last executing test programs: 9.22536389s ago: executing program 0 (id=772): socket$inet6(0xa, 0x1, 0x8010000000000084) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010000"], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x4, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x2, 0x4, 0x1, 0x0, 0xffffffff}) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={@mcast2={0xff, 0x5}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x7, 0x4450290}) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580), 0x171}}], 0x400000000000172, 0x4001c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, {"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", 0x1000}}, 0x1006) r4 = fsopen(&(0x7f0000001900)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000001980)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400001002dbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="8300040000a8000020001280080001007369740014000280080014000600000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f00000007c0)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 8.48963175s ago: executing program 1 (id=775): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecf", 0x8e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) unshare(0x10600) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) 7.486024283s ago: executing program 1 (id=778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100), 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x5) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 7.280550504s ago: executing program 3 (id=779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100), 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 6.670332406s ago: executing program 2 (id=780): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 6.212050086s ago: executing program 2 (id=781): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 5.159730918s ago: executing program 0 (id=782): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 5.042174203s ago: executing program 3 (id=783): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecf", 0x8e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r7, 0x900) unshare(0x10600) read$watch_queue(0xffffffffffffffff, &(0x7f0000001d40)=""/4081, 0xff1) 4.988537044s ago: executing program 2 (id=784): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000440)=r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000480)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000740)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x11) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400001002dbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="8300040000a8000020001280080001007369740014000280080014000600000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f00000007c0)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 4.391034s ago: executing program 2 (id=785): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000440)=r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000480)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000740)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x11) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400001002dbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="8300040000a8000020001280080001007369740014000280080014000600000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f00000007c0)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 4.390502058s ago: executing program 1 (id=786): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecf", 0x8e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_open_pts(0xffffffffffffffff, 0x900) unshare(0x10600) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) 3.710682233s ago: executing program 3 (id=787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100), 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 3.63105497s ago: executing program 0 (id=788): r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x8000, "8712c0a3833598f85991b897c0065fdb2f9d38dba565e353ee57fceeca13e8e1", 0xffffffffffffffff}) sendfile(r1, r2, &(0x7f0000000140)=0x80000001, 0xfffffffa) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x3c}}, 0x24000840) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x30000001}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 3.440350943s ago: executing program 2 (id=789): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 3.307922283s ago: executing program 1 (id=790): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) getpgid(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x6, 0xab, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0x1, 0x28, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xe, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x3, 0x3, [{0x9, 0x6}, {0xd3, 0x3}, {0x1, 0x4}], 0xdc}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xf8, 0xd}, {0x6, 0x2}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x79ed, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0x40, 0x10}, {0x2, 0x7}, {0x5, 0x1}, {0xf, 0x1}]}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x2, 0x8, 0xff, {0x13, 0x25, 0x1, 0xf, "cffe55852e07ddc35eb3ed095717d6"}}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xf7, 0x7, 0xf, {0xd, 0x25, 0x1, 0x9, "e09b37d206e5cc0378"}}}, {{0x9, 0x5, 0x5, 0x4, 0x438, 0x0, 0xca, 0x9, {0x11, 0x25, 0x1, 0xd, "335e3d872edb9db13d21e491af"}}}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc9, 0xd, 0xd, 0x20, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x525b}}, {0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "d3a166b033d2984a2100dd580a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282ef7d0f131fcb5}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "036b7cd2094ea514d830bb3b14f5691df686ba4f78e9f3bec73de807c03f7531370e84e8348b388cf2058422c574edba6828ac6a4b5c8185a1910cd717ef47e42c324996d137239eb90983378075cb21c71e0edaceae4ee0ae5aba94d8aa71a278d42b72b046a43114c551f076bf1010c655db55d89d3a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_connect$midi(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 2.921066403s ago: executing program 3 (id=791): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000480)=@str='2', 0x1) syz_io_uring_setup(0x7890, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./debug\x00', &(0x7f0000000640)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./debug/netdevsim/netdevsim0/take_snapshot\x00', 0x1, 0x0) write(r5, 0x0, 0x0) syz_io_uring_setup(0x4c4f, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00'}) 2.595392869s ago: executing program 0 (id=792): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 2.590508338s ago: executing program 2 (id=793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100), 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 1.380641028s ago: executing program 0 (id=794): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000440)=r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000480)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000740)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x11) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400001002dbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="8300040000a8000020001280080001007369740014000280080014000600000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f00000007c0)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 1.080407189s ago: executing program 3 (id=795): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r6, 0x900) unshare(0x10600) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(0xffffffffffffffff, &(0x7f0000001d40)=""/4081, 0xff1) 887.740655ms ago: executing program 0 (id=796): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 111.792693ms ago: executing program 1 (id=797): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x10, 0x800000000000002}, 0xffffffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f00000000c0)=0x9, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 0s ago: executing program 3 (id=798): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecf", 0x8e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_open_pts(0xffffffffffffffff, 0x900) unshare(0x10600) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) kernel console output (not intermixed with test programs): : port 1(bridge_slave_0) entered blocking state [ 40.221651][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.224653][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.227956][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.246484][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.246568][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.350921][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.368971][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.385599][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.385725][ T726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.400585][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.400686][ T726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.427890][ T5799] Bluetooth: hci1: command tx timeout [ 40.428056][ T5799] Bluetooth: hci3: command tx timeout [ 40.428071][ T5795] Bluetooth: hci2: command tx timeout [ 40.436956][ T5795] Bluetooth: hci0: command tx timeout [ 40.539155][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.570097][ T5787] veth0_vlan: entered promiscuous mode [ 40.582875][ T5787] veth1_vlan: entered promiscuous mode [ 40.600935][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.614472][ T5787] veth0_macvtap: entered promiscuous mode [ 40.619970][ T5787] veth1_macvtap: entered promiscuous mode [ 40.639130][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.645637][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.657901][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.658050][ T5785] veth0_vlan: entered promiscuous mode [ 40.671074][ T5785] veth1_vlan: entered promiscuous mode [ 40.713407][ T5785] veth0_macvtap: entered promiscuous mode [ 40.734046][ T5785] veth1_macvtap: entered promiscuous mode [ 40.751038][ T5786] veth0_vlan: entered promiscuous mode [ 40.757561][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.757574][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.773751][ T5786] veth1_vlan: entered promiscuous mode [ 40.781182][ T726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.781195][ T726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.793970][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.813805][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.815580][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.826663][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.827381][ T5786] veth0_macvtap: entered promiscuous mode [ 40.832669][ T5786] veth1_macvtap: entered promiscuous mode [ 40.869304][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.885494][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.897637][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.898503][ T5793] veth0_vlan: entered promiscuous mode [ 40.900782][ T5787] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.901741][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.901777][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.901803][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.901829][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.902561][ T5787] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.903362][ T5787] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.905659][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.905670][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.912918][ T5793] veth1_vlan: entered promiscuous mode [ 40.913637][ T5787] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.925188][ T5793] veth0_macvtap: entered promiscuous mode [ 40.926293][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926316][ T5890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926333][ T5890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926350][ T5890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926367][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926384][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926400][ T5890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.927830][ T5793] veth1_macvtap: entered promiscuous mode [ 40.933955][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.938728][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.956414][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.956448][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.956466][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.956483][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.005148][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.005160][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.034112][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.034125][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.062778][ T726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.062790][ T726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.078318][ T726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.078329][ T726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.091411][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.091422][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.300358][ T5955] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 41.301170][ T5955] xt_TPROXY: Can be used only with -p tcp or -p udp [ 41.304411][ T5955] Bluetooth: MGMT ver 1.23 [ 41.354880][ T5958] Zero length message leads to an empty skb [ 41.716339][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.237265][ T63] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 42.238443][ T63] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.238468][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.286101][ T63] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 42.287013][ T63] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 42.287046][ T63] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 42.288643][ T63] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 42.289554][ T63] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 42.295491][ T63] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 42.299029][ T63] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 42.299066][ T63] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 42.304351][ T63] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 42.506333][ T5795] Bluetooth: hci1: command tx timeout [ 42.506368][ T5795] Bluetooth: hci0: command tx timeout [ 42.506386][ T5795] Bluetooth: hci2: command tx timeout [ 42.506400][ T5795] Bluetooth: hci3: command tx timeout [ 42.689248][ T145] IPVS: starting estimator thread 0... [ 42.696221][ T5981] xt_REDIRECT: bad MAP_IPS. [ 42.697260][ T5981] syzkaller0: entered promiscuous mode [ 42.697278][ T5981] syzkaller0: entered allmulticast mode [ 42.786510][ T5986] IPVS: using max 24 ests per chain, 57600 per kthread [ 44.380338][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 44.380410][ T6034] bridge_slave_1: left allmulticast mode [ 44.380429][ T6034] bridge_slave_1: left promiscuous mode [ 44.381530][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.384423][ T6034] bridge_slave_0: left allmulticast mode [ 44.384441][ T6034] bridge_slave_0: left promiscuous mode [ 44.384544][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.512717][ T29] usb 6-1: USB disconnect, device number 2 [ 44.518849][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 44.527424][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 44.527725][ T29] keyspan 6-1:1.0: device disconnected [ 44.586204][ T5799] Bluetooth: hci3: command tx timeout [ 44.586237][ T5799] Bluetooth: hci0: command tx timeout [ 44.586274][ T67] Bluetooth: hci1: command tx timeout [ 44.586343][ T5795] Bluetooth: hci2: command tx timeout [ 44.828046][ T6039] Set syz1 is full, maxelem 6117 reached [ 45.235716][ T6051] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.116860][ T6064] ublk_ctrl_add_dev: invalid recovery flags 10 [ 46.166993][ T6061] block nbd0: server does not support multiple connections per device. [ 46.170555][ T6061] block nbd0: shutting down sockets [ 46.181200][ T6066] bridge_slave_0: left allmulticast mode [ 46.181221][ T6066] bridge_slave_0: left promiscuous mode [ 46.181414][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.476006][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 46.678485][ T5795] Bluetooth: hci3: command tx timeout [ 46.678508][ T5795] Bluetooth: hci0: command tx timeout [ 46.678521][ T5795] Bluetooth: hci2: command tx timeout [ 46.678533][ T5795] Bluetooth: hci1: command tx timeout [ 48.896997][ T6071] device-mapper: table: 248:0: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 48.897017][ T6071] device-mapper: ioctl: error adding target to table [ 49.839458][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.406198][ T1170] IPVS: starting estimator thread 0... [ 51.506120][ T6118] IPVS: using max 28 ests per chain, 67200 per kthread [ 51.870326][ T6128] Invalid ELF header magic: != ELF [ 51.961732][ T6128] ======================================================= [ 51.961732][ T6128] WARNING: The mand mount option has been deprecated and [ 51.961732][ T6128] and is ignored by this kernel. Remove the mand [ 51.961732][ T6128] option from the mount to silence this warning. [ 51.961732][ T6128] ======================================================= [ 52.611033][ T6140] (syz.0.35,6140,2):o2hb_bio_end_io:548 ERROR: IO Error 10 [ 52.611211][ T6140] (syz.0.35,6140,2):__o2hb_region_dev_store:1956 ERROR: status = -5 [ 52.716003][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.725293][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 52.880697][ T10] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 52.899416][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.899584][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.936019][ T5892] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.015212][ T10] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 53.017264][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 53.017705][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 53.056030][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 53.056652][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 53.095386][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 53.107093][ T5892] usb 7-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 53.108062][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.108082][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 53.108111][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.117714][ T5892] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 53.121266][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 53.121465][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 53.132423][ T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 53.477953][ T6150] IPv6: addrconf: prefix option has invalid lifetime [ 54.440770][ T5873] usb 7-1: USB disconnect, device number 2 [ 54.445099][ T5873] idmouse 7-1:1.0: disconnected [ 55.526795][ T860] usb 6-1: USB disconnect, device number 3 [ 55.536456][ T860] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 55.561618][ T860] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 55.562110][ T860] keyspan 6-1:1.0: device disconnected [ 55.640617][ T42] audit: type=1326 audit(1793975570.414:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.1.40" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fefbc code=0x0 [ 57.035645][ T6172] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.099722][ T6172] socket: no more sockets [ 60.722518][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 61.894253][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.55'. [ 61.894344][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.55'. [ 62.055552][ T6238] FAULT_INJECTION: forcing a failure. [ 62.055552][ T6238] name failslab, interval 1, probability 0, space 0, times 1 [ 62.055579][ T6238] CPU: 1 UID: 0 PID: 6238 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 62.055596][ T6238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.055622][ T6238] Call Trace: [ 62.055638][ T6238] [ 62.055644][ T6238] dump_stack_lvl+0x100/0x190 [ 62.055677][ T6238] should_fail_ex.cold+0x5/0xa [ 62.055702][ T6238] should_failslab+0xc2/0x120 [ 62.055730][ T6238] __kmalloc_cache_noprof+0x91/0x6d0 [ 62.055755][ T6238] ? assoc_array_insert+0x10b/0x32c0 [ 62.055781][ T6238] assoc_array_insert+0x10b/0x32c0 [ 62.055800][ T6238] ? __mutex_lock+0x267/0x1c10 [ 62.055830][ T6238] ? __key_link_lock+0x92/0xb0 [ 62.055880][ T6238] ? __pfx___mutex_lock+0x10/0x10 [ 62.055911][ T6238] ? __pfx_assoc_array_insert+0x10/0x10 [ 62.055937][ T6238] ? down_write+0x141/0x1f0 [ 62.055966][ T6238] ? __pfx_down_write+0x10/0x10 [ 62.056015][ T6238] __key_link_begin+0xf5/0x260 [ 62.056037][ T6238] key_instantiate_and_link+0x201/0x4b0 [ 62.056069][ T6238] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 62.056098][ T6238] ? keyctl_get_persistent+0x4b4/0x860 [ 62.056133][ T6238] keyring_alloc+0x7a/0xc0 [ 62.056154][ T6238] keyctl_get_persistent+0x694/0x860 [ 62.056176][ T6238] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 62.056194][ T6238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.056231][ T6238] ? find_held_lock+0x2b/0x80 [ 62.056256][ T6238] ? __might_fault+0xc5/0x140 [ 62.056279][ T6238] ? __might_fault+0xc5/0x140 [ 62.056305][ T6238] __ia32_compat_sys_keyctl+0x38f/0x550 [ 62.056337][ T6238] __do_fast_syscall_32+0x14b/0x8c0 [ 62.056368][ T6238] do_fast_syscall_32+0x32/0x70 [ 62.056396][ T6238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.056419][ T6238] RIP: 0023:0xf7f44fbc [ 62.056435][ T6238] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 62.056451][ T6238] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 62.056469][ T6238] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 62.056481][ T6238] RDX: 0000000012d77171 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.056492][ T6238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.056501][ T6238] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.056511][ T6238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.056536][ T6238] [ 65.285332][ T6295] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 65.383560][ T6296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 65.797522][ T6313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.800869][ T6311] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 65.820049][ T6313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.824978][ T6313] bond0 (unregistering): Released all slaves [ 65.851683][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 65.899366][ T6311] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 66.135591][ T6318] cgroup: No subsys list or none specified [ 68.049849][ T6345] syzkaller1: entered promiscuous mode [ 68.049862][ T6345] syzkaller1: entered allmulticast mode [ 68.346417][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 68.436749][ T6353] overlayfs: failed to resolve './file0': -2 [ 69.160130][ T42] audit: type=1326 audit(1793975583.934:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 69.160174][ T42] audit: type=1326 audit(1793975583.934:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 69.160210][ T42] audit: type=1326 audit(1793975583.934:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 69.162662][ T42] audit: type=1326 audit(1793975583.934:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.0.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 69.211465][ T6358] ublk_ctrl_add_dev: invalid recovery flags 10 [ 69.284797][ T6359] bridge_slave_0: left allmulticast mode [ 69.284822][ T6359] bridge_slave_0: left promiscuous mode [ 69.285046][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.658844][ T6367] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 69.935995][ T3303] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.110061][ T6367] jffs2: notice: (6367) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.231307][ T3303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.231334][ T3303] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 70.232005][ T3303] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 70.232020][ T3303] usb 5-1: can't read configurations, error -71 [ 70.999957][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.999995][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.003180][ T79] cfg80211: failed to load regulatory.db [ 71.942910][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 72.152344][ T6399] syzkaller0: entered promiscuous mode [ 72.152364][ T6399] syzkaller0: entered allmulticast mode [ 72.166768][ T6399] tipc: Started in network mode [ 72.166795][ T6399] tipc: Node identity 42aa18b9db38, cluster identity 4711 [ 72.168398][ T6399] tipc: Enabled bearer , priority 0 [ 72.180191][ T6399] tipc: Resetting bearer [ 72.189936][ T6398] tipc: Resetting bearer [ 72.206303][ T6401] jffs2: notice: (6401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.206733][ T6398] tipc: Disabling bearer [ 72.936097][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.096469][ T5892] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 73.097303][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.097316][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 73.097333][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.100975][ T5892] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 73.130026][ T5892] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 73.467743][ T6397] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 73.469407][ T6397] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 73.471270][ T6397] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 73.666474][ T6396] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 73.670518][ T5892] usb 7-1: USB disconnect, device number 3 [ 73.687136][ T5892] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 73.687610][ T5892] spcp8x5 7-1:1.0: device disconnected [ 74.899941][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 76.655551][ T6454] macvlan0: entered promiscuous mode [ 76.655871][ T6454] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 76.655978][ T6454] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 76.867278][ T6451] ftl_cs: FTL header not found. [ 77.006810][ T6451] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 77.250143][ T6475] FAULT_INJECTION: forcing a failure. [ 77.250143][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 77.250178][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT(full) [ 77.250200][ T6475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.250212][ T6475] Call Trace: [ 77.250219][ T6475] [ 77.250227][ T6475] dump_stack_lvl+0x100/0x190 [ 77.250262][ T6475] should_fail_ex.cold+0x5/0xa [ 77.250290][ T6475] should_failslab+0xc2/0x120 [ 77.250315][ T6475] __kmalloc_cache_node_noprof+0x94/0x710 [ 77.250339][ T6475] ? __alloc_disk_node+0x5a/0x730 [ 77.250367][ T6475] __alloc_disk_node+0x5a/0x730 [ 77.250393][ T6475] __blk_mq_alloc_disk+0x89/0x120 [ 77.250413][ T6475] null_add_dev+0xdf8/0x1df0 [ 77.250447][ T6475] ? __pfx_null_add_dev+0x10/0x10 [ 77.250471][ T6475] ? __lock_acquire+0x5c0/0x1f40 [ 77.250509][ T6475] ? __pfx___might_resched+0x10/0x10 [ 77.250544][ T6475] nullb_device_power_store+0x29d/0x350 [ 77.250565][ T6475] ? __pfx_nullb_device_power_store+0x10/0x10 [ 77.250611][ T6475] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 77.250643][ T6475] ? configfs_write_iter+0x388/0x4e0 [ 77.250695][ T6475] configfs_write_iter+0x302/0x4e0 [ 77.250729][ T6475] vfs_write+0x6af/0x1050 [ 77.250752][ T6475] ? __pfx_configfs_write_iter+0x10/0x10 [ 77.250783][ T6475] ? __pfx_vfs_write+0x10/0x10 [ 77.250802][ T6475] ? find_held_lock+0x2b/0x80 [ 77.250848][ T6475] ksys_write+0x12a/0x250 [ 77.250868][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 77.250897][ T6475] __do_fast_syscall_32+0x14b/0x8c0 [ 77.250925][ T6475] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.250954][ T6475] do_fast_syscall_32+0x32/0x70 [ 77.250982][ T6475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.251007][ T6475] RIP: 0023:0xf7fd6fbc [ 77.251023][ T6475] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 77.251042][ T6475] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 77.251061][ T6475] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000c40 [ 77.251073][ T6475] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.251084][ T6475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.251095][ T6475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.251106][ T6475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.251132][ T6475] [ 77.260705][ T6477] syzkaller0: entered promiscuous mode [ 77.260720][ T6477] syzkaller0: entered allmulticast mode [ 77.444870][ T6480] lo speed is unknown, defaulting to 1000 [ 77.444903][ T6480] lo speed is unknown, defaulting to 1000 [ 77.448821][ T6480] lo speed is unknown, defaulting to 1000 [ 77.452163][ T6480] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 77.452243][ T6480] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 77.452290][ T6480] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 77.484445][ T6480] lo speed is unknown, defaulting to 1000 [ 77.494993][ T6480] lo speed is unknown, defaulting to 1000 [ 78.322665][ T6480] lo speed is unknown, defaulting to 1000 [ 78.342874][ T6480] lo speed is unknown, defaulting to 1000 [ 78.651830][ T6494] jffs2: notice: (6494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.672275][ T6497] netlink: 'syz.1.114': attribute type 39 has an invalid length. [ 78.741753][ T42] audit: type=1400 audit(1793975593.514:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=6496 comm="syz.1.114" [ 78.767669][ T6499] can0: slcan on ttyS3. [ 79.156130][ T6505] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.197521][ T6505] macvlan0: left promiscuous mode [ 79.271144][ T41] lo speed is unknown, defaulting to 1000 [ 79.317998][ T6496] can0 (unregistered): slcan off ttyS3. [ 80.123449][ T6533] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.202740][ T6534] team0: Device xfrm0 is of different type [ 80.369026][ T6533] lo speed is unknown, defaulting to 1000 [ 84.083662][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.084442][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.085406][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.099206][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.104082][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.105105][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.110418][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.124411][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.125244][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.125824][ T6605] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.276370][ T79] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.446055][ T79] usb 6-1: Using ep0 maxpacket: 8 [ 85.446532][ T79] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 85.447241][ T79] usb 6-1: config 0 has no interfaces? [ 85.447257][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.525132][ T79] usb 6-1: config 0 descriptor?? [ 85.752273][ T6616] sd 0:0:0:0: PR command failed: 1026 [ 85.752298][ T6616] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 85.752317][ T6616] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 85.798514][ T79] usb 6-1: USB disconnect, device number 4 [ 87.561067][ T6657] random: crng reseeded on system resumption [ 88.349483][ T6673] pim6reg: entered allmulticast mode [ 88.535313][ T6667] syz.1.148: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 88.535438][ T6667] CPU: 2 UID: 0 PID: 6667 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 88.535462][ T6667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.535474][ T6667] Call Trace: [ 88.535481][ T6667] [ 88.535489][ T6667] dump_stack_lvl+0x100/0x190 [ 88.535524][ T6667] warn_alloc.cold+0x9e/0xb2 [ 88.535547][ T6667] ? __pfx_warn_alloc+0x10/0x10 [ 88.535584][ T6667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.535614][ T6667] ? __pfx_get_page_from_freelist+0x10/0x10 [ 88.535650][ T6667] __alloc_frozen_pages_noprof+0xafd/0x31e0 [ 88.535692][ T6667] ? do_raw_spin_lock+0x128/0x260 [ 88.535718][ T6667] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.535775][ T6667] ? mark_held_locks+0x40/0x70 [ 88.535797][ T6667] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.535823][ T6667] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.535851][ T6667] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.535884][ T6667] ? __kasan_kmalloc+0xaa/0xb0 [ 88.535904][ T6667] ? __kmalloc_noprof+0x32f/0x840 [ 88.535921][ T6667] ? comedi_isadma_alloc+0xc6/0x620 [ 88.535963][ T6667] ? pcl816_attach+0x909/0xb30 [ 88.535997][ T6667] alloc_pages_node_noprof+0x93/0x200 [ 88.536027][ T6667] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 88.536065][ T6667] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 88.536096][ T6667] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 88.536126][ T6667] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 88.536152][ T6667] dma_direct_alloc+0x3d1/0x8a0 [ 88.536190][ T6667] dma_alloc_attrs+0x1b9/0x3e0 [ 88.536222][ T6667] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 88.536249][ T6667] ? __kmalloc_noprof+0x350/0x840 [ 88.536268][ T6667] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.536291][ T6667] ? dma_direct_supported+0xca/0x220 [ 88.536316][ T6667] comedi_isadma_alloc+0x331/0x620 [ 88.536344][ T6667] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 88.536371][ T6667] ? request_threaded_irq+0x27b/0x3e0 [ 88.536397][ T6667] pcl816_attach+0x909/0xb30 [ 88.536421][ T6667] comedi_device_attach+0x40e/0x6b0 [ 88.536449][ T6667] do_devconfig_ioctl+0x1b3/0x6d0 [ 88.536472][ T6667] ? comedi_unlocked_ioctl+0x180/0x3310 [ 88.536502][ T6667] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 88.536539][ T6667] ? tomoyo_path_number_perm+0x46d/0x580 [ 88.536567][ T6667] ? kasan_save_stack+0x3f/0x50 [ 88.536587][ T6667] ? kasan_save_stack+0x30/0x50 [ 88.536606][ T6667] ? kasan_save_track+0x14/0x30 [ 88.536626][ T6667] ? kasan_save_free_info+0x3b/0x70 [ 88.536658][ T6667] comedi_unlocked_ioctl+0x860/0x3310 [ 88.536692][ T6667] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 88.536741][ T6667] ? kasan_quarantine_put+0x104/0x240 [ 88.536761][ T6667] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.536789][ T6667] ? find_held_lock+0x2b/0x80 [ 88.536816][ T6667] ? tomoyo_path_number_perm+0x28f/0x580 [ 88.536842][ T6667] ? tomoyo_path_number_perm+0x28f/0x580 [ 88.536875][ T6667] ? tomoyo_path_number_perm+0x188/0x580 [ 88.536908][ T6667] comedi_compat_ioctl+0x438/0xe20 [ 88.536938][ T6667] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 88.536967][ T6667] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.536993][ T6667] ? do_vfs_ioctl+0x226/0x13e0 [ 88.537017][ T6667] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 88.537042][ T6667] ? __fget_files+0x34/0x3d0 [ 88.537065][ T6667] ? find_held_lock+0x2b/0x80 [ 88.537090][ T6667] ? __fget_files+0x215/0x3d0 [ 88.537110][ T6667] ? hook_file_ioctl_common+0x140/0x440 [ 88.537144][ T6667] ? __fget_files+0x21f/0x3d0 [ 88.537177][ T6667] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 88.537206][ T6667] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 88.537230][ T6667] __do_fast_syscall_32+0x14b/0x8c0 [ 88.537259][ T6667] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.537289][ T6667] do_fast_syscall_32+0x32/0x70 [ 88.537320][ T6667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.537344][ T6667] RIP: 0023:0xf73fefbc [ 88.537361][ T6667] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 88.537377][ T6667] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 88.537395][ T6667] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400 [ 88.537407][ T6667] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.537418][ T6667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.537428][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.537439][ T6667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.537464][ T6667] [ 88.539099][ T6667] Mem-Info: [ 88.539111][ T6667] active_anon:5489 inactive_anon:1993 isolated_anon:0 [ 88.539111][ T6667] active_file:4065 inactive_file:23535 isolated_file:0 [ 88.539111][ T6667] unevictable:3047 dirty:966 writeback:0 [ 88.539111][ T6667] slab_reclaimable:6616 slab_unreclaimable:55912 [ 88.539111][ T6667] mapped:23925 shmem:1541 pagetables:1164 [ 88.539111][ T6667] sec_pagetables:304 bounce:0 [ 88.539111][ T6667] kernel_misc_reclaimable:0 [ 88.539111][ T6667] free:46613 free_pcp:0 free_cma:0 [ 88.539164][ T6667] Node 0 active_anon:4kB inactive_anon:524kB active_file:84kB inactive_file:940kB unevictable:2240kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:16kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1352kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 88.539212][ T6667] Node 0 DMA free:2448kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.539265][ T6667] lowmem_reserve[]: 0 256 256 256 256 [ 88.539300][ T6667] Node 0 DMA: 54*4kB (U) 5*8kB (U) 5*16kB (U) 22*32kB (U) 6*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2448kB [ 88.539429][ T6667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.539442][ T6667] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.539453][ T6667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.539467][ T6667] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.539478][ T6667] 29893 total pagecache pages [ 88.539484][ T6667] 758 pages in swap cache [ 88.539490][ T6667] Free swap = 119756kB [ 88.539496][ T6667] Total swap = 124996kB [ 88.539503][ T6667] 524155 pages RAM [ 88.539508][ T6667] 0 pages HighMem/MovableOnly [ 88.539514][ T6667] 217688 pages reserved [ 88.539520][ T6667] 0 pages cma reserved [ 88.735522][ T6676] nvmet: adding nsid 1 to subsystem testsubsys [ 88.938597][ T6671] pim6reg: left allmulticast mode [ 89.336755][ T6675] null_blk: disk nullb1 created [ 89.453114][ T6676] block device autoloading is deprecated and will be removed. [ 89.556723][ T6467] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:662e780d-f329-4263-8984-3ae5184c525b. [ 89.568878][ T6675] nvme nvme0: creating 4 I/O queues. [ 89.591038][ T6675] nvme nvme0: new ctrl: "testsubsys" [ 90.912518][ T6700] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 90.941450][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 90.992806][ T6700] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 91.036253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.116263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.125956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 91.156263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.335921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 91.345962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #380!!! [ 91.365978][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 91.375919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #380!!! [ 91.406269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.515978][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 91.524561][ T10] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 91.525340][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 91.525352][ T10] usb 8-1: config 0 has no interface number 0 [ 91.525368][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.525379][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 91.525390][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.525401][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.525419][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.530920][ T10] usb 8-1: config 0 descriptor?? [ 91.546073][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 91.565930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 91.816782][ T6702] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.084443][ T6702] lo speed is unknown, defaulting to 1000 [ 92.235285][ T50] usb 8-1: USB disconnect, device number 2 [ 92.239259][ T50] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 92.296274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.398501][ T6721] jffs2: notice: (6721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 92.587470][ T6729] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 92.621973][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 92.638018][ T6729] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 92.643114][ T6733] netlink: 'syz.2.167': attribute type 39 has an invalid length. [ 92.700501][ T42] audit: type=1400 audit(1793975607.474:8): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=6732 comm="syz.2.167" [ 92.762960][ T6736] can0: slcan on ttyS3. [ 93.038480][ T6732] can0 (unregistered): slcan off ttyS3. [ 94.687285][ T6769] jffs2: notice: (6769) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 95.082740][ T6778] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 95.105587][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 95.136790][ T6778] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 95.370013][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 97.159404][ T6811] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 97.194515][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 97.244968][ T6811] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 99.623441][ T6847] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 99.740516][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 99.772793][ T6847] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 100.894921][ T6867] socket: no more sockets [ 100.924093][ T6867] syz.2.203: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.924408][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT(full) [ 100.924420][ T6867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.924426][ T6867] Call Trace: [ 100.924431][ T6867] [ 100.924436][ T6867] dump_stack_lvl+0x100/0x190 [ 100.924456][ T6867] warn_alloc.cold+0x9e/0xb2 [ 100.924469][ T6867] ? __pfx_warn_alloc+0x10/0x10 [ 100.924484][ T6867] ? policy_nodemask+0xed/0x5e0 [ 100.924499][ T6867] ? alloc_pages_mpol+0x260/0x560 [ 100.924513][ T6867] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 100.924527][ T6867] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 100.924543][ T6867] ? __get_vm_area_node+0x22b/0x350 [ 100.924557][ T6867] __vmalloc_node_range_noprof+0x1051/0x1440 [ 100.924575][ T6867] ? io_uring_setup.cold+0x1f4/0x1c0e [ 100.924589][ T6867] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 100.924603][ T6867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.924617][ T6867] ? rcu_is_watching+0x13/0xc0 [ 100.924636][ T6867] __kvmalloc_node_noprof+0x3da/0x9b0 [ 100.924647][ T6867] ? io_uring_setup.cold+0x1f4/0x1c0e [ 100.924658][ T6867] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 100.924673][ T6867] ? io_uring_setup.cold+0x1f4/0x1c0e [ 100.924687][ T6867] io_uring_setup.cold+0x1f4/0x1c0e [ 100.924699][ T6867] ? __pfx__printk+0x10/0x10 [ 100.924709][ T6867] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.924723][ T6867] ? __pfx_io_uring_setup+0x10/0x10 [ 100.924742][ T6867] ? __lock_acquire+0x5c0/0x1f40 [ 100.924761][ T6867] ? find_held_lock+0x2b/0x80 [ 100.924775][ T6867] ? __might_fault+0xc5/0x140 [ 100.924788][ T6867] ? __might_fault+0xc5/0x140 [ 100.924803][ T6867] __ia32_sys_io_uring_setup+0xc2/0x170 [ 100.924820][ T6867] __do_fast_syscall_32+0x14b/0x8c0 [ 100.924837][ T6867] do_fast_syscall_32+0x32/0x70 [ 100.924854][ T6867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.924867][ T6867] RIP: 0023:0xf745efbc [ 100.924877][ T6867] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.924887][ T6867] RSP: 002b:00000000f54764bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 100.924896][ T6867] RAX: ffffffffffffffda RBX: 000000000000096d RCX: 0000000080000040 [ 100.924903][ T6867] RDX: 00000000f71e1997 RSI: 0000000000000001 RDI: 00000000f547653c [ 100.924909][ T6867] RBP: 00000000800000c0 R08: 0000000000000000 R09: 0000000000000000 [ 100.924930][ T6867] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.924936][ T6867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.924949][ T6867] [ 100.925017][ T6867] Mem-Info: [ 100.925024][ T6867] active_anon:4654 inactive_anon:1586 isolated_anon:0 [ 100.925024][ T6867] active_file:4599 inactive_file:22129 isolated_file:0 [ 100.925024][ T6867] unevictable:1000 dirty:79 writeback:0 [ 100.925024][ T6867] slab_reclaimable:7040 slab_unreclaimable:55663 [ 100.925024][ T6867] mapped:24116 shmem:1543 pagetables:1145 [ 100.925024][ T6867] sec_pagetables:304 bounce:0 [ 100.925024][ T6867] kernel_misc_reclaimable:0 [ 100.925024][ T6867] free:41759 free_pcp:9155 free_cma:0 [ 100.925048][ T6867] Node 0 active_anon:0kB inactive_anon:16kB active_file:84kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:1244kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 100.925073][ T6867] Node 1 active_anon:18616kB inactive_anon:6328kB active_file:18312kB inactive_file:88512kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96376kB dirty:316kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5692kB pagetables:3336kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 100.925097][ T6867] Node 0 DMA free:2268kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 100.925124][ T6867] lowmem_reserve[]: 0 256 256 256 256 [ 100.925141][ T6867] Node 0 DMA32 free:15904kB boost:2048kB min:13592kB low:16476kB high:19360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:16kB active_file:84kB inactive_file:4kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:262300kB mlocked:0kB bounce:0kB free_pcp:4004kB local_pcp:60kB free_cma:0kB [ 100.925168][ T6867] lowmem_reserve[]: 0 0 0 0 0 [ 100.925184][ T6867] Node 1 DMA32 free:148864kB boost:14336kB min:61472kB low:73256kB high:85040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:18616kB inactive_anon:6328kB active_file:18312kB inactive_file:88512kB unevictable:2000kB writepending:316kB zspages:1844kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:32536kB local_pcp:10756kB free_cma:0kB [ 100.925211][ T6867] lowmem_reserve[]: 0 0 0 0 0 [ 100.925231][ T6867] Node 0 DMA: 17*4kB (U) 5*8kB (U) 1*16kB (U) 23*32kB (U) 6*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2268kB [ 100.925301][ T6867] Node 0 DMA32: 0*4kB 2*8kB (UE) 9*16kB (ME) 44*32kB (UME) 38*64kB (UME) 19*128kB (UME) 11*256kB (UM) 7*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 15904kB [ 100.925370][ T6867] Node 1 DMA32: 510*4kB (UM) 608*8kB (UM) 482*16kB (UME) 228*32kB (UME) 270*64kB (UME) 192*128kB (UME) 90*256kB (UME) 39*512kB (UME) 19*1024kB (UM) 11*2048kB (UM) 0*4096kB = 148760kB [ 100.925445][ T6867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.925453][ T6867] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.925460][ T6867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.925467][ T6867] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.925474][ T6867] 29016 total pagecache pages [ 100.925477][ T6867] 751 pages in swap cache [ 100.925481][ T6867] Free swap = 119764kB [ 100.925484][ T6867] Total swap = 124996kB [ 100.925488][ T6867] 524155 pages RAM [ 100.925491][ T6867] 0 pages HighMem/MovableOnly [ 100.925494][ T6867] 217688 pages reserved [ 100.925497][ T6867] 0 pages cma reserved [ 101.144543][ T6874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.171166][ T6874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.180537][ T6874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.483629][ T6884] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.731563][ T6886] capability: warning: `syz.0.207' uses deprecated v2 capabilities in a way that may be insecure [ 101.857176][ T6884] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 101.858206][ T6884] overlayfs: failed to look up (tracing) for ino (-66) [ 102.502717][ T6892] input: syz0 as /devices/virtual/input/input5 [ 102.657606][ T6456] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 104.668620][ T5795] Bluetooth: hci4: command 0x1003 tx timeout [ 104.668765][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.918203][ T6938] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 106.937844][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 107.200147][ T6943] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.662292][ T6938] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 108.036580][ T6941] sctp_transport_update_pmtu: 46 callbacks suppressed [ 108.036594][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.036909][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.037168][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.037651][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.039052][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.039388][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.039772][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.040098][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.040391][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.040675][ T6941] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.161942][ T6950] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 108.183983][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 108.184192][ T6953] ublk_ctrl_add_dev: invalid recovery flags 10 [ 108.228873][ T6950] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 113.689056][ T7016] jffs2: notice: (7016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 113.761291][ T7020] bridge0: port 1(wlan1) entered blocking state [ 113.762074][ T7020] bridge0: port 1(wlan1) entered disabled state [ 113.762244][ T7020] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 113.765138][ T7020] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 113.803350][ T7020] bridge0: port 1(wlan1) entered disabled state [ 113.829804][ T7020] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode [ 113.829832][ T7020] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 113.831228][ T7020] bridge0: port 1(wlan1) entered disabled state [ 122.305273][ T7091] warn_alloc: 2 callbacks suppressed [ 122.305289][ T7091] syz.0.251: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 122.305324][ T7091] CPU: 3 UID: 0 PID: 7091 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT(full) [ 122.305337][ T7091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.305343][ T7091] Call Trace: [ 122.305347][ T7091] [ 122.305352][ T7091] dump_stack_lvl+0x100/0x190 [ 122.305373][ T7091] warn_alloc.cold+0x9e/0xb2 [ 122.305388][ T7091] ? __pfx_warn_alloc+0x10/0x10 [ 122.305408][ T7091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.305426][ T7091] ? __pfx_get_page_from_freelist+0x10/0x10 [ 122.305446][ T7091] __alloc_frozen_pages_noprof+0xafd/0x31e0 [ 122.305470][ T7091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.305490][ T7091] ? stack_trace_save+0x8e/0xc0 [ 122.305504][ T7091] ? mark_held_locks+0x40/0x70 [ 122.305518][ T7091] ? __kasan_kmalloc+0xaa/0xb0 [ 122.305529][ T7091] ? __kmalloc_noprof+0x32f/0x840 [ 122.305539][ T7091] ? comedi_isadma_alloc+0xc6/0x620 [ 122.305553][ T7091] ? pcl816_attach+0x909/0xb30 [ 122.305570][ T7091] alloc_pages_node_noprof+0x93/0x200 [ 122.305586][ T7091] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 122.305606][ T7091] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 122.305623][ T7091] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 122.305639][ T7091] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 122.305653][ T7091] dma_direct_alloc+0x3d1/0x8a0 [ 122.305671][ T7091] dma_alloc_attrs+0x1b9/0x3e0 [ 122.305687][ T7091] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 122.305701][ T7091] ? __kmalloc_noprof+0x350/0x840 [ 122.305711][ T7091] ? dma_direct_supported+0xca/0x220 [ 122.305725][ T7091] comedi_isadma_alloc+0x331/0x620 [ 122.305740][ T7091] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 122.305755][ T7091] ? request_threaded_irq+0x27b/0x3e0 [ 122.305769][ T7091] pcl816_attach+0x909/0xb30 [ 122.305782][ T7091] comedi_device_attach+0x40e/0x6b0 [ 122.305797][ T7091] do_devconfig_ioctl+0x1b3/0x6d0 [ 122.305810][ T7091] ? comedi_unlocked_ioctl+0x180/0x3310 [ 122.305826][ T7091] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 122.305846][ T7091] ? tomoyo_path_number_perm+0x46d/0x580 [ 122.305862][ T7091] ? kasan_save_stack+0x3f/0x50 [ 122.305893][ T7091] ? kasan_save_stack+0x30/0x50 [ 122.305906][ T7091] ? kasan_save_track+0x14/0x30 [ 122.305918][ T7091] ? kasan_save_free_info+0x3b/0x70 [ 122.305936][ T7091] comedi_unlocked_ioctl+0x860/0x3310 [ 122.305958][ T7091] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 122.305987][ T7091] ? kasan_quarantine_put+0x104/0x240 [ 122.305999][ T7091] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.306016][ T7091] ? find_held_lock+0x2b/0x80 [ 122.306031][ T7091] ? tomoyo_path_number_perm+0x28f/0x580 [ 122.306045][ T7091] ? tomoyo_path_number_perm+0x28f/0x580 [ 122.306063][ T7091] ? tomoyo_path_number_perm+0x188/0x580 [ 122.306086][ T7091] comedi_compat_ioctl+0x438/0xe20 [ 122.306104][ T7091] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 122.306122][ T7091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.306137][ T7091] ? do_vfs_ioctl+0x226/0x13e0 [ 122.306149][ T7091] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.306163][ T7091] ? __fget_files+0x34/0x3d0 [ 122.306177][ T7091] ? find_held_lock+0x2b/0x80 [ 122.306191][ T7091] ? __fget_files+0x215/0x3d0 [ 122.306202][ T7091] ? hook_file_ioctl_common+0x140/0x440 [ 122.306222][ T7091] ? __fget_files+0x21f/0x3d0 [ 122.306237][ T7091] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 122.306253][ T7091] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 122.306266][ T7091] __do_fast_syscall_32+0x14b/0x8c0 [ 122.306284][ T7091] do_fast_syscall_32+0x32/0x70 [ 122.306300][ T7091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.306314][ T7091] RIP: 0023:0xf7fd6fbc [ 122.306324][ T7091] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 122.306333][ T7091] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 122.306344][ T7091] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 122.306351][ T7091] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.306357][ T7091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.306362][ T7091] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.306368][ T7091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.306403][ T7091] [ 122.306530][ T7091] Mem-Info: [ 122.306537][ T7091] active_anon:4212 inactive_anon:1564 isolated_anon:0 [ 122.306537][ T7091] active_file:12736 inactive_file:10386 isolated_file:0 [ 122.306537][ T7091] unevictable:1000 dirty:279 writeback:0 [ 122.306537][ T7091] slab_reclaimable:6523 slab_unreclaimable:57627 [ 122.306537][ T7091] mapped:23632 shmem:1543 pagetables:1082 [ 122.306537][ T7091] sec_pagetables:304 bounce:0 [ 122.306537][ T7091] kernel_misc_reclaimable:0 [ 122.306537][ T7091] free:36866 free_pcp:4 free_cma:0 [ 122.306560][ T7091] Node 0 active_anon:0kB inactive_anon:16kB active_file:92kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8032kB pagetables:1244kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 122.306585][ T7091] Node 0 DMA free:2348kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 122.306612][ T7091] lowmem_reserve[]: 0 256 256 256 256 [ 122.306630][ T7091] Node 0 DMA: 37*4kB (U) 5*8kB (U) 1*16kB (U) 23*32kB (U) 6*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2348kB [ 122.306699][ T7091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.306707][ T7091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.306714][ T7091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.306721][ T7091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.306728][ T7091] 25429 total pagecache pages [ 122.306732][ T7091] 770 pages in swap cache [ 122.306735][ T7091] Free swap = 119628kB [ 122.306739][ T7091] Total swap = 124996kB [ 122.306742][ T7091] 524155 pages RAM [ 122.306745][ T7091] 0 pages HighMem/MovableOnly [ 122.306749][ T7091] 217688 pages reserved [ 122.306752][ T7091] 0 pages cma reserved [ 123.721474][ T7106] ublk1: read batch cmd buffer failed [ 123.721894][ T7106] ublk1: read batch cmd buffer failed [ 123.779211][ T7106] ublk1: read batch cmd buffer failed [ 123.779686][ T7106] ublk1: read batch cmd buffer failed [ 124.909139][ T7131] input: syz0 as /devices/virtual/input/input6 [ 125.023864][ T6465] Bluetooth: hci4: Frame reassembly failed (-84) [ 125.671231][ T7142] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 125.687835][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 125.721557][ T7142] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 127.066630][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.093307][ T7186] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 129.184452][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 129.289610][ T7186] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 129.304831][ T7194] ublk2: read batch cmd buffer failed [ 129.305245][ T7194] ublk2: read batch cmd buffer failed [ 129.361398][ T7194] ublk2: read batch cmd buffer failed [ 129.361807][ T7194] ublk2: read batch cmd buffer failed [ 129.604296][ T7201] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 129.626707][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 129.678835][ T7201] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 131.098447][ T7217] futex_wake_op: syz.3.285 tries to shift op by 144; fix this program [ 131.098561][ T7217] futex_wake_op: syz.3.285 tries to shift op by 144; fix this program [ 132.438542][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.438684][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893863][ T7244] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 132.906626][ T7246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.991985][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 133.078347][ T7244] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 133.774903][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.577192][ T7274] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 135.656084][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 135.695415][ T7274] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 136.510169][ T7284] CIFS: Attempting to mount //127.0.0.1/share [ 137.099051][ T7293] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 137.114030][ T7284] CIFS: VFS: cifs_mount failed w/return code = -112 [ 137.122929][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 137.179056][ T7293] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 138.689876][ T7310] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 138.742275][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 138.796570][ T7310] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 138.833396][ T7312] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 138.879118][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 138.919261][ T7312] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 139.151196][ T7320] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 140.158797][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 140.201210][ T7320] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 140.992991][ T7330] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 141.125141][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 141.339251][ T7330] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 143.272479][ T7341] ubi0: attaching mtd0 [ 143.275227][ T7341] ubi0: scanning is finished [ 143.275269][ T7341] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 143.398769][ T7341] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 143.627073][ T7353] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 143.652492][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 143.693976][ T7353] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 146.186117][ T7379] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 146.186140][ T7379] orangefs_mount: mount request failed with -110 [ 146.192683][ T7379] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 147.720794][ T7397] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 147.774056][ T7405] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 147.830201][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 147.891037][ T7406] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 147.921395][ T7397] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 147.949705][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 147.992582][ T7406] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 148.053235][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 148.119676][ T7405] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 150.265810][ T7434] ublk5: read batch cmd buffer failed [ 150.266091][ T7434] ublk5: read batch cmd buffer failed [ 150.330603][ T7434] ublk5: read batch cmd buffer failed [ 150.331637][ T7434] ublk5: read batch cmd buffer failed [ 151.187790][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 152.091297][ T7439] jffs2: notice: (7439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 152.252884][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 152.252994][ T9] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 152.255400][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 152.255419][ T9] usb 7-1: can't read configurations, error -71 [ 152.551531][ T7458] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 152.576590][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 152.682759][ T7458] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 152.788295][ T7463] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 152.810016][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 152.835627][ T7463] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 154.093662][ T7481] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 154.165026][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 154.213390][ T7481] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 154.284203][ T7486] cgroup: No subsys list or none specified [ 156.703844][ T7499] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 156.748942][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 156.759177][ T7503] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 156.787164][ T7499] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 156.819046][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 156.879631][ T7503] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 158.407018][ T7520] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 158.429032][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 158.475589][ T7520] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 162.127034][ T7550] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 162.264510][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 162.379598][ T7550] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 165.230531][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 165.231588][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 165.231605][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 165.231661][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 167.222709][ T7594] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 167.302047][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 167.543054][ T7594] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 169.630340][ T7610] ublk_ctrl_add_dev: invalid recovery flags 10 [ 171.959728][ T7631] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 171.965641][ T7629] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 172.006543][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 172.240988][ T7629] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 172.619791][ T7637] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 172.735643][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 172.868759][ T7637] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 173.788390][ T7645] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 173.831509][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 174.094062][ T7645] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 174.309746][ T7663] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 174.501086][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 174.607384][ T7663] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 175.652032][ T7676] ublk_ctrl_add_dev: invalid recovery flags 10 [ 175.720723][ T7677] bridge_slave_0: left allmulticast mode [ 175.720741][ T7677] bridge_slave_0: left promiscuous mode [ 175.720866][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.997383][ T7682] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 176.628263][ T7691] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 176.656254][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 176.765027][ T7691] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 176.814061][ T7693] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 176.877098][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 176.988347][ T7693] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 177.378524][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.066963][ T7734] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 181.351460][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 181.782869][ T7734] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 187.232532][ T7785] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 187.280762][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 187.317837][ T7785] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 191.690506][ T7821] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.952824][ T7823] team0: Device xfrm0 is of different type [ 192.326942][ T7821] lo speed is unknown, defaulting to 1000 [ 193.870459][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.870831][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.034895][ T7845] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 194.316709][ T7860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.447'. [ 194.316759][ T7860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.447'. [ 194.548944][ T7865] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 194.617967][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 194.730486][ T7865] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 196.407132][ T7878] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 196.479240][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 196.567985][ T7878] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 198.880706][ T7911] tipc: Enabling of bearer rejected, failed to enable media [ 200.930778][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 201.000091][ T67] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 201.205346][ T7924] sctp_transport_update_pmtu: 45 callbacks suppressed [ 201.205361][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.206124][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.208821][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.218629][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.225739][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.244033][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.277233][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.296238][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.300707][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.301063][ T7924] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.616179][ T7947] tipc: Enabling of bearer rejected, failed to enable media [ 205.826143][ T7949] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 205.866398][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 205.960327][ T7949] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 206.107060][ T7954] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 206.160478][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 206.274441][ T7954] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 207.820003][ T7958] syz.3.477: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 207.820045][ T7958] CPU: 3 UID: 0 PID: 7958 Comm: syz.3.477 Not tainted syzkaller #0 PREEMPT(full) [ 207.820057][ T7958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.820063][ T7958] Call Trace: [ 207.820068][ T7958] [ 207.820072][ T7958] dump_stack_lvl+0x100/0x190 [ 207.820099][ T7958] warn_alloc.cold+0x9e/0xb2 [ 207.820113][ T7958] ? __pfx_warn_alloc+0x10/0x10 [ 207.820133][ T7958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.820153][ T7958] ? __pfx_get_page_from_freelist+0x10/0x10 [ 207.820184][ T7958] __alloc_frozen_pages_noprof+0xafd/0x31e0 [ 207.820212][ T7958] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.820240][ T7958] ? stack_trace_save+0x8e/0xc0 [ 207.820264][ T7958] ? do_raw_write_lock+0x11e/0x260 [ 207.820286][ T7958] ? __kasan_kmalloc+0xaa/0xb0 [ 207.820298][ T7958] ? __kmalloc_noprof+0x32f/0x840 [ 207.820308][ T7958] ? comedi_isadma_alloc+0xc6/0x620 [ 207.820325][ T7958] ? pcl816_attach+0x909/0xb30 [ 207.820344][ T7958] alloc_pages_node_noprof+0x93/0x200 [ 207.820360][ T7958] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 207.820380][ T7958] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 207.820397][ T7958] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 207.820415][ T7958] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 207.820429][ T7958] dma_direct_alloc+0x3d1/0x8a0 [ 207.820447][ T7958] dma_alloc_attrs+0x1b9/0x3e0 [ 207.820463][ T7958] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 207.820478][ T7958] ? __kmalloc_noprof+0x350/0x840 [ 207.820488][ T7958] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 207.820502][ T7958] ? dma_direct_supported+0xca/0x220 [ 207.820516][ T7958] comedi_isadma_alloc+0x331/0x620 [ 207.820531][ T7958] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 207.820547][ T7958] ? request_threaded_irq+0x27b/0x3e0 [ 207.820561][ T7958] pcl816_attach+0x909/0xb30 [ 207.820574][ T7958] comedi_device_attach+0x40e/0x6b0 [ 207.820591][ T7958] do_devconfig_ioctl+0x1b3/0x6d0 [ 207.820604][ T7958] ? comedi_unlocked_ioctl+0x180/0x3310 [ 207.820621][ T7958] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 207.820641][ T7958] ? tomoyo_path_number_perm+0x46d/0x580 [ 207.820659][ T7958] ? kasan_save_stack+0x3f/0x50 [ 207.820670][ T7958] ? kasan_save_stack+0x30/0x50 [ 207.820680][ T7958] ? kasan_save_track+0x14/0x30 [ 207.820691][ T7958] ? kasan_save_free_info+0x3b/0x70 [ 207.820709][ T7958] comedi_unlocked_ioctl+0x860/0x3310 [ 207.820728][ T7958] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 207.820755][ T7958] ? kasan_quarantine_put+0x104/0x240 [ 207.820766][ T7958] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.820782][ T7958] ? find_held_lock+0x2b/0x80 [ 207.820796][ T7958] ? tomoyo_path_number_perm+0x28f/0x580 [ 207.820811][ T7958] ? tomoyo_path_number_perm+0x28f/0x580 [ 207.820829][ T7958] ? tomoyo_path_number_perm+0x188/0x580 [ 207.820847][ T7958] comedi_compat_ioctl+0x438/0xe20 [ 207.820863][ T7958] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 207.820894][ T7958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.820909][ T7958] ? do_vfs_ioctl+0x226/0x13e0 [ 207.820921][ T7958] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 207.820934][ T7958] ? __fget_files+0x34/0x3d0 [ 207.820947][ T7958] ? find_held_lock+0x2b/0x80 [ 207.820961][ T7958] ? __fget_files+0x215/0x3d0 [ 207.820973][ T7958] ? hook_file_ioctl_common+0x140/0x440 [ 207.820992][ T7958] ? __fget_files+0x21f/0x3d0 [ 207.821007][ T7958] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 207.821023][ T7958] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 207.821036][ T7958] __do_fast_syscall_32+0x14b/0x8c0 [ 207.821051][ T7958] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.821067][ T7958] do_fast_syscall_32+0x32/0x70 [ 207.821087][ T7958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.821101][ T7958] RIP: 0023:0xf7f44fbc [ 207.821110][ T7958] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 207.821120][ T7958] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 207.821130][ T7958] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400 [ 207.821137][ T7958] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.821143][ T7958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.821149][ T7958] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.821154][ T7958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.821168][ T7958] [ 207.825180][ T7958] Mem-Info: [ 207.825193][ T7958] active_anon:4165 inactive_anon:1755 isolated_anon:0 [ 207.825193][ T7958] active_file:8491 inactive_file:12016 isolated_file:0 [ 207.825193][ T7958] unevictable:1000 dirty:669 writeback:0 [ 207.825193][ T7958] slab_reclaimable:6565 slab_unreclaimable:58576 [ 207.825193][ T7958] mapped:23691 shmem:1647 pagetables:1144 [ 207.825193][ T7958] sec_pagetables:307 bounce:0 [ 207.825193][ T7958] kernel_misc_reclaimable:0 [ 207.825193][ T7958] free:36199 free_pcp:43 free_cma:0 [ 207.825227][ T7958] Node 0 active_anon:0kB inactive_anon:12kB active_file:92kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8064kB pagetables:1244kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.825262][ T7958] Node 0 DMA free:2504kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:92kB free_cma:0kB [ 207.825300][ T7958] lowmem_reserve[]: 0 256 256 256 256 [ 207.825324][ T7958] Node 0 DMA: 66*4kB (U) 6*8kB (U) 1*16kB (U) 24*32kB (U) 6*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2504kB [ 207.825422][ T7958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.825433][ T7958] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.825443][ T7958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.825453][ T7958] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.825464][ T7958] 22927 total pagecache pages [ 207.825471][ T7958] 779 pages in swap cache [ 207.825477][ T7958] Free swap = 119516kB [ 207.825483][ T7958] Total swap = 124996kB [ 207.825489][ T7958] 524155 pages RAM [ 207.825496][ T7958] 0 pages HighMem/MovableOnly [ 207.825501][ T7958] 217688 pages reserved [ 207.825506][ T7958] 0 pages cma reserved [ 211.251666][ T7993] tipc: Enabling of bearer rejected, failed to enable media [ 212.068829][ T7995] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 212.124488][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 212.196128][ T7998] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 212.197631][ T7995] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 212.264989][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 212.380433][ T7998] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 212.578502][ T8003] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 212.614846][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 212.694455][ T8003] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 215.417731][ T8032] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 215.452297][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 215.601878][ T8032] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.132240][ T8039] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 216.211754][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 216.494286][ T8043] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 216.514130][ T8039] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.546815][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 216.574104][ T8043] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.646856][ T8048] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 216.664302][ T8049] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 216.673602][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 216.698286][ T8048] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.727976][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 216.751212][ T8049] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.980536][ T8045] socket: no more sockets [ 217.361911][ T8053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.502'. [ 217.361980][ T8053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.502'. [ 218.183943][ T8053] FAULT_INJECTION: forcing a failure. [ 218.183943][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 218.184018][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT(full) [ 218.184040][ T8053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.184064][ T8053] Call Trace: [ 218.184071][ T8053] [ 218.184078][ T8053] dump_stack_lvl+0x100/0x190 [ 218.184117][ T8053] should_fail_ex.cold+0x5/0xa [ 218.184144][ T8053] should_failslab+0xc2/0x120 [ 218.184166][ T8053] __kmalloc_cache_noprof+0x91/0x6d0 [ 218.184191][ T8053] ? lockdep_init_map_type+0x5c/0x250 [ 218.184210][ T8053] ? kvm_create_lapic+0xa9/0x440 [ 218.184239][ T8053] kvm_create_lapic+0xa9/0x440 [ 218.184264][ T8053] kvm_arch_vcpu_create+0x26a/0xab0 [ 218.184290][ T8053] kvm_vm_ioctl+0x19f4/0x2950 [ 218.184315][ T8053] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 218.184337][ T8053] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 218.184387][ T8053] ? kasan_quarantine_put+0x104/0x240 [ 218.184404][ T8053] ? lockdep_hardirqs_on+0x7d/0x110 [ 218.184429][ T8053] ? find_held_lock+0x2b/0x80 [ 218.184453][ T8053] ? tomoyo_path_number_perm+0x28f/0x580 [ 218.184477][ T8053] ? tomoyo_path_number_perm+0x28f/0x580 [ 218.184504][ T8053] ? tomoyo_path_number_perm+0x188/0x580 [ 218.184529][ T8053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.184551][ T8053] ? futex_wait+0x11e/0x370 [ 218.184576][ T8053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.184599][ T8053] ? do_vfs_ioctl+0x226/0x13e0 [ 218.184617][ T8053] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 218.184636][ T8053] kvm_vm_compat_ioctl+0x2f7/0x410 [ 218.184656][ T8053] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 218.184675][ T8053] ? __fget_files+0x34/0x3d0 [ 218.184694][ T8053] ? find_held_lock+0x2b/0x80 [ 218.184735][ T8053] ? __fget_files+0x215/0x3d0 [ 218.184754][ T8053] ? hook_file_ioctl_common+0x140/0x440 [ 218.184783][ T8053] ? __fget_files+0x21f/0x3d0 [ 218.184807][ T8053] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 218.184828][ T8053] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 218.184849][ T8053] __do_fast_syscall_32+0x14b/0x8c0 [ 218.184878][ T8053] do_fast_syscall_32+0x32/0x70 [ 218.184903][ T8053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.184924][ T8053] RIP: 0023:0xf7fd6fbc [ 218.184938][ T8053] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 218.184954][ T8053] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 218.184972][ T8053] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 218.184983][ T8053] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.184992][ T8053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.185001][ T8053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 218.185011][ T8053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.185033][ T8053] [ 224.126047][ T8100] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 224.171385][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 224.240743][ T8100] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 224.296319][ T8104] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 224.339034][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 224.424554][ T8104] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 224.668678][ T8114] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 224.716721][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 224.779459][ T8114] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 225.310423][ T8118] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 225.343364][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 225.355651][ T8120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.516'. [ 225.355690][ T8120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.516'. [ 225.493605][ T8118] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 225.697693][ T8125] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 225.735150][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 225.737387][ T8120] FAULT_INJECTION: forcing a failure. [ 225.737387][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 225.737403][ T8120] CPU: 3 UID: 0 PID: 8120 Comm: syz.1.516 Not tainted syzkaller #0 PREEMPT(full) [ 225.737414][ T8120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.737421][ T8120] Call Trace: [ 225.737424][ T8120] [ 225.737429][ T8120] dump_stack_lvl+0x100/0x190 [ 225.737448][ T8120] should_fail_ex.cold+0x5/0xa [ 225.737466][ T8120] should_failslab+0xc2/0x120 [ 225.737480][ T8120] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 225.737492][ T8120] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 225.737515][ T8120] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 225.737531][ T8120] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 225.737548][ T8120] alloc_inode+0x68/0x250 [ 225.737564][ T8120] new_inode+0x22/0x1c0 [ 225.737580][ T8120] hugetlbfs_get_inode+0x339/0x740 [ 225.737590][ T8120] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 225.737601][ T8120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.737618][ T8120] hugetlb_file_setup+0x15b/0x5b0 [ 225.737630][ T8120] ksys_mmap_pgoff+0x242/0x610 [ 225.737642][ T8120] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 225.737658][ T8120] __do_fast_syscall_32+0x14b/0x8c0 [ 225.737675][ T8120] do_fast_syscall_32+0x32/0x70 [ 225.737691][ T8120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.737705][ T8120] RIP: 0023:0xf73fefbc [ 225.737715][ T8120] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.737724][ T8120] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 225.737735][ T8120] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 225.737741][ T8120] RDX: 0000000002000009 RSI: 000000000005c832 RDI: 00000000ffffffff [ 225.737747][ T8120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.737753][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.737759][ T8120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.737772][ T8120] [ 225.903910][ T8125] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 226.000012][ T8130] rxe_eth0 speed is unknown, defaulting to 1000 [ 226.273537][ T8131] team0: Device xfrm0 is of different type [ 228.035946][ T79] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 228.186616][ T79] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 228.187621][ T79] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.187641][ T79] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 228.187668][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.215753][ T79] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 228.229229][ T79] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 228.596231][ T8139] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 228.596569][ T8139] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 228.596813][ T8139] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 228.615851][ T8130] lo speed is unknown, defaulting to 1000 [ 229.116804][ T8147] sctp_transport_update_pmtu: 48 callbacks suppressed [ 229.116820][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.118289][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.120158][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.121937][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.130097][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.131334][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.138730][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.140311][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.142627][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.144673][ T8147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 229.343362][ T8137] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 229.466676][ T8135] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 229.495047][ T7264] usb 6-1: USB disconnect, device number 5 [ 229.555127][ T7264] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 229.556228][ T7264] spcp8x5 6-1:1.0: device disconnected [ 230.468118][ T8153] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 230.482092][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 230.501070][ T8153] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 233.749065][ T8179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.532'. [ 233.749116][ T8179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.532'. [ 234.046397][ T8178] FAULT_INJECTION: forcing a failure. [ 234.046397][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 234.046424][ T8178] CPU: 3 UID: 0 PID: 8178 Comm: syz.1.532 Not tainted syzkaller #0 PREEMPT(full) [ 234.046447][ T8178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.046459][ T8178] Call Trace: [ 234.046467][ T8178] [ 234.046474][ T8178] dump_stack_lvl+0x100/0x190 [ 234.046509][ T8178] should_fail_ex.cold+0x5/0xa [ 234.046533][ T8178] should_failslab+0xc2/0x120 [ 234.046559][ T8178] __kmalloc_cache_noprof+0x91/0x6d0 [ 234.046586][ T8178] ? resv_map_alloc+0x46/0x400 [ 234.046612][ T8178] resv_map_alloc+0x46/0x400 [ 234.046632][ T8178] hugetlbfs_get_inode+0x324/0x740 [ 234.046652][ T8178] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 234.046670][ T8178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.046703][ T8178] hugetlb_file_setup+0x15b/0x5b0 [ 234.046722][ T8178] ksys_mmap_pgoff+0x242/0x610 [ 234.046741][ T8178] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 234.046767][ T8178] __do_fast_syscall_32+0x14b/0x8c0 [ 234.046792][ T8178] do_fast_syscall_32+0x32/0x70 [ 234.046814][ T8178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.046834][ T8178] RIP: 0023:0xf73fefbc [ 234.046848][ T8178] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 234.046865][ T8178] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 234.046882][ T8178] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 234.046893][ T8178] RDX: 0000000002000009 RSI: 000000000005c832 RDI: 00000000ffffffff [ 234.046904][ T8178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.046914][ T8178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.046924][ T8178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.046946][ T8178] [ 236.061563][ T8211] sctp_transport_update_pmtu: 106 callbacks suppressed [ 236.061812][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.063303][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.076177][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.078760][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.087556][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.087982][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.089938][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.090331][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.091261][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.091985][ T8211] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.801800][ T8226] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 238.890259][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 239.522773][ T8231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.544'. [ 239.522819][ T8231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.544'. [ 239.600998][ T8234] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 239.803102][ T8235] FAULT_INJECTION: forcing a failure. [ 239.803102][ T8235] name failslab, interval 1, probability 0, space 0, times 0 [ 239.803131][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: syz.2.544 Not tainted syzkaller #0 PREEMPT(full) [ 239.803153][ T8235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.803165][ T8235] Call Trace: [ 239.803172][ T8235] [ 239.803179][ T8235] dump_stack_lvl+0x100/0x190 [ 239.803215][ T8235] should_fail_ex.cold+0x5/0xa [ 239.803243][ T8235] should_failslab+0xc2/0x120 [ 239.803267][ T8235] __kmalloc_cache_noprof+0x91/0x6d0 [ 239.803294][ T8235] ? resv_map_alloc+0x46/0x400 [ 239.803320][ T8235] resv_map_alloc+0x46/0x400 [ 239.803342][ T8235] hugetlbfs_get_inode+0x324/0x740 [ 239.803361][ T8235] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 239.803379][ T8235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.803409][ T8235] hugetlb_file_setup+0x15b/0x5b0 [ 239.803431][ T8235] ksys_mmap_pgoff+0x242/0x610 [ 239.803453][ T8235] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 239.803479][ T8235] __do_fast_syscall_32+0x14b/0x8c0 [ 239.803510][ T8235] do_fast_syscall_32+0x32/0x70 [ 239.803538][ T8235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.803559][ T8235] RIP: 0023:0xf745efbc [ 239.803574][ T8235] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 239.803590][ T8235] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 239.803608][ T8235] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 239.803618][ T8235] RDX: 0000000002000009 RSI: 000000000005c832 RDI: 00000000ffffffff [ 239.803640][ T8235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.803651][ T8235] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 239.803661][ T8235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.803684][ T8235] [ 240.018564][ T8226] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 240.069071][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 240.200291][ T8234] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 244.147247][ T8314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.555'. [ 244.147281][ T8314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.555'. [ 244.345514][ T8318] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 244.382399][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 244.509177][ T8314] FAULT_INJECTION: forcing a failure. [ 244.509177][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 244.509198][ T8314] CPU: 1 UID: 0 PID: 8314 Comm: syz.2.555 Not tainted syzkaller #0 PREEMPT(full) [ 244.509211][ T8314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.509218][ T8314] Call Trace: [ 244.509223][ T8314] [ 244.509228][ T8314] dump_stack_lvl+0x100/0x190 [ 244.509249][ T8314] should_fail_ex.cold+0x5/0xa [ 244.509266][ T8314] should_failslab+0xc2/0x120 [ 244.509280][ T8314] __kmalloc_cache_noprof+0x91/0x6d0 [ 244.509297][ T8314] ? resv_map_alloc+0x46/0x400 [ 244.509312][ T8314] resv_map_alloc+0x46/0x400 [ 244.509325][ T8314] hugetlbfs_get_inode+0x324/0x740 [ 244.509338][ T8314] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 244.509349][ T8314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.509371][ T8314] hugetlb_file_setup+0x15b/0x5b0 [ 244.509384][ T8314] ksys_mmap_pgoff+0x242/0x610 [ 244.509397][ T8314] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 244.509413][ T8314] __do_fast_syscall_32+0x14b/0x8c0 [ 244.509432][ T8314] do_fast_syscall_32+0x32/0x70 [ 244.509449][ T8314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.509463][ T8314] RIP: 0023:0xf745efbc [ 244.509473][ T8314] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 244.509483][ T8314] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 244.509494][ T8314] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 244.509500][ T8314] RDX: 0000000002000009 RSI: 000000000005c832 RDI: 00000000ffffffff [ 244.509507][ T8314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.509513][ T8314] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.509519][ T8314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.509532][ T8314] [ 244.587951][ T8318] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 244.727429][ T8321] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 244.825075][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 245.144520][ T8321] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 249.226074][ T8360] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 249.259479][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 249.299954][ T8360] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 249.510432][ T8368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.570'. [ 249.510467][ T8368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.570'. [ 249.645033][ T8368] FAULT_INJECTION: forcing a failure. [ 249.645033][ T8368] name failslab, interval 1, probability 0, space 0, times 0 [ 249.645973][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.2.570 Not tainted syzkaller #0 PREEMPT(full) [ 249.645996][ T8368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.646006][ T8368] Call Trace: [ 249.646013][ T8368] [ 249.646036][ T8368] dump_stack_lvl+0x100/0x190 [ 249.646064][ T8368] should_fail_ex.cold+0x5/0xa [ 249.646089][ T8368] should_failslab+0xc2/0x120 [ 249.646106][ T8368] __kmalloc_cache_noprof+0x91/0x6d0 [ 249.646126][ T8368] ? resv_map_alloc+0x46/0x400 [ 249.646151][ T8368] resv_map_alloc+0x46/0x400 [ 249.646174][ T8368] hugetlbfs_get_inode+0x324/0x740 [ 249.646194][ T8368] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 249.646213][ T8368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.646242][ T8368] hugetlb_file_setup+0x15b/0x5b0 [ 249.646264][ T8368] ksys_mmap_pgoff+0x242/0x610 [ 249.646284][ T8368] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 249.646308][ T8368] __do_fast_syscall_32+0x14b/0x8c0 [ 249.646341][ T8368] do_fast_syscall_32+0x32/0x70 [ 249.646369][ T8368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.646393][ T8368] RIP: 0023:0xf745efbc [ 249.646409][ T8368] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 249.646432][ T8368] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 249.646452][ T8368] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 249.646464][ T8368] RDX: 0000000002000009 RSI: 000000000005c832 RDI: 00000000ffffffff [ 249.646476][ T8368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.646486][ T8368] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.646497][ T8368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.646522][ T8368] [ 249.706505][ T8369] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 249.706520][ T8369] PKCS7: Only support pkcs7_signedData type [ 254.313113][ T8397] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 254.359360][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 254.496061][ T8397] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 255.310551][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.310923][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.564556][ T8409] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 255.587391][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 255.671919][ T8409] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 260.671586][ T8437] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 260.721963][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 261.063211][ T8437] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 263.398277][ T8469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 263.398303][ T8469] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.429970][ T8469] vhci_hcd vhci_hcd.0: Device attached [ 263.889553][ T29] usb 38-1: SetAddress Request (2) to port 0 [ 263.889883][ T29] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 264.282039][ T8470] vhci_hcd: cannot find the pending unlink 0 [ 265.120081][ T8470] vhci_hcd: connection reset by peer [ 265.135838][ T5890] vhci_hcd vhci_hcd.0: stop threads [ 265.136457][ T5890] vhci_hcd vhci_hcd.0: release socket [ 265.141023][ T5890] vhci_hcd vhci_hcd.0: disconnect device [ 267.322864][ T42] audit: type=1800 audit(1793975782.074:9): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.598" name="bus" dev="ramfs" ino=18971 res=0 errno=-4 [ 268.242589][ T8507] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 268.275420][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 268.480590][ T8507] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 268.657025][ T8509] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 268.705757][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 268.790236][ T8509] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 269.688925][ T29] usb 38-1: device descriptor read/8, error -110 [ 270.167614][ T29] usb usb38-port1: attempt power cycle [ 271.556325][ T29] usb usb38-port1: unable to enumerate USB device [ 273.205406][ T8538] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 273.205423][ T8538] PKCS7: Only support pkcs7_signedData type [ 273.400651][ T8546] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 273.678801][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 273.822948][ T8546] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 274.514695][ T42] audit: type=1326 audit(1793975789.274:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.1.615" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x0 [ 274.904345][ T8556] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 275.028554][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 275.400099][ T8556] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 281.424491][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 281.424543][ T8589] bridge_slave_1: left allmulticast mode [ 281.425337][ T8589] bridge_slave_1: left promiscuous mode [ 281.426723][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.586214][ T8609] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 282.633595][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 282.881140][ T8609] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 284.450215][ T8608] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 284.450233][ T8608] PKCS7: Only support pkcs7_signedData type [ 287.612020][ T8637] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 287.716682][ T8640] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 287.830515][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 287.884041][ T8637] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 288.293682][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 288.419677][ T8640] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 288.773488][ T8644] Invalid ELF header magic: != ELF [ 290.898921][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 290.898987][ T8655] bridge_slave_1: left allmulticast mode [ 290.899700][ T8655] bridge_slave_1: left promiscuous mode [ 290.901236][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.222681][ T8656] sit1: entered allmulticast mode [ 291.277950][ T8660] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 291.329994][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 291.417909][ T8653] rxe_eth0 speed is unknown, defaulting to 1000 [ 291.540830][ T8660] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 291.918600][ T8653] lo speed is unknown, defaulting to 1000 [ 292.842338][ T8676] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 292.855254][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 292.872680][ T8676] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 293.067744][ T8678] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 293.090759][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 293.128684][ T8678] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 293.556708][ T8684] openvswitch: netlink: Flow key attr not present in new flow. [ 297.770533][ T8717] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 297.804420][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 297.869405][ T8717] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 298.073833][ T8727] rxe_eth0 speed is unknown, defaulting to 1000 [ 298.217802][ T8728] sit1: entered allmulticast mode [ 298.450889][ T8727] lo speed is unknown, defaulting to 1000 [ 298.475038][ T8725] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 298.475049][ T8725] PKCS7: Only support pkcs7_signedData type [ 300.871897][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 300.871948][ T8740] bridge_slave_1: left allmulticast mode [ 300.872618][ T8740] bridge_slave_1: left promiscuous mode [ 300.876294][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.359849][ T8784] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.401854][ T8789] sit1: entered allmulticast mode [ 304.947974][ T8784] lo speed is unknown, defaulting to 1000 [ 305.484920][ T8798] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 305.544128][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 305.671439][ T8798] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 307.536142][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 307.707156][ T5892] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 307.708111][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 307.708126][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.708136][ T5892] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.708152][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.714738][ T8820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.740224][ T5892] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 307.752864][ T5892] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 307.796891][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 307.924368][ T5892] usb 7-1: USB disconnect, device number 6 [ 307.951013][ T5892] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 307.955446][ T5892] cyberjack 7-1:1.0: device disconnected [ 308.860928][ T8840] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 308.890746][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 308.921802][ T8840] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 309.050080][ T8838] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.068006][ T8843] sit1: entered allmulticast mode [ 309.296982][ T8838] lo speed is unknown, defaulting to 1000 [ 309.581464][ T8852] ublk7: read batch cmd buffer failed [ 309.581888][ T8852] ublk7: read batch cmd buffer failed [ 309.673972][ T8852] ublk7: read batch cmd buffer failed [ 309.674722][ T8852] ublk7: read batch cmd buffer failed [ 311.146990][ T8865] ublk8: read batch cmd buffer failed [ 311.147352][ T8865] ublk8: read batch cmd buffer failed [ 311.197098][ T8865] ublk8: read batch cmd buffer failed [ 311.197155][ T8865] ublk8: read batch cmd buffer failed [ 314.963333][ T8894] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.181394][ T8894] lo speed is unknown, defaulting to 1000 [ 316.750703][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.751074][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.282431][ T8922] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 318.282445][ T8922] PKCS7: Only support pkcs7_signedData type [ 319.408341][ T8940] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 319.443034][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 319.508216][ T8940] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 322.266961][ T8960] Invalid ELF header magic: != ELF [ 322.279909][ T8960] overlay: Unknown parameter '/' [ 323.659612][ T8972] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 323.659629][ T8972] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 323.659897][ T8972] vhci_hcd vhci_hcd.0: Device attached [ 323.906899][ T8973] vhci_hcd: cannot find the pending unlink 0 [ 324.006063][ T9] usb 42-1: SetAddress Request (2) to port 0 [ 324.006099][ T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 324.502042][ T8973] vhci_hcd: connection reset by peer [ 324.508561][ T5890] vhci_hcd vhci_hcd.2: stop threads [ 324.508579][ T5890] vhci_hcd vhci_hcd.2: release socket [ 324.508616][ T5890] vhci_hcd vhci_hcd.2: disconnect device [ 325.359260][ T67] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 325.455022][ T8998] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 325.478424][ T8998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.558346][ T8998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.558505][ T8998] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 325.558960][ T8998] bond1: (slave wireguard1): Error -95 calling set_mac_address [ 325.624486][ T8989] device-mapper: table: 248:1: crypt: Error decoding and setting key (-ENOKEY) [ 325.624512][ T8989] device-mapper: ioctl: error adding target to table [ 325.765525][ T9010] rxe_eth0 speed is unknown, defaulting to 1000 [ 325.867203][ T9010] lo speed is unknown, defaulting to 1000 [ 325.901183][ T9008] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 325.944471][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 326.030323][ T9008] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 326.056569][ T9016] tipc: Started in network mode [ 326.056587][ T9016] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 326.056613][ T9016] tipc: Enabling of bearer rejected, failed to enable media [ 326.564892][ T9018] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 328.987282][ T9018] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 329.071733][ T9] usb 42-1: device descriptor read/8, error -110 [ 329.927369][ T9] usb usb42-port1: attempt power cycle [ 330.518313][ T9] usb usb42-port1: unable to enumerate USB device [ 332.205599][ T9058] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.422407][ T9058] lo speed is unknown, defaulting to 1000 [ 332.514570][ T9065] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 332.584478][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 332.685145][ T9065] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 333.041677][ T9069] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 333.041695][ T9069] PKCS7: Only support pkcs7_signedData type [ 338.549576][ T9132] rxe_eth0 speed is unknown, defaulting to 1000 [ 338.752140][ T9132] lo speed is unknown, defaulting to 1000 [ 339.027360][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.756'. [ 339.535011][ T9152] e1000e 0000:00:02.0: resetting [ 339.680531][ T9152] e1000e 0000:00:02.0: reset done [ 342.258946][ T9175] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 342.285046][ T5862] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 342.502423][ T9175] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 344.579142][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.800704][ T9198] sit1: left allmulticast mode [ 345.641596][ T9217] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 345.693854][ T9200] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 345.817836][ T9217] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 345.925940][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 346.105997][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 346.108228][ T5873] usb 5-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.118777][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.118797][ T5873] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.121024][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.121036][ T5873] usb 5-1: Product: syz [ 346.121043][ T5873] usb 5-1: Manufacturer: syz [ 346.121050][ T5873] usb 5-1: SerialNumber: syz [ 346.124077][ T5873] usb 5-1: config 0 descriptor?? [ 347.016313][ T9233] hd3ss3220 0-0004: supply vdd5 not found, using dummy regulator [ 347.032654][ T9233] hd3ss3220 0-0004: supply vcc33 not found, using dummy regulator [ 347.090872][ T9233] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 348.680679][ T5873] usb 5-1: USB disconnect, device number 4 [ 349.528879][ T9260] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 349.563572][ T9200] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 349.889598][ T9260] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 350.688233][ T9270] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 350.733586][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 350.777607][ T9270] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 351.229511][ T42] audit: type=1326 audit(1793975866.004:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.230735][ T42] audit: type=1326 audit(1793975866.004:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.231215][ T42] audit: type=1326 audit(1793975866.004:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.288045][ T42] audit: type=1326 audit(1793975866.064:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.310523][ T42] audit: type=1326 audit(1793975866.084:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.310568][ T42] audit: type=1326 audit(1793975866.084:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.343229][ T42] audit: type=1326 audit(1793975866.114:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.343260][ T42] audit: type=1326 audit(1793975866.114:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.343282][ T42] audit: type=1326 audit(1793975866.114:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.376494][ T42] audit: type=1326 audit(1793975866.154:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.790" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 351.896280][ T5873] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.045974][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 352.646686][ T5873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 352.646714][ T5873] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 352.888549][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.888566][ T5873] usb 6-1: Product: syz [ 352.888573][ T5873] usb 6-1: Manufacturer: syz [ 352.888580][ T5873] usb 6-1: SerialNumber: syz [ 353.176936][ T5873] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.191681][ T9303] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 353.222477][ T5890] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 353.297718][ T5873] usb 6-1: USB disconnect, device number 6 [ 353.359770][ T9303] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 354.157702][ T9313] udevd[9313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.693315][ T9293] ------------[ cut here ]------------ [ 355.693327][ T9293] failed to allocate ring buffer on CPU 1 [ 355.693340][ T9293] WARNING: kernel/trace/ring_buffer.c:8094 at trace_rb_cpu_prepare+0x463/0x520, CPU#2: syz.2.793/9293 [ 355.700787][ T9293] Modules linked in: [ 355.702369][ T9293] CPU: 2 UID: 0 PID: 9293 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 355.705325][ T9293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.708659][ T9293] RIP: 0010:trace_rb_cpu_prepare+0x465/0x520 [ 355.710577][ T9293] Code: 48 c1 ea 03 80 3c 02 00 0f 84 bc fc ff ff 48 8b 3c 24 e8 ae f1 74 00 e9 ae fc ff ff e8 84 80 fb ff 48 8d 3d bd 66 5c 10 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 d3 fd ff ff 4c 89 ef e8 84 f1 74 [ 355.716714][ T9293] RSP: 0000:ffffc900069b78b8 EFLAGS: 00010283 [ 355.718634][ T9293] RAX: 000000000004a75d RBX: ffff88804f6168b8 RCX: ffffc9000cbb3000 [ 355.721193][ T9293] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff926ebec0 [ 355.723706][ T9293] RBP: 0000000000000001 R08: ffff8880144a8e88 R09: 0000000000000000 [ 355.726265][ T9293] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 355.728739][ T9293] R13: ffff88804f616810 R14: 0000000000000162 R15: 0000000000000000 [ 355.731216][ T9293] FS: 0000000000000000(0000) GS:ffff888095479000(0063) knlGS:00000000f5476b40 [ 355.734105][ T9293] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 355.736398][ T9293] CR2: 00000000f519b212 CR3: 0000000043f63000 CR4: 0000000000352ef0 [ 355.738904][ T9293] Call Trace: [ 355.739975][ T9293] [ 355.740925][ T9293] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 355.742760][ T9293] cpuhp_invoke_callback+0x205/0x9a0 [ 355.744436][ T9293] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 355.746502][ T9293] cpuhp_issue_call+0x1b8/0x970 [ 355.748054][ T9293] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 355.750152][ T9293] __cpuhp_state_add_instance+0xd5/0x2d0 [ 355.751936][ T9293] alloc_buffer+0x53b/0x1610 [ 355.753435][ T9293] __ring_buffer_alloc+0x2d/0x40 [ 355.755004][ T9293] allocate_trace_buffer+0x150/0xa30 [ 355.756853][ T9293] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 355.758965][ T9293] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 355.760823][ T9293] ? lockdep_init_map_type+0x5c/0x250 [ 355.762559][ T9293] trace_array_create_systems+0x582/0xc30 [ 355.764354][ T9293] instance_mkdir+0xca/0x140 [ 355.765825][ T9293] tracefs_syscall_mkdir+0x10e/0x180 [ 355.767626][ T9293] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 355.769588][ T9293] vfs_mkdir+0x36d/0x8a0 [ 355.770944][ T9293] filename_mkdirat+0x4c4/0x630 [ 355.772513][ T9293] ? __pfx_filename_mkdirat+0x10/0x10 [ 355.774222][ T9293] ? strncpy_from_user+0x19d/0x2d0 [ 355.775841][ T9293] ? do_getname+0x191/0x390 [ 355.777371][ T9293] __ia32_sys_mkdirat+0x88/0xc0 [ 355.778935][ T9293] __do_fast_syscall_32+0x14b/0x8c0 [ 355.780568][ T9293] ? lockdep_hardirqs_on+0x7d/0x110 [ 355.782295][ T9293] do_fast_syscall_32+0x32/0x70 [ 355.784028][ T9293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.786234][ T9293] RIP: 0023:0xf745efbc [ 355.787547][ T9293] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 355.793583][ T9293] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 355.796315][ T9293] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 355.798790][ T9293] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 355.801267][ T9293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.803744][ T9293] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.806312][ T9293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.808824][ T9293] [ 355.809825][ T9293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.812126][ T9293] CPU: 2 UID: 0 PID: 9293 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 355.814980][ T9293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.818130][ T9293] Call Trace: [ 355.819194][ T9293] [ 355.820136][ T9293] dump_stack_lvl+0x100/0x190 [ 355.821662][ T9293] vpanic+0x2dc/0x6f8 [ 355.822988][ T9293] panic+0xd1/0xe0 [ 355.824182][ T9293] ? __pfx_panic+0x10/0x10 [ 355.825616][ T9293] check_panic_on_warn.cold+0x19/0x34 [ 355.827304][ T9293] ? trace_rb_cpu_prepare+0x463/0x520 [ 355.829031][ T9293] __warn.cold+0x191/0x321 [ 355.830459][ T9293] __report_bug+0x30f/0x440 [ 355.831921][ T9293] ? trace_rb_cpu_prepare+0x463/0x520 [ 355.833650][ T9293] ? __pfx___report_bug+0x10/0x10 [ 355.835243][ T9293] ? rb_allocate_cpu_buffer+0xe30/0x2780 [ 355.837008][ T9293] ? rb_allocate_cpu_buffer+0xee2/0x2780 [ 355.838769][ T9293] ? smp_call_function_many_cond+0x1353/0x18c0 [ 355.840700][ T9293] report_bug_entry+0xe2/0x290 [ 355.842256][ T9293] ? trace_rb_cpu_prepare+0x465/0x520 [ 355.843961][ T9293] handle_bug+0x1cd/0x2a0 [ 355.845352][ T9293] exc_invalid_op+0x17/0x50 [ 355.846783][ T9293] asm_exc_invalid_op+0x1a/0x20 [ 355.848318][ T9293] RIP: 0010:trace_rb_cpu_prepare+0x465/0x520 [ 355.850230][ T9293] Code: 48 c1 ea 03 80 3c 02 00 0f 84 bc fc ff ff 48 8b 3c 24 e8 ae f1 74 00 e9 ae fc ff ff e8 84 80 fb ff 48 8d 3d bd 66 5c 10 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 d3 fd ff ff 4c 89 ef e8 84 f1 74 [ 355.856233][ T9293] RSP: 0000:ffffc900069b78b8 EFLAGS: 00010283 [ 355.858181][ T9293] RAX: 000000000004a75d RBX: ffff88804f6168b8 RCX: ffffc9000cbb3000 [ 355.860632][ T9293] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff926ebec0 [ 355.863142][ T9293] RBP: 0000000000000001 R08: ffff8880144a8e88 R09: 0000000000000000 [ 355.865660][ T9293] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 355.868124][ T9293] R13: ffff88804f616810 R14: 0000000000000162 R15: 0000000000000000 [ 355.870594][ T9293] ? trace_rb_cpu_prepare+0x45c/0x520 [ 355.872281][ T9293] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 355.874096][ T9293] cpuhp_invoke_callback+0x205/0x9a0 [ 355.875774][ T9293] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 355.877596][ T9293] cpuhp_issue_call+0x1b8/0x970 [ 355.879305][ T9293] __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400 [ 355.881421][ T9293] __cpuhp_state_add_instance+0xd5/0x2d0 [ 355.883184][ T9293] alloc_buffer+0x53b/0x1610 [ 355.884660][ T9293] __ring_buffer_alloc+0x2d/0x40 [ 355.886234][ T9293] allocate_trace_buffer+0x150/0xa30 [ 355.887886][ T9293] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 355.889938][ T9293] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 355.891766][ T9293] ? lockdep_init_map_type+0x5c/0x250 [ 355.893472][ T9293] trace_array_create_systems+0x582/0xc30 [ 355.895302][ T9293] instance_mkdir+0xca/0x140 [ 355.896754][ T9293] tracefs_syscall_mkdir+0x10e/0x180 [ 355.898453][ T9293] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 355.900285][ T9293] vfs_mkdir+0x36d/0x8a0 [ 355.901675][ T9293] filename_mkdirat+0x4c4/0x630 [ 355.903214][ T9293] ? __pfx_filename_mkdirat+0x10/0x10 [ 355.904898][ T9293] ? strncpy_from_user+0x19d/0x2d0 [ 355.906519][ T9293] ? do_getname+0x191/0x390 [ 355.908011][ T9293] __ia32_sys_mkdirat+0x88/0xc0 [ 355.909561][ T9293] __do_fast_syscall_32+0x14b/0x8c0 [ 355.911198][ T9293] ? lockdep_hardirqs_on+0x7d/0x110 [ 355.912860][ T9293] do_fast_syscall_32+0x32/0x70 [ 355.914414][ T9293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.916395][ T9293] RIP: 0023:0xf745efbc [ 355.917720][ T9293] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 355.923723][ T9293] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 355.926336][ T9293] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 355.928790][ T9293] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 355.931288][ T9293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.933779][ T9293] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.936247][ T9293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.938727][ T9293] [ 355.940262][ T9293] Kernel Offset: disabled [ 355.941688][ T9293] Rebooting in 86400 seconds..