program:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='10000', 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
write(r2, &(0x7f00000000c0)='/dev/loop0', 0xa)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000001c0)={r1, 0x1, 0x2})
ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000100)={0x0, @broadcast})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x401, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="0800000000000000c18acdf275"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r9, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/19, 0x13}, {&(0x7f0000001540)=""/109, 0x6d}], 0x6}, 0x0)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c00000200000000000000000000060400"/38], 0x0, 0x26}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000)
[ 102.213057][ T4643] Bluetooth: hci0: command tx timeout
[ 102.306588][ T5318] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 102.488367][ T5318] ftl_cs: FTL header not found.
[ 102.594440][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.660163][ T5318] ------------[ cut here ]------------
[ 102.660178][ T5318] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist)
[ 102.660186][ T5318] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.0.0/5318
[ 102.670042][ T5318] Modules linked in:
[ 102.672407][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.676035][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.680198][ T5318] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[ 102.682858][ T5318] Code: b9 8d 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[ 102.691079][ T5318] RSP: 0018:ffffc9000de3f1b8 EFLAGS: 00010206
[ 102.693657][ T5318] RAX: 1ffffd1ffff8a20d RBX: 0000607f73990f80 RCX: dffffc0000000000
[ 102.697655][ T5318] RDX: 0000000000000001 RSI: ffffffff8e4189c9 RDI: 00000000ffffffff
[ 102.701113][ T5318] RBP: ffffe8ffffc50f80 R08: ffffffff907a757f R09: 1ffffffff20f4eaf
[ 102.704723][ T5318] R10: dffffc0000000000 R11: fffffbfff20f4eb0 R12: ffff88801221e800
[ 102.708227][ T5318] R13: 0000000000000000 R14: ffffe8ffffc51068 R15: 1ffffffff1cdd7de
[ 102.711471][ T5318] FS: 00007f7f1f6846c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 102.715108][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.717720][ T5318] CR2: 000055d8d6acd7d0 CR3: 000000001d1ef000 CR4: 0000000000352ef0
[ 102.721138][ T5318] Call Trace:
[ 102.722602][ T5318]
[ 102.723982][ T5318] blk_mq_free_tag_set+0x617/0x790
[ 102.726225][ T5318] add_mtd_blktrans_dev+0xede/0x14b0
[ 102.728800][ T5318] ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 102.731282][ T5318] ? __kmalloc_cache_noprof+0x321/0x600
[ 102.733695][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600
[ 102.736124][ T5318] ? mtdblock_add_mtd+0x57/0x240
[ 102.738511][ T5318] mtdblock_add_mtd+0x18a/0x240
[ 102.740660][ T5318] blktrans_notify_add+0x9f/0xf0
[ 102.742598][ T5318] add_mtd_device+0x117f/0x17b0
[ 102.744508][ T5318] ? __pfx_add_mtd_device+0x10/0x10
[ 102.746597][ T5318] ? parse_mtd_partitions+0x1018/0x12c0
[ 102.749087][ T5318] ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[ 102.751647][ T5318] ? __pfx_parse_mtd_partitions+0x10/0x10
[ 102.754207][ T5318] ? mutex_init_lockdep+0xdf/0x110
[ 102.756501][ T5318] mtd_device_parse_register+0xc94/0xe10
[ 102.759154][ T5318] ? __pfx_mtd_device_parse_register+0x10/0x10
[ 102.761880][ T5318] ? kvasprintf+0x120/0x1a0
[ 102.763772][ T5318] ? bd_finish_claiming+0x313/0x3f0
[ 102.765688][ T5318] ? __pfx_kvasprintf+0x10/0x10
[ 102.767748][ T5318] ? errseq_sample+0x40/0x70
[ 102.769719][ T5318] ? kasprintf+0xe2/0x140
[ 102.771527][ T5318] ? bdev_file_open_by_dev+0x214/0x240
[ 102.773891][ T5318] ? __pfx_kasprintf+0x10/0x10
[ 102.776038][ T5318] ? mutex_init_lockdep+0xdf/0x110
[ 102.778170][ T5318] block2mtd_setup2+0x834/0xda0
[ 102.780086][ T5318] ? __pfx_block2mtd_setup2+0x10/0x10
[ 102.781847][ T5318] ? __mutex_lock+0x30b/0x1550
[ 102.783845][ T5318] ? sysfs_file_kobj+0x1a/0x230
[ 102.785869][ T5318] block2mtd_setup+0x27/0xe0
[ 102.787753][ T5318] param_attr_store+0x214/0x310
[ 102.790302][ T5318] ? __pfx_param_attr_store+0x10/0x10
[ 102.792700][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 102.795027][ T5318] module_attr_store+0x65/0x90
[ 102.797204][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 102.799670][ T5318] vfs_write+0x612/0xba0
[ 102.801623][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 102.803882][ T5318] ? __fget_files+0x2a/0x420
[ 102.805845][ T5318] ksys_write+0x150/0x270
[ 102.808268][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 102.810502][ T5318] do_syscall_64+0x166/0x520
[ 102.812605][ T5318] ? trace_irq_disable+0x3b/0x140
[ 102.814789][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.817621][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 102.820268][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.823141][ T5318] RIP: 0033:0x7f7f1e79e159
[ 102.825104][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.832798][ T5318] RSP: 002b:00007f7f1f683fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 102.836074][ T5318] RAX: ffffffffffffffda RBX: 00007f7f1ea25fa0 RCX: 00007f7f1e79e159
[ 102.839415][ T5318] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004
[ 102.842819][ T5318] RBP: 00007f7f1e83506b R08: 0000000000000000 R09: 0000000000000000
[ 102.846056][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.850725][ T5318] R13: 00007f7f1ea26038 R14: 00007f7f1ea25fa0 R15: 00007ffe0ea583c8
[ 102.853906][ T5318]
[ 102.855277][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.858212][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.861949][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.866169][ T5318] Call Trace:
[ 102.867662][ T5318]
[ 102.868926][ T5318] vpanic+0x56d/0xa60
[ 102.870660][ T5318] ? __pfx__printk+0x10/0x10
[ 102.872599][ T5318] ? __pfx_vpanic+0x10/0x10
[ 102.874438][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 102.876586][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 102.878829][ T5318] panic+0xc5/0xd0
[ 102.880449][ T5318] ? __pfx_panic+0x10/0x10
[ 102.882483][ T5318] __warn+0x315/0x4c0
[ 102.884319][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 102.886510][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 102.888656][ T5318] __report_bug+0x276/0x570
[ 102.890629][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 102.892829][ T5318] ? __pfx___report_bug+0x10/0x10
[ 102.894943][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 102.897016][ T5318] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.899414][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 102.901756][ T5318] report_bug+0x16b/0x220
[ 102.903738][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 102.906095][ T5318] ? cleanup_srcu_struct+0x3d8/0x8b0
[ 102.908350][ T5318] handle_bug+0x9c/0x200
[ 102.910139][ T5318] exc_invalid_op+0x1a/0x50
[ 102.912043][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 102.914038][ T5318] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[ 102.916397][ T5318] Code: b9 8d 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[ 102.924486][ T5318] RSP: 0018:ffffc9000de3f1b8 EFLAGS: 00010206
[ 102.927029][ T5318] RAX: 1ffffd1ffff8a20d RBX: 0000607f73990f80 RCX: dffffc0000000000
[ 102.930602][ T5318] RDX: 0000000000000001 RSI: ffffffff8e4189c9 RDI: 00000000ffffffff
[ 102.934045][ T5318] RBP: ffffe8ffffc50f80 R08: ffffffff907a757f R09: 1ffffffff20f4eaf
[ 102.937631][ T5318] R10: dffffc0000000000 R11: fffffbfff20f4eb0 R12: ffff88801221e800
[ 102.941110][ T5318] R13: 0000000000000000 R14: ffffe8ffffc51068 R15: 1ffffffff1cdd7de
[ 102.944725][ T5318] ? cleanup_srcu_struct+0x34d/0x8b0
[ 102.947137][ T5318] blk_mq_free_tag_set+0x617/0x790
[ 102.949536][ T5318] add_mtd_blktrans_dev+0xede/0x14b0
[ 102.952226][ T5318] ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 102.955114][ T5318] ? __kmalloc_cache_noprof+0x321/0x600
[ 102.957450][ T5318] ? __kmalloc_cache_noprof+0x14d/0x600
[ 102.959765][ T5318] ? mtdblock_add_mtd+0x57/0x240
[ 102.961767][ T5318] mtdblock_add_mtd+0x18a/0x240
[ 102.963958][ T5318] blktrans_notify_add+0x9f/0xf0
[ 102.966243][ T5318] add_mtd_device+0x117f/0x17b0
[ 102.968212][ T5318] ? __pfx_add_mtd_device+0x10/0x10
[ 102.970198][ T5318] ? parse_mtd_partitions+0x1018/0x12c0
[ 102.972628][ T5318] ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[ 102.975045][ T5318] ? __pfx_parse_mtd_partitions+0x10/0x10
[ 102.977587][ T5318] ? mutex_init_lockdep+0xdf/0x110
[ 102.979880][ T5318] mtd_device_parse_register+0xc94/0xe10
[ 102.982319][ T5318] ? __pfx_mtd_device_parse_register+0x10/0x10
[ 102.985131][ T5318] ? kvasprintf+0x120/0x1a0
[ 102.987142][ T5318] ? bd_finish_claiming+0x313/0x3f0
[ 102.989422][ T5318] ? __pfx_kvasprintf+0x10/0x10
[ 102.991632][ T5318] ? errseq_sample+0x40/0x70
[ 102.993671][ T5318] ? kasprintf+0xe2/0x140
[ 102.995634][ T5318] ? bdev_file_open_by_dev+0x214/0x240
[ 102.998055][ T5318] ? __pfx_kasprintf+0x10/0x10
[ 103.000189][ T5318] ? mutex_init_lockdep+0xdf/0x110
[ 103.002464][ T5318] block2mtd_setup2+0x834/0xda0
[ 103.004699][ T5318] ? __pfx_block2mtd_setup2+0x10/0x10
[ 103.007072][ T5318] ? __mutex_lock+0x30b/0x1550
[ 103.009275][ T5318] ? sysfs_file_kobj+0x1a/0x230
[ 103.011302][ T5318] block2mtd_setup+0x27/0xe0
[ 103.013230][ T5318] param_attr_store+0x214/0x310
[ 103.015273][ T5318] ? __pfx_param_attr_store+0x10/0x10
[ 103.017508][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10
[ 103.019522][ T5318] module_attr_store+0x65/0x90
[ 103.021391][ T5318] kernfs_fop_write_iter+0x3a4/0x540
[ 103.023624][ T5318] vfs_write+0x612/0xba0
[ 103.025411][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 103.027461][ T5318] ? __fget_files+0x2a/0x420
[ 103.029421][ T5318] ksys_write+0x150/0x270
[ 103.031341][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 103.033194][ T5318] do_syscall_64+0x166/0x520
[ 103.034885][ T5318] ? trace_irq_disable+0x3b/0x140
[ 103.036935][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.039461][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 103.041410][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.044047][ T5318] RIP: 0033:0x7f7f1e79e159
[ 103.045822][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.053972][ T5318] RSP: 002b:00007f7f1f683fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.057699][ T5318] RAX: ffffffffffffffda RBX: 00007f7f1ea25fa0 RCX: 00007f7f1e79e159
[ 103.061443][ T5318] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004
[ 103.065022][ T5318] RBP: 00007f7f1e83506b R08: 0000000000000000 R09: 0000000000000000
[ 103.068524][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.071777][ T5318] R13: 00007f7f1ea26038 R14: 00007f7f1ea25fa0 R15: 00007ffe0ea583c8
[ 103.075327][ T5318]
[ 103.077256][ T5318] Kernel Offset: disabled
[ 103.079232][ T5318] Rebooting in 86400 seconds..