last executing test programs: 1.724483355s ago: executing program 1 (id=356): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.686256841s ago: executing program 1 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000ac00)={0x0, 0x0, &(0x7f000000ac40)={&(0x7f000000ac80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 1.628468774s ago: executing program 1 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 1.376178763s ago: executing program 1 (id=366): r0 = syz_ublk_setup_io_uring(0x567, &(0x7f0000000140)={0x0, 0x5e92, 0x100, 0x3}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r1, &(0x7f0000000400)='7', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, 0xa6, 0x10000, @value=r1}, 0x28) open_by_handle_at(r0, &(0x7f0000000480)=@orangefs_parent={0x28, 0x2, {{"8b9e00"}, {"936572fb5e7a7c119119c939de46c713", 0x6}}}, 0x400) 1.301344329s ago: executing program 1 (id=370): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x3) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x2, &(0x7f0000000540)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000580)) 1.061458261s ago: executing program 3 (id=374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs]}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000540)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x1c, 0x0, &(0x7f00000009c0)=[@free_buffer, @request_freeze={0x400c6313, 0x0, 0x8000000000000001}]}) 1.011418986s ago: executing program 3 (id=376): syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 910.735777ms ago: executing program 3 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x188100, 0x85) lseek(r0, 0x80000000, 0x0) 841.359582ms ago: executing program 3 (id=380): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="03031b003000320006006300000000442f"], 0x76) 790.643484ms ago: executing program 2 (id=389): setns(0xc9, 0x0) socketpair(0x27, 0x3, 0x0, &(0x7f0000000500)) 729.772795ms ago: executing program 3 (id=382): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000140)={0x0, 0x20, 0x2, 0x10000}) 728.423709ms ago: executing program 3 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 726.903469ms ago: executing program 2 (id=391): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x3, 0x5, 0x800, 0x0, 0xfffbffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) close(0xffffffffffffffff) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0xb, {0x1, 0x0}, 0x0, 0x40e}) 597.334914ms ago: executing program 2 (id=384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f57000/0x1000)=nil, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x7c}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000740)}, 0x4) 470.233483ms ago: executing program 1 (id=385): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x81e10, 0x0, 0x0, @by_dev={r2}, [@clone={0x0, 0x3c00, 0x0, 0x88, 'clone\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '64', ' 1 no_discard_passdown'}}]}) 391.922107ms ago: executing program 0 (id=386): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f000073e000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6010, 0x18, 0x2a, 0x6b, 0x2}) 319.099451ms ago: executing program 0 (id=387): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x1}, 0x8) 308.205923ms ago: executing program 2 (id=388): fsopen(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x5c, 0x2c, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x10, 0x2}, {0x1004}}}]}}]}]}]}}]}, 0x5c}}, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 307.914582ms ago: executing program 0 (id=390): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffe, @remote}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001300f5d100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080004007f0000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmmsg$inet6(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000000c40)="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", 0x64a}, {&(0x7f0000001dc0)}], 0x3, &(0x7f0000001f00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x84) 255.215143ms ago: executing program 0 (id=392): prlimit64(0x0, 0xe, &(0x7f00000081c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008200)=0x7) unshare(0x42000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 150.403162ms ago: executing program 2 (id=393): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = fanotify_init(0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 95.147067ms ago: executing program 2 (id=394): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x5, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 5.032225ms ago: executing program 0 (id=395): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./security\x00', &(0x7f0000000bc0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000c40)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000c80)='.\x00', &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 0 (id=396): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0xfffffffe, 0x7}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19497' (ED25519) to the list of known hosts. [ 42.834645][ T5770] cgroup: Unknown subsys name 'net' [ 42.961958][ T5770] cgroup: Unknown subsys name 'cpuset' [ 42.967255][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.960393][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.220482][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.221709][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.222675][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.223424][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.223894][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.224216][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.224453][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.226376][ T68] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.226824][ T68] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.227376][ T68] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.232357][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.233423][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.235435][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.238825][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.239538][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.240670][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.241345][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.242037][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.243302][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.249103][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.433581][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.435064][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.446792][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.480127][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.491087][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.541608][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.610267][ T5785] infiniband rxe0: set active [ 48.611237][ T5785] infiniband rxe0: added rxe_eth0 [ 48.622048][ T1041] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.625694][ T5785] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.625725][ T5785] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.625759][ T5785] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.644504][ T5785] RDS/IB: rxe0: added [ 48.644618][ T5785] smc: adding ib device rxe0 with port count 1 [ 48.644651][ T5785] smc: ib device rxe0 port 1 has no pnetid [ 48.646102][ T65] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.661266][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.731662][ T5216] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.744943][ T5216] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.818474][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.897700][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.897770][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.897845][ T5787] bridge_slave_0: entered allmulticast mode [ 48.899133][ T5787] bridge_slave_0: entered promiscuous mode [ 48.909404][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.909476][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.909572][ T5794] bridge_slave_0: entered allmulticast mode [ 48.910888][ T5794] bridge_slave_0: entered promiscuous mode [ 48.914454][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.914564][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.914660][ T5794] bridge_slave_1: entered allmulticast mode [ 48.916395][ T5794] bridge_slave_1: entered promiscuous mode [ 48.966491][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.966570][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.966638][ T5787] bridge_slave_1: entered allmulticast mode [ 48.968036][ T5787] bridge_slave_1: entered promiscuous mode [ 48.985571][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.024397][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.027075][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.029178][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.046621][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.062998][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.063123][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.063219][ T5782] bridge_slave_0: entered allmulticast mode [ 49.064478][ T5782] bridge_slave_0: entered promiscuous mode [ 49.066680][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.066752][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.066844][ T5782] bridge_slave_1: entered allmulticast mode [ 49.068643][ T5782] bridge_slave_1: entered promiscuous mode [ 49.081901][ T5787] team0: Port device team_slave_0 added [ 49.085498][ T5794] team0: Port device team_slave_0 added [ 49.093845][ T5794] team0: Port device team_slave_1 added [ 49.095488][ T5787] team0: Port device team_slave_1 added [ 49.124839][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.124855][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.124875][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.135211][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.139992][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.140005][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.140025][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.146693][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.146704][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.146724][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.148713][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.148722][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.148736][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.150655][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.157594][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.184180][ T5794] hsr_slave_0: entered promiscuous mode [ 49.184617][ T5794] hsr_slave_1: entered promiscuous mode [ 49.186069][ T5782] team0: Port device team_slave_0 added [ 49.187398][ T5782] team0: Port device team_slave_1 added [ 49.215479][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.215490][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.215503][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.231393][ T5787] hsr_slave_0: entered promiscuous mode [ 49.231773][ T5787] hsr_slave_1: entered promiscuous mode [ 49.232054][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 49.232095][ T5787] Cannot create hsr debugfs directory [ 49.232452][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.232566][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.232581][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.282631][ T5782] hsr_slave_0: entered promiscuous mode [ 49.283051][ T5782] hsr_slave_1: entered promiscuous mode [ 49.283336][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 49.283348][ T5782] Cannot create hsr debugfs directory [ 49.517330][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.524481][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.536263][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.539696][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.540292][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.543783][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.548459][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.552971][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.575599][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.578879][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.579379][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.582822][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.587518][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.593152][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.593625][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.596269][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.627811][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.627865][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.628113][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.628188][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.650869][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.653656][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.654081][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.656012][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.656455][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.656499][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.656657][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.656701][ T5787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.677936][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.680629][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.681009][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.682936][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.729986][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.730734][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.731117][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.731488][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.764383][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.764432][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.764490][ T5785] bridge_slave_0: entered allmulticast mode [ 49.765170][ T5785] bridge_slave_0: entered promiscuous mode [ 49.767438][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.767862][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.767959][ T5785] bridge_slave_1: entered allmulticast mode [ 49.768846][ T5785] bridge_slave_1: entered promiscuous mode [ 49.775745][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.793713][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.795670][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.801356][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.813835][ T5785] team0: Port device team_slave_0 added [ 49.824123][ T5785] team0: Port device team_slave_1 added [ 49.829740][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.842432][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.842442][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.842455][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.843299][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.843306][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.843319][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.879782][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.883121][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.883195][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.899039][ T5785] hsr_slave_0: entered promiscuous mode [ 49.899888][ T5785] hsr_slave_1: entered promiscuous mode [ 49.900427][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 49.900444][ T5785] Cannot create hsr debugfs directory [ 49.920269][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.920422][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.922199][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.922280][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.946916][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.946961][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.082385][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.111213][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.114506][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.114916][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.123468][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.126997][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.135188][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.140042][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.140245][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.149265][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.164169][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.164247][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.166033][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.166112][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.278665][ T5784] Bluetooth: hci0: command tx timeout [ 50.278899][ T5784] Bluetooth: hci2: command tx timeout [ 50.278993][ T5784] Bluetooth: hci3: command tx timeout [ 50.279142][ T5793] Bluetooth: hci1: command tx timeout [ 50.284402][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.304144][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.312881][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.312956][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.328555][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.328635][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.375793][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.490202][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.515911][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.550305][ T5787] veth0_vlan: entered promiscuous mode [ 50.566579][ T5794] veth0_vlan: entered promiscuous mode [ 50.568829][ T5787] veth1_vlan: entered promiscuous mode [ 50.576500][ T5794] veth1_vlan: entered promiscuous mode [ 50.614896][ T5787] veth0_macvtap: entered promiscuous mode [ 50.617521][ T5794] veth0_macvtap: entered promiscuous mode [ 50.624498][ T5787] veth1_macvtap: entered promiscuous mode [ 50.630732][ T5794] veth1_macvtap: entered promiscuous mode [ 50.645235][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.655978][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.662452][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.666192][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.683805][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.696363][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.787949][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.788417][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.801874][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.801891][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.823192][ T5785] veth0_vlan: entered promiscuous mode [ 50.825058][ T5782] veth0_vlan: entered promiscuous mode [ 50.826156][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.826172][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.843702][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.843715][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.848983][ T5785] veth1_vlan: entered promiscuous mode [ 50.859841][ T5782] veth1_vlan: entered promiscuous mode [ 50.864401][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.864412][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.891120][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.907537][ T5785] veth0_macvtap: entered promiscuous mode [ 50.912147][ T5782] veth0_macvtap: entered promiscuous mode [ 50.913538][ T5787] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.917395][ T5787] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.918746][ T5787] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.919740][ T5782] veth1_macvtap: entered promiscuous mode [ 50.921218][ T5785] veth1_macvtap: entered promiscuous mode [ 50.928815][ T5787] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.944062][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.953365][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.961026][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.968577][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.977859][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.977929][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.977989][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.978050][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.039185][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.039210][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.040109][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.040120][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.059145][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.059156][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.078287][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.078498][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.078500][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.078515][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.078696][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.079674][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.079824][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.079962][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.096713][ T5945] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'. [ 51.101076][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.105676][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.105691][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.130457][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.186896][ T5954] TC_ACT_REPEAT abuse ? [ 51.245392][ T5960] FAULT_INJECTION: forcing a failure. [ 51.245392][ T5960] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.245413][ T5960] CPU: 3 UID: 0 PID: 5960 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 51.245425][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.245432][ T5960] Call Trace: [ 51.245436][ T5960] [ 51.245440][ T5960] dump_stack_lvl+0x100/0x190 [ 51.245462][ T5960] should_fail_ex.cold+0x5/0xa [ 51.245478][ T5960] get_futex_key+0x1c9/0x13e0 [ 51.245493][ T5960] ? __pfx_get_futex_key+0x10/0x10 [ 51.245507][ T5960] ? __pfx_evdev_read+0x10/0x10 [ 51.245524][ T5960] futex_wake+0xf4/0x5e0 [ 51.245540][ T5960] ? __pfx_futex_wake+0x10/0x10 [ 51.245554][ T5960] ? bpf_lsm_file_permission+0x9/0x10 [ 51.245573][ T5960] ? __pfx_evdev_read+0x10/0x10 [ 51.245588][ T5960] ? vfs_read+0x243/0xb40 [ 51.245604][ T5960] do_futex+0x2b2/0x440 [ 51.245618][ T5960] ? __pfx_do_futex+0x10/0x10 [ 51.245639][ T5960] __ia32_sys_futex_time32+0x2f4/0x470 [ 51.245662][ T5960] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 51.245682][ T5960] ? __might_fault+0xc5/0x140 [ 51.245707][ T5960] __do_fast_syscall_32+0x14b/0x8c0 [ 51.245729][ T5960] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.245750][ T5960] do_fast_syscall_32+0x32/0x70 [ 51.245768][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.245812][ T5960] RIP: 0023:0xf747efbc [ 51.245828][ T5960] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.245847][ T5960] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 51.245863][ T5960] RAX: ffffffffffffffda RBX: 00000000f74a4f8c RCX: 0000000000000081 [ 51.245870][ T5960] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 51.245876][ T5960] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 51.245882][ T5960] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.245888][ T5960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.245902][ T5960] [ 51.313907][ T5962] batman_adv: batadv0: Adding interface: syzkaller0 [ 51.313917][ T5962] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.313933][ T5962] batman_adv: batadv0: Interface activated: syzkaller0 [ 51.320181][ T5958] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 51.351758][ T5958] batman_adv: batadv0: Removing interface: syzkaller0 [ 51.486700][ T5987] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17'. [ 51.530307][ T5990] FAULT_INJECTION: forcing a failure. [ 51.530307][ T5990] name fail_futex, interval 1, probability 0, space 0, times 0 [ 51.530327][ T5990] CPU: 2 UID: 0 PID: 5990 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 51.530340][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.530347][ T5990] Call Trace: [ 51.530351][ T5990] [ 51.530355][ T5990] dump_stack_lvl+0x100/0x190 [ 51.530374][ T5990] should_fail_ex.cold+0x5/0xa [ 51.530390][ T5990] get_futex_key+0x1c9/0x13e0 [ 51.530404][ T5990] ? __pfx_get_futex_key+0x10/0x10 [ 51.530417][ T5990] ? __pfx_evdev_read+0x10/0x10 [ 51.530434][ T5990] futex_wake+0xf4/0x5e0 [ 51.530451][ T5990] ? __pfx_futex_wake+0x10/0x10 [ 51.530463][ T5990] ? bpf_lsm_file_permission+0x9/0x10 [ 51.530482][ T5990] ? __pfx_evdev_read+0x10/0x10 [ 51.530497][ T5990] ? vfs_read+0x243/0xb40 [ 51.530513][ T5990] do_futex+0x2b2/0x440 [ 51.530527][ T5990] ? __pfx_do_futex+0x10/0x10 [ 51.530543][ T5990] __ia32_sys_futex_time32+0x2f4/0x470 [ 51.530565][ T5990] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 51.530580][ T5990] ? __might_fault+0xc5/0x140 [ 51.530597][ T5990] __do_fast_syscall_32+0x14b/0x8c0 [ 51.530611][ T5990] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.530623][ T5990] do_fast_syscall_32+0x32/0x70 [ 51.530635][ T5990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.530649][ T5990] RIP: 0023:0xf7f66fbc [ 51.530658][ T5990] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.530669][ T5990] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 51.530681][ T5990] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 51.530689][ T5990] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 51.530696][ T5990] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 51.530704][ T5990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.530711][ T5990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.530726][ T5990] [ 51.603474][ T5995] TC_ACT_REPEAT abuse ? [ 51.694702][ T6010] batman_adv: batadv0: Adding interface: syzkaller0 [ 51.694712][ T6010] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.694728][ T6010] batman_adv: batadv0: Interface activated: syzkaller0 [ 51.698721][ T6008] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 51.740446][ T6008] batman_adv: batadv0: Removing interface: syzkaller0 [ 51.835390][ T6030] FAULT_INJECTION: forcing a failure. [ 51.835390][ T6030] name fail_futex, interval 1, probability 0, space 0, times 0 [ 51.835410][ T6030] CPU: 3 UID: 0 PID: 6030 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 51.835422][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.835429][ T6030] Call Trace: [ 51.835433][ T6030] [ 51.835437][ T6030] dump_stack_lvl+0x100/0x190 [ 51.835455][ T6030] should_fail_ex.cold+0x5/0xa [ 51.835472][ T6030] get_futex_key+0x1c9/0x13e0 [ 51.835486][ T6030] ? __pfx_get_futex_key+0x10/0x10 [ 51.835498][ T6030] ? __pfx_evdev_read+0x10/0x10 [ 51.835516][ T6030] futex_wake+0xf4/0x5e0 [ 51.835532][ T6030] ? __pfx_futex_wake+0x10/0x10 [ 51.835545][ T6030] ? bpf_lsm_file_permission+0x9/0x10 [ 51.835564][ T6030] ? __pfx_evdev_read+0x10/0x10 [ 51.835580][ T6030] ? vfs_read+0x243/0xb40 [ 51.835596][ T6030] do_futex+0x2b2/0x440 [ 51.835609][ T6030] ? __pfx_do_futex+0x10/0x10 [ 51.835626][ T6030] __ia32_sys_futex_time32+0x2f4/0x470 [ 51.835648][ T6030] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 51.835668][ T6030] ? __might_fault+0xc5/0x140 [ 51.835691][ T6030] __do_fast_syscall_32+0x14b/0x8c0 [ 51.835713][ T6030] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.835734][ T6030] do_fast_syscall_32+0x32/0x70 [ 51.835755][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.835773][ T6030] RIP: 0023:0xf73fefbc [ 51.835783][ T6030] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.835793][ T6030] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 51.835805][ T6030] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 51.835812][ T6030] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 51.835818][ T6030] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 51.835825][ T6030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.835831][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.835844][ T6030] [ 51.902921][ T6037] TC_ACT_REPEAT abuse ? [ 52.128212][ T6066] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 52.244776][ T6087] Zero length message leads to an empty skb [ 52.358986][ T5797] Bluetooth: hci3: command tx timeout [ 52.359008][ T5797] Bluetooth: hci0: command tx timeout [ 52.367827][ T5793] Bluetooth: hci1: command tx timeout [ 52.367834][ T5797] Bluetooth: hci2: command tx timeout [ 52.507858][ T6100] FAULT_INJECTION: forcing a failure. [ 52.507858][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 52.507892][ T6100] CPU: 1 UID: 0 PID: 6100 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT(full) [ 52.507913][ T6100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.507924][ T6100] Call Trace: [ 52.507931][ T6100] [ 52.507939][ T6100] dump_stack_lvl+0x100/0x190 [ 52.507966][ T6100] should_fail_ex.cold+0x5/0xa [ 52.507990][ T6100] should_failslab+0xc2/0x120 [ 52.508019][ T6100] kmem_cache_alloc_noprof+0x92/0x6a0 [ 52.508043][ T6100] ? __pfx_map_id_range_down+0x10/0x10 [ 52.508070][ T6100] ? security_inode_alloc+0x3b/0x2c0 [ 52.508095][ T6100] security_inode_alloc+0x3b/0x2c0 [ 52.508118][ T6100] inode_init_always_gfp+0xc6f/0xfb0 [ 52.508148][ T6100] alloc_inode+0x8e/0x250 [ 52.508169][ T6100] new_inode+0x22/0x1c0 [ 52.508191][ T6100] __debugfs_create_file+0xfb/0x500 [ 52.508216][ T6100] debugfs_create_file_full+0x41/0x60 [ 52.508241][ T6100] binder_open+0x9e1/0xde0 [ 52.508262][ T6100] ? __pfx_apparmor_file_open+0x10/0x10 [ 52.508285][ T6100] ? __pfx_binder_open+0x10/0x10 [ 52.508305][ T6100] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 52.508330][ T6100] do_dentry_open+0x674/0x1470 [ 52.508356][ T6100] ? __pfx_binder_open+0x10/0x10 [ 52.508380][ T6100] vfs_open_consume+0xcc/0x460 [ 52.508403][ T6100] path_openat+0x1547/0x23f0 [ 52.508432][ T6100] ? __pfx_path_openat+0x10/0x10 [ 52.508466][ T6100] do_file_open+0x20e/0x430 [ 52.508495][ T6100] ? __pfx_do_file_open+0x10/0x10 [ 52.508539][ T6100] ? _raw_spin_unlock+0x28/0x50 [ 52.508564][ T6100] ? alloc_fd+0x471/0x7a0 [ 52.508597][ T6100] do_sys_openat2+0x163/0x1d0 [ 52.508617][ T6100] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.508638][ T6100] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 52.508663][ T6100] __ia32_compat_sys_openat+0x12d/0x210 [ 52.508684][ T6100] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 52.508717][ T6100] __do_fast_syscall_32+0x14b/0x8c0 [ 52.508741][ T6100] do_fast_syscall_32+0x32/0x70 [ 52.508760][ T6100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.508783][ T6100] RIP: 0023:0xf73fefbc [ 52.508798][ T6100] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.508814][ T6100] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 52.508833][ T6100] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 52.508845][ T6100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.508855][ T6100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.508872][ T6100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.508883][ T6100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.508910][ T6100] [ 52.508933][ T6100] debugfs: out of free dentries, can not create file '6098' [ 52.664646][ T6112] capability: warning: `syz.0.68' uses deprecated v2 capabilities in a way that may be insecure [ 52.718502][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 53.432449][ T1163] IPVS: starting estimator thread 0... [ 53.528124][ T6159] IPVS: using max 21 ests per chain, 50400 per kthread [ 53.660308][ T6176] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 53.675122][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.676766][ T6176] team0: Port device bond0 added [ 53.930458][ T6198] Bluetooth: MGMT ver 1.23 [ 53.931850][ T6198] tap0: tun_chr_ioctl cmd 1074025677 [ 53.932394][ T6198] tap0: linktype set to 780 [ 54.438401][ T5784] Bluetooth: hci3: command tx timeout [ 54.438430][ T5784] Bluetooth: hci1: command tx timeout [ 54.438565][ T5793] Bluetooth: hci0: command tx timeout [ 54.438621][ T5797] Bluetooth: hci2: command tx timeout [ 54.707489][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888014e7f800: rx timeout, send abort [ 55.105920][ T6271] syzkaller0: entered promiscuous mode [ 55.105939][ T6271] syzkaller0: entered allmulticast mode [ 55.207992][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888014e7f800: abort rx timeout. Force session deactivation [ 55.209010][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025b27c00: rx timeout, send abort [ 55.709065][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025b27c00: abort rx timeout. Force session deactivation [ 55.756785][ T6330] team0: No ports can be present during mode change [ 56.060321][ T6366] device-mapper: table: 248:5: integrity: Bitmap mode can be only used with internal hash (-EINVAL) [ 56.060337][ T6366] device-mapper: ioctl: error adding target to table [ 56.285592][ T6387] binder: 6386:6387 ioctl c0306201 80000780 returned -22 [ 56.379008][ T6401] FAULT_INJECTION: forcing a failure. [ 56.379008][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 56.379033][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) [ 56.379047][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.379054][ T6401] Call Trace: [ 56.379059][ T6401] [ 56.379063][ T6401] dump_stack_lvl+0x100/0x190 [ 56.379081][ T6401] should_fail_ex.cold+0x5/0xa [ 56.379096][ T6401] ? __pfx_cgroup_show_path+0x10/0x10 [ 56.379114][ T6401] should_failslab+0xc2/0x120 [ 56.379132][ T6401] ? __pfx_cgroup_show_path+0x10/0x10 [ 56.379148][ T6401] __kmalloc_cache_noprof+0x91/0x6d0 [ 56.379161][ T6401] ? kernfs_root+0x23/0x2a0 [ 56.379176][ T6401] ? cgroup_show_path+0xb2/0x730 [ 56.379194][ T6401] ? __pfx_cgroup_show_path+0x10/0x10 [ 56.379211][ T6401] cgroup_show_path+0xb2/0x730 [ 56.379229][ T6401] ? __pfx_cgroup_show_path+0x10/0x10 [ 56.379245][ T6401] kernfs_sop_show_path+0xe9/0x160 [ 56.379260][ T6401] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 56.379276][ T6401] show_path+0x9e/0x100 [ 56.379288][ T6401] show_mountinfo+0x1d8/0x820 [ 56.379306][ T6401] ? __pfx_show_mountinfo+0x10/0x10 [ 56.379328][ T6401] traverse.part.0.constprop.0+0x107/0x650 [ 56.379349][ T6401] seq_lseek+0x2fb/0x430 [ 56.379366][ T6401] ksys_lseek+0xf3/0x1b0 [ 56.379380][ T6401] __do_fast_syscall_32+0x14b/0x8c0 [ 56.379393][ T6401] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.379405][ T6401] do_fast_syscall_32+0x32/0x70 [ 56.379417][ T6401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.379438][ T6401] RIP: 0023:0xf7f66fbc [ 56.379449][ T6401] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 56.379460][ T6401] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000013 [ 56.379472][ T6401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000009d2 [ 56.379479][ T6401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.379486][ T6401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.379492][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.379499][ T6401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.379514][ T6401] [ 56.528898][ T5142] Bluetooth: hci2: command tx timeout [ 56.528929][ T5142] Bluetooth: hci0: command tx timeout [ 56.528948][ T5142] Bluetooth: hci1: command tx timeout [ 56.528967][ T5142] Bluetooth: hci3: command tx timeout [ 56.640740][ T6425] binder: 6424:6425 ioctl c0306201 80000780 returned -22 [ 56.870314][ T6448] binder: 6447:6448 ioctl c0306201 80000780 returned -22 [ 57.183136][ T6473] binder: 6472:6473 ioctl c0306201 80000780 returned -22 [ 57.226175][ T6475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.226308][ T6475] block device autoloading is deprecated and will be removed. [ 57.624285][ T6498] binder: 6497:6498 ioctl c0306201 80000780 returned -22 [ 57.951551][ T6514] FAULT_INJECTION: forcing a failure. [ 57.951551][ T6514] name fail_futex, interval 1, probability 0, space 0, times 0 [ 57.951581][ T6514] CPU: 2 UID: 0 PID: 6514 Comm: syz.3.216 Not tainted syzkaller #0 PREEMPT(full) [ 57.951603][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.951615][ T6514] Call Trace: [ 57.951621][ T6514] [ 57.951630][ T6514] dump_stack_lvl+0x100/0x190 [ 57.951660][ T6514] should_fail_ex.cold+0x5/0xa [ 57.951687][ T6514] get_futex_key+0x1c9/0x13e0 [ 57.951711][ T6514] ? __pfx_get_futex_key+0x10/0x10 [ 57.951729][ T6514] ? futex_wake+0x4ea/0x5e0 [ 57.951761][ T6514] futex_wake+0xf4/0x5e0 [ 57.951786][ T6514] ? futex_wait+0x11e/0x370 [ 57.951814][ T6514] ? __pfx_futex_wake+0x10/0x10 [ 57.951844][ T6514] ? find_held_lock+0x2b/0x80 [ 57.951865][ T6514] ? __might_fault+0xc5/0x140 [ 57.951886][ T6514] ? __might_fault+0xc5/0x140 [ 57.951910][ T6514] do_futex+0x2b2/0x440 [ 57.951933][ T6514] ? __pfx_do_futex+0x10/0x10 [ 57.951954][ T6514] ? mntput+0x70/0xa0 [ 57.951980][ T6514] ? do_handle_open+0x2b9/0xf10 [ 57.952006][ T6514] __ia32_sys_futex_time32+0x2f4/0x470 [ 57.952034][ T6514] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 57.952059][ T6514] ? __might_fault+0xc5/0x140 [ 57.952088][ T6514] __do_fast_syscall_32+0x14b/0x8c0 [ 57.952114][ T6514] do_fast_syscall_32+0x32/0x70 [ 57.952136][ T6514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.952180][ T6514] RIP: 0023:0xf747efbc [ 57.952196][ T6514] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 57.952215][ T6514] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 57.952234][ T6514] RAX: ffffffffffffffda RBX: 00000000f74a4f8c RCX: 0000000000000081 [ 57.952247][ T6514] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 57.952259][ T6514] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 57.952270][ T6514] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.952281][ T6514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.952307][ T6514] [ 58.094169][ T6521] binder_alloc: 6520: binder_alloc_buf, no vma [ 58.094369][ T6521] binder: 6520:6521 ioctl c0306201 80000780 returned -22 [ 58.274878][ T6535] FAULT_INJECTION: forcing a failure. [ 58.274878][ T6535] name fail_futex, interval 1, probability 0, space 0, times 0 [ 58.274898][ T6535] CPU: 3 UID: 0 PID: 6535 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) [ 58.274917][ T6535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.274923][ T6535] Call Trace: [ 58.274928][ T6535] [ 58.274932][ T6535] dump_stack_lvl+0x100/0x190 [ 58.274951][ T6535] should_fail_ex.cold+0x5/0xa [ 58.274967][ T6535] get_futex_key+0x1c9/0x13e0 [ 58.274982][ T6535] ? __pfx_get_futex_key+0x10/0x10 [ 58.274993][ T6535] ? futex_wake+0x4ea/0x5e0 [ 58.275010][ T6535] futex_wake+0xf4/0x5e0 [ 58.275025][ T6535] ? futex_wait+0x11e/0x370 [ 58.275041][ T6535] ? __pfx_futex_wake+0x10/0x10 [ 58.275059][ T6535] ? find_held_lock+0x2b/0x80 [ 58.275071][ T6535] ? __might_fault+0xc5/0x140 [ 58.275083][ T6535] ? __might_fault+0xc5/0x140 [ 58.275097][ T6535] do_futex+0x2b2/0x440 [ 58.275111][ T6535] ? __pfx_do_futex+0x10/0x10 [ 58.275123][ T6535] ? mntput+0x70/0xa0 [ 58.275137][ T6535] ? do_handle_open+0x2b9/0xf10 [ 58.275153][ T6535] __ia32_sys_futex_time32+0x2f4/0x470 [ 58.275169][ T6535] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 58.275183][ T6535] ? __might_fault+0xc5/0x140 [ 58.275198][ T6535] __do_fast_syscall_32+0x14b/0x8c0 [ 58.275213][ T6535] do_fast_syscall_32+0x32/0x70 [ 58.275225][ T6535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.275239][ T6535] RIP: 0023:0xf747efbc [ 58.275247][ T6535] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 58.275257][ T6535] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 58.275268][ T6535] RAX: ffffffffffffffda RBX: 00000000f74a4f8c RCX: 0000000000000081 [ 58.275275][ T6535] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 58.275282][ T6535] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 58.275288][ T6535] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.275294][ T6535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.275307][ T6535] [ 58.367167][ T6541] binder_alloc: 6540: binder_alloc_buf, no vma [ 58.367424][ T6541] binder: 6540:6541 ioctl c0306201 80000780 returned -22 [ 58.414757][ T6547] 0x000000000000-0x000000010000 : "" [ 58.423592][ T6547] ftl_cs: FTL header not found. [ 58.580185][ T6561] FAULT_INJECTION: forcing a failure. [ 58.580185][ T6561] name fail_futex, interval 1, probability 0, space 0, times 0 [ 58.580214][ T6561] CPU: 3 UID: 0 PID: 6561 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 58.580235][ T6561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.580246][ T6561] Call Trace: [ 58.580253][ T6561] [ 58.580261][ T6561] dump_stack_lvl+0x100/0x190 [ 58.580290][ T6561] should_fail_ex.cold+0x5/0xa [ 58.580317][ T6561] get_futex_key+0x1c9/0x13e0 [ 58.580341][ T6561] ? __pfx_get_futex_key+0x10/0x10 [ 58.580358][ T6561] ? futex_wake+0x4ea/0x5e0 [ 58.580389][ T6561] futex_wake+0xf4/0x5e0 [ 58.580411][ T6561] ? futex_wait+0x11e/0x370 [ 58.580438][ T6561] ? __pfx_futex_wake+0x10/0x10 [ 58.580466][ T6561] ? find_held_lock+0x2b/0x80 [ 58.580487][ T6561] ? __might_fault+0xc5/0x140 [ 58.580507][ T6561] ? __might_fault+0xc5/0x140 [ 58.580530][ T6561] do_futex+0x2b2/0x440 [ 58.580552][ T6561] ? __pfx_do_futex+0x10/0x10 [ 58.580573][ T6561] ? mntput+0x70/0xa0 [ 58.580598][ T6561] ? do_handle_open+0x2b9/0xf10 [ 58.580625][ T6561] __ia32_sys_futex_time32+0x2f4/0x470 [ 58.580653][ T6561] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 58.580678][ T6561] ? __might_fault+0xc5/0x140 [ 58.580706][ T6561] __do_fast_syscall_32+0x14b/0x8c0 [ 58.580732][ T6561] do_fast_syscall_32+0x32/0x70 [ 58.580753][ T6561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.580777][ T6561] RIP: 0023:0xf73fefbc [ 58.580793][ T6561] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 58.580810][ T6561] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 58.580828][ T6561] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 58.580839][ T6561] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 58.580850][ T6561] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 58.580861][ T6561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.580872][ T6561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.580897][ T6561] [ 58.621620][ T6565] binder_alloc: 6564: binder_alloc_buf, no vma [ 58.621908][ T6565] binder: 6564:6565 ioctl c0306201 80000780 returned -22 [ 58.647060][ T43] audit: type=1326 audit(1792746576.131:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.647508][ T43] audit: type=1326 audit(1792746576.131:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.655772][ T43] audit: type=1326 audit(1792746576.141:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.656318][ T43] audit: type=1326 audit(1792746576.141:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.656356][ T43] audit: type=1326 audit(1792746576.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.656391][ T43] audit: type=1326 audit(1792746576.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.656543][ T43] audit: type=1326 audit(1792746576.141:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.657052][ T43] audit: type=1326 audit(1792746576.141:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.657702][ T43] audit: type=1326 audit(1792746576.141:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 58.657740][ T43] audit: type=1326 audit(1792746576.141:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 59.299861][ T6634] FAULT_INJECTION: forcing a failure. [ 59.299861][ T6634] name fail_futex, interval 1, probability 0, space 0, times 0 [ 59.299897][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.0.264 Not tainted syzkaller #0 PREEMPT(full) [ 59.299917][ T6634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.299927][ T6634] Call Trace: [ 59.299934][ T6634] [ 59.299942][ T6634] dump_stack_lvl+0x100/0x190 [ 59.299972][ T6634] should_fail_ex.cold+0x5/0xa [ 59.299998][ T6634] get_futex_key+0x1c9/0x13e0 [ 59.300022][ T6634] ? __pfx_get_futex_key+0x10/0x10 [ 59.300039][ T6634] ? futex_wake+0x4ea/0x5e0 [ 59.300069][ T6634] futex_wake+0xf4/0x5e0 [ 59.300092][ T6634] ? futex_wait+0x11e/0x370 [ 59.300121][ T6634] ? __pfx_futex_wake+0x10/0x10 [ 59.300150][ T6634] ? find_held_lock+0x2b/0x80 [ 59.300169][ T6634] ? __might_fault+0xc5/0x140 [ 59.300189][ T6634] ? __might_fault+0xc5/0x140 [ 59.300213][ T6634] do_futex+0x2b2/0x440 [ 59.300235][ T6634] ? __pfx_do_futex+0x10/0x10 [ 59.300255][ T6634] ? mntput+0x70/0xa0 [ 59.300280][ T6634] ? do_handle_open+0x2b9/0xf10 [ 59.300306][ T6634] __ia32_sys_futex_time32+0x2f4/0x470 [ 59.300334][ T6634] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 59.300359][ T6634] ? __might_fault+0xc5/0x140 [ 59.300386][ T6634] __do_fast_syscall_32+0x14b/0x8c0 [ 59.300412][ T6634] do_fast_syscall_32+0x32/0x70 [ 59.300432][ T6634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.300456][ T6634] RIP: 0023:0xf73fefbc [ 59.300471][ T6634] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.300488][ T6634] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 59.300506][ T6634] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 59.300518][ T6634] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 59.300529][ T6634] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 59.300540][ T6634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.300551][ T6634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.300575][ T6634] [ 59.572600][ T6655] @0Ù: renamed from dummy0 (while UP) [ 59.589310][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.694601][ T6669] FAULT_INJECTION: forcing a failure. [ 59.694601][ T6669] name fail_futex, interval 1, probability 0, space 0, times 0 [ 59.694630][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 59.694653][ T6669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.694664][ T6669] Call Trace: [ 59.694670][ T6669] [ 59.694678][ T6669] dump_stack_lvl+0x100/0x190 [ 59.694707][ T6669] should_fail_ex.cold+0x5/0xa [ 59.694734][ T6669] get_futex_key+0x1c9/0x13e0 [ 59.694757][ T6669] ? __pfx_get_futex_key+0x10/0x10 [ 59.694773][ T6669] ? futex_wake+0x4ea/0x5e0 [ 59.694804][ T6669] futex_wake+0xf4/0x5e0 [ 59.694826][ T6669] ? futex_wait+0x11e/0x370 [ 59.694854][ T6669] ? __pfx_futex_wake+0x10/0x10 [ 59.694882][ T6669] ? find_held_lock+0x2b/0x80 [ 59.694902][ T6669] ? __might_fault+0xc5/0x140 [ 59.694922][ T6669] ? __might_fault+0xc5/0x140 [ 59.694944][ T6669] do_futex+0x2b2/0x440 [ 59.694965][ T6669] ? __pfx_do_futex+0x10/0x10 [ 59.694986][ T6669] ? mntput+0x70/0xa0 [ 59.695010][ T6669] ? do_handle_open+0x2b9/0xf10 [ 59.695035][ T6669] __ia32_sys_futex_time32+0x2f4/0x470 [ 59.695063][ T6669] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 59.695087][ T6669] ? __might_fault+0xc5/0x140 [ 59.695139][ T6669] __do_fast_syscall_32+0x14b/0x8c0 [ 59.695165][ T6669] do_fast_syscall_32+0x32/0x70 [ 59.695187][ T6669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.695212][ T6669] RIP: 0023:0xf747efbc [ 59.695228][ T6669] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.695245][ T6669] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 59.695263][ T6669] RAX: ffffffffffffffda RBX: 00000000f74a4f8c RCX: 0000000000000081 [ 59.695275][ T6669] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 59.695286][ T6669] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 59.695297][ T6669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.695307][ T6669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.695331][ T6669] [ 59.928424][ T6692] binder: BINDER_SET_CONTEXT_MGR already set [ 59.928436][ T6692] binder: 6691:6692 ioctl 4018620d 800004c0 returned -16 [ 59.928737][ T6692] binder: 6691:6692 ioctl c0306201 80000780 returned -22 [ 59.939223][ T6696] syz.3.286 uses obsolete (PF_INET,SOCK_PACKET) [ 59.966596][ T6700] FAULT_INJECTION: forcing a failure. [ 59.966596][ T6700] name fail_futex, interval 1, probability 0, space 0, times 0 [ 59.966625][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(full) [ 59.966645][ T6700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.966655][ T6700] Call Trace: [ 59.966662][ T6700] [ 59.966668][ T6700] dump_stack_lvl+0x100/0x190 [ 59.966692][ T6700] should_fail_ex.cold+0x5/0xa [ 59.966716][ T6700] get_futex_key+0x1c9/0x13e0 [ 59.966738][ T6700] ? __pfx_get_futex_key+0x10/0x10 [ 59.966755][ T6700] ? futex_wake+0x4ea/0x5e0 [ 59.966778][ T6700] futex_wake+0xf4/0x5e0 [ 59.966798][ T6700] ? futex_wait+0x11e/0x370 [ 59.966823][ T6700] ? __pfx_futex_wake+0x10/0x10 [ 59.966850][ T6700] ? find_held_lock+0x2b/0x80 [ 59.966866][ T6700] ? __might_fault+0xc5/0x140 [ 59.966880][ T6700] ? __might_fault+0xc5/0x140 [ 59.966908][ T6700] do_futex+0x2b2/0x440 [ 59.966928][ T6700] ? __pfx_do_futex+0x10/0x10 [ 59.966967][ T6700] ? mntput+0x70/0xa0 [ 59.966986][ T6700] ? do_handle_open+0x2b9/0xf10 [ 59.967009][ T6700] __ia32_sys_futex_time32+0x2f4/0x470 [ 59.967035][ T6700] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 59.967058][ T6700] ? __might_fault+0xc5/0x140 [ 59.967081][ T6700] __do_fast_syscall_32+0x14b/0x8c0 [ 59.967100][ T6700] do_fast_syscall_32+0x32/0x70 [ 59.967119][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.967141][ T6700] RIP: 0023:0xf73fefbc [ 59.967155][ T6700] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.967171][ T6700] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 59.967187][ T6700] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 59.967198][ T6700] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 59.967205][ T6700] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 59.967211][ T6700] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.967222][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.967245][ T6700] [ 60.143167][ T6716] binder: BINDER_SET_CONTEXT_MGR already set [ 60.143176][ T6716] binder: 6715:6716 ioctl 4018620d 800004c0 returned -16 [ 60.143634][ T6716] binder: 6715:6716 ioctl c0306201 80000780 returned -22 [ 60.226710][ T6722] FAULT_INJECTION: forcing a failure. [ 60.226710][ T6722] name fail_futex, interval 1, probability 0, space 0, times 0 [ 60.226739][ T6722] CPU: 2 UID: 0 PID: 6722 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 60.226758][ T6722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.226768][ T6722] Call Trace: [ 60.226774][ T6722] [ 60.226781][ T6722] dump_stack_lvl+0x100/0x190 [ 60.226806][ T6722] should_fail_ex.cold+0x5/0xa [ 60.226829][ T6722] get_futex_key+0x1c9/0x13e0 [ 60.226849][ T6722] ? __pfx_get_futex_key+0x10/0x10 [ 60.226864][ T6722] ? futex_wake+0x4ea/0x5e0 [ 60.226888][ T6722] futex_wake+0xf4/0x5e0 [ 60.226907][ T6722] ? futex_wait+0x11e/0x370 [ 60.226932][ T6722] ? __pfx_futex_wake+0x10/0x10 [ 60.226956][ T6722] ? find_held_lock+0x2b/0x80 [ 60.226981][ T6722] ? __might_fault+0xc5/0x140 [ 60.227001][ T6722] ? __might_fault+0xc5/0x140 [ 60.227021][ T6722] do_futex+0x2b2/0x440 [ 60.227041][ T6722] ? __pfx_do_futex+0x10/0x10 [ 60.227058][ T6722] ? mntput+0x70/0xa0 [ 60.227079][ T6722] ? do_handle_open+0x2b9/0xf10 [ 60.227102][ T6722] __ia32_sys_futex_time32+0x2f4/0x470 [ 60.227126][ T6722] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 60.227147][ T6722] ? __might_fault+0xc5/0x140 [ 60.227172][ T6722] __do_fast_syscall_32+0x14b/0x8c0 [ 60.227194][ T6722] do_fast_syscall_32+0x32/0x70 [ 60.227213][ T6722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.227232][ T6722] RIP: 0023:0xf747efbc [ 60.227247][ T6722] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 60.227261][ T6722] RSP: 002b:00000000f54965cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 60.227279][ T6722] RAX: ffffffffffffffda RBX: 00000000f74a4f8c RCX: 0000000000000081 [ 60.227290][ T6722] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 60.227300][ T6722] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 60.227310][ T6722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.227319][ T6722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.227341][ T6722] [ 60.385908][ T6738] binder: BINDER_SET_CONTEXT_MGR already set [ 60.385917][ T6738] binder: 6737:6738 ioctl 4018620d 800004c0 returned -16 [ 60.386181][ T6738] binder: 6737:6738 ioctl c0306201 80000780 returned -22 [ 60.628136][ T6763] FAULT_INJECTION: forcing a failure. [ 60.628136][ T6763] name fail_futex, interval 1, probability 0, space 0, times 0 [ 60.628155][ T6763] CPU: 2 UID: 0 PID: 6763 Comm: syz.1.312 Not tainted syzkaller #0 PREEMPT(full) [ 60.628168][ T6763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.628174][ T6763] Call Trace: [ 60.628178][ T6763] [ 60.628183][ T6763] dump_stack_lvl+0x100/0x190 [ 60.628201][ T6763] should_fail_ex.cold+0x5/0xa [ 60.628217][ T6763] get_futex_key+0x1c9/0x13e0 [ 60.628232][ T6763] ? __pfx_get_futex_key+0x10/0x10 [ 60.628247][ T6763] futex_wait_setup+0x91/0x540 [ 60.628266][ T6763] __futex_wait+0x19f/0x360 [ 60.628282][ T6763] ? __pfx___futex_wait+0x10/0x10 [ 60.628296][ T6763] ? futex_hash+0x311/0x400 [ 60.628308][ T6763] ? __pfx_futex_wake_mark+0x10/0x10 [ 60.628325][ T6763] ? __pfx_futex_hash+0x10/0x10 [ 60.628334][ T6763] ? __pfx_get_futex_key+0x10/0x10 [ 60.628348][ T6763] futex_wait+0xe6/0x370 [ 60.628363][ T6763] ? __pfx_futex_wait+0x10/0x10 [ 60.628381][ T6763] ? find_held_lock+0x2b/0x80 [ 60.628393][ T6763] ? __might_fault+0xc5/0x140 [ 60.628405][ T6763] ? __might_fault+0xc5/0x140 [ 60.628418][ T6763] do_futex+0x265/0x440 [ 60.628431][ T6763] ? __pfx_do_futex+0x10/0x10 [ 60.628443][ T6763] ? mntput+0x70/0xa0 [ 60.628458][ T6763] ? do_handle_open+0x2b9/0xf10 [ 60.628473][ T6763] __ia32_sys_futex_time32+0x2f4/0x470 [ 60.628489][ T6763] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 60.628503][ T6763] ? __might_fault+0xc5/0x140 [ 60.628519][ T6763] __do_fast_syscall_32+0x14b/0x8c0 [ 60.628533][ T6763] do_fast_syscall_32+0x32/0x70 [ 60.628545][ T6763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.628559][ T6763] RIP: 0023:0xf747efbc [ 60.628567][ T6763] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 60.628577][ T6763] RSP: 002b:00000000f54965bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 60.628588][ T6763] RAX: ffffffffffffffda RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 60.628595][ T6763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 60.628601][ T6763] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 60.628607][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.628613][ T6763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.628627][ T6763] [ 60.739587][ T6773] binder: 6772:6773 ioctl c0306201 80000780 returned -22 [ 60.890835][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.319'. [ 61.158784][ T6799] binder: 6798:6799 ioctl c0306201 80000780 returned -22 [ 61.243312][ T6806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.328'. [ 61.315582][ T6809] @0Ù: renamed from dummy0 (while UP) [ 61.572704][ T6823] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.335' sets config #4 [ 61.628095][ T6827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.338'. [ 61.651277][ T6829] binder: 6828:6829 ioctl c0306201 80000780 returned -22 [ 62.614815][ T6857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.349'. [ 62.641493][ T6859] binder: BINDER_SET_CONTEXT_MGR already set [ 62.641506][ T6859] binder: 6858:6859 ioctl 4018620d 800004c0 returned -16 [ 62.642010][ T6859] binder: 6858:6859 ioctl c0306201 80000780 returned -22 [ 62.876246][ T6895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.369'. [ 62.974866][ T6901] FAULT_INJECTION: forcing a failure. [ 62.974866][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 62.974886][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 62.974899][ T6901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.974908][ T6901] Call Trace: [ 62.974913][ T6901] [ 62.974918][ T6901] dump_stack_lvl+0x100/0x190 [ 62.974955][ T6901] should_fail_ex.cold+0x5/0xa [ 62.974973][ T6901] should_failslab+0xc2/0x120 [ 62.974993][ T6901] __kmalloc_cache_node_noprof+0x94/0x710 [ 62.975010][ T6901] ? kasan_save_stack+0x30/0x50 [ 62.975026][ T6901] ? kasan_save_track+0x14/0x30 [ 62.975040][ T6901] ? __kasan_kmalloc+0xaa/0xb0 [ 62.975055][ T6901] ? __get_vm_area_node+0x124/0x350 [ 62.975076][ T6901] __get_vm_area_node+0x124/0x350 [ 62.975095][ T6901] __vmalloc_node_range_noprof+0x268/0x1420 [ 62.975107][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.975128][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.975146][ T6901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.975159][ T6901] ? kasan_save_track+0x14/0x30 [ 62.975175][ T6901] ? __kasan_kmalloc+0xaa/0xb0 [ 62.975192][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.975206][ T6901] __vmalloc_node_noprof+0xad/0xf0 [ 62.975217][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.975231][ T6901] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 62.975244][ T6901] vidtv_mux_init+0x1f9/0xbf0 [ 62.975261][ T6901] vidtv_start_feed+0x34e/0x500 [ 62.975273][ T6901] ? __pfx_vidtv_start_feed+0x10/0x10 [ 62.975286][ T6901] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 62.975307][ T6901] dmx_section_feed_start_filtering+0x3a8/0x660 [ 62.975325][ T6901] dvb_dmxdev_filter_start+0x767/0xdd0 [ 62.975347][ T6901] dvb_demux_do_ioctl+0xe64/0x1200 [ 62.975368][ T6901] dvb_usercopy+0x167/0x340 [ 62.975383][ T6901] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 62.975406][ T6901] ? __pfx_dvb_usercopy+0x10/0x10 [ 62.975420][ T6901] ? __fget_files+0x34/0x3d0 [ 62.975442][ T6901] ? __fget_files+0x21f/0x3d0 [ 62.975462][ T6901] dvb_demux_ioctl+0x29/0x40 [ 62.975478][ T6901] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 62.975495][ T6901] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 62.975512][ T6901] __do_fast_syscall_32+0x14b/0x8c0 [ 62.975525][ T6901] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.975537][ T6901] do_fast_syscall_32+0x32/0x70 [ 62.975549][ T6901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.975563][ T6901] RIP: 0023:0xf73fefbc [ 62.975573][ T6901] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 62.975584][ T6901] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 62.975596][ T6901] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000403c6f2b [ 62.975603][ T6901] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.975609][ T6901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.975615][ T6901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.975621][ T6901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.975636][ T6901] [ 62.976180][ T6901] syz.0.362: vmalloc error: size 90164, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 62.976247][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 62.976260][ T6901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.976266][ T6901] Call Trace: [ 62.976271][ T6901] [ 62.976275][ T6901] dump_stack_lvl+0x100/0x190 [ 62.976292][ T6901] warn_alloc.cold+0x9e/0xb2 [ 62.976306][ T6901] ? __pfx_warn_alloc+0x10/0x10 [ 62.976319][ T6901] ? __kasan_kmalloc+0x8a/0xb0 [ 62.976337][ T6901] ? kasan_save_track+0x14/0x30 [ 62.976353][ T6901] ? __kasan_kmalloc+0xaa/0xb0 [ 62.976372][ T6901] ? __get_vm_area_node+0x22b/0x350 [ 62.976392][ T6901] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 62.976415][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.976434][ T6901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.976448][ T6901] ? kasan_save_track+0x14/0x30 [ 62.976464][ T6901] ? __kasan_kmalloc+0xaa/0xb0 [ 62.976481][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.976496][ T6901] __vmalloc_node_noprof+0xad/0xf0 [ 62.976507][ T6901] ? vidtv_mux_init+0x1f9/0xbf0 [ 62.976522][ T6901] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 62.976537][ T6901] vidtv_mux_init+0x1f9/0xbf0 [ 62.976561][ T6901] vidtv_start_feed+0x34e/0x500 [ 62.976578][ T6901] ? __pfx_vidtv_start_feed+0x10/0x10 [ 62.976597][ T6901] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 62.976627][ T6901] dmx_section_feed_start_filtering+0x3a8/0x660 [ 62.976654][ T6901] dvb_dmxdev_filter_start+0x767/0xdd0 [ 62.976688][ T6901] dvb_demux_do_ioctl+0xe64/0x1200 [ 62.976722][ T6901] dvb_usercopy+0x167/0x340 [ 62.976746][ T6901] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 62.976774][ T6901] ? __pfx_dvb_usercopy+0x10/0x10 [ 62.976797][ T6901] ? __fget_files+0x34/0x3d0 [ 62.976832][ T6901] ? __fget_files+0x21f/0x3d0 [ 62.976864][ T6901] dvb_demux_ioctl+0x29/0x40 [ 62.976891][ T6901] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 62.976914][ T6901] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 62.976941][ T6901] __do_fast_syscall_32+0x14b/0x8c0 [ 62.976960][ T6901] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.976981][ T6901] do_fast_syscall_32+0x32/0x70 [ 62.977003][ T6901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.977025][ T6901] RIP: 0023:0xf73fefbc [ 62.977041][ T6901] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 62.977056][ T6901] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 62.977073][ T6901] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000403c6f2b [ 62.977085][ T6901] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.977097][ T6901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.977108][ T6901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.977119][ T6901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.977145][ T6901] [ 62.977152][ T6901] Mem-Info: [ 62.977160][ T6901] active_anon:8785 inactive_anon:145 isolated_anon:0 [ 62.977160][ T6901] active_file:7 inactive_file:56818 isolated_file:0 [ 62.977160][ T6901] unevictable:1000 dirty:295 writeback:0 [ 62.977160][ T6901] slab_reclaimable:10083 slab_unreclaimable:54210 [ 62.977160][ T6901] mapped:24180 shmem:4394 pagetables:1108 [ 62.977160][ T6901] sec_pagetables:302 bounce:0 [ 62.977160][ T6901] kernel_misc_reclaimable:0 [ 62.977160][ T6901] free:24960 free_pcp:14281 free_cma:0 [ 62.977205][ T6901] Node 0 active_anon:48kB inactive_anon:12kB active_file:28kB inactive_file:28kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8448kB pagetables:1532kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 62.977271][ T6901] Node 1 active_anon:35092kB inactive_anon:568kB active_file:0kB inactive_file:227244kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96696kB dirty:1168kB writeback:0kB shmem:15576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5088kB pagetables:2900kB sec_pagetables:56kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 62.977319][ T6901] Node 0 DMA free:2756kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:360kB local_pcp:140kB free_cma:0kB [ 62.977363][ T6901] lowmem_reserve[]: 0 257 257 257 257 [ 62.977394][ T6901] Node 0 DMA32 free:13028kB boost:2048kB min:13608kB low:16496kB high:19384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48kB inactive_anon:12kB active_file:24kB inactive_file:12kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:263564kB mlocked:0kB bounce:0kB free_pcp:6984kB local_pcp:1476kB free_cma:0kB [ 62.977450][ T6901] lowmem_reserve[]: 0 0 0 0 0 [ 62.977481][ T6901] Node 1 DMA32 free:84056kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35092kB inactive_anon:568kB active_file:0kB inactive_file:227244kB unevictable:2000kB writepending:1168kB zspages:1672kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:49780kB local_pcp:11420kB free_cma:0kB [ 62.977529][ T6901] lowmem_reserve[]: 0 0 0 0 0 [ 62.977557][ T6901] Node 0 DMA: 41*4kB (UE) 8*8kB (UE) 6*16kB (UE) 30*32kB (UE) 11*64kB (UE) 4*128kB (UE) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2756kB [ 62.977905][ T6901] Node 0 DMA32: 13*4kB (UME) 42*8kB (ME) 62*16kB (UME) 56*32kB (ME) 42*64kB (UME) 14*128kB (ME) 13*256kB (UME) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 13028kB [ 62.978035][ T6901] Node 1 DMA32: 126*4kB (U) 268*8kB (UME) 109*16kB (UE) 2*32kB (UM) 53*64kB (UME) 11*128kB (ME) 16*256kB (UME) 2*512kB (UM) 8*1024kB (UME) 4*2048kB (M) 13*4096kB (UM) = 84008kB [ 62.978171][ T6901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.978186][ T6901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.978200][ T6901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.978212][ T6901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.978224][ T6901] 61467 total pagecache pages [ 62.978230][ T6901] 252 pages in swap cache [ 62.978235][ T6901] Free swap = 122224kB [ 62.978241][ T6901] Total swap = 124996kB [ 62.978247][ T6901] 524155 pages RAM [ 62.978254][ T6901] 0 pages HighMem/MovableOnly [ 62.978260][ T6901] 217372 pages reserved [ 62.978266][ T6901] 0 pages cma reserved [ 63.427557][ T6934] binder: BINDER_SET_CONTEXT_MGR already set [ 63.427571][ T6934] binder: 6933:6934 ioctl 4018620d 800004c0 returned -16 [ 63.428157][ T6934] binder: 6933:6934 ioctl c0306201 80000780 returned -22 [ 63.498467][ T6938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.375'. [ 63.760522][ T6961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.760537][ T6961] block device autoloading is deprecated and will be removed. [ 64.051713][ T6973] device-mapper: table: 248:6: ram2 too small for target: start=0, len=15360, dev_size=8192 [ 64.051730][ T6973] device-mapper: core: Cannot calculate initial queue limits [ 64.051734][ T6973] device-mapper: ioctl: unable to set up device queue for new table. [ 64.241903][ T6990] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.429690][ T6996] md: array md2 already has disks! [ 64.447981][ T29] kernel read not supported for file /tomoyo/domain_policy (pid: 29 comm: kworker/1:0) [ 64.468687][ T6996] md: could not open device unknown-block(1,4). [ 64.468753][ T6996] md: error, md_import_device() returned -16 [ 64.493547][ T6996] ------------[ cut here ]------------ [ 64.493556][ T6996] 1 [ 64.493582][ T6996] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2114/0x32e0, CPU#2: syz.2.394/6996 [ 64.500587][ T6996] Modules linked in: [ 64.502400][ T6996] CPU: 2 UID: 0 PID: 6996 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 64.506233][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.510446][ T6996] RIP: 0010:__alloc_frozen_pages_noprof+0x2114/0x32e0 [ 64.513291][ T6996] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 ac f9 ff ff e9 9d f5 ff ff 80 3d b4 c5 de 0f 00 0f 85 bc e2 ff ff c6 05 a7 c5 de 0f 01 90 <0f> 0b 90 e9 ac e2 ff ff 31 c0 e9 7c eb ff ff 48 8b 3c 24 48 c7 c6 [ 64.521410][ T6996] RSP: 0000:ffffc90003217498 EFLAGS: 00010246 [ 64.523688][ T6996] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.526475][ T6996] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000000000040dc0 [ 64.529816][ T6996] RBP: 0000000000000034 R08: 0000000000000000 R09: 0000000000000009 [ 64.533163][ T6996] R10: 0000000000000034 R11: 0000000000000000 R12: 0000000000040dc0 [ 64.536455][ T6996] R13: 1ffff92000642eef R14: 0000000000000000 R15: 1ffff92000642ead [ 64.539812][ T6996] FS: 0000000000000000(0000) GS:ffff8880954c4000(0063) knlGS:00000000f5416b40 [ 64.543538][ T6996] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 64.546296][ T6996] CR2: 00000000f7426288 CR3: 0000000052e8f000 CR4: 0000000000352ef0 [ 64.549761][ T6996] Call Trace: [ 64.551192][ T6996] [ 64.552218][ T6996] ? prepare_alloc_pages+0x1f0/0x5b0 [ 64.554360][ T6996] ? rcu_is_watching+0x13/0xc0 [ 64.556395][ T6996] ? __alloc_frozen_pages_noprof+0x562/0x32e0 [ 64.559071][ T6996] ? __free_frozen_pages+0x751/0x10f0 [ 64.561292][ T6996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.563416][ T6996] ? stack_depot_save_flags+0x456/0x9f0 [ 64.565138][ T6996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.567107][ T6996] ? kasan_save_stack+0x30/0x50 [ 64.568691][ T6996] ? kasan_save_track+0x14/0x30 [ 64.570211][ T6996] ? __kasan_kmalloc+0xaa/0xb0 [ 64.571708][ T6996] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.573457][ T6996] ? setup_conf+0x2bf/0x2a20 [ 64.574924][ T6996] ? raid5_run+0x1260/0x1670 [ 64.576377][ T6996] ? md_run+0xc2f/0x2510 [ 64.577796][ T6996] ? do_fast_syscall_32+0x32/0x70 [ 64.579359][ T6996] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.581349][ T6996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.583192][ T6996] ? policy_nodemask+0xed/0x4f0 [ 64.584710][ T6996] alloc_pages_mpol+0x201/0x550 [ 64.586241][ T6996] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 64.587968][ T6996] ? lock_acquire+0x1d1/0x380 [ 64.589438][ T6996] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 64.591124][ T6996] ___kmalloc_large_node+0xe8/0x130 [ 64.592745][ T6996] __kmalloc_large_node_noprof+0x1c/0x70 [ 64.594540][ T6996] __kmalloc_noprof+0x5a3/0x840 [ 64.596067][ T6996] ? setup_conf+0xc3f/0x2a20 [ 64.597543][ T6996] setup_conf+0xc3f/0x2a20 [ 64.599312][ T6996] ? __pfx_setup_conf+0x10/0x10 [ 64.600851][ T6996] ? __pfx_xa_find_after+0x10/0x10 [ 64.602456][ T6996] ? lock_acquire+0x1d1/0x380 [ 64.603959][ T6996] ? get_pers+0x222/0x2e0 [ 64.605311][ T6996] ? get_pers+0x222/0x2e0 [ 64.606704][ T6996] raid5_run+0x1260/0x1670 [ 64.608302][ T6996] ? _raw_spin_unlock+0x28/0x50 [ 64.609840][ T6996] ? __pfx_get_pers+0x10/0x10 [ 64.611346][ T6996] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 64.613172][ T6996] md_run+0xc2f/0x2510 [ 64.614469][ T6996] ? __pfx_md_run+0x10/0x10 [ 64.615891][ T6996] do_md_run+0x36/0x660 [ 64.617193][ T6996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.619142][ T6996] md_ioctl+0x27e6/0x36c0 [ 64.620501][ T6996] ? __pfx_md_ioctl+0x10/0x10 [ 64.621975][ T6996] ? do_vfs_ioctl+0x226/0x13e0 [ 64.623501][ T6996] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.625075][ T6996] ? __fget_files+0x34/0x3d0 [ 64.626528][ T6996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.628445][ T6996] ? __pfx_md_compat_ioctl+0x10/0x10 [ 64.630085][ T6996] compat_blkdev_ioctl+0x682/0x7b0 [ 64.631678][ T6996] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 64.633430][ T6996] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 64.635178][ T6996] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 64.636881][ T6996] __do_fast_syscall_32+0x14b/0x8c0 [ 64.638584][ T6996] do_fast_syscall_32+0x32/0x70 [ 64.640098][ T6996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.642056][ T6996] RIP: 0023:0xf7f66fbc [ 64.643330][ T6996] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.649283][ T6996] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 64.651854][ T6996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c0930 [ 64.654308][ T6996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.656734][ T6996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.659257][ T6996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.661683][ T6996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.664140][ T6996] [ 64.665117][ T6996] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.667375][ T6996] CPU: 2 UID: 0 PID: 6996 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 64.670198][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.673289][ T6996] Call Trace: [ 64.674365][ T6996] [ 64.675295][ T6996] dump_stack_lvl+0x100/0x190 [ 64.676767][ T6996] vpanic+0x553/0x970 [ 64.678054][ T6996] ? __pfx_vpanic+0x10/0x10 [ 64.679474][ T6996] panic+0xd1/0xe0 [ 64.680646][ T6996] ? __pfx_panic+0x10/0x10 [ 64.682050][ T6996] check_panic_on_warn.cold+0x19/0x34 [ 64.683732][ T6996] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 64.685633][ T6996] __warn.cold+0x191/0x318 [ 64.687051][ T6996] __report_bug+0x30f/0x440 [ 64.688465][ T6996] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 64.690388][ T6996] ? __pfx___report_bug+0x10/0x10 [ 64.691950][ T6996] ? __page_table_check_zero+0x27f/0x410 [ 64.693709][ T6996] ? __page_table_check_zero+0x284/0x410 [ 64.695462][ T6996] ? prep_compound_page+0x280/0x570 [ 64.697075][ T6996] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 64.699019][ T6996] report_bug+0xb3/0x220 [ 64.700343][ T6996] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 64.702255][ T6996] handle_bug+0x16a/0x2a0 [ 64.703628][ T6996] exc_invalid_op+0x17/0x50 [ 64.705049][ T6996] asm_exc_invalid_op+0x1a/0x20 [ 64.706571][ T6996] RIP: 0010:__alloc_frozen_pages_noprof+0x2114/0x32e0 [ 64.708644][ T6996] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 ac f9 ff ff e9 9d f5 ff ff 80 3d b4 c5 de 0f 00 0f 85 bc e2 ff ff c6 05 a7 c5 de 0f 01 90 <0f> 0b 90 e9 ac e2 ff ff 31 c0 e9 7c eb ff ff 48 8b 3c 24 48 c7 c6 [ 64.714576][ T6996] RSP: 0000:ffffc90003217498 EFLAGS: 00010246 [ 64.716454][ T6996] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.718898][ T6996] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000000000040dc0 [ 64.721318][ T6996] RBP: 0000000000000034 R08: 0000000000000000 R09: 0000000000000009 [ 64.723755][ T6996] R10: 0000000000000034 R11: 0000000000000000 R12: 0000000000040dc0 [ 64.726194][ T6996] R13: 1ffff92000642eef R14: 0000000000000000 R15: 1ffff92000642ead [ 64.728624][ T6996] ? __pfx_get_page_from_freelist+0x10/0x10 [ 64.730469][ T6996] ? prepare_alloc_pages+0x1f0/0x5b0 [ 64.732109][ T6996] ? rcu_is_watching+0x13/0xc0 [ 64.733603][ T6996] ? __alloc_frozen_pages_noprof+0x562/0x32e0 [ 64.735503][ T6996] ? __free_frozen_pages+0x751/0x10f0 [ 64.737161][ T6996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.739129][ T6996] ? stack_depot_save_flags+0x456/0x9f0 [ 64.740842][ T6996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.742808][ T6996] ? kasan_save_stack+0x30/0x50 [ 64.744370][ T6996] ? kasan_save_track+0x14/0x30 [ 64.745898][ T6996] ? __kasan_kmalloc+0xaa/0xb0 [ 64.747391][ T6996] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.749120][ T6996] ? setup_conf+0x2bf/0x2a20 [ 64.750595][ T6996] ? raid5_run+0x1260/0x1670 [ 64.752039][ T6996] ? md_run+0xc2f/0x2510 [ 64.753382][ T6996] ? do_fast_syscall_32+0x32/0x70 [ 64.754948][ T6996] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.756946][ T6996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.758828][ T6996] ? policy_nodemask+0xed/0x4f0 [ 64.760347][ T6996] alloc_pages_mpol+0x201/0x550 [ 64.761879][ T6996] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 64.763552][ T6996] ? lock_acquire+0x1d1/0x380 [ 64.765022][ T6996] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 64.766695][ T6996] ___kmalloc_large_node+0xe8/0x130 [ 64.768307][ T6996] __kmalloc_large_node_noprof+0x1c/0x70 [ 64.770048][ T6996] __kmalloc_noprof+0x5a3/0x840 [ 64.771572][ T6996] ? setup_conf+0xc3f/0x2a20 [ 64.773011][ T6996] setup_conf+0xc3f/0x2a20 [ 64.774444][ T6996] ? __pfx_setup_conf+0x10/0x10 [ 64.775954][ T6996] ? __pfx_xa_find_after+0x10/0x10 [ 64.777556][ T6996] ? lock_acquire+0x1d1/0x380 [ 64.779030][ T6996] ? get_pers+0x222/0x2e0 [ 64.780401][ T6996] ? get_pers+0x222/0x2e0 [ 64.781756][ T6996] raid5_run+0x1260/0x1670 [ 64.783172][ T6996] ? _raw_spin_unlock+0x28/0x50 [ 64.784693][ T6996] ? __pfx_get_pers+0x10/0x10 [ 64.786186][ T6996] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 64.788000][ T6996] md_run+0xc2f/0x2510 [ 64.789284][ T6996] ? __pfx_md_run+0x10/0x10 [ 64.790716][ T6996] do_md_run+0x36/0x660 [ 64.792014][ T6996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.793878][ T6996] md_ioctl+0x27e6/0x36c0 [ 64.795227][ T6996] ? __pfx_md_ioctl+0x10/0x10 [ 64.796699][ T6996] ? do_vfs_ioctl+0x226/0x13e0 [ 64.798209][ T6996] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.799774][ T6996] ? __fget_files+0x34/0x3d0 [ 64.801215][ T6996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.803053][ T6996] ? __pfx_md_compat_ioctl+0x10/0x10 [ 64.804703][ T6996] compat_blkdev_ioctl+0x682/0x7b0 [ 64.806308][ T6996] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 64.808045][ T6996] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 64.809783][ T6996] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 64.811488][ T6996] __do_fast_syscall_32+0x14b/0x8c0 [ 64.813096][ T6996] do_fast_syscall_32+0x32/0x70 [ 64.814617][ T6996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.816569][ T6996] RIP: 0023:0xf7f66fbc [ 64.817852][ T6996] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.823730][ T6996] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 64.826291][ T6996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c0930 [ 64.828714][ T6996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.831155][ T6996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.833610][ T6996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.836047][ T6996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.838505][ T6996] [ 64.840065][ T6996] Kernel Offset: disabled [ 64.841410][ T6996] Rebooting in 86400 seconds..