last executing test programs: 25.943992234s ago: executing program 1 (id=74): setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000600)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 25.926123446s ago: executing program 1 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x90000, @empty}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2060e6"], 0x64) 25.73570842s ago: executing program 1 (id=77): fsopen(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000480), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000500)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 25.632084638s ago: executing program 1 (id=80): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8001, &(0x7f0000000b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000b80)='.\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000cc0)='\x00', 0x89901) move_mount(r1, &(0x7f0000000d40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x152) 25.626810797s ago: executing program 1 (id=82): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x48890) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/rfcomm0\x00', 0x802, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) write$P9_RREAD(r1, &(0x7f0000000040)={0x17, 0x75, 0x1, {0xc, "311af2392cd4db7fd914c784"}}, 0x17) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000300)) 25.265409993s ago: executing program 1 (id=87): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r0, &(0x7f0000000680)=""/153, 0x99) r1 = memfd_create(&(0x7f0000000740)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x8040) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) 4.433141632s ago: executing program 4 (id=306): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c00)=ANY=[@ANYBLOB="1c000000020321020000000164e3b3dca54756030800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) read(r2, &(0x7f0000000200)=""/1024, 0x400) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) 4.234295747s ago: executing program 3 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x1, 0xfffffffe, 0x0, [{0x4, 0xc, 0x4, '\x00', 0x38}, {0x80, 0xfe, 0x7c, '\x00', 0x2f}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x6}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0xb, 0x1, '\x00', 0x7}, {0x2, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa9, '\x00', 0x1}, {0x7, 0x1, 0x17, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x19, 0x10, 0x8c, '\x00', 0x4}, {0x5, 0xc0, 0x3, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x6, 0x31, '\x00', 0xf7}, {0x7, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 4.227733482s ago: executing program 4 (id=317): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000027c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002840)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004940)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000006ac0)="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", 0x2000, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40)={0x28, 0xffffffffffffffda, 0x80000, {{0xcaf, 0x3ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000006a80)={0x1, 0x0, 0x700, 0x554b}) 4.013020635s ago: executing program 3 (id=311): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) 2.891810448s ago: executing program 3 (id=320): pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2000000000003ff, 0x0, 0x8, 0x400000f, 0x5, 0x0, 0x7fffdfff}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.530606803s ago: executing program 2 (id=326): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x0, 0x0, 0x4002004c0, 0x1004, 0x8000000000000003, 0xc598, 0xc, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0x1ff8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.343817521s ago: executing program 2 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x1, 0x2}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000080)={0x23, 0x14}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 2.251566367s ago: executing program 2 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffffffff14b6, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @empty, 0x9}}}, 0x30) 2.173795648s ago: executing program 2 (id=330): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) 1.987868761s ago: executing program 3 (id=331): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.405177696s ago: executing program 0 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000300)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005"], 0x4a) 1.175632952s ago: executing program 0 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="1800100009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x99fe, 0x11, ')\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.035577147s ago: executing program 4 (id=337): prlimit64(0x0, 0xe, &(0x7f0000007100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000071c0)={0x1, &(0x7f0000007200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = userfaultfd(0x80001) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000007240)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007280)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 915.814743ms ago: executing program 2 (id=338): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000100), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40) getdents(r2, &(0x7f00000002c0)=""/4096, 0x1000) 914.79972ms ago: executing program 3 (id=339): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0xc2300f4, 0x3, 0x2}) 860.248554ms ago: executing program 4 (id=340): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) unshare(0x2a020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) 285.698332ms ago: executing program 0 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x100, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x60}, 0xc) 270.420608ms ago: executing program 0 (id=342): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000038c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 168.654358ms ago: executing program 0 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000740)={@val={0x0, 0xa00}, @val={0x0, 0x0, 0x9, 0xd, 0x9, 0x8000}, @arp=@ether_ipv6={0x304, 0x86dd, 0x6, 0x10, 0x9, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote}}, 0x320) 30.897089ms ago: executing program 0 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 3.112676ms ago: executing program 2 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000005c0)="8c", 0x1) 0s ago: executing program 4 (id=346): mknodat$md(0xffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000380)) pwrite64(r0, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) pread64(r0, &(0x7f0000000400)=""/512, 0x200, 0x10000) ioctl$STOP_ARRAY(r0, 0x932, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3965' (ED25519) to the list of known hosts. [ 41.654302][ T5779] cgroup: Unknown subsys name 'net' [ 41.815586][ T5779] cgroup: Unknown subsys name 'cpuset' [ 41.819785][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.676825][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.906638][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.907032][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.908597][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.908855][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.909916][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.910395][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.911118][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.912405][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.912447][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.912580][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.913555][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.913698][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.913747][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.914675][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.916329][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.916354][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.918420][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.918541][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.919594][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.922854][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.114366][ T5799] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.114938][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.115072][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.116458][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.120060][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.121572][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.215073][ T5791] infiniband rxe0: set active [ 46.221390][ T5791] infiniband rxe0: added rxe_eth0 [ 46.234719][ T5791] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.234740][ T5791] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.234759][ T5791] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.236421][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.266784][ T5791] RDS/IB: rxe0: added [ 46.266932][ T5791] smc: adding ib device rxe0 with port count 1 [ 46.266990][ T5791] smc: ib device rxe0 port 1 has no pnetid [ 46.284794][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.304545][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.306028][ T1620] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.334604][ T1620] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.358979][ T1620] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.408201][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.489397][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.489446][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.489561][ T5799] bridge_slave_0: entered allmulticast mode [ 46.493033][ T5799] bridge_slave_0: entered promiscuous mode [ 46.505880][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.506405][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.506480][ T5799] bridge_slave_1: entered allmulticast mode [ 46.507180][ T5799] bridge_slave_1: entered promiscuous mode [ 46.523786][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.523974][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.524042][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.524096][ T5792] bridge_slave_0: entered allmulticast mode [ 46.524912][ T5792] bridge_slave_0: entered promiscuous mode [ 46.526652][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.526731][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.526787][ T5792] bridge_slave_1: entered allmulticast mode [ 46.527448][ T5792] bridge_slave_1: entered promiscuous mode [ 46.551735][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.553359][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.553453][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.553651][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.553714][ T5790] bridge_slave_0: entered allmulticast mode [ 46.554398][ T5790] bridge_slave_0: entered promiscuous mode [ 46.555973][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.556015][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.556070][ T5790] bridge_slave_1: entered allmulticast mode [ 46.556896][ T5790] bridge_slave_1: entered promiscuous mode [ 46.575616][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.589348][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.590372][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.597162][ T5799] team0: Port device team_slave_0 added [ 46.598841][ T5799] team0: Port device team_slave_1 added [ 46.599853][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.622716][ T5792] team0: Port device team_slave_0 added [ 46.628722][ T5790] team0: Port device team_slave_0 added [ 46.629776][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.629785][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.629796][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.631664][ T5792] team0: Port device team_slave_1 added [ 46.637882][ T5790] team0: Port device team_slave_1 added [ 46.638382][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.638391][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.638403][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.665175][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.665185][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.665196][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.666321][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.666329][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.666341][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.666998][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.667006][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.667017][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.667482][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.667490][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.667501][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.688962][ T5799] hsr_slave_0: entered promiscuous mode [ 46.689496][ T5799] hsr_slave_1: entered promiscuous mode [ 46.690134][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.719635][ T5792] hsr_slave_0: entered promiscuous mode [ 46.720071][ T5792] hsr_slave_1: entered promiscuous mode [ 46.720377][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 46.720385][ T5792] Cannot create hsr debugfs directory [ 46.783541][ T5790] hsr_slave_0: entered promiscuous mode [ 46.784350][ T5790] hsr_slave_1: entered promiscuous mode [ 46.784926][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 46.784939][ T5790] Cannot create hsr debugfs directory [ 47.015177][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.023562][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.024258][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.033990][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.035075][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.041627][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.044982][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.049237][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.153092][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.156241][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.158093][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.158143][ T5799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.158380][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.158424][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.175920][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.183504][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.183923][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.195984][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.220320][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.222445][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.244488][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.244542][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.244604][ T5791] bridge_slave_0: entered allmulticast mode [ 47.245236][ T5791] bridge_slave_0: entered promiscuous mode [ 47.255658][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.255703][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.255768][ T5791] bridge_slave_1: entered allmulticast mode [ 47.256753][ T5791] bridge_slave_1: entered promiscuous mode [ 47.280257][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.280312][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.284716][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.286677][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.290124][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.295542][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.299014][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.302854][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.313873][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.314082][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.314182][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.314224][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.315891][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.321071][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.335547][ T5791] team0: Port device team_slave_0 added [ 47.339607][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.341535][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.344316][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.349171][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.370835][ T5791] team0: Port device team_slave_1 added [ 47.397594][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.397606][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.397618][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.398529][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.398536][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.398548][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.432590][ T5791] hsr_slave_0: entered promiscuous mode [ 47.434552][ T5791] hsr_slave_1: entered promiscuous mode [ 47.434923][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 47.434934][ T5791] Cannot create hsr debugfs directory [ 47.440224][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.481010][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.508292][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.508345][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.533930][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.534028][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.537058][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.568012][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.598971][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.599017][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.605527][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.617770][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.617851][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.650255][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.650558][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.656197][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.657709][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.661384][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.669850][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.672141][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.674849][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.683540][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.696441][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.696491][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.697455][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.697527][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.807879][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.821496][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.834680][ T648] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.834766][ T648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.851914][ T648] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.851958][ T648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.964916][ T5803] Bluetooth: hci1: command tx timeout [ 47.964923][ T5798] Bluetooth: hci0: command tx timeout [ 47.973343][ T5798] Bluetooth: hci2: command tx timeout [ 47.973455][ T5798] Bluetooth: hci3: command tx timeout [ 48.059469][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.093935][ T5799] veth0_vlan: entered promiscuous mode [ 48.100546][ T5799] veth1_vlan: entered promiscuous mode [ 48.104777][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.112599][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.127440][ T5799] veth0_macvtap: entered promiscuous mode [ 48.130095][ T5799] veth1_macvtap: entered promiscuous mode [ 48.141332][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.163646][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.180493][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.188261][ T5790] veth0_vlan: entered promiscuous mode [ 48.188519][ T5792] veth0_vlan: entered promiscuous mode [ 48.196478][ T5790] veth1_vlan: entered promiscuous mode [ 48.200108][ T5792] veth1_vlan: entered promiscuous mode [ 48.239536][ T5791] veth0_vlan: entered promiscuous mode [ 48.253061][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.253470][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.254645][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.269250][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.269261][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.273158][ T5791] veth1_vlan: entered promiscuous mode [ 48.278875][ T5790] veth0_macvtap: entered promiscuous mode [ 48.285628][ T5790] veth1_macvtap: entered promiscuous mode [ 48.298460][ T5792] veth0_macvtap: entered promiscuous mode [ 48.307825][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.307837][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.310953][ T5792] veth1_macvtap: entered promiscuous mode [ 48.325925][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.329625][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.339900][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.346846][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.349239][ T5791] veth0_macvtap: entered promiscuous mode [ 48.351785][ T5791] veth1_macvtap: entered promiscuous mode [ 48.383635][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.406112][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.421660][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.421672][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.427276][ T5799] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.438230][ T5799] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.439640][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.439651][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.446275][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.448439][ T5799] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.449120][ T5799] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.465443][ T5799] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.489533][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.489551][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.502962][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.502997][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503014][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503031][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503049][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503066][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503083][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503101][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503118][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503135][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503152][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.503169][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.519861][ T341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.519878][ T341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.550202][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.550219][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.561304][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.561316][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.676303][ T5965] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 48.789495][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.789510][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.799136][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.909640][ T5983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 49.038153][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 49.374821][ T6007] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 49.374946][ T6007] CIFS: Attempting to mount //127.0.0.1/test [ 49.376900][ T6007] CIFS: VFS: Error connecting to socket. Aborting operation. [ 49.376937][ T6007] CIFS: VFS: cifs_mount failed w/return code = -111 [ 49.632919][ T5955] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.713551][ T6015] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 49.797289][ T5955] usb 8-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 49.799507][ T5955] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 49.799527][ T5955] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 49.801279][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.801295][ T5955] usb 8-1: Product: syz [ 49.801302][ T5955] usb 8-1: Manufacturer: syz [ 49.801308][ T5955] usb 8-1: SerialNumber: syz [ 49.935877][ T6020] sctp: [Deprecated]: syz.2.23 (pid 6020) Use of int in max_burst socket option. [ 49.935877][ T6020] Use struct sctp_assoc_value instead [ 50.017242][ T5955] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 50.043096][ T5803] Bluetooth: hci3: command tx timeout [ 50.043127][ T5803] Bluetooth: hci2: command tx timeout [ 50.043191][ T5798] Bluetooth: hci0: command tx timeout [ 50.222811][ T5876] usb 8-1: USB disconnect, device number 2 [ 50.227489][ T5876] usblp0: removed [ 50.348334][ T6022] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 51.213706][ T6050] input: syz1 as /devices/virtual/input/input5 [ 51.392901][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 51.392948][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 51.392955][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 51.962991][ T5803] Bluetooth: hci1: command tx timeout [ 52.090579][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.121915][ T6077] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 52.124232][ T5150] Bluetooth: hci0: command tx timeout [ 52.124256][ T5150] Bluetooth: hci2: command tx timeout [ 52.124312][ T5803] Bluetooth: hci3: command tx timeout [ 52.463768][ T6099] device-mapper: ioctl: remove_all left 1 open device(s) [ 52.773715][ T6111] FAULT_INJECTION: forcing a failure. [ 52.773715][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 52.773742][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.1.53 Not tainted syzkaller #0 PREEMPT(full) [ 52.773763][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.773772][ T6111] Call Trace: [ 52.773778][ T6111] [ 52.773785][ T6111] dump_stack_lvl+0x100/0x190 [ 52.773817][ T6111] should_fail_ex.cold+0x5/0xa [ 52.773844][ T6111] should_failslab+0xc2/0x120 [ 52.773866][ T6111] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.773890][ T6111] ? __alloc_workqueue+0xd0/0x1900 [ 52.773915][ T6111] __alloc_workqueue+0xd0/0x1900 [ 52.773937][ T6111] ? is_dynamic_key+0xc3/0x170 [ 52.773957][ T6111] ? lockdep_init_map_type+0xe6/0x250 [ 52.773978][ T6111] alloc_workqueue_noprof+0xc7/0x130 [ 52.774000][ T6111] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 52.774019][ T6111] ? __pfx_dev_set_name+0x10/0x10 [ 52.774042][ T6111] ? __kasan_kmalloc+0xaa/0xb0 [ 52.774061][ T6111] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 52.774087][ T6111] hci_register_dev+0x240/0xcc0 [ 52.774111][ T6111] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 52.774132][ T6111] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 52.774147][ T6111] tty_compat_ioctl+0x24d/0x420 [ 52.774176][ T6111] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 52.774199][ T6111] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 52.774230][ T6111] __do_fast_syscall_32+0x14b/0x8c0 [ 52.774259][ T6111] do_fast_syscall_32+0x32/0x70 [ 52.774282][ T6111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.774303][ T6111] RIP: 0023:0xf744efbc [ 52.774317][ T6111] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.774331][ T6111] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 52.774349][ T6111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400455c8 [ 52.774359][ T6111] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.774370][ T6111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.774380][ T6111] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.774390][ T6111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.774414][ T6111] [ 52.774968][ T6111] Bluetooth: Can't register HCI device [ 52.986173][ T6115] event trace: Could not enable event p [ 53.038707][ T6117] FAULT_INJECTION: forcing a failure. [ 53.038707][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 53.038734][ T6117] CPU: 3 UID: 0 PID: 6117 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT(full) [ 53.038755][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.038766][ T6117] Call Trace: [ 53.038772][ T6117] [ 53.038780][ T6117] dump_stack_lvl+0x100/0x190 [ 53.038813][ T6117] should_fail_ex.cold+0x5/0xa [ 53.038841][ T6117] should_failslab+0xc2/0x120 [ 53.038864][ T6117] __kmalloc_noprof+0xfc/0x840 [ 53.038882][ T6117] ? lsm_blob_alloc+0x68/0x90 [ 53.038906][ T6117] lsm_blob_alloc+0x68/0x90 [ 53.038924][ T6117] security_task_alloc+0x2a/0x260 [ 53.038954][ T6117] copy_process+0x2c52/0x8510 [ 53.038990][ T6117] ? __pfx_copy_process+0x10/0x10 [ 53.039010][ T6117] ? futex_wake+0x4ea/0x5e0 [ 53.039038][ T6117] kernel_clone+0x176/0x9d0 [ 53.039058][ T6117] ? __pfx_kernel_clone+0x10/0x10 [ 53.039083][ T6117] ? ksys_write+0x190/0x250 [ 53.039115][ T6117] __do_compat_sys_ia32_clone+0xd4/0x120 [ 53.039136][ T6117] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 53.039155][ T6117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 53.039193][ T6117] ? __might_fault+0xc5/0x140 [ 53.039215][ T6117] ? __might_fault+0xc5/0x140 [ 53.039245][ T6117] __do_fast_syscall_32+0x14b/0x8c0 [ 53.039271][ T6117] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.039296][ T6117] do_fast_syscall_32+0x32/0x70 [ 53.039321][ T6117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.039345][ T6117] RIP: 0023:0xf7fa6fbc [ 53.039360][ T6117] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.039376][ T6117] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 53.039394][ T6117] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 53.039405][ T6117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.039415][ T6117] RBP: 00000000f54565ec R08: 0000000000000000 R09: 0000000000000000 [ 53.039426][ T6117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.039436][ T6117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.039460][ T6117] [ 53.563809][ T5804] Bluetooth: hci4: command 0x1003 tx timeout [ 53.564175][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 53.625479][ T6133] FAULT_INJECTION: forcing a failure. [ 53.625479][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 53.625507][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(full) [ 53.625525][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.625536][ T6133] Call Trace: [ 53.625564][ T6133] [ 53.625572][ T6133] dump_stack_lvl+0x100/0x190 [ 53.625607][ T6133] should_fail_ex.cold+0x5/0xa [ 53.625635][ T6133] should_failslab+0xc2/0x120 [ 53.625658][ T6133] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.625683][ T6133] ? __igmp_group_dropped+0x7e6/0x1400 [ 53.625708][ T6133] __igmp_group_dropped+0x7e6/0x1400 [ 53.625732][ T6133] ? __pfx___igmp_group_dropped+0x10/0x10 [ 53.625752][ T6133] ? __local_bh_enable_ip+0xa5/0x120 [ 53.625770][ T6133] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.625817][ T6133] __ip_mc_dec_group+0x241/0x340 [ 53.625841][ T6133] ip_mc_leave_group+0x29c/0x4e0 [ 53.625866][ T6133] ip_mc_msfilter+0xa1d/0xbf0 [ 53.625891][ T6133] ? __pfx_ip_mc_msfilter+0x10/0x10 [ 53.625920][ T6133] do_ip_setsockopt+0x2e90/0x3200 [ 53.625949][ T6133] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 53.625974][ T6133] ? __lock_acquire+0x5c0/0x1f40 [ 53.625999][ T6133] ? lock_acquire+0x1d1/0x380 [ 53.626020][ T6133] ip_setsockopt+0x5a/0xf0 [ 53.626047][ T6133] udp_setsockopt+0x64/0xb0 [ 53.626067][ T6133] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.626089][ T6133] do_sock_setsockopt+0xf3/0x1d0 [ 53.626109][ T6133] __sys_setsockopt+0x119/0x190 [ 53.626137][ T6133] __ia32_sys_setsockopt+0xbc/0x160 [ 53.626159][ T6133] ? __might_fault+0x111/0x140 [ 53.626182][ T6133] __do_fast_syscall_32+0x14b/0x8c0 [ 53.626208][ T6133] do_fast_syscall_32+0x32/0x70 [ 53.626232][ T6133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.626258][ T6133] RIP: 0023:0xf741efbc [ 53.626272][ T6133] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 53.626290][ T6133] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 53.626307][ T6133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 53.626319][ T6133] RDX: 0000000000000029 RSI: 00000000800000c0 RDI: 0000000000000057 [ 53.626330][ T6133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.626340][ T6133] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.626352][ T6133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.626376][ T6133] [ 53.856950][ T6139] netlink: 'syz.2.65': attribute type 19 has an invalid length. [ 54.042086][ T6143] Illegal XDP return value 4294967274 on prog (id 11) dev syzkaller1, expect packet loss! [ 54.044005][ T5798] Bluetooth: hci1: command tx timeout [ 54.112967][ T6147] overlayfs: cannot append lower layer [ 54.126876][ T6145] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.202938][ T5798] Bluetooth: hci2: command tx timeout [ 54.202969][ T5798] Bluetooth: hci0: command tx timeout [ 54.317447][ T6159] warning: `syz.1.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.418780][ T6164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.562395][ T6170] tipc: Started in network mode [ 54.562408][ T6170] tipc: Node identity 4, cluster identity 4711 [ 54.562414][ T6170] tipc: Node number set to 4 [ 54.580112][ T6172] TC_ACT_REPEAT abuse ? [ 54.661016][ T6176] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.661031][ T6176] overlayfs: failed to set xattr on upper [ 54.661035][ T6176] overlayfs: ...falling back to redirect_dir=nofollow. [ 54.661038][ T6176] overlayfs: ...falling back to index=off. [ 54.661042][ T6176] overlayfs: ...falling back to uuid=null. [ 54.667104][ T6176] capability: warning: `syz.0.81' uses deprecated v2 capabilities in a way that may be insecure [ 54.667572][ T6176] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 54.667583][ T6176] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 54.667639][ T6176] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 54.773088][ T6182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.972649][ T5877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.106086][ T5877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.178155][ T5877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.221234][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.226383][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.229847][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.234979][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.235941][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.263109][ T5877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.375763][ T5877] bridge_slave_1: left allmulticast mode [ 55.375795][ T5877] bridge_slave_1: left promiscuous mode [ 55.376490][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.382270][ T5877] bridge_slave_0: left allmulticast mode [ 55.382289][ T5877] bridge_slave_0: left promiscuous mode [ 55.382444][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.527055][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.530408][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.531732][ T5877] bond0 (unregistering): Released all slaves [ 55.597340][ T5877] tipc: Left network mode [ 55.668157][ T6197] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.954299][ T75] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.999983][ T5877] hsr_slave_0: left promiscuous mode [ 56.000655][ T5877] hsr_slave_1: left promiscuous mode [ 56.001396][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.001418][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.002685][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.002701][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.015638][ T5877] veth1_macvtap: left promiscuous mode [ 56.016123][ T5877] veth0_macvtap: left promiscuous mode [ 56.016281][ T5877] veth1_vlan: left promiscuous mode [ 56.016420][ T5877] veth0_vlan: left promiscuous mode [ 56.114485][ T75] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 56.116271][ T75] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.116286][ T75] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 56.116294][ T75] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.116315][ T75] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 56.116329][ T75] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 56.118291][ T75] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.118304][ T75] usb 5-1: Product: syz [ 56.118311][ T75] usb 5-1: Manufacturer: syz [ 56.152327][ T75] cdc_wdm 5-1:1.0: skipping garbage [ 56.152338][ T75] cdc_wdm 5-1:1.0: skipping garbage [ 56.156844][ T75] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 56.156862][ T75] cdc_wdm 5-1:1.0: Unknown control protocol [ 56.218329][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 56.229672][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 56.398354][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.398505][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.398597][ T6197] bridge_slave_0: entered allmulticast mode [ 56.399638][ T6197] bridge_slave_0: entered promiscuous mode [ 56.401025][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.401093][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.401146][ T6197] bridge_slave_1: entered allmulticast mode [ 56.402205][ T6197] bridge_slave_1: entered promiscuous mode [ 56.421435][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.423531][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.437601][ T6197] team0: Port device team_slave_0 added [ 56.439451][ T6197] team0: Port device team_slave_1 added [ 56.451696][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.451709][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.451727][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.452727][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.452734][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.452745][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.481439][ T6197] hsr_slave_0: entered promiscuous mode [ 56.482178][ T6197] hsr_slave_1: entered promiscuous mode [ 56.651760][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 56.652325][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.652370][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.653079][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.653089][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.654945][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.654955][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.657012][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.657022][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.658971][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.658986][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.661122][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.661132][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.663094][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.663107][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.665229][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.665238][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.667151][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.667161][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.669147][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 56.669156][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 56.696243][ T9] usb 5-1: USB disconnect, device number 2 [ 56.696400][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 57.323021][ T5798] Bluetooth: hci3: command tx timeout [ 58.386461][ T6207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.396031][ T6197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.415237][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.416198][ T6197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.419968][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.421352][ T6197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.437092][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.437971][ T6197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.442689][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.490855][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.498987][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.505484][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.505552][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.518990][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.519080][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.602666][ T5504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.785424][ T5504] 8021q: adding VLAN 0 to HW filter on device eth3 [ 58.874990][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.878411][ T6308] FAULT_INJECTION: forcing a failure. [ 58.878411][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 58.878429][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 58.878441][ T6308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.878447][ T6308] Call Trace: [ 58.878451][ T6308] [ 58.878455][ T6308] dump_stack_lvl+0x100/0x190 [ 58.878476][ T6308] should_fail_ex.cold+0x5/0xa [ 58.878493][ T6308] should_failslab+0xc2/0x120 [ 58.878507][ T6308] __kmalloc_noprof+0xfc/0x840 [ 58.878517][ T6308] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 58.878532][ T6308] init_skcipher_req.constprop.0+0x9c/0x180 [ 58.878543][ T6308] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 58.878557][ T6308] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 58.878571][ T6308] ? kasan_quarantine_put+0x104/0x240 [ 58.878582][ T6308] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.878598][ T6308] ? __kasan_check_byte+0x13/0x50 [ 58.878612][ T6308] ? get_derived_key+0x11b/0x140 [ 58.878625][ T6308] encrypted_read+0x389/0x850 [ 58.878636][ T6308] ? lock_acquire+0x1d1/0x380 [ 58.878647][ T6308] ? __keyctl_read_key+0x22/0xe0 [ 58.878658][ T6308] ? __pfx_encrypted_read+0x10/0x10 [ 58.878669][ T6308] ? __pfx___might_resched+0x10/0x10 [ 58.878688][ T6308] ? down_read+0x136/0x4c0 [ 58.878701][ T6308] ? trace_kmalloc+0xeb/0x110 [ 58.878713][ T6308] ? __pfx_down_read+0x10/0x10 [ 58.878727][ T6308] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 58.878739][ T6308] ? __pfx_encrypted_read+0x10/0x10 [ 58.878750][ T6308] __keyctl_read_key+0x9d/0xe0 [ 58.878762][ T6308] keyctl_read_key+0x1cb/0x360 [ 58.878775][ T6308] __ia32_compat_sys_keyctl+0x3a8/0x550 [ 58.878792][ T6308] __do_fast_syscall_32+0x14b/0x8c0 [ 58.878808][ T6308] do_fast_syscall_32+0x32/0x70 [ 58.878822][ T6308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.878835][ T6308] RIP: 0023:0xf7fa6fbc [ 58.878844][ T6308] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 58.878867][ T6308] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 58.878880][ T6308] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000003db24d39 [ 58.878886][ T6308] RDX: 0000000080000240 RSI: 00000000349b7f55 RDI: 0000000000000000 [ 58.878893][ T6308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.878899][ T6308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.878906][ T6308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.878920][ T6308] [ 58.878925][ T6308] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 59.029066][ T5504] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.097148][ T6197] veth0_vlan: entered promiscuous mode [ 59.104726][ T6197] veth1_vlan: entered promiscuous mode [ 59.161310][ T6197] veth0_macvtap: entered promiscuous mode [ 59.170298][ T6197] veth1_macvtap: entered promiscuous mode [ 59.187259][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.201833][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.206760][ T5504] 8021q: adding VLAN 0 to HW filter on device eth5 [ 59.232483][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 59.275790][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.275809][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.284702][ T5877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.284738][ T5877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.284766][ T5877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.284793][ T5877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.294281][ T341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.294293][ T341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.395281][ T6359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.403711][ T5798] Bluetooth: hci3: command tx timeout [ 59.498511][ T6369] FAULT_INJECTION: forcing a failure. [ 59.498511][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 59.498540][ T6369] CPU: 2 UID: 0 PID: 6369 Comm: syz.4.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.498563][ T6369] Tainted: [L]=SOFTLOCKUP [ 59.498569][ T6369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.498577][ T6369] Call Trace: [ 59.498583][ T6369] [ 59.498590][ T6369] dump_stack_lvl+0x100/0x190 [ 59.498625][ T6369] should_fail_ex.cold+0x5/0xa [ 59.498652][ T6369] should_failslab+0xc2/0x120 [ 59.498675][ T6369] __kvmalloc_node_noprof+0x113/0x9b0 [ 59.498695][ T6369] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 59.498718][ T6369] ? bpf_uprobe_multi_link_attach+0xc74/0x1550 [ 59.498749][ T6369] bpf_uprobe_multi_link_attach+0xc74/0x1550 [ 59.498774][ T6369] ? find_held_lock+0x2b/0x80 [ 59.498812][ T6369] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 59.498836][ T6369] ? __fget_files+0x21f/0x3d0 [ 59.498860][ T6369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.498887][ T6369] __sys_bpf+0x448e/0x4b60 [ 59.498911][ T6369] ? __pfx___sys_bpf+0x10/0x10 [ 59.498929][ T6369] ? find_held_lock+0x2b/0x80 [ 59.498950][ T6369] ? futex_wake+0x4ea/0x5e0 [ 59.498984][ T6369] ? rcu_read_lock_any_held+0x6a/0x90 [ 59.499008][ T6369] ? find_held_lock+0x2b/0x80 [ 59.499031][ T6369] ? ksys_write+0x190/0x250 [ 59.499050][ T6369] ? ksys_write+0x190/0x250 [ 59.499085][ T6369] ? lock_acquire+0x1d1/0x380 [ 59.499102][ T6369] ? __might_fault+0xc5/0x140 [ 59.499124][ T6369] ? find_held_lock+0x2b/0x80 [ 59.499150][ T6369] ? __ia32_sys_bpf+0xcc/0x170 [ 59.499168][ T6369] __ia32_sys_bpf+0xcc/0x170 [ 59.499187][ T6369] ? __might_fault+0x111/0x140 [ 59.499211][ T6369] __do_fast_syscall_32+0x14b/0x8c0 [ 59.499239][ T6369] do_fast_syscall_32+0x32/0x70 [ 59.499264][ T6369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.499285][ T6369] RIP: 0023:0xf7fc4fbc [ 59.499300][ T6369] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.499316][ T6369] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 59.499335][ T6369] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800012c0 [ 59.499347][ T6369] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.499358][ T6369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.499369][ T6369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.499380][ T6369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.499407][ T6369] [ 59.541647][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'. [ 59.548252][ T6373] FAULT_INJECTION: forcing a failure. [ 59.548252][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 59.548279][ T6373] CPU: 3 UID: 0 PID: 6373 Comm: syz.0.131 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.548305][ T6373] Tainted: [L]=SOFTLOCKUP [ 59.548312][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.548322][ T6373] Call Trace: [ 59.548329][ T6373] [ 59.548335][ T6373] dump_stack_lvl+0x100/0x190 [ 59.548370][ T6373] should_fail_ex.cold+0x5/0xa [ 59.548396][ T6373] should_failslab+0xc2/0x120 [ 59.548418][ T6373] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.548448][ T6373] ? __kernfs_new_node+0xd2/0xa10 [ 59.548480][ T6373] __kernfs_new_node+0xd2/0xa10 [ 59.548512][ T6373] ? __pfx___kernfs_new_node+0x10/0x10 [ 59.548542][ T6373] ? lock_acquire+0x1d1/0x380 [ 59.548558][ T6373] ? kernfs_root+0x23/0x2a0 [ 59.548581][ T6373] ? find_held_lock+0x2b/0x80 [ 59.548602][ T6373] ? kernfs_root+0xee/0x2a0 [ 59.548630][ T6373] ? kernfs_root+0xee/0x2a0 [ 59.548659][ T6373] kernfs_new_node+0x194/0x200 [ 59.548686][ T6373] ? __pfx_kernfs_new_node+0x10/0x10 [ 59.548713][ T6373] ? kernfs_add_one+0x213/0xb40 [ 59.548734][ T6373] __kernfs_create_file+0x53/0x350 [ 59.548754][ T6373] sysfs_add_file_mode_ns+0x207/0x3c0 [ 59.548779][ T6373] internal_create_group+0x593/0xfb0 [ 59.548807][ T6373] ? kobject_init_and_add+0x129/0x180 [ 59.548827][ T6373] ? __pfx_internal_create_group+0x10/0x10 [ 59.548850][ T6373] ? __pfx_kobject_init_and_add+0x10/0x10 [ 59.548867][ T6373] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 59.548886][ T6373] ? ___sys_sendmsg+0x190/0x1e0 [ 59.548904][ T6373] ? __sys_sendmsg+0x160/0x210 [ 59.548923][ T6373] ? __do_fast_syscall_32+0x14b/0x8c0 [ 59.548943][ T6373] ? do_fast_syscall_32+0x32/0x70 [ 59.548983][ T6373] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.549008][ T6373] internal_create_groups+0x9d/0x150 [ 59.549049][ T6373] netdev_queue_update_kobjects+0x115/0x6f0 [ 59.549082][ T6373] netdev_register_kobject+0x2e9/0x410 [ 59.549107][ T6373] register_netdevice+0x1313/0x26b0 [ 59.549128][ T6373] ? __pfx_register_netdevice+0x10/0x10 [ 59.549145][ T6373] ? dev_addr_mod+0x14f/0x2c0 [ 59.549165][ T6373] veth_newlink+0x2b7/0xd00 [ 59.549204][ T6373] ? alloc_netdev_mqs+0xefc/0x1540 [ 59.549233][ T6373] ? __pfx_veth_newlink+0x10/0x10 [ 59.549255][ T6373] ? netlink_rcv_skb+0x159/0x420 [ 59.549315][ T6373] ? alloc_netdev_mqs+0xefc/0x1540 [ 59.549335][ T6373] ? validate_linkmsg+0x5ff/0xcd0 [ 59.549359][ T6373] ? __pfx_validate_linkmsg+0x10/0x10 [ 59.549386][ T6373] ? alloc_netdev_mqs+0x11a7/0x1540 [ 59.549415][ T6373] ? rtnl_create_link+0xa4b/0xf80 [ 59.549433][ T6373] ? __pfx_veth_newlink+0x10/0x10 [ 59.549455][ T6373] rtnl_newlink+0x1697/0x2620 [ 59.549481][ T6373] ? __pfx_rtnl_newlink+0x10/0x10 [ 59.549499][ T6373] ? rcu_is_watching+0x13/0xc0 [ 59.549546][ T6373] ? kasan_quarantine_put+0x104/0x240 [ 59.549571][ T6373] ? kfree_skbmem+0x19a/0x210 [ 59.549610][ T6373] ? __dev_queue_xmit+0xa2e/0x48d0 [ 59.549639][ T6373] ? lock_acquire+0x1d1/0x380 [ 59.549657][ T6373] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 59.549675][ T6373] ? find_held_lock+0x2b/0x80 [ 59.549698][ T6373] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 59.549715][ T6373] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 59.549735][ T6373] ? __pfx_rtnl_newlink+0x10/0x10 [ 59.549753][ T6373] rtnetlink_rcv_msg+0x95e/0xe90 [ 59.549778][ T6373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.549811][ T6373] netlink_rcv_skb+0x159/0x420 [ 59.549838][ T6373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.549858][ T6373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.549883][ T6373] ? __asan_memcpy+0x3c/0x60 [ 59.549920][ T6373] ? netlink_deliver_tap+0x1ae/0xb50 [ 59.549953][ T6373] netlink_unicast+0x668/0x950 [ 59.549983][ T6373] ? __pfx_netlink_unicast+0x10/0x10 [ 59.550018][ T6373] netlink_sendmsg+0x9ac/0x10c0 [ 59.550050][ T6373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.550083][ T6373] ? apparmor_socket_sendmsg+0x165/0x280 [ 59.550109][ T6373] ? ____sys_sendmsg+0xa99/0xc30 [ 59.550128][ T6373] ____sys_sendmsg+0xa99/0xc30 [ 59.550148][ T6373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.550178][ T6373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.550210][ T6373] ___sys_sendmsg+0x190/0x1e0 [ 59.550232][ T6373] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.550251][ T6373] ? futex_wait+0x11e/0x370 [ 59.550278][ T6373] ? find_held_lock+0x2b/0x80 [ 59.550320][ T6373] __sys_sendmsg+0x160/0x210 [ 59.550347][ T6373] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.550388][ T6373] __do_fast_syscall_32+0x14b/0x8c0 [ 59.550417][ T6373] do_fast_syscall_32+0x32/0x70 [ 59.550442][ T6373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.550463][ T6373] RIP: 0023:0xf7fa6fbc [ 59.550478][ T6373] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.550495][ T6373] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 59.550513][ T6373] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 59.550525][ T6373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.550536][ T6373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.550546][ T6373] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.550555][ T6373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.550577][ T6373] [ 59.579903][ T6377] netfs: Cache "CacheFiles" added (type cachefiles) [ 59.579923][ T6377] CacheFiles: File cache on CacheFiles registered [ 59.580306][ T6375] CacheFiles: File cache on CacheFiles unregistering [ 59.580316][ T6375] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 59.599992][ T6376] TC_ACT_REPEAT abuse ? [ 59.621664][ T6379] capability: warning: `syz.0.134' uses 32-bit capabilities (legacy support in use) [ 59.621921][ T6379] FAULT_INJECTION: forcing a failure. [ 59.621921][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 59.621936][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.0.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.621951][ T6379] Tainted: [L]=SOFTLOCKUP [ 59.621956][ T6379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.621962][ T6379] Call Trace: [ 59.621966][ T6379] [ 59.621971][ T6379] dump_stack_lvl+0x100/0x190 [ 59.621992][ T6379] should_fail_ex.cold+0x5/0xa [ 59.622008][ T6379] should_failslab+0xc2/0x120 [ 59.622023][ T6379] __kmalloc_noprof+0xfc/0x840 [ 59.622033][ T6379] ? handler_new_ref+0x1ab/0xc60 [ 59.622047][ T6379] handler_new_ref+0x1ab/0xc60 [ 59.622061][ T6379] v4l2_ctrl_new+0xe67/0x23a0 [ 59.622085][ T6379] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 59.622104][ T6379] v4l2_ctrl_new_std+0x1bb/0x290 [ 59.622120][ T6379] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 59.622131][ T6379] ? rcu_is_watching+0x13/0xc0 [ 59.622149][ T6379] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 59.622164][ T6379] ? media_request_object_init+0x105/0x180 [ 59.622183][ T6379] vicodec_open+0x1b2/0xf70 [ 59.622196][ T6379] ? kobject_get_unless_zero+0x156/0x200 [ 59.622211][ T6379] v4l2_open+0x1d2/0x490 [ 59.622221][ T6379] ? __pfx_v4l2_open+0x10/0x10 [ 59.622231][ T6379] chrdev_open+0x234/0x6a0 [ 59.622243][ T6379] ? __pfx_apparmor_file_open+0x10/0x10 [ 59.622257][ T6379] ? __pfx_chrdev_open+0x10/0x10 [ 59.622270][ T6379] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 59.622287][ T6379] do_dentry_open+0x674/0x1470 [ 59.622299][ T6379] ? __pfx_chrdev_open+0x10/0x10 [ 59.622313][ T6379] vfs_open_consume+0xcc/0x460 [ 59.622329][ T6379] path_openat+0x1547/0x23f0 [ 59.622343][ T6379] ? __pfx_path_openat+0x10/0x10 [ 59.622360][ T6379] do_file_open+0x20e/0x430 [ 59.622374][ T6379] ? __pfx_do_file_open+0x10/0x10 [ 59.622397][ T6379] ? _raw_spin_unlock+0x28/0x50 [ 59.622408][ T6379] ? alloc_fd+0x471/0x7a0 [ 59.622438][ T6379] do_sys_openat2+0x163/0x1d0 [ 59.622454][ T6379] ? __pfx_do_sys_openat2+0x10/0x10 [ 59.622471][ T6379] ? __do_sys_capset+0xfb/0x450 [ 59.622492][ T6379] __ia32_compat_sys_openat+0x12d/0x210 [ 59.622509][ T6379] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 59.622531][ T6379] __do_fast_syscall_32+0x14b/0x8c0 [ 59.622548][ T6379] do_fast_syscall_32+0x32/0x70 [ 59.622564][ T6379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.622577][ T6379] RIP: 0023:0xf7fa6fbc [ 59.622586][ T6379] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 59.622596][ T6379] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 59.622606][ T6379] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 59.622612][ T6379] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.622618][ T6379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.622623][ T6379] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.622630][ T6379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.622644][ T6379] [ 59.661605][ T42] audit: type=1326 audit(1793846371.174:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.0.136" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fbc code=0x0 [ 60.291563][ T6395] kvm: pic: single mode not supported [ 60.291626][ T6395] kvm: pic: level sensitive irq not supported [ 60.467330][ T6405] netlink: 68 bytes leftover after parsing attributes in process `syz.2.143'. [ 60.607013][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.838357][ T6431] input: syz0 as /devices/virtual/input/input6 [ 60.880553][ T42] audit: type=1800 audit(1793846372.394:3): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.149" name="/" dev="fuse" ino=1 res=0 errno=-5 [ 61.445153][ T6457] netlink: 'syz.2.160': attribute type 21 has an invalid length. [ 61.445176][ T6457] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.449331][ T6457] ======================================================= [ 61.449331][ T6457] WARNING: The mand mount option has been deprecated and [ 61.449331][ T6457] and is ignored by this kernel. Remove the mand [ 61.449331][ T6457] option from the mount to silence this warning. [ 61.449331][ T6457] ======================================================= [ 61.449409][ T6457] 9p: Bad value for 'rfdno' [ 61.499152][ T5798] Bluetooth: hci3: command tx timeout [ 61.565291][ T6461] syzkaller0: entered promiscuous mode [ 61.565314][ T6461] syzkaller0: entered allmulticast mode [ 61.630849][ T6461] syzkaller0: left promiscuous mode [ 61.630872][ T6461] syzkaller0: left allmulticast mode [ 62.096000][ T6476] Console: switching to colour dummy device 80x25 [ 63.165044][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165081][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165099][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165116][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165133][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165196][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165216][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165235][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165254][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.165274][ T5885] hid-generic 0005:07C0:0005.0002: unknown main item tag 0x0 [ 63.172094][ T5885] hid-generic 0005:07C0:0005.0002: hidraw1: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 63.564932][ T5798] Bluetooth: hci3: command tx timeout qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 63.662200][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 63.664675][ T6531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.069824][ T6539] FAULT_INJECTION: forcing a failure. [ 64.069824][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 64.069854][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.0.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.069878][ T6539] Tainted: [L]=SOFTLOCKUP [ 64.069884][ T6539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.069893][ T6539] Call Trace: [ 64.069900][ T6539] [ 64.069908][ T6539] dump_stack_lvl+0x100/0x190 [ 64.069940][ T6539] should_fail_ex.cold+0x5/0xa [ 64.069964][ T6539] should_failslab+0xc2/0x120 [ 64.069984][ T6539] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.070009][ T6539] ? subflow_create_ctx+0x9b/0x2e0 [ 64.070038][ T6539] subflow_create_ctx+0x9b/0x2e0 [ 64.070065][ T6539] subflow_ulp_init+0xc3/0x530 [ 64.070089][ T6539] tcp_set_ulp+0x44b/0x810 [ 64.070114][ T6539] mptcp_subflow_create_socket+0x385/0xa30 [ 64.070136][ T6539] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 64.070156][ T6539] ? lock_acquire+0x1d1/0x380 [ 64.070176][ T6539] __mptcp_nmpc_sk+0x17f/0x880 [ 64.070192][ T6539] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 64.070211][ T6539] ? __local_bh_enable_ip+0xa5/0x120 [ 64.070230][ T6539] mptcp_bind+0xa3/0x1e0 [ 64.070249][ T6539] __sys_bind+0x1a9/0x260 [ 64.070270][ T6539] ? __pfx___sys_bind+0x10/0x10 [ 64.070296][ T6539] ? __might_fault+0xc5/0x140 [ 64.070313][ T6539] ? __might_fault+0xc5/0x140 [ 64.070334][ T6539] __ia32_sys_bind+0x71/0xb0 [ 64.070360][ T6539] __do_fast_syscall_32+0x14b/0x8c0 [ 64.070390][ T6539] do_fast_syscall_32+0x32/0x70 [ 64.070414][ T6539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.070435][ T6539] RIP: 0023:0xf7fa6fbc [ 64.070451][ T6539] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.070467][ T6539] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 64.070486][ T6539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 64.070499][ T6539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.070510][ T6539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.070521][ T6539] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.070530][ T6539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.070554][ T6539] [ 64.201850][ T6545] FAULT_INJECTION: forcing a failure. [ 64.201850][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 64.201869][ T6545] CPU: 1 UID: 0 PID: 6545 Comm: syz.0.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.201883][ T6545] Tainted: [L]=SOFTLOCKUP [ 64.201887][ T6545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.201892][ T6545] Call Trace: [ 64.201896][ T6545] [ 64.201901][ T6545] dump_stack_lvl+0x100/0x190 [ 64.201920][ T6545] should_fail_ex.cold+0x5/0xa [ 64.201937][ T6545] should_failslab+0xc2/0x120 [ 64.201950][ T6545] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 64.201962][ T6545] ? __kasan_kmalloc+0xaa/0xb0 [ 64.201972][ T6545] ? __request_module+0x2d5/0x6a0 [ 64.201989][ T6545] kstrdup+0x51/0xe0 [ 64.202002][ T6545] __request_module+0x2d5/0x6a0 [ 64.202017][ T6545] ? __pfx___request_module+0x10/0x10 [ 64.202036][ T6545] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.202056][ T6545] load_settype+0x5e/0xe0 [ 64.202071][ T6545] __find_set_type_get+0x42/0x440 [ 64.202088][ T6545] __find_set_type_get+0x30a/0x440 [ 64.202104][ T6545] ip_set_create+0x477/0x1510 [ 64.202124][ T6545] ? __pfx_ip_set_create+0x10/0x10 [ 64.202138][ T6545] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 64.202160][ T6545] ? find_held_lock+0x2b/0x80 [ 64.202177][ T6545] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 64.202194][ T6545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.202207][ T6545] ? kfree_skbmem+0x19f/0x210 [ 64.202235][ T6545] netlink_rcv_skb+0x159/0x420 [ 64.202252][ T6545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.202265][ T6545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.202286][ T6545] ? ns_capable+0xcd/0xf0 [ 64.202303][ T6545] nfnetlink_rcv+0x1b3/0x440 [ 64.202315][ T6545] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 64.202326][ T6545] ? rcu_is_watching+0x13/0xc0 [ 64.202344][ T6545] netlink_unicast+0x668/0x950 [ 64.202361][ T6545] ? __pfx_netlink_unicast+0x10/0x10 [ 64.202380][ T6545] netlink_sendmsg+0x9ac/0x10c0 [ 64.202397][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.202415][ T6545] ? apparmor_socket_sendmsg+0x165/0x280 [ 64.202430][ T6545] ? ____sys_sendmsg+0xa99/0xc30 [ 64.202440][ T6545] ____sys_sendmsg+0xa99/0xc30 [ 64.202450][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.202466][ T6545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.202483][ T6545] ___sys_sendmsg+0x190/0x1e0 [ 64.202496][ T6545] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.202507][ T6545] ? futex_wait+0x11e/0x370 [ 64.202522][ T6545] ? find_held_lock+0x2b/0x80 [ 64.202545][ T6545] __sys_sendmsg+0x160/0x210 [ 64.202559][ T6545] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.202583][ T6545] __do_fast_syscall_32+0x14b/0x8c0 [ 64.202599][ T6545] do_fast_syscall_32+0x32/0x70 [ 64.202613][ T6545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.202627][ T6545] RIP: 0023:0xf7fa6fbc [ 64.202636][ T6545] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.202654][ T6545] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 64.202666][ T6545] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 64.202673][ T6545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.202680][ T6545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.202687][ T6545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.202693][ T6545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.202708][ T6545] [ 64.202722][ T6545] Can't find ip_set type [ 64.512944][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.550702][ T6555] FAULT_INJECTION: forcing a failure. [ 64.550702][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 64.550730][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.3.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.550754][ T6555] Tainted: [L]=SOFTLOCKUP [ 64.550760][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.550769][ T6555] Call Trace: [ 64.550774][ T6555] [ 64.550783][ T6555] dump_stack_lvl+0x100/0x190 [ 64.550814][ T6555] should_fail_ex.cold+0x5/0xa [ 64.550841][ T6555] should_failslab+0xc2/0x120 [ 64.550861][ T6555] __kmalloc_noprof+0xfc/0x840 [ 64.550878][ T6555] ? do_raw_spin_lock+0x128/0x260 [ 64.550901][ T6555] ? sock_kmalloc+0x111/0x170 [ 64.550924][ T6555] sock_kmalloc+0x111/0x170 [ 64.550945][ T6555] hash_alloc_result+0xd7/0x150 [ 64.550972][ T6555] hash_sendmsg+0x6d4/0x10a0 [ 64.551015][ T6555] __sys_sendto+0x492/0x4e0 [ 64.551039][ T6555] ? __pfx_hash_sendmsg+0x10/0x10 [ 64.551056][ T6555] ? __pfx___sys_sendto+0x10/0x10 [ 64.551087][ T6555] ? lock_acquire+0x1d1/0x380 [ 64.551122][ T6555] __ia32_compat_sys_socketcall+0x59a/0x770 [ 64.551149][ T6555] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 64.551174][ T6555] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 64.551211][ T6555] do_int80_emulation+0x166/0x650 [ 64.551237][ T6555] asm_int80_emulation+0x1a/0x20 [ 64.551254][ T6555] RIP: 0023:0xf7107f6b [ 64.551269][ T6555] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 64.551284][ T6555] RSP: 002b:00000000f53c534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 64.551302][ T6555] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53c53f4 [ 64.551312][ T6555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.551321][ T6555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.551332][ T6555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.551340][ T6555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.551363][ T6555] [ 64.663470][ T5885] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 64.665538][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.665580][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.670901][ T5885] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 64.671435][ T5885] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 64.671717][ T5885] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 64.678791][ T5885] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 64.678842][ T5885] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 64.681243][ T5885] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 64.684371][ T5885] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 64.684406][ T5885] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 64.685873][ T5885] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 64.758756][ T6562] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 64.986356][ T5955] usb 5-1: USB disconnect, device number 3 [ 64.993525][ T5955] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 64.997799][ T5955] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 64.998293][ T5955] keyspan 5-1:1.0: device disconnected [ 65.678065][ T6574] bridge0: port 3(vlan3) entered blocking state [ 65.678147][ T6574] bridge0: port 3(vlan3) entered disabled state [ 65.678210][ T6574] vlan3: entered allmulticast mode [ 65.678933][ T6574] vlan3: entered promiscuous mode [ 65.691185][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.698823][ T6574] bridge_slave_1: left allmulticast mode [ 65.698847][ T6574] bridge_slave_1: left promiscuous mode [ 65.699039][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.705976][ T6576] process 'syz.2.206' launched './file1' with NULL argv: empty string added [ 65.714071][ T6574] bond0: (slave bond_slave_0): Releasing backup interface [ 65.743390][ T6574] bond0: (slave bond_slave_1): Releasing backup interface [ 65.761244][ T6574] team0: Port device team_slave_0 removed [ 65.766133][ T6574] team0: Port device team_slave_1 removed [ 65.766536][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.766547][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.769273][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.769286][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.773950][ T6574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.117243][ T6589] syz_tun: entered allmulticast mode [ 66.180314][ T6594] Zero length message leads to an empty skb [ 66.656946][ T6604] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.656968][ T6604] overlayfs: failed to set xattr on upper [ 66.656975][ T6604] overlayfs: ...falling back to redirect_dir=nofollow. [ 66.656983][ T6604] overlayfs: ...falling back to index=off. [ 66.656989][ T6604] overlayfs: ...falling back to uuid=null. [ 66.665460][ T6604] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 66.665507][ T6604] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 66.665616][ T6604] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 66.776574][ T6611] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 66.790264][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.856521][ T6611] bond1: (slave veth3): Enslaving as an active interface with a down link [ 66.856671][ T6613] veth0_virt_wifi: entered promiscuous mode [ 66.868459][ T6613] bond1: (slave veth0_virt_wifi): making interface the new active one [ 66.869476][ T6613] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 66.918422][ T6611] bond1: (slave veth0_virt_wifi): Releasing active interface [ 67.164356][ T6624] syzkaller0: entered promiscuous mode [ 67.164372][ T6624] syzkaller0: entered allmulticast mode [ 67.232356][ T6624] syzkaller0: left promiscuous mode [ 67.232371][ T6624] syzkaller0: left allmulticast mode [ 67.915046][ T6634] overlayfs: upper fs does not support file handles, falling back to index=off. [ 68.026734][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 68.133356][ T6641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.542273][ T6659] netlink: 64 bytes leftover after parsing attributes in process `syz.4.238'. [ 68.550214][ T6659] syzkaller1: entered promiscuous mode [ 68.550227][ T6659] syzkaller1: entered allmulticast mode [ 68.573089][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.723019][ T5798] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 68.732956][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 68.735063][ T50] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.736173][ T50] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 68.736200][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.736216][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.736227][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.736237][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.736254][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.745606][ T6664] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.905281][ T6672] syzkaller0: entered promiscuous mode [ 68.905304][ T6672] syzkaller0: entered allmulticast mode [ 68.950508][ T50] usb 7-1: GET_CAPABILITIES returned 0 [ 68.950548][ T50] usbtmc 7-1:16.0: can't read capabilities [ 68.955779][ T6672] syzkaller0: left promiscuous mode [ 68.955792][ T6672] syzkaller0: left allmulticast mode [ 69.192146][ T10] usb 7-1: USB disconnect, device number 2 [ 69.277710][ T6675] FAULT_INJECTION: forcing a failure. [ 69.277710][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 69.277732][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.3.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.277748][ T6675] Tainted: [L]=SOFTLOCKUP [ 69.277752][ T6675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.277758][ T6675] Call Trace: [ 69.277762][ T6675] [ 69.277767][ T6675] dump_stack_lvl+0x100/0x190 [ 69.277787][ T6675] should_fail_ex.cold+0x5/0xa [ 69.277804][ T6675] should_failslab+0xc2/0x120 [ 69.277818][ T6675] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.277833][ T6675] ? __page_table_check_ptes_set+0x1d5/0x530 [ 69.277847][ T6675] ? ptlock_alloc+0x1f/0x70 [ 69.277862][ T6675] ptlock_alloc+0x1f/0x70 [ 69.277873][ T6675] pte_alloc_one+0x82/0x3d0 [ 69.277890][ T6675] __pte_alloc+0x6d/0x3e0 [ 69.277906][ T6675] ? __pfx___pte_alloc+0x10/0x10 [ 69.277921][ T6675] ? mm_alloc_pmd+0x2c2/0x470 [ 69.277937][ T6675] mfill_establish_pmd+0x197/0x210 [ 69.277952][ T6675] mfill_atomic_poison.constprop.0+0x358/0x1620 [ 69.277972][ T6675] ? __pfx_mfill_atomic_poison.constprop.0+0x10/0x10 [ 69.277988][ T6675] ? lock_acquire+0x1d1/0x380 [ 69.277999][ T6675] ? __might_fault+0xc5/0x140 [ 69.278011][ T6675] ? find_held_lock+0x2b/0x80 [ 69.278032][ T6675] userfaultfd_ioctl+0x283b/0x6550 [ 69.278053][ T6675] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 69.278069][ T6675] ? do_vfs_ioctl+0x226/0x13e0 [ 69.278085][ T6675] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.278104][ T6675] ? find_held_lock+0x2b/0x80 [ 69.278118][ T6675] ? __fget_files+0x215/0x3d0 [ 69.278129][ T6675] ? hook_file_ioctl_common+0x140/0x440 [ 69.278148][ T6675] ? __fget_files+0x21f/0x3d0 [ 69.278160][ T6675] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 69.278175][ T6675] ? compat_ptr_ioctl+0x6e/0xa0 [ 69.278196][ T6675] compat_ptr_ioctl+0x6e/0xa0 [ 69.278213][ T6675] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 69.278228][ T6675] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 69.278246][ T6675] __do_fast_syscall_32+0x14b/0x8c0 [ 69.278282][ T6675] do_fast_syscall_32+0x32/0x70 [ 69.278297][ T6675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.278312][ T6675] RIP: 0023:0xf7f13fbc [ 69.278321][ T6675] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 69.278331][ T6675] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 69.278342][ T6675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa08 [ 69.278348][ T6675] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.278354][ T6675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.278360][ T6675] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.278365][ T6675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.278379][ T6675] [ 69.751105][ T6687] FAULT_INJECTION: forcing a failure. [ 69.751105][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 69.751126][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.2.248 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.751141][ T6687] Tainted: [L]=SOFTLOCKUP [ 69.751145][ T6687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.751151][ T6687] Call Trace: [ 69.751155][ T6687] [ 69.751160][ T6687] dump_stack_lvl+0x100/0x190 [ 69.751180][ T6687] should_fail_ex.cold+0x5/0xa [ 69.751196][ T6687] should_failslab+0xc2/0x120 [ 69.751211][ T6687] __kmalloc_cache_node_noprof+0x94/0x710 [ 69.751225][ T6687] ? sbitmap_queue_init_node+0x291/0x4a0 [ 69.751245][ T6687] sbitmap_queue_init_node+0x291/0x4a0 [ 69.751264][ T6687] blk_mq_init_tags+0x1ba/0x300 [ 69.751276][ T6687] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 69.751296][ T6687] ? blk_mq_update_queue_map+0x227/0x3a0 [ 69.751309][ T6687] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 69.751329][ T6687] loop_add+0x3b7/0xb60 [ 69.751344][ T6687] ? __pfx_loop_add+0x10/0x10 [ 69.751367][ T6687] ? __fget_files+0x34/0x3d0 [ 69.751378][ T6687] ? find_held_lock+0x2b/0x80 [ 69.751392][ T6687] ? __fget_files+0x215/0x3d0 [ 69.751405][ T6687] loop_control_ioctl+0xae/0x620 [ 69.751419][ T6687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 69.751436][ T6687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 69.751452][ T6687] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 69.751470][ T6687] __do_fast_syscall_32+0x14b/0x8c0 [ 69.751487][ T6687] do_fast_syscall_32+0x32/0x70 [ 69.751501][ T6687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.751514][ T6687] RIP: 0023:0xf741efbc [ 69.751523][ T6687] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 69.751532][ T6687] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 69.751542][ T6687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c80 [ 69.751549][ T6687] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.751555][ T6687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.751561][ T6687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.751567][ T6687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.751581][ T6687] [ 69.751664][ T6687] blk-mq: reduced tag depth (128 -> 64) [ 70.393108][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.446810][ T6707] 0x000000000000-0x000000010000 : "" [ 70.503793][ T6707] ftl_cs: FTL header not found. [ 70.512636][ T6707] FAULT_INJECTION: forcing a failure. [ 70.512636][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 70.512664][ T6707] CPU: 3 UID: 0 PID: 6707 Comm: syz.0.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.512687][ T6707] Tainted: [L]=SOFTLOCKUP [ 70.512692][ T6707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.512701][ T6707] Call Trace: [ 70.512707][ T6707] [ 70.512714][ T6707] dump_stack_lvl+0x100/0x190 [ 70.512743][ T6707] should_fail_ex.cold+0x5/0xa [ 70.512791][ T6707] should_failslab+0xc2/0x120 [ 70.512809][ T6707] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.512828][ T6707] ? __kernfs_new_node+0xd2/0xa10 [ 70.512849][ T6707] __kernfs_new_node+0xd2/0xa10 [ 70.512867][ T6707] ? __pfx___kernfs_new_node+0x10/0x10 [ 70.512885][ T6707] ? lock_acquire+0x1d1/0x380 [ 70.512897][ T6707] ? kernfs_root+0x23/0x2a0 [ 70.512913][ T6707] ? find_held_lock+0x2b/0x80 [ 70.512928][ T6707] ? kernfs_root+0xee/0x2a0 [ 70.512942][ T6707] ? kernfs_root+0xee/0x2a0 [ 70.512961][ T6707] kernfs_create_dir_ns+0xa4/0x2b0 [ 70.512974][ T6707] sysfs_create_dir_ns+0x13a/0x2b0 [ 70.512989][ T6707] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 70.513005][ T6707] ? rcu_is_watching+0x13/0xc0 [ 70.513019][ T6707] ? kfree_const+0x5a/0x70 [ 70.513032][ T6707] kobject_add_internal+0x2c8/0x930 [ 70.513047][ T6707] kobject_add+0x16a/0x1e0 [ 70.513057][ T6707] ? __pfx_kobject_add+0x10/0x10 [ 70.513069][ T6707] ? __kasan_kmalloc+0xaa/0xb0 [ 70.513080][ T6707] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 70.513111][ T6707] ? kobject_create_and_add+0x46/0xc0 [ 70.513130][ T6707] kobject_create_and_add+0x7a/0xc0 [ 70.513142][ T6707] __add_disk+0x70d/0xf10 [ 70.513156][ T6707] add_disk_fwnode+0x118/0x480 [ 70.513170][ T6707] add_mtd_blktrans_dev+0xd0b/0x1520 [ 70.513190][ T6707] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 70.513217][ T6707] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 70.513232][ T6707] ? mtdblock_add_mtd+0x4a/0x270 [ 70.513257][ T6707] mtdblock_add_mtd+0x1cc/0x270 [ 70.513281][ T6707] blktrans_notify_add+0xa2/0xf0 [ 70.513296][ T6707] add_mtd_device+0xb6d/0x1820 [ 70.513311][ T6707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.513325][ T6707] ? __pfx_add_mtd_device+0x10/0x10 [ 70.513341][ T6707] mtd_add_partition+0x376/0x6a0 [ 70.513356][ T6707] ? __pfx_mtd_add_partition+0x10/0x10 [ 70.513371][ T6707] ? __might_fault+0xc5/0x140 [ 70.513390][ T6707] ? __might_fault+0xc5/0x140 [ 70.513419][ T6707] mtdchar_blkpg_ioctl+0x207/0x250 [ 70.513446][ T6707] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 70.513510][ T6707] mtdchar_compat_ioctl+0x3d6/0x440 [ 70.513528][ T6707] ? find_held_lock+0x2b/0x80 [ 70.513544][ T6707] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 70.513567][ T6707] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 70.513583][ T6707] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 70.513603][ T6707] __do_fast_syscall_32+0x14b/0x8c0 [ 70.513618][ T6707] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.513634][ T6707] do_fast_syscall_32+0x32/0x70 [ 70.513648][ T6707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.513662][ T6707] RIP: 0023:0xf7fa6fbc [ 70.513671][ T6707] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 70.513681][ T6707] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.513692][ T6707] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000001269 [ 70.513698][ T6707] RDX: 0000000080000bc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.513705][ T6707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.513711][ T6707] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.513717][ T6707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.513733][ T6707] [ 70.542869][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 70.542936][ T6707] kobject: kobject_add_internal failed for holders (error: -12 parent: mtdblock1) [ 70.542949][ T6707] kobject: kobject_create_and_add: kobject_add error: -12 [ 70.545943][ T10] usb 8-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 70.546899][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.546923][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.546942][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.546967][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.557752][ T10] usb 8-1: config 0 descriptor?? [ 70.686632][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 70.739489][ T6718] event trace: Could not enable event p [ 70.806471][ T6730] netlink: 64 bytes leftover after parsing attributes in process `syz.2.262'. [ 70.817942][ T6730] syzkaller1: entered promiscuous mode [ 70.817959][ T6730] syzkaller1: entered allmulticast mode [ 70.926509][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.926548][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.931350][ T1040] cfg80211: failed to load regulatory.db [ 70.963945][ T34] libceph: connect (1)[c::]:6789 error -101 [ 70.964121][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 70.964777][ T34] libceph: connect (1)[c::]:6789 error -101 [ 70.964837][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 70.979893][ T10] hid_parser_main: 22 callbacks suppressed [ 70.979906][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 70.979919][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 70.979930][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 70.979941][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 70.979952][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 70.983112][ T10] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 71.107585][ T6740] ceph: No mds server is up or the cluster is laggy [ 71.191271][ T6695] tps6598x 2-0003: failed to read vendor ID: -38, vid: 0x0 [ 71.193529][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.268'. [ 71.195522][ T6695] i2c i2c-2: new_device: Instantiated device tps6598x at 0x03 [ 71.199241][ T5885] usb 8-1: USB disconnect, device number 3 [ 71.202624][ T6749] : renamed from veth1_vlan (while UP) [ 71.202641][ T6749] FAULT_INJECTION: forcing a failure. [ 71.202641][ T6749] name failslab, interval 1, probability 0, space 0, times 0 [ 71.202656][ T6749] CPU: 1 UID: 0 PID: 6749 Comm: syz.4.268 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.202670][ T6749] Tainted: [L]=SOFTLOCKUP [ 71.202674][ T6749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.202680][ T6749] Call Trace: [ 71.202684][ T6749] [ 71.202689][ T6749] dump_stack_lvl+0x100/0x190 [ 71.202709][ T6749] should_fail_ex.cold+0x5/0xa [ 71.202727][ T6749] should_failslab+0xc2/0x120 [ 71.202741][ T6749] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 71.202767][ T6749] ? device_rename+0x88/0x250 [ 71.202785][ T6749] kstrdup+0x51/0xe0 [ 71.202798][ T6749] device_rename+0x88/0x250 [ 71.202812][ T6749] netif_change_name+0x284/0x830 [ 71.202832][ T6749] ? __pfx_netif_change_name+0x10/0x10 [ 71.202847][ T6749] ? __pfx_validate_linkmsg+0x10/0x10 [ 71.202861][ T6749] ? find_held_lock+0x2b/0x80 [ 71.202877][ T6749] ? __asan_memset+0x23/0x50 [ 71.202894][ T6749] do_setlink.isra.0+0x32bf/0x3f50 [ 71.202911][ T6749] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 71.202923][ T6749] ? __lock_acquire+0x5c0/0x1f40 [ 71.202937][ T6749] ? do_raw_spin_lock+0x128/0x260 [ 71.202951][ T6749] ? find_held_lock+0x2b/0x80 [ 71.202964][ T6749] ? debug_mutex_remove_waiter+0xa0/0x320 [ 71.202978][ T6749] ? debug_mutex_remove_waiter+0xa0/0x320 [ 71.202994][ T6749] ? mark_held_locks+0x40/0x70 [ 71.203004][ T6749] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.203017][ T6749] ? __mutex_lock+0x824/0x1c10 [ 71.203029][ T6749] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.203042][ T6749] ? __mutex_lock+0x824/0x1c10 [ 71.203054][ T6749] ? __mutex_lock+0x267/0x1c10 [ 71.203068][ T6749] ? rtnl_setlink+0x4fc/0xaf0 [ 71.203080][ T6749] ? __pfx___mutex_lock+0x10/0x10 [ 71.203093][ T6749] ? rcu_is_watching+0x13/0xc0 [ 71.203108][ T6749] ? apparmor_capable+0x1d7/0x4d0 [ 71.203130][ T6749] rtnl_setlink+0x61f/0xaf0 [ 71.203145][ T6749] ? __pfx_rtnl_setlink+0x10/0x10 [ 71.203154][ T6749] ? kasan_save_stack+0x30/0x50 [ 71.203165][ T6749] ? kasan_save_track+0x14/0x30 [ 71.203175][ T6749] ? kasan_save_free_info+0x3b/0x70 [ 71.203192][ T6749] ? dev_hard_start_xmit+0x121/0x760 [ 71.203205][ T6749] ? __dev_queue_xmit+0x1bef/0x48d0 [ 71.203218][ T6749] ? netlink_deliver_tap+0x9b8/0xb50 [ 71.203232][ T6749] ? netlink_unicast+0x708/0x950 [ 71.203247][ T6749] ? netlink_sendmsg+0x9ac/0x10c0 [ 71.203288][ T6749] ? __lock_acquire+0x5c0/0x1f40 [ 71.203299][ T6749] ? hook_capable+0x1bc/0x500 [ 71.203311][ T6749] ? __dev_queue_xmit+0xa2e/0x48d0 [ 71.203325][ T6749] ? lock_acquire+0x1d1/0x380 [ 71.203335][ T6749] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 71.203346][ T6749] ? find_held_lock+0x2b/0x80 [ 71.203359][ T6749] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 71.203369][ T6749] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 71.203380][ T6749] ? __pfx_rtnl_setlink+0x10/0x10 [ 71.203391][ T6749] rtnetlink_rcv_msg+0x95e/0xe90 [ 71.203402][ T6749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.203420][ T6749] netlink_rcv_skb+0x159/0x420 [ 71.203435][ T6749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.203446][ T6749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.203460][ T6749] ? __asan_memcpy+0x3c/0x60 [ 71.203480][ T6749] ? netlink_deliver_tap+0x1ae/0xb50 [ 71.203497][ T6749] netlink_unicast+0x668/0x950 [ 71.203514][ T6749] ? __pfx_netlink_unicast+0x10/0x10 [ 71.203533][ T6749] netlink_sendmsg+0x9ac/0x10c0 [ 71.203556][ T6749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.203582][ T6749] ? apparmor_socket_sendmsg+0x165/0x280 [ 71.203608][ T6749] ? ____sys_sendmsg+0xa99/0xc30 [ 71.203625][ T6749] ____sys_sendmsg+0xa99/0xc30 [ 71.203651][ T6749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.203681][ T6749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.203704][ T6749] ___sys_sendmsg+0x190/0x1e0 [ 71.203717][ T6749] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.203729][ T6749] ? futex_wait+0x11e/0x370 [ 71.203744][ T6749] ? find_held_lock+0x2b/0x80 [ 71.203768][ T6749] __sys_sendmsg+0x160/0x210 [ 71.203783][ T6749] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.203805][ T6749] __do_fast_syscall_32+0x14b/0x8c0 [ 71.203821][ T6749] do_fast_syscall_32+0x32/0x70 [ 71.203835][ T6749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.203848][ T6749] RIP: 0023:0xf7fc4fbc [ 71.203857][ T6749] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 71.203867][ T6749] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 71.203877][ T6749] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 71.203883][ T6749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.203889][ T6749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.203894][ T6749] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.203914][ T6749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.203929][ T6749] [ 71.243286][ T6752] syzkaller0: entered promiscuous mode [ 71.243308][ T6752] syzkaller0: entered allmulticast mode [ 71.308261][ T6752] syzkaller0: left promiscuous mode [ 71.308283][ T6752] syzkaller0: left allmulticast mode [ 71.433003][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.608649][ T50] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 71.616981][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.617022][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.617040][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 71.617057][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.627114][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.627135][ T50] usb 7-1: Product: syz [ 71.627147][ T50] usb 7-1: Manufacturer: syz [ 71.627158][ T50] usb 7-1: SerialNumber: syz [ 71.637231][ T50] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 71.637248][ T50] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 71.637275][ T50] usbserial_generic 7-1:1.0: generic converter detected [ 71.655033][ T50] usb 7-1: generic converter now attached to ttyUSB0 [ 71.746759][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 71.770719][ T42] audit: type=1800 audit(1793846383.294:4): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.278" name="file2" dev="sda1" ino=2040 res=0 errno=-22 [ 71.859349][ T50] usb 7-1: USB disconnect, device number 3 [ 71.873836][ T50] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 71.874324][ T50] usbserial_generic 7-1:1.0: device disconnected [ 72.450867][ T6767] FAULT_INJECTION: forcing a failure. [ 72.450867][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 72.450896][ T6767] CPU: 2 UID: 0 PID: 6767 Comm: syz.3.273 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.450920][ T6767] Tainted: [L]=SOFTLOCKUP [ 72.450927][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.450937][ T6767] Call Trace: [ 72.450943][ T6767] [ 72.450951][ T6767] dump_stack_lvl+0x100/0x190 [ 72.450983][ T6767] should_fail_ex.cold+0x5/0xa [ 72.451009][ T6767] should_failslab+0xc2/0x120 [ 72.451031][ T6767] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 72.451060][ T6767] ? __d_alloc+0x34/0xad0 [ 72.451085][ T6767] __d_alloc+0x34/0xad0 [ 72.451103][ T6767] ? __ns_ref_active_get+0x9f/0x1b0 [ 72.451128][ T6767] path_from_stashed+0x431/0x760 [ 72.451155][ T6767] ns_get_path+0x60/0x80 [ 72.451177][ T6767] proc_ns_get_link+0x260/0x2e0 [ 72.451202][ T6767] ? __pfx_proc_ns_get_link+0x10/0x10 [ 72.451229][ T6767] ? atime_needs_update+0x8b/0x760 [ 72.451259][ T6767] pick_link+0xd11/0x13c0 [ 72.451282][ T6767] ? rcu_is_watching+0x13/0xc0 [ 72.451308][ T6767] ? __pfx_proc_ns_get_link+0x10/0x10 [ 72.451335][ T6767] step_into_slowpath+0x9ba/0xf90 [ 72.451353][ T6767] ? rcu_read_lock_any_held+0x6a/0x90 [ 72.451379][ T6767] ? __pfx_step_into_slowpath+0x10/0x10 [ 72.451404][ T6767] ? __d_lookup+0x181/0x4a0 [ 72.451429][ T6767] path_openat+0xcc4/0x23f0 [ 72.451453][ T6767] ? __pfx_path_openat+0x10/0x10 [ 72.451481][ T6767] do_file_open+0x20e/0x430 [ 72.451503][ T6767] ? __pfx_do_file_open+0x10/0x10 [ 72.451541][ T6767] ? _raw_spin_unlock+0x28/0x50 [ 72.451560][ T6767] ? alloc_fd+0x471/0x7a0 [ 72.451587][ T6767] do_sys_openat2+0x163/0x1d0 [ 72.451611][ T6767] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.451640][ T6767] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 72.451672][ T6767] __ia32_compat_sys_openat+0x12d/0x210 [ 72.451705][ T6767] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 72.451744][ T6767] do_int80_emulation+0x166/0x650 [ 72.451773][ T6767] asm_int80_emulation+0x1a/0x20 [ 72.451791][ T6767] RIP: 0023:0xf7107f6b [ 72.451806][ T6767] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.451821][ T6767] RSP: 002b:00000000f53c63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 72.451839][ T6767] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53c6490 [ 72.451851][ T6767] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.451862][ T6767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.451872][ T6767] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.451883][ T6767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.451907][ T6767] [ 72.539689][ T6771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2227317206 (2227317206 ns) > initial count (768048928 ns). Using initial count to start timer. [ 72.545103][ T6771] kvm: pic: single mode not supported [ 72.545253][ T6771] kvm: pic: single mode not supported [ 72.618094][ T6783] FAULT_INJECTION: forcing a failure. [ 72.618094][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 72.618126][ T6783] CPU: 2 UID: 0 PID: 6783 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.618151][ T6783] Tainted: [L]=SOFTLOCKUP [ 72.618158][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.618168][ T6783] Call Trace: [ 72.618176][ T6783] [ 72.618183][ T6783] dump_stack_lvl+0x100/0x190 [ 72.618216][ T6783] should_fail_ex.cold+0x5/0xa [ 72.618244][ T6783] should_failslab+0xc2/0x120 [ 72.618267][ T6783] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.618292][ T6783] ? rfkill_fop_open+0x1cc/0x480 [ 72.618318][ T6783] rfkill_fop_open+0x1cc/0x480 [ 72.618340][ T6783] ? __pfx_rfkill_fop_open+0x10/0x10 [ 72.618363][ T6783] misc_open+0x26d/0x450 [ 72.618384][ T6783] ? __pfx_misc_open+0x10/0x10 [ 72.618403][ T6783] chrdev_open+0x234/0x6a0 [ 72.618425][ T6783] ? __pfx_apparmor_file_open+0x10/0x10 [ 72.618450][ T6783] ? __pfx_chrdev_open+0x10/0x10 [ 72.618474][ T6783] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 72.618506][ T6783] do_dentry_open+0x674/0x1470 [ 72.618527][ T6783] ? __pfx_chrdev_open+0x10/0x10 [ 72.618553][ T6783] vfs_open_consume+0xcc/0x460 [ 72.618583][ T6783] path_openat+0x1547/0x23f0 [ 72.618611][ T6783] ? __pfx_path_openat+0x10/0x10 [ 72.618641][ T6783] do_file_open+0x20e/0x430 [ 72.618666][ T6783] ? __pfx_do_file_open+0x10/0x10 [ 72.618714][ T6783] ? _raw_spin_unlock+0x28/0x50 [ 72.618736][ T6783] ? alloc_fd+0x471/0x7a0 [ 72.618766][ T6783] do_sys_openat2+0x163/0x1d0 [ 72.618793][ T6783] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.618833][ T6783] __ia32_compat_sys_openat+0x12d/0x210 [ 72.618864][ T6783] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 72.618905][ T6783] __do_fast_syscall_32+0x14b/0x8c0 [ 72.618935][ T6783] do_fast_syscall_32+0x32/0x70 [ 72.618961][ T6783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.618984][ T6783] RIP: 0023:0xf7f13fbc [ 72.619000][ T6783] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.619017][ T6783] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 72.619036][ T6783] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000440 [ 72.619048][ T6783] RDX: 0000000000004002 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.619059][ T6783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.619069][ T6783] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.619080][ T6783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.619106][ T6783] [ 73.017004][ T50] libceph: connect (1)[c::]:6789 error -101 [ 73.017091][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 73.103034][ T6809] syzkaller0: entered promiscuous mode [ 73.103050][ T6809] syzkaller0: entered allmulticast mode [ 73.143005][ T6809] syzkaller0: left promiscuous mode [ 73.143021][ T6809] syzkaller0: left allmulticast mode [ 73.154767][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 73.160785][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.169878][ T6804] ceph: No mds server is up or the cluster is laggy [ 74.160174][ T6819] input: syz0 as /devices/virtual/input/input7 [ 75.014350][ T6828] device-mapper: ioctl: remove_all left 1 open device(s) [ 75.107494][ T6839] FAULT_INJECTION: forcing a failure. [ 75.107494][ T6839] name failslab, interval 1, probability 0, space 0, times 0 [ 75.107519][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.2.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.107537][ T6839] Tainted: [L]=SOFTLOCKUP [ 75.107542][ T6839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.107549][ T6839] Call Trace: [ 75.107554][ T6839] [ 75.107560][ T6839] dump_stack_lvl+0x100/0x190 [ 75.107589][ T6839] should_fail_ex.cold+0x5/0xa [ 75.107609][ T6839] should_failslab+0xc2/0x120 [ 75.107627][ T6839] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.107649][ T6839] ? security_file_alloc+0x34/0x2c0 [ 75.107678][ T6839] security_file_alloc+0x34/0x2c0 [ 75.107702][ T6839] init_file+0x95/0x480 [ 75.107723][ T6839] alloc_empty_file+0x79/0x1c0 [ 75.107747][ T6839] dentry_open+0x46/0xd0 [ 75.107771][ T6839] __do_sys_fsmount+0xba6/0xe90 [ 75.107798][ T6839] ? __pfx___do_sys_fsmount+0x10/0x10 [ 75.107820][ T6839] ? __might_fault+0xc5/0x140 [ 75.107851][ T6839] __do_fast_syscall_32+0x14b/0x8c0 [ 75.107879][ T6839] do_fast_syscall_32+0x32/0x70 [ 75.107906][ T6839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.107926][ T6839] RIP: 0023:0xf741efbc [ 75.107948][ T6839] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 75.107965][ T6839] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b0 [ 75.107985][ T6839] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 75.107996][ T6839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.108006][ T6839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.108016][ T6839] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.108026][ T6839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.108049][ T6839] [ 75.444620][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 75.692638][ T6860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.693081][ T6860] block device autoloading is deprecated and will be removed. [ 75.850540][ T6864] md/raid:md2: device ram4 operational as raid disk 0 [ 75.883537][ T6864] md/raid:md2: not enough operational devices (2/3 failed) [ 76.035634][ T6864] md/raid:md2: failed to run raid set. [ 76.035650][ T6864] md: pers->run() failed ... [ 76.039926][ T6868] md: md2 stopped. [ 76.343215][ T6888] input: syz1 as /devices/virtual/input/input8 [ 76.538950][ T6899] FAULT_INJECTION: forcing a failure. [ 76.538950][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 76.538971][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.2.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.538986][ T6899] Tainted: [L]=SOFTLOCKUP [ 76.538998][ T6899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.539005][ T6899] Call Trace: [ 76.539009][ T6899] [ 76.539013][ T6899] dump_stack_lvl+0x100/0x190 [ 76.539079][ T6899] should_fail_ex.cold+0x5/0xa [ 76.539117][ T6899] should_failslab+0xc2/0x120 [ 76.539164][ T6899] __kmalloc_noprof+0xfc/0x840 [ 76.539180][ T6899] ? __memcg_list_lru_alloc+0x429/0x6a0 [ 76.539194][ T6899] __memcg_list_lru_alloc+0x429/0x6a0 [ 76.539206][ T6899] ? xa_load+0x149/0x2c0 [ 76.539261][ T6899] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 76.539277][ T6899] ? rcu_read_unlock+0x17/0x60 [ 76.539296][ T6899] memcg_list_lru_alloc+0xdc/0x110 [ 76.539310][ T6899] __memcg_slab_post_alloc_hook+0x277/0x10b0 [ 76.539331][ T6899] ? kasan_save_track+0x14/0x30 [ 76.539344][ T6899] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 76.539362][ T6899] ? alloc_inode+0x183/0x250 [ 76.539379][ T6899] ? __pfx_devpts_fill_super+0x10/0x10 [ 76.539419][ T6899] alloc_inode+0x183/0x250 [ 76.539435][ T6899] new_inode+0x22/0x1c0 [ 76.539450][ T6899] ? rcu_is_watching+0x13/0xc0 [ 76.539467][ T6899] ? __pfx_devpts_fill_super+0x10/0x10 [ 76.539481][ T6899] devpts_fill_super+0x1a3/0x5e0 [ 76.539497][ T6899] ? __pfx_devpts_fill_super+0x10/0x10 [ 76.539509][ T6899] get_tree_nodev+0xe3/0x190 [ 76.539521][ T6899] vfs_get_tree+0x92/0x320 [ 76.539535][ T6899] path_mount+0x7d0/0x2850 [ 76.539559][ T6899] ? __pfx_path_mount+0x10/0x10 [ 76.539578][ T6899] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.539603][ T6899] ? putname+0xb1/0x110 [ 76.539621][ T6899] ? kmem_cache_free+0x127/0x6c0 [ 76.539653][ T6899] ? __ia32_sys_mount+0x292/0x310 [ 76.539676][ T6899] __ia32_sys_mount+0x292/0x310 [ 76.539700][ T6899] ? __pfx___ia32_sys_mount+0x10/0x10 [ 76.539732][ T6899] __do_fast_syscall_32+0x14b/0x8c0 [ 76.539755][ T6899] do_fast_syscall_32+0x32/0x70 [ 76.539769][ T6899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.539782][ T6899] RIP: 0023:0xf741efbc [ 76.539792][ T6899] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.539801][ T6899] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 76.539812][ T6899] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 76.539818][ T6899] RDX: 0000000080000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 76.539824][ T6899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.539830][ T6899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.539836][ T6899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.539850][ T6899] [ 77.466261][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.466754][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.469847][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 77.513000][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.518010][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.623000][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.623036][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.623067][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.623092][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.697497][ T6916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.947207][ T6925] syzkaller1: entered promiscuous mode [ 77.947222][ T6925] syzkaller1: entered allmulticast mode [ 78.037755][ T6927] FAULT_INJECTION: forcing a failure. [ 78.037755][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 78.037786][ T6927] CPU: 3 UID: 0 PID: 6927 Comm: syz.2.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.037812][ T6927] Tainted: [L]=SOFTLOCKUP [ 78.037818][ T6927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.037828][ T6927] Call Trace: [ 78.037835][ T6927] [ 78.037842][ T6927] dump_stack_lvl+0x100/0x190 [ 78.037875][ T6927] should_fail_ex.cold+0x5/0xa [ 78.037898][ T6927] ? __pfx_ucma_event_handler+0x10/0x10 [ 78.037970][ T6927] should_failslab+0xc2/0x120 [ 78.037991][ T6927] ? __pfx_ucma_event_handler+0x10/0x10 [ 78.038012][ T6927] __kmalloc_cache_noprof+0x91/0x6d0 [ 78.038037][ T6927] ? lock_acquire+0x1d1/0x380 [ 78.038055][ T6927] ? __rdma_create_id+0x5b/0x8f0 [ 78.038079][ T6927] ? __pfx_ucma_event_handler+0x10/0x10 [ 78.038098][ T6927] __rdma_create_id+0x5b/0x8f0 [ 78.038130][ T6927] ? __pfx_ucma_event_handler+0x10/0x10 [ 78.038156][ T6927] rdma_create_user_id+0x7d/0xe0 [ 78.038181][ T6927] ucma_create_id+0x189/0x380 [ 78.038206][ T6927] ? __pfx_ucma_create_id+0x10/0x10 [ 78.038228][ T6927] ? __might_fault+0xc5/0x140 [ 78.038258][ T6927] ? __pfx_ucma_create_id+0x10/0x10 [ 78.038281][ T6927] ucma_write+0x1f6/0x330 [ 78.038301][ T6927] ? __pfx_ucma_write+0x10/0x10 [ 78.038320][ T6927] ? bpf_lsm_file_permission+0x9/0x10 [ 78.038347][ T6927] ? security_file_permission+0x76/0x210 [ 78.038397][ T6927] ? rw_verify_area+0xce/0x6d0 [ 78.038428][ T6927] vfs_write+0x2aa/0x1050 [ 78.038450][ T6927] ? __pfx_ucma_write+0x10/0x10 [ 78.038468][ T6927] ? lock_acquire+0x1d1/0x380 [ 78.038486][ T6927] ? __fget_files+0x34/0x3d0 [ 78.038506][ T6927] ? __pfx_vfs_write+0x10/0x10 [ 78.038523][ T6927] ? find_held_lock+0x2b/0x80 [ 78.038547][ T6927] ? __fget_files+0x215/0x3d0 [ 78.038565][ T6927] ? __fget_files+0x215/0x3d0 [ 78.038596][ T6927] ? __fget_files+0x21f/0x3d0 [ 78.038625][ T6927] ksys_write+0x1f8/0x250 [ 78.038645][ T6927] ? __pfx_ksys_write+0x10/0x10 [ 78.038673][ T6927] __do_fast_syscall_32+0x14b/0x8c0 [ 78.038700][ T6927] do_fast_syscall_32+0x32/0x70 [ 78.038723][ T6927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.038744][ T6927] RIP: 0023:0xf741efbc [ 78.038758][ T6927] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 78.038776][ T6927] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 78.038795][ T6927] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 78.038808][ T6927] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.038820][ T6927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.038831][ T6927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.038842][ T6927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.038866][ T6927] [ 78.841931][ T6942] jffs2: notice: (6942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.134721][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 80.134742][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 80.134754][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 80.281090][ T6970] [ 80.282203][ T6970] ====================================================== [ 80.285216][ T6970] WARNING: possible circular locking dependency detected [ 80.287831][ T6970] syzkaller #0 Tainted: G L [ 80.290104][ T6970] ------------------------------------------------------ [ 80.292300][ T6970] syz.2.345/6970 is trying to acquire lock: [ 80.294118][ T6973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.294132][ T6973] block device autoloading is deprecated and will be removed. [ 80.299508][ T6970] ffff88801fc20600 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 80.303086][ T6970] [ 80.303086][ T6970] but task is already holding lock: [ 80.305526][ T6970] ffffffff916ba9e0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 80.308580][ T6970] [ 80.308580][ T6970] which lock already depends on the new lock. [ 80.308580][ T6970] [ 80.311938][ T6970] [ 80.311938][ T6970] the existing dependency chain (in reverse order) is: [ 80.315079][ T6970] [ 80.315079][ T6970] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 80.317643][ T6970] lock_acquire+0x1d1/0x380 [ 80.319287][ T6970] __mutex_lock+0x19f/0x1c10 [ 80.320871][ T6970] usbg_make_tpg+0x10b/0x610 [ 80.322463][ T6970] target_fabric_make_tpg+0xab/0x8c0 [ 80.324294][ T6970] configfs_mkdir+0x525/0xd40 [ 80.325930][ T6970] vfs_mkdir+0x36d/0x8a0 [ 80.327492][ T6970] filename_mkdirat+0x4c4/0x630 [ 80.329262][ T6970] __ia32_sys_mkdirat+0x88/0xc0 [ 80.330942][ T6970] __do_fast_syscall_32+0x14b/0x8c0 [ 80.332724][ T6970] do_fast_syscall_32+0x32/0x70 [ 80.334657][ T6970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.336799][ T6970] [ 80.336799][ T6970] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 80.339242][ T6970] lock_acquire+0x1d1/0x380 [ 80.340837][ T6970] __mutex_lock+0x19f/0x1c10 [ 80.342432][ T6970] configfs_rmdir+0x5ae/0x950 [ 80.344041][ T6970] vfs_rmdir+0x328/0x8e0 [ 80.345551][ T6970] filename_rmdir+0x31a/0x610 [ 80.347194][ T6970] __ia32_sys_rmdir+0x45/0x60 [ 80.348838][ T6970] __do_fast_syscall_32+0x14b/0x8c0 [ 80.350804][ T6970] do_fast_syscall_32+0x32/0x70 [ 80.352494][ T6970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.354665][ T6970] [ 80.354665][ T6970] -> #0 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}: [ 80.357389][ T6970] check_prev_add+0xeb/0xe60 [ 80.359056][ T6970] __lock_acquire+0x1528/0x1f40 [ 80.360782][ T6970] lock_acquire+0x1d1/0x380 [ 80.362373][ T6970] down_write+0x86/0x1f0 [ 80.363910][ T6970] configfs_depend_item_unlocked+0xf3/0x6a0 [ 80.365930][ T6970] usbg_make_tpg+0x251/0x610 [ 80.367589][ T6970] target_fabric_make_tpg+0xab/0x8c0 [ 80.369475][ T6970] configfs_mkdir+0x525/0xd40 [ 80.371134][ T6970] vfs_mkdir+0x36d/0x8a0 [ 80.372647][ T6970] filename_mkdirat+0x4c4/0x630 [ 80.374354][ T6970] __ia32_sys_mkdirat+0x88/0xc0 [ 80.376024][ T6970] __do_fast_syscall_32+0x14b/0x8c0 [ 80.377995][ T6970] do_fast_syscall_32+0x32/0x70 [ 80.380063][ T6970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.382251][ T6970] [ 80.382251][ T6970] other info that might help us debug this: [ 80.382251][ T6970] [ 80.385431][ T6970] Chain exists of: [ 80.385431][ T6970] &sb->s_type->i_mutex_key#32 --> &subsys->su_mutex --> tpg_instances_lock [ 80.385431][ T6970] [ 80.390350][ T6970] Possible unsafe locking scenario: [ 80.390350][ T6970] [ 80.392643][ T6970] CPU0 CPU1 [ 80.394341][ T6970] ---- ---- [ 80.396013][ T6970] lock(tpg_instances_lock); [ 80.397816][ T6970] lock(&subsys->su_mutex); [ 80.400086][ T6970] lock(tpg_instances_lock); [ 80.402343][ T6970] lock(&sb->s_type->i_mutex_key#32); [ 80.404037][ T6970] [ 80.404037][ T6970] *** DEADLOCK *** [ 80.404037][ T6970] [ 80.406572][ T6970] locks held by syz.2.345/6970: 4, last CPU#2: [ 80.408504][ T6970] #0: ffff888023342478 (sb_writers#21){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 80.411490][ T6970] #1: ffff888014b30f80 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 80.414789][ T6970] #2: ffffffff911ea888 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 80.417991][ T6970] #3: ffffffff916ba9e0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 80.421058][ T6970] [ 80.421058][ T6970] stack backtrace: [ 80.422950][ T6970] CPU: 2 UID: 0 PID: 6970 Comm: syz.2.345 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.426248][ T6970] Tainted: [L]=SOFTLOCKUP [ 80.427629][ T6970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.431429][ T6970] Call Trace: [ 80.432483][ T6970] [ 80.433413][ T6970] dump_stack_lvl+0x100/0x190 [ 80.434924][ T6970] print_circular_bug.cold+0x178/0x1be [ 80.436674][ T6970] check_noncircular+0x146/0x160 [ 80.438228][ T6970] check_prev_add+0xeb/0xe60 [ 80.439672][ T6970] __lock_acquire+0x1528/0x1f40 [ 80.441274][ T6970] lock_acquire+0x1d1/0x380 [ 80.442711][ T6970] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 80.444621][ T6970] ? __pfx___might_resched+0x10/0x10 [ 80.446250][ T6970] down_write+0x86/0x1f0 [ 80.447786][ T6970] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 80.449698][ T6970] ? __pfx_down_write+0x10/0x10 [ 80.451285][ T6970] ? kstrtou16+0xde/0x130 [ 80.452579][ T6970] configfs_depend_item_unlocked+0xf3/0x6a0 [ 80.454459][ T6970] usbg_make_tpg+0x251/0x610 [ 80.455911][ T6970] ? __pfx_usbg_make_tpg+0x10/0x10 [ 80.457697][ T6970] ? find_held_lock+0x2b/0x80 [ 80.459354][ T6970] ? __pfx_usbg_make_tpg+0x10/0x10 [ 80.461370][ T6970] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 80.463679][ T6970] target_fabric_make_tpg+0xab/0x8c0 [ 80.465730][ T6970] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 80.468078][ T6970] configfs_mkdir+0x525/0xd40 [ 80.469840][ T6970] ? __pfx_configfs_mkdir+0x10/0x10 [ 80.471807][ T6970] vfs_mkdir+0x36d/0x8a0 [ 80.473347][ T6970] filename_mkdirat+0x4c4/0x630 [ 80.475100][ T6970] ? __pfx_filename_mkdirat+0x10/0x10 [ 80.477351][ T6970] ? strncpy_from_user+0x19d/0x2d0 [ 80.479524][ T6970] ? do_getname+0x191/0x390 [ 80.481468][ T6970] __ia32_sys_mkdirat+0x88/0xc0 [ 80.483505][ T6970] __do_fast_syscall_32+0x14b/0x8c0 [ 80.485728][ T6970] do_fast_syscall_32+0x32/0x70 [ 80.487758][ T6970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.490419][ T6970] RIP: 0023:0xf741efbc [ 80.492156][ T6970] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 80.500166][ T6970] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 80.503679][ T6970] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000540 [ 80.506947][ T6970] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 80.509579][ T6970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.512327][ T6970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.515596][ T6970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.518759][ T6970] [ 80.672944][ T6978] md: md4 stopped.