last executing test programs: 2.432111814s ago: executing program 1 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='dummy_udc.0', 0xb) write(0xffffffffffffffff, &(0x7f0000000600)='dummy_udc.0', 0xb) 2.321340157s ago: executing program 1 (id=233): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}}, 0x0) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x1, 0x1}, 0x4) 2.306338419s ago: executing program 3 (id=234): r0 = add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x2}, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000c80)={0x14, 0x49, 0x1, {0x43, 0x0, 0x4}}, 0x14) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0x7}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2}}}]}, 0x30}}, 0x4000) 2.23322564s ago: executing program 3 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 2.173436102s ago: executing program 1 (id=239): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x2, 0x3, 0x1}, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) syz_emit_ethernet(0xde, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60081f2000a83afffe800000000000000000000000000020ff020000000000000000000000000001860090317be3c86cfdf7e1ef94ec47d74f2578000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802000100000000000000000000000018010000000000001806f93a3b499e8f86a736c45e9c9f72cc5dcfacd0b8c7a11d75a8be7585e10245a415f888b25b888ba1b1"], 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x3, 0x8, 0x6de4, 0x5800, 0xc, 0x2a13, 0x100, 0x7fff}, &(0x7f00000002c0)={0x0, 0x100, 0x7, 0xad3, 0x4, 0x0, 0x9, 0x17}, &(0x7f0000000500)={0xc, 0x1c, 0x9, 0x10001, 0x0, 0xfff, 0x8, 0x5}, &(0x7f0000000580)={r4, r5+10000000}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x4]}, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, &(0x7f00000000c0), &(0x7f0000000140)=0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) nanosleep(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$inet(0x2, 0xa, 0x6) getsockname$inet(r6, 0x0, &(0x7f00000002c0)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x3c1842d, 0x1000, 0x1}) 1.901216612s ago: executing program 0 (id=244): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000ac0)=r4, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e22, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc99d41a0832", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.474806509s ago: executing program 2 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.392023188s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='27', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.337822019s ago: executing program 0 (id=250): socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) 1.335890389s ago: executing program 2 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x1, 0x3f00, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 1.253219635s ago: executing program 1 (id=252): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a300000000009000100"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) 1.25084635s ago: executing program 0 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.125395805s ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='dummy_udc.0', 0xb) 1.031468052s ago: executing program 3 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1.014137563s ago: executing program 3 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 933.679899ms ago: executing program 2 (id=257): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xb00, 0x12) 913.72667ms ago: executing program 0 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) io_setup(0x8b8, &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 774.807489ms ago: executing program 0 (id=259): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='27', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 630.762751ms ago: executing program 3 (id=260): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 628.12091ms ago: executing program 0 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x0) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff0007"], 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x4000, 0x106) 326.896497ms ago: executing program 1 (id=261): socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x8, 0x2, [@TCA_U32_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x1800, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000006840)=""/225, 0xe1, 0x4e7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) 326.734646ms ago: executing program 2 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x504, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000b80)="cb44032c2a3a51", 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00') read(r0, &(0x7f0000000300)=""/197, 0xc5) socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(0x0, 0x208, 0x509000) fcntl$dupfd(r2, 0x0, r2) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 195.716514ms ago: executing program 2 (id=263): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x3e) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) 0s ago: executing program 1 (id=264): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000002c0), &(0x7f00000003c0)=0xc) ppoll(&(0x7f00000000c0)=[{r5, 0xa501}, {r4, 0x422}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): etwork, BSSID 50:50:50:50:50:50 [ 40.549750][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.549763][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.617333][ T5886] 0x000000000000-0x000000010000 : "" [ 40.629066][ T5886] ftl_cs: FTL header not found. [ 40.639105][ T5886] FAULT_INJECTION: forcing a failure. [ 40.639105][ T5886] name failslab, interval 1, probability 0, space 0, times 1 [ 40.639126][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 40.639140][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.639146][ T5886] Call Trace: [ 40.639151][ T5886] [ 40.639156][ T5886] dump_stack_lvl+0x100/0x190 [ 40.639175][ T5886] should_fail_ex.cold+0x5/0xa [ 40.639192][ T5886] should_failslab+0xc2/0x120 [ 40.639210][ T5886] kmem_cache_alloc_noprof+0x92/0x6a0 [ 40.639228][ T5886] ? __kernfs_new_node+0xd2/0xa10 [ 40.639248][ T5886] __kernfs_new_node+0xd2/0xa10 [ 40.639267][ T5886] ? __pfx___kernfs_new_node+0x10/0x10 [ 40.639286][ T5886] ? lock_acquire+0x1d1/0x380 [ 40.639303][ T5886] ? kernfs_root+0x23/0x2a0 [ 40.639345][ T5886] ? find_held_lock+0x2b/0x80 [ 40.639360][ T5886] ? kernfs_root+0xee/0x2a0 [ 40.639375][ T5886] ? kernfs_root+0xee/0x2a0 [ 40.639395][ T5886] kernfs_new_node+0x117/0x150 [ 40.639416][ T5886] __kernfs_create_file+0x53/0x350 [ 40.639438][ T5886] sysfs_add_file_mode_ns+0x207/0x3c0 [ 40.639458][ T5886] internal_create_group+0x593/0xfb0 [ 40.639479][ T5886] ? __pfx_internal_create_group+0x10/0x10 [ 40.639498][ T5886] ? kernfs_create_link+0x1bd/0x240 [ 40.639516][ T5886] internal_create_groups+0x9d/0x150 [ 40.639535][ T5886] device_add+0x77a/0x1970 [ 40.639551][ T5886] ? __pfx_device_add+0x10/0x10 [ 40.639564][ T5886] ? __pfx___might_resched+0x10/0x10 [ 40.639585][ T5886] __add_disk+0x592/0xf10 [ 40.639602][ T5886] add_disk_fwnode+0x118/0x480 [ 40.639618][ T5886] add_mtd_blktrans_dev+0xd0b/0x1520 [ 40.639640][ T5886] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 40.639666][ T5886] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 40.639680][ T5886] ? mtdblock_add_mtd+0x4a/0x270 [ 40.639699][ T5886] mtdblock_add_mtd+0x1cc/0x270 [ 40.639717][ T5886] blktrans_notify_add+0xa2/0xf0 [ 40.639734][ T5886] add_mtd_device+0xb6d/0x1820 [ 40.639749][ T5886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 40.639767][ T5886] ? __pfx_add_mtd_device+0x10/0x10 [ 40.639785][ T5886] mtd_add_partition+0x376/0x6a0 [ 40.639801][ T5886] ? __pfx_mtd_add_partition+0x10/0x10 [ 40.639815][ T5886] ? __might_fault+0xc5/0x140 [ 40.639827][ T5886] ? __might_fault+0xc5/0x140 [ 40.639845][ T5886] mtdchar_blkpg_ioctl+0x207/0x250 [ 40.639861][ T5886] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 40.639889][ T5886] mtdchar_compat_ioctl+0x3d6/0x440 [ 40.639907][ T5886] ? find_held_lock+0x2b/0x80 [ 40.639921][ T5886] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 40.639945][ T5886] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 40.639961][ T5886] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 40.639977][ T5886] __do_fast_syscall_32+0x13a/0x8b0 [ 40.639995][ T5886] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.640012][ T5886] do_fast_syscall_32+0x32/0x70 [ 40.640023][ T5886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.640038][ T5886] RIP: 0023:0xf73eefec [ 40.640052][ T5886] Code: Unable to access opcode bytes at 0xf73eefc2. [ 40.640057][ T5886] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 40.640068][ T5886] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 40.640075][ T5886] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.640081][ T5886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.640088][ T5886] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.640094][ T5886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.640108][ T5886] [ 40.802473][ T5899] bridge0: port 3(syz_tun) entered blocking state [ 40.802536][ T5899] bridge0: port 3(syz_tun) entered disabled state [ 40.802664][ T5899] syz_tun: entered allmulticast mode [ 40.803714][ T5899] syz_tun: entered promiscuous mode [ 40.804123][ T5899] bridge0: port 3(syz_tun) entered blocking state [ 40.804212][ T5899] bridge0: port 3(syz_tun) entered forwarding state [ 40.828027][ T5901] syz.1.8 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 40.828049][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 40.828063][ T5901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.828070][ T5901] Call Trace: [ 40.828074][ T5901] [ 40.828079][ T5901] dump_stack_lvl+0x100/0x190 [ 40.828100][ T5901] dump_header+0xfb/0x606 [ 40.828114][ T5901] oom_kill_process.cold+0xd/0x380 [ 40.828128][ T5901] out_of_memory+0x340/0x14f0 [ 40.828151][ T5901] ? __pfx_out_of_memory+0x10/0x10 [ 40.828174][ T5901] mem_cgroup_out_of_memory+0xc6/0x130 [ 40.828189][ T5901] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 40.828204][ T5901] ? find_held_lock+0x2b/0x80 [ 40.828220][ T5901] ? do_raw_spin_unlock+0x145/0x1e0 [ 40.828233][ T5901] ? _raw_spin_unlock+0x28/0x50 [ 40.828249][ T5901] try_charge_memcg+0x783/0xf60 [ 40.828265][ T5901] ? __pfx_try_charge_memcg+0x10/0x10 [ 40.828277][ T5901] ? find_held_lock+0x2b/0x80 [ 40.828289][ T5901] ? rcu_read_unlock+0x17/0x60 [ 40.828301][ T5901] ? rcu_read_unlock+0x17/0x60 [ 40.828318][ T5901] obj_cgroup_charge_pages+0x2b/0x1f0 [ 40.828332][ T5901] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 40.828365][ T5901] ? kasan_save_track+0x14/0x30 [ 40.828383][ T5901] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 40.828398][ T5901] ? find_held_lock+0x2b/0x80 [ 40.828412][ T5901] ? sock_alloc_inode+0x26/0x2c0 [ 40.828428][ T5901] ? __pfx_sock_alloc_inode+0x10/0x10 [ 40.828445][ T5901] sock_alloc_inode+0x26/0x2c0 [ 40.828460][ T5901] ? __pfx_sock_alloc_inode+0x10/0x10 [ 40.828474][ T5901] alloc_inode+0x68/0x250 [ 40.828486][ T5901] sock_alloc+0x44/0x280 [ 40.828498][ T5901] ? security_socket_create+0x7f/0x250 [ 40.828518][ T5901] __sock_create+0xc2/0x860 [ 40.828537][ T5901] __sys_socket+0x14d/0x260 [ 40.828553][ T5901] ? xfd_validate_state+0x129/0x190 [ 40.828570][ T5901] ? __pfx___sys_socket+0x10/0x10 [ 40.828591][ T5901] __ia32_sys_socket+0x72/0xb0 [ 40.828607][ T5901] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.828623][ T5901] __do_fast_syscall_32+0x13a/0x8b0 [ 40.828643][ T5901] do_fast_syscall_32+0x32/0x70 [ 40.828655][ T5901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.828669][ T5901] RIP: 0023:0xf73eefec [ 40.828683][ T5901] Code: Unable to access opcode bytes at 0xf73eefc2. [ 40.828688][ T5901] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 40.828699][ T5901] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 40.828706][ T5901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.828713][ T5901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.828719][ T5901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.828726][ T5901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.828740][ T5901] [ 40.828744][ T5901] memory: usage 0kB, limit 0kB, failcnt 19 [ 40.828751][ T5901] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 40.828758][ T5901] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 40.828764][ T5901] Memory cgroup stats for /syz1/test: [ 40.828909][ T5901] cache 0 [ 40.828914][ T5901] rss 0 [ 40.828918][ T5901] rss_huge 0 [ 40.828922][ T5901] shmem 0 [ 40.828926][ T5901] mapped_file 0 [ 40.828936][ T5901] dirty 0 [ 40.828939][ T5901] writeback 0 [ 40.828943][ T5901] workingset_refault_anon 0 [ 40.828947][ T5901] workingset_refault_file 0 [ 40.828952][ T5901] swap 0 [ 40.828955][ T5901] swapcached 0 [ 40.828959][ T5901] pgpgin 0 [ 40.828963][ T5901] pgpgout 0 [ 40.828966][ T5901] pgfault 0 [ 40.828970][ T5901] pgmajfault 0 [ 40.828974][ T5901] inactive_anon 0 [ 40.828978][ T5901] active_anon 0 [ 40.828982][ T5901] inactive_file 0 [ 40.828987][ T5901] active_file 0 [ 40.828991][ T5901] unevictable 0 [ 40.828994][ T5901] hierarchical_memory_limit 0 [ 40.828999][ T5901] hierarchical_memsw_limit 9223372036854771712 [ 40.829004][ T5901] total_cache 0 [ 40.829008][ T5901] total_rss 0 [ 40.829012][ T5901] total_rss_huge 0 [ 40.829016][ T5901] total_shmem 0 [ 40.829021][ T5901] total_mapped_file 0 [ 40.829025][ T5901] total_dirty 0 [ 40.829029][ T5901] total_writeback 0 [ 40.829033][ T5901] total_workingset_refault_anon 0 [ 40.829038][ T5901] total_workingset_refault_file 0 [ 40.829043][ T5901] total_swap 0 [ 40.829047][ T5901] total_swapcached 0 [ 40.829051][ T5901] total_pgpgin 0 [ 40.829055][ T5901] total_pgpgout 0 [ 40.829059][ T5901] total_pgfault 0 [ 40.829063][ T5901] total_pgmajfault 0 [ 40.829068][ T5901] total_inactive_anon 0 [ 40.829072][ T5901] total_active_anon 0 [ 40.829076][ T5901] total_inactive_file 0 [ 40.829081][ T5901] total_active_file 0 [ 40.829085][ T5901] total_unevictable 0 [ 40.829090][ T5901] anon_cost 0 [ 40.829094][ T5901] file_cost 0 [ 40.829099][ T5901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.8,pid=5900,uid=0 [ 40.829432][ T5901] Memory cgroup out of memory: Killed process 5900 (syz.1.8) total-vm:104084kB, anon-rss:440kB, file-rss:23036kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 40.842014][ T5901] socket: no more sockets [ 40.897333][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 40.900081][ T5904] FAULT_INJECTION: forcing a failure. [ 40.900081][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 40.900099][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 40.900112][ T5904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.900118][ T5904] Call Trace: [ 40.900123][ T5904] [ 40.900127][ T5904] dump_stack_lvl+0x100/0x190 [ 40.900147][ T5904] should_fail_ex.cold+0x5/0xa [ 40.900162][ T5904] should_failslab+0xc2/0x120 [ 40.900195][ T5904] kmem_cache_alloc_noprof+0x92/0x6a0 [ 40.900211][ T5904] ? __kernfs_new_node+0xd2/0xa10 [ 40.900231][ T5904] __kernfs_new_node+0xd2/0xa10 [ 40.900251][ T5904] ? __pfx___kernfs_new_node+0x10/0x10 [ 40.900270][ T5904] ? lock_acquire+0x1d1/0x380 [ 40.900286][ T5904] ? kernfs_root+0x23/0x2a0 [ 40.900301][ T5904] ? find_held_lock+0x2b/0x80 [ 40.900315][ T5904] ? kernfs_root+0xee/0x2a0 [ 40.900330][ T5904] ? kernfs_root+0xee/0x2a0 [ 40.900350][ T5904] kernfs_new_node+0x117/0x150 [ 40.900371][ T5904] __kernfs_create_file+0x53/0x350 [ 40.900387][ T5904] sysfs_add_file_mode_ns+0x207/0x3c0 [ 40.900405][ T5904] internal_create_group+0x593/0xfb0 [ 40.900437][ T5904] ? kobject_init_and_add+0x129/0x180 [ 40.900451][ T5904] ? __pfx_internal_create_group+0x10/0x10 [ 40.900467][ T5904] ? __pfx_kobject_init_and_add+0x10/0x10 [ 40.900480][ T5904] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 40.900496][ T5904] ? ___sys_sendmsg+0x190/0x1e0 [ 40.900512][ T5904] ? __sys_sendmsg+0x160/0x210 [ 40.900523][ T5904] ? __do_fast_syscall_32+0x13a/0x8b0 [ 40.900540][ T5904] ? do_fast_syscall_32+0x32/0x70 [ 40.900550][ T5904] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.900566][ T5904] internal_create_groups+0x9d/0x150 [ 40.900584][ T5904] netdev_queue_update_kobjects+0x115/0x6f0 [ 40.900607][ T5904] netdev_register_kobject+0x2e9/0x410 [ 40.900626][ T5904] register_netdevice+0x15b6/0x25a0 [ 40.900644][ T5904] ? __pfx_register_netdevice+0x10/0x10 [ 40.900662][ T5904] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 40.900673][ T5904] batadv_meshif_newlink+0x8f/0xc0 [ 40.900684][ T5904] rtnl_newlink+0x1697/0x2620 [ 40.900704][ T5904] ? __pfx_rtnl_newlink+0x10/0x10 [ 40.900719][ T5904] ? rcu_is_watching+0x13/0xc0 [ 40.900743][ T5904] ? find_held_lock+0x2b/0x80 [ 40.900759][ T5904] ? lock_acquire+0x1d1/0x380 [ 40.900775][ T5904] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 40.900789][ T5904] ? find_held_lock+0x2b/0x80 [ 40.900802][ T5904] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 40.900816][ T5904] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 40.900851][ T5904] ? __pfx_rtnl_newlink+0x10/0x10 [ 40.900867][ T5904] rtnetlink_rcv_msg+0x95e/0xe90 [ 40.900885][ T5904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 40.900904][ T5904] ? ref_tracker_free+0x37e/0x6c0 [ 40.900922][ T5904] netlink_rcv_skb+0x159/0x420 [ 40.900940][ T5904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 40.900956][ T5904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 40.900973][ T5904] ? netlink_deliver_tap+0x1ae/0xcc0 [ 40.900994][ T5904] netlink_unicast+0x585/0x850 [ 40.901009][ T5904] ? __pfx_netlink_unicast+0x10/0x10 [ 40.901025][ T5904] netlink_sendmsg+0x8b0/0xda0 [ 40.901039][ T5904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.901053][ T5904] ? apparmor_socket_sendmsg+0x165/0x280 [ 40.901076][ T5904] ____sys_sendmsg+0xa4d/0xbe0 [ 40.901091][ T5904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.901103][ T5904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 40.901125][ T5904] ___sys_sendmsg+0x190/0x1e0 [ 40.901142][ T5904] ? __pfx____sys_sendmsg+0x10/0x10 [ 40.901159][ T5904] ? futex_wait+0x11e/0x370 [ 40.901180][ T5904] ? find_held_lock+0x2b/0x80 [ 40.901203][ T5904] __sys_sendmsg+0x160/0x210 [ 40.901216][ T5904] ? __pfx___sys_sendmsg+0x10/0x10 [ 40.901236][ T5904] __do_fast_syscall_32+0x13a/0x8b0 [ 40.901256][ T5904] do_fast_syscall_32+0x32/0x70 [ 40.901267][ T5904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.901281][ T5904] RIP: 0023:0xf7f14fec [ 40.901295][ T5904] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 40.901300][ T5904] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 40.901311][ T5904] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 40.901318][ T5904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.901325][ T5904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.901331][ T5904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.901337][ T5904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.901351][ T5904] [ 40.952466][ T5908] 0x000000000000-0x000000010000 : "" [ 40.961151][ T5908] ftl_cs: FTL header not found. [ 41.029099][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 41.046900][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 41.077416][ T5914] FAULT_INJECTION: forcing a failure. [ 41.077416][ T5914] name failslab, interval 1, probability 0, space 0, times 0 [ 41.077436][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 41.077449][ T5914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.077457][ T5914] Call Trace: [ 41.077461][ T5914] [ 41.077466][ T5914] dump_stack_lvl+0x100/0x190 [ 41.077492][ T5914] should_fail_ex.cold+0x5/0xa [ 41.077509][ T5914] should_failslab+0xc2/0x120 [ 41.077528][ T5914] kmem_cache_alloc_noprof+0x92/0x6a0 [ 41.077544][ T5914] ? __kernfs_new_node+0xd2/0xa10 [ 41.077564][ T5914] __kernfs_new_node+0xd2/0xa10 [ 41.077583][ T5914] ? __pfx___kernfs_new_node+0x10/0x10 [ 41.077604][ T5914] ? lock_acquire+0x1d1/0x380 [ 41.077620][ T5914] ? kernfs_root+0x23/0x2a0 [ 41.077636][ T5914] ? find_held_lock+0x2b/0x80 [ 41.077649][ T5914] ? kernfs_root+0xee/0x2a0 [ 41.077664][ T5914] ? kernfs_root+0xee/0x2a0 [ 41.077683][ T5914] kernfs_new_node+0x117/0x150 [ 41.077703][ T5914] __kernfs_create_file+0x53/0x350 [ 41.077719][ T5914] sysfs_add_file_mode_ns+0x207/0x3c0 [ 41.077737][ T5914] internal_create_group+0x593/0xfb0 [ 41.077756][ T5914] ? kobject_init_and_add+0x129/0x180 [ 41.077770][ T5914] ? __pfx_internal_create_group+0x10/0x10 [ 41.077786][ T5914] ? __pfx_kobject_init_and_add+0x10/0x10 [ 41.077798][ T5914] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 41.077814][ T5914] ? ___sys_sendmsg+0x190/0x1e0 [ 41.077829][ T5914] ? __sys_sendmsg+0x160/0x210 [ 41.077841][ T5914] ? __do_fast_syscall_32+0x13a/0x8b0 [ 41.077865][ T5914] ? do_fast_syscall_32+0x32/0x70 [ 41.077875][ T5914] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.077892][ T5914] internal_create_groups+0x9d/0x150 [ 41.077910][ T5914] netdev_queue_update_kobjects+0x115/0x6f0 [ 41.077932][ T5914] netdev_register_kobject+0x2e9/0x410 [ 41.077952][ T5914] register_netdevice+0x15b6/0x25a0 [ 41.077970][ T5914] ? __pfx_register_netdevice+0x10/0x10 [ 41.077988][ T5914] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 41.078000][ T5914] batadv_meshif_newlink+0x8f/0xc0 [ 41.078011][ T5914] rtnl_newlink+0x1697/0x2620 [ 41.078030][ T5914] ? __pfx_rtnl_newlink+0x10/0x10 [ 41.078045][ T5914] ? rcu_is_watching+0x13/0xc0 [ 41.078069][ T5914] ? find_held_lock+0x2b/0x80 [ 41.078085][ T5914] ? lock_acquire+0x1d1/0x380 [ 41.078101][ T5914] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 41.078115][ T5914] ? find_held_lock+0x2b/0x80 [ 41.078127][ T5914] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 41.078141][ T5914] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 41.078156][ T5914] ? __pfx_rtnl_newlink+0x10/0x10 [ 41.078170][ T5914] rtnetlink_rcv_msg+0x95e/0xe90 [ 41.078185][ T5914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 41.078203][ T5914] ? ref_tracker_free+0x37e/0x6c0 [ 41.078220][ T5914] netlink_rcv_skb+0x159/0x420 [ 41.078231][ T5914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 41.078246][ T5914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 41.078262][ T5914] ? netlink_deliver_tap+0x1ae/0xcc0 [ 41.078282][ T5914] netlink_unicast+0x585/0x850 [ 41.078296][ T5914] ? __pfx_netlink_unicast+0x10/0x10 [ 41.078311][ T5914] netlink_sendmsg+0x8b0/0xda0 [ 41.078324][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.078336][ T5914] ? apparmor_socket_sendmsg+0x165/0x280 [ 41.078357][ T5914] ____sys_sendmsg+0xa4d/0xbe0 [ 41.078372][ T5914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.078384][ T5914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 41.078406][ T5914] ___sys_sendmsg+0x190/0x1e0 [ 41.078423][ T5914] ? __pfx____sys_sendmsg+0x10/0x10 [ 41.078440][ T5914] ? futex_wait+0x11e/0x370 [ 41.078460][ T5914] ? find_held_lock+0x2b/0x80 [ 41.078486][ T5914] __sys_sendmsg+0x160/0x210 [ 41.078499][ T5914] ? __pfx___sys_sendmsg+0x10/0x10 [ 41.078525][ T5914] __do_fast_syscall_32+0x13a/0x8b0 [ 41.078545][ T5914] do_fast_syscall_32+0x32/0x70 [ 41.078556][ T5914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.078570][ T5914] RIP: 0023:0xf73eefec [ 41.078584][ T5914] Code: Unable to access opcode bytes at 0xf73eefc2. [ 41.078589][ T5914] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 41.078600][ T5914] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 41.078607][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.078613][ T5914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.078619][ T5914] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 41.078626][ T5914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.078640][ T5914] [ 41.082337][ T2331] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 41.226082][ T5921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.278282][ T5925] 0x000000000000-0x000000010000 : "" [ 41.280446][ T5925] ftl_cs: FTL header not found. [ 41.284488][ T5925] FAULT_INJECTION: forcing a failure. [ 41.284488][ T5925] name failslab, interval 1, probability 0, space 0, times 0 [ 41.284507][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 41.284522][ T5925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.284529][ T5925] Call Trace: [ 41.284533][ T5925] [ 41.284538][ T5925] dump_stack_lvl+0x100/0x190 [ 41.284558][ T5925] should_fail_ex.cold+0x5/0xa [ 41.284574][ T5925] should_failslab+0xc2/0x120 [ 41.284593][ T5925] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 41.284611][ T5925] ? kstrdup_const+0x63/0x80 [ 41.284630][ T5925] kstrdup+0x51/0xe0 [ 41.284649][ T5925] kstrdup_const+0x63/0x80 [ 41.284668][ T5925] __kernfs_new_node+0x9b/0xa10 [ 41.284687][ T5925] ? device_add+0x13ff/0x1970 [ 41.284703][ T5925] ? __pfx___kernfs_new_node+0x10/0x10 [ 41.284722][ T5925] ? lock_acquire+0x1d1/0x380 [ 41.284739][ T5925] ? kernfs_root+0x23/0x2a0 [ 41.284755][ T5925] ? find_held_lock+0x2b/0x80 [ 41.284770][ T5925] ? kernfs_root+0xee/0x2a0 [ 41.284785][ T5925] ? kernfs_root+0xee/0x2a0 [ 41.284804][ T5925] kernfs_new_node+0x117/0x150 [ 41.284845][ T5925] kernfs_create_link+0xcc/0x240 [ 41.284863][ T5925] sysfs_do_create_link_sd+0x90/0x140 [ 41.284881][ T5925] sysfs_create_link+0x61/0xc0 [ 41.284898][ T5925] __add_disk+0x6b7/0xf10 [ 41.284916][ T5925] add_disk_fwnode+0x118/0x480 [ 41.284932][ T5925] add_mtd_blktrans_dev+0xd0b/0x1520 [ 41.284953][ T5925] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 41.284978][ T5925] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 41.284992][ T5925] ? mtdblock_add_mtd+0x4a/0x270 [ 41.285011][ T5925] mtdblock_add_mtd+0x1cc/0x270 [ 41.285029][ T5925] blktrans_notify_add+0xa2/0xf0 [ 41.285046][ T5925] add_mtd_device+0xb6d/0x1820 [ 41.285061][ T5925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.285080][ T5925] ? __pfx_add_mtd_device+0x10/0x10 [ 41.285096][ T5925] mtd_add_partition+0x376/0x6a0 [ 41.285112][ T5925] ? __pfx_mtd_add_partition+0x10/0x10 [ 41.285127][ T5925] ? __might_fault+0xc5/0x140 [ 41.285138][ T5925] ? __might_fault+0xc5/0x140 [ 41.285156][ T5925] mtdchar_blkpg_ioctl+0x207/0x250 [ 41.285172][ T5925] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 41.285200][ T5925] mtdchar_compat_ioctl+0x3d6/0x440 [ 41.285217][ T5925] ? find_held_lock+0x2b/0x80 [ 41.285232][ T5925] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 41.285255][ T5925] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 41.285272][ T5925] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 41.285287][ T5925] __do_fast_syscall_32+0x13a/0x8b0 [ 41.285305][ T5925] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.285322][ T5925] do_fast_syscall_32+0x32/0x70 [ 41.285333][ T5925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.285347][ T5925] RIP: 0023:0xf73eefec [ 41.285362][ T5925] Code: Unable to access opcode bytes at 0xf73eefc2. [ 41.285367][ T5925] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 41.285378][ T5925] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 41.285385][ T5925] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.285391][ T5925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.285398][ T5925] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 41.285404][ T5925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.285418][ T5925] [ 41.356213][ T5921] md/raid10:md0: not clean -- starting background reconstruction [ 41.356225][ T5921] md/raid10:md0: active with 1 out of 2 devices [ 41.356695][ T5921] md0: detected capacity change from 0 to 2048 [ 41.359393][ T5929] md: resync of RAID array md0 [ 41.369785][ T5929] md: md0: resync done. [ 41.416360][ T5932] md: recover of RAID array md0 [ 41.442106][ T5932] md: md0: recover done. [ 42.282051][ T66] Bluetooth: hci2: command tx timeout [ 42.282070][ T66] Bluetooth: hci0: command tx timeout [ 42.282083][ T66] Bluetooth: hci1: command tx timeout [ 42.282095][ T66] Bluetooth: hci3: command tx timeout [ 42.976374][ T5957] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 43.030567][ T5957] sd 0:0:0:0: PR command failed: 1026 [ 43.030593][ T5957] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 43.030617][ T5957] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 43.033600][ T5957] Zero length message leads to an empty skb [ 43.467953][ T5964] Bluetooth: MGMT ver 1.23 [ 43.527032][ T5964] sd 0:0:0:0: PR command failed: 1026 [ 43.527054][ T5964] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 43.527074][ T5964] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 43.564612][ T5953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.564660][ T5953] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 43.613549][ T5953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.613558][ T5953] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 43.639024][ T5953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 43.639035][ T5953] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 43.656649][ T5953] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.656660][ T5953] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 43.747121][ T5971] 0x000000000000-0x000000010000 : "" [ 43.761121][ T5971] ftl_cs: FTL header not found. [ 44.021631][ T5981] syz.1.31 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.021648][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 44.021663][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.021671][ T5981] Call Trace: [ 44.021676][ T5981] [ 44.021681][ T5981] dump_stack_lvl+0x100/0x190 [ 44.021701][ T5981] dump_header+0xfb/0x606 [ 44.021715][ T5981] oom_kill_process.cold+0xd/0x380 [ 44.021731][ T5981] out_of_memory+0x340/0x14f0 [ 44.021753][ T5981] ? __pfx_out_of_memory+0x10/0x10 [ 44.021776][ T5981] mem_cgroup_out_of_memory+0xc6/0x130 [ 44.021793][ T5981] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 44.021808][ T5981] ? find_held_lock+0x2b/0x80 [ 44.021826][ T5981] ? do_raw_spin_unlock+0x145/0x1e0 [ 44.021838][ T5981] ? _raw_spin_unlock+0x28/0x50 [ 44.021856][ T5981] try_charge_memcg+0x783/0xf60 [ 44.021872][ T5981] ? __pfx_try_charge_memcg+0x10/0x10 [ 44.021884][ T5981] ? find_held_lock+0x2b/0x80 [ 44.021898][ T5981] ? rcu_read_unlock+0x17/0x60 [ 44.021910][ T5981] ? rcu_read_unlock+0x17/0x60 [ 44.021934][ T5981] obj_cgroup_charge_pages+0x2b/0x1f0 [ 44.021948][ T5981] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 44.021966][ T5981] ? kasan_save_track+0x14/0x30 [ 44.021986][ T5981] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 44.022003][ T5981] ? find_held_lock+0x2b/0x80 [ 44.022017][ T5981] ? sock_alloc_inode+0x26/0x2c0 [ 44.022034][ T5981] ? __pfx_sock_alloc_inode+0x10/0x10 [ 44.022050][ T5981] sock_alloc_inode+0x26/0x2c0 [ 44.022064][ T5981] ? __pfx_sock_alloc_inode+0x10/0x10 [ 44.022078][ T5981] alloc_inode+0x68/0x250 [ 44.022091][ T5981] sock_alloc+0x44/0x280 [ 44.022103][ T5981] ? security_socket_create+0x7f/0x250 [ 44.022123][ T5981] __sock_create+0xc2/0x860 [ 44.022143][ T5981] __sys_socket+0x14d/0x260 [ 44.022159][ T5981] ? xfd_validate_state+0x129/0x190 [ 44.022176][ T5981] ? __pfx___sys_socket+0x10/0x10 [ 44.022197][ T5981] __ia32_sys_socket+0x72/0xb0 [ 44.022214][ T5981] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.022231][ T5981] __do_fast_syscall_32+0x13a/0x8b0 [ 44.022251][ T5981] do_fast_syscall_32+0x32/0x70 [ 44.022262][ T5981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 44.022276][ T5981] RIP: 0023:0xf73eefec [ 44.022290][ T5981] Code: Unable to access opcode bytes at 0xf73eefc2. [ 44.022296][ T5981] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 44.022307][ T5981] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 44.022315][ T5981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.022322][ T5981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 44.022328][ T5981] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 44.022335][ T5981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.022350][ T5981] [ 44.022355][ T5981] memory: usage 0kB, limit 0kB, failcnt 55 [ 44.022362][ T5981] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 44.022370][ T5981] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 44.022378][ T5981] Memory cgroup stats for /syz1/test: [ 44.022441][ T5981] cache 0 [ 44.022447][ T5981] rss 0 [ 44.022451][ T5981] rss_huge 0 [ 44.022455][ T5981] shmem 0 [ 44.022460][ T5981] mapped_file 0 [ 44.022464][ T5981] dirty 0 [ 44.022468][ T5981] writeback 0 [ 44.022472][ T5981] workingset_refault_anon 0 [ 44.022477][ T5981] workingset_refault_file 0 [ 44.022481][ T5981] swap 0 [ 44.022485][ T5981] swapcached 0 [ 44.022490][ T5981] pgpgin 0 [ 44.022493][ T5981] pgpgout 0 [ 44.022497][ T5981] pgfault 2 [ 44.022501][ T5981] pgmajfault 0 [ 44.022505][ T5981] inactive_anon 0 [ 44.022510][ T5981] active_anon 0 [ 44.022514][ T5981] inactive_file 0 [ 44.022518][ T5981] active_file 0 [ 44.022522][ T5981] unevictable 0 [ 44.022526][ T5981] hierarchical_memory_limit 0 [ 44.022531][ T5981] hierarchical_memsw_limit 9223372036854771712 [ 44.022536][ T5981] total_cache 0 [ 44.022540][ T5981] total_rss 0 [ 44.022544][ T5981] total_rss_huge 0 [ 44.022549][ T5981] total_shmem 0 [ 44.022553][ T5981] total_mapped_file 0 [ 44.022557][ T5981] total_dirty 0 [ 44.022561][ T5981] total_writeback 0 [ 44.022566][ T5981] total_workingset_refault_anon 0 [ 44.022570][ T5981] total_workingset_refault_file 0 ** 23 printk messages dropped ** [ 44.312384][ T5991] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.344655][ T5988] syzkaller0: entered promiscuous mode [ 44.344671][ T5988] syzkaller0: entered allmulticast mode [ 44.373480][ T5991] md: couldn't update array info. -22 [ 44.411632][ T5992] md: could not open device unknown-block(1,1). [ 44.411660][ T5992] md: md_import_device returned -16 [ 44.571577][ T5996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.336171][ T5998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.473061][ T6009] 0x000000000000-0x000000010000 : "" [ 45.483867][ T6009] ftl_cs: FTL header not found. [ 45.486352][ T6009] FAULT_INJECTION: forcing a failure. [ 45.486352][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 45.486368][ T6009] CPU: 2 UID: 0 PID: 6009 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT(full) [ 45.486383][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.486393][ T6009] Call Trace: [ 45.486400][ T6009] [ 45.486407][ T6009] dump_stack_lvl+0x100/0x190 [ 45.486438][ T6009] should_fail_ex.cold+0x5/0xa [ 45.486464][ T6009] should_failslab+0xc2/0x120 [ 45.486529][ T6009] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 45.486549][ T6009] ? kstrdup_const+0x63/0x80 [ 45.486567][ T6009] kstrdup+0x51/0xe0 [ 45.486581][ T6009] kstrdup_const+0x63/0x80 [ 45.486596][ T6009] __kernfs_new_node+0x9b/0xa10 [ 45.486614][ T6009] ? device_add+0x13ff/0x1970 [ 45.486630][ T6009] ? __pfx___kernfs_new_node+0x10/0x10 [ 45.486650][ T6009] ? lock_acquire+0x1d1/0x380 [ 45.486667][ T6009] ? kernfs_root+0x23/0x2a0 [ 45.486683][ T6009] ? find_held_lock+0x2b/0x80 [ 45.486697][ T6009] ? kernfs_root+0xee/0x2a0 [ 45.486712][ T6009] ? kernfs_root+0xee/0x2a0 [ 45.486731][ T6009] kernfs_new_node+0x117/0x150 [ 45.486752][ T6009] kernfs_create_link+0xcc/0x240 [ 45.486769][ T6009] sysfs_do_create_link_sd+0x90/0x140 [ 45.486785][ T6009] sysfs_create_link+0x61/0xc0 [ 45.486801][ T6009] __add_disk+0x6b7/0xf10 [ 45.486819][ T6009] add_disk_fwnode+0x118/0x480 [ 45.486835][ T6009] add_mtd_blktrans_dev+0xd0b/0x1520 [ 45.486856][ T6009] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 45.486882][ T6009] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 45.486908][ T6009] ? mtdblock_add_mtd+0x4a/0x270 [ 45.486929][ T6009] mtdblock_add_mtd+0x1cc/0x270 [ 45.486949][ T6009] blktrans_notify_add+0xa2/0xf0 [ 45.486966][ T6009] add_mtd_device+0xb6d/0x1820 [ 45.486991][ T6009] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 45.487026][ T6009] ? __pfx_add_mtd_device+0x10/0x10 [ 45.487061][ T6009] mtd_add_partition+0x376/0x6a0 [ 45.487094][ T6009] ? __pfx_mtd_add_partition+0x10/0x10 [ 45.487119][ T6009] ? __might_fault+0xc5/0x140 [ 45.487141][ T6009] ? __might_fault+0xc5/0x140 [ 45.487173][ T6009] mtdchar_blkpg_ioctl+0x207/0x250 [ 45.487200][ T6009] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 45.487235][ T6009] mtdchar_compat_ioctl+0x3d6/0x440 [ 45.487253][ T6009] ? find_held_lock+0x2b/0x80 [ 45.487267][ T6009] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 45.487290][ T6009] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 45.487308][ T6009] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 45.487324][ T6009] __do_fast_syscall_32+0x13a/0x8b0 [ 45.487342][ T6009] ? lockdep_hardirqs_on+0x7d/0x110 [ 45.487360][ T6009] do_fast_syscall_32+0x32/0x70 [ 45.487371][ T6009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 45.487386][ T6009] RIP: 0023:0xf742efec [ 45.487401][ T6009] Code: Unable to access opcode bytes at 0xf742efc2. [ 45.487408][ T6009] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 45.487420][ T6009] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000001269 [ 45.487428][ T6009] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.487435][ T6009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.487443][ T6009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 45.487451][ T6009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.487467][ T6009] [ 45.698372][ T6020] syzkaller0: entered promiscuous mode [ 45.698381][ T6020] syzkaller0: entered allmulticast mode [ 45.912679][ T2331] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 45.961480][ C0] net_ratelimit: 89 callbacks suppressed [ 46.250952][ T6053] bridge0: port 3(syz_tun) entered blocking state [ 46.252767][ T6053] bridge0: port 3(syz_tun) entered disabled state [ 46.252913][ T6053] syz_tun: entered allmulticast mode [ 46.254697][ T6053] syz_tun: entered promiscuous mode [ 46.254959][ T6053] bridge0: port 3(syz_tun) entered blocking state [ 46.254998][ T6053] bridge0: port 3(syz_tun) entered forwarding state [ 46.416662][ T6069] 0x000000000000-0x000000010000 : "" [ 46.425226][ T6069] ftl_cs: FTL header not found. [ 46.432254][ T6069] FAULT_INJECTION: forcing a failure. [ 46.432254][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 46.432270][ T6069] CPU: 2 UID: 0 PID: 6069 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT(full) [ 46.432284][ T6069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.432291][ T6069] Call Trace: [ 46.432295][ T6069] [ 46.432300][ T6069] dump_stack_lvl+0x100/0x190 [ 46.432321][ T6069] should_fail_ex.cold+0x5/0xa [ 46.432337][ T6069] should_failslab+0xc2/0x120 [ 46.432356][ T6069] kmem_cache_alloc_noprof+0x92/0x6a0 [ 46.432374][ T6069] ? __kernfs_new_node+0xd2/0xa10 [ 46.432395][ T6069] __kernfs_new_node+0xd2/0xa10 [ 46.432414][ T6069] ? __pfx___kernfs_new_node+0x10/0x10 [ 46.432435][ T6069] ? lock_acquire+0x1d1/0x380 [ 46.432453][ T6069] ? kernfs_root+0x23/0x2a0 [ 46.432475][ T6069] ? find_held_lock+0x2b/0x80 [ 46.432489][ T6069] ? kernfs_root+0xee/0x2a0 [ 46.432506][ T6069] ? kernfs_root+0xee/0x2a0 [ 46.432525][ T6069] kernfs_new_node+0x117/0x150 [ 46.432546][ T6069] __kernfs_create_file+0x53/0x350 [ 46.432577][ T6069] sysfs_add_file_mode_ns+0x207/0x3c0 [ 46.432600][ T6069] internal_create_group+0x593/0xfb0 [ 46.432620][ T6069] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 46.432633][ T6069] ? __pfx_internal_create_group+0x10/0x10 [ 46.432652][ T6069] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 46.432669][ T6069] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 46.432685][ T6069] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 46.432703][ T6069] internal_create_groups+0x9d/0x150 [ 46.432723][ T6069] kobject_add_internal+0x317/0x930 [ 46.432741][ T6069] kobject_add+0x16a/0x1e0 [ 46.432754][ T6069] ? __pfx_kobject_add+0x10/0x10 [ 46.432768][ T6069] ? __pfx_kobject_add+0x10/0x10 [ 46.432787][ T6069] blk_register_queue+0x8d/0x630 [ 46.432825][ T6069] __add_disk+0x7dd/0xf10 [ 46.432844][ T6069] add_disk_fwnode+0x118/0x480 [ 46.432861][ T6069] add_mtd_blktrans_dev+0xd0b/0x1520 [ 46.432884][ T6069] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 46.432912][ T6069] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 46.432925][ T6069] ? mtdblock_add_mtd+0x4a/0x270 [ 46.432946][ T6069] mtdblock_add_mtd+0x1cc/0x270 [ 46.432964][ T6069] blktrans_notify_add+0xa2/0xf0 [ 46.432981][ T6069] add_mtd_device+0xb6d/0x1820 [ 46.432999][ T6069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 46.433017][ T6069] ? __pfx_add_mtd_device+0x10/0x10 [ 46.433036][ T6069] mtd_add_partition+0x376/0x6a0 [ 46.433052][ T6069] ? __pfx_mtd_add_partition+0x10/0x10 [ 46.433067][ T6069] ? __might_fault+0xc5/0x140 [ 46.433079][ T6069] ? __might_fault+0xc5/0x140 [ 46.433098][ T6069] mtdchar_blkpg_ioctl+0x207/0x250 [ 46.433114][ T6069] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 46.433143][ T6069] mtdchar_compat_ioctl+0x3d6/0x440 [ 46.433161][ T6069] ? find_held_lock+0x2b/0x80 [ 46.433175][ T6069] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 46.433199][ T6069] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 46.433216][ T6069] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 46.433232][ T6069] __do_fast_syscall_32+0x13a/0x8b0 [ 46.433250][ T6069] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.433268][ T6069] do_fast_syscall_32+0x32/0x70 [ 46.433279][ T6069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 46.433294][ T6069] RIP: 0023:0xf7f14fec [ 46.433307][ T6069] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 46.433313][ T6069] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 46.433324][ T6069] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000001269 [ 46.433332][ T6069] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.433339][ T6069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 46.433345][ T6069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 46.433352][ T6069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.433367][ T6069] [ 46.436077][ T6069] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock6) [ 46.443682][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.447117][ T6072] sd 0:0:0:0: PR command failed: 1026 [ 46.447139][ T6072] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 46.447158][ T6072] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 46.505174][ T5825] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 46.692705][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 46.694803][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.694842][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 46.694864][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.696571][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 46.696587][ T9] usb 6-1: Product: syz [ 46.696600][ T9] usb 6-1: Manufacturer: syz [ 46.732988][ T6047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.735798][ T9] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 46.744008][ T9] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 47.007120][ T5883] usb 6-1: USB disconnect, device number 2 [ 47.018107][ T5883] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 47.018506][ T5883] garmin_gps 6-1:1.0: device disconnected [ 51.001565][ C2] net_ratelimit: 98 callbacks suppressed [ 52.798140][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 52.811961][ T6117] binder: BINDER_SET_CONTEXT_MGR already set [ 52.811969][ T6117] binder: 6115:6117 ioctl 4018620d 80000040 returned -16 [ 52.812264][ T6117] binder: 6115:6117 ioctl c0306201 800003c0 returned -14 [ 52.840368][ T6113] FAULT_INJECTION: forcing a failure. [ 52.840368][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 52.840395][ T6113] CPU: 3 UID: 0 PID: 6113 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(full) [ 52.840417][ T6113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.840430][ T6113] Call Trace: [ 52.840438][ T6113] [ 52.840448][ T6113] dump_stack_lvl+0x100/0x190 [ 52.840478][ T6113] should_fail_ex.cold+0x5/0xa [ 52.840515][ T6113] should_failslab+0xc2/0x120 [ 52.840548][ T6113] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 52.840600][ T6113] ? mark_held_locks+0x40/0x70 [ 52.840631][ T6113] ? neigh_sysctl_register+0xb4/0x660 [ 52.840658][ T6113] kmemdup_noprof+0x29/0x60 [ 52.840683][ T6113] neigh_sysctl_register+0xb4/0x660 [ 52.840711][ T6113] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 52.840747][ T6113] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 52.840809][ T6113] ? lockdep_init_map_type+0x5c/0x250 [ 52.840837][ T6113] ? mld_in_v1_mode+0x2b2/0x3a0 [ 52.840861][ T6113] addrconf_sysctl_register+0xb9/0x200 [ 52.840883][ T6113] ipv6_add_dev+0xaf2/0x1520 [ 52.840906][ T6113] addrconf_notify+0x5db/0x1ba0 [ 52.840929][ T6113] ? __pfx_tls_dev_event+0x10/0x10 [ 52.840941][ T6113] ? __pfx_addrconf_notify+0x10/0x10 [ 52.840957][ T6113] ? ip6mr_device_event+0x1c4/0x230 [ 52.840974][ T6113] notifier_call_chain+0x99/0x3f0 [ 52.840991][ T6113] call_netdevice_notifiers_info+0xbe/0x110 [ 52.841015][ T6113] register_netdevice+0x1998/0x25a0 [ 52.841036][ T6113] ? __pfx_register_netdevice+0x10/0x10 [ 52.841054][ T6113] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 52.841067][ T6113] batadv_meshif_newlink+0x8f/0xc0 [ 52.841078][ T6113] rtnl_newlink+0x1697/0x2620 [ 52.841102][ T6113] ? __pfx_rtnl_newlink+0x10/0x10 [ 52.841117][ T6113] ? rcu_is_watching+0x13/0xc0 [ 52.841142][ T6113] ? find_held_lock+0x2b/0x80 [ 52.841159][ T6113] ? lock_acquire+0x1d1/0x380 [ 52.841179][ T6113] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 52.841195][ T6113] ? find_held_lock+0x2b/0x80 [ 52.841211][ T6113] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 52.841228][ T6113] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 52.841243][ T6113] ? __pfx_rtnl_newlink+0x10/0x10 [ 52.841258][ T6113] rtnetlink_rcv_msg+0x95e/0xe90 [ 52.841277][ T6113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.841295][ T6113] ? ref_tracker_free+0x37e/0x6c0 [ 52.841312][ T6113] netlink_rcv_skb+0x159/0x420 [ 52.841324][ T6113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.841340][ T6113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.841356][ T6113] ? netlink_deliver_tap+0x1ae/0xcc0 [ 52.841395][ T6113] netlink_unicast+0x585/0x850 [ 52.841411][ T6113] ? __pfx_netlink_unicast+0x10/0x10 [ 52.841429][ T6113] netlink_sendmsg+0x8b0/0xda0 [ 52.841444][ T6113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.841458][ T6113] ? apparmor_socket_sendmsg+0x165/0x280 [ 52.841481][ T6113] ____sys_sendmsg+0xa4d/0xbe0 [ 52.841501][ T6113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.841515][ T6113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.841540][ T6113] ___sys_sendmsg+0x190/0x1e0 [ 52.841559][ T6113] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.841576][ T6113] ? futex_wait+0x11e/0x370 [ 52.841598][ T6113] ? find_held_lock+0x2b/0x80 [ 52.841623][ T6113] __sys_sendmsg+0x160/0x210 [ 52.841638][ T6113] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.841660][ T6113] __do_fast_syscall_32+0x13a/0x8b0 [ 52.841681][ T6113] do_fast_syscall_32+0x32/0x70 [ 52.841692][ T6113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.841708][ T6113] RIP: 0023:0xf7f14fec [ 52.841722][ T6113] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 52.841727][ T6113] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 52.841739][ T6113] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 52.841747][ T6113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.841754][ T6113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.841761][ T6113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.841768][ T6113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.841783][ T6113] [ 52.844273][ T6119] FAULT_INJECTION: forcing a failure. [ 52.844273][ T6119] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.844300][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.2.60 Not tainted syzkaller #0 PREEMPT(full) [ 52.844323][ T6119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.844336][ T6119] Call Trace: [ 52.844343][ T6119] [ 52.844351][ T6119] dump_stack_lvl+0x100/0x190 [ 52.844386][ T6119] should_fail_ex.cold+0x5/0xa [ 52.844411][ T6119] _copy_from_user+0x2e/0xd0 [ 52.844443][ T6119] __ia32_compat_sys_socketcall+0x187/0x770 [ 52.844471][ T6119] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.844491][ T6119] ? xfd_validate_state+0x129/0x190 [ 52.844526][ T6119] do_int80_emulation+0x166/0x650 [ 52.844557][ T6119] asm_int80_emulation+0x1a/0x20 [ 52.844575][ T6119] RIP: 0023:0xf71875eb [ 52.844591][ T6119] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.844608][ T6119] RSP: 002b:00000000f54453ac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 52.844627][ T6119] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f544545c [ 52.844640][ T6119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.844651][ T6119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.844662][ T6119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.844674][ T6119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.844698][ T6119] [ 52.849018][ T6119] 0x000000000000-0x000000010000 : "" [ 52.853376][ T6119] ftl_cs: FTL header not found. [ 52.895731][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 52.993032][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 53.002215][ T6128] FAULT_INJECTION: forcing a failure. [ 53.002215][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 53.002229][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(full) [ 53.002242][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.002249][ T6128] Call Trace: [ 53.002253][ T6128] [ 53.002258][ T6128] dump_stack_lvl+0x100/0x190 [ 53.002276][ T6128] should_fail_ex.cold+0x5/0xa [ 53.002292][ T6128] should_failslab+0xc2/0x120 [ 53.002311][ T6128] __kmalloc_noprof+0xfc/0x840 [ 53.002327][ T6128] ? __register_sysctl_table+0xac/0x1650 [ 53.002349][ T6128] __register_sysctl_table+0xac/0x1650 [ 53.002370][ T6128] ? lock_acquire+0x1d1/0x380 [ 53.002388][ T6128] ? __pfx___register_sysctl_table+0x10/0x10 [ 53.002407][ T6128] ? is_module_address+0x5f/0xf0 [ 53.002418][ T6128] ? is_module_address+0x5f/0xf0 [ 53.002433][ T6128] register_net_sysctl_sz+0x325/0x420 [ 53.002450][ T6128] neigh_sysctl_register+0x326/0x660 [ 53.002463][ T6128] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 53.002481][ T6128] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 53.002494][ T6128] ? inetdev_init+0x245/0x570 [ 53.002508][ T6128] ? inetdev_event+0x827/0x17f0 [ 53.002528][ T6128] ? notifier_call_chain+0x99/0x3f0 [ 53.002543][ T6128] ? netlink_unicast+0x585/0x850 [ 53.002555][ T6128] ? netlink_sendmsg+0x8b0/0xda0 [ 53.002566][ T6128] ? ____sys_sendmsg+0xa4d/0xbe0 [ 53.002581][ T6128] ? ___sys_sendmsg+0x190/0x1e0 [ 53.002597][ T6128] ? __sys_sendmsg+0x160/0x210 [ 53.002609][ T6128] ? __do_fast_syscall_32+0x13a/0x8b0 [ 53.002628][ T6128] ? do_fast_syscall_32+0x32/0x70 [ 53.002642][ T6128] devinet_sysctl_register+0xb6/0x210 [ 53.002659][ T6128] inetdev_init+0x2b8/0x570 [ 53.002675][ T6128] inetdev_event+0x827/0x17f0 [ 53.002691][ T6128] ? ib_netdevice_event+0xfc/0x330 [ 53.002705][ T6128] ? __pfx_inetdev_event+0x10/0x10 [ 53.002721][ T6128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.002741][ T6128] notifier_call_chain+0x99/0x3f0 [ 53.002757][ T6128] call_netdevice_notifiers_info+0xbe/0x110 [ 53.002775][ T6128] register_netdevice+0x1998/0x25a0 [ 53.002792][ T6128] ? __pfx_register_netdevice+0x10/0x10 [ 53.002810][ T6128] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 53.002822][ T6128] batadv_meshif_newlink+0x8f/0xc0 [ 53.002833][ T6128] rtnl_newlink+0x1697/0x2620 [ 53.002853][ T6128] ? __pfx_rtnl_newlink+0x10/0x10 [ 53.002868][ T6128] ? rcu_is_watching+0x13/0xc0 [ 53.002893][ T6128] ? find_held_lock+0x2b/0x80 [ 53.002909][ T6128] ? lock_acquire+0x1d1/0x380 [ 53.002926][ T6128] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 53.002940][ T6128] ? find_held_lock+0x2b/0x80 [ 53.002953][ T6128] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 53.002967][ T6128] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 53.002982][ T6128] ? __pfx_rtnl_newlink+0x10/0x10 [ 53.002997][ T6128] rtnetlink_rcv_msg+0x95e/0xe90 [ 53.003012][ T6128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.003030][ T6128] ? ref_tracker_free+0x37e/0x6c0 [ 53.003047][ T6128] netlink_rcv_skb+0x159/0x420 [ 53.003058][ T6128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.003073][ T6128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.003090][ T6128] ? netlink_deliver_tap+0x1ae/0xcc0 [ 53.003110][ T6128] netlink_unicast+0x585/0x850 [ 53.003124][ T6128] ? __pfx_netlink_unicast+0x10/0x10 [ 53.003139][ T6128] netlink_sendmsg+0x8b0/0xda0 [ 53.003153][ T6128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.003165][ T6128] ? apparmor_socket_sendmsg+0x165/0x280 [ 53.003187][ T6128] ____sys_sendmsg+0xa4d/0xbe0 [ 53.003202][ T6128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.003214][ T6128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.003237][ T6128] ___sys_sendmsg+0x190/0x1e0 [ 53.003255][ T6128] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.003272][ T6128] ? futex_wait+0x11e/0x370 [ 53.003292][ T6128] ? find_held_lock+0x2b/0x80 [ 53.003314][ T6128] __sys_sendmsg+0x160/0x210 [ 53.003328][ T6128] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.003349][ T6128] __do_fast_syscall_32+0x13a/0x8b0 [ 53.003367][ T6128] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.003385][ T6128] do_fast_syscall_32+0x32/0x70 [ 53.003412][ T6128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.003432][ T6128] RIP: 0023:0xf73aefec [ 53.003447][ T6128] Code: Unable to access opcode bytes at 0xf73aefc2. [ 53.003453][ T6128] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 53.003465][ T6128] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 53.003473][ T6128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.003480][ T6128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.003488][ T6128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.003496][ T6128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.003512][ T6128] [ 53.334538][ T6140] syzkaller0: entered promiscuous mode [ 53.334553][ T6140] syzkaller0: entered allmulticast mode [ 53.421783][ T6143] 0x000000000000-0x000000010000 : "" [ 53.445352][ T6143] ftl_cs: FTL header not found. [ 53.469793][ T6145] 0x000000000000-0x000000010000 : "" [ 53.492247][ T6145] ftl_cs: FTL header not found. [ 53.851452][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.008524][ T6163] file system registered [ 54.024101][ T5883] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 54.024979][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.025003][ T5883] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 54.025015][ T5883] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.026216][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 54.026225][ T5883] usb 7-1: Product: syz [ 54.026233][ T5883] usb 7-1: Manufacturer: syz [ 54.031099][ T6153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.032264][ T5883] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 54.039900][ T5883] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 54.292729][ T9] usb 7-1: USB disconnect, device number 2 [ 54.308787][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 54.309161][ T9] garmin_gps 7-1:1.0: device disconnected [ 54.386807][ T6160] batman_adv: batadv0: Adding interface: syzkaller0 [ 54.386816][ T6160] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.386841][ T6160] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.414916][ T5739] ffs_data_put(): freeing [ 54.415397][ T6158] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 54.454492][ T6158] batman_adv: batadv0: Removing interface: syzkaller0 [ 54.514168][ T6170] batman_adv: batadv0: Adding interface: syzkaller0 [ 54.514178][ T6170] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.514202][ T6170] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.832055][ T6172] 0x000000000000-0x000000010000 : "" [ 54.838559][ T6172] ftl_cs: FTL header not found. [ 54.839991][ T6172] FAULT_INJECTION: forcing a failure. [ 54.839991][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 54.840014][ T6172] CPU: 2 UID: 0 PID: 6172 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 54.840036][ T6172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.840047][ T6172] Call Trace: [ 54.840056][ T6172] [ 54.840066][ T6172] dump_stack_lvl+0x100/0x190 [ 54.840100][ T6172] should_fail_ex.cold+0x5/0xa [ 54.840129][ T6172] should_failslab+0xc2/0x120 [ 54.840160][ T6172] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.840187][ T6172] ? __kernfs_new_node+0xd2/0xa10 [ 54.840222][ T6172] __kernfs_new_node+0xd2/0xa10 [ 54.840256][ T6172] ? __pfx___kernfs_new_node+0x10/0x10 [ 54.840292][ T6172] ? lock_acquire+0x1d1/0x380 [ 54.840318][ T6172] ? kernfs_root+0x23/0x2a0 [ 54.840343][ T6172] ? find_held_lock+0x2b/0x80 [ 54.840363][ T6172] ? kernfs_root+0xee/0x2a0 [ 54.840386][ T6172] ? kernfs_root+0xee/0x2a0 [ 54.840418][ T6172] kernfs_new_node+0x117/0x150 [ 54.840454][ T6172] __kernfs_create_file+0x53/0x350 [ 54.840478][ T6172] sysfs_add_file_mode_ns+0x207/0x3c0 [ 54.840508][ T6172] internal_create_group+0x593/0xfb0 [ 54.840540][ T6172] ? __pfx_internal_create_group+0x10/0x10 [ 54.840572][ T6172] ? kernfs_create_link+0x1bd/0x240 [ 54.840601][ T6172] internal_create_groups+0x9d/0x150 [ 54.840629][ T6172] device_add+0x77a/0x1970 [ 54.840654][ T6172] ? __pfx_device_add+0x10/0x10 [ 54.840674][ T6172] ? __pfx___might_resched+0x10/0x10 [ 54.840709][ T6172] __add_disk+0x592/0xf10 [ 54.840742][ T6172] add_disk_fwnode+0x118/0x480 [ 54.840790][ T6172] add_mtd_blktrans_dev+0xd0b/0x1520 [ 54.840825][ T6172] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 54.840886][ T6172] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 54.840911][ T6172] ? mtdblock_add_mtd+0x4a/0x270 [ 54.840948][ T6172] mtdblock_add_mtd+0x1cc/0x270 [ 54.840976][ T6172] blktrans_notify_add+0xa2/0xf0 [ 54.841004][ T6172] add_mtd_device+0xb6d/0x1820 [ 54.841033][ T6172] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.841065][ T6172] ? __pfx_add_mtd_device+0x10/0x10 [ 54.841096][ T6172] mtd_add_partition+0x376/0x6a0 [ 54.841123][ T6172] ? __pfx_mtd_add_partition+0x10/0x10 [ 54.841147][ T6172] ? __might_fault+0xc5/0x140 [ 54.841169][ T6172] ? __might_fault+0xc5/0x140 [ 54.841202][ T6172] mtdchar_blkpg_ioctl+0x207/0x250 [ 54.841230][ T6172] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 54.841279][ T6172] mtdchar_compat_ioctl+0x3d6/0x440 [ 54.841306][ T6172] ? find_held_lock+0x2b/0x80 [ 54.841330][ T6172] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 54.841372][ T6172] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 54.841398][ T6172] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 54.841424][ T6172] __do_fast_syscall_32+0x13a/0x8b0 [ 54.841455][ T6172] do_fast_syscall_32+0x32/0x70 [ 54.841475][ T6172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.841502][ T6172] RIP: 0023:0xf73aefec [ 54.841524][ T6172] Code: Unable to access opcode bytes at 0xf73aefc2. [ 54.841532][ T6172] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 54.841550][ T6172] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000001269 [ 54.841564][ T6172] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.841575][ T6172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.841587][ T6172] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.841598][ T6172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.841625][ T6172] [ 54.999638][ T6169] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 55.014068][ T6169] batman_adv: batadv0: Removing interface: syzkaller0 [ 55.095304][ T6186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.161546][ T6186] md: couldn't update array info. -22 [ 55.201879][ T6187] md: could not open device unknown-block(1,1). [ 55.201924][ T6187] md: md_import_device returned -16 [ 55.410930][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.411694][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.418815][ T6191] bridge0: entered allmulticast mode [ 55.429375][ T6191] bridge_slave_1: left allmulticast mode [ 55.429398][ T6191] bridge_slave_1: left promiscuous mode [ 55.429955][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.451264][ T6191] bridge_slave_0: left allmulticast mode [ 55.451995][ T6191] bridge_slave_0: left promiscuous mode [ 55.452818][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.764539][ T5732] ffs_data_put(): freeing [ 55.908533][ T6218] sd 0:0:0:0: PR command failed: 1026 [ 55.908555][ T6218] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 55.908574][ T6218] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 55.924521][ T6216] syzkaller0: entered promiscuous mode [ 55.924534][ T6216] syzkaller0: entered allmulticast mode [ 56.046267][ T6221] 0x000000000000-0x000000010000 : "" [ 56.051391][ C3] net_ratelimit: 163 callbacks suppressed [ 56.062288][ T6221] ftl_cs: FTL header not found. [ 56.074381][ T6221] FAULT_INJECTION: forcing a failure. [ 56.074381][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 56.074401][ T6221] CPU: 2 UID: 0 PID: 6221 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(full) [ 56.074414][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.074422][ T6221] Call Trace: [ 56.074426][ T6221] [ 56.074431][ T6221] dump_stack_lvl+0x100/0x190 [ 56.074452][ T6221] should_fail_ex.cold+0x5/0xa [ 56.074468][ T6221] should_failslab+0xc2/0x120 [ 56.074489][ T6221] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.074506][ T6221] ? __kernfs_new_node+0xd2/0xa10 [ 56.074526][ T6221] __kernfs_new_node+0xd2/0xa10 [ 56.074546][ T6221] ? __pfx___kernfs_new_node+0x10/0x10 [ 56.074565][ T6221] ? lock_acquire+0x1d1/0x380 [ 56.074582][ T6221] ? kernfs_root+0x23/0x2a0 [ 56.074598][ T6221] ? find_held_lock+0x2b/0x80 [ 56.074612][ T6221] ? kernfs_root+0xee/0x2a0 [ 56.074639][ T6221] ? kernfs_root+0xee/0x2a0 [ 56.074660][ T6221] kernfs_new_node+0x117/0x150 [ 56.074681][ T6221] __kernfs_create_file+0x53/0x350 [ 56.074696][ T6221] sysfs_add_file_mode_ns+0x207/0x3c0 [ 56.074715][ T6221] sysfs_merge_group+0x194/0x340 [ 56.074733][ T6221] ? __pfx_sysfs_merge_group+0x10/0x10 [ 56.074750][ T6221] ? bus_add_device+0x2e2/0x6c0 [ 56.074769][ T6221] ? __pfx_bus_add_device+0x10/0x10 [ 56.074785][ T6221] ? __pfx_dev_add_physical_location+0x10/0x10 [ 56.074804][ T6221] dpm_sysfs_add+0x237/0x280 [ 56.074819][ T6221] device_add+0x9f4/0x1970 [ 56.074835][ T6221] ? __pfx_device_add+0x10/0x10 [ 56.074849][ T6221] ? __pfx___might_resched+0x10/0x10 [ 56.074871][ T6221] __add_disk+0x592/0xf10 [ 56.074888][ T6221] add_disk_fwnode+0x118/0x480 [ 56.074908][ T6221] add_mtd_blktrans_dev+0xd0b/0x1520 [ 56.074930][ T6221] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 56.074958][ T6221] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 56.074973][ T6221] ? mtdblock_add_mtd+0x4a/0x270 [ 56.074995][ T6221] mtdblock_add_mtd+0x1cc/0x270 [ 56.075015][ T6221] blktrans_notify_add+0xa2/0xf0 [ 56.075032][ T6221] add_mtd_device+0xb6d/0x1820 [ 56.075052][ T6221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.075071][ T6221] ? __pfx_add_mtd_device+0x10/0x10 [ 56.075089][ T6221] mtd_add_partition+0x376/0x6a0 [ 56.075105][ T6221] ? __pfx_mtd_add_partition+0x10/0x10 [ 56.075120][ T6221] ? __might_fault+0xc5/0x140 [ 56.075133][ T6221] ? __might_fault+0xc5/0x140 [ 56.075152][ T6221] mtdchar_blkpg_ioctl+0x207/0x250 [ 56.075169][ T6221] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 56.075200][ T6221] mtdchar_compat_ioctl+0x3d6/0x440 [ 56.075218][ T6221] ? find_held_lock+0x2b/0x80 [ 56.075233][ T6221] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 56.075257][ T6221] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 56.075274][ T6221] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 56.075291][ T6221] __do_fast_syscall_32+0x13a/0x8b0 [ 56.075309][ T6221] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.075326][ T6221] do_fast_syscall_32+0x32/0x70 [ 56.075338][ T6221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.075353][ T6221] RIP: 0023:0xf73eefec [ 56.075367][ T6221] Code: Unable to access opcode bytes at 0xf73eefc2. [ 56.075373][ T6221] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 56.075385][ T6221] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 56.075392][ T6221] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.075399][ T6221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.075406][ T6221] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.075414][ T6221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.075430][ T6221] [ 56.245681][ T6226] 0x000000000000-0x000000010000 : "" [ 56.251679][ T6226] ftl_cs: FTL header not found. [ 56.283000][ T858] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 56.357562][ T6231] 0x000000000000-0x000000010000 : "" [ 56.367584][ T6231] ftl_cs: FTL header not found. [ 56.486575][ T6237] 0x000000000000-0x000000010000 : "" [ 56.494181][ T6237] ftl_cs: FTL header not found. [ 56.577309][ T6240] warning: `syz.2.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.626922][ T6244] 0x000000000000-0x000000010000 : "" [ 56.630168][ T6244] ftl_cs: FTL header not found. [ 56.635179][ T6244] FAULT_INJECTION: forcing a failure. [ 56.635179][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 56.635194][ T6244] CPU: 3 UID: 0 PID: 6244 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 56.635207][ T6244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.635214][ T6244] Call Trace: [ 56.635218][ T6244] [ 56.635223][ T6244] dump_stack_lvl+0x100/0x190 [ 56.635243][ T6244] should_fail_ex.cold+0x5/0xa [ 56.635259][ T6244] should_failslab+0xc2/0x120 [ 56.635295][ T6244] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.635313][ T6244] ? __kernfs_new_node+0xd2/0xa10 [ 56.635335][ T6244] __kernfs_new_node+0xd2/0xa10 [ 56.635355][ T6244] ? __pfx___kernfs_new_node+0x10/0x10 [ 56.635375][ T6244] ? lock_acquire+0x1d1/0x380 [ 56.635393][ T6244] ? kernfs_root+0x23/0x2a0 [ 56.635411][ T6244] ? find_held_lock+0x2b/0x80 [ 56.635425][ T6244] ? kernfs_root+0xee/0x2a0 [ 56.635441][ T6244] ? kernfs_root+0xee/0x2a0 [ 56.635462][ T6244] kernfs_new_node+0x117/0x150 [ 56.635484][ T6244] __kernfs_create_file+0x53/0x350 [ 56.635499][ T6244] sysfs_add_file_mode_ns+0x207/0x3c0 [ 56.635531][ T6244] internal_create_group+0x593/0xfb0 [ 56.635553][ T6244] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 56.635565][ T6244] ? __pfx_internal_create_group+0x10/0x10 [ 56.635583][ T6244] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 56.635598][ T6244] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 56.635615][ T6244] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 56.635632][ T6244] internal_create_groups+0x9d/0x150 [ 56.635650][ T6244] kobject_add_internal+0x317/0x930 [ 56.635668][ T6244] kobject_add+0x16a/0x1e0 [ 56.635681][ T6244] ? __pfx_kobject_add+0x10/0x10 [ 56.635696][ T6244] ? __pfx_kobject_add+0x10/0x10 [ 56.635715][ T6244] blk_register_queue+0x8d/0x630 [ 56.635734][ T6244] __add_disk+0x7dd/0xf10 [ 56.635750][ T6244] add_disk_fwnode+0x118/0x480 [ 56.635766][ T6244] add_mtd_blktrans_dev+0xd0b/0x1520 [ 56.635787][ T6244] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 56.635814][ T6244] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 56.635828][ T6244] ? mtdblock_add_mtd+0x4a/0x270 [ 56.635848][ T6244] mtdblock_add_mtd+0x1cc/0x270 [ 56.635867][ T6244] blktrans_notify_add+0xa2/0xf0 [ 56.635884][ T6244] add_mtd_device+0xb6d/0x1820 [ 56.635900][ T6244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.635919][ T6244] ? __pfx_add_mtd_device+0x10/0x10 [ 56.635937][ T6244] mtd_add_partition+0x376/0x6a0 [ 56.635954][ T6244] ? __pfx_mtd_add_partition+0x10/0x10 [ 56.635973][ T6244] ? __might_fault+0xc5/0x140 [ 56.635986][ T6244] ? __might_fault+0xc5/0x140 [ 56.636004][ T6244] mtdchar_blkpg_ioctl+0x207/0x250 [ 56.636021][ T6244] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 56.636052][ T6244] mtdchar_compat_ioctl+0x3d6/0x440 [ 56.636070][ T6244] ? find_held_lock+0x2b/0x80 [ 56.636084][ T6244] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 56.636109][ T6244] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 56.636127][ T6244] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 56.636144][ T6244] __do_fast_syscall_32+0x13a/0x8b0 [ 56.636162][ T6244] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.636180][ T6244] do_fast_syscall_32+0x32/0x70 [ 56.636191][ T6244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.636206][ T6244] RIP: 0023:0xf742efec [ 56.636220][ T6244] Code: Unable to access opcode bytes at 0xf742efc2. [ 56.636226][ T6244] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 56.636237][ T6244] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000001269 [ 56.636245][ T6244] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.636252][ T6244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.636259][ T6244] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.636266][ T6244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.636281][ T6244] [ 56.636855][ T6244] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock15) [ 57.362096][ T6252] 0x000000000000-0x000000010000 : "" [ 57.367454][ T6252] ftl_cs: FTL header not found. [ 57.377340][ T6252] FAULT_INJECTION: forcing a failure. [ 57.377340][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 57.377365][ T6252] CPU: 1 UID: 0 PID: 6252 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT(full) [ 57.377390][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.377402][ T6252] Call Trace: [ 57.377410][ T6252] [ 57.377419][ T6252] dump_stack_lvl+0x100/0x190 [ 57.377449][ T6252] should_fail_ex.cold+0x5/0xa [ 57.377477][ T6252] should_failslab+0xc2/0x120 [ 57.377509][ T6252] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.377537][ T6252] ? __asan_memcpy+0x3c/0x60 [ 57.377557][ T6252] ? __kernfs_new_node+0xd2/0xa10 [ 57.377592][ T6252] __kernfs_new_node+0xd2/0xa10 [ 57.377619][ T6252] ? device_add+0x13ff/0x1970 [ 57.377648][ T6252] ? __pfx___kernfs_new_node+0x10/0x10 [ 57.377676][ T6252] ? lock_acquire+0x1d1/0x380 [ 57.377706][ T6252] ? kernfs_root+0x23/0x2a0 [ 57.377734][ T6252] ? find_held_lock+0x2b/0x80 [ 57.377758][ T6252] ? kernfs_root+0xee/0x2a0 [ 57.377782][ T6252] ? kernfs_root+0xee/0x2a0 [ 57.377820][ T6252] kernfs_new_node+0x117/0x150 [ 57.377854][ T6252] kernfs_create_link+0xcc/0x240 [ 57.377880][ T6252] sysfs_do_create_link_sd+0x90/0x140 [ 57.377906][ T6252] sysfs_create_link+0x61/0xc0 [ 57.377933][ T6252] __add_disk+0x6b7/0xf10 [ 57.377963][ T6252] add_disk_fwnode+0x118/0x480 [ 57.377991][ T6252] add_mtd_blktrans_dev+0xd0b/0x1520 [ 57.378023][ T6252] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 57.378090][ T6252] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.378114][ T6252] ? mtdblock_add_mtd+0x4a/0x270 [ 57.378147][ T6252] mtdblock_add_mtd+0x1cc/0x270 [ 57.378178][ T6252] blktrans_notify_add+0xa2/0xf0 [ 57.378206][ T6252] add_mtd_device+0xb6d/0x1820 [ 57.378231][ T6252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.378263][ T6252] ? __pfx_add_mtd_device+0x10/0x10 [ 57.378294][ T6252] mtd_add_partition+0x376/0x6a0 [ 57.378322][ T6252] ? __pfx_mtd_add_partition+0x10/0x10 [ 57.378347][ T6252] ? __might_fault+0xc5/0x140 [ 57.378365][ T6252] ? __might_fault+0xc5/0x140 [ 57.378397][ T6252] mtdchar_blkpg_ioctl+0x207/0x250 [ 57.378425][ T6252] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 57.378472][ T6252] mtdchar_compat_ioctl+0x3d6/0x440 [ 57.378501][ T6252] ? find_held_lock+0x2b/0x80 [ 57.378525][ T6252] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.378566][ T6252] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.378591][ T6252] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 57.378619][ T6252] __do_fast_syscall_32+0x13a/0x8b0 [ 57.378648][ T6252] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.378678][ T6252] do_fast_syscall_32+0x32/0x70 [ 57.378694][ T6252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.378719][ T6252] RIP: 0023:0xf73aefec [ 57.378741][ T6252] Code: Unable to access opcode bytes at 0xf73aefc2. [ 57.378751][ T6252] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 57.378771][ T6252] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 57.378784][ T6252] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.378800][ T6252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.378811][ T6252] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.378824][ T6252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.378852][ T6252] [ 57.435674][ T6257] 0x000000000000-0x000000010000 : "" [ 57.446459][ T6257] ftl_cs: FTL header not found. [ 57.561157][ T6263] 0x000000000000-0x000000010000 : "" [ 57.566148][ T6261] syz.0.111 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 57.566168][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) [ 57.566183][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.566191][ T6261] Call Trace: [ 57.566196][ T6261] [ 57.566202][ T6261] dump_stack_lvl+0x100/0x190 [ 57.566231][ T6261] dump_header+0xfb/0x606 [ 57.566254][ T6261] oom_kill_process.cold+0xd/0x380 [ 57.566280][ T6261] out_of_memory+0x340/0x14f0 [ 57.566307][ T6261] ? __pfx_out_of_memory+0x10/0x10 [ 57.566329][ T6261] mem_cgroup_out_of_memory+0xc6/0x130 [ 57.566347][ T6261] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 57.566363][ T6261] ? find_held_lock+0x2b/0x80 [ 57.566380][ T6261] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.566395][ T6261] ? _raw_spin_unlock+0x28/0x50 [ 57.566412][ T6261] try_charge_memcg+0x783/0xf60 [ 57.566428][ T6261] ? __pfx_try_charge_memcg+0x10/0x10 [ 57.566440][ T6261] ? find_held_lock+0x2b/0x80 [ 57.566454][ T6261] ? rcu_read_unlock+0x17/0x60 [ 57.566466][ T6261] ? rcu_read_unlock+0x17/0x60 [ 57.566483][ T6261] obj_cgroup_charge_pages+0x2b/0x1f0 [ 57.566497][ T6261] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 57.566515][ T6261] ? kasan_save_track+0x14/0x30 [ 57.566532][ T6261] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 57.566549][ T6261] ? find_held_lock+0x2b/0x80 [ 57.566562][ T6261] ? sock_alloc_inode+0x26/0x2c0 [ 57.566579][ T6261] ? __pfx_sock_alloc_inode+0x10/0x10 [ 57.566594][ T6261] sock_alloc_inode+0x26/0x2c0 [ 57.566615][ T6261] ? __pfx_sock_alloc_inode+0x10/0x10 [ 57.566655][ T6261] alloc_inode+0x68/0x250 [ 57.566690][ T6261] sock_alloc+0x44/0x280 [ 57.566705][ T6261] ? security_socket_create+0x7f/0x250 [ 57.566724][ T6261] __sock_create+0xc2/0x860 [ 57.566744][ T6261] __sys_socket+0x14d/0x260 [ 57.566761][ T6261] ? xfd_validate_state+0x129/0x190 [ 57.566780][ T6261] ? __pfx___sys_socket+0x10/0x10 [ 57.566805][ T6261] __ia32_sys_socket+0x72/0xb0 [ 57.566822][ T6261] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.566839][ T6261] __do_fast_syscall_32+0x13a/0x8b0 [ 57.566859][ T6261] do_fast_syscall_32+0x32/0x70 [ 57.566871][ T6261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.566886][ T6261] RIP: 0023:0xf7f14fec [ 57.566901][ T6261] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 57.566906][ T6261] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 57.566918][ T6261] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 57.566926][ T6261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.566932][ T6261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.566939][ T6261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.566945][ T6261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.566960][ T6261] [ 57.567531][ T6261] memory: usage 0kB, limit 0kB, failcnt 60 [ 57.567541][ T6261] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.567549][ T6261] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.567557][ T6261] Memory cgroup stats for /syz0/test: [ 57.567622][ T6261] cache 0 [ 57.567627][ T6261] rss 0 [ 57.567632][ T6261] rss_huge 0 [ 57.567636][ T6261] shmem 0 [ 57.567640][ T6261] mapped_file 0 [ 57.567645][ T6261] dirty 0 [ 57.567649][ T6261] writeback 0 [ 57.567653][ T6261] workingset_refault_anon 0 [ 57.567659][ T6261] workingset_refault_file 0 [ 57.567664][ T6261] swap 0 [ 57.567668][ T6261] swapcached 0 [ 57.567673][ T6261] pgpgin 0 [ 57.567677][ T6261] pgpgout 0 [ 57.567681][ T6261] pgfault 15 [ 57.567685][ T6261] pgmajfault 0 [ 57.567690][ T6261] inactive_anon 0 [ 57.567694][ T6261] active_anon 0 [ 57.567698][ T6261] inactive_file 0 [ 57.567703][ T6261] active_file 0 [ 57.567707][ T6261] unevictable 0 [ 57.567711][ T6261] hierarchical_memory_limit 0 [ 57.567715][ T6261] hierarchical_memsw_limit 9223372036854771712 [ 57.567721][ T6261] total_cache 0 [ 57.567725][ T6261] total_rss 0 [ 57.567729][ T6261] total_rss_huge 0 [ 57.567733][ T6261] total_shmem 0 [ 57.567737][ T6261] total_mapped_file 0 [ 57.567741][ T6261] total_dirty 0 [ 57.567745][ T6261] total_writeback 0 [ 57.567750][ T6261] total_workingset_refault_anon 0 [ 57.567754][ T6261] total_workingset_refault_file 0 [ 57.567759][ T6261] total_swap 0 [ 57.567763][ T6261] total_swapcached 0 [ 57.567767][ T6261] total_pgpgin 0 [ 57.567771][ T6261] total_pgpgout 0 [ 57.567775][ T6261] total_pgfault 15 [ 57.567780][ T6261] total_pgmajfault 0 [ 57.567784][ T6261] total_inactive_anon 0 [ 57.567788][ T6261] total_active_anon 0 [ 57.567793][ T6261] total_inactive_file 0 [ 57.567803][ T6261] total_active_file 0 [ 57.567808][ T6261] total_unevictable 0 [ 57.567812][ T6261] anon_cost 0 [ 57.567816][ T6261] file_cost 0 [ 57.567821][ T6261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.111,pid=6260,uid=0 [ 57.567884][ T6261] Memory cgroup out of memory: Killed process 6260 (syz.0.111) total-vm:104084kB, anon-rss:232kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 57.568413][ T6263] ftl_cs: FTL header not found. [ 57.571215][ T6263] FAULT_INJECTION: forcing a failure. [ 57.571215][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 57.571232][ T6263] CPU: 2 UID: 0 PID: 6263 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full) [ 57.571246][ T6263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.571253][ T6263] Call Trace: [ 57.571258][ T6263] [ 57.571262][ T6263] dump_stack_lvl+0x100/0x190 [ 57.571298][ T6263] should_fail_ex.cold+0x5/0xa [ 57.571315][ T6263] should_failslab+0xc2/0x120 [ 57.571334][ T6263] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.571351][ T6263] ? __kernfs_new_node+0xd2/0xa10 [ 57.571373][ T6263] __kernfs_new_node+0xd2/0xa10 [ 57.571393][ T6263] ? __pfx___kernfs_new_node+0x10/0x10 [ 57.571413][ T6263] ? lock_acquire+0x1d1/0x380 [ 57.571429][ T6263] ? kernfs_root+0x23/0x2a0 [ 57.571445][ T6263] ? find_held_lock+0x2b/0x80 [ 57.571459][ T6263] ? kernfs_root+0xee/0x2a0 [ 57.571474][ T6263] ? kernfs_root+0xee/0x2a0 [ 57.571493][ T6263] kernfs_new_node+0x117/0x150 [ 57.571515][ T6263] __kernfs_create_file+0x53/0x350 [ 57.571531][ T6263] sysfs_add_file_mode_ns+0x207/0x3c0 [ 57.571550][ T6263] internal_create_group+0x593/0xfb0 [ 57.571570][ T6263] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 57.571582][ T6263] ? __pfx_internal_create_group+0x10/0x10 [ 57.571600][ T6263] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 57.571616][ T6263] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.571632][ T6263] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 57.571649][ T6263] internal_create_groups+0x9d/0x150 [ 57.571667][ T6263] kobject_add_internal+0x317/0x930 [ 57.571684][ T6263] kobject_add+0x16a/0x1e0 [ 57.571697][ T6263] ? __pfx_kobject_add+0x10/0x10 [ 57.571712][ T6263] ? __pfx_kobject_add+0x10/0x10 [ 57.571730][ T6263] blk_register_queue+0x8d/0x630 [ 57.571749][ T6263] __add_disk+0x7dd/0xf10 [ 57.571766][ T6263] add_disk_fwnode+0x118/0x480 [ 57.571783][ T6263] add_mtd_blktrans_dev+0xd0b/0x1520 [ 57.571804][ T6263] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 57.571831][ T6263] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.571845][ T6263] ? mtdblock_add_mtd+0x4a/0x270 [ 57.571865][ T6263] mtdblock_add_mtd+0x1cc/0x270 [ 57.571883][ T6263] blktrans_notify_add+0xa2/0xf0 [ 57.571905][ T6263] add_mtd_device+0xb6d/0x1820 [ 57.571923][ T6263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.571943][ T6263] ? __pfx_add_mtd_device+0x10/0x10 [ 57.571962][ T6263] mtd_add_partition+0x376/0x6a0 [ 57.571980][ T6263] ? __pfx_mtd_add_partition+0x10/0x10 [ 57.571995][ T6263] ? __might_fault+0xc5/0x140 [ 57.572009][ T6263] ? __might_fault+0xc5/0x140 [ 57.572029][ T6263] mtdchar_blkpg_ioctl+0x207/0x250 [ 57.572046][ T6263] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 57.572076][ T6263] mtdchar_compat_ioctl+0x3d6/0x440 [ 57.572094][ T6263] ? find_held_lock+0x2b/0x80 [ 57.572108][ T6263] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.572132][ T6263] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.572149][ T6263] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 57.572164][ T6263] __do_fast_syscall_32+0x13a/0x8b0 [ 57.572182][ T6263] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.572200][ T6263] do_fast_syscall_32+0x32/0x70 [ 57.572212][ T6263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.572226][ T6263] RIP: 0023:0xf73eefec [ 57.572240][ T6263] Code: Unable to access opcode bytes at 0xf73eefc2. [ 57.572246][ T6263] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 57.572257][ T6263] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000001269 [ 57.572265][ T6263] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.572272][ T6263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.572280][ T6263] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.572287][ T6263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.572303][ T6263] [ 57.572713][ T6263] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock18) [ 57.613658][ T6265] 0x000000000000-0x000000010000 : "" [ 57.618600][ T6265] ftl_cs: FTL header not found. [ 57.623864][ T6265] FAULT_INJECTION: forcing a failure. [ 57.623864][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 57.623879][ T6265] CPU: 2 UID: 0 PID: 6265 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) [ 57.623893][ T6265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.623900][ T6265] Call Trace: [ 57.623904][ T6265] [ 57.623909][ T6265] dump_stack_lvl+0x100/0x190 [ 57.623929][ T6265] should_fail_ex.cold+0x5/0xa [ 57.623944][ T6265] should_failslab+0xc2/0x120 [ 57.623963][ T6265] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.623980][ T6265] ? __kernfs_new_node+0xd2/0xa10 [ 57.624001][ T6265] __kernfs_new_node+0xd2/0xa10 [ 57.624022][ T6265] ? __pfx___kernfs_new_node+0x10/0x10 [ 57.624042][ T6265] ? lock_acquire+0x1d1/0x380 [ 57.624077][ T6265] ? kernfs_root+0x23/0x2a0 [ 57.624094][ T6265] ? find_held_lock+0x2b/0x80 [ 57.624109][ T6265] ? kernfs_root+0xee/0x2a0 [ 57.624125][ T6265] ? kernfs_root+0xee/0x2a0 [ 57.624145][ T6265] kernfs_new_node+0x117/0x150 [ 57.624167][ T6265] __kernfs_create_file+0x53/0x350 [ 57.624184][ T6265] sysfs_add_file_mode_ns+0x207/0x3c0 [ 57.624204][ T6265] internal_create_group+0x593/0xfb0 [ 57.624225][ T6265] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 57.624238][ T6265] ? __pfx_internal_create_group+0x10/0x10 [ 57.624257][ T6265] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 57.624273][ T6265] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.624289][ T6265] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 57.624307][ T6265] internal_create_groups+0x9d/0x150 [ 57.624325][ T6265] kobject_add_internal+0x317/0x930 [ 57.624342][ T6265] kobject_add+0x16a/0x1e0 [ 57.624355][ T6265] ? __pfx_kobject_add+0x10/0x10 [ 57.624370][ T6265] ? __pfx_kobject_add+0x10/0x10 [ 57.624389][ T6265] blk_register_queue+0x8d/0x630 [ 57.624408][ T6265] __add_disk+0x7dd/0xf10 [ 57.624424][ T6265] add_disk_fwnode+0x118/0x480 [ 57.624440][ T6265] add_mtd_blktrans_dev+0xd0b/0x1520 [ 57.624466][ T6265] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 57.624493][ T6265] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.624508][ T6265] ? mtdblock_add_mtd+0x4a/0x270 [ 57.624529][ T6265] mtdblock_add_mtd+0x1cc/0x270 [ 57.624548][ T6265] blktrans_notify_add+0xa2/0xf0 [ 57.624565][ T6265] add_mtd_device+0xb6d/0x1820 [ 57.624582][ T6265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.624601][ T6265] ? __pfx_add_mtd_device+0x10/0x10 [ 57.624619][ T6265] mtd_add_partition+0x376/0x6a0 [ 57.624636][ T6265] ? __pfx_mtd_add_partition+0x10/0x10 [ 57.624651][ T6265] ? __might_fault+0xc5/0x140 [ 57.624664][ T6265] ? __might_fault+0xc5/0x140 [ 57.624682][ T6265] mtdchar_blkpg_ioctl+0x207/0x250 [ 57.624698][ T6265] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 57.624727][ T6265] mtdchar_compat_ioctl+0x3d6/0x440 [ 57.624745][ T6265] ? find_held_lock+0x2b/0x80 [ 57.624781][ T6265] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.624807][ T6265] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.624824][ T6265] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 57.624842][ T6265] __do_fast_syscall_32+0x13a/0x8b0 [ 57.624861][ T6265] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.624880][ T6265] do_fast_syscall_32+0x32/0x70 [ 57.624892][ T6265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.624906][ T6265] RIP: 0023:0xf73aefec [ 57.624922][ T6265] Code: Unable to access opcode bytes at 0xf73aefc2. [ 57.624927][ T6265] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 57.624938][ T6265] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 57.624946][ T6265] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.624953][ T6265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.624960][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.624967][ T6265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.624982][ T6265] [ 57.625503][ T6265] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock19) [ 57.667376][ T6271] 0x000000000000-0x000000010000 : "" [ 57.671997][ T6271] ftl_cs: FTL header not found. [ 57.686083][ T6271] FAULT_INJECTION: forcing a failure. [ 57.686083][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 57.686100][ T6271] CPU: 2 UID: 0 PID: 6271 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(full) [ 57.686114][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.686122][ T6271] Call Trace: [ 57.686127][ T6271] [ 57.686132][ T6271] dump_stack_lvl+0x100/0x190 [ 57.686153][ T6271] should_fail_ex.cold+0x5/0xa [ 57.686169][ T6271] should_failslab+0xc2/0x120 [ 57.686189][ T6271] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.686209][ T6271] ? __kernfs_new_node+0xd2/0xa10 [ 57.686240][ T6271] __kernfs_new_node+0xd2/0xa10 [ 57.686264][ T6271] ? __pfx___kernfs_new_node+0x10/0x10 [ 57.686283][ T6271] ? lock_acquire+0x1d1/0x380 [ 57.686300][ T6271] ? kernfs_root+0x23/0x2a0 [ 57.686316][ T6271] ? find_held_lock+0x2b/0x80 [ 57.686330][ T6271] ? kernfs_root+0xee/0x2a0 [ 57.686345][ T6271] ? kernfs_root+0xee/0x2a0 [ 57.686364][ T6271] kernfs_new_node+0x117/0x150 [ 57.686384][ T6271] __kernfs_create_file+0x53/0x350 [ 57.686399][ T6271] sysfs_add_file_mode_ns+0x207/0x3c0 [ 57.686419][ T6271] internal_create_group+0x593/0xfb0 [ 57.686438][ T6271] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 57.686450][ T6271] ? __pfx_internal_create_group+0x10/0x10 [ 57.686474][ T6271] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 57.686506][ T6271] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.686525][ T6271] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 57.686543][ T6271] internal_create_groups+0x9d/0x150 [ 57.686565][ T6271] kobject_add_internal+0x317/0x930 [ 57.686583][ T6271] kobject_add+0x16a/0x1e0 [ 57.686597][ T6271] ? __pfx_kobject_add+0x10/0x10 [ 57.686612][ T6271] ? __pfx_kobject_add+0x10/0x10 [ 57.686630][ T6271] blk_register_queue+0x8d/0x630 [ 57.686649][ T6271] __add_disk+0x7dd/0xf10 [ 57.686666][ T6271] add_disk_fwnode+0x118/0x480 [ 57.686683][ T6271] add_mtd_blktrans_dev+0xd0b/0x1520 [ 57.686704][ T6271] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 57.686732][ T6271] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.686746][ T6271] ? mtdblock_add_mtd+0x4a/0x270 [ 57.686766][ T6271] mtdblock_add_mtd+0x1cc/0x270 [ 57.686784][ T6271] blktrans_notify_add+0xa2/0xf0 [ 57.686802][ T6271] add_mtd_device+0xb6d/0x1820 [ 57.686819][ T6271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.686838][ T6271] ? __pfx_add_mtd_device+0x10/0x10 [ 57.686856][ T6271] mtd_add_partition+0x376/0x6a0 [ 57.686873][ T6271] ? __pfx_mtd_add_partition+0x10/0x10 [ 57.686887][ T6271] ? __might_fault+0xc5/0x140 [ 57.686899][ T6271] ? __might_fault+0xc5/0x140 [ 57.686918][ T6271] mtdchar_blkpg_ioctl+0x207/0x250 [ 57.686934][ T6271] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 57.686967][ T6271] mtdchar_compat_ioctl+0x3d6/0x440 [ 57.686985][ T6271] ? find_held_lock+0x2b/0x80 [ 57.686999][ T6271] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.687023][ T6271] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 57.687040][ T6271] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 57.687056][ T6271] __do_fast_syscall_32+0x13a/0x8b0 [ 57.687073][ T6271] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.687091][ T6271] do_fast_syscall_32+0x32/0x70 [ 57.687102][ T6271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.687117][ T6271] RIP: 0023:0xf7f14fec [ 57.687131][ T6271] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 57.687136][ T6271] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 57.687148][ T6271] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 57.687157][ T6271] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.687165][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.687172][ T6271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.687179][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.687194][ T6271] [ 57.691108][ T6271] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock20) [ 57.810100][ T6279] 0x000000000000-0x000000010000 : "" [ 57.816023][ T6279] ftl_cs: FTL header not found. [ 57.825588][ T6279] FAULT_INJECTION: forcing a failure. [ 57.825588][ T6279] name failslab, interval 1, probability 0, space 0, times 0 [ 57.825604][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.1.117 Not tainted syzkaller #0 PREEMPT(full) [ 57.825618][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.825626][ T6279] Call Trace: [ 57.825631][ T6279] [ 57.825636][ T6279] dump_stack_lvl+0x100/0x190 [ 57.825657][ T6279] should_fail_ex.cold+0x5/0xa [ 57.825673][ T6279] should_failslab+0xc2/0x120 [ 57.825693][ T6279] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.825710][ T6279] ? __kernfs_new_node+0xd2/0xa10 [ 57.825731][ T6279] __kernfs_new_node+0xd2/0xa10 [ 57.825750][ T6279] ? __pfx___kernfs_new_node+0x10/0x10 [ 57.825769][ T6279] ? lock_acquire+0x1d1/0x380 [ 57.825786][ T6279] ? kernfs_root+0x23/0x2a0 [ 57.825805][ T6279] ? find_held_lock+0x2b/0x80 [ 57.825819][ T6279] ? kernfs_root+0xee/0x2a0 [ 57.825834][ T6279] ? kernfs_root+0xee/0x2a0 [ 57.825853][ T6279] kernfs_create_dir_ns+0xa6/0x2b0 [ 57.825867][ T6279] sysfs_create_dir_ns+0x13a/0x2b0 [ 57.825883][ T6279] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.825902][ T6279] ? rcu_is_watching+0x13/0xc0 [ 57.825919][ T6279] kobject_add_internal+0x2c8/0x930 [ 57.825950][ T6279] kobject_add+0x16a/0x1e0 [ 57.825963][ T6279] ? __pfx_kobject_add+0x10/0x10 [ 57.825977][ T6279] ? __kasan_kmalloc+0xaa/0xb0 [ 57.825994][ T6279] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.826009][ T6279] ? kobject_create_and_add+0x46/0xc0 [ 57.826026][ T6279] kobject_create_and_add+0x7a/0xc0 [ 57.826042][ T6279] __add_disk+0x79c/0xf10 [ 57.826060][ T6279] add_disk_fwnode+0x118/0x480 [ 57.826078][ T6279] add_mtd_blktrans_dev+0xd0b/0x1520 [ 57.826099][ T6279] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 57.826126][ T6279] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 57.826140][ T6279] ? mtdblock_add_mtd+0x4a/0x270 [ 57.826162][ T6279] mtdblock_add_mtd+0x1cc/0x270 [ 57.826180][ T6279] blktrans_notify_add+0xa2/0xf0 [ 57.826198][ T6279] add_mtd_device+0xb6d/0x1820 [ 57.826214][ T6279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.826233][ T6279] ? __pfx_add_mtd_device+0x10/0x10 [ 57.826256][ T6279] mtd_add_partition+0x376/0x6a0 [ 57.826274][ T6279] ? __pfx_mtd_add_partition+0x10/0x10 [ 57.826289][ T6279] ? __might_fault+0xc5/0x140 [ 57.826303][ T6279] ? __might_fault+0xc5/0x140 ** 27 printk messages dropped ** ** 81 printk messages dropped ** ** 139 printk messages dropped ** ** 72 printk messages dropped ** ** 87 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 86 printk messages dropped ** ** 93 printk messages dropped ** [ 58.158869][ T6299] 0x000000000000-0x000000010000 : "" [ 58.163657][ T6299] ftl_cs: FTL header not found. [ 58.171587][ T6299] FAULT_INJECTION: forcing a failure. [ 58.171587][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 58.171604][ T6299] CPU: 3 UID: 0 PID: 6299 Comm: syz.1.124 Not tainted syzkaller #0 PREEMPT(full) [ 58.171618][ T6299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.171626][ T6299] Call Trace: [ 58.171630][ T6299] [ 58.171635][ T6299] dump_stack_lvl+0x100/0x190 [ 58.171655][ T6299] should_fail_ex.cold+0x5/0xa [ 58.171671][ T6299] should_failslab+0xc2/0x120 [ 58.171690][ T6299] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.171705][ T6299] ? kobject_create_and_add+0x46/0xc0 [ 58.171722][ T6299] kobject_create_and_add+0x46/0xc0 ** 34 printk messages dropped ** [ 58.172296][ T6299] ** 119 printk messages dropped ** [ 58.289296][ T6302] ? find_held_lock+0x2b/0x80 ** 1 printk messages dropped ** [ 58.289342][ T6302] ? kernfs_root+0xee/0x2a0 ** 66 printk messages dropped ** [ 58.521108][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 58.875583][ T6321] netlink: 84 bytes leftover after parsing attributes in process `syz.2.132'. [ 59.153158][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 59.269724][ T6336] fuse: Bad value for 'fd' [ 59.331823][ T6342] FAULT_INJECTION: forcing a failure. [ 59.331823][ T6342] name fail_futex, interval 1, probability 0, space 0, times 1 [ 59.331840][ T6342] CPU: 2 UID: 0 PID: 6342 Comm: syz.1.141 Not tainted syzkaller #0 PREEMPT(full) [ 59.331854][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.331862][ T6342] Call Trace: [ 59.331867][ T6342] [ 59.331872][ T6342] dump_stack_lvl+0x100/0x190 [ 59.331892][ T6342] should_fail_ex.cold+0x5/0xa [ 59.331907][ T6342] ? kmem_cache_free+0x43b/0x6c0 [ 59.331923][ T6342] get_futex_key+0x1d0/0x14f0 [ 59.331938][ T6342] ? __pfx_get_futex_key+0x10/0x10 [ 59.331955][ T6342] futex_wake+0xf4/0x5e0 [ 59.331973][ T6342] ? __pfx_futex_wake+0x10/0x10 [ 59.331993][ T6342] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 59.332014][ T6342] do_futex+0x2b2/0x440 [ 59.332028][ T6342] ? __pfx_do_futex+0x10/0x10 [ 59.332041][ T6342] ? kmem_cache_free+0x43b/0x6c0 [ 59.332054][ T6342] ? percpu_counter_add_batch+0xb9/0x230 [ 59.332070][ T6342] __ia32_sys_futex_time32+0x2f4/0x470 [ 59.332087][ T6342] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 59.332107][ T6342] __do_fast_syscall_32+0x13a/0x8b0 [ 59.332125][ T6342] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.332144][ T6342] do_fast_syscall_32+0x32/0x70 [ 59.332156][ T6342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.332171][ T6342] RIP: 0023:0xf73eefec [ 59.332185][ T6342] Code: Unable to access opcode bytes at 0xf73eefc2. [ 59.332191][ T6342] RSP: 002b:00000000f54065cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 59.332204][ T6342] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 59.332212][ T6342] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 59.332219][ T6342] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 59.332226][ T6342] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 59.332233][ T6342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.332247][ T6342] [ 59.616959][ T6349] FAULT_INJECTION: forcing a failure. [ 59.616959][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 59.616976][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT(full) [ 59.616990][ T6349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.616998][ T6349] Call Trace: [ 59.617002][ T6349] [ 59.617007][ T6349] dump_stack_lvl+0x100/0x190 [ 59.617028][ T6349] should_fail_ex.cold+0x5/0xa [ 59.617043][ T6349] should_failslab+0xc2/0x120 [ 59.617062][ T6349] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.617076][ T6349] ? fuse_get_tree+0x88/0x490 [ 59.617095][ T6349] fuse_get_tree+0x88/0x490 [ 59.617112][ T6349] vfs_get_tree+0x92/0x320 [ 59.617125][ T6349] path_mount+0x7d0/0x24c0 [ 59.617146][ T6349] ? __pfx_path_mount+0x10/0x10 [ 59.617163][ T6349] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.617182][ T6349] ? putname+0xb1/0x110 [ 59.617199][ T6349] ? kmem_cache_free+0x127/0x6c0 [ 59.617216][ T6349] ? __ia32_sys_mount+0x292/0x310 [ 59.617227][ T6349] __ia32_sys_mount+0x292/0x310 [ 59.617238][ T6349] ? __pfx___ia32_sys_mount+0x10/0x10 [ 59.617253][ T6349] __do_fast_syscall_32+0x13a/0x8b0 [ 59.617274][ T6349] do_fast_syscall_32+0x32/0x70 [ 59.617285][ T6349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.617300][ T6349] RIP: 0023:0xf742efec [ 59.617315][ T6349] Code: Unable to access opcode bytes at 0xf742efc2. [ 59.617321][ T6349] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 59.617333][ T6349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800001c0 [ 59.617341][ T6349] RDX: 0000000080002100 RSI: 0000000000000080 RDI: 00000000800002c0 [ 59.617348][ T6349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.617355][ T6349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.617362][ T6349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.617376][ T6349] [ 59.745809][ T6353] netlink: 84 bytes leftover after parsing attributes in process `syz.1.151'. [ 59.753863][ T6353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.151'. [ 60.353414][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 60.566187][ T6369] fuse: Bad value for 'fd' [ 60.718634][ T6376] syzkaller0: entered promiscuous mode [ 60.718648][ T6376] syzkaller0: entered allmulticast mode [ 61.251371][ C1] net_ratelimit: 224 callbacks suppressed [ 61.451366][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 61.613070][ T6399] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 61.672897][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.712872][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.214078][ T6416] FAULT_INJECTION: forcing a failure. [ 62.214078][ T6416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.214098][ T6416] CPU: 0 UID: 0 PID: 6416 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT(full) [ 62.214112][ T6416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.214119][ T6416] Call Trace: [ 62.214123][ T6416] [ 62.214129][ T6416] dump_stack_lvl+0x100/0x190 [ 62.214149][ T6416] should_fail_ex.cold+0x5/0xa [ 62.214166][ T6416] _copy_from_user+0x2e/0xd0 [ 62.214185][ T6416] __ia32_compat_sys_socketcall+0x187/0x770 [ 62.214204][ T6416] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 62.214230][ T6416] do_int80_emulation+0x166/0x650 [ 62.214251][ T6416] asm_int80_emulation+0x1a/0x20 [ 62.214264][ T6416] RIP: 0023:0xf71075eb [ 62.214274][ T6416] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 62.214287][ T6416] RSP: 002b:00000000f53c53ac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 62.214298][ T6416] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53c545c [ 62.214308][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.214315][ T6416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.214322][ T6416] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 62.214329][ T6416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.214343][ T6416] [ 62.256692][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 62.585859][ T858] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.755626][ T858] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 62.756820][ T858] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.756860][ T858] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 62.756881][ T858] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.758899][ T858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 62.758917][ T858] usb 7-1: Product: syz [ 62.758930][ T858] usb 7-1: Manufacturer: syz [ 62.763501][ T6427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.765163][ T858] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 62.775620][ T858] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 62.851438][ T5883] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 62.979233][ T858] usb 7-1: USB disconnect, device number 3 [ 62.987622][ T858] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 62.988045][ T858] garmin_gps 7-1:1.0: device disconnected [ 63.013812][ T5883] usb 8-1: unable to get BOS descriptor or descriptor too short [ 63.013855][ T5883] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 63.014965][ T5883] usb 8-1: config 142 has an invalid interface number: 251 but max is 0 [ 63.014986][ T5883] usb 8-1: config 142 has no interface number 0 [ 63.015016][ T5883] usb 8-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 63.015038][ T5883] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 63.015058][ T5883] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 63.015077][ T5883] usb 8-1: config 142 interface 251 has no altsetting 0 [ 63.020234][ T5883] usb 8-1: string descriptor 0 read error: -22 [ 63.020353][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.024477][ T6437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.024598][ T6437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.028267][ T5883] cypress_m8 8-1:142.251: HID->COM RS232 Adapter converter detected [ 63.030885][ T5883] usb 8-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 63.230106][ T5883] usb 8-1: USB disconnect, device number 2 [ 63.247788][ T5883] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 63.248389][ T5883] cypress_m8 8-1:142.251: device disconnected [ 63.347729][ T6456] sd 0:0:0:0: PR command failed: 1026 [ 63.347750][ T6456] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 63.347769][ T6456] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 63.761511][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.774572][ T6477] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 63.774807][ T6477] bridge0: port 3(syz_tun) entered disabled state [ 63.775711][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.776163][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.783011][ T6477] bridge0: port 3(syz_tun) entered blocking state [ 63.783096][ T6477] bridge0: port 3(syz_tun) entered forwarding state [ 63.783426][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.783512][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.783764][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.783860][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.786284][ T6477] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 63.912269][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 63.914059][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.914073][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 63.915269][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 63.915279][ T9] usb 5-1: Product: syz [ 63.915287][ T9] usb 5-1: Manufacturer: syz [ 64.134407][ T9] usb 5-1: USB disconnect, device number 2 [ 64.199770][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 64.534085][ T6499] syzkaller0: entered promiscuous mode [ 64.534101][ T6499] syzkaller0: entered allmulticast mode [ 64.948673][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 65.685752][ T6531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.706723][ T6533] udc dummy_udc.0: failed to start g1: -19 [ 65.727777][ T6533] UDC core: g1: couldn't find an available UDC or it's busy [ 65.751547][ T6531] md: couldn't update array info. -22 [ 65.801469][ T6537] md: could not open device unknown-block(1,1). [ 65.801494][ T6537] md: md_import_device returned -16 [ 65.900434][ T6547] sd 0:0:0:0: PR command failed: 1026 [ 65.900457][ T6547] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 65.900477][ T6547] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 65.998550][ T6555] 0x000000000000-0x000000010000 : "" [ 66.002566][ T6555] ftl_cs: FTL header not found. [ 66.016446][ T6555] FAULT_INJECTION: forcing a failure. [ 66.016446][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 66.016462][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.1.227 Not tainted syzkaller #0 PREEMPT(full) [ 66.016487][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.016496][ T6555] Call Trace: [ 66.016500][ T6555] [ 66.016506][ T6555] dump_stack_lvl+0x100/0x190 [ 66.016526][ T6555] should_fail_ex.cold+0x5/0xa [ 66.016542][ T6555] should_failslab+0xc2/0x120 [ 66.016560][ T6555] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.016578][ T6555] ? __kernfs_new_node+0xd2/0xa10 [ 66.016599][ T6555] __kernfs_new_node+0xd2/0xa10 [ 66.016621][ T6555] ? __pfx___kernfs_new_node+0x10/0x10 [ 66.016641][ T6555] ? lock_acquire+0x1d1/0x380 [ 66.016658][ T6555] ? kernfs_root+0x23/0x2a0 [ 66.016675][ T6555] ? find_held_lock+0x2b/0x80 [ 66.016689][ T6555] ? kernfs_root+0xee/0x2a0 [ 66.016706][ T6555] ? kernfs_root+0xee/0x2a0 [ 66.016746][ T6555] kernfs_new_node+0x117/0x150 [ 66.016768][ T6555] __kernfs_create_file+0x53/0x350 [ 66.016784][ T6555] sysfs_add_file_mode_ns+0x207/0x3c0 [ 66.016806][ T6555] internal_create_group+0x593/0xfb0 [ 66.016828][ T6555] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 66.016841][ T6555] ? __pfx_internal_create_group+0x10/0x10 [ 66.016859][ T6555] ? sysfs_create_dir_ns+0x14c/0x2b0 ** 224 printk messages dropped ** ** 142 printk messages dropped ** ** 105 printk messages dropped ** ** 88 printk messages dropped ** ** 107 printk messages dropped ** ** 137 printk messages dropped ** ** 142 printk messages dropped ** ** 142 printk messages dropped ** ** 147 printk messages dropped ** ** 138 printk messages dropped ** ** 142 printk messages dropped ** ** 140 printk messages dropped ** ** 146 printk messages dropped ** ** 47 printk messages dropped ** [ 66.252308][ T6568] udc dummy_udc.0: failed to start g1: -19 [ 66.253454][ T6568] UDC core: g1: couldn't find an available UDC or it's busy [ 66.293442][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 66.343589][ T6579] FAULT_INJECTION: forcing a failure. [ 66.343589][ T6579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 66.343608][ T6579] CPU: 2 UID: 0 PID: 6579 Comm: syz.3.234 Not tainted syzkaller #0 PREEMPT(full) [ 66.343623][ T6579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.343630][ T6579] Call Trace: [ 66.343634][ T6579] [ 66.343640][ T6579] dump_stack_lvl+0x100/0x190 [ 66.343660][ T6579] should_fail_ex.cold+0x5/0xa [ 66.343675][ T6579] get_futex_key+0x1d0/0x14f0 [ 66.343691][ T6579] ? __pfx_get_futex_key+0x10/0x10 [ 66.343708][ T6579] futex_wait_setup+0x91/0x540 [ 66.343729][ T6579] __futex_wait+0x19f/0x300 [ 66.343745][ T6579] ? __pfx___futex_wait+0x10/0x10 [ 66.343760][ T6579] ? __pfx_try_to_wake_up+0x10/0x10 [ 66.343777][ T6579] ? futex_hash+0x311/0x400 [ 66.343789][ T6579] ? __pfx_futex_wake_mark+0x10/0x10 [ 66.343808][ T6579] ? find_held_lock+0x2b/0x80 [ 66.343823][ T6579] ? futex_wake+0x4ea/0x5e0 [ 66.343842][ T6579] futex_wait+0xe6/0x370 [ 66.343857][ T6579] ? __pfx_futex_wait+0x10/0x10 [ 66.343876][ T6579] ? find_held_lock+0x2b/0x80 [ 66.343892][ T6579] do_futex+0x265/0x440 [ 66.343906][ T6579] ? __pfx_do_futex+0x10/0x10 [ 66.343920][ T6579] ? fput+0x7c/0x100 [ 66.343937][ T6579] __ia32_sys_futex_time32+0x2f4/0x470 [ 66.343954][ T6579] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 66.343973][ T6579] __do_fast_syscall_32+0x13a/0x8b0 [ 66.343994][ T6579] do_fast_syscall_32+0x32/0x70 [ 66.344005][ T6579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.344020][ T6579] RIP: 0023:0xf73aefec [ 66.344034][ T6579] Code: Unable to access opcode bytes at 0xf73aefc2. [ 66.344040][ T6579] RSP: 002b:00000000f53c65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 66.344052][ T6579] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 66.344059][ T6579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 66.344066][ T6579] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 66.344073][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.344081][ T6579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.344096][ T6579] [ 66.361697][ T1219] net_ratelimit: 74 callbacks suppressed [ 66.410517][ T6582] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.479523][ T6591] 0x000000000000-0x000000010000 : "" [ 66.486009][ T6591] ftl_cs: FTL header not found. [ 66.489372][ T6591] FAULT_INJECTION: forcing a failure. [ 66.489372][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 66.489387][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 66.489401][ T6591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.489409][ T6591] Call Trace: [ 66.489414][ T6591] [ 66.489419][ T6591] dump_stack_lvl+0x100/0x190 [ 66.489439][ T6591] should_fail_ex.cold+0x5/0xa [ 66.489455][ T6591] should_failslab+0xc2/0x120 [ 66.489475][ T6591] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.489493][ T6591] ? __kernfs_new_node+0xd2/0xa10 [ 66.489514][ T6591] __kernfs_new_node+0xd2/0xa10 [ 66.489534][ T6591] ? __pfx___kernfs_new_node+0x10/0x10 [ 66.489553][ T6591] ? lock_acquire+0x1d1/0x380 [ 66.489570][ T6591] ? kernfs_root+0x23/0x2a0 [ 66.489586][ T6591] ? find_held_lock+0x2b/0x80 [ 66.489599][ T6591] ? kernfs_root+0xee/0x2a0 [ 66.489614][ T6591] ? kernfs_root+0xee/0x2a0 [ 66.489634][ T6591] kernfs_create_dir_ns+0xa6/0x2b0 [ 66.489649][ T6591] sysfs_create_dir_ns+0x13a/0x2b0 [ 66.489666][ T6591] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 66.489684][ T6591] ? rcu_is_watching+0x13/0xc0 [ 66.489699][ T6591] kobject_add_internal+0x2c8/0x930 [ 66.489716][ T6591] kobject_add+0x16a/0x1e0 [ 66.489729][ T6591] ? __pfx_kobject_add+0x10/0x10 [ 66.489744][ T6591] ? __kasan_kmalloc+0xaa/0xb0 [ 66.489762][ T6591] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 66.489782][ T6591] ? kobject_create_and_add+0x46/0xc0 [ 66.489800][ T6591] kobject_create_and_add+0x7a/0xc0 [ 66.489816][ T6591] __add_disk+0x70d/0xf10 [ 66.489834][ T6591] add_disk_fwnode+0x118/0x480 [ 66.489853][ T6591] add_mtd_blktrans_dev+0xd0b/0x1520 [ 66.489874][ T6591] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 66.489900][ T6591] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 66.489914][ T6591] ? mtdblock_add_mtd+0x4a/0x270 [ 66.489934][ T6591] mtdblock_add_mtd+0x1cc/0x270 [ 66.489952][ T6591] blktrans_notify_add+0xa2/0xf0 [ 66.489969][ T6591] add_mtd_device+0xb6d/0x1820 [ 66.489985][ T6591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.490004][ T6591] ? __pfx_add_mtd_device+0x10/0x10 [ 66.490022][ T6591] mtd_add_partition+0x376/0x6a0 [ 66.490039][ T6591] ? __pfx_mtd_add_partition+0x10/0x10 [ 66.490055][ T6591] ? __might_fault+0xc5/0x140 [ 66.490067][ T6591] ? __might_fault+0xc5/0x140 [ 66.490085][ T6591] mtdchar_blkpg_ioctl+0x207/0x250 [ 66.490102][ T6591] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 66.490130][ T6591] mtdchar_compat_ioctl+0x3d6/0x440 [ 66.490148][ T6591] ? find_held_lock+0x2b/0x80 [ 66.490162][ T6591] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 66.490185][ T6591] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 66.490202][ T6591] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 66.490218][ T6591] __do_fast_syscall_32+0x13a/0x8b0 [ 66.490236][ T6591] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.490254][ T6591] do_fast_syscall_32+0x32/0x70 [ 66.490265][ T6591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.490280][ T6591] RIP: 0023:0xf7f14fec [ 66.490295][ T6591] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 66.490318][ T6591] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 66.490331][ T6591] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 66.490339][ T6591] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.490347][ T6591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.490356][ T6591] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.490363][ T6591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.490379][ T6591] [ 66.491519][ T6591] kobject: kobject_add_internal failed for holders (error: -12 parent: mtdblock27) [ 66.491538][ T6591] kobject: kobject_create_and_add: kobject_add error: -12 [ 66.538774][ T6595] sd 0:0:0:0: PR command failed: 1026 [ 66.538796][ T6595] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 66.538815][ T6595] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 67.075405][ T6611] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.109255][ T6613] udc dummy_udc.0: failed to start g1: -19 [ 67.110253][ T6613] UDC core: g1: couldn't find an available UDC or it's busy [ 67.295290][ T6620] 0x000000000000-0x000000010000 : "" [ 67.300357][ T6620] ftl_cs: FTL header not found. [ 67.305328][ T6620] FAULT_INJECTION: forcing a failure. [ 67.305328][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 67.305344][ T6620] CPU: 2 UID: 0 PID: 6620 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) [ 67.305358][ T6620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.305366][ T6620] Call Trace: [ 67.305372][ T6620] [ 67.305378][ T6620] dump_stack_lvl+0x100/0x190 [ 67.305398][ T6620] should_fail_ex.cold+0x5/0xa [ 67.305415][ T6620] should_failslab+0xc2/0x120 [ 67.305433][ T6620] __kmalloc_cache_noprof+0x91/0x6d0 [ 67.305448][ T6620] ? kobject_create_and_add+0x46/0xc0 [ 67.305466][ T6620] kobject_create_and_add+0x46/0xc0 [ 67.305481][ T6620] __add_disk+0x70d/0xf10 [ 67.305498][ T6620] add_disk_fwnode+0x118/0x480 [ 67.305514][ T6620] add_mtd_blktrans_dev+0xd0b/0x1520 [ 67.305535][ T6620] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 67.305561][ T6620] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 67.305575][ T6620] ? mtdblock_add_mtd+0x4a/0x270 [ 67.305596][ T6620] mtdblock_add_mtd+0x1cc/0x270 [ 67.305614][ T6620] blktrans_notify_add+0xa2/0xf0 [ 67.305632][ T6620] add_mtd_device+0xb6d/0x1820 [ 67.305648][ T6620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.305667][ T6620] ? __pfx_add_mtd_device+0x10/0x10 [ 67.305685][ T6620] mtd_add_partition+0x376/0x6a0 [ 67.305701][ T6620] ? __pfx_mtd_add_partition+0x10/0x10 [ 67.305716][ T6620] ? __might_fault+0xc5/0x140 [ 67.305728][ T6620] ? __might_fault+0xc5/0x140 [ 67.305746][ T6620] mtdchar_blkpg_ioctl+0x207/0x250 [ 67.305763][ T6620] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 67.305791][ T6620] mtdchar_compat_ioctl+0x3d6/0x440 [ 67.305808][ T6620] ? find_held_lock+0x2b/0x80 [ 67.305823][ T6620] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 67.305846][ T6620] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 67.305863][ T6620] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 67.305886][ T6620] __do_fast_syscall_32+0x13a/0x8b0 [ 67.305905][ T6620] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.305923][ T6620] do_fast_syscall_32+0x32/0x70 [ 67.305949][ T6620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.305967][ T6620] RIP: 0023:0xf742efec [ 67.305983][ T6620] Code: Unable to access opcode bytes at 0xf742efc2. [ 67.305989][ T6620] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 67.306001][ T6620] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 67.306009][ T6620] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.306017][ T6620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.306024][ T6620] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.306031][ T6620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.306047][ T6620] [ 67.414098][ T6627] bond0: (slave bond_slave_0): Releasing backup interface [ 67.436092][ T6628] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 67.477741][ T6630] netlink: 84 bytes leftover after parsing attributes in process `syz.1.252'. [ 67.520796][ T6632] udc dummy_udc.0: failed to start g1: -19 [ 67.523004][ T6630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.252'. [ 67.524634][ T6632] UDC core: g1: couldn't find an available UDC or it's busy [ 67.568142][ T6634] udc dummy_udc.0: failed to start g1: -19 [ 67.569181][ T6634] UDC core: g1: couldn't find an available UDC or it's busy [ 67.578738][ T6627] bond0: (slave bond_slave_1): Releasing backup interface [ 67.595751][ T6627] team0: Port device team_slave_0 removed [ 67.614474][ T6627] team0: Port device team_slave_1 removed [ 67.614950][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.614960][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.617090][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.617099][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.646753][ T6636] syz_tun: left allmulticast mode [ 67.646764][ T6636] syz_tun: left promiscuous mode [ 67.646862][ T6636] bridge0: port 3(syz_tun) entered disabled state [ 67.672807][ T6636] bond0: (slave bridge0): Releasing backup interface [ 67.676487][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.676588][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.689652][ T6636] bridge_slave_0: left allmulticast mode [ 67.689663][ T6636] bridge_slave_0: left promiscuous mode [ 67.689746][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.702212][ T6637] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 67.785406][ T6636] bridge_slave_1: left allmulticast mode [ 67.785416][ T6636] bridge_slave_1: left promiscuous mode [ 67.785503][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.803469][ T6636] bond0: (slave bond_slave_0): Releasing backup interface [ 67.810607][ T6636] bond0: (slave bond_slave_1): Releasing backup interface [ 67.839480][ T6636] team0: Port device team_slave_0 removed [ 67.862410][ T6636] team0: Port device team_slave_1 removed [ 67.862915][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.862933][ T6636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.865473][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.865483][ T6636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.876889][ T6637] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 68.251436][ T1041] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.403853][ T5742] ffs_data_put(): freeing [ 68.416793][ T1041] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 68.419243][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.419299][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 68.439513][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.439529][ T1041] usb 5-1: Product: syz [ 68.439541][ T1041] usb 5-1: Manufacturer: syz [ 68.439553][ T1041] usb 5-1: SerialNumber: syz [ 68.454707][ T1041] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 68.456449][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 68.456513][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 68.457507][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.457547][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 68.457586][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.457626][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.458411][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 68.458489][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 68.464269][ T1041] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.467348][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 68.467388][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.467427][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 68.467466][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 68.467504][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 68.467543][ T1041] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.469398][ T1041] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ ** replaying previous printk message ** [ 68.523206][ T6661] batman_adv: batadv0: Adding interface: syzkaller0 [ 68.523212][ T6661] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.523228][ T6661] batman_adv: batadv0: Interface activated: syzkaller0 [ 68.529169][ T6661] FAULT_INJECTION: forcing a failure. [ 68.529169][ T6661] name failslab, interval 1, probability 0, space 0, times 0 [ 68.529194][ T6661] CPU: 3 UID: 0 PID: 6661 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 68.529212][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.529221][ T6661] Call Trace: [ 68.529227][ T6661] [ 68.529234][ T6661] dump_stack_lvl+0x100/0x190 [ 68.529258][ T6661] should_fail_ex.cold+0x5/0xa [ 68.529278][ T6661] should_failslab+0xc2/0x120 [ 68.529302][ T6661] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.529319][ T6661] ? batadv_orig_ifinfo_new+0x94/0x420 [ 68.529345][ T6661] batadv_orig_ifinfo_new+0x94/0x420 [ 68.529368][ T6661] batadv_iv_ogm_process_per_outif+0x274/0x3980 [ 68.529393][ T6661] ? find_held_lock+0x2b/0x80 [ 68.529413][ T6661] ? lock_acquire+0x1d1/0x380 [ 68.529435][ T6661] ? do_raw_spin_lock+0x128/0x260 [ 68.529449][ T6661] ? find_held_lock+0x2b/0x80 [ 68.529466][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.529508][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.529528][ T6661] ? rcu_is_watching+0x13/0xc0 [ 68.529546][ T6661] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 68.529567][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.529588][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.529608][ T6661] ? __local_bh_enable_ip+0xa5/0x120 [ 68.529631][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x4f9/0x720 [ 68.529655][ T6661] batadv_iv_ogm_receive+0x1049/0x1ae0 [ 68.529687][ T6661] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 68.529711][ T6661] ? __pfx___up_read+0x10/0x10 [ 68.529725][ T6661] ? do_user_addr_fault+0x7d7/0x12f0 [ 68.529742][ T6661] ? do_user_addr_fault+0x7d7/0x12f0 [ 68.529763][ T6661] batadv_batman_skb_recv+0x5e0/0x850 [ 68.529787][ T6661] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 68.529813][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.529836][ T6661] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 68.529867][ T6661] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 68.529895][ T6661] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 68.529922][ T6661] ? lock_acquire+0x1d1/0x380 [ 68.529949][ T6661] __netif_receive_skb+0x1f/0x120 [ 68.529973][ T6661] netif_receive_skb+0x139/0x7d0 [ 68.529996][ T6661] ? __pfx_netif_receive_skb+0x10/0x10 [ 68.530019][ T6661] ? _copy_from_iter+0x270/0x1690 [ 68.530049][ T6661] tun_rx_batched.isra.0+0x3f6/0x750 [ 68.530077][ T6661] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 68.530106][ T6661] ? tun_get_user+0x1e1e/0x3cc0 [ 68.530126][ T6661] tun_get_user+0x1f53/0x3cc0 [ 68.530149][ T6661] ? __lock_acquire+0x5c0/0x1f40 [ 68.530170][ T6661] ? __pfx_tun_get_user+0x10/0x10 [ 68.530187][ T6661] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.530212][ T6661] ? find_held_lock+0x2b/0x80 [ 68.530229][ T6661] ? tun_get+0x191/0x370 [ 68.530242][ T6661] ? tun_get+0x191/0x370 [ 68.530261][ T6661] tun_chr_write_iter+0xdc/0x200 [ 68.530279][ T6661] vfs_write+0x6af/0x1050 [ 68.530298][ T6661] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.530317][ T6661] ? __pfx_vfs_write+0x10/0x10 [ 68.530333][ T6661] ? find_held_lock+0x2b/0x80 [ 68.530365][ T6661] ksys_write+0x12a/0x250 [ 68.530383][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 68.530406][ T6661] __do_fast_syscall_32+0x13a/0x8b0 [ 68.530432][ T6661] do_fast_syscall_32+0x32/0x70 [ 68.530447][ T6661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.530466][ T6661] RIP: 0023:0xf742efec [ 68.530484][ T6661] Code: Unable to access opcode bytes at 0xf742efc2. [ 68.530492][ T6661] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 68.530507][ T6661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 68.530518][ T6661] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 68.530529][ T6661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.530539][ T6661] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.530549][ T6661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.530570][ T6661] [ 68.531470][ T6661] ------------[ cut here ]------------ [ 68.531478][ T6661] !orig_ifinfo [ 68.531483][ T6661] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x2d62/0x3980, CPU#3: syz.2.263/6661 [ 68.674211][ T6661] Modules linked in: [ 68.675538][ T6661] CPU: 3 UID: 0 PID: 6661 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 68.678360][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.681599][ T6661] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 68.683814][ T6661] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 29 9e e5 f6 e9 ae d3 ff ff e8 0f 5e 72 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 68.689561][ T6661] RSP: 0018:ffffc90003567460 EFLAGS: 00010283 [ 68.691453][ T6661] RAX: 0000000000026e6b RBX: 0000000000000000 RCX: ffffc9000d501000 [ 68.693820][ T6661] RDX: 0000000000080000 RSI: ffffffff8b994821 RDI: ffffffff8c625580 [ 68.696207][ T6661] RBP: ffff888074270040 R08: 0000000000000001 R09: 0000000000000000 [ 68.698589][ T6661] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 68.701000][ T6661] R13: ffff888023e9c000 R14: ffff888014fd3900 R15: ffff88804bd14000 [ 68.703490][ T6661] FS: 0000000000000000(0000) GS:ffff888095a4d000(0063) knlGS:00000000f5446b40 [ 68.706178][ T6661] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 68.708157][ T6661] CR2: 00000000f742f000 CR3: 0000000050118000 CR4: 0000000000352ef0 [ 68.710516][ T6661] Call Trace: [ 68.711580][ T6661] [ 68.712491][ T6661] ? find_held_lock+0x2b/0x80 [ 68.713954][ T6661] ? lock_acquire+0x1d1/0x380 [ 68.715415][ T6661] ? do_raw_spin_lock+0x128/0x260 [ 68.716964][ T6661] ? find_held_lock+0x2b/0x80 [ 68.718440][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.720374][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.722332][ T6661] ? rcu_is_watching+0x13/0xc0 [ 68.723803][ T6661] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 68.725852][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.727456][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.729392][ T6661] ? __local_bh_enable_ip+0xa5/0x120 [ 68.731022][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x4f9/0x720 [ 68.732968][ T6661] batadv_iv_ogm_receive+0x1049/0x1ae0 [ 68.734641][ T6661] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 68.736441][ T6661] ? __pfx___up_read+0x10/0x10 [ 68.737964][ T6661] ? do_user_addr_fault+0x7d7/0x12f0 [ 68.739599][ T6661] ? do_user_addr_fault+0x7d7/0x12f0 [ 68.741224][ T6661] batadv_batman_skb_recv+0x5e0/0x850 [ 68.742906][ T6661] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 68.744771][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.746380][ T6661] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 68.748205][ T6661] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 68.750010][ T6661] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 68.752015][ T6661] ? lock_acquire+0x1d1/0x380 [ 68.753507][ T6661] __netif_receive_skb+0x1f/0x120 [ 68.754175][ T858] usb 5-1: USB disconnect, device number 3 [ 68.756901][ T6661] netif_receive_skb+0x139/0x7d0 [ 68.758424][ T6661] ? __pfx_netif_receive_skb+0x10/0x10 [ 68.760104][ T6661] ? _copy_from_iter+0x270/0x1690 [ 68.761714][ T6661] tun_rx_batched.isra.0+0x3f6/0x750 [ 68.763357][ T6661] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 68.765199][ T6661] ? tun_get_user+0x1e1e/0x3cc0 [ 68.766520][ T858] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 68.769599][ T6661] tun_get_user+0x1f53/0x3cc0 [ 68.771030][ T6661] ? __lock_acquire+0x5c0/0x1f40 [ 68.771683][ T858] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 68.772095][ T858] keyspan 5-1:1.0: device disconnected [ 68.777179][ T6661] ? __pfx_tun_get_user+0x10/0x10 [ 68.778808][ T6661] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.780457][ T6661] ? find_held_lock+0x2b/0x80 [ 68.781968][ T6661] ? tun_get+0x191/0x370 [ 68.783258][ T6661] ? tun_get+0x191/0x370 [ 68.784549][ T6661] tun_chr_write_iter+0xdc/0x200 [ 68.786104][ T6661] vfs_write+0x6af/0x1050 [ 68.787455][ T6661] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.789151][ T6661] ? __pfx_vfs_write+0x10/0x10 [ 68.790623][ T6661] ? find_held_lock+0x2b/0x80 [ 68.792103][ T6661] ksys_write+0x12a/0x250 [ 68.793420][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 68.794904][ T6661] __do_fast_syscall_32+0x13a/0x8b0 [ 68.796499][ T6661] do_fast_syscall_32+0x32/0x70 [ 68.798026][ T6661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.799947][ T6661] RIP: 0023:0xf742efec [ 68.801221][ T6661] Code: Unable to access opcode bytes at 0xf742efc2. [ 68.803231][ T6661] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 68.805750][ T6661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 68.808157][ T6661] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 68.810590][ T6661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.813053][ T6661] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.815451][ T6661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.817870][ T6661] [ 68.818855][ T6661] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.821054][ T6661] CPU: 3 UID: 0 PID: 6661 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 68.823728][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.826723][ T6661] Call Trace: [ 68.827772][ T6661] [ 68.828720][ T6661] dump_stack_lvl+0x100/0x190 [ 68.830159][ T6661] vpanic+0x553/0x970 [ 68.831345][ T6661] ? __pfx_vpanic+0x10/0x10 [ 68.832713][ T6661] panic+0xd1/0xe0 [ 68.833864][ T6661] ? __pfx_panic+0x10/0x10 [ 68.835205][ T6661] check_panic_on_warn.cold+0x19/0x34 [ 68.836824][ T6661] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 68.838725][ T6661] __warn.cold+0x191/0x318 [ 68.840080][ T6661] __report_bug+0x30f/0x440 [ 68.841462][ T6661] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 68.843371][ T6661] ? __pfx___report_bug+0x10/0x10 [ 68.844893][ T6661] ? dump_stack_lvl+0x176/0x190 [ 68.846357][ T6661] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 68.848306][ T6661] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 68.850339][ T6661] report_bug+0xb3/0x220 [ 68.851635][ T6661] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 68.853554][ T6661] handle_bug+0x16a/0x2a0 [ 68.854852][ T6661] exc_invalid_op+0x17/0x50 [ 68.856206][ T6661] asm_exc_invalid_op+0x1a/0x20 [ 68.857686][ T6661] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 68.859788][ T6661] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 29 9e e5 f6 e9 ae d3 ff ff e8 0f 5e 72 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 68.865472][ T6661] RSP: 0018:ffffc90003567460 EFLAGS: 00010283 [ 68.867320][ T6661] RAX: 0000000000026e6b RBX: 0000000000000000 RCX: ffffc9000d501000 [ 68.869701][ T6661] RDX: 0000000000080000 RSI: ffffffff8b994821 RDI: ffffffff8c625580 [ 68.872098][ T6661] RBP: ffff888074270040 R08: 0000000000000001 R09: 0000000000000000 [ 68.874470][ T6661] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 68.876821][ T6661] R13: ffff888023e9c000 R14: ffff888014fd3900 R15: ffff88804bd14000 [ 68.879191][ T6661] ? batadv_iv_ogm_process_per_outif+0x2d61/0x3980 [ 68.881130][ T6661] ? find_held_lock+0x2b/0x80 [ 68.882562][ T6661] ? lock_acquire+0x1d1/0x380 [ 68.883961][ T6661] ? do_raw_spin_lock+0x128/0x260 [ 68.885458][ T6661] ? find_held_lock+0x2b/0x80 [ 68.886853][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.888685][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.890577][ T6661] ? rcu_is_watching+0x13/0xc0 [ 68.892020][ T6661] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 68.894000][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.895538][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 68.897375][ T6661] ? __local_bh_enable_ip+0xa5/0x120 [ 68.898927][ T6661] ? batadv_iv_ogm_orig_get.part.0+0x4f9/0x720 [ 68.900793][ T6661] batadv_iv_ogm_receive+0x1049/0x1ae0 [ 68.902403][ T6661] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 68.904121][ T6661] ? __pfx___up_read+0x10/0x10 [ 68.905552][ T6661] ? do_user_addr_fault+0x7d7/0x12f0 [ 68.907099][ T6661] ? do_user_addr_fault+0x7d7/0x12f0 [ 68.908665][ T6661] batadv_batman_skb_recv+0x5e0/0x850 [ 68.910257][ T6661] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 68.912014][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.913609][ T6661] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 68.915375][ T6661] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 68.917173][ T6661] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 68.919117][ T6661] ? lock_acquire+0x1d1/0x380 [ 68.920555][ T6661] __netif_receive_skb+0x1f/0x120 [ 68.922132][ T6661] netif_receive_skb+0x139/0x7d0 [ 68.923639][ T6661] ? __pfx_netif_receive_skb+0x10/0x10 [ 68.925271][ T6661] ? _copy_from_iter+0x270/0x1690 [ 68.926804][ T6661] tun_rx_batched.isra.0+0x3f6/0x750 [ 68.928439][ T6661] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 68.930205][ T6661] ? tun_get_user+0x1e1e/0x3cc0 [ 68.931718][ T6661] tun_get_user+0x1f53/0x3cc0 [ 68.933166][ T6661] ? __lock_acquire+0x5c0/0x1f40 [ 68.934676][ T6661] ? __pfx_tun_get_user+0x10/0x10 [ 68.936199][ T6661] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.937870][ T6661] ? find_held_lock+0x2b/0x80 [ 68.939276][ T6661] ? tun_get+0x191/0x370 [ 68.940546][ T6661] ? tun_get+0x191/0x370 [ 68.941824][ T6661] tun_chr_write_iter+0xdc/0x200 [ 68.943325][ T6661] vfs_write+0x6af/0x1050 [ 68.944632][ T6661] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.946309][ T6661] ? __pfx_vfs_write+0x10/0x10 [ 68.947762][ T6661] ? find_held_lock+0x2b/0x80 [ 68.949180][ T6661] ksys_write+0x12a/0x250 [ 68.950488][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 68.951958][ T6661] __do_fast_syscall_32+0x13a/0x8b0 [ 68.953528][ T6661] do_fast_syscall_32+0x32/0x70 [ 68.955005][ T6661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.956921][ T6661] RIP: 0023:0xf742efec [ 68.958124][ T6661] Code: Unable to access opcode bytes at 0xf742efc2. [ 68.960165][ T6661] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 68.962677][ T6661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 68.965027][ T6661] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 68.967371][ T6661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.969701][ T6661] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.972012][ T6661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.974361][ T6661] [ 68.976052][ T6661] Kernel Offset: disabled [ 68.977385][ T6661] Rebooting in 86400 seconds..