last executing test programs: 10.358752893s ago: executing program 2 (id=456): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 9.287275843s ago: executing program 2 (id=458): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002000)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251b00000008000100", @ANYRES32=r3, @ANYBLOB="0800150001000003050019"], 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 7.970606117s ago: executing program 2 (id=469): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000280)='\x00') pread64(r3, &(0x7f0000000780)=""/4096, 0x1000, 0xfffffff7) 7.245642431s ago: executing program 3 (id=465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x8}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r6) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r7], 0x2c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x10) close(r5) 7.034996953s ago: executing program 1 (id=466): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 5.129698757s ago: executing program 3 (id=468): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./trace\x00', 0x0, 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./trace/set_event\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000bc0)=""/79, 0x4f, 0x1b) 4.950833415s ago: executing program 1 (id=470): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="79de591249bd8e5c"], 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) 4.085478254s ago: executing program 2 (id=471): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$md_new_array(r1, &(0x7f0000000180)={'md', @num=0x0}, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000003b00)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000003b40)) timer_settime(0x0, 0x0, &(0x7f0000003b80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000003bc0)='ns/uts\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x2, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x45facfd65bcc5987) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000440)=@str='raid1', 0x5) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000480)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r4, 0x0, 0x0) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='serialize_policy\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000580)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r5, &(0x7f00000005c0)=@dev={'1:', 0x1}, 0x16) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000003a00)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000003a40)=@str='0', 0x1) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'size\x00'}}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000003ac0)=@str='active', 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000080)={0x980900, 0x3, @value=0x2}) 4.058221336s ago: executing program 0 (id=472): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x140, 0x82) io_uring_setup(0x136a, &(0x7f00000003c0)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) io_setup(0x93, &(0x7f0000000440)=0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) io_submit(r1, 0x3fffffed, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000580)="ca04", 0x2, 0x10000, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 3.130179811s ago: executing program 3 (id=473): write$md_sysfs(0xffffffffffffffff, &(0x7f00000001c0)=@num=0x37, 0x9) 3.005068574s ago: executing program 1 (id=474): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x58000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.925170622s ago: executing program 0 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2.745615601s ago: executing program 3 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fddbdf250500000014000380040004000400050008000200000000000c0001800800", @ANYRES32, @ANYBLOB="7e5806c1179a26ded0ccb73bece4552ac585418461dbc8ad4c070321f3c55344006091fa1723a086ce4074c6afcb907921d92a0f06dd05c2955979c2a3390e1612ff2a27e04a8935c19b874905d7d91263abcdb5ed779f4257ab504bb15b719e0a3bafab52378f2d6caaa48081081b0be12005"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="18100000", @ANYRES16, @ANYBLOB="000426bd7000fbdbdf250a000000041003003bf973702ab2ef6d345f6438d13e6badf67add2dbbef5e19f4c2d5378d485b4af1d2d382c410aae9c14dd680d1d9ba48c9bd82de58440e57a83d131810c7e37968b0b7f8d78293f1a26090cd88ca0c91e8683e4dee3c140c29711aa64e0cf53225b1135585e9fbf71a2455da5847e51d94c6fac16c8029f8c36d4a1e6454523cb93d0846b26491eb43701979b6228b427c3e72f8e695b5acf96519626d34e44a10bc4ce77cca7a93c788faf9866d73fa9b20f491741945d0e44d6c60b58cdc8fca890034d4ca86766f84533cdf84805a2b21938a959b74268df0b411c56a814096dd8fea92703d63b488c5b09b764d55072d8bf707f5bceb44951d74f4e10dd943148628794cfe1095c50d2bd7b3811d4f5ba8bb4d8203b0c4a8d68f12e23fcc2c05910fb37832bc7662af77983c7d8ebfb6d4c6c95a6fd792582efe1c18c6973960b42c574aff99637a5390f845219962bd994ef7daf65e8437caf9cf129802ede2db5a3502e11177d1382afd08a928c19446f2cecfc2c3b2d4f28f051b96d67c4917057a2903635134e6edc73704168ecbb439a843a653a1a7432035f21c63ed433b8aa0bf46a235a55db9099056974c40664584b970d6b054fd2d47460fa99efec85bbd7081e5e38a685394d161ef1515ab787a62de9eb5ca6c9035992faa694ff650038f7f1ef9c1ca7b78b2ae8e10271efeae3a3917bbc5bffb01a0e1202db7c5e1134d3cd076b037ef7220873e9448f53b350990494dca16d2c1e0daecbef74153fc38b1e9c686e34f0cedf1317c6a22a119472c81465ceea59a14d82b90691cf01a2a9ea4fdb1538aae8657f03019b965e049e004106af899ec1d005d93d52ec401e7472bbde86f9b383bbf8f7dcb10964a931bd6d44c08c67358529afb95170a0279b883118855c369bf646093fe27704a8980aca1644df6b4aab16cc746c38cbb3c3449b43174cceb428304cb2c912ac6b5cb70144f4cabc5fec27c486096ec2e80b08afb062f56742c63a37098bf34dbe66844522da8cda8e70d1b2d1e5c5edd0b4d210ece4322b3c1dbabe9dc47dce6b83b7984122337af5dfcbf4a5c0e9bc928cd00a0b5be4668749a7d4021493afb591d201de311ed7b4eaf52c7947dca06bc7f00cea007f657413b050e5182d7ef705f3ed97a97a8ba8e2d880e0c54b41256abe1090c0c8a1ce76adf581c6023e5d716e2391b25486cbc609a04b64133b2df5a76c91e96d04c6e3b50b93b917c4605970cd39478817e7708eb940fdac40f7d50923884c4a103f0e71251d05be06472504bdb3f8771dc30569dc1482b7fba4922e326f4f4463cd643132a6194ba66b29ab9807e2a44de834471e7a787c62ca8c643414c7949b46e2784118e5265bbf144635eed9634710b03e0ed879e3a5ddf49ba79391a7004acfe9ce6e25705a1845fefc852ef7914cf24c9ef2466e79b2d5b711fe1cc2dc705f449ffb1a2935539ff7e559de3068c781e387b097d06aa7c3e00ab8636a5bedc3ec568730df72ce45a35ca3a303c8f86eca55504a286666f8f58ffa3f6105b681c3eaf2d0a03ef4c6e66a6c8070e2bfd0897971efd747121a78d93710a9768f3faf4e3faf2773c4228a741e0f157b1275af948fb8f8db4f7ee5e92b7e3846e70a88455b6b0f30c3cfe97ee27295eb5db1c777b6dc0760b03174efc2fca36f8332087b77bad0bc89a4d324e1e8ee1633d34d7e9582596a1aede57a2ef1a627f9d12c13cf73ed15a477e9b8f4912eda106092219289955de747455ecb3b000f4d56c96df14f7e8c3de8bea1ec72fcf1ab518c6e2a96e1341d6cd13213d1edabb98d3eff5804e2c9c679d6fc06b8d922b89823ca9969ed11305c4fa8484f35833f01c8ed13b3d58ec13c1912d5453de8dccf76be3c4d1eb037a0668030e5ce4fd6b32d5819ce1883fa2e8136b23dba56d5828679abec9d32cbd4d0f1b650e7082c57b48b9e059f9cd8e42c470a45e85e61846c28960c4f933bc43f74848d64899ec2d694bcad27ffd1435c7d9295f9d139cf8b791aa6bc34ab71d07a3fbb245461fba7593db91a64d22e55069217836f258cd253df8ae60ea23111651e4eedb4f9f8eee127ad46b9b39bbb1eb1a7198da8789a7d017bc4d4eabd9b61f54eb16dd88185af37509fec82fbf509574258c304b722ddf0a93b132e5c2b1df130d6ca65dc943277764d5c5dc8f4d924c81fc5e0009bb967d467ad563aadfbc3ab44101520d93cafcfb59c2576922e81ab9656336d0091570769b3836cd3bca48c4588a8c69dd4d3bc9726f6269cebaf38771b3223522fae7847db59a1307f43850a2ab61a127193d521e0d2b3ba2adff6c9be8a0fef75136e604750c8fed4aa74a1d6224deae359658f1dd8ef10e31798566cf8591826eed5138ee8c6c356bcf3abb0630daa8e49cad5a0fb91dc4d0aa09dd434eb75193914f02c8f4af78c174b9e029ed4db01f306feaa213cb52f7423c9f02aa98d6e9a20789628a974d69cf9fdf08820cdf5d810bc8894c42c8de49b2a0f1fa0093c7b4eb1501df7ebb805fab1ec051d229a88c155c4c801810d06df471aadb34b29b4c0e0684a334313dacaf009a71c146b3d54ea1c253ff3a29cf2756470a7527bc6451dacd37ad56d6981aae3ad0cdb01d0d583a7ac321ec02fa18de0ea3524c87bc4e0b493c768a0cd9ce420987112ba2491321e5530ad47282ca7b2c2d9d4abdb70e6524d126c027a057a08b042ed0338f8fd317379dbd419e85d7e95990c27206815c6be3f6f51c8e5d83d1025b121f4f7690dad7a0d8594774a7132e987567ad70d9175cc93929de1a8ba2be977032ed8b1d900ab9201c20f9a0f970afd611e429a3a7e60a139bcd8ad58c3013e4a1bb22059d98527077c96cb27c01399d8ac944567fa754e6c4908ff8c0ac6f946f585a3837e730e8ddf8959d778d76102256ed007f5d976af5bf48431138c9472c70b8a93f3f55204cae4489882418925d6f229c4c9c0a1f8e14e505df6064689cc662190a8d8743cafc254bf9adfdacbab1be8b203c7500ff1067bf3cd7e679c3eb9214e7d88a08d68dd62c421342a8a8e9c4e8859032c60e26c4cbce3ac16846b811d0bd8df40edae006bbd65c0e4440a92ac709e572670606f610645337ddfd3c79f0bfd5b2b1e9a3ff10a5072456faa3cc2c2aedde9510aae91f08b455b1b2b9cc7d0553ff76389679032ca1b6e8a619f1002920f804c7673d5bc4d71ee46d6ad6073199f43b8c2033595b1eb281d2f2f310920acebd3fb18472e256a91e393824540f9d6b2490cd6dd24777fd0325bf5a232de75ff15c97d9bf8bc43e964192418f144ab08eac325f4beeaa0fb2ea34fa1b34d78dbeefeb8e4d0b940476146937ace98f64e86841b4d6ffdff42c1c87db64f9884907a2751be59cccd7a539d00d0b0b384d456ef482119a718982c6d1f117b81b0ac8b5858e709d0459f57df68b863c84ca5b95367d00d643617dcc9893df076be4cba7f58f408ba30c2b5199e3a48b2ad175611fe404b4b69fbe9a4c47c22d355fbe8ab7e60898b732c79f0dc5b27f35c15117db26164da6ff1369c01ef04f2b132617903604085b71e97835ec0838c6dd3aa24c3e27b5549a91ebefc642eb288e11caeaa4055bb731d2d14883cee732e32804b45897a17acc10cca9123bb1d8d69502ab591091dee730f0b0ddeb2de6077c125637d22f3a9b4f7b6a35e8761e5d4c5b3707ec7b028eb16d0c3a98b4864804875b9e0a4e45318e3f59bfb7533d752879f83975826e73638577bf134b297126ff3813937313ddf9fc26d18c69a2a34205b738934a63b8b6f37e7b31570d3b5676fa0e1695b597b765a093d72247a459707a3b5c6c3babfd432fb29d6c8faeaec8cd4189ed8850c7dd102403e1002bd185c9de20dc9b3062aa2c612e9bb83e354c60e3291cdb60dbb063f64a42b2fbd078dba7f4500e0f46cc7a91dc7e433aee071d4b0c61169fb192a2fdf6eeaa2ee340995da37bec3297ce65e085179eda78b4c9fb4a0c800d2b769e74aebbc6c7f4d2eed3614cf72c7ec99827178fb04f0f2b7cae85b147c78e49e1b1060b26eacee350b2fcaa4e1f08ba517267826a5aea6c8e91630a2e8360a3611dcca3824488b60cce8161f7636bc763adcf54bf6106f6e7ca81ed80719923e09aedfaab1bcebed9f89e58b2aa1e8b3eb6e5d719304f756403263d5a16a3ebed9aaf09e4cc2a4205471aaa992bab219c4c7c67872f0c9a25513a3b6067c8851e93ab26b5965124e3b2de55c42e8998ea1b303c2e469ac507da7991661ef6349b441949a580f3bbdbd1802d75d1ddd23bea33cf0c0e9106f5e77d37b28bdcdf5f599847620fe1e4965dd6b06d42f14a76478820c0209002249e12591aabcce415270dba765d652f9bd293013f47ac393b50f4e37d17dfcff80420084c0a953fe8897643a2d6669f6181b6e022313fc435e9eacde9608d1b2278675044e00bf780945d8f107b24d41193ed1a3c0055a9262f05ff87ab483c0fa46ffb2d083015d99f5ea72b5464b24ff75c5fd4b0614a00cbc8d301272d24f5ac27d9f3012589c1262c0434658b877c507f28cb0b84b025864e3552e95486e010955fdc286a04e054a0baddb0a904d49ad4a9afc4ed404532ded597dc9689377626f133bd2baf697784d2df714b52fd9b25dd4a1d1175b0cd9b2785fcf7edcaf16635c42d367e65130d7a73667e0c415154b8e3b0cf0b91fdc628f611d7af251f4b5f01351f016f7a29894c91a559e1457aad897d55f94544c3c5f9aca9c612c4ee6e611bf70f308692a7df4d8fbb77ed552f1893d710d0c508ba7e91de83ea6ee2cd80d4c4e2c12bd894fccda02679c5f35483dcae70d705abfb698930eecf5ba06d286777f31ed4ebcbc77b7d371071f06728acd2c83cf12e0ef63a7fe061d5a9a42663f942fc07d7efbed00b7dd6f15676f8fcbc77fb28a8975f1fd21a18e05aaeac2cafe5cdf229d179da9f605461718dc248efceb2afa8601be3a690cf5587541b48e7cddb322c89f0659b6f82d6ced89b514969664f4e9e032fe6af5624d87ff3ed08ff1060d67ff3af3efc34e49c0061704ed3cbe27a94aa8000a35d7c8cb420ac35ee9f3d237bbe4735ba6103750f8e8acd091d9fb657d0e757ad345ad6e0cb80b2f13d5e8d6846ec68849793f264403fed33fa63559fb5705484a2f42507baf4723669690d6ac9607575e0c11f500f711e3a294a4c98b58ccfc5c58b1f0d004fc1c398e5c02258ceb8ccc0635ce0b4d4a1b24312b868e3a64b763c31793d71beebbb52b334d1e55dd9e16218b6ccd565272f2ce6d4c14f4beb2ef63e429b5604f33c0b59b8b91384f3e3ae06fb97af01d5d614d2f1b07cc217af05c45d9f96f35dc86d1057d3b48095f6882cb55c057d93e899a4062eb11e8a911ca9b0c2dac1db0b90925483048eb66300d54ca48b779e2e865e95286948351f0cca437928cc742f276c9c57455385d43e31263b790dec7b207d13bb5855d16d3188f5a8cdb93a3680a17196c91b3a54495a3721fdddf562bed98512653dd93276fec9b69276bd534707ddc905347c96d6f6ad08b7890004342f91037ba00f9a952b2120852e728eb553d4992a5ae6b10a3f39a98b554906075babbacf0294cb90aed2befbace4d139d6b997b67361c263926091d048cebc805a6eb362c4e0c44f45e536a09a48e95a047bd08ef07265f4e993c5780474cb42b75522434472c33f4e7323ff26f5f3aa009eb92cfafa2820f52b864b68bb9ab99c1f4e0e3361f7cc31d1dbbffebf"], 0x1018}}, 0x4080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter\x00') setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.502641375s ago: executing program 1 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x8}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r6) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r7], 0x2c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x10) close(r5) 2.497143816s ago: executing program 0 (id=478): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) socket$kcm(0x2, 0x7, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2.368411619s ago: executing program 2 (id=479): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000480)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) read$dsp(r5, &(0x7f0000000880)=""/4086, 0xff6) write$dsp(r4, &(0x7f0000001880)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffff, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888) 1.494610918s ago: executing program 3 (id=480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4007}, 0x24004080) 522.706598ms ago: executing program 0 (id=481): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./trace\x00', &(0x7f0000000b40)='tracefs\x00', 0x80, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r0, &(0x7f0000000bc0)=""/79, 0x4f, 0x1b) 241.616606ms ago: executing program 0 (id=482): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="0800150001000003050019"], 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 241.450586ms ago: executing program 3 (id=483): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x140, 0x82) io_uring_setup(0x136a, &(0x7f00000003c0)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) io_setup(0x93, &(0x7f0000000440)=0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) io_submit(r1, 0x3fffffed, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000580)="ca04", 0x2, 0x10000, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 176.842463ms ago: executing program 1 (id=484): write$md_sysfs(0xffffffffffffffff, &(0x7f00000001c0)=@num=0x37, 0x9) 106.09682ms ago: executing program 2 (id=485): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x58000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 51.852746ms ago: executing program 1 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 0s ago: executing program 0 (id=487): r0 = gettid() timer_create(0x0, &(0x7f0000003b00)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000003b40)) timer_settime(0x0, 0x0, &(0x7f0000003b80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000480)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000580)=@str='4', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 73.611380][ T5778] cgroup: Unknown subsys name 'net' [ 73.748277][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.489197][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.098038][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.107143][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.115004][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.131431][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.139233][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.146723][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.201483][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.209746][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.215385][ T5790] (null): rxe_set_mtu: Set mtu to 1024 [ 77.217695][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.223579][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.237749][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.245801][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.254282][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.264156][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.272443][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.274038][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.350623][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.370323][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.383846][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.398385][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.407192][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.415442][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.415953][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.423463][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.430554][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.437704][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.460869][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.495108][ T5797] (null): rxe_set_mtu: Set mtu to 1024 [ 77.501284][ T5797] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.532519][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 77.549393][ T5795] (null): rxe_set_mtu: Set mtu to 1024 [ 77.560607][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.576253][ T5795] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.733739][ T5790] infiniband rxe0: set active [ 77.739758][ T5790] infiniband rxe0: added rxe_eth0 [ 77.748345][ T176] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.848937][ T5790] RDS/IB: rxe0: added [ 77.862964][ T5790] smc: adding ib device rxe0 with port count 1 [ 77.869285][ T5790] smc: ib device rxe0 port 1 has pnetid [ 77.889987][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.919283][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.130397][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 78.300367][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.342704][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 78.358577][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 78.530882][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.538053][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.561117][ T5797] bridge_slave_0: entered allmulticast mode [ 78.568672][ T5797] bridge_slave_0: entered promiscuous mode [ 78.615029][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.621679][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.628807][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.636855][ T5797] bridge_slave_1: entered allmulticast mode [ 78.644990][ T5797] bridge_slave_1: entered promiscuous mode [ 78.756139][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.764521][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.776137][ T5795] bridge_slave_0: entered allmulticast mode [ 78.783954][ T5795] bridge_slave_0: entered promiscuous mode [ 78.796600][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.804866][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.816258][ T5794] bridge_slave_0: entered allmulticast mode [ 78.823976][ T5794] bridge_slave_0: entered promiscuous mode [ 78.841699][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.848849][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.858499][ T5794] bridge_slave_1: entered allmulticast mode [ 78.865516][ T5794] bridge_slave_1: entered promiscuous mode [ 78.886247][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.895838][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.903774][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.911307][ T5795] bridge_slave_1: entered allmulticast mode [ 78.918092][ T5795] bridge_slave_1: entered promiscuous mode [ 78.956395][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.975041][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.984193][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.001611][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.017373][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.030757][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.139992][ T5797] team0: Port device team_slave_0 added [ 79.151262][ T5795] team0: Port device team_slave_0 added [ 79.159950][ T5795] team0: Port device team_slave_1 added [ 79.166050][ T52] Bluetooth: hci0: command tx timeout [ 79.175687][ T5794] team0: Port device team_slave_0 added [ 79.194865][ T5797] team0: Port device team_slave_1 added [ 79.236796][ T5794] team0: Port device team_slave_1 added [ 79.263736][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.271025][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.297260][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.312049][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.319030][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.350320][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.364008][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.371117][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.397071][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.432670][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.440129][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.466477][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.494072][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.501106][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.527143][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.539854][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.546888][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.560975][ T52] Bluetooth: hci3: command tx timeout [ 79.573048][ T5793] Bluetooth: hci2: command tx timeout [ 79.583024][ T52] Bluetooth: hci1: command tx timeout [ 79.584986][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.674826][ T5797] hsr_slave_0: entered promiscuous mode [ 79.683174][ T5797] hsr_slave_1: entered promiscuous mode [ 79.712230][ T5795] hsr_slave_0: entered promiscuous mode [ 79.718654][ T5795] hsr_slave_1: entered promiscuous mode [ 79.725678][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.733545][ T5795] Cannot create hsr debugfs directory [ 79.764951][ T5794] hsr_slave_0: entered promiscuous mode [ 79.773704][ T5794] hsr_slave_1: entered promiscuous mode [ 79.779885][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.787573][ T5794] Cannot create hsr debugfs directory [ 80.149150][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 80.265969][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.281026][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.288278][ T5790] bridge_slave_0: entered allmulticast mode [ 80.297625][ T5790] bridge_slave_0: entered promiscuous mode [ 80.305153][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.319592][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.326955][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.334355][ T5790] bridge_slave_1: entered allmulticast mode [ 80.341224][ T5790] bridge_slave_1: entered promiscuous mode [ 80.348415][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.363378][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.404406][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.419906][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.433365][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.483337][ T5790] team0: Port device team_slave_0 added [ 80.492575][ T5790] team0: Port device team_slave_1 added [ 80.539186][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.549529][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.559006][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.566292][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.592523][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.610957][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.624354][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.631519][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.657919][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.695109][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.747684][ T5790] hsr_slave_0: entered promiscuous mode [ 80.754520][ T5790] hsr_slave_1: entered promiscuous mode [ 80.762858][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.771103][ T5790] Cannot create hsr debugfs directory [ 80.819824][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.855650][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.866402][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.895004][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.111684][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.118648][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.141351][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.169392][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.183468][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.233278][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.243540][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.253401][ T52] Bluetooth: hci0: command tx timeout [ 81.287524][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.298584][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.306010][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.329915][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.337223][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.365400][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.372601][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.398262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.405474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.479664][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.538686][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.586561][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.640435][ T52] Bluetooth: hci1: command tx timeout [ 81.645906][ T52] Bluetooth: hci2: command tx timeout [ 81.647569][ T5793] Bluetooth: hci3: command tx timeout [ 81.659472][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.676379][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.692014][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.699134][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.747648][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.754846][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.790140][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.797421][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.848506][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.855751][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.009810][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.068054][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.176745][ T5795] veth0_vlan: entered promiscuous mode [ 82.230090][ T5795] veth1_vlan: entered promiscuous mode [ 82.248697][ T5794] veth0_vlan: entered promiscuous mode [ 82.295607][ T5794] veth1_vlan: entered promiscuous mode [ 82.348515][ T5795] veth0_macvtap: entered promiscuous mode [ 82.391115][ T5795] veth1_macvtap: entered promiscuous mode [ 82.416231][ T5794] veth0_macvtap: entered promiscuous mode [ 82.446848][ T5794] veth1_macvtap: entered promiscuous mode [ 82.471182][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.486076][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.500505][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.513106][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.527778][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.539540][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.561200][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.574193][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.586787][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.602903][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.615295][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.624478][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.635981][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.652734][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.661703][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.671207][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.679971][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.749306][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.799381][ T5790] veth0_vlan: entered promiscuous mode [ 82.865591][ T5790] veth1_vlan: entered promiscuous mode [ 82.900696][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.921057][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.955869][ T5790] veth0_macvtap: entered promiscuous mode [ 82.968891][ T5790] veth1_macvtap: entered promiscuous mode [ 82.989020][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.999590][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.059064][ T5797] veth0_vlan: entered promiscuous mode [ 83.075323][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.075323][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.084025][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.103782][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.106991][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.128402][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.138420][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.149343][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.162202][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.181167][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.194894][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.204899][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.215504][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.228045][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.239019][ T5797] veth1_vlan: entered promiscuous mode [ 83.261470][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.285484][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.289429][ T5794] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.296671][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.320503][ T5793] Bluetooth: hci0: command tx timeout [ 83.324262][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.437154][ T5797] veth0_macvtap: entered promiscuous mode [ 83.494244][ T5797] veth1_macvtap: entered promiscuous mode [ 83.549442][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.566515][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.576563][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.587709][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.598166][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.619583][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.623092][ T5877] block device autoloading is deprecated and will be removed. [ 83.635794][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.672808][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.680457][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.712351][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.714480][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.721694][ T5793] Bluetooth: hci2: command tx timeout [ 83.729759][ T5101] Bluetooth: hci1: command tx timeout [ 83.735558][ T52] Bluetooth: hci3: command tx timeout [ 83.790822][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.820677][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.847416][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.871106][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.871507][ T5886] jffs2: notice: (5886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.912276][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.954331][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.980643][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.989414][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.002130][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.046864][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.074309][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.192944][ T5892] mmap: syz.3.9 (5892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.299856][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.324753][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.400721][ T52] Bluetooth: hci0: command tx timeout [ 86.025558][ T52] Bluetooth: hci1: command tx timeout [ 86.031197][ T5793] Bluetooth: hci3: command tx timeout [ 86.031197][ T5101] Bluetooth: hci2: command tx timeout [ 86.368931][ T5904] pim6reg: entered allmulticast mode [ 86.385570][ T5908] pim6reg: entered allmulticast mode [ 86.392751][ T5903] pim6reg: left allmulticast mode [ 86.427187][ T5910] pim6reg: left allmulticast mode [ 86.469954][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.481673][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 86.595832][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.633795][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.802539][ T5921] block device autoloading is deprecated and will be removed. [ 86.884073][ T5921] md/raid:md3: not clean -- starting background reconstruction [ 86.914173][ T5921] md/raid:md3: device ram6 operational as raid disk 0 [ 86.990780][ T5921] md/raid:md3: cannot start dirty degraded array. [ 87.004554][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.106903][ T5921] md/raid:md3: failed to run raid set. [ 87.119745][ T5921] md: pers->run() failed ... [ 87.237090][ T5928] syz.2.3[5928]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.304123][ T5928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 87.389737][ T5928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.016943][ T5948] pim6reg: entered allmulticast mode [ 88.067864][ T5947] pim6reg: left allmulticast mode [ 88.788019][ T5939] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 89.900744][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 90.048913][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.204961][ T9] cfg80211: failed to load regulatory.db [ 93.529305][ T5988] ubi0: attaching mtd0 [ 93.541581][ T5988] ubi0: scanning is finished [ 93.546708][ T5988] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 93.586167][ T5988] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 94.410567][ T5991] jffs2: notice: (5991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.427508][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.590743][ T5917] usb 4-1: device descriptor read/64, error -71 [ 94.983148][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.115715][ T6007] pim6reg: entered allmulticast mode [ 95.163196][ T6003] pim6reg: left allmulticast mode [ 95.260579][ T5917] usb 4-1: device descriptor read/64, error -71 [ 95.472404][ T5917] usb usb4-port1: attempt power cycle [ 95.587010][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 95.780023][ T6017] block device autoloading is deprecated and will be removed. [ 95.920682][ T5917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.961249][ T5917] usb 4-1: device descriptor read/8, error -71 [ 96.422558][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.761711][ T6017] md/raid:md0: not clean -- starting background reconstruction [ 96.769736][ T6017] md/raid:md0: device ram1 operational as raid disk 1 [ 96.835660][ T6017] md/raid:md0: couldn't allocate thread. [ 96.869246][ T5917] usb 4-1: device descriptor read/8, error -71 [ 96.921728][ T6017] md: pers->run() failed ... [ 97.038694][ T5917] usb usb4-port1: unable to enumerate USB device [ 97.525700][ T6041] pim6reg: entered allmulticast mode [ 97.540926][ T6041] pim6reg: left allmulticast mode [ 98.204535][ T6050] ubi0: attaching mtd0 [ 98.215725][ T6050] ubi0: scanning is finished [ 98.220669][ T6050] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 98.266204][ T6050] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 98.324589][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 99.220390][ T6053] md: array md0 already has disks! [ 100.103481][ T6056] md: could not open device unknown-block(1,1). [ 100.109860][ T6056] md: error, md_import_device() returned -16 [ 100.185142][ T6068] pim6reg: entered allmulticast mode [ 100.230680][ T6067] pim6reg: left allmulticast mode [ 100.253682][ T6056] md/raid:md0: not clean -- starting background reconstruction [ 100.292327][ T6056] md/raid:md0: device ram0 operational as raid disk 0 [ 100.300354][ T6056] md/raid:md0: device ram1 operational as raid disk 1 [ 100.341408][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 100.380574][ T6056] md/raid:md0: raid level 5 active with 2 out of 2 devices, algorithm 0 [ 100.417921][ T6056] md0: detected capacity change from 0 to 3584 [ 100.485692][ T6080] md: resync of RAID array md0 [ 100.517320][ T6080] md: md0: resync interrupted. [ 100.746085][ T6074] md0: detected capacity change from 3584 to 0 [ 100.757190][ T6074] md: md0 stopped. [ 100.860768][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.060836][ T5917] usb 3-1: device descriptor read/64, error -71 [ 101.392429][ T5917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.664468][ T5917] usb 3-1: device descriptor read/64, error -71 [ 101.750131][ T6096] block device autoloading is deprecated and will be removed. [ 101.836706][ T5917] usb usb3-port1: attempt power cycle [ 101.877111][ T6096] md/raid:md0: not clean -- starting background reconstruction [ 101.887411][ T6096] md/raid:md0: device ram1 operational as raid disk 1 [ 101.940588][ T6096] md/raid:md0: cannot start dirty degraded array. [ 101.989573][ T6101] page:ffffea0001c60000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71800 [ 102.017500][ T6101] head:ffffea0001c60000 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.028247][ T6101] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 102.043578][ T6101] page_type: 0xffffffff() [ 102.048143][ T6101] raw: 00fff00000000840 ffff8881400098c0 0000000000000000 0000000000000001 [ 102.062604][ T6096] md/raid:md0: failed to run raid set. [ 102.066454][ T6101] raw: 0000000000000000 0000000000150015 00000001ffffffff 0000000000000000 [ 102.078321][ T6096] md: pers->run() failed ... [ 102.080275][ T6106] fuse: Unknown parameter 'use00000000000000000007' [ 102.099953][ T6101] page dumped because: unmovable page [ 102.128327][ T6101] page_owner tracks the page as allocated [ 102.138753][ T6106] tcpci: probe of 0-0050 failed with error -5 [ 102.147169][ T6101] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5166, tgid 5166 (udevd), ts 49433961440, free_ts 28167513397 [ 102.179549][ T6106] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 102.187507][ T6101] post_alloc_hook+0x1c1/0x200 [ 102.200584][ T6101] get_page_from_freelist+0x2181/0x22a0 [ 102.207855][ T6101] __alloc_pages+0x1f0/0x460 [ 102.217329][ T6101] alloc_slab_page+0x5d/0x180 [ 102.222377][ T6101] new_slab+0x87/0x2d0 [ 102.226596][ T6101] ___slab_alloc+0xc5c/0x12f0 [ 102.232542][ T6101] kmem_cache_alloc_lru+0xfc/0x2c0 [ 102.238740][ T6101] __d_alloc+0x31/0x710 [ 102.243148][ T6101] d_alloc_parallel+0xe0/0x1590 [ 102.248064][ T6101] __lookup_slow+0x138/0x400 [ 102.252864][ T6101] lookup_slow+0x53/0x70 [ 102.257153][ T6101] walk_component+0x2ad/0x3e0 [ 102.261999][ T6101] path_lookupat+0x148/0x420 [ 102.266619][ T6101] filename_lookup+0x22d/0x580 [ 102.272403][ T6101] vfs_statx+0x112/0x680 [ 102.275511][ T5917] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.276684][ T6101] vfs_fstatat+0x12a/0x1b0 [ 102.288740][ T6101] page last free stack trace: [ 102.293695][ T6101] free_unref_page_prepare+0x7d7/0x8f0 [ 102.299212][ T6101] free_unref_page+0x32/0x2e0 [ 102.303997][ T6101] free_contig_range+0xa1/0x150 [ 102.308894][ T6101] destroy_args+0x7d/0x840 [ 102.313506][ T6101] debug_vm_pgtable+0x411/0x440 [ 102.318424][ T6101] do_one_initcall+0x242/0x790 [ 102.324264][ T6101] do_initcall_level+0x13d/0x1f0 [ 102.329254][ T6101] do_initcalls+0x69/0xd0 [ 102.340306][ T6101] kernel_init_freeable+0x3d9/0x560 [ 102.345653][ T6101] kernel_init+0x1d/0x1c0 [ 102.350027][ T6101] ret_from_fork+0x48/0x80 [ 102.352979][ T5917] usb 3-1: device descriptor read/8, error -71 [ 102.373583][ T6101] ret_from_fork_asm+0x11/0x20 [ 102.433400][ T6108] ubi0: attaching mtd0 [ 102.447224][ T6108] ubi0: scanning is finished [ 102.452118][ T6108] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 102.534055][ T6108] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 102.796085][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.111123][ T5917] usb 3-1: device descriptor read/8, error -71 [ 103.838100][ T6118] pim6reg: entered allmulticast mode [ 103.863144][ T6118] pim6reg: left allmulticast mode [ 104.613919][ T5917] usb usb3-port1: unable to enumerate USB device [ 104.748535][ T6116] pim6reg: entered allmulticast mode [ 104.754154][ T6127] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 104.755267][ T6119] pim6reg: left allmulticast mode [ 104.786554][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.072390][ T27] libceph: connect (1)[c::]:6789 error -101 [ 106.079493][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 106.115769][ T6145] ceph: No mds server is up or the cluster is laggy [ 107.861158][ T6157] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 108.310677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 108.504379][ T6163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 109.201548][ T6182] pim6reg: entered allmulticast mode [ 109.245494][ T6181] pim6reg: left allmulticast mode [ 109.764881][ T6185] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 109.790620][ T6185] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 109.798548][ T6185] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 109.824154][ T27] libceph: connect (1)[c::]:6789 error -101 [ 109.830746][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 109.844976][ T6185] tcpci: probe of 0-0002 failed with error -5 [ 109.852570][ T6185] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 109.854521][ T6180] ceph: No mds server is up or the cluster is laggy [ 109.948186][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 110.219833][ T6174] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 110.265534][ T6199] Config c/1 of g1 needs at least one function. [ 110.273125][ T6199] udc dummy_udc.0: failed to start g1: -22 [ 110.279048][ T6199] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 110.288701][ T6199] UDC core: g1: couldn't find an available UDC or it's busy [ 112.345777][ T6210] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 113.580282][ T6223] jffs2: notice: (6223) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.651927][ T6220] Zero length message leads to an empty skb [ 114.189507][ T6237] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 114.319960][ T6239] pim6reg: entered allmulticast mode [ 114.345430][ T6237] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 114.378516][ T6236] pim6reg: left allmulticast mode [ 114.887133][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 114.888859][ T6242] block device autoloading is deprecated and will be removed. [ 115.074929][ T6234] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 115.175465][ T6251] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 117.446612][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 117.485829][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 117.506911][ T6289] ceph: No mds server is up or the cluster is laggy [ 118.391760][ T6302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 118.610670][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.008468][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 119.100914][ T5854] usb 1-1: no configurations [ 119.155542][ T5854] usb 1-1: can't read configurations, error -22 [ 119.251291][ T6293] md: serialize_policy is only effective for raid1 [ 119.281839][ T6293] md: serialize_policy is only effective for raid1 [ 119.381653][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.570442][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 119.575794][ T6318] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 119.584897][ T5854] usb 1-1: no configurations [ 119.589629][ T5854] usb 1-1: can't read configurations, error -22 [ 119.596487][ T5854] usb usb1-port1: attempt power cycle [ 120.020414][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.136070][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 120.270121][ T5854] usb 1-1: no configurations [ 120.336718][ T5854] usb 1-1: can't read configurations, error -22 [ 120.580592][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.704611][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 120.792957][ T5854] usb 1-1: no configurations [ 120.848193][ T5854] usb 1-1: can't read configurations, error -22 [ 120.870977][ T5854] usb usb1-port1: unable to enumerate USB device [ 121.130583][ T6334] FAULT_INJECTION: forcing a failure. [ 121.130583][ T6334] name fail_futex, interval 1, probability 0, space 0, times 1 [ 121.143939][ T6334] CPU: 0 PID: 6334 Comm: syz.1.112 Not tainted syzkaller #0 [ 121.151294][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.161482][ T6334] Call Trace: [ 121.164882][ T6334] [ 121.167846][ T6334] dump_stack_lvl+0x18c/0x250 [ 121.172576][ T6334] ? verify_lock_unused+0x140/0x140 [ 121.177829][ T6334] ? show_regs_print_info+0x20/0x20 [ 121.183068][ T6334] ? load_image+0x420/0x420 [ 121.187681][ T6334] ? __update_load_avg_cfs_rq+0x689/0xa80 [ 121.193423][ T6334] should_fail_ex+0x394/0x4c0 [ 121.198121][ T6334] get_futex_key+0x134/0xf40 [ 121.202730][ T6334] ? futex_setup_timer+0xc0/0xc0 [ 121.207679][ T6334] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 121.213678][ T6334] ? __lock_acquire+0x7eb0/0x7eb0 [ 121.218716][ T6334] ? lock_chain_count+0x20/0x20 [ 121.223585][ T6334] futex_wait_setup+0xbc/0x270 [ 121.228377][ T6334] ? futex_wait_multiple+0x970/0x970 [ 121.233678][ T6334] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 121.239583][ T6334] ? _raw_spin_unlock+0x40/0x40 [ 121.244453][ T6334] futex_wait+0x1cf/0x640 [ 121.248806][ T6334] ? futex_wait_setup+0x270/0x270 [ 121.253871][ T6334] do_futex+0x2ff/0x3e0 [ 121.258045][ T6334] ? __ia32_sys_get_robust_list+0x110/0x110 [ 121.263959][ T6334] __se_sys_futex+0x3a9/0x440 [ 121.268654][ T6334] ? __x64_sys_futex+0xf0/0xf0 [ 121.273440][ T6334] ? __x64_sys_futex+0x21/0xf0 [ 121.278222][ T6334] do_syscall_64+0x55/0xb0 [ 121.282661][ T6334] ? clear_bhb_loop+0x40/0x90 [ 121.287357][ T6334] ? clear_bhb_loop+0x40/0x90 [ 121.292051][ T6334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.297960][ T6334] RIP: 0033:0x7f5ec999fb19 [ 121.302389][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.322013][ T6334] RSP: 002b:00007f5eca9360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.330443][ T6334] RAX: ffffffffffffffda RBX: 00007f5ec9c25fa8 RCX: 00007f5ec999fb19 [ 121.338425][ T6334] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ec9c25fa8 [ 121.346405][ T6334] RBP: 00007f5ec9c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 121.354389][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.362381][ T6334] R13: 00007f5ec9c26038 R14: 00007ffe53cc8be0 R15: 00007ffe53cc8cc8 [ 121.370374][ T6334] [ 121.741032][ T6351] ubi0: attaching mtd0 [ 121.752053][ T6351] ubi0: scanning is finished [ 121.760150][ T6351] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 121.843271][ T6351] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 121.895129][ T6353] md: serialize_policy is only effective for raid1 [ 121.907084][ T6353] md: serialize_policy is only effective for raid1 [ 122.923313][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.200803][ T5854] usb 4-1: Using ep0 maxpacket: 8 [ 123.210600][ T5854] usb 4-1: no configurations [ 123.215252][ T5854] usb 4-1: can't read configurations, error -22 [ 123.560431][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.410397][ T5854] usb 4-1: Using ep0 maxpacket: 8 [ 124.436228][ T5854] usb 4-1: no configurations [ 124.450343][ T5854] usb 4-1: can't read configurations, error -22 [ 124.477371][ T5854] usb usb4-port1: attempt power cycle [ 124.653981][ T6395] ubi0: attaching mtd0 [ 124.659817][ T6395] ubi0: scanning is finished [ 124.701269][ T6395] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 124.802542][ T6395] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 124.910541][ T5854] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.999653][ T8] libceph: connect (1)[c::]:6789 error -101 [ 125.028400][ T6405] ceph: No mds server is up or the cluster is laggy [ 125.095191][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 125.762366][ T5854] usb 4-1: device descriptor read/8, error -71 [ 126.920369][ T5854] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.988340][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.035247][ T5854] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 127.067991][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.384661][ T5854] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 127.423568][ T5854] wwan wwan0: port wwan0qmi0 attached [ 127.548842][ T6436] ubi0: attaching mtd0 [ 127.555555][ T6436] ubi0: scanning is finished [ 127.569141][ T6436] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 127.596181][ T5854] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 3e:82:b2:64:70:e1 [ 127.686683][ T6436] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 127.755349][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.811979][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.883408][ T6444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 129.802812][ T8] usb 4-1: USB disconnect, device number 9 [ 129.852906][ T8] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 130.146507][ T8] wwan wwan0: port wwan0qmi0 disconnected [ 130.475965][ T6480] Config c/1 of g1 needs at least one function. [ 130.482662][ T6480] udc dummy_udc.0: failed to start g1: -22 [ 130.488515][ T6480] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 130.497834][ T6480] UDC core: g1: couldn't find an available UDC or it's busy [ 130.862741][ T6485] ubi0: attaching mtd0 [ 130.872462][ T6485] ubi0: scanning is finished [ 130.877359][ T6485] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 131.588830][ T6490] process 'syz.2.158' launched './file2' with NULL argv: empty string added [ 131.661299][ T6485] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 131.780916][ T6478] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 132.444334][ T6504] pim6reg: entered allmulticast mode [ 132.461193][ T6504] pim6reg: left allmulticast mode [ 133.180978][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.190295][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.466433][ T6520] ubi0: attaching mtd0 [ 133.477574][ T6520] ubi0: scanning is finished [ 133.482573][ T6520] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 133.859971][ T6520] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 134.874108][ T6534] Bluetooth: MGMT ver 1.22 [ 136.301372][ T6550] pim6reg: entered allmulticast mode [ 138.047746][ T6564] Config c/1 of g1 needs at least one function. [ 138.054299][ T6564] udc dummy_udc.0: failed to start g1: -22 [ 138.060148][ T6564] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 138.068416][ T6564] UDC core: g1: couldn't find an available UDC or it's busy [ 138.281410][ T6571] ceph: No mds server is up or the cluster is laggy [ 138.299843][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 138.402413][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 139.248513][ T6586] md: serialize_policy is only effective for raid1 [ 139.305406][ T6585] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 139.423639][ T6591] md: serialize_policy is only effective for raid1 [ 140.967107][ T6608] jffs2: notice: (6608) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.453211][ T6625] ceph: No mds server is up or the cluster is laggy [ 141.467186][ T27] libceph: connect (1)[c::]:6789 error -101 [ 142.080473][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 142.119130][ T6629] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 142.373080][ T27] libceph: connect (1)[c::]:6789 error -101 [ 143.150467][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 144.386606][ T27] libceph: connect (1)[c::]:6789 error -101 [ 144.392832][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 144.643356][ T6656] md: serialize_policy is only effective for raid1 [ 144.706051][ T6656] md: serialize_policy is only effective for raid1 [ 144.820713][ T6662] jffs2: notice: (6662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.005403][ T6667] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 145.230581][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.440391][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 145.456304][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 145.472638][ T8] usb 4-1: can't read configurations, error -61 [ 145.661238][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.752570][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 146.765881][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 146.773588][ T8] usb 4-1: can't read configurations, error -61 [ 146.780108][ T8] usb usb4-port1: attempt power cycle [ 147.237997][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.400232][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 147.496080][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.603613][ T8] usb 4-1: can't read configurations, error -61 [ 147.860422][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 147.922953][ T6693] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 147.966984][ T8] usb 4-1: device descriptor read/8, error -71 [ 147.969421][ T6693] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 148.100939][ T8] usb usb4-port1: unable to enumerate USB device [ 148.255612][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 148.267523][ T6699] ceph: No mds server is up or the cluster is laggy [ 148.340804][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 148.673789][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 148.730654][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 148.801849][ T6704] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 149.087818][ T6709] jffs2: notice: (6709) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.701663][ T5780] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 150.900244][ T5780] usb 4-1: Using ep0 maxpacket: 8 [ 150.919955][ T5780] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 150.957780][ T5780] usb 4-1: can't read configurations, error -61 [ 151.825758][ T6720] syz.1.218 (6720) used greatest stack depth: 19624 bytes left [ 151.839524][ T6731] syz.1.218 (6731) used greatest stack depth: 19400 bytes left [ 151.950506][ T5780] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 152.350303][ T5780] usb 4-1: Using ep0 maxpacket: 8 [ 152.378356][ T6738] ubi0: attaching mtd0 [ 152.388570][ T6738] ubi0: scanning is finished [ 152.393501][ T6738] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 152.483179][ T6738] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 153.039980][ T5780] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 153.162811][ T5780] usb 4-1: can't read configurations, error -61 [ 153.169446][ T5780] usb usb4-port1: attempt power cycle [ 153.422152][ T6745] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 155.764040][ T6776] ubi0: attaching mtd0 [ 155.776280][ T6776] ubi0: scanning is finished [ 155.781287][ T6776] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 156.496993][ T6776] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 156.829777][ T6783] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 157.261216][ T6797] ceph: No mds server is up or the cluster is laggy [ 157.272815][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 157.330596][ T5780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.337656][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 158.180388][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 158.238202][ T5780] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 158.247767][ T5780] usb 2-1: can't read configurations, error -61 [ 158.410281][ T5780] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.590350][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 158.878906][ T6813] pim6reg: entered allmulticast mode [ 158.895399][ T6813] pim6reg: left allmulticast mode [ 159.381716][ T5780] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 159.400855][ T5780] usb 2-1: can't read configurations, error -61 [ 159.410327][ T5780] usb usb2-port1: attempt power cycle [ 159.564453][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 159.667361][ T6819] ubi0: attaching mtd0 [ 159.677236][ T6819] ubi0: scanning is finished [ 159.682168][ T6819] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 159.713476][ T6819] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 159.860313][ T5780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.680316][ T5780] usb 2-1: device descriptor read/8, error -71 [ 162.780294][ T5855] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.012947][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 163.035103][ T5855] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.060050][ T5855] usb 3-1: can't read configurations, error -61 [ 163.368266][ T5855] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.568631][ T6862] pim6reg: left allmulticast mode [ 164.218828][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 164.300791][ T5855] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 164.922088][ T6869] pim6reg: entered allmulticast mode [ 164.936665][ T6869] pim6reg: left allmulticast mode [ 164.996893][ T5855] usb 3-1: can't read configurations, error -61 [ 165.236151][ T5855] usb usb3-port1: attempt power cycle [ 165.857941][ T6881] fuse: Bad value for 'fd' [ 166.860428][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 167.026438][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 167.033228][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 167.076020][ T6892] ceph: No mds server is up or the cluster is laggy [ 167.332838][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 167.884199][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 169.550312][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.550270][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 170.558189][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 170.570915][ T23] usb 3-1: can't read configurations, error -61 [ 170.740284][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.902958][ T6920] md/raid:md1: not clean -- starting background reconstruction [ 170.930399][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 170.946277][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 170.954046][ T23] usb 3-1: can't read configurations, error -61 [ 170.975234][ T23] usb usb3-port1: attempt power cycle [ 170.994189][ T6920] md/raid:md1: device ram3 operational as raid disk 1 [ 171.133800][ T6920] md/raid:md1: cannot start dirty degraded array. [ 171.304215][ T6920] md/raid:md1: failed to run raid set. [ 171.325596][ T6920] md: pers->run() failed ... [ 171.390356][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.421280][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 171.452050][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 171.470027][ T23] usb 3-1: can't read configurations, error -61 [ 171.630733][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.700385][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 171.708716][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 171.730293][ T23] usb 3-1: can't read configurations, error -61 [ 171.760604][ T23] usb usb3-port1: unable to enumerate USB device [ 171.883875][ T6936] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 172.463909][ T6946] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 172.483198][ T6946] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 172.877892][ T6941] syz.1.280 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 172.901518][ T6941] CPU: 1 PID: 6941 Comm: syz.1.280 Not tainted syzkaller #0 [ 172.908887][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.918986][ T6941] Call Trace: [ 172.922323][ T6941] [ 172.925300][ T6941] dump_stack_lvl+0x18c/0x250 [ 172.930037][ T6941] ? show_regs_print_info+0x20/0x20 [ 172.935295][ T6941] ? load_image+0x420/0x420 [ 172.939838][ T6941] ? ___ratelimit+0x478/0x610 [ 172.944571][ T6941] ? radix_tree_cpu_dead+0x160/0x160 [ 172.949915][ T6941] dump_header+0xd8/0x820 [ 172.954309][ T6941] oom_kill_process+0x390/0x580 [ 172.959225][ T6941] out_of_memory+0xe0e/0x1200 [ 172.963967][ T6941] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 172.969651][ T6941] ? mutex_lock_nested+0x20/0x20 [ 172.974634][ T6941] ? unregister_oom_notifier+0x20/0x20 [ 172.980160][ T6941] mem_cgroup_out_of_memory+0x2c2/0x390 [ 172.985770][ T6941] ? try_charge_memcg+0xc8c/0x17c0 [ 172.990941][ T6941] ? drain_local_stock+0x630/0x630 [ 172.996119][ T6941] ? do_raw_spin_unlock+0x121/0x230 [ 173.001384][ T6941] try_charge_memcg+0xc9c/0x17c0 [ 173.006388][ T6941] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 173.012266][ T6941] ? folio_flags+0x120/0x120 [ 173.017001][ T6941] ? shmem_alloc_folio+0x1f4/0x2a0 [ 173.022182][ T6941] ? percpu_ref_tryget+0x15/0x180 [ 173.027254][ T6941] ? get_mem_cgroup_from_mm+0x38/0x290 [ 173.032736][ T6941] charge_memcg+0x11b/0x3b0 [ 173.037267][ T6941] ? __mem_cgroup_charge+0x80/0x80 [ 173.042396][ T6941] ? get_mem_cgroup_from_mm+0x38/0x290 [ 173.047871][ T6941] ? get_mem_cgroup_from_mm+0x38/0x290 [ 173.053347][ T6941] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 173.058948][ T6941] __mem_cgroup_charge+0x25/0x80 [ 173.063905][ T6941] shmem_add_to_page_cache+0x8d3/0x1b80 [ 173.069467][ T6941] ? xas_load+0x12b/0x140 [ 173.073820][ T6941] ? shmem_alloc_folio+0x2a0/0x2a0 [ 173.078961][ T6941] shmem_get_folio_gfp+0x1037/0x2b40 [ 173.084286][ T6941] shmem_fault+0x1b8/0x820 [ 173.088734][ T6941] ? zero_pipe_buf_get+0x10/0x10 [ 173.093689][ T6941] ? handle_mm_fault+0xe6/0x4a40 [ 173.098647][ T6941] ? __lock_acquire+0x7eb0/0x7eb0 [ 173.103690][ T6941] __do_fault+0x13b/0x4d0 [ 173.108030][ T6941] ? handle_mm_fault+0x3923/0x4a40 [ 173.113154][ T6941] ? handle_mm_fault+0xe6/0x4a40 [ 173.118104][ T6941] handle_mm_fault+0x393f/0x4a40 [ 173.123059][ T6941] ? handle_mm_fault+0xe6/0x4a40 [ 173.128020][ T6941] ? numa_migrate_prep+0x350/0x350 [ 173.133144][ T6941] ? follow_page_pte+0x6dd/0x1ae0 [ 173.138194][ T6941] ? pmd_lock+0x60/0x60 [ 173.142381][ T6941] __get_user_pages+0x604/0x1580 [ 173.147354][ T6941] ? populate_vma_page_range+0x380/0x380 [ 173.153011][ T6941] populate_vma_page_range+0x2c1/0x380 [ 173.158507][ T6941] ? fixup_user_fault+0x750/0x750 [ 173.163553][ T6941] ? down_read+0x1ac/0x2e0 [ 173.167985][ T6941] __mm_populate+0x260/0x390 [ 173.172594][ T6941] ? faultin_page_range+0x8a0/0x8a0 [ 173.177811][ T6941] ? up_write+0x1be/0x410 [ 173.182156][ T6941] vm_mmap_pgoff+0x2da/0x3f0 [ 173.186769][ T6941] ? account_locked_vm+0x200/0x200 [ 173.191899][ T6941] ? ksys_mmap_pgoff+0xf3/0x720 [ 173.196764][ T6941] ? syscall_user_dispatch+0x49/0x90 [ 173.202066][ T6941] ? __x64_sys_mmap+0x7a/0x130 [ 173.206849][ T6941] do_syscall_64+0x55/0xb0 [ 173.211283][ T6941] ? clear_bhb_loop+0x40/0x90 [ 173.215983][ T6941] ? clear_bhb_loop+0x40/0x90 [ 173.220678][ T6941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.226585][ T6941] RIP: 0033:0x7f5ec999fb19 [ 173.231015][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.250653][ T6941] RSP: 002b:00007f5eca936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.259141][ T6941] RAX: ffffffffffffffda RBX: 00007f5ec9c25fa0 RCX: 00007f5ec999fb19 [ 173.267138][ T6941] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 173.275131][ T6941] RBP: 00007f5ec9a37b70 R08: ffffffffffffffff R09: 000000006a855000 [ 173.283124][ T6941] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 173.291110][ T6941] R13: 00007f5ec9c26038 R14: 00007f5ec9c25fa0 R15: 00007ffe53cc8cc8 [ 173.299111][ T6941] [ 173.314357][ T6941] memory: usage 307200kB, limit 307200kB, failcnt 19511 [ 173.321649][ T6941] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 173.345483][ T6941] kmem: usage 2640kB, limit 9007199254740988kB, failcnt 0 [ 173.379860][ T6941] Memory cgroup stats for /syz1: [ 173.380721][ T6941] cache 310738944 [ 173.396613][ T6941] rss 1130496 [ 173.418902][ T6941] rss_huge 0 [ 173.422431][ T6941] shmem 310726656 [ 173.426253][ T6941] mapped_file 220368896 [ 173.432129][ T6941] dirty 12288 [ 173.435461][ T6941] writeback 0 [ 173.439886][ T6941] workingset_refault_anon 2 [ 173.444628][ T6941] workingset_refault_file 0 [ 173.449162][ T6941] swap 127995904 [ 173.452803][ T6941] pgpgin 128595 [ 173.456295][ T6941] pgpgout 52455 [ 173.459781][ T6941] pgfault 86284 [ 173.463459][ T6941] pgmajfault 8 [ 173.466864][ T6941] inactive_anon 27623424 [ 173.472965][ T6941] active_anon 284233728 [ 173.477176][ T6941] inactive_file 12288 [ 173.503377][ T6941] active_file 0 [ 173.506920][ T6941] unevictable 0 [ 173.535277][ T6941] hierarchical_memory_limit 314572800 [ 173.546919][ T6941] hierarchical_memsw_limit 9223372036854771712 [ 173.575186][ T6941] total_cache 310738944 [ 173.579427][ T6941] total_rss 1130496 [ 173.610515][ T6941] total_rss_huge 0 [ 173.614319][ T6941] total_shmem 310726656 [ 173.618506][ T6941] total_mapped_file 220368896 [ 173.630248][ T6941] total_dirty 12288 [ 173.634108][ T6941] total_writeback 0 [ 173.637952][ T6941] total_workingset_refault_anon 2 [ 173.644486][ T6941] total_workingset_refault_file 0 [ 173.656716][ T6941] total_swap 127995904 [ 173.662235][ T6941] total_pgpgin 128595 [ 173.672375][ T6941] total_pgpgout 52455 [ 173.676405][ T6941] total_pgfault 86284 [ 173.692908][ T6941] total_pgmajfault 8 [ 173.696868][ T6941] total_inactive_anon 27623424 [ 173.707277][ T6941] total_active_anon 284233728 [ 173.714063][ T6941] total_inactive_file 12288 [ 173.718615][ T6941] total_active_file 0 [ 173.723070][ T6941] total_unevictable 0 [ 173.727086][ T6941] anon_cost 0 [ 173.731093][ T6941] file_cost 0 [ 173.734433][ T6941] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.102,pid=6294,uid=0 [ 173.789709][ T6941] Memory cgroup out of memory: Killed process 6294 (syz.1.102) total-vm:200584kB, anon-rss:1544kB, file-rss:20644kB, shmem-rss:89216kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 173.911704][ T6965] md/raid:md2: not clean -- starting background reconstruction [ 173.936878][ T6965] md/raid:md2: device ram5 operational as raid disk 1 [ 173.987511][ T6965] md/raid:md2: cannot start dirty degraded array. [ 174.084246][ T6965] md/raid:md2: failed to run raid set. [ 174.110385][ T6965] md: pers->run() failed ... [ 174.824334][ T6971] pim6reg: entered allmulticast mode [ 174.923877][ T6973] Config c/1 of g1 needs at least one function. [ 174.930426][ T6973] udc dummy_udc.0: failed to start g1: -22 [ 174.936310][ T6973] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 174.944762][ T6973] UDC core: g1: couldn't find an available UDC or it's busy [ 174.961675][ T6974] pim6reg: left allmulticast mode [ 175.899729][ T30] oom_reaper: reaped process 6294 (syz.1.102), now anon-rss:0kB, file-rss:20452kB, shmem-rss:89216kB [ 175.957998][ T6980] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 175.968313][ T6980] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 176.040824][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 176.112101][ T6581] syz.1.181 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 176.204325][ T6581] CPU: 1 PID: 6581 Comm: syz.1.181 Not tainted syzkaller #0 [ 176.211698][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.221794][ T6581] Call Trace: [ 176.225142][ T6581] [ 176.228114][ T6581] dump_stack_lvl+0x18c/0x250 [ 176.232851][ T6581] ? show_regs_print_info+0x20/0x20 [ 176.238100][ T6581] ? load_image+0x420/0x420 [ 176.242648][ T6581] ? ___ratelimit+0x478/0x610 [ 176.247379][ T6581] ? radix_tree_cpu_dead+0x160/0x160 [ 176.252708][ T6581] dump_header+0xd8/0x820 [ 176.257061][ T6581] oom_kill_process+0x390/0x580 [ 176.261933][ T6581] out_of_memory+0xe0e/0x1200 [ 176.266629][ T6581] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 176.272279][ T6581] ? print_unlock_imbalance_bug+0x160/0x160 [ 176.278198][ T6581] ? mutex_lock_nested+0x20/0x20 [ 176.283152][ T6581] ? unregister_oom_notifier+0x20/0x20 [ 176.288638][ T6581] mem_cgroup_out_of_memory+0x2c2/0x390 [ 176.294202][ T6581] ? try_charge_memcg+0xc8c/0x17c0 [ 176.299328][ T6581] ? drain_local_stock+0x630/0x630 [ 176.304464][ T6581] ? do_raw_spin_unlock+0x121/0x230 [ 176.309682][ T6581] try_charge_memcg+0xc9c/0x17c0 [ 176.314657][ T6581] ? folio_flags+0x120/0x120 [ 176.319260][ T6581] ? percpu_ref_tryget+0x15/0x180 [ 176.324301][ T6581] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 176.330041][ T6581] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 176.336036][ T6581] ? percpu_ref_tryget+0x15/0x180 [ 176.341090][ T6581] ? percpu_ref_tryget+0x15/0x180 [ 176.346129][ T6581] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 176.351864][ T6581] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 176.357600][ T6581] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 176.363421][ T6581] obj_cgroup_charge+0x36e/0x630 [ 176.368400][ T6581] ? get_obj_cgroup_from_current+0xd4/0x280 [ 176.374480][ T6581] ? obj_cgroup_charge+0xed/0x630 [ 176.379518][ T6581] ? mod_objcg_mlstate+0x320/0x320 [ 176.384645][ T6581] ? get_obj_cgroup_from_current+0xd4/0x280 [ 176.390549][ T6581] ? get_obj_cgroup_from_current+0xd4/0x280 [ 176.396460][ T6581] slab_pre_alloc_hook+0x2e2/0x300 [ 176.401586][ T6581] ? __lock_acquire+0x7eb0/0x7eb0 [ 176.406630][ T6581] kmem_cache_alloc_lru+0x4d/0x2c0 [ 176.411765][ T6581] ? xas_nomem+0x14a/0x1e0 [ 176.416207][ T6581] xas_nomem+0x14a/0x1e0 [ 176.420468][ T6581] shmem_add_to_page_cache+0xa41/0x1b80 [ 176.426025][ T6581] ? xas_load+0x11d/0x140 [ 176.430376][ T6581] ? shmem_alloc_folio+0x2a0/0x2a0 [ 176.435533][ T6581] shmem_get_folio_gfp+0x1037/0x2b40 [ 176.440859][ T6581] shmem_write_begin+0xf2/0x430 [ 176.445727][ T6581] generic_perform_write+0x2fe/0x5c0 [ 176.451044][ T6581] ? generic_file_direct_write+0x3e0/0x3e0 [ 176.456863][ T6581] ? down_write+0x16e/0x200 [ 176.461386][ T6581] ? file_update_time+0x98/0x1a0 [ 176.466341][ T6581] shmem_file_write_iter+0xfb/0x120 [ 176.471559][ T6581] __kernel_write_iter+0x29f/0x6d0 [ 176.476697][ T6581] ? vfs_read+0x990/0x990 [ 176.481055][ T6581] ? get_dump_page+0x156/0x200 [ 176.485843][ T6581] ? __asan_memset+0x22/0x40 [ 176.490451][ T6581] ? iov_iter_bvec+0xd4/0x1b0 [ 176.495156][ T6581] dump_user_range+0x389/0x7c0 [ 176.499950][ T6581] ? dump_skip+0x40/0x40 [ 176.504234][ T6581] elf_core_dump+0x320e/0x37c0 [ 176.509034][ T6581] ? load_elf_binary+0x2850/0x2850 [ 176.514170][ T6581] ? verify_lock_unused+0x140/0x140 [ 176.519822][ T6581] ? __lock_acquire+0x7eb0/0x7eb0 [ 176.524945][ T6581] ? mas_next_slot+0x94c/0x980 [ 176.529760][ T6581] ? rcu_read_lock_any_held+0xb4/0x140 [ 176.535246][ T6581] ? 0xffffffffff600000 [ 176.539423][ T6581] do_coredump+0x19b8/0x2960 [ 176.544045][ T6581] ? nfs_stat_to_errno+0x170/0x170 [ 176.549198][ T6581] ? lock_chain_count+0x20/0x20 [ 176.554065][ T6581] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.559274][ T6581] ? lockdep_hardirqs_on+0x98/0x150 [ 176.564491][ T6581] get_signal+0x10da/0x1390 [ 176.569025][ T6581] arch_do_signal_or_restart+0xc2/0x7b0 [ 176.574593][ T6581] ? get_sigframe_size+0x20/0x20 [ 176.579545][ T6581] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 176.585567][ T6581] ? exit_to_user_mode_loop+0x3b/0x110 [ 176.591045][ T6581] exit_to_user_mode_loop+0x70/0x110 [ 176.596345][ T6581] exit_to_user_mode_prepare+0xee/0x180 [ 176.601909][ T6581] irqentry_exit_to_user_mode+0x9/0x30 [ 176.607378][ T6581] exc_page_fault+0x8c/0x100 [ 176.611980][ T6581] asm_exc_page_fault+0x26/0x30 [ 176.616844][ T6581] RIP: 0033:0x7f5ec9854db7 [ 176.621273][ T6581] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 176.640896][ T6581] RSP: 002b:00007f5eca917120 EFLAGS: 00010202 [ 176.646976][ T6581] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5ec999fb19 [ 176.654955][ T6581] RDX: 00007f5eca917140 RSI: 00007f5eca917270 RDI: 000000000000000b [ 176.662936][ T6581] RBP: 00007f5ec9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 176.670912][ T6581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.678889][ T6581] R13: 00007f5ec9c26038 R14: 00007f5ec9c25fa0 R15: 00007ffe53cc8cc8 [ 176.686889][ T6581] [ 176.710256][ T6581] memory: usage 307200kB, limit 307200kB, failcnt 20244 [ 176.722580][ T6581] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 176.732942][ T6581] kmem: usage 2472kB, limit 9007199254740988kB, failcnt 0 [ 176.795878][ T6581] Memory cgroup stats for /syz1: [ 176.796191][ T6581] cache 311349248 [ 176.856113][ T6581] rss 688128 [ 176.906631][ T6581] rss_huge 0 [ 176.909921][ T6581] shmem 311336960 [ 176.954979][ T6581] mapped_file 158695424 [ 176.959218][ T6581] dirty 12288 [ 176.975179][ T6581] writeback 0 [ 176.978532][ T6581] workingset_refault_anon 2 [ 177.018163][ T6581] workingset_refault_file 0 [ 177.024774][ T6581] swap 127995904 [ 177.031608][ T6581] pgpgin 129236 [ 177.035115][ T6581] pgpgout 53054 [ 177.048898][ T6581] pgfault 86614 [ 177.059032][ T6581] pgmajfault 8 [ 177.063010][ T6581] inactive_anon 246763520 [ 177.092007][ T6581] active_anon 65261568 [ 177.096149][ T6581] inactive_file 12288 [ 177.130819][ T6581] active_file 0 [ 177.134351][ T6581] unevictable 0 [ 177.137848][ T6581] hierarchical_memory_limit 314572800 [ 177.164993][ T6581] hierarchical_memsw_limit 9223372036854771712 [ 177.177312][ T6581] total_cache 311349248 [ 177.186190][ T6581] total_rss 688128 [ 177.194471][ T6581] total_rss_huge 0 [ 177.211794][ T6581] total_shmem 311336960 [ 177.216012][ T6581] total_mapped_file 158695424 [ 177.239826][ T6581] total_dirty 12288 [ 177.248638][ T6581] total_writeback 0 [ 177.257495][ T6581] total_workingset_refault_anon 2 [ 177.268381][ T6581] total_workingset_refault_file 0 [ 177.279357][ T6581] total_swap 127995904 [ 177.288213][ T6581] total_pgpgin 129236 [ 177.297083][ T6581] total_pgpgout 53054 [ 177.308582][ T6581] total_pgfault 86614 [ 177.322948][ T6581] total_pgmajfault 8 [ 177.336231][ T6581] total_inactive_anon 246763520 [ 177.345955][ T6581] total_active_anon 65261568 [ 177.356823][ T6581] total_inactive_file 12288 [ 177.367449][ T6581] total_active_file 0 [ 177.379526][ T6581] total_unevictable 0 [ 177.394840][ T6581] anon_cost 0 [ 177.404022][ T6581] file_cost 0 [ 177.415562][ T6581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.117,pid=6352,uid=0 [ 177.473277][ T6581] Memory cgroup out of memory: Killed process 6352 (syz.1.117) total-vm:200584kB, anon-rss:1552kB, file-rss:20608kB, shmem-rss:79872kB, UID:0 pgtables:276kB oom_score_adj:1000 [ 177.493457][ T7004] Config c/1 of g1 needs at least one function. [ 177.499857][ T7004] udc dummy_udc.0: failed to start g1: -22 [ 177.505918][ T7004] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 177.514208][ T7004] UDC core: g1: couldn't find an available UDC or it's busy [ 178.237574][ T27] libceph: connect (1)[c::]:6789 error -101 [ 178.252816][ T7017] ceph: No mds server is up or the cluster is laggy [ 178.308797][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 178.971156][ T7023] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 179.022231][ T7023] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 179.283838][ T7016] md: serialize_policy is only effective for raid1 [ 179.389583][ T7016] md: serialize_policy is only effective for raid1 [ 179.563264][ T30] oom_reaper: reaped process 6352 (syz.1.117), now anon-rss:0kB, file-rss:20416kB, shmem-rss:580kB [ 179.690270][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.989616][ T7039] pim6reg: entered allmulticast mode [ 180.005513][ T7039] pim6reg: left allmulticast mode [ 180.695209][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.730349][ T27] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 180.790271][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.822208][ T27] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 180.829928][ T27] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 180.870379][ T27] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 180.902573][ T27] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 180.915346][ T27] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 180.937465][ T27] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 180.962688][ T27] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 180.990786][ T27] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 181.011496][ T27] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 181.483150][ T7061] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 181.513214][ T7061] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 181.697504][ T27] IPVS: starting estimator thread 0... [ 181.784896][ T7066] ceph: No mds server is up or the cluster is laggy [ 181.797477][ T27] libceph: connect (1)[c::]:6789 error -101 [ 181.853603][ T7067] IPVS: using max 15 ests per chain, 36000 per kthread [ 181.959056][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 184.580468][ T23] usb 3-1: USB disconnect, device number 13 [ 184.642158][ T23] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 184.923894][ T23] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 185.044204][ T7094] pim6reg: entered allmulticast mode [ 185.060927][ T7091] pim6reg: left allmulticast mode [ 185.071364][ T23] keyspan 3-1:1.0: device disconnected [ 187.049449][ T7117] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 187.105147][ T7117] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 187.267416][ T7120] ceph: No mds server is up or the cluster is laggy [ 187.277095][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 187.346083][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 188.272971][ T7129] ubi0: attaching mtd0 [ 188.286420][ T7129] ubi0: scanning is finished [ 188.291387][ T7129] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 188.324880][ T7129] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 189.224651][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 189.258140][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 189.296977][ T7137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.306498][ T7137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.315807][ T7137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.324877][ T7137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.373428][ T7137] vxlan0: entered promiscuous mode [ 189.378642][ T7137] vxlan0: entered allmulticast mode [ 189.406729][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 189.434853][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 190.851329][ T7165] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 190.900975][ T7165] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 192.301632][ T7186] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.457526][ T7189] pim6reg: entered allmulticast mode [ 192.480500][ T7189] pim6reg: left allmulticast mode [ 194.471626][ T7207] pim6reg: entered allmulticast mode [ 194.488827][ T7207] pim6reg: left allmulticast mode [ 194.786683][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.796755][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.402748][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 195.413134][ T7217] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 195.524754][ T7220] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 196.698083][ T6352] syz.1.117 (6352) used greatest stack depth: 16936 bytes left [ 199.713447][ T7254] pim6reg: entered allmulticast mode [ 199.727198][ T7254] pim6reg: left allmulticast mode [ 199.871490][ T7260] md: array md1 already has disks! [ 200.403392][ T7264] pim6reg: entered allmulticast mode [ 200.418830][ T7264] pim6reg: left allmulticast mode [ 200.941186][ T7260] md/raid:md1: not clean -- starting background reconstruction [ 200.983187][ T7260] md/raid:md1: device ram2 operational as raid disk 0 [ 200.990036][ T7260] md/raid:md1: device ram3 operational as raid disk 1 [ 201.100400][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 201.127564][ T7260] md/raid:md1: couldn't allocate thread. [ 201.260358][ T7278] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 201.344539][ T7260] md: pers->run() failed ... [ 201.543379][ T7271] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 201.803349][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 201.809544][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 201.999851][ T7295] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 203.812299][ T7310] pim6reg: entered allmulticast mode [ 203.826235][ T7310] pim6reg: left allmulticast mode [ 204.127657][ T7305] FAULT_INJECTION: forcing a failure. [ 204.127657][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 204.326754][ T7305] CPU: 0 PID: 7305 Comm: syz.3.376 Not tainted syzkaller #0 [ 204.334139][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.344298][ T7305] Call Trace: [ 204.347586][ T7305] [ 204.350527][ T7305] dump_stack_lvl+0x18c/0x250 [ 204.355226][ T7305] ? show_regs_print_info+0x20/0x20 [ 204.360436][ T7305] ? load_image+0x420/0x420 [ 204.364954][ T7305] ? __might_sleep+0xe0/0xe0 [ 204.369561][ T7305] ? __lock_acquire+0x7eb0/0x7eb0 [ 204.374608][ T7305] should_fail_ex+0x394/0x4c0 [ 204.379310][ T7305] should_failslab+0x9/0x20 [ 204.383825][ T7305] slab_pre_alloc_hook+0x59/0x300 [ 204.388862][ T7305] ? video_usercopy+0xd93/0x1360 [ 204.393823][ T7305] kmem_cache_alloc+0x5a/0x2d0 [ 204.398600][ T7305] ? getname_flags+0xbb/0x500 [ 204.403300][ T7305] getname_flags+0xbb/0x500 [ 204.407816][ T7305] do_sys_openat2+0xda/0x1d0 [ 204.412428][ T7305] ? do_sys_open+0xe0/0xe0 [ 204.416858][ T7305] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 204.422875][ T7305] ? lock_chain_count+0x20/0x20 [ 204.427749][ T7305] __x64_sys_openat+0x139/0x160 [ 204.432622][ T7305] do_syscall_64+0x55/0xb0 [ 204.437058][ T7305] ? clear_bhb_loop+0x40/0x90 [ 204.441754][ T7305] ? clear_bhb_loop+0x40/0x90 [ 204.446446][ T7305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.452354][ T7305] RIP: 0033:0x7fda2b19fb19 [ 204.456783][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.476489][ T7305] RSP: 002b:00007fda2c11d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.484921][ T7305] RAX: ffffffffffffffda RBX: 00007fda2b425fa0 RCX: 00007fda2b19fb19 [ 204.492909][ T7305] RDX: 00000000001c3902 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 204.500897][ T7305] RBP: 00007fda2b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 204.508877][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.516862][ T7305] R13: 00007fda2b426038 R14: 00007fda2b425fa0 R15: 00007ffc4ab16968 [ 204.524865][ T7305] [ 204.642069][ T7309] nvme_fabrics: missing parameter 'nqn=%s' [ 204.705767][ T7306] pim6reg: entered allmulticast mode [ 204.711969][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 204.721277][ T7316] pim6reg: left allmulticast mode [ 205.150217][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 205.190064][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 205.280568][ T7327] ceph: No mds server is up or the cluster is laggy [ 205.873668][ T7334] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 205.921115][ T7326] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 209.496486][ T7360] pim6reg: entered allmulticast mode [ 209.522299][ T7360] pim6reg: left allmulticast mode [ 210.047115][ T7369] pim6reg: entered allmulticast mode [ 210.210704][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 210.696444][ T7371] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 210.972536][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 211.062156][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 211.123343][ T7377] ceph: No mds server is up or the cluster is laggy [ 211.731713][ T8] libceph: connect (1)[c::]:6789 error -101 [ 211.785117][ T7385] ubi0: attaching mtd0 [ 211.795866][ T7385] ubi0: scanning is finished [ 211.800711][ T7385] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 211.988449][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 212.070343][ T7381] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 212.078714][ T7385] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 214.081478][ T7408] pim6reg: entered allmulticast mode [ 214.088904][ T7408] pim6reg: left allmulticast mode [ 215.258163][ T7417] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 216.248453][ T7427] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 216.971068][ T7435] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 217.216414][ T7435] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 217.631456][ T7432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 218.386827][ T7455] pim6reg: entered allmulticast mode [ 218.405184][ T7455] pim6reg: left allmulticast mode [ 218.612899][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 220.292968][ T7466] pim6reg: left allmulticast mode [ 220.300786][ T7468] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 221.521814][ T7480] ceph: No mds server is up or the cluster is laggy [ 221.662138][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 221.680404][ T5872] libceph: mon0 (1)[c::]:6789 connect error . %2`BMjz@Z®G,.jVݦZa퐖SDSˈA6]Zp4(GԝSvKXi9#;RIdTc z[ 223.162513][ T7498] pim6reg: entered allmulticast mode WʿQTQ @Z*}Ppa N[ 223.169892][ T7498] pim6reg: left allmulticast mode #Q*f])kX|Ut^b;*ZVbDTd4͉#v367mjo*Fc#QeiMizoCǣNt;G?@O4>W2Y͈!]Jɉ R<;^mo]9#4\pJ|(i!ӱ5)YoQXlZ</J%ӊAs@uL<\?'[uLfłNTesqɸ](-B)ʾe+p1NeҺqA8MRd0~UUw3!S8[ 223.209094][ T7494] md: serialize_policy is only effective for raid1 r9gX/ƍc%O*,5U~ƻ'UUF=AO5d P,xP,!Llj2g52xxH﹠Wt ==6@F)H,9BB<J.Z@i%upx;uIr {8lf@Tk`3rZvRIT-5_bғvxa^BKsAU|wJ((zAAmIA?eh ) ֐ˊ4VLճI=~2C %у62k'e&Dvf`1|n6Ȳco#|a]W'PX5 txHxN1z2N^v(-?%JN tTZaYDEG‘<ކҪIs<ߓUVG ԏqj5b%KifawX=^.Y 澣 ;TVT ӆ,MY n6Hõoώ^ H3H0_Yխg_֏ExM !/ Ɇ2L͏s[AI3ơ`fr_T ~WG"\N|?,̇e-/'/z(k |tѝq vZx4qS3cسnbC~LB^YD#{Bt! Ӏ=a 22ښDtt<~ztF}öNj6=t)5STr?3 SW#kϙZ[usΟK;ĆW? zɘWY~k| Ϫk@`[u$?y 4>JJI$<CJJ =4uR]QÛpkHA.[ 4aC/pk]P[6Phaou-c0>TjdGIZT k7*YTHҍ~1iz[mbyF ۖg0@Its|6ڋdhCɆ^XtwHQ{:@N.NbQ 0s=NM iAWl-JUS48z7³UsOh}.oIr I>cTX6yb_or 3e!\<~#kՌVپ'n|'l KCҴr3~1|ijwǾ4cHe6JU pAa6)m6@Dmb >:Nz#>F|nyʋR=v+F䒈mTdb#SMe>h "| (#Nu5^.ȺYV Cױ_PrXi6Ƌ^Wo2җ*G+u)rIVrQ}0h_W=N\~]C\L3-,ou:G3FގR .Uhq5j4DTն@9n6\6 bTݰ#_q 7˹=NRv(}} GXr^);mO)>c! kՠ4+ #i.^%cXLU8ayj!@9OµU(GuQ˿8ݶ(gIiJs!mo(.QTg<ٙC\BX`qqPKW#Fw3e7wő"# 80 3c 28 00 74 08 4c 89 e7 e8 40 76 b2 fd 49 8b 14 24 48 c7 c7 [ 244.927758][ T7761] RSP: 0018:ffffc9000b257a08 EFLAGS: 00010002 [ 244.933871][ T7761] RAX: 0000000000000001 RBX: ffff888031e040d0 RCX: 0000000000080000 [ 244.941876][ T7761] RDX: ffffc9000ce2a000 RSI: 0000000000001d57 RDI: 0000000000001d58 [ 244.949879][ T7761] RBP: 1ffff110063c081a R08: 0000000000000003 R09: 0000000000000004 [ 244.957882][ T7761] R10: dffffc0000000000 R11: fffff5200164af1c R12: 0000000000000008 [ 244.965883][ T7761] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000a02 [ 244.973902][ T7761] FS: 00007feb56e126c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 244.982862][ T7761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.989490][ T7761] CR2: 000000110c2ee99d CR3: 0000000030f48000 CR4: 00000000003506f0 [ 244.997514][ T7761] Call Trace: [ 245.000820][ T7761] [ 245.003778][ T7761] __mddev_suspend+0x2d1/0x630 [ 245.008592][ T7761] ? rcu_read_unlock+0xa0/0xa0 [ 245.013404][ T7761] ? _parse_integer_limit+0x19c/0x1e0 [ 245.018824][ T7761] ? kstrtoull+0x130/0x1d0 [ 245.023293][ T7761] raid_disks_store+0xb8/0x550 [ 245.028091][ T7761] ? md_attr_store+0x175/0x390 [ 245.032892][ T7761] ? __lock_acquire+0x7eb0/0x7eb0 [ 245.037956][ T7761] ? raid_disks_show+0x140/0x140 [ 245.042933][ T7761] ? do_raw_spin_unlock+0x121/0x230 [ 245.048174][ T7761] md_attr_store+0x19c/0x390 [ 245.052795][ T7761] ? sysfs_kf_read+0x360/0x360 [ 245.057591][ T7761] kernfs_fop_write_iter+0x3a4/0x520 [ 245.062913][ T7761] vfs_write+0x474/0x9a0 [ 245.067199][ T7761] ? file_end_write+0x250/0x250 [ 245.072092][ T7761] ? __fget_files+0x3fc/0x460 [ 245.076811][ T7761] ? __fdget_pos+0x2a3/0x330 [ 245.081437][ T7761] ? ksys_write+0x74/0x260 [ 245.085906][ T7761] ksys_write+0x151/0x260 [ 245.090279][ T7761] ? __ia32_sys_read+0x90/0x90 [ 245.095087][ T7761] ? lockdep_hardirqs_on+0x98/0x150 [ 245.100318][ T7761] do_syscall_64+0x55/0xb0 [ 245.104777][ T7761] ? clear_bhb_loop+0x40/0x90 [ 245.109492][ T7761] ? clear_bhb_loop+0x40/0x90 [ 245.114216][ T7761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.120158][ T7761] RIP: 0033:0x7feb55f9fb19 [ 245.124606][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.144253][ T7761] RSP: 002b:00007feb56e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.152704][ T7761] RAX: ffffffffffffffda RBX: 00007feb56225fa0 RCX: 00007feb55f9fb19 [ 245.160707][ T7761] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 245.168710][ T7761] RBP: 00007feb56037b70 R08: 0000000000000000 R09: 0000000000000000 [ 245.176714][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.184715][ T7761] R13: 00007feb56226038 R14: 00007feb56225fa0 R15: 00007ffe866a0d68 [ 245.192724][ T7761] [ 245.195773][ T7761] Modules linked in: [ 245.199699][ T7761] ---[ end trace 0000000000000000 ]--- [ 245.205182][ T7761] RIP: 0010:percpu_ref_kill_and_confirm+0xf1/0x130 [ 245.211729][ T7761] Code: 01 4c 8d 63 08 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 5e 76 b2 fd 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 40 76 b2 fd 49 8b 14 24 48 c7 c7 [ 245.231361][ T7761] RSP: 0018:ffffc9000b257a08 EFLAGS: 00010002 [ 245.237439][ T7761] RAX: 0000000000000001 RBX: ffff888031e040d0 RCX: 0000000000080000 [ 245.245412][ T7761] RDX: ffffc9000ce2a000 RSI: 0000000000001d57 RDI: 0000000000001d58 [ 245.253375][ T7761] RBP: 1ffff110063c081a R08: 0000000000000003 R09: 0000000000000004 [ 245.261339][ T7761] R10: dffffc0000000000 R11: fffff5200164af1c R12: 0000000000000008 [ 245.269313][ T7761] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000a02 [ 245.277294][ T7761] FS: 00007feb56e126c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 245.286216][ T7761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.292789][ T7761] CR2: 000000110c2ee99d CR3: 0000000030f48000 CR4: 00000000003506f0 [ 245.300756][ T7761] Kernel panic - not syncing: Fatal exception [ 246.437559][ T7761] Shutting down cpus with NMI [ 246.442462][ T7761] Kernel Offset: disabled [ 246.446787][ T7761] Rebooting in 86400 seconds..