last executing test programs: 2m22.360306007s ago: executing program 0 (id=880): r0 = openat$md_new_array(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) write$md_sysfs(0xffffffffffffffff, 0x0, 0x0) r1 = openat$md_sysfs(0xffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000180)=@str='2', 0x1) r2 = openat$md_sysfs(0xffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000200)=@str='512', 0x3) r3 = openat$md_sysfs(0xffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r3, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r4 = openat$md_sysfs(0xffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000340)=@str='0', 0x1) r5 = openat$md_sysfs(0xffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f00000003c0)=@str='1', 0x1) r6 = openat$md_sysfs(0xffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000440)=@str='active', 0x6) r7 = openat$md(0xffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) close(r7) 2m22.260186259s ago: executing program 0 (id=881): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TIMERSLACK(0x1d, 0xc) sendmmsg$unix(r4, &(0x7f0000000240), 0x318, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x6, 0x8}) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xcc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x6e24, 0xdc, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 2m21.173587891s ago: executing program 0 (id=885): prctl$PR_GET_KEEPCAPS(0x7) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) flock(r0, 0x4) recvfrom$l2tp6(r1, 0x0, 0x0, 0x3, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000180)=0x40) syz_emit_ethernet(0x5e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000286e46593b01c21d97000000000000000000007e8000000000000000000000000000aa890090780000000000000000000000000000000000000001ff020000000000000000000000000001"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001800000000000000", @ANYRES32, @ANYBLOB="f04182dc3bf65e706f2b2281f17a65", @ANYRES64=0x0], 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xf5, 0xf, 0x1, 0x0, r7}, 0x10) openat(r4, &(0x7f0000000040)='./file1\x00', 0x15b462, 0x5a) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) 2m20.443101946s ago: executing program 0 (id=887): r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x494840, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f00000005c0)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:1:/\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ceph\x00', 0x0, &(0x7f00000001c0)='mount_timeout=1,osd_idle_ttl=1,osd_request_timeout=1\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000880)={'wlan1\x00', @random="0100000000eb"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)={0xa000000d}) syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m18.712475058s ago: executing program 0 (id=896): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0x2b49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='usb2512b 0x2', 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, r1, 0x76bdd000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20902, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 2m18.33821592s ago: executing program 0 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000f80)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001780)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000017c0), 0x56) sendmsg$kcm(r8, &(0x7f0000001800)={&(0x7f0000001840)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001900)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000001940)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 2m3.229867116s ago: executing program 32 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000f80)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001780)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000017c0), 0x56) sendmsg$kcm(r8, &(0x7f0000001800)={&(0x7f0000001840)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001900)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000001940)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) 22.086508s ago: executing program 1 (id=1447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000600), 0x612, 0x4000010) 21.659781333s ago: executing program 1 (id=1449): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000912601174d0088f07b42d7d436082379fefca9e23ddee0d131867327cfe7d265a08c550e2992a05ccb16a00df42cb2e5f0c2495e44c7906536be93f62ef709c7b535618656b2ed9419f0354ee1c128afdcaff51680e3c5da3e927e876a0a03cfbce0f4422e381257e958b83964c5951c3a649e0dd86ad88fd0210bea033a508d14f2afc555acd3bfae9eefcef0fd"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x16, &(0x7f0000001bc0)=@framed={{0x18, 0x8}, [@generic={0xc, 0x3, 0x2, 0x5, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0x66}, @ringbuf_query, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000680)='GPL\x00', 0x402, 0xde, &(0x7f00000008c0)=""/222}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r1, 0xba, &(0x7f0000000a00)}, 0x10) r2 = openat$hpet(0xffffff9c, &(0x7f0000000100), 0x221002, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/14, 0xe}], 0x1, 0x5, 0xd20) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f00000001c0)="2ae0e710", 0x4, 0x4, &(0x7f0000000200)={0xa, 0x0, 0x40000, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000240), 0x4000000000001e9, 0x10162, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) write$binfmt_script(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) openat(r2, &(0x7f0000000380)='./sys\x00', 0x40803, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={0x1, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={r6, 0x7}, &(0x7f0000000480)=0x8) 21.600753313s ago: executing program 1 (id=1450): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 20.648712821s ago: executing program 1 (id=1454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000600), 0x612, 0x4000010) 19.729640871s ago: executing program 1 (id=1460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0x2b49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='usb2512b 0x2', 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, r1, 0x76bdd000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20902, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 19.224168086s ago: executing program 1 (id=1463): r0 = openat$md_new_array(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000100)=@str='raid1', 0x5) r1 = openat$md_sysfs(0xffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000180)=@str='2', 0x1) r2 = openat$md_sysfs(0xffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000200)=@str='512', 0x3) r3 = openat$md_sysfs(0xffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r3, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r4 = openat$md_sysfs(0xffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000340)=@str='0', 0x1) r5 = openat$md_sysfs(0xffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f00000003c0)=@str='1', 0x1) r6 = openat$md_sysfs(0xffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r6, 0x0, 0x0) r7 = openat$md(0xffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) close(r7) 8.831822359s ago: executing program 4 (id=1499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000600), 0x612, 0x4000010) 7.710963604s ago: executing program 4 (id=1501): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r2, r2, 0x0, 0x8000000f3aa6ea) socket(0xb, 0x2, 0x0) 7.710373463s ago: executing program 3 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000f80)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001780)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000017c0), 0x56) sendmsg$kcm(r8, &(0x7f0000001800)={&(0x7f0000001840)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001900)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000001940)="02db0b9ef1ca", 0x6}], 0x2}, 0x4005) 7.648931166s ago: executing program 2 (id=1503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 7.5540955s ago: executing program 2 (id=1504): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) r2 = syz_open_dev$dvb_demux(&(0x7f0000000240), 0x0, 0x41) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_dest={0x18, 0x114, 0x2, {0x86, 0x40}}], 0x18, 0x20008011}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f00000002c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "e00000000dbb00"}, 0x403eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000300)={0x2, {"c1fe1852b36e6f456d77ec0092000008", "00290000008a000100fbffd900", "000000000000161cdf2b7400f5ffffdf"}, 0x7, 0x4}) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='e:my_read_msr1 msr/read_msr', 0x1b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) creat(&(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x21) write(r6, &(0x7f0000000200)='1', 0x1) sendmsg$nl_route(r1, &(0x7f0000005f00)={0x0, 0x0, &(0x7f0000005f40)={&(0x7f0000005f80)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 7.364673357s ago: executing program 3 (id=1505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x161) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x48342, 0x1a1) write$UHID_CREATE2(r3, &(0x7f0000000480)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x6a, 0x81, 0x6, 0x4, 0xf4, 0xc, "11f91e0dd2882d0dfa5b64573f1c4bb3ba854456653f648fd59d2693b345e7d7f0c7d18407b218ea9db619e7d64e464a75b60bac63052bc2af143dd6197531569852cf2dbffca19b4f7d9f8f66d468b7f1255e51e57f701dea0a117233b43abecd3dcd574d70a4e72426"}}, 0x182) mlock(&(0x7f000009f000/0xc00000)=nil, 0xc00000) 6.75633356s ago: executing program 2 (id=1506): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x14ce, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x3f00) 6.724999491s ago: executing program 4 (id=1507): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0xcf7a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000680)='\x00'/87, 0x0, 0xffc}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffb, 0x2, 0x1, @scatter={0x0, 0x5c00, 0x0}, &(0x7f00000002c0)="8516", 0x0, 0x10, 0x5bb727690d5f0ff2, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.337936261s ago: executing program 3 (id=1508): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0xa) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0xfffffffffffffffe, {0x3, 0x2, 0x2, 0x0, 0xfc, 0xfffffffe, {0x2, 0xfffffffffffffff1, 0x5, 0x5, 0x100000002, 0x100000001, 0x0, 0x0, 0x4, 0x1000, 0x2, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000008940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$md(0xffffffffffffff9c, &(0x7f0000000280)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r2, 0x40140921, 0x0) 5.619560614s ago: executing program 4 (id=1509): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r3, &(0x7f0000000180)='./file0\x00', 0x200) r4 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) mkdir(&(0x7f00000003c0)='./trace\x00', 0x1ff) openat(0xffffff9c, &(0x7f0000000540)='./trace/events/mac80211/enable\x00', 0x40000, 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)={[{0x2d, 'pids'}]}, 0x6) 5.619354438s ago: executing program 2 (id=1510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, 0x0, 0x0, 0x4000010) 5.619242605s ago: executing program 3 (id=1511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, 0x0, 0x0, 0x4000010) 5.469027943s ago: executing program 4 (id=1512): mkdirat(0xffffffffffffff9c, 0x0, 0x15d) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x18}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x40) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.78025821s ago: executing program 33 (id=1463): r0 = openat$md_new_array(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000100)=@str='raid1', 0x5) r1 = openat$md_sysfs(0xffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000180)=@str='2', 0x1) r2 = openat$md_sysfs(0xffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000200)=@str='512', 0x3) r3 = openat$md_sysfs(0xffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r3, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r4 = openat$md_sysfs(0xffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000340)=@str='0', 0x1) r5 = openat$md_sysfs(0xffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f00000003c0)=@str='1', 0x1) r6 = openat$md_sysfs(0xffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r6, 0x0, 0x0) r7 = openat$md(0xffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) close(r7) 2.472585799s ago: executing program 4 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x133}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.441807524s ago: executing program 2 (id=1515): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x8000001, 0x1f00, 0x1, 0x255, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffda, 0x200, 0x20, 0x15e, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x140, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r12}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 2.250413079s ago: executing program 3 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000f80)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001780)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000017c0), 0x56) sendmsg$kcm(r8, &(0x7f0000001800)={&(0x7f0000001840)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001900)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000001940)="02db0b9ef1cafd", 0x7}], 0x2}, 0x4005) 519.540578ms ago: executing program 3 (id=1517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000600), 0x612, 0x4000010) 0s ago: executing program 2 (id=1518): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r0 = fsopen(&(0x7f00000022c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000002300)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) r3 = open(&(0x7f0000002340)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000023c0)={0x0, 0x0, 0xfd8b, 0x5}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002400), 0x42, 0x0) write$dsp(r4, &(0x7f0000002440)="5cba", 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002380)='./bus\x00', 0x88882, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): send_sge=6 max_recv_sge=6 [ 159.481104][ T8318] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 159.632733][ T8329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 159.892098][ T8335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 160.171768][ T8341] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 160.312642][ T8344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 161.667755][ T8364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 161.800826][ T8368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 161.915861][ T8371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 162.381563][ T8380] set_target_expiration: 1 callbacks suppressed [ 162.381582][ T8380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 163.361472][ T8398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.389469][ T8398] md: could not open device unknown-block(1,2). [ 163.405173][ T8398] md: could not open device unknown-block(1,3). [ 163.406888][ T8398] md: personality for level is not loaded! [ 164.832060][ T8413] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 165.756726][ T8429] syz_tun: entered allmulticast mode [ 166.055582][ T8435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 166.140866][ T8438] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 166.319508][ T8444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 167.665926][ T8450] FAULT_INJECTION: forcing a failure. [ 167.665926][ T8450] name failslab, interval 1, probability 0, space 0, times 0 [ 167.665955][ T8450] CPU: 1 UID: 0 PID: 8450 Comm: syz.2.637 Not tainted syzkaller #0 PREEMPT(full) [ 167.665976][ T8450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.665986][ T8450] Call Trace: [ 167.665991][ T8450] [ 167.665996][ T8450] dump_stack_lvl+0x100/0x190 [ 167.666021][ T8450] should_fail_ex.cold+0x5/0xa [ 167.666039][ T8450] should_failslab+0xc2/0x120 [ 167.666056][ T8450] __kmalloc_noprof+0xfc/0x840 [ 167.666070][ T8450] ? batadv_hash_new+0x74/0x2e0 [ 167.666091][ T8450] batadv_hash_new+0x74/0x2e0 [ 167.666109][ T8450] ? queue_delayed_work_on+0x8c/0x1e0 [ 167.666131][ T8450] batadv_tt_init+0x278/0x350 [ 167.666148][ T8450] batadv_mesh_init+0x52f/0x8f0 [ 167.666168][ T8450] batadv_meshif_init_late+0xb26/0xe60 [ 167.666189][ T8450] ? __kasan_kmalloc+0xaa/0xb0 [ 167.666211][ T8450] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 167.666230][ T8450] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 167.666260][ T8450] ? register_netdevice+0x507/0x26b0 [ 167.666300][ T8450] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 167.666319][ T8450] register_netdevice+0x680/0x26b0 [ 167.666347][ T8450] ? alloc_netdev_mqs+0x11a7/0x1540 [ 167.666367][ T8450] ? __pfx_register_netdevice+0x10/0x10 [ 167.666396][ T8450] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 167.666427][ T8450] batadv_meshif_newlink+0x8f/0xc0 [ 167.666457][ T8450] rtnl_newlink+0x1697/0x2620 [ 167.666511][ T8450] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.666531][ T8450] ? is_bpf_text_address+0x94/0x1a0 [ 167.666561][ T8450] ? kernel_text_address+0x8d/0x100 [ 167.666590][ T8450] ? __kernel_text_address+0xd/0x30 [ 167.666646][ T8450] ? lock_acquire+0x1d1/0x380 [ 167.666666][ T8450] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 167.666687][ T8450] ? find_held_lock+0x2b/0x80 [ 167.666713][ T8450] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 167.666733][ T8450] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 167.666755][ T8450] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.666777][ T8450] rtnetlink_rcv_msg+0x95e/0xe90 [ 167.666800][ T8450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.666826][ T8450] ? __lock_acquire+0x5c0/0x1f40 [ 167.666852][ T8450] netlink_rcv_skb+0x159/0x420 [ 167.666884][ T8450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.666908][ T8450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.666937][ T8450] ? netlink_deliver_tap+0x1ae/0xb50 [ 167.666973][ T8450] netlink_unicast+0x668/0x950 [ 167.666994][ T8450] ? __pfx_netlink_unicast+0x10/0x10 [ 167.667021][ T8450] netlink_sendmsg+0x9ac/0x10c0 [ 167.667045][ T8450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.667070][ T8450] ? apparmor_socket_sendmsg+0x165/0x280 [ 167.667099][ T8450] ? ____sys_sendmsg+0xa99/0xc30 [ 167.667120][ T8450] ____sys_sendmsg+0xa99/0xc30 [ 167.667142][ T8450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.667175][ T8450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.667217][ T8450] ___sys_sendmsg+0x190/0x1e0 [ 167.667244][ T8450] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.667268][ T8450] ? futex_wait+0x11e/0x370 [ 167.667300][ T8450] ? find_held_lock+0x2b/0x80 [ 167.667343][ T8450] __sys_sendmsg+0x160/0x210 [ 167.667372][ T8450] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.667401][ T8450] __do_fast_syscall_32+0x14d/0x8e0 [ 167.667421][ T8450] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.667439][ T8450] do_fast_syscall_32+0x32/0x70 [ 167.667458][ T8450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.667474][ T8450] RIP: 0023:0xf702efbc [ 167.667486][ T8450] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 167.667498][ T8450] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 167.667511][ T8450] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000300 [ 167.667519][ T8450] RDX: 0000000020000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.667526][ T8450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.667533][ T8450] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.667540][ T8450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.667555][ T8450] [ 167.856192][ T8461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 168.558320][ T8470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 168.891779][ T8478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 168.914817][ T8480] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 168.935205][ T8482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 169.834421][ T8491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 169.854768][ T8493] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 169.882165][ T8493] ip6erspan0: entered allmulticast mode [ 169.888220][ T8493] bond1: (slave ip6erspan0): making interface the new active one [ 169.889032][ T8493] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 170.816696][ T8513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 172.014421][ T8523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 172.208864][ T8530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 172.280078][ T8528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 172.515170][ T8536] md: could not open device unknown-block(1,0). [ 172.555313][ T8536] md: could not open device unknown-block(1,1). [ 172.559460][ T8536] md: personality for level is not loaded! [ 174.924555][ T8568] set_target_expiration: 1 callbacks suppressed [ 174.924573][ T8568] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 175.162011][ T8573] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 175.247008][ T8578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 175.397724][ T8581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 175.553274][ T8584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 175.764686][ T8588] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.861038][ T8588] md: could not open device unknown-block(1,0). [ 175.901796][ T8588] md: could not open device unknown-block(1,1). [ 175.905842][ T8588] md: personality for level is not loaded! [ 176.255046][ T8596] md: could not open device unknown-block(1,6). [ 176.295086][ T8599] md: could not open device unknown-block(1,7). [ 176.298578][ T8596] md: personality for level is not loaded! [ 177.209357][ T8610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 177.359073][ T8614] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 177.469196][ T8619] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 178.216176][ T8623] md: could not open device unknown-block(1,0). [ 178.255272][ T8623] md: could not open device unknown-block(1,1). [ 178.257076][ T8623] md: personality for level is not loaded! [ 178.771144][ T8637] md: personality for level is not loaded! [ 178.848414][ T8631] md: could not open device unknown-block(1,4). [ 178.905223][ T8636] md: could not open device unknown-block(1,5). [ 178.907006][ T8635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 179.842132][ T8651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 180.757727][ T8662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 182.315885][ T8692] jffs2: notice: (8692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.308851][ T8720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 184.211420][ T8721] bridge0: port 3(syz_tun) entered blocking state [ 184.211472][ T8721] bridge0: port 3(syz_tun) entered disabled state [ 184.212460][ T8721] syz_tun: entered promiscuous mode [ 184.212823][ T8721] bridge0: port 3(syz_tun) entered blocking state [ 184.212869][ T8721] bridge0: port 3(syz_tun) entered forwarding state [ 184.493113][ T8737] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 184.698386][ T8742] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 185.573799][ T8752] syzkaller0: entered promiscuous mode [ 185.573823][ T8752] syzkaller0: entered allmulticast mode [ 185.574004][ T8750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 185.598190][ T8752] tipc: Enabled bearer , priority 0 [ 185.617912][ T8752] tipc: Resetting bearer [ 185.625987][ T8751] tipc: Resetting bearer [ 185.646708][ T8751] tipc: Disabling bearer [ 189.644436][ T8781] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.725649][ T8786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 189.851193][ T8788] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 189.923257][ T8730] syz.1.709 (8730) used greatest stack depth: 19448 bytes left [ 190.683429][ T8801] FAULT_INJECTION: forcing a failure. [ 190.683429][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 190.683451][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.1.728 Not tainted syzkaller #0 PREEMPT(full) [ 190.683467][ T8801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.683481][ T8801] Call Trace: [ 190.683486][ T8801] [ 190.683491][ T8801] dump_stack_lvl+0x100/0x190 [ 190.683517][ T8801] should_fail_ex.cold+0x5/0xa [ 190.683537][ T8801] should_failslab+0xc2/0x120 [ 190.683555][ T8801] kmem_cache_alloc_noprof+0x92/0x6a0 [ 190.683569][ T8801] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 190.683600][ T8801] ? acpi_ps_alloc_op+0x212/0x2b0 [ 190.683619][ T8801] acpi_ps_alloc_op+0x212/0x2b0 [ 190.683632][ T8801] ? acpi_ut_status_exit+0x111/0x1c0 [ 190.683647][ T8801] acpi_ps_create_op+0x4b3/0xd10 [ 190.683661][ T8801] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 190.683674][ T8801] ? acpi_ut_create_generic_state+0x61/0xc0 [ 190.683692][ T8801] ? acpi_ut_status_exit+0x111/0x1c0 [ 190.683718][ T8801] acpi_ps_parse_loop+0x93f/0x26e0 [ 190.683745][ T8801] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 190.683764][ T8801] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 190.683785][ T8801] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 190.683810][ T8801] ? acpi_ut_create_thread_state+0x6d/0x170 [ 190.683838][ T8801] acpi_ps_parse_aml+0x81e/0x1120 [ 190.683864][ T8801] acpi_ps_execute_method+0x5c4/0xe90 [ 190.683884][ T8801] acpi_ns_evaluate+0x640/0x1670 [ 190.683903][ T8801] acpi_ut_evaluate_object+0xf7/0x610 [ 190.683921][ T8801] acpi_rs_get_prt_method_data+0xa0/0x150 [ 190.683937][ T8801] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 190.683952][ T8801] ? acpi_ut_status_exit+0x111/0x1c0 [ 190.683967][ T8801] ? acpi_rs_validate_parameters+0x104/0x210 [ 190.683986][ T8801] acpi_get_irq_routing_table+0xb8/0x140 [ 190.684002][ T8801] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 190.684020][ T8801] ? do_raw_spin_lock+0x128/0x260 [ 190.684038][ T8801] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 190.684057][ T8801] ? do_raw_spin_lock+0x128/0x260 [ 190.684073][ T8801] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 190.684091][ T8801] ? mark_held_locks+0x40/0x70 [ 190.684104][ T8801] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 190.684123][ T8801] acpi_pci_irq_lookup+0x8e/0x6b0 [ 190.684139][ T8801] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 190.684160][ T8801] acpi_pci_irq_disable+0x1a8/0x360 [ 190.684175][ T8801] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 190.684191][ T8801] pcibios_disable_device+0x89/0xb0 [ 190.684208][ T8801] do_pci_disable_device+0x9f/0x100 [ 190.684223][ T8801] ? __pfx_do_pci_disable_device+0x10/0x10 [ 190.684240][ T8801] ? pci_release_region.part.0+0x15b/0x2e0 [ 190.684260][ T8801] pci_disable_device+0x130/0x270 [ 190.684275][ T8801] virtio_pci_remove+0xcf/0x110 [ 190.684290][ T8801] pci_device_remove+0xb2/0x1d0 [ 190.684302][ T8801] ? __pfx_pci_device_remove+0x10/0x10 [ 190.684315][ T8801] device_remove+0xcb/0x180 [ 190.684350][ T8801] device_release_driver_internal+0x441/0x610 [ 190.684369][ T8801] pci_stop_bus_device+0x120/0x160 [ 190.684385][ T8801] pci_stop_and_remove_bus_device+0x58/0xa0 [ 190.684401][ T8801] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 190.684417][ T8801] remove_store+0x123/0x140 [ 190.684434][ T8801] ? __pfx_remove_store+0x10/0x10 [ 190.684449][ T8801] ? find_held_lock+0x2b/0x80 [ 190.684466][ T8801] ? sysfs_file_kobj+0xe4/0x290 [ 190.684488][ T8801] ? sysfs_file_kobj+0xe4/0x290 [ 190.684508][ T8801] ? __pfx_remove_store+0x10/0x10 [ 190.684523][ T8801] dev_attr_store+0x58/0x80 [ 190.684538][ T8801] ? __pfx_dev_attr_store+0x10/0x10 [ 190.684562][ T8801] sysfs_kf_write+0xf2/0x150 [ 190.684580][ T8801] kernfs_fop_write_iter+0x3e0/0x5f0 [ 190.684594][ T8801] ? __pfx_sysfs_kf_write+0x10/0x10 [ 190.684614][ T8801] vfs_write+0x6af/0x1040 [ 190.684629][ T8801] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 190.684646][ T8801] ? __pfx_vfs_write+0x10/0x10 [ 190.684659][ T8801] ? find_held_lock+0x2b/0x80 [ 190.684687][ T8801] ksys_write+0x12a/0x250 [ 190.684701][ T8801] ? __pfx_ksys_write+0x10/0x10 [ 190.684720][ T8801] __do_fast_syscall_32+0x14d/0x8e0 [ 190.684738][ T8801] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.684757][ T8801] do_fast_syscall_32+0x32/0x70 [ 190.684776][ T8801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.684792][ T8801] RIP: 0023:0xf6fcefbc [ 190.684803][ T8801] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 190.684815][ T8801] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 190.684828][ T8801] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 190.684836][ T8801] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.684847][ T8801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.684856][ T8801] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.684866][ T8801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.684890][ T8801] [ 190.687113][ T8801] ACPI Error: Aborting method \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 190.687388][ T8801] ACPI Error: Method execution failed \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/uteval-68) [ 190.687506][ T8801] virtio-pci 0000:00:03.0: can't derive routing for PCI INT A [ 190.721234][ T8800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 191.709380][ T8814] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 191.740650][ T8815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.740676][ T8815] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 191.749162][ T8815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.749178][ T8815] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 191.757363][ T8815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.757388][ T8815] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 191.763114][ T8815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.763129][ T8815] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 191.891249][ T8825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 191.952332][ T8827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 192.896096][ T8843] warning: `syz.1.744' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.983123][ T8847] pim6reg: entered allmulticast mode [ 193.149538][ T8849] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 193.149965][ T8849] exFAT-fs (nbd1): unable to read boot sector [ 193.149974][ T8849] exFAT-fs (nbd1): failed to read boot sector [ 193.149979][ T8849] exFAT-fs (nbd1): failed to recognize exfat type [ 193.522211][ T8855] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 193.786610][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.786645][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.113196][ T8865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 194.464283][ T8873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 195.425270][ T8888] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.604905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 196.583004][ T8908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 196.882841][ T8914] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 198.164906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 198.394904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 199.780753][ T8944] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 199.780778][ T8944] netlink: 55 bytes leftover after parsing attributes in process `syz.0.771'. [ 200.236377][ T8955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 201.427797][ T8982] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 202.088490][ T8994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 202.145488][ T8996] md: could not open device unknown-block(1,4). [ 202.185172][ T8996] md: could not open device unknown-block(1,5). [ 202.187653][ T8996] md: personality for level is not loaded! [ 202.292600][ T9000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 202.426039][ T9003] md: could not open device unknown-block(1,2). [ 202.465079][ T9003] md: could not open device unknown-block(1,3). [ 202.472713][ T9003] md: personality for level is not loaded! [ 202.928281][ T5884] usb 5-1: USB disconnect, device number 4 [ 203.508756][ T9026] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 204.365074][ T9032] md: could not open device unknown-block(1,0). [ 204.387199][ T9032] md: personality for level is not loaded! [ 204.425208][ T9031] md: could not open device unknown-block(1,1). [ 204.622366][ T9044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 204.626112][ T9046] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 205.755150][ T9055] md: could not open device unknown-block(1,4). [ 205.808349][ T9058] md: could not open device unknown-block(1,5). [ 205.810147][ T9055] md: personality for level is not loaded! [ 205.978655][ T9068] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 205.983630][ T9067] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 205.983661][ T9067] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.983825][ T9067] vhci_hcd vhci_hcd.0: Device attached [ 205.994340][ T9064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 206.175998][ T11] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 206.245330][ T11] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 206.820120][ T9069] vhci_hcd: connection reset by peer [ 206.826398][ T14] vhci_hcd vhci_hcd.2: stop threads [ 206.826422][ T14] vhci_hcd vhci_hcd.2: release socket [ 206.826907][ T14] vhci_hcd vhci_hcd.2: disconnect device [ 207.895324][ T9084] md: could not open device unknown-block(1,4). [ 207.949284][ T9084] md: could not open device unknown-block(1,5). [ 207.954291][ T9084] md: personality for level is not loaded! [ 208.095847][ T9088] md: could not open device unknown-block(1,0). [ 208.135318][ T9088] md: could not open device unknown-block(1,1). [ 208.137692][ T9088] md: personality for level is not loaded! [ 209.239385][ T9105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 209.580526][ T9117] Console: switching to colour dummy device 80x25 [ 210.155081][ T9135] md: could not open device unknown-block(1,0). [ 210.185034][ T9135] md: could not open device unknown-block(1,1). [ 210.196017][ T9135] md: personality for level is not loaded! [ 210.996220][ T9143] md: could not open device unknown-block(1,6). [ 211.015245][ T9143] md: could not open device unknown-block(1,7). [ 211.017645][ T9143] md: personality for level is not loaded! [ 211.385063][ T11] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 211.824304][ T9113] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.009873][ T9171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 213.028569][ T9167] FAULT_INJECTION: forcing a failure. [ 213.028569][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 213.028589][ T9167] CPU: 2 UID: 0 PID: 9167 Comm: syz.3.837 Not tainted syzkaller #0 PREEMPT(full) [ 213.028604][ T9167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.028611][ T9167] Call Trace: [ 213.028616][ T9167] [ 213.028621][ T9167] dump_stack_lvl+0x100/0x190 [ 213.028645][ T9167] should_fail_ex.cold+0x5/0xa [ 213.028665][ T9167] should_failslab+0xc2/0x120 [ 213.028682][ T9167] __kmalloc_cache_noprof+0x91/0x6d0 [ 213.028700][ T9167] ? __alloc_workqueue+0x165/0x1900 [ 213.028718][ T9167] __alloc_workqueue+0x165/0x1900 [ 213.028732][ T9167] ? rcu_is_watching+0x13/0xc0 [ 213.028750][ T9167] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 213.028767][ T9167] ? lockdep_hardirqs_on+0x7d/0x110 [ 213.028785][ T9167] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.028801][ T9167] ? __debug_object_init+0x2de/0x3d0 [ 213.028818][ T9167] alloc_workqueue_noprof+0xc7/0x130 [ 213.028834][ T9167] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 213.028853][ T9167] ? lockdep_init_map_type+0x5c/0x250 [ 213.028868][ T9167] ? lockdep_init_map_type+0x5c/0x250 [ 213.028885][ T9167] __rds_conn_create+0x1290/0x2650 [ 213.028905][ T9167] ? __pfx___rds_conn_create+0x10/0x10 [ 213.028919][ T9167] ? trace_kmalloc+0xeb/0x110 [ 213.028932][ T9167] ? __kasan_kmalloc+0xaa/0xb0 [ 213.028946][ T9167] ? lockdep_init_map_type+0x5c/0x250 [ 213.028961][ T9167] rds_conn_create_outgoing+0x44/0x60 [ 213.028979][ T9167] rds_sendmsg+0x1140/0x3590 [ 213.029002][ T9167] ? __pfx_rds_sendmsg+0x10/0x10 [ 213.029022][ T9167] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 213.029038][ T9167] ? aa_sock_msg_perm+0x11e/0x200 [ 213.029054][ T9167] ? apparmor_socket_sendmsg+0x165/0x280 [ 213.029071][ T9167] ? ____sys_sendmsg+0xa99/0xc30 [ 213.029085][ T9167] ____sys_sendmsg+0xa99/0xc30 [ 213.029099][ T9167] ? __pfx_rds_sendmsg+0x10/0x10 [ 213.029118][ T9167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.029135][ T9167] ? plist_check_list+0x1b8/0x280 [ 213.029150][ T9167] ? plist_del+0x308/0x510 [ 213.029167][ T9167] ___sys_sendmsg+0x190/0x1e0 [ 213.029183][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.029197][ T9167] ? futex_wake+0x220/0x5e0 [ 213.029216][ T9167] ? find_held_lock+0x2b/0x80 [ 213.029273][ T9167] __sys_sendmsg+0x160/0x210 [ 213.029293][ T9167] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.029321][ T9167] __do_fast_syscall_32+0x14d/0x8e0 [ 213.029343][ T9167] do_fast_syscall_32+0x32/0x70 [ 213.029367][ T9167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.029384][ T9167] RIP: 0023:0xf7f12fbc [ 213.029395][ T9167] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 213.029408][ T9167] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 213.029421][ T9167] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000500 [ 213.029428][ T9167] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.029436][ T9167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.029443][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.029451][ T9167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.029466][ T9167] [ 216.955595][ T9211] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 218.859723][ T9234] jffs2: notice: (9234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.010716][ T9244] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 220.108654][ T43] kauditd_printk_skb: 643 callbacks suppressed [ 220.108737][ T43] audit: type=1326 audit(1794443519.803:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efbc code=0x7ffc0000 [ 220.109306][ T43] audit: type=1326 audit(1794443519.803:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efbc code=0x7ffc0000 [ 220.111884][ T43] audit: type=1326 audit(1794443519.803:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.112467][ T43] audit: type=1326 audit(1794443519.803:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.112759][ T43] audit: type=1326 audit(1794443519.803:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.112880][ T43] audit: type=1326 audit(1794443519.803:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.113232][ T43] audit: type=1326 audit(1794443519.803:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.113453][ T43] audit: type=1326 audit(1794443519.803:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.114050][ T43] audit: type=1326 audit(1794443519.803:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 220.114984][ T43] audit: type=1326 audit(1794443519.803:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.0.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706efd8 code=0x7ffc0000 [ 223.913338][ T9291] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 224.365160][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 225.594620][ T9317] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.635595][ T9317] md: could not open device unknown-block(1,0). [ 225.655069][ T9317] md: could not open device unknown-block(1,1). [ 225.656383][ T9317] md: personality for level is not loaded! [ 227.620714][ T858] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 227.641114][ T858] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 227.770557][ T9355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.885239][ T9356] md: could not open device unknown-block(1,4). [ 227.897280][ T858] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 227.925552][ T9355] md: could not open device unknown-block(1,5). [ 227.929440][ T9355] md: personality for level is not loaded! [ 228.115336][ T9361] md: could not open device unknown-block(1,4). [ 228.155481][ T9360] md: could not open device unknown-block(1,5). [ 228.158818][ T9360] md: personality for level is not loaded! [ 228.409384][ T5884] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 228.670198][ T9348] ceph: No mds server is up or the cluster is laggy [ 229.508042][ T9374] usb251xb 0-0002: supply vdd not found, using dummy regulator [ 229.531915][ T9374] usb251xb 0-0002: configuring block 0 failed: -6 [ 229.531943][ T9374] usb251xb 0-0002: Failed to connect hub (-6) [ 229.586890][ T9374] i2c i2c-0: new_device: Instantiated device usb2512b at 0x02 [ 230.078868][ T9384] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.210851][ T9387] md: could not open device unknown-block(1,2). [ 230.305406][ T9384] md: could not open device unknown-block(1,3). [ 230.317110][ T9384] md: personality for level is not loaded! [ 230.440891][ T9391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.605058][ T9391] md: could not open device unknown-block(1,2). [ 230.692158][ T9391] md: personality for level is not loaded! [ 230.715126][ T9392] md: could not open device unknown-block(1,3). [ 232.184200][ T9413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.228768][ T9413] md: could not open device unknown-block(1,4). [ 232.256216][ T9413] md: could not open device unknown-block(1,5). [ 232.258554][ T9413] md: personality for level is not loaded! [ 232.819392][ T9375] syz.0.896 (9375) used greatest stack depth: 18360 bytes left [ 232.990879][ T9420] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.035010][ T9420] md: could not open device unknown-block(1,2). [ 233.054999][ T9420] md: could not open device unknown-block(1,3). [ 233.056345][ T9420] md: personality for level is not loaded! [ 234.295258][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 234.445816][ T25] usb 6-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 234.446970][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.447009][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.680719][ T25] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 234.691533][ T25] wwan wwan0: port wwan0qmi0 attached [ 234.888753][ T25] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, ba:f2:21:e0:b9:22 [ 235.071539][ T9452] Cannot find set identified by id 0 to match [ 235.076451][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.076709][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.198462][ C2] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 235.198515][ C2] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 235.198726][ T11] usb 6-1: USB disconnect, device number 5 [ 235.207898][ T11] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 235.373371][ T11] wwan wwan0: port wwan0qmi0 disconnected [ 240.205130][ T9525] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 240.313895][ T9527] md: personality for level is not loaded! [ 240.489986][ T9525] md: could not open device unknown-block(1,6). [ 240.908737][ T9526] md: could not open device unknown-block(1,7). [ 241.380160][ T9540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 242.226205][ T9549] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 242.226230][ T9549] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 242.226416][ T9549] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 242.229151][ T9549] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 242.766181][ T9563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 244.172700][ T9581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 244.448564][ T9586] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.535510][ T9586] md: could not open device unknown-block(1,6). [ 244.552306][ T9586] md: personality for level is not loaded! [ 244.605099][ T9587] md: could not open device unknown-block(1,7). [ 244.869333][ T5794] syz_tun (unregistering): left allmulticast mode [ 244.944429][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.951492][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.952492][ T9594] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 244.953309][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.971705][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.973459][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.984321][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.989345][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.993902][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.995232][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.996238][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.147724][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.217694][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.286965][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.363892][ T9595] rxe_eth0 speed is unknown, defaulting to 1000 [ 245.446868][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.618284][ T14] bridge_slave_1: left allmulticast mode [ 245.618328][ T14] bridge_slave_1: left promiscuous mode [ 245.618900][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.623969][ T14] bridge_slave_0: left allmulticast mode [ 245.623984][ T14] bridge_slave_0: left promiscuous mode [ 245.624613][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.641277][ T14] pim6reg: left allmulticast mode [ 245.689021][ T14] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 245.768921][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.770779][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.772171][ T14] bond0 (unregistering): Released all slaves [ 245.776451][ T14] bond1 (unregistering): Released all slaves [ 245.833438][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.835109][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.835217][ T9595] bridge_slave_0: entered allmulticast mode [ 245.842766][ T9595] bridge_slave_0: entered promiscuous mode [ 245.846551][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.846625][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.846725][ T9595] bridge_slave_1: entered allmulticast mode [ 245.847902][ T9595] bridge_slave_1: entered promiscuous mode [ 245.881788][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.883159][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.927619][ T9595] team0: Port device team_slave_0 added [ 245.929015][ T9595] team0: Port device team_slave_1 added [ 245.942294][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.942304][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.942319][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.943279][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.943287][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.943301][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.962279][ T9595] hsr_slave_0: entered promiscuous mode [ 245.962744][ T9595] hsr_slave_1: entered promiscuous mode [ 245.963054][ T9595] debugfs: 'hsr0' already exists in 'hsr' [ 245.963063][ T9595] Cannot create hsr debugfs directory [ 245.986314][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 246.157903][ T9595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.169480][ T9595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.169934][ T9595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.177196][ T9595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.192554][ T14] hsr_slave_0: left promiscuous mode [ 246.193709][ T14] hsr_slave_1: left promiscuous mode [ 246.201700][ T14] veth1_macvtap: left promiscuous mode [ 246.201759][ T14] veth0_macvtap: left promiscuous mode [ 246.298201][ T14] team0 (unregistering): Port device team_slave_1 removed [ 246.310398][ T14] team0 (unregistering): Port device team_slave_0 removed [ 246.373933][ T9595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.376828][ T9595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.378984][ T9595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.382690][ T9595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.383363][ T5507] 8021q: adding VLAN 0 to HW filter on device eth3 [ 246.438963][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.451858][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.458752][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.458804][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.464517][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.464563][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.574264][ T5507] 8021q: adding VLAN 0 to HW filter on device eth4 [ 246.717012][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.765469][ T5507] 8021q: adding VLAN 0 to HW filter on device eth5 [ 246.877258][ T9595] veth0_vlan: entered promiscuous mode [ 246.881269][ T9595] veth1_vlan: entered promiscuous mode [ 246.899537][ T9595] veth0_macvtap: entered promiscuous mode [ 246.905746][ T9595] veth1_macvtap: entered promiscuous mode [ 246.918040][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.922494][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.927913][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.979510][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.979525][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.994142][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.994161][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.005190][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.046021][ T5868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.046306][ T5868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.077173][ T5801] Bluetooth: hci0: command tx timeout [ 247.142100][ T9669] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 249.145068][ T5801] Bluetooth: hci0: command tx timeout [ 249.840618][ T9715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 249.862403][ T9713] ip6t_hbh: unknown flags 58 [ 249.916684][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 250.164695][ T9724] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.235347][ T9724] md: could not open device unknown-block(1,4). [ 250.275306][ T9725] md: could not open device unknown-block(1,5). [ 250.276060][ T9724] md: personality for level is not loaded! [ 250.898178][ T9735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.898250][ T9735] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.096466][ T9735] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.585571][ T9747] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 252.327066][ T9757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 252.400933][ T9761] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.495284][ T9761] md: could not open device unknown-block(1,2). [ 252.525224][ T9764] md: could not open device unknown-block(1,3). [ 252.533342][ T9761] md: personality for level is not loaded! [ 252.915532][ T5801] Bluetooth: hci0: command 0x0419 tx timeout [ 254.202182][ T9794] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 254.985194][ T5801] Bluetooth: hci0: command 0x0419 tx timeout [ 255.244332][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.244565][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.282016][ T9810] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.365080][ T9810] md: could not open device unknown-block(1,6). [ 255.405202][ T9810] md: could not open device unknown-block(1,7). [ 255.412934][ T9810] md: personality for level is not loaded! [ 257.064971][ T5801] Bluetooth: hci0: command 0x0419 tx timeout [ 257.236742][ T9836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 257.299265][ T9843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.345262][ T9843] md: could not open device unknown-block(1,6). [ 257.355076][ T9843] md: could not open device unknown-block(1,7). [ 257.356443][ T9843] md: personality for level is not loaded! [ 257.394493][ T9845] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.469531][ T9845] md: could not open device unknown-block(1,6). [ 257.519285][ T9845] md: could not open device unknown-block(1,7). [ 257.575912][ T9845] md: personality for level is not loaded! [ 259.089423][ T9878] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 259.145060][ T5801] Bluetooth: hci0: command 0x0419 tx timeout [ 259.963383][ T9892] siw: device registration error -23 [ 260.047045][ T9892] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 260.138311][ T9900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.327421][ T9903] md: could not open device unknown-block(1,4). [ 260.348056][ T9903] md: personality for level is not loaded! [ 260.356547][ T9900] md: could not open device unknown-block(1,5). [ 260.393039][ T9907] netlink: 'syz.3.1013': attribute type 2 has an invalid length. [ 260.402890][ T9907] : entered promiscuous mode [ 260.417354][ T9907] FAULT_INJECTION: forcing a failure. [ 260.417354][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 260.417374][ T9907] CPU: 2 UID: 0 PID: 9907 Comm: syz.3.1013 Not tainted syzkaller #0 PREEMPT(full) [ 260.417388][ T9907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.417396][ T9907] Call Trace: [ 260.417401][ T9907] [ 260.417407][ T9907] dump_stack_lvl+0x100/0x190 [ 260.417430][ T9907] should_fail_ex.cold+0x5/0xa [ 260.417448][ T9907] should_failslab+0xc2/0x120 [ 260.417466][ T9907] kmem_cache_alloc_noprof+0x92/0x6a0 [ 260.417478][ T9907] ? __pfx_map_id_range_down+0x10/0x10 [ 260.417494][ T9907] ? security_inode_alloc+0x3b/0x2c0 [ 260.417513][ T9907] security_inode_alloc+0x3b/0x2c0 [ 260.417530][ T9907] inode_init_always_gfp+0xc75/0xfb0 [ 260.417548][ T9907] alloc_inode+0x8e/0x250 [ 260.417560][ T9907] new_inode+0x22/0x1c0 [ 260.417572][ T9907] shmem_get_inode+0x1e3/0xff0 [ 260.417592][ T9907] ? __pfx_shmem_get_inode+0x10/0x10 [ 260.417614][ T9907] __shmem_file_setup+0x382/0x460 [ 260.417632][ T9907] ? __pfx___shmem_file_setup+0x10/0x10 [ 260.417659][ T9907] ? vm_area_alloc+0x1f/0x160 [ 260.417675][ T9907] shmem_zero_setup+0x96/0x1b0 [ 260.417692][ T9907] __mmap_region+0x2804/0x3910 [ 260.417713][ T9907] ? look_up_lock_class+0x55/0x120 [ 260.417733][ T9907] ? __pfx___mmap_region+0x10/0x10 [ 260.417765][ T9907] ? __lock_acquire+0x5c0/0x1f40 [ 260.417779][ T9907] ? find_held_lock+0x2b/0x80 [ 260.417800][ T9907] ? do_raw_spin_lock+0x128/0x260 [ 260.417818][ T9907] ? __lock_acquire+0x5c0/0x1f40 [ 260.417833][ T9907] ? do_raw_spin_unlock+0x145/0x1e0 [ 260.417850][ T9907] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 260.417876][ T9907] ? find_held_lock+0x2b/0x80 [ 260.417893][ T9907] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 260.417931][ T9907] mmap_region+0x3db/0x6d0 [ 260.417951][ T9907] ? __pfx_mmap_region+0x10/0x10 [ 260.417968][ T9907] ? rcu_is_watching+0x13/0xc0 [ 260.417987][ T9907] ? apparmor_capable+0x1d7/0x4d0 [ 260.418004][ T9907] ? bpf_lsm_capable+0x9/0x10 [ 260.418017][ T9907] ? security_capable+0x80/0x260 [ 260.418034][ T9907] do_mmap+0x12c7/0x1c30 [ 260.418050][ T9907] ? lock_acquire+0x1d1/0x380 [ 260.418062][ T9907] ? __pfx_do_mmap+0x10/0x10 [ 260.418076][ T9907] ? futex_wait+0x11e/0x370 [ 260.418091][ T9907] ? __pfx_down_write_killable+0x10/0x10 [ 260.418106][ T9907] vm_mmap_pgoff+0x283/0x490 [ 260.418125][ T9907] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 260.418149][ T9907] ksys_mmap_pgoff+0xe4/0x610 [ 260.418162][ T9907] ? find_held_lock+0x2b/0x80 [ 260.418179][ T9907] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 260.418195][ T9907] __do_fast_syscall_32+0x14d/0x8e0 [ 260.418216][ T9907] do_fast_syscall_32+0x32/0x70 [ 260.418235][ T9907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.418251][ T9907] RIP: 0023:0xf7f12fbc [ 260.418261][ T9907] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 260.418273][ T9907] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 260.418285][ T9907] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 260.418293][ T9907] RDX: 0000000000000000 RSI: 000000000000a031 RDI: 00000000ffffffff [ 260.418300][ T9907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.418307][ T9907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 260.418314][ T9907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.418330][ T9907] [ 260.422322][ T9907] mmap: syz.3.1013 (9907) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 260.467282][ T9910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 260.564665][ T9916] batadv0: entered promiscuous mode [ 260.566751][ T9916] macvtap1: entered promiscuous mode [ 260.568756][ T9916] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 260.572884][ T9916] batadv0: left promiscuous mode [ 260.620156][ T9919] device-mapper: table: 248:3: cache: Error opening metadata device (-EBUSY) [ 260.620172][ T9919] device-mapper: ioctl: error adding target to table [ 260.620858][ T9919] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 260.620871][ T9919] device-mapper: ioctl: error adding target to table [ 260.745055][ T9924] Bluetooth: MGMT ver 1.23 [ 260.978877][ T43] kauditd_printk_skb: 1384 callbacks suppressed [ 260.978892][ T43] audit: type=1326 audit(1794443560.673:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.978917][ T43] audit: type=1326 audit(1794443560.673:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.982068][ T43] audit: type=1326 audit(1794443560.673:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.982108][ T43] audit: type=1326 audit(1794443560.673:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.982140][ T43] audit: type=1326 audit(1794443560.673:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.983862][ T43] audit: type=1326 audit(1794443560.673:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.983898][ T43] audit: type=1326 audit(1794443560.673:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 260.983931][ T43] audit: type=1326 audit(1794443560.673:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 261.046902][ T43] audit: type=1326 audit(1794443560.743:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 261.064396][ T43] audit: type=1326 audit(1794443560.753:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefbc code=0x7ffc0000 [ 261.074797][ T9927] netlink: 'syz.1.1019': attribute type 4 has an invalid length. [ 261.559445][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 261.741109][ T9940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.828359][ T9940] md: could not open device unknown-block(1,2). [ 261.875188][ T9940] md: could not open device unknown-block(1,3). [ 261.877682][ T9940] md: personality for level is not loaded! [ 261.959165][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1028'. [ 262.389479][ T9957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 264.096457][ T9997] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.176041][ T9997] md: could not open device unknown-block(1,2). [ 264.229574][ T9997] md: could not open device unknown-block(1,3). [ 264.241546][ T9997] md: personality for level is not loaded! [ 264.648332][T10011] FAULT_INJECTION: forcing a failure. [ 264.648332][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 264.648362][T10011] CPU: 2 UID: 0 PID: 10011 Comm: syz.4.1039 Not tainted syzkaller #0 PREEMPT(full) [ 264.648385][T10011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.648397][T10011] Call Trace: [ 264.648404][T10011] [ 264.648412][T10011] dump_stack_lvl+0x100/0x190 [ 264.648446][T10011] should_fail_ex.cold+0x5/0xa [ 264.648475][T10011] should_failslab+0xc2/0x120 [ 264.648502][T10011] __kmalloc_noprof+0xfc/0x840 [ 264.648524][T10011] ? batadv_hash_new+0x74/0x2e0 [ 264.648557][T10011] batadv_hash_new+0x74/0x2e0 [ 264.648585][T10011] ? queue_delayed_work_on+0x8c/0x1e0 [ 264.648625][T10011] batadv_tt_init+0x226/0x350 [ 264.648651][T10011] batadv_mesh_init+0x52f/0x8f0 [ 264.648682][T10011] batadv_meshif_init_late+0xb26/0xe60 [ 264.648704][T10011] ? __kasan_kmalloc+0xaa/0xb0 [ 264.648726][T10011] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 264.648744][T10011] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 264.648776][T10011] ? register_netdevice+0x507/0x26b0 [ 264.648803][T10011] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 264.648823][T10011] register_netdevice+0x680/0x26b0 [ 264.648846][T10011] ? alloc_netdev_mqs+0x11a7/0x1540 [ 264.648860][T10011] ? __pfx_register_netdevice+0x10/0x10 [ 264.648877][T10011] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 264.648903][T10011] batadv_meshif_newlink+0x8f/0xc0 [ 264.648933][T10011] rtnl_newlink+0x1697/0x2620 [ 264.649001][T10011] ? __pfx_rtnl_newlink+0x10/0x10 [ 264.649027][T10011] ? rcu_is_watching+0x13/0xc0 [ 264.649056][T10011] ? kasan_quarantine_put+0x104/0x240 [ 264.649083][T10011] ? kfree_skbmem+0x19a/0x210 [ 264.649120][T10011] ? __dev_queue_xmit+0xa2e/0x48d0 [ 264.649150][T10011] ? lock_acquire+0x1d1/0x380 [ 264.649171][T10011] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 264.649192][T10011] ? find_held_lock+0x2b/0x80 [ 264.649217][T10011] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 264.649237][T10011] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 264.649260][T10011] ? __pfx_rtnl_newlink+0x10/0x10 [ 264.649281][T10011] rtnetlink_rcv_msg+0x95e/0xe90 [ 264.649306][T10011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.649339][T10011] netlink_rcv_skb+0x159/0x420 [ 264.649359][T10011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.649382][T10011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.649411][T10011] ? netlink_deliver_tap+0x1ae/0xb50 [ 264.649445][T10011] netlink_unicast+0x668/0x950 [ 264.649467][T10011] ? __pfx_netlink_unicast+0x10/0x10 [ 264.649493][T10011] netlink_sendmsg+0x9ac/0x10c0 [ 264.649516][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.649541][T10011] ? apparmor_socket_sendmsg+0x165/0x280 [ 264.649570][T10011] ? ____sys_sendmsg+0xa99/0xc30 [ 264.649596][T10011] ____sys_sendmsg+0xa99/0xc30 [ 264.649617][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.649640][T10011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.649676][T10011] ___sys_sendmsg+0x190/0x1e0 [ 264.649701][T10011] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.649725][T10011] ? futex_wait+0x11e/0x370 [ 264.649754][T10011] ? find_held_lock+0x2b/0x80 [ 264.649797][T10011] __sys_sendmsg+0x160/0x210 [ 264.649826][T10011] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.649869][T10011] __do_fast_syscall_32+0x14d/0x8e0 [ 264.649897][T10011] ? lockdep_hardirqs_on+0x7d/0x110 [ 264.649925][T10011] do_fast_syscall_32+0x32/0x70 [ 264.649953][T10011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.649977][T10011] RIP: 0023:0xf7f57fbc [ 264.649993][T10011] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 264.650011][T10011] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 264.650030][T10011] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000300 [ 264.650042][T10011] RDX: 0000000020000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.650053][T10011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.650065][T10011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 264.650076][T10011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.650101][T10011] [ 266.031320][T10034] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 266.232374][T10035] ip6erspan0: entered allmulticast mode [ 266.246797][T10035] bond1: (slave ip6erspan0): making interface the new active one [ 266.247685][T10035] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 266.350110][T10040] bond0: entered promiscuous mode [ 266.350131][T10040] bond_slave_0: entered promiscuous mode [ 266.350229][T10040] bond_slave_1: entered promiscuous mode [ 266.351028][T10040] batadv0: entered promiscuous mode [ 266.353234][T10040] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 266.365623][T10040] bond0: left promiscuous mode [ 266.365644][T10040] bond_slave_0: left promiscuous mode [ 266.365826][T10040] bond_slave_1: left promiscuous mode [ 266.370740][T10040] batadv0: left promiscuous mode [ 266.445419][T10042] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 268.248385][T10069] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 268.394673][T10074] ffs_data_put(): freeing [ 268.531000][T10079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.493398][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493415][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493423][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493433][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493440][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493447][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493457][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493464][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493471][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493479][T10091] tc action pedit offset must be on 32 bit boundaries [ 269.493543][T10091] TC_ACT_REPEAT abuse ? [ 269.933683][T10104] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 269.933852][T10104] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 269.934097][T10104] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 270.066912][T10102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 270.153151][T10102] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 270.166263][T10109] tipc: Started in network mode [ 270.166293][T10109] tipc: Node identity 0010000000000000002, cluster identity 1 [ 271.091219][T10126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 271.146202][T10126] md: could not open device unknown-block(1,5). [ 271.147467][T10126] md: personality for level is not loaded! [ 271.341210][T10132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 272.400346][T10159] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 272.455185][T10159] md: could not open device unknown-block(1,5). [ 272.457370][T10159] md: personality for level is not loaded! [ 272.462649][T10161] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 272.575555][T10164] md: could not open device unknown-block(1,6). [ 272.617402][T10161] md: could not open device unknown-block(1,7). [ 272.618699][T10161] md: personality for level is not loaded! [ 273.475365][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 274.598746][ T5873] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 275.193840][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.195774][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.200657][ T5873] usb 9-1: unable to get BOS descriptor or descriptor too short [ 275.201304][ T5873] usb 9-1: New USB device found: idVendor=0582, idProduct=012f, bcdDevice=0.ec [ 275.201975][ T5873] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 275.201993][ T5873] usb 9-1: can't read configurations, error -71 [ 275.695243][ T64] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 275.845561][ T64] usb 8-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 275.847187][ T64] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.847202][ T64] usb 8-1: config 0 has no interfaces? [ 275.847218][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.850925][ T64] usb 8-1: config 0 descriptor?? [ 276.568953][ T5873] usb 8-1: USB disconnect, device number 5 [ 276.742819][T10225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 277.125309][ T1355] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 277.201894][T10233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.285129][T10233] md: could not open device unknown-block(1,7). [ 277.288085][ T1355] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 277.288541][ T1355] usb 6-1: config 0 has no interfaces? [ 277.295605][ T1355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.295621][ T1355] usb 6-1: Product: syz [ 277.295629][ T1355] usb 6-1: Manufacturer: syz [ 277.295637][ T1355] usb 6-1: SerialNumber: syz [ 277.297094][ T1355] usb 6-1: config 0 descriptor?? [ 277.301614][T10233] md: personality for level is not loaded! [ 277.614953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 277.775001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 277.815008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 277.865019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 277.895627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 277.985018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #14!!! [ 279.876232][ T1355] usb 6-1: USB disconnect, device number 6 [ 280.107877][T10277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.111272][T10277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.112697][T10277] bond0 (unregistering): Released all slaves [ 280.498667][ T5801] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 280.774902][T10286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1122'. [ 281.883887][T10303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 281.975125][T10303] md: could not open device unknown-block(1,4). [ 281.985289][T10303] md: personality for level is not loaded! [ 282.283079][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.283099][T10306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.283811][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.283823][T10306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.539924][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 283.754964][T10332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 283.822255][T10332] md: personality for level is not loaded! [ 284.314144][T10348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 284.405089][T10352] tipc: Enabled bearer , priority 2 [ 285.175953][T10358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.175980][T10358] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 285.396934][ T5873] tipc: Node number set to 2769491601 [ 286.159066][T10376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.245164][T10376] md: could not open device unknown-block(1,2). [ 286.289343][T10376] md: could not open device unknown-block(1,3). [ 286.293088][T10376] md: personality for level is not loaded! [ 286.378823][T10382] FAULT_INJECTION: forcing a failure. [ 286.378823][T10382] name failslab, interval 1, probability 0, space 0, times 0 [ 286.378852][T10382] CPU: 3 UID: 0 PID: 10382 Comm: syz.1.1153 Not tainted syzkaller #0 PREEMPT(full) [ 286.378875][T10382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.378887][T10382] Call Trace: [ 286.378894][T10382] [ 286.378902][T10382] dump_stack_lvl+0x100/0x190 [ 286.378956][T10382] should_fail_ex.cold+0x5/0xa [ 286.378987][T10382] should_failslab+0xc2/0x120 [ 286.379014][T10382] kmem_cache_alloc_noprof+0x92/0x6a0 [ 286.379036][T10382] ? __pfx_map_id_range_down+0x10/0x10 [ 286.379062][T10382] ? security_inode_alloc+0x3b/0x2c0 [ 286.379096][T10382] security_inode_alloc+0x3b/0x2c0 [ 286.379125][T10382] inode_init_always_gfp+0xc75/0xfb0 [ 286.379155][T10382] alloc_inode+0x8e/0x250 [ 286.379175][T10382] new_inode+0x22/0x1c0 [ 286.379198][T10382] proc_pid_make_inode+0x22/0x160 [ 286.379228][T10382] proc_pident_instantiate+0x85/0x310 [ 286.379260][T10382] proc_pident_lookup+0x1e3/0x270 [ 286.379296][T10382] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 286.379328][T10382] lookup_open+0xb29/0x19e0 [ 286.379361][T10382] path_openat+0xe75/0x23f0 [ 286.379392][T10382] ? __pfx_path_openat+0x10/0x10 [ 286.379427][T10382] do_file_open+0x20e/0x430 [ 286.379461][T10382] ? __pfx_do_file_open+0x10/0x10 [ 286.379498][T10382] ? __pfx_kfree_link+0x10/0x10 [ 286.379528][T10382] ? _raw_spin_unlock+0x28/0x50 [ 286.379554][T10382] ? alloc_fd+0x471/0x7a0 [ 286.379588][T10382] do_sys_openat2+0x163/0x1d0 [ 286.379638][T10382] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.379676][T10382] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 286.379715][T10382] __ia32_compat_sys_openat+0x12d/0x210 [ 286.379749][T10382] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 286.379793][T10382] do_int80_emulation+0x16a/0x670 [ 286.379829][T10382] asm_int80_emulation+0x1a/0x20 [ 286.379850][T10382] RIP: 0023:0xf710fd6b [ 286.379868][T10382] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 286.379889][T10382] RSP: 002b:00000000f53bd3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 286.379911][T10382] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53bd490 [ 286.379926][T10382] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.379938][T10382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.379950][T10382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 286.379962][T10382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.379990][T10382] [ 286.518767][ T1169] IPVS: starting estimator thread 0... [ 286.605012][T10388] IPVS: using max 26 ests per chain, 62400 per kthread [ 288.103713][T10412] block nbd0: server does not support multiple connections per device. [ 288.104697][T10412] block nbd0: shutting down sockets [ 289.858388][T10440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 289.908832][T10440] md: personality for level is not loaded! [ 291.796490][T10456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 292.073000][T10467] netlink: 'syz.2.1177': attribute type 12 has an invalid length. [ 292.074100][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 292.109791][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 292.109818][T10467] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 292.112616][T10467] raw_sendmsg: syz.2.1177 forgot to set AF_INET. Fix it! [ 293.565916][T10501] syzkaller0: entered promiscuous mode [ 293.565934][T10501] syzkaller0: entered allmulticast mode [ 293.676969][T10501] tipc: Enabled bearer , priority 0 [ 293.707962][T10500] tipc: Resetting bearer [ 293.732922][T10500] tipc: Disabling bearer [ 294.280228][T10508] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 294.753017][T10517] syzkaller0: entered promiscuous mode [ 294.753044][T10517] syzkaller0: entered allmulticast mode [ 294.906522][T10519] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1192'. [ 294.932061][T10519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.948428][T10519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.954221][T10519] bond0 (unregistering): Released all slaves [ 295.457899][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 296.546430][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 296.546445][ T43] audit: type=1804 audit(1794443596.243:2100): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1197" name="/newroot/59/file0/file0" dev="9p" ino=74448917 res=1 errno=0 [ 297.544147][T10543] syzkaller0: entered promiscuous mode [ 297.544170][T10543] syzkaller0: entered allmulticast mode [ 297.635923][T10543] tipc: Enabled bearer , priority 0 [ 297.638222][T10543] tipc: Resetting bearer [ 297.640472][T10542] tipc: Resetting bearer [ 297.650554][T10542] tipc: Disabling bearer [ 297.801222][T10564] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.321645][T10578] syz.1.1208 (pid 10578) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 299.333471][T10578] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-lib" [ 299.455977][T10578] fscrypt: AES-128-CBC-ESSIV using blk-crypto-fallback [ 299.877032][T10596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.936338][T10596] md: could not open device unknown-block(1,7). [ 299.941271][T10596] md: personality for level is not loaded! [ 300.268750][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.268767][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.978974][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 304.569380][T10662] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 304.591430][T10666] FAULT_INJECTION: forcing a failure. [ 304.591430][T10666] name fail_futex, interval 1, probability 0, space 0, times 0 [ 304.591462][T10666] CPU: 3 UID: 0 PID: 10666 Comm: syz.4.1232 Not tainted syzkaller #0 PREEMPT(full) [ 304.591486][T10666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.591498][T10666] Call Trace: [ 304.591505][T10666] [ 304.591513][T10666] dump_stack_lvl+0x100/0x190 [ 304.591569][T10666] should_fail_ex.cold+0x5/0xa [ 304.591600][T10666] get_futex_key+0x1c9/0x13e0 [ 304.591633][T10666] ? __pfx_get_futex_key+0x10/0x10 [ 304.591658][T10666] ? futex_wake+0x4ea/0x5e0 [ 304.591684][T10666] futex_wake+0xf4/0x5e0 [ 304.591703][T10666] ? futex_wait+0x11e/0x370 [ 304.591728][T10666] ? __pfx_futex_wake+0x10/0x10 [ 304.591752][T10666] ? rcu_read_lock_any_held+0x6a/0x90 [ 304.591783][T10666] ? find_held_lock+0x2b/0x80 [ 304.591816][T10666] ? ksys_write+0x190/0x250 [ 304.591843][T10666] ? ksys_write+0x190/0x250 [ 304.591869][T10666] do_futex+0x2b2/0x440 [ 304.591901][T10666] ? __pfx_do_futex+0x10/0x10 [ 304.591957][T10666] ? compat_ksys_semctl+0x16f/0x360 [ 304.591988][T10666] __ia32_sys_futex_time32+0x2f4/0x470 [ 304.592027][T10666] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 304.592061][T10666] ? __might_fault+0xc5/0x140 [ 304.592092][T10666] __do_fast_syscall_32+0x14d/0x8e0 [ 304.592127][T10666] do_fast_syscall_32+0x32/0x70 [ 304.592158][T10666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.592183][T10666] RIP: 0023:0xf7f57fbc [ 304.592199][T10666] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 304.592219][T10666] RSP: 002b:00000000f54065cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 304.592239][T10666] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 304.592252][T10666] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 304.592265][T10666] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 304.592277][T10666] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 304.592289][T10666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.592330][T10666] [ 304.635055][T10662] md: could not open device unknown-block(1,2). [ 304.637310][T10662] md: personality for level is not loaded! [ 304.688507][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1232'. [ 304.709394][T10666] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.794352][T10664] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 304.794483][T10664] exFAT-fs (nbd3): unable to read boot sector [ 304.794489][T10664] exFAT-fs (nbd3): failed to read boot sector [ 304.794494][T10664] exFAT-fs (nbd3): failed to recognize exfat type [ 306.284201][T10682] rxe_eth0 speed is unknown, defaulting to 1000 [ 307.455342][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 307.604984][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 307.605841][ T25] usb 9-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 307.607026][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 307.609260][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.609282][ T25] usb 9-1: Product: syz [ 307.609294][ T25] usb 9-1: Manufacturer: syz [ 307.609314][ T25] usb 9-1: SerialNumber: syz [ 307.615131][ T25] usb 9-1: config 0 descriptor?? [ 307.638513][ T25] hub 9-1:0.0: bad descriptor, ignoring hub [ 307.638537][ T25] hub 9-1:0.0: probe with driver hub failed with error -5 [ 307.643256][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.140356][ T5884] usb 9-1: USB disconnect, device number 4 [ 308.738219][T10711] input: syz1 as /devices/virtual/input/input10 [ 309.347008][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.347081][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.348865][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.349274][T10718] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 309.349293][T10718] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 309.349319][T10718] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 309.494560][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.504557][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.560728][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.561429][T10718] dummy0 speed is unknown, defaulting to 1000 [ 309.575611][T10719] smc: removing ib device rxe0 [ 309.767666][T10719] smbdirect: ib_dev[rxe0] removed [ 309.914386][T10729] syzkaller1: entered promiscuous mode [ 309.914410][T10729] syzkaller1: entered allmulticast mode [ 311.163870][ T43] audit: type=1326 audit(1794443610.853:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.164155][ T43] audit: type=1326 audit(1794443610.853:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.164630][ T43] audit: type=1326 audit(1794443610.853:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.165318][ T43] audit: type=1326 audit(1794443610.863:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.165651][ T43] audit: type=1326 audit(1794443610.863:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.165844][ T43] audit: type=1326 audit(1794443610.863:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.165980][ T43] audit: type=1326 audit(1794443610.863:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.166110][ T43] audit: type=1326 audit(1794443610.863:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.166239][ T43] audit: type=1326 audit(1794443610.863:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 311.166433][ T43] audit: type=1326 audit(1794443610.863:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1259" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fcefd8 code=0x7ffc0000 [ 314.161672][T10803] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 316.347121][T10825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.512282][T10831] md: personality for level is not loaded! [ 316.526253][T10830] md: could not open device unknown-block(1,2). [ 316.575053][T10825] md: could not open device unknown-block(1,3). [ 316.676955][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.676988][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.166938][T10860] ceph: No mds server is up or the cluster is laggy [ 320.599836][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 320.600635][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 320.865017][ T5884] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 321.048491][ T5884] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 321.049866][ T5884] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 321.049938][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.049962][ T5884] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.049982][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.050002][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.051987][ T5884] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 321.052022][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.052042][ T5884] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.052062][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.052082][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.053016][ T5884] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 321.053049][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.053070][ T5884] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.053090][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.053111][ T5884] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.063348][ T5884] usb 7-1: string descriptor 0 read error: -22 [ 321.063447][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.100972][ T5884] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 321.487854][ T5884] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 321.975758][ T5884] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 321.976699][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.976750][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.976769][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.976804][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.979854][ T5884] usb 9-1: config 0 descriptor?? [ 322.100695][T10927] input: syz1 as /devices/virtual/input/input11 [ 322.108585][T10927] FAULT_INJECTION: forcing a failure. [ 322.108585][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 322.108610][T10927] CPU: 1 UID: 0 PID: 10927 Comm: syz.3.1318 Not tainted syzkaller #0 PREEMPT(full) [ 322.108631][T10927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.108644][T10927] Call Trace: [ 322.108651][T10927] [ 322.108658][T10927] dump_stack_lvl+0x100/0x190 [ 322.108696][T10927] should_fail_ex.cold+0x5/0xa [ 322.108751][T10927] should_failslab+0xc2/0x120 [ 322.108779][T10927] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 322.108803][T10927] ? kasan_save_stack+0x3f/0x50 [ 322.108828][T10927] ? kasprintf+0xc7/0x100 [ 322.108854][T10927] kvasprintf+0xbc/0x150 [ 322.108875][T10927] ? __pfx_kvasprintf+0x10/0x10 [ 322.108897][T10927] ? __pfx_vsnprintf+0x10/0x10 [ 322.108935][T10927] kasprintf+0xc7/0x100 [ 322.108954][T10927] ? __pfx_kasprintf+0x10/0x10 [ 322.108976][T10927] ? __pfx_add_uevent_var+0x10/0x10 [ 322.109006][T10927] ? __pfx_vsnprintf+0x10/0x10 [ 322.109039][T10927] ? __pfx_input_devnode+0x10/0x10 [ 322.109095][T10927] device_get_devnode+0x166/0x2c0 [ 322.109123][T10927] dev_uevent+0x493/0x870 [ 322.109147][T10927] ? __pfx_dev_uevent+0x10/0x10 [ 322.109175][T10927] ? __asan_memcpy+0x3c/0x60 [ 322.109195][T10927] ? kobject_get_path+0x8d/0x2c0 [ 322.109219][T10927] ? __pfx_dev_uevent+0x10/0x10 [ 322.109244][T10927] kobject_uevent_env+0x6eb/0x18b0 [ 322.109273][T10927] ? sysfs_do_create_link_sd+0xbb/0x140 [ 322.109303][T10927] ? bus_to_subsys+0x114/0x150 [ 322.109334][T10927] device_add+0x1173/0x1970 [ 322.109361][T10927] ? __pfx_device_add+0x10/0x10 [ 322.109392][T10927] ? kobject_get+0xbb/0x150 [ 322.109436][T10927] cdev_device_add+0x12b/0x270 [ 322.109471][T10927] evdev_connect+0x3a8/0x4b0 [ 322.109499][T10927] input_attach_handler.isra.0+0x177/0x1e0 [ 322.109526][T10927] input_register_device.cold+0x1ce/0x386 [ 322.109568][T10927] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 322.109600][T10927] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 322.109624][T10927] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 322.109655][T10927] ? __fget_files+0x34/0x3d0 [ 322.109674][T10927] ? find_held_lock+0x2b/0x80 [ 322.109692][T10927] ? __fget_files+0x215/0x3d0 [ 322.109711][T10927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.109729][T10927] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 322.109746][T10927] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 322.109762][T10927] __do_fast_syscall_32+0x14d/0x8e0 [ 322.109780][T10927] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.109884][T10927] do_fast_syscall_32+0x32/0x70 [ 322.109911][T10927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.109933][T10927] RIP: 0023:0xf7f12fbc [ 322.109945][T10927] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 322.109959][T10927] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 322.109977][T10927] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005501 [ 322.109990][T10927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.110000][T10927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.110013][T10927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.110025][T10927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.110049][T10927] [ 322.458627][ T5884] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 322.719960][ T5584] usb 9-1: USB disconnect, device number 5 [ 323.289067][T10939] syzkaller0: entered promiscuous mode [ 323.289089][T10939] syzkaller0: entered allmulticast mode [ 323.305804][ T5874] usb 7-1: USB disconnect, device number 2 [ 323.357252][T10943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.445696][T10943] md: could not open device unknown-block(1,8). [ 323.485056][T10943] md: could not open device unknown-block(1,9). [ 323.485240][T10945] md: array md1 already has disks! [ 323.487397][T10943] md: personality for level is not loaded! [ 323.525810][T10945] md: could not open device unknown-block(1,2). [ 323.525916][T10945] md: error, md_import_device() returned -16 [ 323.565262][T10945] md: could not open device unknown-block(1,3). [ 323.565318][T10945] md: error, md_import_device() returned -16 [ 323.569097][T10945] md: personality for level is not loaded! [ 323.572513][T10945] md: personality for level is not loaded! [ 324.334795][T10970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.358030][T10972] syzkaller0: entered promiscuous mode [ 324.358046][T10972] syzkaller0: entered allmulticast mode [ 324.366596][T10972] tipc: Started in network mode [ 324.366622][T10972] tipc: Node identity 4a0a76718ce1, cluster identity 4711 [ 324.366958][T10972] tipc: Enabled bearer , priority 0 [ 324.371820][T10972] tipc: Resetting bearer [ 324.376459][T10971] tipc: Resetting bearer [ 324.388171][T10971] tipc: Disabling bearer [ 324.405298][T10970] md: could not open device unknown-block(1,6). [ 324.672578][T10974] md: personality for level is not loaded! [ 324.688589][T10978] tipc: Enabled bearer , priority 0 [ 324.689802][T10978] syzkaller0: entered promiscuous mode [ 324.689846][T10978] syzkaller0: entered allmulticast mode [ 324.713535][T10978] tipc: Resetting bearer [ 324.750492][T10976] tipc: Resetting bearer [ 324.758749][T10970] md: could not open device unknown-block(1,7). [ 324.850027][T10976] tipc: Disabling bearer [ 324.905345][T10986] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 324.909114][T10986] input: syz0 as /devices/virtual/input/input12 [ 325.243789][ T48] IPVS: starting estimator thread 0... [ 325.344944][T11001] IPVS: using max 42 ests per chain, 100800 per kthread [ 326.077720][T11009] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.203936][T11013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.236190][T11009] md: personality for level is not loaded! [ 326.255379][T11010] md: could not open device unknown-block(1,2). [ 326.335115][T11013] md: could not open device unknown-block(1,6). [ 326.335260][T11011] md: could not open device unknown-block(1,3). [ 326.360950][T11013] md: personality for level is not loaded! [ 326.405410][T11014] md: could not open device unknown-block(1,7). [ 327.647286][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 328.058365][T11052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 328.165415][T11052] md: could not open device unknown-block(1,2). [ 328.216942][T11054] md: could not open device unknown-block(1,3). [ 330.424793][T11090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.568984][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'. [ 330.676366][T11093] md: could not open device unknown-block(1,2). [ 330.805048][T11095] md: could not open device unknown-block(1,3). [ 331.195494][T11103] pim6reg: entered allmulticast mode [ 331.267286][T11104] pim6reg: left allmulticast mode [ 331.551216][T11108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.635097][T11108] md: could not open device unknown-block(1,8). [ 331.677730][T11108] md: could not open device unknown-block(1,9). [ 331.681356][T11108] md: personality for level is not loaded! [ 332.977029][T11134] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 333.135078][T11134] md: could not open device unknown-block(1,4). [ 333.177062][T11137] md: could not open device unknown-block(1,5). [ 333.732511][T11147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 333.927524][T11147] md: personality for level is not loaded! [ 333.957974][T11153] netlink: 'syz.1.1383': attribute type 7 has an invalid length. [ 334.065461][T11148] md: could not open device unknown-block(1,6). [ 334.105415][T11149] md: could not open device unknown-block(1,7). [ 334.795419][T11189] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 334.819619][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 334.819686][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 334.875881][ T68] block nbd0: Receive control failed (result -32) [ 335.155921][T11189] md: could not open device unknown-block(1,4). [ 335.175556][T11196] md: could not open device unknown-block(1,5). [ 335.193773][T11189] md: personality for level is not loaded! [ 335.767714][T11206] pim6reg: entered allmulticast mode [ 335.777319][T11207] pim6reg: left allmulticast mode [ 336.551062][T11217] overlayfs: missing 'lowerdir' [ 336.582169][T11219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 336.624087][ T43] kauditd_printk_skb: 9762 callbacks suppressed [ 336.624102][ T43] audit: type=1804 audit(1794443636.313:11873): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1401" name="/newroot/111/file0/bus/file0" dev="9p" ino=74449013 res=1 errno=0 [ 336.655209][T11219] md: could not open device unknown-block(1,2). [ 336.695385][T11219] md: could not open device unknown-block(1,3). [ 338.274933][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 338.434934][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 338.436578][ T30] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 338.441850][ T30] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 338.442007][ T30] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 338.442055][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 338.442078][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.442090][ T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.442138][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.442195][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.481806][ T30] usb 8-1: config 0 descriptor?? [ 338.714223][ T30] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 338.972868][ T30] usb 8-1: USB disconnect, device number 6 [ 338.979508][ T30] usblp0: removed [ 339.292716][T11259] md: could not open device unknown-block(1,2). [ 339.365604][T11258] md: could not open device unknown-block(1,3). [ 342.005014][ T5874] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 342.155397][ T5874] usb 6-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 342.156251][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 342.156277][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 342.158126][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.158139][ T5874] usb 6-1: Product: syz [ 342.158146][ T5874] usb 6-1: Manufacturer: syz [ 342.158154][ T5874] usb 6-1: SerialNumber: syz [ 342.159479][ T5874] usb 6-1: config 0 descriptor?? [ 342.166357][ T5874] hub 6-1:0.0: bad descriptor, ignoring hub [ 342.166371][ T5874] hub 6-1:0.0: probe with driver hub failed with error -5 [ 342.169354][ T5874] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 342.449431][ T1355] libceph: connect (1)[c::]:6789 error -101 [ 342.449565][ T1355] libceph: mon0 (1)[c::]:6789 connect error [ 342.456414][ T1355] libceph: connect (1)[c::]:6789 error -101 [ 342.456498][ T1355] libceph: mon0 (1)[c::]:6789 connect error [ 342.539264][T11296] ceph: No mds server is up or the cluster is laggy [ 342.600315][T11296] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 342.669111][T11304] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 342.686913][ T1355] usb 6-1: USB disconnect, device number 7 [ 342.745240][T11304] md: could not open device unknown-block(1,8). [ 342.795392][T11304] md: could not open device unknown-block(1,9). [ 342.822728][T11311] bridge0: port 1(syz_tun) entered blocking state [ 342.822879][T11311] bridge0: port 1(syz_tun) entered disabled state [ 342.823120][T11311] syz_tun: entered allmulticast mode [ 342.826696][T11311] syz_tun: entered promiscuous mode [ 343.039837][T11319] 9p: Bad value for 'rfdno' [ 343.525501][T11335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.813274][T11363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 345.187189][T11380] syzkaller0: entered promiscuous mode [ 345.187213][T11380] syzkaller0: entered allmulticast mode [ 345.196222][T11364] md: could not open device unknown-block(1,8). [ 345.235087][T11369] md: could not open device unknown-block(1,9). [ 345.380021][T11388] dummy0 speed is unknown, defaulting to 1000 [ 345.500554][T11388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 345.552906][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 345.554414][T11392] loop4: detected capacity change from 0 to 7 [ 345.572210][T11392] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 345.572229][T11392] loop4: partition table partially beyond EOD, truncated [ 345.574809][T11392] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 345.706124][ T30] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 345.706957][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.706980][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.855057][ T64] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 345.999083][ T30] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 346.227816][ T30] wwan wwan0: port wwan0qmi0 attached [ 346.243815][ T30] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 26:5f:74:a7:14:47 [ 346.256299][ T64] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.256808][ T64] usb 9-1: config 0 has no interfaces? [ 346.258477][ T64] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.258491][ T64] usb 9-1: Product: syz [ 346.258499][ T64] usb 9-1: Manufacturer: syz [ 346.258507][ T64] usb 9-1: SerialNumber: syz [ 346.262421][ T64] usb 9-1: config 0 descriptor?? [ 346.294369][T11400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.433801][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.434015][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.435069][T11400] md: could not open device unknown-block(1,6). [ 346.505146][T11405] md: could not open device unknown-block(1,7). [ 346.507165][T11400] md: personality for level is not loaded! [ 346.549475][T11411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.627918][T11411] md: could not open device unknown-block(1,6). [ 346.685591][T11411] md: could not open device unknown-block(1,7). [ 346.786280][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 346.786297][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 346.787206][ T5884] usb 7-1: USB disconnect, device number 3 [ 346.787997][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 346.788008][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 346.788016][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 346.808499][ T5884] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 346.822445][T11418] FAULT_INJECTION: forcing a failure. [ 346.822445][T11418] name failslab, interval 1, probability 0, space 0, times 0 [ 346.822466][T11418] CPU: 2 UID: 0 PID: 11418 Comm: syz.3.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.822483][T11418] Tainted: [L]=SOFTLOCKUP [ 346.822487][T11418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.822494][T11418] Call Trace: [ 346.822498][T11418] [ 346.822503][T11418] dump_stack_lvl+0x100/0x190 [ 346.822526][T11418] should_fail_ex.cold+0x5/0xa [ 346.822545][T11418] should_failslab+0xc2/0x120 [ 346.822561][T11418] __kmalloc_cache_noprof+0x91/0x6d0 [ 346.822579][T11418] ? do_raw_spin_lock+0x128/0x260 [ 346.822595][T11418] ? alloc_fdtable+0xbd/0x2d0 [ 346.822611][T11418] alloc_fdtable+0xbd/0x2d0 [ 346.822626][T11418] dup_fd+0xa1e/0xd90 [ 346.822647][T11418] __ia32_sys_close_range+0x2e5/0x430 [ 346.822666][T11418] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 346.822687][T11418] __do_fast_syscall_32+0x14d/0x8e0 [ 346.822708][T11418] do_fast_syscall_32+0x32/0x70 [ 346.822726][T11418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.822742][T11418] RIP: 0023:0xf7f12fbc [ 346.822752][T11418] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 346.822764][T11418] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 346.822776][T11418] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 346.822784][T11418] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.822791][T11418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.822798][T11418] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.822805][T11418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.822819][T11418] [ 346.894434][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 347.093949][T11421] bridge1: entered promiscuous mode [ 347.094003][T11421] bridge1: entered allmulticast mode [ 347.162277][ T5884] wwan wwan0: port wwan0qmi0 disconnected [ 347.219847][T11392] FAULT_INJECTION: forcing a failure. [ 347.219847][T11392] name failslab, interval 1, probability 0, space 0, times 0 [ 347.219878][T11392] CPU: 2 UID: 0 PID: 11392 Comm: syz.4.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.219904][T11392] Tainted: [L]=SOFTLOCKUP [ 347.219911][T11392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.219924][T11392] Call Trace: [ 347.219930][T11392] [ 347.219938][T11392] dump_stack_lvl+0x100/0x190 [ 347.219972][T11392] should_fail_ex.cold+0x5/0xa [ 347.220002][T11392] should_failslab+0xc2/0x120 [ 347.220028][T11392] __kmalloc_noprof+0xfc/0x840 [ 347.220050][T11392] ? big_key_preparse+0x154/0x5a0 [ 347.220076][T11392] big_key_preparse+0x154/0x5a0 [ 347.220096][T11392] ? down_read+0x136/0x4c0 [ 347.220115][T11392] ? __pfx_big_key_preparse+0x10/0x10 [ 347.220134][T11392] ? __pfx_down_read+0x10/0x10 [ 347.220156][T11392] ? __pfx_big_key_preparse+0x10/0x10 [ 347.220180][T11392] __key_create_or_update+0x3f6/0xe30 [ 347.220214][T11392] ? __pfx___key_create_or_update+0x10/0x10 [ 347.220243][T11392] ? lookup_user_key+0x58c/0x14f0 [ 347.220269][T11392] ? __lock_acquire+0x5c0/0x1f40 [ 347.220292][T11392] ? __pfx_lookup_user_key+0x10/0x10 [ 347.220338][T11392] key_create_or_update+0x42/0x60 [ 347.220371][T11392] __do_sys_add_key+0x2e8/0x460 [ 347.220396][T11392] ? __pfx___do_sys_add_key+0x10/0x10 [ 347.220446][T11392] __do_fast_syscall_32+0x14d/0x8e0 [ 347.220476][T11392] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.220507][T11392] do_fast_syscall_32+0x32/0x70 [ 347.220538][T11392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.220561][T11392] RIP: 0023:0xf7f57fbc [ 347.220578][T11392] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 347.220620][T11392] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 347.220641][T11392] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 347.220655][T11392] RDX: 0000000080000300 RSI: 0000000000000001 RDI: 00000000fffffffc [ 347.220668][T11392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.220680][T11392] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.220693][T11392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.220719][T11392] [ 347.229632][ T1355] usb 9-1: USB disconnect, device number 6 [ 347.823288][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 348.409409][T11461] i2c i2c-0: Failed to register i2c client usb2512b at 0x02 (-16) [ 350.682750][T11480] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 350.743545][T11480] rtrs_client L2106: : Failed to resolve address, err: -EINVAL [ 350.744492][T11480] rtrs_client L2654: : init_conns() failed: err=-EINVAL path=@ip:127.0.0.1 [:0] [ 350.928810][T11482] ffs_data_put(): freeing [ 351.678806][ T43] audit: type=1326 audit(1794443651.373:11874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.679054][ T43] audit: type=1326 audit(1794443651.373:11875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.682185][ T43] audit: type=1326 audit(1794443651.373:11876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.682338][ T43] audit: type=1326 audit(1794443651.373:11877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.682600][ T43] audit: type=1326 audit(1794443651.373:11878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.682624][ T43] audit: type=1326 audit(1794443651.373:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.682646][ T43] audit: type=1326 audit(1794443651.373:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.683386][ T43] audit: type=1326 audit(1794443651.373:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.683414][ T43] audit: type=1326 audit(1794443651.373:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 351.686915][ T43] audit: type=1326 audit(1794443651.373:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.4.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f57fbc code=0x7ffc0000 [ 356.568719][T11577] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 356.568746][T11577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 356.570123][T11577] vhci_hcd vhci_hcd.0: Device attached [ 356.974359][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 357.185122][ T5884] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 357.780759][T11578] vhci_hcd: connection closed [ 357.782259][ T13] vhci_hcd vhci_hcd.3: stop threads [ 357.782272][ T13] vhci_hcd vhci_hcd.3: release socket [ 357.782333][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 358.189465][T11589] ip6t_hbh: unknown flags 58 [ 358.379102][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 360.557360][T11620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.558678][T11620] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.563332][T11620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.625478][T11620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.627427][T11620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.648297][T11620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.648313][T11620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.667003][T11624] FAULT_INJECTION: forcing a failure. [ 360.667003][T11624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.667025][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.3.1505 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.667043][T11624] Tainted: [L]=SOFTLOCKUP [ 360.667047][T11624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.667055][T11624] Call Trace: [ 360.667060][T11624] [ 360.667065][T11624] dump_stack_lvl+0x100/0x190 [ 360.667089][T11624] should_fail_ex.cold+0x5/0xa [ 360.667108][T11624] should_fail_alloc_page+0xeb/0x140 [ 360.667127][T11624] prepare_alloc_pages+0x1f0/0x5b0 [ 360.667145][T11624] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 360.667167][T11624] ? find_held_lock+0x2b/0x80 [ 360.667185][T11624] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 360.667202][T11624] ? mark_held_locks+0x40/0x70 [ 360.667215][T11624] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 360.667231][T11624] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 360.667245][T11624] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.667265][T11624] ? rcu_is_watching+0x13/0xc0 [ 360.667287][T11624] ? trace_sched_exit_tp+0x120/0x160 [ 360.667319][T11624] ? __schedule+0x1270/0x6a40 [ 360.667335][T11624] ? __lock_acquire+0x5c0/0x1f40 [ 360.667358][T11624] ? __pfx___schedule+0x10/0x10 [ 360.667380][T11624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 360.667403][T11624] ? policy_nodemask+0xed/0x5e0 [ 360.667428][T11624] alloc_pages_mpol+0x201/0x560 [ 360.667445][T11624] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 360.667463][T11624] ? do_raw_spin_lock+0x128/0x260 [ 360.667481][T11624] ___kmalloc_large_node+0x103/0x170 [ 360.667499][T11624] __kmalloc_large_node_noprof+0x1c/0x70 [ 360.667514][T11624] ? __mutex_unlock_slowpath+0x35d/0x930 [ 360.667533][T11624] __kmalloc_noprof+0x5a3/0x840 [ 360.667546][T11624] ? __seq_open_private+0x22/0xd0 [ 360.667562][T11624] __seq_open_private+0x22/0xd0 [ 360.667576][T11624] __tracing_open+0x99/0xa80 [ 360.667590][T11624] tracing_open+0x26b/0x460 [ 360.667603][T11624] do_dentry_open+0x674/0x1470 [ 360.667617][T11624] ? __pfx_tracing_open+0x10/0x10 [ 360.667631][T11624] vfs_open_consume+0xcc/0x460 [ 360.667652][T11624] path_openat+0x1547/0x23f0 [ 360.667670][T11624] ? __pfx_path_openat+0x10/0x10 [ 360.667689][T11624] do_file_open+0x20e/0x430 [ 360.667706][T11624] ? __pfx_do_file_open+0x10/0x10 [ 360.667732][T11624] ? _raw_spin_unlock+0x28/0x50 [ 360.667747][T11624] ? alloc_fd+0x471/0x7a0 [ 360.667766][T11624] do_sys_openat2+0x163/0x1d0 [ 360.667785][T11624] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.667809][T11624] __ia32_compat_sys_openat+0x12d/0x210 [ 360.667829][T11624] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 360.667854][T11624] __do_fast_syscall_32+0x14d/0x8e0 [ 360.667875][T11624] do_fast_syscall_32+0x32/0x70 [ 360.667896][T11624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.667919][T11624] RIP: 0023:0xf7f12fbc [ 360.667936][T11624] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 360.667948][T11624] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 360.667961][T11624] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 360.667969][T11624] RDX: 0000000000048342 RSI: 00000000000001a1 RDI: 0000000000000000 [ 360.667976][T11624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.667982][T11624] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 360.667990][T11624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.668005][T11624] [ 360.668264][T11620] veth1_vlan: left promiscuous mode [ 360.671698][T11620] veth0_vlan: left promiscuous mode [ 360.672648][T11620] veth0_vlan: entered promiscuous mode [ 360.678482][T11620] veth1_vlan: entered promiscuous mode [ 360.690197][T11620] veth1_macvtap: left promiscuous mode [ 360.692513][T11620] veth0_macvtap: left promiscuous mode [ 360.693768][T11620] veth0_macvtap: entered promiscuous mode [ 360.699309][T11620] veth1_macvtap: entered promiscuous mode [ 360.715732][T11620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.717767][T11620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.719816][T11620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.723673][T11620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.734135][T11620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.748927][T11620] bridge0: port 1(syz_tun) entered blocking state [ 360.748981][T11620] bridge0: port 1(syz_tun) entered forwarding state [ 360.824826][T11620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.907628][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.907944][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.908114][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.908134][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.668929][T11634] md: loop0 has zero or unknown size, marking faulty! [ 361.668973][T11634] md: error, md_import_device() returned -22 [ 362.335020][ T5884] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 364.334020][ T42] infiniband syz1: ib_query_port failed (-19) [ 364.338712][ T230] smbdirect: ib_dev[syz1] removed [ 364.372542][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.380984][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.382097][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.383236][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.386142][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.396806][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.397088][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.397299][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.397946][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.400145][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.694362][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.701305][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.703845][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.900973][T11650] infiniband rxe0: set active [ 364.900987][T11650] infiniband rxe0: added rxe_eth0 [ 364.910133][T11650] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 364.910160][T11650] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 364.910183][T11650] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 364.955804][T11650] RDS/IB: rxe0: added [ 364.955832][T11650] smc: adding ib device rxe0 with port count 1 [ 364.955843][T11650] smc: ib device rxe0 port 1 has no pnetid [ 365.006292][ T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.032684][ T5884] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.038965][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.042196][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.186509][ T14] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.362651][ T14] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.459467][ T14] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.479727][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 366.424995][ T5801] Bluetooth: hci3: command tx timeout [ 366.562235][ T14] bridge_slave_1: left allmulticast mode [ 366.562425][ T14] bridge_slave_1: left promiscuous mode [ 366.563440][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.606803][ T14] bridge_slave_0: left allmulticast mode [ 366.606893][ T14] bridge_slave_0: left promiscuous mode [ 366.607706][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.740202][ T14] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 366.930636][ T14] bond1 (unregistering): Released all slaves [ 367.222108][ T5507] 8021q: adding VLAN 0 to HW filter on device eth9 [ 367.222462][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.276680][ T14] tipc: Left network mode [ 367.376373][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.114976][T11650] dummy0 speed is unknown, defaulting to 1000 [ 368.131488][T11650] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.515195][ T5801] Bluetooth: hci3: command tx timeout [ 368.779732][ T5507] 8021q: adding VLAN 0 to HW filter on device eth7 [ 368.855676][T11650] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.855772][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.855928][T11650] bridge_slave_0: entered allmulticast mode [ 368.856687][T11650] bridge_slave_0: entered promiscuous mode [ 368.858405][T11650] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.858504][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.858563][T11650] bridge_slave_1: entered allmulticast mode [ 368.859277][T11650] bridge_slave_1: entered promiscuous mode [ 368.879694][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.881744][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.944083][T11650] team0: Port device team_slave_0 added [ 368.958367][T11650] team0: Port device team_slave_1 added [ 368.972879][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.972890][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.972906][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.973801][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.973809][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.973823][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.999468][T11650] hsr_slave_0: entered promiscuous mode [ 368.999882][T11650] hsr_slave_1: entered promiscuous mode [ 369.000174][T11650] debugfs: 'hsr0' already exists in 'hsr' [ 369.000183][T11650] Cannot create hsr debugfs directory [ 369.411055][T11650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 370.030208][T11694] ------------[ cut here ]------------ [ 370.030224][T11694] current->flags & PF_MEMALLOC [ 370.030229][T11694] WARNING: mm/page_alloc.c:4824 at __alloc_frozen_pages_noprof+0x1e0b/0x31e0, CPU#1: syz.2.1518/11694 [ 370.037152][T11694] Modules linked in: [ 370.038519][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.2.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.042166][T11694] Tainted: [L]=SOFTLOCKUP [ 370.043567][T11694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.046780][T11694] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 370.048946][T11694] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 43 7c 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00 [ 370.055168][T11694] RSP: 0000:ffffc90005525838 EFLAGS: 00010202 [ 370.057158][T11694] RAX: ffff888000bb2580 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 370.059634][T11694] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888000bb25ac [ 370.062125][T11694] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002dc9 [ 370.064650][T11694] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000 [ 370.067190][T11694] R13: 0000000000000000 R14: ffffffff9cca2064 R15: 0000000000048c40 [ 370.069731][T11694] FS: 0000000000000000(0000) GS:ffff888095379000(0063) knlGS:00000000f53fcb40 [ 370.072505][T11694] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 370.074957][T11694] CR2: 00007f5b9a8b45e8 CR3: 000000006eb8c000 CR4: 0000000000352ef0 [ 370.078248][T11694] Call Trace: [ 370.079621][T11694] [ 370.080861][T11694] ? lock_acquire+0x1d1/0x380 [ 370.082354][T11694] ? clockevents_program_event+0x1bf/0x820 [ 370.084304][T11694] ? find_held_lock+0x2b/0x80 [ 370.085951][T11694] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 370.087672][T11694] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 370.089380][T11694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.091371][T11694] ? clockevents_program_event+0x1ef/0x820 [ 370.093233][T11694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 370.095207][T11694] ? __pfx_clockevents_program_event+0x10/0x10 [ 370.097157][T11694] ? timerqueue_linked_add+0x260/0x430 [ 370.098873][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.100337][T11694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.102220][T11694] ? policy_nodemask+0xed/0x5e0 [ 370.103790][T11694] alloc_pages_mpol+0x201/0x560 [ 370.105477][T11694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.107192][T11694] ? filemap_get_entry+0x22d/0x450 [ 370.109859][T11694] ? filemap_get_entry+0x22d/0x450 [ 370.111516][T11694] folio_alloc_noprof+0x22/0x250 [ 370.113108][T11694] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 370.115199][T11694] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 370.117342][T11694] ? lock_acquire+0x1d1/0x380 [ 370.118837][T11694] ? ext4_get_group_info+0x177/0x4b0 [ 370.121181][T11694] ? find_held_lock+0x2b/0x80 [ 370.122893][T11694] __filemap_get_folio_mpol+0x64e/0x11d0 [ 370.124679][T11694] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 370.126459][T11694] ext4_discard_preallocations+0x584/0x10c0 [ 370.128598][T11694] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 370.130702][T11694] ? __pfx_xa_destroy+0x10/0x10 [ 370.132344][T11694] ? inode_wait_for_writeback+0x171/0x390 [ 370.134270][T11694] ext4_clear_inode+0x6e/0x280 [ 370.135939][T11694] ext4_evict_inode+0x1de/0x1890 [ 370.137519][T11694] ? evict+0x37e/0xad0 [ 370.138865][T11694] ? __pfx_ext4_evict_inode+0x10/0x10 [ 370.140567][T11694] evict+0x3c2/0xad0 [ 370.141820][T11694] ? _raw_spin_unlock+0x28/0x50 [ 370.143361][T11694] ? __list_lru_walk_one+0x26d/0x550 [ 370.145093][T11694] ? __pfx_evict+0x10/0x10 [ 370.146516][T11694] ? _raw_spin_unlock+0x28/0x50 [ 370.148106][T11694] ? dentry_kill+0x5d7/0xca0 [ 370.149595][T11694] dispose_list+0x117/0x1e0 [ 370.151046][T11694] prune_icache_sb+0xea/0x150 [ 370.152578][T11694] ? list_lru_count_one+0x147/0x320 [ 370.154245][T11694] ? __pfx_prune_icache_sb+0x10/0x10 [ 370.155986][T11694] super_cache_scan+0x37c/0x560 [ 370.157538][T11694] do_shrink_slab+0x411/0x1200 [ 370.159037][T11694] shrink_slab+0xa78/0x12d0 [ 370.160325][T11694] ? shrink_slab+0x68b/0x12d0 [ 370.161667][T11694] ? __pfx_shrink_slab+0x10/0x10 [ 370.163169][T11694] ? page_counter_calculate_protection+0x348/0x730 [ 370.165187][T11694] ? rcu_read_unlock+0x17/0x60 [ 370.166532][T11694] ? rcu_read_unlock+0x17/0x60 [ 370.167875][T11694] shrink_one+0x3d3/0x870 [ 370.169088][T11694] ? shrink_node+0x2a41/0x4410 [ 370.170424][T11694] shrink_node+0x2a61/0x4410 [ 370.171806][T11694] ? shrink_node+0x276d/0x4410 [ 370.173347][T11694] ? lock_acquire+0x1d1/0x380 [ 370.174915][T11694] ? __pfx_shrink_node+0x10/0x10 [ 370.176526][T11694] ? queue_work_on+0x141/0x1e0 [ 370.178063][T11694] ? do_try_to_free_pages+0x2da/0x1500 [ 370.179751][T11694] do_try_to_free_pages+0x2da/0x1500 [ 370.181447][T11694] try_to_free_pages+0x2a0/0x740 [ 370.183019][T11694] ? __pfx_try_to_free_pages+0x10/0x10 [ 370.184755][T11694] ? find_held_lock+0x2b/0x80 [ 370.186312][T11694] ? fs_reclaim_acquire+0x70/0x100 [ 370.187954][T11694] ? fs_reclaim_acquire+0x70/0x100 [ 370.189594][T11694] __alloc_frozen_pages_noprof+0x1057/0x31e0 [ 370.191491][T11694] ? trace_kmem_cache_alloc+0x10/0x100 [ 370.193218][T11694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.195294][T11694] ? __css_rstat_updated+0x1ce/0x590 [ 370.196971][T11694] ? __pfx___css_rstat_updated+0x10/0x10 [ 370.198847][T11694] ? xas_create+0x1f4/0x14e0 [ 370.200316][T11694] ? rcu_is_watching+0x13/0xc0 [ 370.201840][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.203398][T11694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.205324][T11694] ? policy_nodemask+0xed/0x5e0 [ 370.206863][T11694] alloc_pages_mpol+0x201/0x560 [ 370.208401][T11694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.210111][T11694] ? filemap_get_read_batch+0x534/0x920 [ 370.212298][T11694] folio_alloc_noprof+0x22/0x250 [ 370.214278][T11694] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 370.216632][T11694] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 370.218769][T11694] ? page_cache_sync_ra+0x1bc/0xb40 [ 370.220397][T11694] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 370.222453][T11694] filemap_get_pages+0x8c0/0x2040 [ 370.224071][T11694] ? __pfx__copy_to_iter+0x10/0x10 [ 370.225781][T11694] ? irqentry_exit+0x202/0xab0 [ 370.227305][T11694] ? __pfx_filemap_get_pages+0x10/0x10 [ 370.229031][T11694] ? __pfx___might_resched+0x10/0x10 [ 370.230699][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.232286][T11694] filemap_read+0x3b0/0x10a0 [ 370.233787][T11694] ? find_held_lock+0x2b/0x80 [ 370.235359][T11694] ? __pfx_filemap_read+0x10/0x10 [ 370.237080][T11694] ? find_held_lock+0x2b/0x80 [ 370.238576][T11694] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 370.240362][T11694] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 370.242218][T11694] generic_file_read_iter+0x344/0x450 [ 370.243898][T11694] ? irqentry_exit+0x202/0xab0 [ 370.245491][T11694] __kernel_read+0x397/0xac0 [ 370.246951][T11694] ? __pfx___kernel_read+0x10/0x10 [ 370.248568][T11694] ? __local_bh_enable_ip+0xa5/0x120 [ 370.250270][T11694] ? kernel_fpu_end+0x69/0x80 [ 370.251772][T11694] ? sha256_blocks_ni+0x53/0xa0 [ 370.253333][T11694] integrity_kernel_read+0x7e/0xb0 [ 370.255008][T11694] ? __pfx_integrity_kernel_read+0x10/0x10 [ 370.256856][T11694] ima_calc_file_hash_tfm+0x25e/0x350 [ 370.258553][T11694] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 370.260443][T11694] ? generic_fillattr+0x6db/0x950 [ 370.262053][T11694] ? ima_alloc_tfm+0x21a/0x2e0 [ 370.263592][T11694] ima_calc_file_hash+0x1e3/0x380 [ 370.265345][T11694] ima_collect_measurement+0x952/0xb30 [ 370.267065][T11694] ? __pfx_ima_collect_measurement+0x10/0x10 [ 370.269378][T11694] ? process_measurement+0x5ab/0x2360 [ 370.271488][T11694] ? is_bad_inode+0xd/0x40 [ 370.273264][T11694] ? xattr_resolve_name+0x27d/0x3f0 [ 370.275167][T11694] ? vfs_getxattr_alloc+0xec/0x350 [ 370.276817][T11694] ? ima_get_hash_algo+0x241/0x400 [ 370.278461][T11694] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 370.280176][T11694] ? process_measurement+0xe04/0x2360 [ 370.282200][T11694] process_measurement+0xe04/0x2360 [ 370.284285][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.286383][T11694] ? __pfx_process_measurement+0x10/0x10 [ 370.288405][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.289980][T11694] ? reacquire_held_locks+0xdd/0x1f0 [ 370.291640][T11694] ? fast_dput+0x494/0x6f0 [ 370.293089][T11694] ? find_held_lock+0x2b/0x80 [ 370.294593][T11694] ? __pfx___fsnotify_parent+0x10/0x10 [ 370.296366][T11694] ima_file_check+0xc8/0x120 [ 370.297831][T11694] ? __pfx_ima_file_check+0x10/0x10 [ 370.299578][T11694] ? vfs_open_consume+0x334/0x460 [ 370.301601][T11694] security_file_post_open+0xc4/0x210 [ 370.303785][T11694] path_openat+0x5d0/0x23f0 [ 370.305744][T11694] ? __pfx_path_openat+0x10/0x10 [ 370.307588][T11694] do_file_open+0x20e/0x430 [ 370.309044][T11694] ? __pfx_do_file_open+0x10/0x10 [ 370.311112][T11694] ? _raw_spin_unlock+0x28/0x50 [ 370.313118][T11694] ? alloc_fd+0x471/0x7a0 [ 370.314995][T11694] do_sys_openat2+0x163/0x1d0 [ 370.316690][T11694] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.318364][T11694] __ia32_compat_sys_openat+0x12d/0x210 [ 370.320126][T11694] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 370.322060][T11694] __do_fast_syscall_32+0x14d/0x8e0 [ 370.323727][T11694] do_fast_syscall_32+0x32/0x70 [ 370.325396][T11694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.327371][T11694] RIP: 0023:0xf702efbc [ 370.328663][T11694] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 370.335310][T11694] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 370.338655][T11694] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002380 [ 370.341456][T11694] RDX: 0000000000088882 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.343946][T11694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.346536][T11694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.349001][T11694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.351482][T11694] [ 370.352483][T11694] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 370.354784][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.2.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.358158][T11694] Tainted: [L]=SOFTLOCKUP [ 370.359512][T11694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.363121][T11694] Call Trace: [ 370.364519][T11694] [ 370.365736][T11694] dump_stack_lvl+0x100/0x190 [ 370.367661][T11694] vpanic+0x2dc/0x6f8 [ 370.369570][T11694] panic+0xd1/0xe0 [ 370.371101][T11694] ? __pfx_panic+0x10/0x10 [ 370.372933][T11694] check_panic_on_warn.cold+0x19/0x34 [ 370.374741][T11694] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 370.376675][T11694] __warn.cold+0x191/0x321 [ 370.378122][T11694] __report_bug+0x30f/0x440 [ 370.379571][T11694] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 370.381527][T11694] ? __pfx___report_bug+0x10/0x10 [ 370.383478][T11694] ? __zone_watermark_ok+0x281/0x500 [ 370.385175][T11694] ? get_page_from_freelist+0x511/0x2c80 [ 370.386949][T11694] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 370.389194][T11694] report_bug+0xb3/0x220 [ 370.390578][T11694] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 370.392552][T11694] handle_bug+0x16a/0x2a0 [ 370.393931][T11694] exc_invalid_op+0x17/0x50 [ 370.395362][T11694] asm_exc_invalid_op+0x1a/0x20 [ 370.396926][T11694] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 370.399017][T11694] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 43 7c 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00 [ 370.405110][T11694] RSP: 0000:ffffc90005525838 EFLAGS: 00010202 [ 370.407166][T11694] RAX: ffff888000bb2580 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 370.409784][T11694] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888000bb25ac [ 370.412592][T11694] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002dc9 [ 370.415065][T11694] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000 [ 370.417527][T11694] R13: 0000000000000000 R14: ffffffff9cca2064 R15: 0000000000048c40 [ 370.419995][T11694] ? __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 370.421913][T11694] ? lock_acquire+0x1d1/0x380 [ 370.423409][T11694] ? clockevents_program_event+0x1bf/0x820 [ 370.425281][T11694] ? find_held_lock+0x2b/0x80 [ 370.426777][T11694] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 370.428499][T11694] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 370.430220][T11694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.432216][T11694] ? clockevents_program_event+0x1ef/0x820 [ 370.434073][T11694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 370.435908][T11694] ? __pfx_clockevents_program_event+0x10/0x10 [ 370.437862][T11694] ? timerqueue_linked_add+0x260/0x430 [ 370.440009][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.441727][T11694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.443763][T11694] ? policy_nodemask+0xed/0x5e0 [ 370.445642][T11694] alloc_pages_mpol+0x201/0x560 [ 370.447201][T11694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.448900][T11694] ? filemap_get_entry+0x22d/0x450 [ 370.450551][T11694] ? filemap_get_entry+0x22d/0x450 [ 370.452249][T11694] folio_alloc_noprof+0x22/0x250 [ 370.453852][T11694] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 370.455828][T11694] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 370.457960][T11694] ? lock_acquire+0x1d1/0x380 [ 370.459444][T11694] ? ext4_get_group_info+0x177/0x4b0 [ 370.461104][T11694] ? find_held_lock+0x2b/0x80 [ 370.462572][T11694] __filemap_get_folio_mpol+0x64e/0x11d0 [ 370.464330][T11694] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 370.466046][T11694] ext4_discard_preallocations+0x584/0x10c0 [ 370.467900][T11694] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 370.469879][T11694] ? __pfx_xa_destroy+0x10/0x10 [ 370.471421][T11694] ? inode_wait_for_writeback+0x171/0x390 [ 370.473264][T11694] ext4_clear_inode+0x6e/0x280 [ 370.474810][T11694] ext4_evict_inode+0x1de/0x1890 [ 370.476368][T11694] ? evict+0x37e/0xad0 [ 370.477675][T11694] ? __pfx_ext4_evict_inode+0x10/0x10 [ 370.479312][T11694] evict+0x3c2/0xad0 [ 370.480562][T11694] ? _raw_spin_unlock+0x28/0x50 [ 370.482089][T11694] ? __list_lru_walk_one+0x26d/0x550 [ 370.484023][T11694] ? __pfx_evict+0x10/0x10 [ 370.485560][T11694] ? _raw_spin_unlock+0x28/0x50 [ 370.487094][T11694] ? dentry_kill+0x5d7/0xca0 [ 370.488570][T11694] dispose_list+0x117/0x1e0 [ 370.490029][T11694] prune_icache_sb+0xea/0x150 [ 370.491516][T11694] ? list_lru_count_one+0x147/0x320 [ 370.493203][T11694] ? __pfx_prune_icache_sb+0x10/0x10 [ 370.494907][T11694] super_cache_scan+0x37c/0x560 [ 370.496452][T11694] do_shrink_slab+0x411/0x1200 [ 370.497826][T11694] shrink_slab+0xa78/0x12d0 [ 370.499274][T11694] ? shrink_slab+0x68b/0x12d0 [ 370.500786][T11694] ? __pfx_shrink_slab+0x10/0x10 [ 370.502340][T11694] ? page_counter_calculate_protection+0x348/0x730 [ 370.504382][T11694] ? rcu_read_unlock+0x17/0x60 [ 370.505900][T11694] ? rcu_read_unlock+0x17/0x60 [ 370.507423][T11694] shrink_one+0x3d3/0x870 [ 370.509142][T11694] ? shrink_node+0x2a41/0x4410 [ 370.511041][T11694] shrink_node+0x2a61/0x4410 [ 370.512905][T11694] ? shrink_node+0x276d/0x4410 [ 370.514791][T11694] ? lock_acquire+0x1d1/0x380 [ 370.516678][T11694] ? __pfx_shrink_node+0x10/0x10 [ 370.518655][T11694] ? queue_work_on+0x141/0x1e0 [ 370.520530][T11694] ? do_try_to_free_pages+0x2da/0x1500 [ 370.522280][T11694] do_try_to_free_pages+0x2da/0x1500 [ 370.523930][T11694] try_to_free_pages+0x2a0/0x740 [ 370.525515][T11694] ? __pfx_try_to_free_pages+0x10/0x10 [ 370.527227][T11694] ? find_held_lock+0x2b/0x80 [ 370.528878][T11694] ? fs_reclaim_acquire+0x70/0x100 [ 370.530780][T11694] ? fs_reclaim_acquire+0x70/0x100 [ 370.532398][T11694] __alloc_frozen_pages_noprof+0x1057/0x31e0 [ 370.534352][T11694] ? trace_kmem_cache_alloc+0x10/0x100 [ 370.536069][T11694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.538079][T11694] ? __css_rstat_updated+0x1ce/0x590 [ 370.539739][T11694] ? __pfx___css_rstat_updated+0x10/0x10 [ 370.541504][T11694] ? xas_create+0x1f4/0x14e0 [ 370.542951][T11694] ? rcu_is_watching+0x13/0xc0 [ 370.544468][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.546055][T11694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.547896][T11694] ? policy_nodemask+0xed/0x5e0 [ 370.549441][T11694] alloc_pages_mpol+0x201/0x560 [ 370.550980][T11694] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.552707][T11694] ? filemap_get_read_batch+0x534/0x920 [ 370.554470][T11694] folio_alloc_noprof+0x22/0x250 [ 370.556035][T11694] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 370.557993][T11694] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 370.560125][T11694] ? page_cache_sync_ra+0x1bc/0xb40 [ 370.561801][T11694] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 370.563829][T11694] filemap_get_pages+0x8c0/0x2040 [ 370.565428][T11694] ? __pfx__copy_to_iter+0x10/0x10 [ 370.567039][T11694] ? irqentry_exit+0x202/0xab0 [ 370.568536][T11694] ? __pfx_filemap_get_pages+0x10/0x10 [ 370.570253][T11694] ? __pfx___might_resched+0x10/0x10 [ 370.571921][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.573507][T11694] filemap_read+0x3b0/0x10a0 [ 370.574991][T11694] ? find_held_lock+0x2b/0x80 [ 370.576513][T11694] ? __pfx_filemap_read+0x10/0x10 [ 370.578102][T11694] ? find_held_lock+0x2b/0x80 [ 370.579593][T11694] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 370.581394][T11694] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 370.583275][T11694] generic_file_read_iter+0x344/0x450 [ 370.584960][T11694] ? irqentry_exit+0x202/0xab0 [ 370.586480][T11694] __kernel_read+0x397/0xac0 [ 370.587936][T11694] ? __pfx___kernel_read+0x10/0x10 [ 370.589565][T11694] ? __local_bh_enable_ip+0xa5/0x120 [ 370.591225][T11694] ? kernel_fpu_end+0x69/0x80 [ 370.592785][T11694] ? sha256_blocks_ni+0x53/0xa0 [ 370.594339][T11694] integrity_kernel_read+0x7e/0xb0 [ 370.595941][T11694] ? __pfx_integrity_kernel_read+0x10/0x10 [ 370.597796][T11694] ima_calc_file_hash_tfm+0x25e/0x350 [ 370.599487][T11694] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 370.601374][T11694] ? generic_fillattr+0x6db/0x950 [ 370.603092][T11694] ? ima_alloc_tfm+0x21a/0x2e0 [ 370.604639][T11694] ima_calc_file_hash+0x1e3/0x380 [ 370.606236][T11694] ima_collect_measurement+0x952/0xb30 [ 370.607948][T11694] ? __pfx_ima_collect_measurement+0x10/0x10 [ 370.609842][T11694] ? process_measurement+0x5ab/0x2360 [ 370.611556][T11694] ? is_bad_inode+0xd/0x40 [ 370.613151][T11694] ? xattr_resolve_name+0x27d/0x3f0 [ 370.614848][T11694] ? vfs_getxattr_alloc+0xec/0x350 [ 370.616503][T11694] ? ima_get_hash_algo+0x241/0x400 [ 370.618170][T11694] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 370.619815][T11694] ? process_measurement+0xe04/0x2360 [ 370.621527][T11694] process_measurement+0xe04/0x2360 [ 370.623552][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.625197][T11694] ? __pfx_process_measurement+0x10/0x10 [ 370.626955][T11694] ? __lock_acquire+0x5c0/0x1f40 [ 370.628524][T11694] ? reacquire_held_locks+0xdd/0x1f0 [ 370.630183][T11694] ? fast_dput+0x494/0x6f0 [ 370.631601][T11694] ? find_held_lock+0x2b/0x80 [ 370.633287][T11694] ? __pfx___fsnotify_parent+0x10/0x10 [ 370.635018][T11694] ima_file_check+0xc8/0x120 [ 370.636480][T11694] ? __pfx_ima_file_check+0x10/0x10 [ 370.638170][T11694] ? vfs_open_consume+0x334/0x460 [ 370.639770][T11694] security_file_post_open+0xc4/0x210 [ 370.641455][T11694] path_openat+0x5d0/0x23f0 [ 370.642835][T11694] ? __pfx_path_openat+0x10/0x10 [ 370.644423][T11694] do_file_open+0x20e/0x430 [ 370.645882][T11694] ? __pfx_do_file_open+0x10/0x10 [ 370.647476][T11694] ? _raw_spin_unlock+0x28/0x50 [ 370.649016][T11694] ? alloc_fd+0x471/0x7a0 [ 370.650383][T11694] do_sys_openat2+0x163/0x1d0 [ 370.651931][T11694] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.653621][T11694] __ia32_compat_sys_openat+0x12d/0x210 [ 370.655346][T11694] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 370.657255][T11694] __do_fast_syscall_32+0x14d/0x8e0 [ 370.658889][T11694] do_fast_syscall_32+0x32/0x70 [ 370.660417][T11694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.662651][T11694] RIP: 0023:0xf702efbc [ 370.664037][T11694] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 370.670029][T11694] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 370.672716][T11694] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002380 [ 370.675228][T11694] RDX: 0000000000088882 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.677718][T11694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.680161][T11694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.682681][T11694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.685163][T11694] [ 370.686838][T11694] Kernel Offset: disabled [ 370.688188][T11694] Rebooting in 86400 seconds..