using ep0 maxpacket: 32 [ 554.107459][ T5850] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 554.108413][ T5850] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 554.110143][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 554.110155][ T5850] usb 9-1: Product: syz [ 554.110163][ T5850] usb 9-1: Manufacturer: syz [ 554.110170][ T5850] usb 9-1: SerialNumber: syz [ 554.111713][ T5850] usb 9-1: config 0 descriptor?? [ 554.112897][T20463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 554.113762][ T5850] hub 9-1:0.0: bad descriptor, ignoring hub [ 554.113774][ T5850] hub 9-1:0.0: probe with driver hub failed with error -5 [ 554.803124][ T10] usb 9-1: USB disconnect, device number 20 [ 555.583014][ T10] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 555.753861][ T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 555.770907][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 555.799784][ T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 555.799824][ T10] usb 9-1: Product: syz [ 555.799887][ T10] usb 9-1: Manufacturer: syz [ 555.799950][ T10] usb 9-1: SerialNumber: syz [ 555.821220][ T10] usb 9-1: config 0 descriptor?? [ 555.850011][T20463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 555.853589][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 555.853634][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 556.177325][ T10] usb 9-1: USB disconnect, device number 21 [ 557.190939][T20488] kvm [20487]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 557.242804][T20488] kvm [20487]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 557.256685][T20488] kvm [20487]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 557.641598][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 557.682802][T20520] bond0: option slaves: invalid value (-bond_slave_0) [ 557.685494][T20520] bond0: option slaves: invalid value (-bond_slave_1) [ 557.716131][T20520] bond0: (slave dummy0): making interface the new active one [ 557.720902][T20520] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 557.724832][T20516] binder: 20515:20516 ioctl c018620c 80000240 returned -1 [ 557.725142][T20516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3464'. [ 557.807027][T20520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.817231][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 557.867589][T20533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 558.097510][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 558.100713][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.109617][T20544] netlink: 'syz.2.3469': attribute type 2 has an invalid length. [ 558.109630][T20544] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3469'. [ 558.113688][T20544] FAULT_INJECTION: forcing a failure. [ 558.113688][T20544] name failslab, interval 1, probability 0, space 0, times 0 [ 558.113711][T20544] CPU: 2 UID: 0 PID: 20544 Comm: syz.2.3469 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.113726][T20544] Tainted: [L]=SOFTLOCKUP [ 558.113730][T20544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.113737][T20544] Call Trace: [ 558.113742][T20544] [ 558.113747][T20544] dump_stack_lvl+0x100/0x190 [ 558.113765][T20544] should_fail_ex.cold+0x5/0xa [ 558.113782][T20544] should_failslab+0xc2/0x120 [ 558.113799][T20544] __kmalloc_node_noprof+0xff/0x880 [ 558.113822][T20544] ? load_msg+0x43/0x4a0 [ 558.113838][T20544] load_msg+0x43/0x4a0 [ 558.113855][T20544] do_msgrcv+0x209/0x16f0 [ 558.113869][T20544] ? __pfx_compat_do_msg_fill+0x10/0x10 [ 558.113884][T20544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 558.113902][T20544] ? __pfx_do_msgrcv+0x10/0x10 [ 558.113917][T20544] ? xfd_validate_state+0x129/0x190 [ 558.113941][T20544] ? __do_fast_syscall_32+0x13a/0x8b0 [ 558.113955][T20544] __do_fast_syscall_32+0x13a/0x8b0 [ 558.113970][T20544] do_fast_syscall_32+0x32/0x70 [ 558.113983][T20544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.113997][T20544] RIP: 0023:0xf709efec [ 558.114010][T20544] Code: Unable to access opcode bytes at 0xf709efc2. [ 558.114015][T20544] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000191 [ 558.114026][T20544] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 558.114033][T20544] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004800 [ 558.114040][T20544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.114046][T20544] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 558.114052][T20544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.114066][T20544] [ 558.138265][T20540] md: could not open device unknown-block(1,0). [ 558.211250][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 558.211269][ T10] usb 5-1: Product: syz [ 558.211278][ T10] usb 5-1: Manufacturer: syz [ 558.211286][ T10] usb 5-1: SerialNumber: syz [ 558.457216][ T5850] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 558.514909][T20559] overlayfs: upper fs does not support tmpfile. [ 558.610414][ T5850] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 558.612313][ T5850] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 558.612334][ T5850] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.612349][ T5850] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 558.612379][ T5850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.621530][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.621555][ T5850] usb 7-1: Product: syz [ 558.621566][ T5850] usb 7-1: Manufacturer: syz [ 558.640959][ T5850] cdc_wdm 7-1:1.0: skipping garbage [ 558.640975][ T5850] cdc_wdm 7-1:1.0: skipping garbage [ 558.644380][ T5850] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 558.644399][ T5850] cdc_wdm 7-1:1.0: Unknown control protocol [ 558.854560][ T5850] usb 7-1: USB disconnect, device number 25 [ 559.125747][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 559.317011][ T2449] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 559.334150][ T10] usb 5-1: USB disconnect, device number 27 [ 559.339314][ T10] usblp0: removed [ 559.487940][ T2449] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.489166][ T2449] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.489186][ T2449] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.489200][ T2449] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.489231][ T2449] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.490797][ T2449] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.490814][ T2449] usb 7-1: Product: syz [ 559.490826][ T2449] usb 7-1: Manufacturer: syz [ 559.494848][ T2449] cdc_wdm 7-1:1.0: skipping garbage [ 559.494863][ T2449] cdc_wdm 7-1:1.0: skipping garbage [ 559.496417][ T2449] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 559.496431][ T2449] cdc_wdm 7-1:1.0: Unknown control protocol [ 561.126558][ T6186] usb 7-1: USB disconnect, device number 26 [ 561.205919][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 561.205970][ T43] audit: type=1326 audit(1790384832.629:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.206445][ T43] audit: type=1326 audit(1790384832.629:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.228851][ T43] audit: type=1326 audit(1790384832.639:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.229224][ T43] audit: type=1326 audit(1790384832.639:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.229324][ T43] audit: type=1326 audit(1790384832.639:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.229504][ T43] audit: type=1326 audit(1790384832.639:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.229617][ T43] audit: type=1326 audit(1790384832.639:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.229857][ T43] audit: type=1326 audit(1790384832.639:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.230155][ T43] audit: type=1326 audit(1790384832.639:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.230293][ T43] audit: type=1326 audit(1790384832.639:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 561.259493][T20584] kvm [20583]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 561.308633][T20584] kvm [20583]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 561.335410][T20584] kvm [20583]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 562.160917][T20597] bond0: (slave bond_slave_0): Releasing backup interface [ 562.189706][T20597] bond0: (slave bond_slave_1): Releasing backup interface [ 562.503875][T20603] syzkaller0: entered promiscuous mode [ 562.503898][T20603] syzkaller0: entered allmulticast mode [ 562.529370][T20603] tipc: Enabled bearer , priority 0 [ 562.556391][T20597] bond0: (slave dummy0): making interface the new active one [ 562.563636][T20597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 562.566150][T20603] tipc: Resetting bearer [ 562.586508][T20602] tipc: Resetting bearer [ 562.611067][T20602] tipc: Disabling bearer [ 562.621442][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.621565][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.638311][T20597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.689050][T20613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3484'. [ 565.059543][T20633] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 565.080867][T20633] ./file0: Can't lookup blockdev [ 565.207055][ T5816] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 565.357070][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 565.357785][ T5816] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 565.358694][ T5816] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 565.360498][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 565.360519][ T5816] usb 5-1: Product: syz [ 565.360532][ T5816] usb 5-1: Manufacturer: syz [ 565.360544][ T5816] usb 5-1: SerialNumber: syz [ 565.362620][ T5816] usb 5-1: config 0 descriptor?? [ 565.363270][T20627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.364316][ T5816] hub 5-1:0.0: bad descriptor, ignoring hub [ 565.364337][ T5816] hub 5-1:0.0: probe with driver hub failed with error -5 [ 566.316304][T20645] bond0: option slaves: invalid value (-bond_slave_0) [ 566.316490][T20645] bond0: option slaves: invalid value (-bond_slave_1) [ 566.428360][ T30] usb 5-1: USB disconnect, device number 28 [ 566.571513][T20645] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 566.583683][T20645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.605275][T20651] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 566.628899][T20653] netlink: 'syz.3.3497': attribute type 2 has an invalid length. [ 566.628922][T20653] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3497'. [ 566.638177][T20653] FAULT_INJECTION: forcing a failure. [ 566.638177][T20653] name failslab, interval 1, probability 0, space 0, times 0 [ 566.638212][T20653] CPU: 3 UID: 0 PID: 20653 Comm: syz.3.3497 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.638237][T20653] Tainted: [L]=SOFTLOCKUP [ 566.638243][T20653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 566.638254][T20653] Call Trace: [ 566.638261][T20653] [ 566.638276][T20653] dump_stack_lvl+0x100/0x190 [ 566.638306][T20653] should_fail_ex.cold+0x5/0xa [ 566.638333][T20653] should_failslab+0xc2/0x120 [ 566.638358][T20653] __kmalloc_node_noprof+0xff/0x880 [ 566.638380][T20653] ? load_msg+0x43/0x4a0 [ 566.638405][T20653] load_msg+0x43/0x4a0 [ 566.638430][T20653] do_msgrcv+0x209/0x16f0 [ 566.638453][T20653] ? __pfx_compat_do_msg_fill+0x10/0x10 [ 566.638476][T20653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 566.638502][T20653] ? __pfx_do_msgrcv+0x10/0x10 [ 566.638527][T20653] ? xfd_validate_state+0x129/0x190 [ 566.638565][T20653] ? __do_fast_syscall_32+0x13a/0x8b0 [ 566.638585][T20653] __do_fast_syscall_32+0x13a/0x8b0 [ 566.638607][T20653] do_fast_syscall_32+0x32/0x70 [ 566.638633][T20653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.638657][T20653] RIP: 0023:0xf7fa7fec [ 566.638675][T20653] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 566.638684][T20653] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000191 [ 566.638702][T20653] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 566.638735][T20653] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004800 [ 566.638748][T20653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.638761][T20653] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 566.638773][T20653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.638799][T20653] [ 566.787066][ T6186] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 566.829616][T20651] md/raid:md0: not clean -- starting background reconstruction [ 566.829891][T20651] md/raid:md0: device ram0 operational as raid disk 0 [ 566.852045][T20651] md/raid:md0: cannot start dirty degraded array. [ 566.949644][ T6186] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 566.950773][ T6186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 566.954148][ T6186] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 566.954169][ T6186] usb 5-1: Product: syz [ 566.954183][ T6186] usb 5-1: Manufacturer: syz [ 566.954195][ T6186] usb 5-1: SerialNumber: syz [ 566.980282][ T6186] usb 5-1: config 0 descriptor?? [ 566.981232][T20627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 566.982365][ T6186] hub 5-1:0.0: bad descriptor, ignoring hub [ 566.982386][ T6186] hub 5-1:0.0: probe with driver hub failed with error -5 [ 567.058566][T20663] syzkaller0: entered promiscuous mode [ 567.058920][T20663] syzkaller0: entered allmulticast mode [ 567.069343][T20651] md/raid:md0: failed to run raid set. [ 567.069359][T20651] md: pers->run() failed ... [ 567.069557][T20656] md: could not open device unknown-block(1,0). [ 567.128605][T20666] serio: Serial port ptm0 [ 567.256734][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 567.256896][ T43] audit: type=1326 audit(1790384838.659:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.258575][ T43] audit: type=1326 audit(1790384838.659:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.258631][ T43] audit: type=1326 audit(1790384838.669:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.258704][ T43] audit: type=1326 audit(1790384838.669:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.258750][ T43] audit: type=1326 audit(1790384838.669:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.258901][ T43] audit: type=1326 audit(1790384838.669:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.258995][ T43] audit: type=1326 audit(1790384838.669:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.259089][ T43] audit: type=1326 audit(1790384838.669:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.259111][ T43] audit: type=1326 audit(1790384838.669:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.259246][ T43] audit: type=1326 audit(1790384838.669:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.3502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 567.395598][T20669] kvm [20668]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 567.430109][T20669] kvm [20668]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 567.437232][ T5850] usb 5-1: USB disconnect, device number 29 [ 567.453523][T20669] kvm [20668]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 569.972105][T20679] serio: Serial port ptm0 [ 570.086862][T20680] syzkaller0: entered promiscuous mode [ 570.086911][T20680] syzkaller0: entered allmulticast mode [ 573.185429][T20717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 573.270724][T20717] md: could not open device unknown-block(1,0). [ 573.292936][T20717] md: personality for level rai is not loaded! [ 574.592657][T20732] bond0: option slaves: invalid value (-bond_slave_0) [ 574.593001][T20732] bond0: option slaves: invalid value (-bond_slave_1) [ 574.603181][T20732] bond0: option mode: unable to set because the bond device has slaves [ 574.612513][T20732] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 574.612537][T20732] bond0: option slaves: unable to set because the bond device is up [ 574.614737][T20732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.641784][ T12] bond0: (slave dummy0): link status definitely down, disabling slave [ 574.653670][ T12] bond0: now running without any active interface! [ 574.755069][T20730] serio: Serial port ptm0 [ 574.808433][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 574.808506][ T43] audit: type=1326 audit(1790384846.239:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.808736][ T43] audit: type=1326 audit(1790384846.239:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.809303][T20744] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 574.809629][ T43] audit: type=1326 audit(1790384846.239:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.809821][ T43] audit: type=1326 audit(1790384846.239:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.810366][ T43] audit: type=1326 audit(1790384846.239:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.810599][ T43] audit: type=1326 audit(1790384846.239:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.810713][ T43] audit: type=1326 audit(1790384846.239:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.811232][ T43] audit: type=1326 audit(1790384846.239:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.811522][ T43] audit: type=1326 audit(1790384846.239:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.812123][ T43] audit: type=1326 audit(1790384846.239:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20739 comm="syz.3.3520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 574.864669][T20744] md: array md0 already has disks! [ 574.875847][T20740] kvm [20739]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 574.920071][T20740] kvm [20739]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 574.938229][T20740] kvm [20739]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 574.967213][T20744] md: could not open device unknown-block(1,1). [ 574.967275][T20744] md: error, md_import_device() returned -16 [ 575.010451][T20744] md: personality for level rai is not loaded! [ 575.059091][T20744] md: could not open device unknown-block(1,2). [ 575.059142][T20744] md: error, md_import_device() returned -16 [ 576.148656][T20759] overlayfs: upper fs does not support tmpfile. [ 577.198996][T20767] syzkaller0: entered promiscuous mode [ 577.199055][T20767] syzkaller0: entered allmulticast mode [ 578.514438][T20786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 578.587255][T20786] md: could not open device unknown-block(1,0). [ 578.688517][T20786] md: personality for level raid is not loaded! [ 578.874338][T20798] kAFS: No cell specified [ 579.452052][T20805] kvm [20804]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 579.508523][T20805] kvm [20804]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 579.533269][T20805] kvm [20804]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 579.684254][T20809] netlink: 'syz.0.3540': attribute type 11 has an invalid length. [ 579.809832][T20812] netlink: 'syz.0.3540': attribute type 10 has an invalid length. [ 581.532716][T20813] 8021q: adding VLAN 0 to HW filter on device .` [ 581.550791][T20813] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 581.663549][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 581.710102][T20834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 581.767093][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 581.841741][T20837] md: could not open device unknown-block(1,0). [ 581.877084][ T5787] .`: (slave dummy0): failed to get link speed/duplex [ 581.885239][T20834] md/raid1:md0: active with 1 out of 1 mirrors [ 581.888044][T20834] md0: detected capacity change from 0 to 8192 [ 581.986156][T20834] md0: detected capacity change from 8192 to 0 [ 581.986171][T20834] md: md0 stopped. [ 581.987278][ T5787] .`: (slave dummy0): failed to get link speed/duplex [ 582.097070][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 582.128348][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 582.163929][T20845] vlan2: entered allmulticast mode [ 582.163943][T20845] bridge0: entered allmulticast mode [ 582.170398][T20845] bridge0: port 1(erspan0) entered blocking state [ 582.170483][T20845] bridge0: port 1(erspan0) entered disabled state [ 582.170540][T20845] erspan0: entered allmulticast mode [ 582.171325][T20845] erspan0: entered promiscuous mode [ 582.173184][T20845] bridge0: port 1(erspan0) entered blocking state [ 582.173277][T20845] bridge0: port 1(erspan0) entered forwarding state [ 582.218416][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 582.327076][ T12] .`: (slave dummy0): failed to get link speed/duplex [ 582.437392][ T12] .`: (slave dummy0): failed to get link speed/duplex [ 582.547325][ T5787] .`: (slave dummy0): failed to get link speed/duplex [ 583.074149][T20865] FAULT_INJECTION: forcing a failure. [ 583.074149][T20865] name failslab, interval 1, probability 0, space 0, times 0 [ 583.074296][T20865] CPU: 1 UID: 0 PID: 20865 Comm: syz.4.3557 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.074338][T20865] Tainted: [L]=SOFTLOCKUP [ 583.074347][T20865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 583.074359][T20865] Call Trace: [ 583.074367][T20865] [ 583.074376][T20865] dump_stack_lvl+0x100/0x190 [ 583.074409][T20865] should_fail_ex.cold+0x5/0xa [ 583.074435][T20865] should_failslab+0xc2/0x120 [ 583.074465][T20865] __kmalloc_cache_noprof+0x91/0x6d0 [ 583.074486][T20865] ? virtual_ncidev_open+0x49/0x220 [ 583.074513][T20865] virtual_ncidev_open+0x49/0x220 [ 583.074534][T20865] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 583.074555][T20865] misc_open+0x26d/0x450 [ 583.074581][T20865] ? __pfx_misc_open+0x10/0x10 [ 583.074604][T20865] chrdev_open+0x234/0x6a0 [ 583.074635][T20865] ? __pfx_apparmor_file_open+0x10/0x10 [ 583.074658][T20865] ? __pfx_chrdev_open+0x10/0x10 [ 583.074685][T20865] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 583.074736][T20865] do_dentry_open+0x6ab/0x14d0 [ 583.074762][T20865] ? __pfx_chrdev_open+0x10/0x10 [ 583.074793][T20865] vfs_open+0x82/0x3f0 [ 583.074825][T20865] path_openat+0x19fa/0x2440 [ 583.074856][T20865] ? __pfx_path_openat+0x10/0x10 [ 583.074889][T20865] do_file_open+0x20e/0x430 [ 583.074917][T20865] ? __pfx_do_file_open+0x10/0x10 [ 583.074960][T20865] ? _raw_spin_unlock+0x28/0x50 [ 583.074989][T20865] ? alloc_fd+0x471/0x7a0 [ 583.075020][T20865] do_sys_openat2+0x10f/0x1e0 [ 583.075049][T20865] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.075078][T20865] ? find_held_lock+0x2b/0x80 [ 583.075106][T20865] __ia32_compat_sys_openat+0x12d/0x210 [ 583.075135][T20865] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 583.075175][T20865] __do_fast_syscall_32+0x13a/0x8b0 [ 583.075202][T20865] do_fast_syscall_32+0x32/0x70 [ 583.075225][T20865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.075250][T20865] RIP: 0023:0xf702efec [ 583.075272][T20865] Code: Unable to access opcode bytes at 0xf702efc2. [ 583.075281][T20865] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 583.075300][T20865] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 583.075313][T20865] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.075325][T20865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.075336][T20865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 583.075347][T20865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.075375][T20865] [ 583.657838][T20873] smpboot: CPU 1 is now offline [ 584.085382][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 584.085404][ T43] audit: type=1800 audit(1790384855.509:225): pid=20863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3558" name="syzkaller0" dev="sda1" ino=2038 res=0 errno=0 [ 584.086457][ T43] audit: type=1800 audit(1790384855.509:226): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3558" name="syzkaller0" dev="sda1" ino=2038 res=0 errno=0 [ 584.838561][T20888] tc action pedit offset must be on 32 bit boundaries [ 584.986280][T20894] overlayfs: upper fs does not support tmpfile. [ 585.858526][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3582'. [ 585.884429][T20918] vlan4: entered allmulticast mode [ 585.884448][T20918] bridge0: entered allmulticast mode [ 585.979530][T20918] bridge0: port 1(erspan0) entered blocking state [ 585.979646][T20918] bridge0: port 1(erspan0) entered disabled state [ 585.979710][T20918] erspan0: entered allmulticast mode [ 585.980509][T20918] erspan0: entered promiscuous mode [ 585.981053][T20918] bridge0: port 1(erspan0) entered blocking state [ 585.981096][T20918] bridge0: port 1(erspan0) entered forwarding state [ 586.617170][ T5817] net_ratelimit: 35 callbacks suppressed [ 586.617187][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 586.727527][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 586.837889][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 586.959669][T20672] .`: (slave dummy0): failed to get link speed/duplex [ 587.064827][T20944] kAFS: No cell specified [ 587.068983][T20672] .`: (slave dummy0): failed to get link speed/duplex [ 587.177445][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 587.297403][T20672] .`: (slave dummy0): failed to get link speed/duplex [ 587.417114][T20672] .`: (slave dummy0): failed to get link speed/duplex [ 587.527200][T20672] .`: (slave dummy0): failed to get link speed/duplex [ 587.650972][T20672] .`: (slave dummy0): failed to get link speed/duplex [ 589.038690][T20970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 589.238441][T20976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 589.535277][T20981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 590.427892][T20992] vlan5: entered promiscuous mode [ 590.427906][T20992] hsr0: entered promiscuous mode [ 590.439434][T20992] vlan5: entered allmulticast mode [ 590.439448][T20992] hsr0: entered allmulticast mode [ 590.439456][T20992] hsr_slave_0: entered allmulticast mode [ 590.439466][T20992] hsr_slave_1: entered allmulticast mode [ 591.672233][ T13] net_ratelimit: 34 callbacks suppressed [ 591.672249][ T13] .`: (slave dummy0): failed to get link speed/duplex [ 591.779466][ T13] .`: (slave dummy0): failed to get link speed/duplex [ 591.887998][ T13] .`: (slave dummy0): failed to get link speed/duplex [ 592.002432][ T13] .`: (slave dummy0): failed to get link speed/duplex [ 592.110363][T20993] .`: (slave dummy0): failed to get link speed/duplex [ 592.225960][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 592.336482][T20993] .`: (slave dummy0): failed to get link speed/duplex [ 592.437266][T20993] .`: (slave dummy0): failed to get link speed/duplex [ 592.549866][T20993] .`: (slave dummy0): failed to get link speed/duplex [ 592.662793][ T13] .`: (slave dummy0): failed to get link speed/duplex [ 593.096774][T21017] siw: device registration error -23 [ 593.314000][T21025] FAULT_INJECTION: forcing a failure. [ 593.314000][T21025] name failslab, interval 1, probability 0, space 0, times 0 [ 593.314022][T21025] CPU: 2 UID: 0 PID: 21025 Comm: syz.2.3604 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.314040][T21025] Tainted: [L]=SOFTLOCKUP [ 593.314044][T21025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 593.314051][T21025] Call Trace: [ 593.314056][T21025] [ 593.314061][T21025] dump_stack_lvl+0x100/0x190 [ 593.314081][T21025] should_fail_ex.cold+0x5/0xa [ 593.314097][T21025] should_failslab+0xc2/0x120 [ 593.314114][T21025] __kmalloc_cache_noprof+0x91/0x6d0 [ 593.314135][T21025] ? virtual_ncidev_open+0x49/0x220 [ 593.314152][T21025] virtual_ncidev_open+0x49/0x220 [ 593.314165][T21025] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 593.314177][T21025] misc_open+0x26d/0x450 [ 593.314193][T21025] ? __pfx_misc_open+0x10/0x10 [ 593.314208][T21025] chrdev_open+0x234/0x6a0 [ 593.314222][T21025] ? __pfx_apparmor_file_open+0x10/0x10 [ 593.314236][T21025] ? __pfx_chrdev_open+0x10/0x10 [ 593.314250][T21025] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 593.314270][T21025] do_dentry_open+0x6ab/0x14d0 [ 593.314283][T21025] ? __pfx_chrdev_open+0x10/0x10 [ 593.314299][T21025] vfs_open+0x82/0x3f0 [ 593.314316][T21025] path_openat+0x19fa/0x2440 [ 593.314333][T21025] ? __pfx_path_openat+0x10/0x10 [ 593.314351][T21025] do_file_open+0x20e/0x430 [ 593.314366][T21025] ? __pfx_do_file_open+0x10/0x10 [ 593.314391][T21025] ? _raw_spin_unlock+0x28/0x50 [ 593.314408][T21025] ? alloc_fd+0x471/0x7a0 [ 593.314425][T21025] do_sys_openat2+0x10f/0x1e0 [ 593.314442][T21025] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.314458][T21025] ? find_held_lock+0x2b/0x80 [ 593.314470][T21025] ? __fget_files+0x215/0x3d0 [ 593.314487][T21025] __ia32_compat_sys_openat+0x12d/0x210 [ 593.314512][T21025] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 593.314548][T21025] __do_fast_syscall_32+0x13a/0x8b0 [ 593.314573][T21025] do_fast_syscall_32+0x32/0x70 [ 593.314596][T21025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.314620][T21025] RIP: 0023:0xf709efec [ 593.314638][T21025] Code: Unable to access opcode bytes at 0xf709efc2. [ 593.314643][T21025] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 593.314655][T21025] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 593.314662][T21025] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.314668][T21025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.314675][T21025] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 593.314682][T21025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.314695][T21025] [ 595.236864][T21050] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 595.420356][T21052] md/raid1:md0: active with 1 out of 2 mirrors [ 595.494066][T21057] md: md0 stopped. [ 595.858365][T21065] FAULT_INJECTION: forcing a failure. [ 595.858365][T21065] name failslab, interval 1, probability 0, space 0, times 0 [ 595.858388][T21065] CPU: 2 UID: 0 PID: 21065 Comm: syz.0.3619 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.858405][T21065] Tainted: [L]=SOFTLOCKUP [ 595.858410][T21065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 595.858417][T21065] Call Trace: [ 595.858421][T21065] [ 595.858427][T21065] dump_stack_lvl+0x100/0x190 [ 595.858458][T21065] should_fail_ex.cold+0x5/0xa [ 595.858477][T21065] should_failslab+0xc2/0x120 [ 595.858494][T21065] __kmalloc_cache_noprof+0x91/0x6d0 [ 595.858506][T21065] ? virtual_ncidev_open+0x49/0x220 [ 595.858520][T21065] virtual_ncidev_open+0x49/0x220 [ 595.858532][T21065] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 595.858546][T21065] misc_open+0x26d/0x450 [ 595.858561][T21065] ? __pfx_misc_open+0x10/0x10 [ 595.858575][T21065] chrdev_open+0x234/0x6a0 [ 595.858595][T21065] ? __pfx_apparmor_file_open+0x10/0x10 [ 595.858609][T21065] ? __pfx_chrdev_open+0x10/0x10 [ 595.858625][T21065] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 595.858646][T21065] do_dentry_open+0x6ab/0x14d0 [ 595.858660][T21065] ? __pfx_chrdev_open+0x10/0x10 [ 595.858678][T21065] vfs_open+0x82/0x3f0 [ 595.858697][T21065] path_openat+0x19fa/0x2440 [ 595.858713][T21065] ? __pfx_path_openat+0x10/0x10 [ 595.858731][T21065] do_file_open+0x20e/0x430 [ 595.858748][T21065] ? __pfx_do_file_open+0x10/0x10 [ 595.858763][T21065] ? __pfx___schedule+0x10/0x10 [ 595.858783][T21065] ? _raw_spin_unlock+0x3e/0x50 [ 595.858799][T21065] ? alloc_fd+0x471/0x7a0 [ 595.858816][T21065] do_sys_openat2+0x10f/0x1e0 [ 595.858832][T21065] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.858852][T21065] ? find_held_lock+0x2b/0x80 [ 595.858866][T21065] ? __fget_files+0x215/0x3d0 [ 595.858882][T21065] __ia32_compat_sys_openat+0x12d/0x210 [ 595.858901][T21065] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 595.858924][T21065] __do_fast_syscall_32+0x13a/0x8b0 [ 595.858939][T21065] do_fast_syscall_32+0x32/0x70 [ 595.858952][T21065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 595.858980][T21065] RIP: 0023:0xf70befec [ 595.858996][T21065] Code: Unable to access opcode bytes at 0xf70befc2. [ 595.859001][T21065] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 595.859012][T21065] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 595.859020][T21065] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.859027][T21065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.859035][T21065] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 595.859043][T21065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 595.859059][T21065] [ 596.797227][ T5815] net_ratelimit: 35 callbacks suppressed [ 596.797252][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 596.907689][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 597.017991][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 597.128410][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 597.243509][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 597.359718][ T5815] .`: (slave dummy0): failed to get link speed/duplex [ 597.468144][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 597.584720][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 597.784522][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 597.890876][ T5817] .`: (slave dummy0): failed to get link speed/duplex [ 598.464763][T21092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 598.514992][T21096] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 598.740650][T21104] md/raid:md0: not clean -- starting background reconstruction [ 598.740890][T21104] md/raid:md0: device ram0 operational as raid disk 0 [ 598.982405][T21104] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 598.982701][T21104] ------------[ cut here ]------------ [ 598.982710][T21104] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 598.982728][T21104] shift exponent 64 is too large for 64-bit type 'long unsigned int' [ 598.982747][T21104] CPU: 2 UID: 0 PID: 21104 Comm: syz.2.3628 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.982773][T21104] Tainted: [L]=SOFTLOCKUP [ 598.982781][T21104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 598.982793][T21104] Call Trace: [ 598.982800][T21104] [ 598.982808][T21104] dump_stack_lvl+0x100/0x190 [ 598.982841][T21104] ubsan_epilogue+0xa/0x30 [ 598.982864][T21104] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 598.982902][T21104] raid5_set_limits+0x310/0x53c [ 598.982932][T21104] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 598.982957][T21104] ? __pfx_raid5_set_limits+0x10/0x10 [ 598.983011][T21104] raid5_run.cold+0x55e/0xd51 [ 598.983057][T21104] md_run+0xc2f/0x2510 [ 598.983087][T21104] ? __pfx_md_run+0x10/0x10 [ 598.983109][T21104] ? set_disk_ro+0x1b7/0x210 [ 598.983129][T21104] ? __pfx_set_disk_ro+0x10/0x10 [ 598.983154][T21104] do_md_run+0x36/0x660 [ 598.983180][T21104] array_state_store+0x9c5/0xcf0 [ 598.983210][T21104] md_attr_store+0x1c5/0x330 [ 598.983240][T21104] ? __pfx_md_attr_store+0x10/0x10 [ 598.983270][T21104] sysfs_kf_write+0xf2/0x150 [ 598.983294][T21104] kernfs_fop_write_iter+0x3e0/0x5f0 [ 598.983323][T21104] ? __pfx_sysfs_kf_write+0x10/0x10 [ 598.983348][T21104] vfs_write+0x6af/0x1050 [ 598.983373][T21104] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 598.983406][T21104] ? __pfx_vfs_write+0x10/0x10 [ 598.983426][T21104] ? find_held_lock+0x2b/0x80 [ 598.983465][T21104] ksys_write+0x12a/0x250 [ 598.983488][T21104] ? __pfx_ksys_write+0x10/0x10 [ 598.983518][T21104] __do_fast_syscall_32+0x13a/0x8b0 [ 598.983546][T21104] do_fast_syscall_32+0x32/0x70 [ 598.983570][T21104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.983596][T21104] RIP: 0023:0xf709efec [ 598.983635][T21104] Code: Unable to access opcode bytes at 0xf709efc2. [ 598.983646][T21104] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 598.983667][T21104] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000500 [ 598.983679][T21104] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.983692][T21104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.983702][T21104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 598.983715][T21104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.983743][T21104] [ 598.983780][T21104] ---[ end trace ]--- [ 598.983791][T21104] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 599.097652][T21104] CPU: 2 UID: 0 PID: 21104 Comm: syz.2.3628 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.102218][T21104] Tainted: [L]=SOFTLOCKUP [ 599.104066][T21104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.108287][T21104] Call Trace: [ 599.109772][T21104] [ 599.111036][T21104] dump_stack_lvl+0x100/0x190 [ 599.113058][T21104] vpanic+0x553/0x970 [ 599.114760][T21104] ? __pfx_vpanic+0x10/0x10 [ 599.116769][T21104] ? irqentry_exit+0x24d/0xa10 [ 599.118831][T21104] ? lockdep_hardirqs_on+0x7d/0x110 [ 599.121068][T21104] ? irqentry_exit+0x24d/0xa10 [ 599.123112][T21104] panic+0xd1/0xe0 [ 599.124751][T21104] ? __pfx_panic+0x10/0x10 [ 599.126652][T21104] ? dump_stack_lvl+0x176/0x190 [ 599.128756][T21104] check_panic_on_warn.cold+0x19/0x34 [ 599.131054][T21104] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 599.133773][T21104] raid5_set_limits+0x310/0x53c [ 599.135934][T21104] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 599.137976][T21104] ? __pfx_raid5_set_limits+0x10/0x10 [ 599.140320][T21104] raid5_run.cold+0x55e/0xd51 [ 599.142341][T21104] md_run+0xc2f/0x2510 [ 599.144136][T21104] ? __pfx_md_run+0x10/0x10 [ 599.146109][T21104] ? set_disk_ro+0x1b7/0x210 [ 599.147989][T21104] ? __pfx_set_disk_ro+0x10/0x10 [ 599.150152][T21104] do_md_run+0x36/0x660 [ 599.151989][T21104] array_state_store+0x9c5/0xcf0 [ 599.154087][T21104] md_attr_store+0x1c5/0x330 [ 599.156129][T21104] ? __pfx_md_attr_store+0x10/0x10 [ 599.158318][T21104] sysfs_kf_write+0xf2/0x150 [ 599.160343][T21104] kernfs_fop_write_iter+0x3e0/0x5f0 [ 599.162609][T21104] ? __pfx_sysfs_kf_write+0x10/0x10 [ 599.164993][T21104] vfs_write+0x6af/0x1050 [ 599.166877][T21104] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 599.169437][T21104] ? __pfx_vfs_write+0x10/0x10 [ 599.171489][T21104] ? find_held_lock+0x2b/0x80 [ 599.173577][T21104] ksys_write+0x12a/0x250 [ 599.175459][T21104] ? __pfx_ksys_write+0x10/0x10 [ 599.177579][T21104] __do_fast_syscall_32+0x13a/0x8b0 [ 599.179833][T21104] do_fast_syscall_32+0x32/0x70 [ 599.181933][T21104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.184509][T21104] RIP: 0023:0xf709efec [ 599.186146][T21104] Code: Unable to access opcode bytes at 0xf709efc2. [ 599.188880][T21104] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 599.192417][T21104] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000500 [ 599.195782][T21104] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.199114][T21104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.202456][T21104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.205810][T21104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.209179][T21104] [ 599.211466][T21104] Kernel Offset: disabled [ 599.213126][T21104] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:07:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90004eefb60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85602634 RDI=ffffc90004eefb60 RBP=ffffc90004eefb20 RSP=ffffc90004eefa80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90004eefb60 R14=ffffc90004eefb28 R15=0000000000000000 RIP=ffffffff8560265d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096956000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080023000 CR3=000000005ce88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000481 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cb1cb00 RSI=ffffffff81b66e9e RDI=ffff88801cb1cb00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b66e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f2890000 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85afcb55 RDI=ffffffff9bc614a0 RBP=ffffffff9bc61460 RSP=ffffc90004eff040 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000000 R14=000000000000007b R15=0000000000000000 RIP=ffffffff85afcb7f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b56000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f709f000 CR3=000000006cc07000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000481 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff81f56a2e RCX=ffffc90006a57718 RDX=1ffff92000d4aed9 RSI=ffffffff8e36b432 RDI=ffffffff81f56a2e RBP=ffffc90006a576c8 RSP=ffffc90006a57640 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b060 R12=ffffffff81f56780 R13=ffffc90006a57740 R14=0000000000000000 R15=ffff888028e92580 RIP=ffffffff81d1fc6c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c316eb8 CR3=0000000053e60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000481 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000