last executing test programs: 5m28.569360672s ago: executing program 2 (id=577): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xffff}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) 5m28.462179158s ago: executing program 2 (id=578): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5bceeff800000000000000000000200", 0x17}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x30, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000800)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x30, 0x49b9b7e4dbfa7a3a, 0x30, 0x66, 0x30, 0x30, 0x63]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x35, 0x30, 0x30, 0x35]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x38, 0x31, 0x61, 0x39, 0x66, 0x65, 0x66, 0x36, 0x32, 0x34, 0x65, 0x64, 0x36, 0x36, 0x37, 0x39]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff001122ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x33, 0x5a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc3}, &(0x7f0000001180)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x36, 0x30, 0x30, 0x30, 0x30, 0x66, 0x66]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 5m28.392419522s ago: executing program 2 (id=580): syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xe, 0x0, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x80000000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) 5m27.812569831s ago: executing program 2 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) unshare(0x22020600) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) open_tree(r0, 0x0, 0x81900) mount_setattr(r0, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000280)={0x0, 0x0, 0x80000}, 0x20) 5m27.748865363s ago: executing program 2 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000001740)=@generic={0x0, r0}, 0x18) 5m27.281890892s ago: executing program 2 (id=586): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000400)='.\x00', 0x8000, 0x50) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r6, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x88cc6, &(0x7f0000000740)={[{@xino_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@metacopy_off}, {@userxattr}, {@nfs_export_off}, {@uuid_auto}], [{@uid_eq}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_gt={'euid>', r6}}, {@measure}, {@measure}]}) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x8, &(0x7f0000000280)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m27.179488457s ago: executing program 32 (id=586): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000400)='.\x00', 0x8000, 0x50) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r6, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x88cc6, &(0x7f0000000740)={[{@xino_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_off}, {@metacopy_off}, {@userxattr}, {@nfs_export_off}, {@uuid_auto}], [{@uid_eq}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_gt={'euid>', r6}}, {@measure}, {@measure}]}) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x8, &(0x7f0000000280)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m25.182387642s ago: executing program 0 (id=1083): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbfc9c5be50eaf", 0x28}], 0x1}, 0x5) 4m25.182056335s ago: executing program 0 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}}, 0x0) 4m25.132317555s ago: executing program 0 (id=1085): gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) preadv(r1, &(0x7f0000000140), 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f0000002e80)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000002ec0)=0x0) timer_settime(r2, 0x1, &(0x7f0000002f00)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002f40)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000002f80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000440), 0x400000000000041, 0x0) 4m22.549672092s ago: executing program 0 (id=1094): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 4m22.470207278s ago: executing program 0 (id=1088): r0 = syz_io_uring_setup(0x315b, &(0x7f0000001200)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001340), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 4m22.182336277s ago: executing program 0 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000500)=0x9, 0x4) 4m22.155136466s ago: executing program 33 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000500)=0x9, 0x4) 37.931286197s ago: executing program 5 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2c, 0x20000000, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4, 0x51, 0x6c, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2115e63b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5}, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44800}, 0x24000000) 37.892981682s ago: executing program 5 (id=3118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) bind(r4, 0x0, 0x0) connect(r4, 0x0, 0x0) sendto(r4, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 36.926089737s ago: executing program 5 (id=3129): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000280)=0x1) ioctl$PPPIOCSMAXCID(r1, 0x80207450, 0x0) 36.923982282s ago: executing program 5 (id=3131): syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 36.359917023s ago: executing program 5 (id=3141): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000bc0)='7', 0x1) bind(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 36.281147879s ago: executing program 5 (id=3142): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0xc0234280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x7, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x6, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0xdd8c, r7, 0x3e}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="80", 0x1}], 0x1}, 0x4) 29.111330724s ago: executing program 3 (id=3225): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8001, @loopback, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="ec2e", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='s', 0x1}], 0x1}}], 0x2, 0x40008c0) 29.061310781s ago: executing program 3 (id=3226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x318, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x810) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x2000010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 28.137827747s ago: executing program 3 (id=3237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 28.137366286s ago: executing program 3 (id=3238): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, r0, 0x107, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x8048000) 28.071587946s ago: executing program 3 (id=3239): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000bc0)='7', 0x1) bind(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 28.011471242s ago: executing program 3 (id=3240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000806bbbbbbbbbbbbaaaaaaaaaa2986dd6d052008001011ff20010000000000000000000000000000ff0200000000000000000000000000014f194e20001090"], 0x4a) 21.247684356s ago: executing program 34 (id=3142): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0xc0234280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x7, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x6, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0xdd8c, r7, 0x3e}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="80", 0x1}], 0x1}, 0x4) 12.998700354s ago: executing program 35 (id=3240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000806bbbbbbbbbbbbaaaaaaaaaa2986dd6d052008001011ff20010000000000000000000000000000ff0200000000000000000000000000014f194e20001090"], 0x4a) 7.610323s ago: executing program 6 (id=3511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a02000b000000000000aaaaaaaaaa2981006d0086dd67000000011606"], 0x54) 7.530576823s ago: executing program 6 (id=3516): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) 7.439354952s ago: executing program 6 (id=3517): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000bc0)='7', 0x1) bind(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 7.38946617s ago: executing program 6 (id=3519): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) chdir(0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x42, 0x4) 7.301086316s ago: executing program 6 (id=3522): mount(&(0x7f00000000c0), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) 7.05924954s ago: executing program 6 (id=3523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x59) 6.982365275s ago: executing program 36 (id=3523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x59) 1.780628003s ago: executing program 1 (id=3584): r0 = add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 1.721221176s ago: executing program 1 (id=3587): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x1a, 0x0, 0x20000000) 1.672926316s ago: executing program 1 (id=3590): fanotify_init(0x200, 0x1000) userfaultfd(0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x102, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x200740c0, &(0x7f0000000680)={0x11, 0x16, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) 1.671087376s ago: executing program 1 (id=3592): creat(&(0x7f0000001a40)='./file0\x00', 0x44) mount(&(0x7f0000001b00), &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='ceph\x00', 0x4, 0x0) 1.609235244s ago: executing program 1 (id=3595): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000140)="1a", 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0), 0x8) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setpriority(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) open(&(0x7f00000000c0)='./file0\x00', 0x90100, 0x4a) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r3, 0x1, r1, 0x6, 0x80000}) 450.189723ms ago: executing program 8 (id=3622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) 450.131858ms ago: executing program 8 (id=3623): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000101a80)={0x0, 0x0, &(0x7f0000101ac0)={&(0x7f0000101b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) close(0x4) 369.389273ms ago: executing program 8 (id=3624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1000000000000003) 368.889662ms ago: executing program 8 (id=3626): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 311.05044ms ago: executing program 4 (id=3627): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f0000002340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xe22f12bbd5eeeb97, 0x0, 0x0, @by_dev}) 310.479593ms ago: executing program 8 (id=3629): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 251.264963ms ago: executing program 4 (id=3630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 251.0369ms ago: executing program 7 (id=3632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1d, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 250.868039ms ago: executing program 8 (id=3633): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000340)=@str='0', 0x1) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f00000003c0)=@str='1', 0x1) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000440)=@str='active', 0x6) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r8, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(r8) write$md_sysfs(r7, &(0x7f0000000500)=@str='clear', 0x5) 191.169543ms ago: executing program 1 (id=3634): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') 191.005022ms ago: executing program 4 (id=3635): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000015c0)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x200, 'syz0\x00', 0x0}) 190.930809ms ago: executing program 4 (id=3636): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000001c0)={'md', @named={'_syz', 0x0, '2'}}, 0x8) 190.719964ms ago: executing program 7 (id=3637): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000480)=r1, 0x62) 170.712905ms ago: executing program 4 (id=3638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="2e9b5b00ace03dd65193dfb6c5619a3d86dd60670600001406120000", 0x1c}, {&(0x7f0000000580)="37bcb39800000000f66b8157b45046eb15ff314c846dbc0f31fa4cc9f8296c3c2e80cdd4e4c4d38badf3518aeea2d6f03fbd", 0x32}], 0x2) 120.893576ms ago: executing program 7 (id=3639): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x1}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 60.667772ms ago: executing program 7 (id=3640): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 565.569µs ago: executing program 7 (id=3641): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/136, 0x88}, {&(0x7f0000000240)=""/245, 0xf5}], 0x2) 105.159µs ago: executing program 4 (id=3642): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000bc0), 0x0) bind(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 0s ago: executing program 7 (id=3643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1000000000000003) kernel console output (not intermixed with test programs): t using interface batadv_slave_0 (retrying later): interface not active [ 389.579498][T14282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.579506][T14282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.579519][T14282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.621453][T14282] hsr_slave_0: entered promiscuous mode [ 389.622121][T14282] hsr_slave_1: entered promiscuous mode [ 389.622444][T14282] debugfs: 'hsr0' already exists in 'hsr' [ 389.622456][T14282] Cannot create hsr debugfs directory [ 389.727558][ T13] bridge_slave_1: left allmulticast mode [ 389.727608][ T13] bridge_slave_1: left promiscuous mode [ 389.729526][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.732461][ T13] bridge_slave_0: left allmulticast mode [ 389.732475][ T13] bridge_slave_0: left promiscuous mode [ 389.732567][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.903065][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 389.922259][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 389.929873][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.932029][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.933277][ T13] bond0 (unregistering): Released all slaves [ 389.937034][ T13] bond1 (unregistering): Released all slaves [ 389.942190][ T13] bond2 (unregistering): Released all slaves [ 390.058545][ T13] ovs-dp0: left promiscuous mode [ 390.108801][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 390.146008][T14283] Bluetooth: hci4: command 0x2016 tx timeout [ 390.165121][T14342] ucma_write: process 220 (syz.4.3064) changed security contexts after opening file descriptor, this is not allowed. [ 390.517446][T14345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 390.517463][T14345] CPU: 1 UID: 0 PID: 14345 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.517481][T14345] Tainted: [L]=SOFTLOCKUP [ 390.517486][T14345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.517494][T14345] Workqueue: hci1 hci_rx_work [ 390.517515][T14345] Call Trace: [ 390.517521][T14345] [ 390.517527][T14345] dump_stack_lvl+0x100/0x190 [ 390.517546][T14345] sysfs_warn_dup.cold+0x1c/0x28 [ 390.517565][T14345] sysfs_create_dir_ns+0x24b/0x2b0 [ 390.517584][T14345] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 390.517602][T14345] ? find_held_lock+0x2b/0x80 [ 390.517616][T14345] ? kobject_add_internal+0x25f/0x930 [ 390.517633][T14345] ? kobject_add_internal+0x25f/0x930 [ 390.517658][T14345] ? do_raw_spin_unlock+0x145/0x1e0 [ 390.517672][T14345] kobject_add_internal+0x2c8/0x930 [ 390.517691][T14345] kobject_add+0x16a/0x1e0 [ 390.517708][T14345] ? __pfx_kobject_add+0x10/0x10 [ 390.517724][T14345] ? class_to_subsys+0x10f/0x150 [ 390.517746][T14345] ? kobject_put+0xb9/0x640 [ 390.517761][T14345] ? _raw_spin_unlock+0x28/0x50 [ 390.517783][T14345] device_add+0x294/0x1970 [ 390.517799][T14345] ? __pfx_dev_set_name+0x10/0x10 [ 390.517817][T14345] ? __pfx_device_add+0x10/0x10 [ 390.517834][T14345] ? mgmt_send_event_skb+0x2fb/0x460 [ 390.517855][T14345] hci_conn_add_sysfs+0x1a3/0x260 [ 390.517867][T14345] le_conn_complete_evt+0x122f/0x2130 [ 390.517887][T14345] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 390.517903][T14345] ? hci_event_packet+0x186/0xcd0 [ 390.517941][T14345] hci_le_conn_complete_evt+0x23c/0x3a0 [ 390.517959][T14345] ? skb_pull_data+0x15f/0x1e0 [ 390.517981][T14345] hci_le_meta_evt+0x34a/0x5f0 [ 390.517999][T14345] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 390.518019][T14345] hci_event_packet+0x51c/0xcd0 [ 390.518059][T14345] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 390.518078][T14345] ? __pfx_hci_event_packet+0x10/0x10 [ 390.518099][T14345] ? lockdep_hardirqs_on+0x7d/0x110 [ 390.518115][T14345] hci_rx_work+0x451/0xfc0 [ 390.518134][T14345] process_one_work+0xac7/0x1b10 [ 390.518157][T14345] ? __pfx_process_one_work+0x10/0x10 [ 390.518174][T14345] ? lock_acquire+0x1d1/0x380 [ 390.518195][T14345] ? __pfx_hci_rx_work+0x10/0x10 [ 390.518212][T14345] worker_thread+0x5ef/0xe50 [ 390.518231][T14345] ? __pfx_worker_thread+0x10/0x10 [ 390.518246][T14345] ? kthread+0x13a/0x450 [ 390.518259][T14345] ? __pfx_worker_thread+0x10/0x10 [ 390.518273][T14345] kthread+0x373/0x450 [ 390.518285][T14345] ? __pfx_kthread+0x10/0x10 [ 390.518300][T14345] ret_from_fork+0x730/0xd60 [ 390.518312][T14345] ? __pfx_ret_from_fork+0x10/0x10 [ 390.518325][T14345] ? __switch_to+0x800/0x10f0 [ 390.518340][T14345] ? __pfx_kthread+0x10/0x10 [ 390.518355][T14345] ret_from_fork_asm+0x1a/0x30 [ 390.518374][T14345] [ 390.518477][T14345] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 390.518499][T14345] Bluetooth: hci1: failed to register connection device [ 390.522846][ T13] hsr_slave_0: left promiscuous mode [ 390.523408][ T13] hsr_slave_1: left promiscuous mode [ 390.524088][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.524107][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.524838][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.524856][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.533981][ T13] veth1_macvtap: left promiscuous mode [ 390.534070][ T13] veth0_macvtap: left promiscuous mode [ 390.722391][ T13] team0 (unregistering): Port device team_slave_1 removed [ 390.739014][ T13] team0 (unregistering): Port device team_slave_0 removed [ 390.859563][T14282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.863390][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.864286][T14282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.876994][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.877907][T14282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.881988][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.882877][T14282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.885512][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.887252][T14364] fuse: fd is not a fuse device [ 390.948187][T14282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.955801][T14282] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.962956][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.963040][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.974443][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.974490][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.034777][T14376] EXT4-fs error: 31 callbacks suppressed [ 391.034791][T14376] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.048875][T14377] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.058058][T14380] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.060011][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3072'. [ 391.068585][T14383] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.082429][T14386] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.110069][T14388] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.116889][T14390] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.125411][T14391] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.136597][T14393] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.144435][T14394] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 391.151171][T14282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.185255][T14282] veth0_vlan: entered promiscuous mode [ 391.194534][T14282] veth1_vlan: entered promiscuous mode [ 391.213274][T14282] veth0_macvtap: entered promiscuous mode [ 391.215283][T14282] veth1_macvtap: entered promiscuous mode [ 391.222273][T14282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.230249][T14282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.332520][T13334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.332535][T13334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.392524][T13334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.392546][T13334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.409397][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.409424][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.409442][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.409461][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.460376][T14399] syzkaller0: entered promiscuous mode [ 391.460399][T14399] syzkaller0: entered allmulticast mode [ 391.576577][ T5747] Bluetooth: hci3: command 0x2016 tx timeout [ 391.655855][T14345] Bluetooth: hci2: command tx timeout [ 391.691520][T14345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 391.691549][T14345] CPU: 2 UID: 0 PID: 14345 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.691579][T14345] Tainted: [L]=SOFTLOCKUP [ 391.691588][T14345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.691624][T14345] Workqueue: hci1 hci_rx_work [ 391.691660][T14345] Call Trace: [ 391.691668][T14345] [ 391.691676][T14345] dump_stack_lvl+0x100/0x190 [ 391.691708][T14345] sysfs_warn_dup.cold+0x1c/0x28 [ 391.691739][T14345] sysfs_create_dir_ns+0x24b/0x2b0 [ 391.691771][T14345] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 391.691801][T14345] ? find_held_lock+0x2b/0x80 [ 391.691825][T14345] ? kobject_add_internal+0x25f/0x930 [ 391.691852][T14345] ? kobject_add_internal+0x25f/0x930 [ 391.691880][T14345] ? do_raw_spin_unlock+0x145/0x1e0 [ 391.691904][T14345] kobject_add_internal+0x2c8/0x930 [ 391.691935][T14345] kobject_add+0x16a/0x1e0 [ 391.691962][T14345] ? __pfx_kobject_add+0x10/0x10 [ 391.691985][T14345] ? class_to_subsys+0x10f/0x150 [ 391.692014][T14345] ? kobject_put+0xb9/0x640 [ 391.692035][T14345] ? _raw_spin_unlock+0x28/0x50 [ 391.692071][T14345] device_add+0x294/0x1970 [ 391.692099][T14345] ? __pfx_dev_set_name+0x10/0x10 [ 391.692129][T14345] ? __pfx_device_add+0x10/0x10 [ 391.692157][T14345] ? mgmt_send_event_skb+0x2fb/0x460 [ 391.692194][T14345] hci_conn_add_sysfs+0x1a3/0x260 [ 391.692216][T14345] le_conn_complete_evt+0x122f/0x2130 [ 391.692252][T14345] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 391.692279][T14345] ? hci_event_packet+0x186/0xcd0 [ 391.692313][T14345] hci_le_conn_complete_evt+0x23c/0x3a0 [ 391.692343][T14345] ? skb_pull_data+0x15f/0x1e0 [ 391.692378][T14345] hci_le_meta_evt+0x34a/0x5f0 [ 391.692408][T14345] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 391.692440][T14345] hci_event_packet+0x51c/0xcd0 [ 391.692468][T14345] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 391.692499][T14345] ? __pfx_hci_event_packet+0x10/0x10 [ 391.692533][T14345] ? lockdep_hardirqs_on+0x7d/0x110 [ 391.692560][T14345] hci_rx_work+0x451/0xfc0 [ 391.692592][T14345] process_one_work+0xac7/0x1b10 [ 391.692637][T14345] ? __pfx_process_one_work+0x10/0x10 [ 391.692666][T14345] ? lock_acquire+0x1d1/0x380 [ 391.692705][T14345] ? __pfx_hci_rx_work+0x10/0x10 [ 391.692735][T14345] worker_thread+0x5ef/0xe50 [ 391.692771][T14345] ? __pfx_worker_thread+0x10/0x10 [ 391.692799][T14345] ? kthread+0x13a/0x450 [ 391.692821][T14345] ? __pfx_worker_thread+0x10/0x10 [ 391.692844][T14345] kthread+0x373/0x450 [ 391.692866][T14345] ? __pfx_kthread+0x10/0x10 [ 391.692891][T14345] ret_from_fork+0x730/0xd60 [ 391.692912][T14345] ? __pfx_ret_from_fork+0x10/0x10 [ 391.692932][T14345] ? __switch_to+0x800/0x10f0 [ 391.692957][T14345] ? __pfx_kthread+0x10/0x10 [ 391.692981][T14345] ret_from_fork_asm+0x1a/0x30 [ 391.693014][T14345] [ 391.693091][T14345] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 391.693118][T14345] Bluetooth: hci1: failed to register connection device [ 391.992987][T14415] lo speed is unknown, defaulting to 1000 [ 391.993020][T14415] lo speed is unknown, defaulting to 1000 [ 391.993950][T14415] lo speed is unknown, defaulting to 1000 [ 391.994474][T14415] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 391.994495][T14415] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 391.994521][T14415] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 392.024203][T14415] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 392.064734][T14415] lo speed is unknown, defaulting to 1000 [ 392.065662][T14415] lo speed is unknown, defaulting to 1000 [ 392.067254][T14415] lo speed is unknown, defaulting to 1000 [ 392.068560][T14415] lo speed is unknown, defaulting to 1000 [ 392.069910][T14415] lo speed is unknown, defaulting to 1000 [ 392.071216][T14415] lo speed is unknown, defaulting to 1000 [ 392.225880][ T5742] Bluetooth: hci4: command 0x2016 tx timeout [ 392.254328][T14417] input: syz1 as /devices/virtual/input/input66 [ 392.422126][T14424] syzkaller0: entered promiscuous mode [ 392.422147][T14424] syzkaller0: entered allmulticast mode [ 392.535936][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 392.556306][T14428] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.558151][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3088'. [ 392.630468][T14428] wg0 speed is unknown, defaulting to 1000 [ 392.705062][T14428] lo speed is unknown, defaulting to 1000 [ 392.884777][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 392.884795][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.884812][ T5742] Tainted: [L]=SOFTLOCKUP [ 392.884818][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.884827][ T5742] Workqueue: hci3 hci_rx_work [ 392.884848][ T5742] Call Trace: [ 392.884853][ T5742] [ 392.884858][ T5742] dump_stack_lvl+0x100/0x190 [ 392.884877][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 392.884896][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 392.884915][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 392.884932][ T5742] ? find_held_lock+0x2b/0x80 [ 392.884946][ T5742] ? kobject_add_internal+0x25f/0x930 [ 392.884962][ T5742] ? kobject_add_internal+0x25f/0x930 [ 392.884980][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 392.884994][ T5742] kobject_add_internal+0x2c8/0x930 [ 392.885013][ T5742] kobject_add+0x16a/0x1e0 [ 392.885028][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 392.885043][ T5742] ? class_to_subsys+0x10f/0x150 [ 392.885062][ T5742] ? kobject_put+0xb9/0x640 [ 392.885076][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 392.885097][ T5742] device_add+0x294/0x1970 [ 392.885113][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 392.885131][ T5742] ? __pfx_device_add+0x10/0x10 [ 392.885148][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 392.885169][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 392.885181][ T5742] le_conn_complete_evt+0x122f/0x2130 [ 392.885202][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 392.885218][ T5742] ? hci_event_packet+0x186/0xcd0 [ 392.885237][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 392.885254][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 392.885274][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 392.885291][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 392.885310][ T5742] hci_event_packet+0x51c/0xcd0 [ 392.885326][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 392.885344][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 392.885362][ T5742] ? lockdep_hardirqs_on+0x7d/0x110 [ 392.885378][ T5742] hci_rx_work+0x451/0xfc0 [ 392.885396][ T5742] process_one_work+0xac7/0x1b10 [ 392.885418][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 392.885433][ T5742] ? lock_acquire+0x1d1/0x380 [ 392.885454][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 392.885471][ T5742] worker_thread+0x5ef/0xe50 [ 392.885491][ T5742] ? kthread+0x13a/0x450 [ 392.885504][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 392.885518][ T5742] kthread+0x373/0x450 [ 392.885530][ T5742] ? __pfx_kthread+0x10/0x10 [ 392.885545][ T5742] ret_from_fork+0x730/0xd60 [ 392.885557][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 392.885570][ T5742] ? __switch_to+0x800/0x10f0 [ 392.885585][ T5742] ? __pfx_kthread+0x10/0x10 [ 392.885600][ T5742] ret_from_fork_asm+0x1a/0x30 [ 392.885618][ T5742] [ 392.885631][ T5742] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 392.885652][ T5742] Bluetooth: hci3: failed to register connection device [ 393.584019][T14484] syzkaller0: entered promiscuous mode [ 393.584035][T14484] syzkaller0: entered allmulticast mode [ 393.656814][ T5742] Bluetooth: hci3: command 0x2016 tx timeout [ 393.726817][T14488] FAULT_INJECTION: forcing a failure. [ 393.726817][T14488] name failslab, interval 1, probability 0, space 0, times 0 [ 393.726851][T14488] CPU: 0 UID: 0 PID: 14488 Comm: syz.4.3108 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.726878][T14488] Tainted: [L]=SOFTLOCKUP [ 393.726885][T14488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.726897][T14488] Call Trace: [ 393.726905][T14488] [ 393.726914][T14488] dump_stack_lvl+0x100/0x190 [ 393.726948][T14488] should_fail_ex.cold+0x5/0xa [ 393.726975][T14488] should_failslab+0xc2/0x120 [ 393.727008][T14488] kmem_cache_alloc_noprof+0x92/0x6a0 [ 393.727039][T14488] ? vm_area_dup+0x27/0x9d0 [ 393.727065][T14488] vm_area_dup+0x27/0x9d0 [ 393.727085][T14488] __split_vma+0x19c/0x1de0 [ 393.727108][T14488] ? __lock_acquire+0x5c0/0x1f40 [ 393.727144][T14488] ? __pfx___split_vma+0x10/0x10 [ 393.727169][T14488] ? can_vma_merge_after+0x2b5/0x6f0 [ 393.727204][T14488] vma_modify+0x137b/0x29b0 [ 393.727238][T14488] ? __pfx_vma_modify+0x10/0x10 [ 393.727263][T14488] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 393.727298][T14488] ? folio_add_new_anon_rmap+0x52d/0x18c0 [ 393.727330][T14488] vma_modify_flags+0x2c3/0x460 [ 393.727356][T14488] ? __pfx_vma_modify_flags+0x10/0x10 [ 393.727394][T14488] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 393.727428][T14488] ? rcu_is_watching+0x13/0xc0 [ 393.727454][T14488] ? trace_hrtimer_start+0x77/0x220 [ 393.727481][T14488] madvise_update_vma+0x21c/0xd30 [ 393.727507][T14488] ? __pfx_madvise_update_vma+0x10/0x10 [ 393.727535][T14488] ? mas_prev_slot+0x768/0x11b0 [ 393.727562][T14488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.727596][T14488] madvise_vma_behavior+0x2d5/0x2350 [ 393.727639][T14488] ? mas_prev+0xa4/0x100 [ 393.727666][T14488] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 393.727690][T14488] ? mas_walk+0x260/0x310 [ 393.727715][T14488] ? find_vma_prev+0xd8/0x150 [ 393.727744][T14488] ? __pfx_find_vma_prev+0x10/0x10 [ 393.727770][T14488] ? lock_acquire+0x1d1/0x380 [ 393.727814][T14488] madvise_walk_vmas+0x30e/0xc50 [ 393.727839][T14488] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 393.727859][T14488] ? __lock_acquire+0x5c0/0x1f40 [ 393.727890][T14488] ? __pfx_futex_wake_mark+0x10/0x10 [ 393.727930][T14488] madvise_do_behavior+0x1ea/0x510 [ 393.727952][T14488] ? __pfx___might_resched+0x10/0x10 [ 393.727981][T14488] ? __pfx_madvise_do_behavior+0x10/0x10 [ 393.728012][T14488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.728047][T14488] do_madvise+0x238/0x290 [ 393.728067][T14488] ? __pfx_do_madvise+0x10/0x10 [ 393.728085][T14488] ? do_futex+0x190/0x440 [ 393.728110][T14488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.728160][T14488] __ia32_sys_madvise+0xa7/0x110 [ 393.728182][T14488] ? lockdep_hardirqs_on+0x7d/0x110 [ 393.728203][T14488] __do_fast_syscall_32+0x13a/0x8b0 [ 393.728230][T14488] do_fast_syscall_32+0x32/0x70 [ 393.728254][T14488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.728281][T14488] RIP: 0023:0xf7f03fec [ 393.728303][T14488] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 393.728313][T14488] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 393.728336][T14488] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 393.728350][T14488] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 393.728363][T14488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.728374][T14488] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 393.728386][T14488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.728414][T14488] [ 393.735808][ T5742] Bluetooth: hci2: command tx timeout [ 393.950384][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 393.950413][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.950441][ T5742] Tainted: [L]=SOFTLOCKUP [ 393.950455][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.950473][ T5742] Workqueue: hci3 hci_rx_work [ 393.950504][ T5742] Call Trace: [ 393.950512][ T5742] [ 393.950521][ T5742] dump_stack_lvl+0x100/0x190 [ 393.950552][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 393.950589][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 393.950622][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 393.950652][ T5742] ? find_held_lock+0x2b/0x80 [ 393.950676][ T5742] ? kobject_add_internal+0x25f/0x930 [ 393.950703][ T5742] ? kobject_add_internal+0x25f/0x930 [ 393.950733][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 393.950757][ T5742] kobject_add_internal+0x2c8/0x930 [ 393.950788][ T5742] kobject_add+0x16a/0x1e0 [ 393.950814][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 393.950838][ T5742] ? class_to_subsys+0x10f/0x150 [ 393.950872][ T5742] ? kobject_put+0xb9/0x640 [ 393.950895][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 393.950931][ T5742] device_add+0x294/0x1970 [ 393.950957][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 393.950988][ T5742] ? __pfx_device_add+0x10/0x10 [ 393.951017][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 393.951055][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 393.951075][ T5742] le_conn_complete_evt+0x122f/0x2130 [ 393.951110][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 393.951137][ T5742] ? hci_event_packet+0x186/0xcd0 [ 393.951170][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 393.951199][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 393.951233][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 393.951263][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 393.951295][ T5742] hci_event_packet+0x51c/0xcd0 [ 393.951322][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 393.951351][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 393.951383][ T5742] ? lockdep_hardirqs_on+0x7d/0x110 [ 393.951410][ T5742] hci_rx_work+0x451/0xfc0 [ 393.951442][ T5742] process_one_work+0xac7/0x1b10 [ 393.951481][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 393.951508][ T5742] ? lock_acquire+0x1d1/0x380 [ 393.951545][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 393.951578][ T5742] worker_thread+0x5ef/0xe50 [ 393.951614][ T5742] ? kthread+0x13a/0x450 [ 393.951635][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 393.951658][ T5742] kthread+0x373/0x450 [ 393.951679][ T5742] ? __pfx_kthread+0x10/0x10 [ 393.951724][ T5742] ret_from_fork+0x730/0xd60 [ 393.951748][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 393.951769][ T5742] ? __switch_to+0x800/0x10f0 [ 393.951796][ T5742] ? __pfx_kthread+0x10/0x10 [ 393.951820][ T5742] ret_from_fork_asm+0x1a/0x30 [ 393.951855][ T5742] [ 393.954798][ T5742] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 393.954834][ T5742] Bluetooth: hci3: failed to register connection device [ 394.067566][T14502] syzkaller0: entered promiscuous mode [ 394.067586][T14502] syzkaller0: entered allmulticast mode [ 394.517669][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3123'. [ 394.615967][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.947051][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 395.210306][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 395.210324][ T5742] CPU: 0 UID: 0 PID: 5742 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.210342][ T5742] Tainted: [L]=SOFTLOCKUP [ 395.210346][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.210355][ T5742] Workqueue: hci1 hci_rx_work [ 395.210374][ T5742] Call Trace: [ 395.210379][ T5742] [ 395.210384][ T5742] dump_stack_lvl+0x100/0x190 [ 395.210403][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 395.210421][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 395.210441][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 395.210458][ T5742] ? find_held_lock+0x2b/0x80 [ 395.210472][ T5742] ? kobject_add_internal+0x25f/0x930 [ 395.210488][ T5742] ? kobject_add_internal+0x25f/0x930 [ 395.210505][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 395.210519][ T5742] kobject_add_internal+0x2c8/0x930 [ 395.210538][ T5742] kobject_add+0x16a/0x1e0 [ 395.210553][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 395.210569][ T5742] ? class_to_subsys+0x10f/0x150 [ 395.210589][ T5742] ? kobject_put+0xb9/0x640 [ 395.210602][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 395.210643][ T5742] device_add+0x294/0x1970 [ 395.210662][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 395.210681][ T5742] ? __pfx_device_add+0x10/0x10 [ 395.210699][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 395.210721][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 395.210734][ T5742] le_conn_complete_evt+0x122f/0x2130 [ 395.210756][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 395.210773][ T5742] ? hci_event_packet+0x186/0xcd0 [ 395.210794][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 395.210812][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 395.210832][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 395.210849][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 395.210868][ T5742] hci_event_packet+0x51c/0xcd0 [ 395.210884][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 395.210902][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 395.210920][ T5742] ? lockdep_hardirqs_on+0x7d/0x110 [ 395.210936][ T5742] hci_rx_work+0x451/0xfc0 [ 395.210954][ T5742] process_one_work+0xac7/0x1b10 [ 395.210975][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 395.210991][ T5742] ? lock_acquire+0x1d1/0x380 [ 395.211012][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 395.211030][ T5742] worker_thread+0x5ef/0xe50 [ 395.211051][ T5742] ? kthread+0x13a/0x450 [ 395.211063][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 395.211077][ T5742] kthread+0x373/0x450 [ 395.211089][ T5742] ? __pfx_kthread+0x10/0x10 [ 395.211109][ T5742] ret_from_fork+0x730/0xd60 [ 395.211123][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 395.211136][ T5742] ? __switch_to+0x800/0x10f0 [ 395.211153][ T5742] ? __pfx_kthread+0x10/0x10 [ 395.211168][ T5742] ret_from_fork_asm+0x1a/0x30 [ 395.211189][ T5742] [ 395.211248][ T5742] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 395.211270][ T5742] Bluetooth: hci1: failed to register connection device [ 395.242853][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3132'. [ 395.277169][T14546] FAULT_INJECTION: forcing a failure. [ 395.277169][T14546] name failslab, interval 1, probability 0, space 0, times 0 [ 395.277202][T14546] CPU: 2 UID: 0 PID: 14546 Comm: syz.3.3133 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.277229][T14546] Tainted: [L]=SOFTLOCKUP [ 395.277237][T14546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.277250][T14546] Call Trace: [ 395.277258][T14546] [ 395.277266][T14546] dump_stack_lvl+0x100/0x190 [ 395.277299][T14546] should_fail_ex.cold+0x5/0xa [ 395.277326][T14546] should_failslab+0xc2/0x120 [ 395.277359][T14546] __kmalloc_cache_noprof+0x91/0x6d0 [ 395.277383][T14546] ? sget_fc+0xb19/0x1f70 [ 395.277413][T14546] sget_fc+0xb19/0x1f70 [ 395.277443][T14546] ? kasan_save_track+0x14/0x30 [ 395.277469][T14546] ? __pfx_set_anon_super_fc+0x10/0x10 [ 395.277490][T14546] ? __kasan_kmalloc+0xaa/0xb0 [ 395.277516][T14546] ? __pfx_sget_fc+0x10/0x10 [ 395.277538][T14546] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 395.277559][T14546] ? __kasan_kmalloc+0xaa/0xb0 [ 395.277585][T14546] ? proc_init_fs_context+0x4b/0x620 [ 395.277608][T14546] ? rcu_is_watching+0x13/0xc0 [ 395.277632][T14546] ? apparmor_capable+0x1d7/0x4d0 [ 395.277658][T14546] ? __pfx_proc_fill_super+0x10/0x10 [ 395.277679][T14546] get_tree_nodev+0x28/0x190 [ 395.277704][T14546] vfs_get_tree+0x92/0x320 [ 395.277725][T14546] path_mount+0x7d0/0x2850 [ 395.277750][T14546] ? __pfx_path_mount+0x10/0x10 [ 395.277790][T14546] ? lockdep_hardirqs_on+0x7d/0x110 [ 395.277814][T14546] ? putname+0xb1/0x110 [ 395.277842][T14546] ? kmem_cache_free+0x127/0x6c0 [ 395.277873][T14546] ? __ia32_sys_mount+0x292/0x310 [ 395.277892][T14546] __ia32_sys_mount+0x292/0x310 [ 395.277912][T14546] ? __pfx___ia32_sys_mount+0x10/0x10 [ 395.277940][T14546] __do_fast_syscall_32+0x13a/0x8b0 [ 395.277965][T14546] do_fast_syscall_32+0x32/0x70 [ 395.277987][T14546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.278037][T14546] RIP: 0023:0xf7f35fec [ 395.278063][T14546] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 395.278073][T14546] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 395.278094][T14546] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 395.278108][T14546] RDX: 0000000080000080 RSI: 0000000000004000 RDI: 0000000000000000 [ 395.278121][T14546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.278134][T14546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 395.278146][T14546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.278173][T14546] [ 395.735830][ T5742] Bluetooth: hci3: command 0x2016 tx timeout [ 395.774591][T14566] FAULT_INJECTION: forcing a failure. [ 395.774591][T14566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.774617][T14566] CPU: 1 UID: 0 PID: 14566 Comm: syz.5.3141 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.774634][T14566] Tainted: [L]=SOFTLOCKUP [ 395.774639][T14566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.774646][T14566] Call Trace: [ 395.774650][T14566] [ 395.774656][T14566] dump_stack_lvl+0x100/0x190 [ 395.774676][T14566] should_fail_ex.cold+0x5/0xa [ 395.774690][T14566] ? prepare_alloc_pages+0x16d/0x5b0 [ 395.774711][T14566] should_fail_alloc_page+0xeb/0x140 [ 395.774731][T14566] prepare_alloc_pages+0x1f0/0x5b0 [ 395.774752][T14566] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 395.774768][T14566] ? __lock_acquire+0x5c0/0x1f40 [ 395.774789][T14566] ? do_raw_spin_unlock+0x145/0x1e0 [ 395.774807][T14566] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 395.774836][T14566] ? rcu_is_watching+0x13/0xc0 [ 395.774859][T14566] ? trace_hrtimer_start+0x77/0x220 [ 395.774882][T14566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 395.774906][T14566] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 395.774934][T14566] ? find_held_lock+0x2b/0x80 [ 395.774947][T14566] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 395.774966][T14566] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 395.774984][T14566] ? rcu_is_watching+0x13/0xc0 [ 395.774997][T14566] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 395.775017][T14566] ? rcu_is_watching+0x13/0xc0 [ 395.775031][T14566] ? trace_sched_exit_tp+0x120/0x160 [ 395.775051][T14566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.775071][T14566] ? policy_nodemask+0xed/0x4f0 [ 395.775084][T14566] alloc_pages_mpol+0x201/0x550 [ 395.775097][T14566] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 395.775110][T14566] ? lock_acquire+0x1d1/0x380 [ 395.775127][T14566] ? futex_unqueue+0x29/0x2c0 [ 395.775142][T14566] folio_alloc_mpol_noprof+0x36/0x260 [ 395.775157][T14566] vma_alloc_folio_noprof+0xed/0x1d0 [ 395.775170][T14566] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 395.775183][T14566] ? rcu_read_unlock+0x2d/0xb0 [ 395.775195][T14566] ? rcu_read_unlock+0x2d/0xb0 [ 395.775211][T14566] do_wp_page+0x1b15/0x45c0 [ 395.775232][T14566] ? lock_acquire+0x1d1/0x380 [ 395.775249][T14566] ? __pfx_do_wp_page+0x10/0x10 [ 395.775267][T14566] ? do_raw_spin_lock+0x128/0x260 [ 395.775279][T14566] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.775296][T14566] __handle_mm_fault+0x1cd2/0x2f60 [ 395.775310][T14566] ? lock_vma_under_rcu+0x11d/0x590 [ 395.775322][T14566] ? __pfx___handle_mm_fault+0x10/0x10 [ 395.775337][T14566] ? lock_vma_under_rcu+0x17c/0x590 [ 395.775357][T14566] handle_mm_fault+0x363/0xa20 [ 395.775372][T14566] do_user_addr_fault+0x59c/0x12f0 [ 395.775390][T14566] exc_page_fault+0x6f/0xd0 [ 395.775402][T14566] asm_exc_page_fault+0x26/0x30 [ 395.775414][T14566] RIP: 0023:0xf706b722 [ 395.775425][T14566] Code: 00 00 00 00 8d 74 26 00 57 e8 f8 2f 02 00 81 c7 ee 28 3a 00 56 53 81 ec 34 10 00 00 8b 94 24 48 10 00 00 8b 84 24 44 10 00 00 <52> 50 8d 87 60 b5 e0 ff 50 e8 50 59 ff ff 8b 9c 24 54 10 00 00 83 [ 395.775436][T14566] RSP: 002b:00000000f54354dc EFLAGS: 00010292 [ 395.775447][T14566] RAX: 0000000080000100 RBX: 0000000000000000 RCX: 0000000080000100 [ 395.775455][T14566] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 00000000f740dff4 [ 395.775462][T14566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.775470][T14566] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 395.775477][T14566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.775492][T14566] [ 395.775659][T14566] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 395.816180][ T5742] Bluetooth: hci2: command tx timeout [ 396.078039][T14570] Config c/1 of g1 needs at least one function. [ 396.078137][T14570] udc dummy_udc.0: failed to start g1: -22 [ 396.078155][T14570] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 396.079962][T14570] UDC core: g1: couldn't find an available UDC or it's busy [ 396.598931][T14590] EXT4-fs error: 13 callbacks suppressed [ 396.598945][T14590] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 396.604819][T14591] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 396.695901][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 397.568878][T14602] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 397.577770][T14603] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 397.588489][T14604] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 397.593923][T14605] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 397.734025][T14616] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 397.743632][T14617] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 397.816542][ T5742] Bluetooth: hci3: command 0x2016 tx timeout [ 398.025807][ T5854] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 398.198608][ T5854] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 398.199656][ T5854] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 398.199682][ T5854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 398.199704][ T5854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 398.201849][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.201866][ T5854] usb 9-1: Product: syz [ 398.201875][ T5854] usb 9-1: Manufacturer: syz [ 398.201885][ T5854] usb 9-1: SerialNumber: syz [ 398.204284][ T5854] usb 9-1: config 0 descriptor?? [ 398.206564][T14620] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 398.238079][T14631] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 398.265783][ T5854] rc_core: IR keymap rc-streamzap not found [ 398.265795][ T5854] Registered IR keymap rc-empty [ 398.266846][ T5854] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 398.268538][ T5854] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input68 [ 398.278541][T14114] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 398.624347][ T5854] usb 9-1: USB disconnect, device number 72 [ 398.776372][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 399.172768][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 399.408248][T14657] FAULT_INJECTION: forcing a failure. [ 399.408248][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 399.408278][T14657] CPU: 2 UID: 0 PID: 14657 Comm: syz.4.3175 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.408296][T14657] Tainted: [L]=SOFTLOCKUP [ 399.408301][T14657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.408308][T14657] Call Trace: [ 399.408313][T14657] [ 399.408319][T14657] dump_stack_lvl+0x100/0x190 [ 399.408340][T14657] should_fail_ex.cold+0x5/0xa [ 399.408356][T14657] should_failslab+0xc2/0x120 [ 399.408376][T14657] kmem_cache_alloc_noprof+0x92/0x6a0 [ 399.408393][T14657] ? find_held_lock+0x2b/0x80 [ 399.408407][T14657] ? skb_clone+0x190/0x400 [ 399.408425][T14657] skb_clone+0x190/0x400 [ 399.408440][T14657] packet_rcv+0x617/0x17b0 [ 399.408459][T14657] ? __pfx_packet_rcv+0x10/0x10 [ 399.408474][T14657] deliver_skb+0x1aa/0x260 [ 399.408493][T14657] __netif_receive_skb_core.constprop.0+0x243a/0x3530 [ 399.408513][T14657] ? __skb_flow_dissect+0x1e17/0x6d40 [ 399.408525][T14657] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 399.408543][T14657] ? __pfx___skb_flow_dissect+0x10/0x10 [ 399.408559][T14657] ? __lock_acquire+0x5c0/0x1f40 [ 399.408581][T14657] __netif_receive_skb_one_core+0xb0/0x1e0 [ 399.408595][T14657] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 399.408610][T14657] ? lock_acquire+0x1d1/0x380 [ 399.408631][T14657] __netif_receive_skb+0x1f/0x120 [ 399.408645][T14657] netif_receive_skb+0x139/0x7d0 [ 399.408658][T14657] ? __pfx_netif_receive_skb+0x10/0x10 [ 399.408676][T14657] tun_rx_batched.isra.0+0x3f6/0x750 [ 399.408693][T14657] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 399.408725][T14657] ? tun_get_user+0x1dc9/0x3da0 [ 399.408757][T14657] tun_get_user+0x1f05/0x3da0 [ 399.408790][T14657] ? __lock_acquire+0x5c0/0x1f40 [ 399.408815][T14657] ? __pfx_tun_get_user+0x10/0x10 [ 399.408838][T14657] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 399.408876][T14657] ? find_held_lock+0x2b/0x80 [ 399.408897][T14657] ? tun_get+0x191/0x370 [ 399.408917][T14657] ? tun_get+0x191/0x370 [ 399.408945][T14657] tun_chr_write_iter+0xdc/0x200 [ 399.408970][T14657] vfs_write+0x6af/0x1050 [ 399.408994][T14657] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 399.409021][T14657] ? __pfx_vfs_write+0x10/0x10 [ 399.409044][T14657] ? find_held_lock+0x2b/0x80 [ 399.409078][T14657] ksys_write+0x12a/0x250 [ 399.409118][T14657] ? __pfx_ksys_write+0x10/0x10 [ 399.409152][T14657] do_int80_emulation+0x166/0x650 [ 399.409177][T14657] asm_int80_emulation+0x1a/0x20 [ 399.409197][T14657] RIP: 0023:0xf70f77eb [ 399.409214][T14657] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 399.409232][T14657] RSP: 002b:00000000f53b644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 399.409251][T14657] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000380 [ 399.409262][T14657] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 399.409273][T14657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 399.409283][T14657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 399.409295][T14657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.409321][T14657] [ 399.846520][ T41] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 399.895846][ T5742] Bluetooth: hci3: command 0x2016 tx timeout [ 399.997587][ T41] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 399.999629][ T41] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.999671][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.999705][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 400.003307][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.003328][ T41] usb 9-1: Product: syz [ 400.003340][ T41] usb 9-1: Manufacturer: syz [ 400.003352][ T41] usb 9-1: SerialNumber: syz [ 400.005228][ T41] usb 9-1: config 0 descriptor?? [ 400.008914][T14667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.047905][T14682] tipc: Started in network mode [ 400.047928][T14682] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 400.048033][T14682] tipc: Enabled bearer , priority 0 [ 400.056042][ T41] rc_core: IR keymap rc-streamzap not found [ 400.056053][ T41] Registered IR keymap rc-empty [ 400.056506][ T41] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 400.057417][ T41] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input69 [ 400.417556][ T9] usb 9-1: USB disconnect, device number 73 [ 400.581161][T14709] FAULT_INJECTION: forcing a failure. [ 400.581161][T14709] name failslab, interval 1, probability 0, space 0, times 0 [ 400.581185][T14709] CPU: 2 UID: 0 PID: 14709 Comm: syz.3.3197 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.581203][T14709] Tainted: [L]=SOFTLOCKUP [ 400.581208][T14709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.581216][T14709] Call Trace: [ 400.581221][T14709] [ 400.581226][T14709] dump_stack_lvl+0x100/0x190 [ 400.581250][T14709] should_fail_ex.cold+0x5/0xa [ 400.581276][T14709] should_failslab+0xc2/0x120 [ 400.581305][T14709] __kmalloc_noprof+0xfc/0x840 [ 400.581331][T14709] ? mpi_resize+0x1ac/0x250 [ 400.581357][T14709] mpi_resize+0x1ac/0x250 [ 400.581381][T14709] mpi_sub_ui+0x173/0x910 [ 400.581404][T14709] rsa_check_payload+0x58/0xc0 [ 400.581444][T14709] rsa_enc+0x198/0x3b0 [ 400.581465][T14709] ? __pfx_rsa_enc+0x10/0x10 [ 400.581487][T14709] ? __virt_addr_valid+0x239/0x430 [ 400.581516][T14709] ? sg_init_one+0xf5/0x1b0 [ 400.581545][T14709] rsassa_pkcs1_verify+0x4eb/0xc20 [ 400.581575][T14709] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 400.581611][T14709] ? rsa_max_size+0xd/0x70 [ 400.581627][T14709] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 400.581653][T14709] public_key_verify_signature+0x5ee/0x910 [ 400.581686][T14709] ? __pfx_public_key_verify_signature+0x10/0x10 [ 400.581726][T14709] ? asymmetric_key_generate_id+0x7e/0x180 [ 400.581747][T14709] x509_check_for_self_signed+0x325/0x510 [ 400.581762][T14709] x509_cert_parse+0x60c/0x910 [ 400.581786][T14709] x509_key_preparse+0x65/0x9c0 [ 400.581810][T14709] asymmetric_key_preparse+0xce/0x1d0 [ 400.581835][T14709] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 400.581861][T14709] __key_create_or_update+0x413/0xe30 [ 400.581892][T14709] ? __pfx___key_create_or_update+0x10/0x10 [ 400.581918][T14709] ? lookup_user_key+0x3f3/0x1300 [ 400.581940][T14709] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 400.581955][T14709] ? __pfx_keyring_search_iterator+0x10/0x10 [ 400.581974][T14709] key_create_or_update+0x42/0x60 [ 400.582018][T14709] __do_sys_add_key+0x2e8/0x460 [ 400.582032][T14709] ? __pfx___do_sys_add_key+0x10/0x10 [ 400.582050][T14709] __do_fast_syscall_32+0x13a/0x8b0 [ 400.582072][T14709] do_fast_syscall_32+0x32/0x70 [ 400.582086][T14709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.582103][T14709] RIP: 0023:0xf7f35fec [ 400.582118][T14709] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 400.582124][T14709] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 400.582137][T14709] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 400.582145][T14709] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 000000002fa33b1d [ 400.582152][T14709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.582158][T14709] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.582165][T14709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.582180][T14709] [ 400.856617][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.061936][ T41] tipc: Node number set to 43690 [ 401.777314][T14740] FAULT_INJECTION: forcing a failure. [ 401.777314][T14740] name failslab, interval 1, probability 0, space 0, times 0 [ 401.777337][T14740] CPU: 2 UID: 0 PID: 14740 Comm: syz.4.3208 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.777354][T14740] Tainted: [L]=SOFTLOCKUP [ 401.777359][T14740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.777367][T14740] Call Trace: [ 401.777372][T14740] [ 401.777377][T14740] dump_stack_lvl+0x100/0x190 [ 401.777397][T14740] should_fail_ex.cold+0x5/0xa [ 401.777413][T14740] should_failslab+0xc2/0x120 [ 401.777434][T14740] __kmalloc_noprof+0xfc/0x840 [ 401.777451][T14740] ? mpi_resize+0x1ac/0x250 [ 401.777467][T14740] mpi_resize+0x1ac/0x250 [ 401.777481][T14740] mpi_sub_ui+0x173/0x910 [ 401.777496][T14740] rsa_check_payload+0x58/0xc0 [ 401.777511][T14740] rsa_enc+0x198/0x3b0 [ 401.777523][T14740] ? __pfx_rsa_enc+0x10/0x10 [ 401.777536][T14740] ? __virt_addr_valid+0x239/0x430 [ 401.777554][T14740] ? sg_init_one+0xf5/0x1b0 [ 401.777574][T14740] rsassa_pkcs1_verify+0x4eb/0xc20 [ 401.777593][T14740] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 401.777617][T14740] ? rsa_max_size+0xd/0x70 [ 401.777628][T14740] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 401.777644][T14740] public_key_verify_signature+0x5ee/0x910 [ 401.777689][T14740] ? __pfx_public_key_verify_signature+0x10/0x10 [ 401.777715][T14740] ? asymmetric_key_generate_id+0x7e/0x180 [ 401.777737][T14740] x509_check_for_self_signed+0x325/0x510 [ 401.777752][T14740] x509_cert_parse+0x60c/0x910 [ 401.777773][T14740] x509_key_preparse+0x65/0x9c0 [ 401.777788][T14740] asymmetric_key_preparse+0xce/0x1d0 [ 401.777805][T14740] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 401.777823][T14740] __key_create_or_update+0x413/0xe30 [ 401.777842][T14740] ? __pfx___key_create_or_update+0x10/0x10 [ 401.777859][T14740] ? lookup_user_key+0x3f3/0x1300 [ 401.777880][T14740] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 401.777895][T14740] ? __pfx_keyring_search_iterator+0x10/0x10 [ 401.777915][T14740] key_create_or_update+0x42/0x60 [ 401.777932][T14740] __do_sys_add_key+0x2e8/0x460 [ 401.777945][T14740] ? __pfx___do_sys_add_key+0x10/0x10 [ 401.777962][T14740] __do_fast_syscall_32+0x13a/0x8b0 [ 401.778001][T14740] do_fast_syscall_32+0x32/0x70 [ 401.778016][T14740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.778032][T14740] RIP: 0023:0xf7f03fec [ 401.778046][T14740] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 401.778053][T14740] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 401.778065][T14740] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 401.778073][T14740] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 000000001b1d5fca [ 401.778080][T14740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.778087][T14740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.778094][T14740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.778109][T14740] [ 401.976143][ T5747] Bluetooth: hci3: command 0x2016 tx timeout [ 402.396273][T14777] EXT4-fs error: 20 callbacks suppressed [ 402.396286][T14777] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 402.411618][T14778] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 402.935883][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.436433][T14800] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 403.811943][T14816] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 403.816109][ T41] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 403.830604][T14817] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 403.991212][ T41] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 403.991852][ T41] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 403.991869][ T41] usb 9-1: can't read configurations, error -71 [ 404.045213][T14823] FAULT_INJECTION: forcing a failure. [ 404.045213][T14823] name failslab, interval 1, probability 0, space 0, times 0 [ 404.045250][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.3.3239 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.045282][T14823] Tainted: [L]=SOFTLOCKUP [ 404.045290][T14823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.045303][T14823] Call Trace: [ 404.045311][T14823] [ 404.045320][T14823] dump_stack_lvl+0x100/0x190 [ 404.045353][T14823] should_fail_ex.cold+0x5/0xa [ 404.045380][T14823] should_failslab+0xc2/0x120 [ 404.045411][T14823] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 404.045441][T14823] ? sock_alloc_inode+0x26/0x2c0 [ 404.045472][T14823] ? __pfx_sock_alloc_inode+0x10/0x10 [ 404.045502][T14823] sock_alloc_inode+0x26/0x2c0 [ 404.045529][T14823] ? __pfx_sock_alloc_inode+0x10/0x10 [ 404.045556][T14823] alloc_inode+0x68/0x250 [ 404.045579][T14823] sock_alloc+0x44/0x280 [ 404.045604][T14823] ? security_socket_create+0x7f/0x250 [ 404.045629][T14823] __sock_create+0xc2/0x860 [ 404.045654][T14823] __sys_socket+0x14d/0x260 [ 404.045675][T14823] ? __pfx___sys_socket+0x10/0x10 [ 404.045722][T14823] __ia32_compat_sys_socketcall+0x65b/0x770 [ 404.045749][T14823] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 404.045776][T14823] ? find_held_lock+0x2b/0x80 [ 404.045801][T14823] ? exc_page_fault+0x6f/0xd0 [ 404.045833][T14823] __do_fast_syscall_32+0x13a/0x8b0 [ 404.045860][T14823] do_fast_syscall_32+0x32/0x70 [ 404.045884][T14823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.045909][T14823] RIP: 0023:0xf7f35fec [ 404.045931][T14823] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 404.045940][T14823] RSP: 002b:00000000f53e54a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 404.045981][T14823] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f53e54b0 [ 404.045997][T14823] RDX: 00000000f73bdff4 RSI: 0000000000000000 RDI: 00000000f73bdff4 [ 404.046010][T14823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.046029][T14823] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 404.046041][T14823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.046070][T14823] [ 404.046509][T14823] socket: no more sockets [ 404.620924][T14830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 405.145892][ T41] usb 9-1: new full-speed USB device number 76 using dummy_hcd [ 405.303031][ T41] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 405.304220][ T41] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 405.304239][ T41] usb 9-1: can't read configurations, error -71 [ 405.757924][T14857] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 407.050766][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 408.603369][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 409.871811][T14919] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3275'. [ 410.157555][T14928] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.265061][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3281'. [ 410.273347][T14936] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.279707][T14937] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.285667][T14938] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.291805][T14939] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.331711][T14942] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.337411][T14943] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.349519][T14944] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.359662][T14945] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.510100][T14950] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 410.794960][T14953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3284'. [ 410.894501][T14956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3286'. [ 411.014902][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.024052][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.028166][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.028914][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.031200][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.127901][T14963] rxe_eth0 speed is unknown, defaulting to 1000 [ 411.222609][T14963] wg0 speed is unknown, defaulting to 1000 [ 411.331753][ T5817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.355037][T14963] lo speed is unknown, defaulting to 1000 [ 411.450743][ T5817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.568537][ T5817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.572748][T14963] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.572868][T14963] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.572966][T14963] bridge_slave_0: entered allmulticast mode [ 411.574080][T14963] bridge_slave_0: entered promiscuous mode [ 411.577689][T14963] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.577805][T14963] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.577897][T14963] bridge_slave_1: entered allmulticast mode [ 411.580252][T14963] bridge_slave_1: entered promiscuous mode [ 411.600852][T14963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.603169][T14963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.638616][ T5817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.644036][T14963] team0: Port device team_slave_0 added [ 411.645486][T14963] team0: Port device team_slave_1 added [ 411.668219][T14963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.668235][T14963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.668255][T14963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.669606][T14963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.669616][T14963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.669636][T14963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.698315][T14963] hsr_slave_0: entered promiscuous mode [ 411.698725][T14963] hsr_slave_1: entered promiscuous mode [ 411.698995][T14963] debugfs: 'hsr0' already exists in 'hsr' [ 411.699006][T14963] Cannot create hsr debugfs directory [ 411.815687][ T5817] bridge_slave_1: left allmulticast mode [ 411.815918][ T5817] bridge_slave_1: left promiscuous mode [ 411.816020][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.820027][ T5817] bridge_slave_0: left allmulticast mode [ 411.820041][ T5817] bridge_slave_0: left promiscuous mode [ 411.820132][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.873233][T14996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3294'. [ 411.930370][T14998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3295'. [ 411.958369][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.960724][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.962124][ T5817] bond0 (unregistering): Released all slaves [ 412.103443][T14963] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 412.105504][T14963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.107252][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 412.108735][T14963] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 412.119340][T14963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.119894][T14963] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 412.121475][T14963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.124585][T14963] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.128034][T14963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.223363][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 412.262534][T14963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.288778][T14963] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.297799][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.297873][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.307210][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.307256][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.310143][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 412.434409][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 412.580568][T14963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.651865][ T5817] hsr_slave_0: left promiscuous mode [ 412.652657][ T5817] hsr_slave_1: left promiscuous mode [ 412.653383][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.653400][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.654170][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.654186][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.672051][ T5817] veth1_macvtap: left promiscuous mode [ 412.672092][ T5817] veth0_macvtap: left promiscuous mode [ 412.673026][ T5817] veth1_vlan: left promiscuous mode [ 412.673084][ T5817] veth0_vlan: left promiscuous mode [ 412.963253][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 412.975213][ T5817] team0 (unregistering): Port device team_slave_0 removed [ 413.022666][T15055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 413.096186][ T5747] Bluetooth: hci0: command tx timeout [ 413.196583][T14963] veth0_vlan: entered promiscuous mode [ 413.210819][T14963] veth1_vlan: entered promiscuous mode [ 413.232750][T14963] veth0_macvtap: entered promiscuous mode [ 413.256620][T14963] veth1_macvtap: entered promiscuous mode [ 413.262754][T14963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.273338][T14963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.333961][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.333972][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.357712][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.357732][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.377748][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.377786][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.377814][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.389178][ T8453] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.418232][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 413.418259][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 413.418278][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe46f instead [ 413.418297][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd870 instead [ 413.418312][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 413.418327][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 413.418343][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 413.418362][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 413.418391][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 413.418422][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 413.418437][T15075] jffs2: Further such events for this erase block will not be printed [ 413.418757][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 413.418777][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 413.418795][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe46f instead [ 413.418816][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd870 instead [ 413.418832][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 413.418849][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 413.418865][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 413.418887][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 413.418918][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 413.418948][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 413.418963][T15075] jffs2: Further such events for this erase block will not be printed [ 413.419287][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 413.419304][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 413.419321][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe46f instead [ 413.419339][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd870 instead [ 413.419385][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 413.419400][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 413.419417][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe46f instead [ 413.419434][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd870 instead [ 413.419485][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 413.419501][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 413.419517][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xe46f instead [ 413.419533][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd870 instead [ 413.419572][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 413.419587][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 413.419604][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xe46f instead [ 413.419620][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd870 instead [ 413.419661][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 413.419675][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 413.419689][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xe46f instead [ 413.419708][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd870 instead [ 413.419754][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 413.419771][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 413.419788][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xe46f instead [ 413.419806][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd870 instead [ 413.419851][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 413.419868][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 413.419884][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xe46f instead [ 413.419902][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd870 instead [ 413.419949][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 413.419965][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 413.419981][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xe46f instead [ 413.419999][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd870 instead [ 413.420083][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 413.420102][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 413.426646][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xe46f instead [ 413.426668][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd870 instead [ 413.426720][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 413.426737][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 413.426755][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xe46f instead [ 413.426773][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd870 instead [ 413.426817][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 413.426831][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 413.426846][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xe46f instead [ 413.426864][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd870 instead [ 413.426908][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 413.426925][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 413.426941][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xe46f instead [ 413.426959][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd870 instead [ 413.427003][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 413.427019][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 413.427037][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xe46f instead [ 413.427055][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd870 instead [ 413.427101][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 413.427117][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 413.427134][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xe46f instead [ 413.427152][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd870 instead [ 413.427199][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 413.427215][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 413.427232][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xe46f instead [ 413.427250][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd870 instead [ 413.427297][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 413.427313][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 413.427330][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xe46f instead [ 413.427348][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd870 instead [ 413.427394][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 413.427410][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 413.427427][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xe46f instead [ 413.427445][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd870 instead [ 413.427498][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 413.427515][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 413.427532][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xe46f instead [ 413.427552][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd870 instead [ 413.427632][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 413.427649][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 413.427666][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xe46f instead [ 413.427685][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd870 instead [ 413.427730][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 413.427745][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 413.427762][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xe46f instead [ 413.427780][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd870 instead [ 413.427827][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 413.427843][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 413.427859][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xe46f instead [ 413.427877][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd870 instead [ 413.427923][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 413.427939][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 413.427956][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xe46f instead [ 413.427973][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd870 instead [ 413.428019][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 413.428034][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 413.428051][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xe46f instead [ 413.428125][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd870 instead [ 413.428175][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 413.428193][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 413.428210][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xe46f instead [ 413.428230][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd870 instead [ 413.428277][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 413.428294][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 413.428311][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe46f instead [ 413.428330][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd870 instead [ 413.428376][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 413.428393][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 413.428411][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xe46f instead [ 413.428430][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd870 instead [ 413.428481][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 413.428498][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 413.428515][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xe46f instead [ 413.428532][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd870 instead [ 413.428570][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 413.428585][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 413.428600][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe46f instead [ 413.428619][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd870 instead [ 413.428659][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 413.428673][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 413.428685][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xe46f instead [ 413.428698][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd870 instead [ 413.428732][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 413.428746][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 413.428763][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xe46f instead [ 413.428781][T15075] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd870 instead [ 413.428813][T15075] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 413.428822][T15075] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 413.806478][ T1942] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 413.956758][ T1942] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 413.958398][ T1942] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 413.958426][ T1942] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 413.958448][ T1942] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 413.961872][ T1942] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.961892][ T1942] usb 11-1: Product: syz [ 413.961906][ T1942] usb 11-1: Manufacturer: syz [ 413.961943][ T1942] usb 11-1: SerialNumber: syz [ 413.966533][ T1942] usb 11-1: config 0 descriptor?? [ 413.970077][T15079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 414.040606][ T1942] rc_core: IR keymap rc-streamzap not found [ 414.040622][ T1942] Registered IR keymap rc-empty [ 414.043452][ T1942] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 414.045231][ T1942] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input71 [ 414.255767][ T5747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 414.255785][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.255803][ T5747] Tainted: [L]=SOFTLOCKUP [ 414.255809][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.255817][ T5747] Workqueue: hci3 hci_rx_work [ 414.255839][ T5747] Call Trace: [ 414.255844][ T5747] [ 414.255849][ T5747] dump_stack_lvl+0x100/0x190 [ 414.255881][ T5747] sysfs_warn_dup.cold+0x1c/0x28 [ 414.255902][ T5747] sysfs_create_dir_ns+0x24b/0x2b0 [ 414.255922][ T5747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 414.255940][ T5747] ? find_held_lock+0x2b/0x80 [ 414.255955][ T5747] ? kobject_add_internal+0x25f/0x930 [ 414.255972][ T5747] ? kobject_add_internal+0x25f/0x930 [ 414.255989][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 414.256005][ T5747] kobject_add_internal+0x2c8/0x930 [ 414.256023][ T5747] kobject_add+0x16a/0x1e0 [ 414.256039][ T5747] ? __pfx_kobject_add+0x10/0x10 [ 414.256053][ T5747] ? class_to_subsys+0x10f/0x150 [ 414.256073][ T5747] ? kobject_put+0xb9/0x640 [ 414.256087][ T5747] ? _raw_spin_unlock+0x28/0x50 [ 414.256108][ T5747] device_add+0x294/0x1970 [ 414.256125][ T5747] ? __pfx_dev_set_name+0x10/0x10 [ 414.256143][ T5747] ? __pfx_device_add+0x10/0x10 [ 414.256159][ T5747] ? mgmt_send_event_skb+0x2fb/0x460 [ 414.256187][ T5747] hci_conn_add_sysfs+0x1a3/0x260 [ 414.256200][ T5747] le_conn_complete_evt+0x122f/0x2130 [ 414.256222][ T5747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 414.256238][ T5747] ? hci_event_packet+0x186/0xcd0 [ 414.256272][ T5747] hci_le_conn_complete_evt+0x23c/0x3a0 [ 414.256290][ T5747] ? skb_pull_data+0x15f/0x1e0 [ 414.256310][ T5747] hci_le_meta_evt+0x34a/0x5f0 [ 414.256328][ T5747] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 414.256348][ T5747] hci_event_packet+0x51c/0xcd0 [ 414.256366][ T5747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 414.256385][ T5747] ? __pfx_hci_event_packet+0x10/0x10 [ 414.256404][ T5747] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.256419][ T5747] hci_rx_work+0x451/0xfc0 [ 414.256438][ T5747] process_one_work+0xac7/0x1b10 [ 414.256459][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 414.256475][ T5747] ? lock_acquire+0x1d1/0x380 [ 414.256496][ T5747] ? __pfx_hci_rx_work+0x10/0x10 [ 414.256513][ T5747] worker_thread+0x5ef/0xe50 [ 414.256534][ T5747] ? kthread+0x13a/0x450 [ 414.256546][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 414.256560][ T5747] kthread+0x373/0x450 [ 414.256572][ T5747] ? __pfx_kthread+0x10/0x10 [ 414.256586][ T5747] ret_from_fork+0x730/0xd60 [ 414.256599][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 414.256611][ T5747] ? __switch_to+0x800/0x10f0 [ 414.256627][ T5747] ? __pfx_kthread+0x10/0x10 [ 414.256642][ T5747] ret_from_fork_asm+0x1a/0x30 [ 414.256661][ T5747] [ 414.256764][ T5747] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 414.256798][ T5747] Bluetooth: hci3: failed to register connection device [ 414.389829][ T24] usb 11-1: USB disconnect, device number 2 [ 414.975456][T15130] binder: 15129:15130 ioctl c0306201 80000180 returned -14 [ 415.176210][ T5747] Bluetooth: hci0: command tx timeout [ 415.415871][ T1942] usb 9-1: new full-speed USB device number 78 using dummy_hcd [ 415.532087][T15166] EXT4-fs error: 74 callbacks suppressed [ 415.532100][T15166] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 415.540204][T15167] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 415.567653][ T1942] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 415.568445][ T1942] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.568460][ T1942] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.568474][ T1942] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 415.570128][ T1942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.570140][ T1942] usb 9-1: Product: syz [ 415.570148][ T1942] usb 9-1: Manufacturer: syz [ 415.570155][ T1942] usb 9-1: SerialNumber: syz [ 415.571720][ T1942] usb 9-1: config 0 descriptor?? [ 415.575363][T15146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.584917][T15168] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 415.625932][ T1942] rc_core: IR keymap rc-streamzap not found [ 415.625949][ T1942] Registered IR keymap rc-empty [ 415.626408][ T1942] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 415.627134][ T1942] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input72 [ 415.634017][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 415.634387][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 415.634705][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 415.654010][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 415.654608][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 415.654952][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 415.995569][ T1942] usb 9-1: USB disconnect, device number 78 [ 416.256247][T15213] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 416.847758][T15231] syzkaller0: entered promiscuous mode [ 416.847781][T15231] syzkaller0: entered allmulticast mode [ 416.944474][T15233] syzkaller0: entered promiscuous mode [ 416.944489][T15233] syzkaller0: entered allmulticast mode [ 417.267221][ T5747] Bluetooth: hci0: command tx timeout [ 417.485145][T15283] /dev/loop0: Can't open blockdev [ 417.560236][T15287] FAULT_INJECTION: forcing a failure. [ 417.560236][T15287] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.560269][T15287] CPU: 2 UID: 0 PID: 15287 Comm: syz.4.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.560293][T15287] Tainted: [L]=SOFTLOCKUP [ 417.560300][T15287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.560310][T15287] Call Trace: [ 417.560316][T15287] [ 417.560325][T15287] dump_stack_lvl+0x100/0x190 [ 417.560371][T15287] should_fail_ex.cold+0x5/0xa [ 417.560396][T15287] get_futex_key+0x1c9/0x13e0 [ 417.560419][T15287] ? __pfx_get_futex_key+0x10/0x10 [ 417.560435][T15287] ? futex_wake+0x4ea/0x5e0 [ 417.560464][T15287] futex_wake+0xf4/0x5e0 [ 417.560484][T15287] ? futex_wait+0x11e/0x370 [ 417.560510][T15287] ? __pfx_futex_wake+0x10/0x10 [ 417.560535][T15287] ? rcu_read_lock_any_held+0x6a/0x90 [ 417.560556][T15287] ? find_held_lock+0x2b/0x80 [ 417.560575][T15287] ? ksys_write+0x190/0x250 [ 417.560596][T15287] ? ksys_write+0x190/0x250 [ 417.560620][T15287] do_futex+0x2b2/0x440 [ 417.560640][T15287] ? __pfx_do_futex+0x10/0x10 [ 417.560661][T15287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.560687][T15287] __ia32_sys_futex_time32+0x2f4/0x470 [ 417.560711][T15287] ? fput+0x7c/0x100 [ 417.560735][T15287] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 417.560756][T15287] ? ksys_write+0x1ac/0x250 [ 417.560778][T15287] ? __pfx_ksys_write+0x10/0x10 [ 417.560806][T15287] __do_fast_syscall_32+0x13a/0x8b0 [ 417.560829][T15287] do_fast_syscall_32+0x32/0x70 [ 417.560849][T15287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.560871][T15287] RIP: 0023:0xf7f03fec [ 417.560892][T15287] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 417.560900][T15287] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 417.560918][T15287] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 417.560930][T15287] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 417.560941][T15287] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 417.560959][T15287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.560971][T15287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.560995][T15287] [ 417.976148][ T62] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 418.026001][ T1347] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 418.146987][ T62] usb 11-1: not running at top speed; connect to a high speed hub [ 418.147008][ T62] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 418.149424][ T62] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 418.149446][ T62] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.158413][ T62] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 418.176883][ T1347] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 418.177943][ T1347] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.177966][ T1347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.177987][ T1347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 418.179315][ T62] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 418.179697][ T1347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.179709][ T1347] usb 9-1: Product: syz [ 418.179717][ T1347] usb 9-1: Manufacturer: syz [ 418.179724][ T1347] usb 9-1: SerialNumber: syz [ 418.188590][ T1347] usb 9-1: config 0 descriptor?? [ 418.190833][T15303] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 418.245834][ T1347] rc_core: IR keymap rc-streamzap not found [ 418.245849][ T1347] Registered IR keymap rc-empty [ 418.246467][ T1347] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 418.247197][ T1347] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input74 [ 418.380850][ T1347] usb 11-1: USB disconnect, device number 3 [ 418.394129][ T1347] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 418.394661][ T1347] cyberjack 11-1:1.0: device disconnected [ 418.602813][ T1347] usb 9-1: USB disconnect, device number 79 [ 418.921257][T15334] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3413'. [ 419.172022][ T1347] kernel read not supported for file /video9 (pid: 1347 comm: kworker/0:2) [ 419.245255][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.255443][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.263264][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.264359][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.264746][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.296169][ T5791] bridge_slave_1: left allmulticast mode [ 419.296195][ T5791] bridge_slave_1: left promiscuous mode [ 419.296366][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.336134][ T5747] Bluetooth: hci0: command tx timeout [ 419.340355][T15359] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3423'. [ 419.436012][ T5896] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 419.459151][ T5791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.461196][ T5791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.463154][ T5791] bond0 (unregistering): Released all slaves [ 419.474463][ T5791] bond1 (unregistering): Released all slaves [ 419.484940][ T5791] bond2 (unregistering): Released all slaves [ 419.497972][ T5791] bond3 (unregistering): left allmulticast mode [ 419.497989][ T5791] bond3 (unregistering): left promiscuous mode [ 419.501148][ T5791] team0: Port device macvlan2 removed [ 419.507963][ T5791] bond3 (unregistering): Released all slaves [ 419.568511][ T5791] ovs-dp0: left promiscuous mode [ 419.605201][ T5896] usb 9-1: not running at top speed; connect to a high speed hub [ 419.605234][ T5896] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 419.619655][ T5896] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 419.619679][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.625604][ T5896] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 419.676373][T15352] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.679876][ T5896] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 419.728684][ T5791] IPVS: stopping master sync thread 12490 ... [ 419.803169][T15376] tipc: Enabling of bearer rejected, failed to enable media [ 419.812561][T15352] wg0 speed is unknown, defaulting to 1000 [ 419.854324][ T5854] usb 9-1: USB disconnect, device number 80 [ 419.863444][ T5854] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 419.863741][ T5854] cyberjack 9-1:1.0: device disconnected [ 419.935333][T15352] lo speed is unknown, defaulting to 1000 [ 420.097197][T15352] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.097335][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.097432][T15352] bridge_slave_0: entered allmulticast mode [ 420.098663][T15352] bridge_slave_0: entered promiscuous mode [ 420.106099][T15352] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.106154][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.106249][T15352] bridge_slave_1: entered allmulticast mode [ 420.107180][T15352] bridge_slave_1: entered promiscuous mode [ 420.124738][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.133757][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.157647][T15352] team0: Port device team_slave_0 added [ 420.159994][T15352] team0: Port device team_slave_1 added [ 420.203023][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.203036][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.203049][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.206306][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.206321][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.206344][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.271132][T15390] configfs-gadget.g1 gadget.0: HOST MAC 02:b4:18:b8:ea:76 [ 420.271150][T15390] configfs-gadget.g1 gadget.0: MAC a6:ff:79:0b:02:44 [ 420.286807][T15390] FAULT_INJECTION: forcing a failure. [ 420.286807][T15390] name failslab, interval 1, probability 0, space 0, times 0 [ 420.286830][T15390] CPU: 3 UID: 0 PID: 15390 Comm: syz.6.3429 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.286849][T15390] Tainted: [L]=SOFTLOCKUP [ 420.286854][T15390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 420.286862][T15390] Call Trace: [ 420.286867][T15390] [ 420.286872][T15390] dump_stack_lvl+0x100/0x190 [ 420.286893][T15390] should_fail_ex.cold+0x5/0xa [ 420.286909][T15390] should_failslab+0xc2/0x120 [ 420.286929][T15390] kmem_cache_alloc_noprof+0x92/0x6a0 [ 420.286946][T15390] ? __kernfs_new_node+0xd2/0xa10 [ 420.286964][T15390] __kernfs_new_node+0xd2/0xa10 [ 420.286979][T15390] ? __pfx___kernfs_new_node+0x10/0x10 [ 420.286993][T15390] ? lock_acquire+0x1d1/0x380 [ 420.287010][T15390] ? kernfs_root+0x23/0x2a0 [ 420.287028][T15390] ? find_held_lock+0x2b/0x80 [ 420.287041][T15390] ? kernfs_root+0xee/0x2a0 [ 420.287058][T15390] ? kernfs_root+0xee/0x2a0 [ 420.287079][T15390] kernfs_new_node+0x194/0x200 [ 420.287093][T15390] ? __pfx_kernfs_new_node+0x10/0x10 [ 420.287106][T15390] ? kernfs_add_one+0x213/0xb40 [ 420.287124][T15390] __kernfs_create_file+0x53/0x350 [ 420.287141][T15390] sysfs_add_file_mode_ns+0x207/0x3c0 [ 420.287162][T15390] sysfs_create_file_ns+0x145/0x1e0 [ 420.287179][T15390] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 420.287196][T15390] ? module_add_driver+0x1e2/0x420 [ 420.287238][T15390] ? sysfs_do_create_link_sd+0xbb/0x140 [ 420.287261][T15390] driver_create_file+0x4a/0x70 [ 420.287278][T15390] bus_add_driver+0x446/0x5b0 [ 420.287293][T15390] driver_register+0x1e2/0x360 [ 420.287310][T15390] usb_gadget_register_driver_owner+0x132/0x210 [ 420.287328][T15390] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 420.287347][T15390] configfs_write_iter+0x302/0x4e0 [ 420.287362][T15390] vfs_write+0x6af/0x1050 [ 420.287378][T15390] ? __pfx_configfs_write_iter+0x10/0x10 [ 420.287392][T15390] ? __pfx_vfs_write+0x10/0x10 [ 420.287405][T15390] ? find_held_lock+0x2b/0x80 [ 420.287429][T15390] ksys_write+0x12a/0x250 [ 420.287444][T15390] ? __pfx_ksys_write+0x10/0x10 [ 420.287463][T15390] __do_fast_syscall_32+0x13a/0x8b0 [ 420.287479][T15390] do_fast_syscall_32+0x32/0x70 [ 420.287493][T15390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 420.287508][T15390] RIP: 0023:0xf742efec [ 420.287524][T15390] Code: Unable to access opcode bytes at 0xf742efc2. [ 420.287529][T15390] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 420.287541][T15390] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000ac0 [ 420.287549][T15390] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 420.287555][T15390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.287562][T15390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 420.287569][T15390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.287585][T15390] [ 420.287619][T15390] bus_add_driver: add_bind_files(configfs-gadget.g1) failed [ 420.335015][T15352] hsr_slave_0: entered promiscuous mode [ 420.338862][T15352] hsr_slave_1: entered promiscuous mode [ 420.339379][T15352] debugfs: 'hsr0' already exists in 'hsr' [ 420.339398][T15352] Cannot create hsr debugfs directory [ 420.390964][ T5747] Bluetooth: hci3: command 0x2016 tx timeout [ 420.459830][ T5791] hsr_slave_0: left promiscuous mode [ 420.461700][ T5791] hsr_slave_1: left promiscuous mode [ 420.465309][ T5791] veth1_macvtap: left promiscuous mode [ 420.465341][ T5791] veth0_macvtap: left promiscuous mode [ 420.465482][ T5791] veth1_vlan: left promiscuous mode [ 420.465529][ T5791] veth0_vlan: left promiscuous mode [ 420.536086][ T5854] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 420.624984][ T5791] team0 (unregistering): Port device vlan0 removed [ 420.696210][ T5854] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 420.697698][ T5854] usb 5-1: Dual-Role OTG device on HNP port [ 420.697932][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.697946][ T5854] usb 5-1: SerialNumber: 1234 [ 420.744354][ T5791] team0 (unregistering): Port device team_slave_1 removed [ 420.754861][ T5791] team0 (unregistering): Port device team_slave_0 removed [ 420.876016][ T5854] cdc_ether 5-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 02:b4:18:b8:ea:76 [ 420.887549][T14959] EXT4-fs error: 42 callbacks suppressed [ 420.887565][T14959] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 420.887933][T14959] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 420.888332][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 420.888507][T14959] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 420.888908][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 420.889105][T14993] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1135: comm udevd: iget: checksum invalid [ 420.962042][T15409] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 420.967879][T15410] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 421.019379][T15413] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 421.025601][T15414] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 421.092236][T15352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 421.095224][T15352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.096087][T15352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 421.107477][T15352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.110801][T15352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.113942][T15352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.119133][T15352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.127101][T15352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.144166][ T5791] IPVS: stop unused estimator thread 0... [ 421.182782][T15430] overlayfs: failed to clone lowerpath [ 421.240040][T15352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.254211][T15352] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.265106][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.265154][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.271972][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.272038][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.346354][ T5745] Bluetooth: hci1: command tx timeout [ 421.372159][ T5791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.458388][ T5791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.567452][ T5791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.572985][T15455] bond0: option arp_interval: invalid value (1‘) [ 421.573009][T15455] bond0: option arp_interval: allowed values 0 - 2147483647 [ 421.609841][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.624531][T15463] FAULT_INJECTION: forcing a failure. [ 421.624531][T15463] name fail_futex, interval 1, probability 0, space 0, times 0 [ 421.624565][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.6.3444 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.624594][T15463] Tainted: [L]=SOFTLOCKUP [ 421.624601][T15463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.624611][T15463] Call Trace: [ 421.624618][T15463] [ 421.624627][T15463] dump_stack_lvl+0x100/0x190 [ 421.624661][T15463] should_fail_ex.cold+0x5/0xa [ 421.624689][T15463] get_futex_key+0x1c9/0x13e0 [ 421.624716][T15463] ? __pfx_get_futex_key+0x10/0x10 [ 421.624864][T15463] futex_wake+0xf4/0x5e0 [ 421.624894][T15463] ? __pfx_futex_wake+0x10/0x10 [ 421.624923][T15463] ? percpu_counter_add_batch+0xb9/0x230 [ 421.624947][T15463] ? errseq_sample+0x51/0x70 [ 421.624969][T15463] ? file_init_path+0x48e/0x670 [ 421.625000][T15463] do_futex+0x2b2/0x440 [ 421.625024][T15463] ? __pfx_do_futex+0x10/0x10 [ 421.625046][T15463] ? fd_install+0x223/0x580 [ 421.625078][T15463] __ia32_sys_futex_time32+0x2f4/0x470 [ 421.625103][T15463] ? xfd_validate_state+0x129/0x190 [ 421.625132][T15463] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 421.625167][T15463] __do_fast_syscall_32+0x13a/0x8b0 [ 421.625196][T15463] do_fast_syscall_32+0x32/0x70 [ 421.625219][T15463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.625243][T15463] RIP: 0023:0xf742efec [ 421.625265][T15463] Code: Unable to access opcode bytes at 0xf742efc2. [ 421.625274][T15463] RSP: 002b:00000000f54465cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 421.625294][T15463] RAX: ffffffffffffffda RBX: 00000000f7454f8c RCX: 0000000000000081 [ 421.625307][T15463] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 421.625320][T15463] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 421.625333][T15463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 421.625345][T15463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.625371][T15463] [ 421.648120][ T5791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.837993][T15352] veth0_vlan: entered promiscuous mode [ 421.863993][ T5791] bridge_slave_1: left allmulticast mode [ 421.864016][ T5791] bridge_slave_1: left promiscuous mode [ 421.864189][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.872717][ T5791] bridge_slave_0: left allmulticast mode [ 421.872742][ T5791] bridge_slave_0: left promiscuous mode [ 421.872906][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.090584][ T5791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.092134][ T5791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.093058][ T5791] bond0 (unregistering): Released all slaves [ 422.119780][T15352] veth1_vlan: entered promiscuous mode [ 422.156540][T15352] veth0_macvtap: entered promiscuous mode [ 422.159021][T15352] veth1_macvtap: entered promiscuous mode [ 422.173177][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 422.206971][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.212128][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.249375][ T5814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.249421][ T5814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.249450][ T5814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.249478][ T5814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.326436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.326457][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.333607][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 422.346306][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.346326][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.413565][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 422.477069][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 422.521067][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 422.597042][ T5791] hsr_slave_0: left promiscuous mode [ 422.598807][ T5791] hsr_slave_1: left promiscuous mode [ 422.600184][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.600205][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.601076][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.601089][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.622546][ T5791] veth1_macvtap: left promiscuous mode [ 422.622606][ T5791] veth0_macvtap: left promiscuous mode [ 422.622745][ T5791] veth1_vlan: left promiscuous mode [ 422.623606][ T5791] veth0_vlan: left promiscuous mode [ 422.673666][T15516] netlink: 'syz.4.3454': attribute type 1 has an invalid length. [ 422.717788][T15520] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 422.802307][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 422.888334][ T5791] team0 (unregistering): Port device team_slave_1 removed [ 422.912754][ T5791] team0 (unregistering): Port device team_slave_0 removed [ 422.954957][T15532] FAULT_INJECTION: forcing a failure. [ 422.954957][T15532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 422.954981][T15532] CPU: 3 UID: 0 PID: 15532 Comm: syz.6.3460 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.954998][T15532] Tainted: [L]=SOFTLOCKUP [ 422.955003][T15532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.955010][T15532] Call Trace: [ 422.955029][T15532] [ 422.955035][T15532] dump_stack_lvl+0x100/0x190 [ 422.955055][T15532] should_fail_ex.cold+0x5/0xa [ 422.955076][T15532] get_futex_key+0x1c9/0x13e0 [ 422.955092][T15532] ? __pfx_get_futex_key+0x10/0x10 [ 422.955104][T15532] ? blk_finish_plug+0x83/0xa0 [ 422.955135][T15532] futex_wake+0xf4/0x5e0 [ 422.955151][T15532] ? __up_read+0x333/0x980 [ 422.955164][T15532] ? __pfx___up_read+0x10/0x10 [ 422.955178][T15532] ? __pfx_futex_wake+0x10/0x10 [ 422.955196][T15532] ? madvise_unlock+0xa9/0x220 [ 422.955212][T15532] do_futex+0x2b2/0x440 [ 422.955226][T15532] ? __pfx_do_futex+0x10/0x10 [ 422.955241][T15532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.955258][T15532] __ia32_sys_futex_time32+0x2f4/0x470 [ 422.955275][T15532] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 422.955290][T15532] ? ksys_write+0x1ac/0x250 [ 422.955305][T15532] ? __pfx_ksys_write+0x10/0x10 [ 422.955324][T15532] __do_fast_syscall_32+0x13a/0x8b0 [ 422.955340][T15532] do_fast_syscall_32+0x32/0x70 [ 422.955353][T15532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.955368][T15532] RIP: 0023:0xf742efec [ 422.955383][T15532] Code: Unable to access opcode bytes at 0xf742efc2. [ 422.955389][T15532] RSP: 002b:00000000f54465cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 422.955401][T15532] RAX: ffffffffffffffda RBX: 00000000f7454f8c RCX: 0000000000000081 [ 422.955409][T15532] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 422.955416][T15532] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 422.955423][T15532] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 422.955430][T15532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.955445][T15532] [ 423.043422][T15520] : entered promiscuous mode [ 423.048136][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3418'. [ 423.098954][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3461'. [ 423.170849][T15545] bridge_slave_0: left allmulticast mode [ 423.170877][T15545] bridge_slave_0: left promiscuous mode [ 423.171084][T15545] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.175172][T15545] bridge_slave_1: left allmulticast mode [ 423.175191][T15545] bridge_slave_1: left promiscuous mode [ 423.177948][T15545] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.192420][T15545] bond0: (slave bond_slave_0): Releasing backup interface [ 423.199950][T15545] bond0: (slave bond_slave_1): Releasing backup interface [ 423.205336][T15545] team0: Port device team_slave_0 removed [ 423.213444][T15545] team0: Port device team_slave_1 removed [ 423.214147][T15545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.214159][T15545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.411488][T15545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.411504][T15545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.415671][T15545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.415914][ T24] lo speed is unknown, defaulting to 1000 [ 423.416232][ T5745] Bluetooth: hci1: command tx timeout [ 423.459277][T15546] team0: Port device xfrm0 added [ 423.664248][T15575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3477'. [ 423.799814][T15590] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3483'. [ 424.309454][T15637] binder_alloc: 15635: binder_alloc_buf, no vma [ 424.473068][T15644] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3509'. [ 424.546020][T15487] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 424.591438][T15657] syzkaller0: entered promiscuous mode [ 424.591454][T15657] syzkaller0: entered allmulticast mode [ 424.619296][T15660] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 424.696464][T15487] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 424.697324][T15487] usb 12-1: config 0 has an invalid interface number: 50 but max is 0 [ 424.697338][T15487] usb 12-1: config 0 has no interface number 0 [ 424.697357][T15487] usb 12-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.698868][T15487] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.698881][T15487] usb 12-1: Product: syz [ 424.698888][T15487] usb 12-1: Manufacturer: syz [ 424.698896][T15487] usb 12-1: SerialNumber: syz [ 424.700062][T15487] usb 12-1: config 0 descriptor?? [ 424.705916][T15487] yurex 12-1:0.50: USB YUREX device now attached to Yurex #0 [ 425.070964][ T7467] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.178736][ T7467] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.211905][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.213938][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.215124][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.223558][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.224246][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.270644][ T7467] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.341551][ T7467] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.349703][T15679] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.364910][ T7737] usb 12-1: USB disconnect, device number 2 [ 425.414283][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'. [ 425.491858][T15679] wg0 speed is unknown, defaulting to 1000 [ 425.496148][ T5745] Bluetooth: hci1: command tx timeout [ 425.505264][ T7467] bridge_slave_1: left allmulticast mode [ 425.505287][ T7467] bridge_slave_1: left promiscuous mode [ 425.508204][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.516257][ T7467] bridge_slave_0: left allmulticast mode [ 425.516272][ T7467] bridge_slave_0: left promiscuous mode [ 425.517284][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.672136][ T7467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.674327][ T7467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.680339][ T7467] bond0 (unregistering): Released all slaves [ 425.693983][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 425.696192][T15679] lo speed is unknown, defaulting to 1000 [ 425.834470][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 426.936152][ T7737] yurex 12-1:0.50: USB YUREX #0 now disconnected [ 427.259675][ T5745] Bluetooth: hci0: command tx timeout [ 427.376733][T15720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 427.396458][T15721] EXT4-fs error: 73 callbacks suppressed [ 427.396471][T15721] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 427.412005][T15725] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 427.418233][T15722] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 427.424647][T15727] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 427.430838][T15728] fuse: fd is not a fuse device [ 427.441499][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 427.576256][ T5745] Bluetooth: hci1: command tx timeout [ 427.633600][T15679] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.633668][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.633761][T15679] bridge_slave_0: entered allmulticast mode [ 427.635095][T15679] bridge_slave_0: entered promiscuous mode [ 427.637247][T15679] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.637402][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.637491][T15679] bridge_slave_1: entered allmulticast mode [ 427.654322][T15679] bridge_slave_1: entered promiscuous mode [ 427.706142][T15757] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 427.714164][T15758] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 427.714359][ T7467] hsr_slave_0: left promiscuous mode [ 427.714869][ T7467] hsr_slave_1: left promiscuous mode [ 427.715264][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.715276][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.718439][T15759] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 427.737886][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.739378][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.751633][ T7467] veth1_macvtap: left promiscuous mode [ 427.751689][ T7467] veth0_macvtap: left promiscuous mode [ 427.751802][ T7467] veth1_vlan: left promiscuous mode [ 427.751893][ T7467] veth0_vlan: left promiscuous mode [ 427.809173][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 427.862230][T15771] netlink: 'syz.1.3548': attribute type 10 has an invalid length. [ 427.878714][T15773] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 427.887825][T15774] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm modprobe: iget: checksum invalid [ 427.916699][T15775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.949594][ T7467] team0 (unregistering): Port device team_slave_1 removed [ 427.954155][ T7467] team0 (unregistering): Port device team_slave_0 removed [ 428.055076][T15679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.056555][ T5451] 8021q: adding VLAN 0 to HW filter on device eth21 [ 428.091445][T15771] bond0: (slave syzkaller0): Opening slave failed [ 428.096299][T15679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.143380][T15779] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 428.185160][T15783] overlayfs: overlapping lowerdir path [ 428.204227][T15679] team0: Port device team_slave_0 added [ 428.210014][T15679] team0: Port device team_slave_1 added [ 428.239047][T15679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.239058][T15679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.239072][T15679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.240182][T15679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.240191][T15679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.240204][T15679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.278199][T15679] hsr_slave_0: entered promiscuous mode [ 428.278653][T15679] hsr_slave_1: entered promiscuous mode [ 429.336535][ T5745] Bluetooth: hci0: command tx timeout [ 429.974001][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3569'. [ 430.035476][T15679] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 430.048408][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.048917][T15679] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 430.052664][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.053077][T15679] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 430.057292][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.058107][T15679] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 430.060577][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.069578][T15855] FAULT_INJECTION: forcing a failure. [ 430.069578][T15855] name fail_futex, interval 1, probability 0, space 0, times 0 [ 430.069601][T15855] CPU: 3 UID: 0 PID: 15855 Comm: syz.4.3575 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.069618][T15855] Tainted: [L]=SOFTLOCKUP [ 430.069623][T15855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.069630][T15855] Call Trace: [ 430.069634][T15855] [ 430.069640][T15855] dump_stack_lvl+0x100/0x190 [ 430.069661][T15855] should_fail_ex.cold+0x5/0xa [ 430.069691][T15855] get_futex_key+0x1c9/0x13e0 [ 430.069706][T15855] ? __pfx_get_futex_key+0x10/0x10 [ 430.069718][T15855] ? wakeup_preempt_fair+0x4a0/0xdc0 [ 430.069733][T15855] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 430.069748][T15855] futex_wait_setup+0x91/0x540 [ 430.069769][T15855] __futex_wait+0x19f/0x360 [ 430.069787][T15855] ? __pfx___futex_wait+0x10/0x10 [ 430.069807][T15855] ? __pfx_try_to_wake_up+0x10/0x10 [ 430.069826][T15855] ? futex_hash+0x311/0x400 [ 430.069861][T15855] ? __pfx_futex_wake_mark+0x10/0x10 [ 430.069890][T15855] ? find_held_lock+0x2b/0x80 [ 430.069905][T15855] ? futex_wake+0x4ea/0x5e0 [ 430.069925][T15855] futex_wait+0xe6/0x370 [ 430.069942][T15855] ? __pfx_futex_wait+0x10/0x10 [ 430.069962][T15855] ? do_raw_spin_lock+0x128/0x260 [ 430.069975][T15855] ? hrtimer_bases_first+0x1a0/0x210 [ 430.069992][T15855] do_futex+0x265/0x440 [ 430.070007][T15855] ? __pfx_do_futex+0x10/0x10 [ 430.070021][T15855] ? __pfx_sched_clock_cpu+0x10/0x10 [ 430.070038][T15855] ? find_held_lock+0x2b/0x80 [ 430.070054][T15855] __ia32_sys_futex_time32+0x2f4/0x470 [ 430.070071][T15855] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 430.070086][T15855] ? handle_softirqs+0x7ee/0x9d0 [ 430.070108][T15855] __do_fast_syscall_32+0x13a/0x8b0 [ 430.070126][T15855] do_fast_syscall_32+0x32/0x70 [ 430.070139][T15855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.070155][T15855] RIP: 0023:0xf7f03fec [ 430.070169][T15855] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 430.070175][T15855] RSP: 002b:00000000f53b65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 430.070187][T15855] RAX: ffffffffffffffda RBX: 00000000f73c4f88 RCX: 0000000000000080 [ 430.070195][T15855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73c4f8c [ 430.070202][T15855] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 430.070209][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.070216][T15855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.070231][T15855] [ 430.228213][T15679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.240279][T15679] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.243315][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.243388][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.250882][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.250932][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.304461][T15879] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3582'. [ 430.360283][T15890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3585'. [ 430.384921][T15679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.473181][T15679] veth0_vlan: entered promiscuous mode [ 430.476017][T15914] ceph: Bad value for 'source' [ 430.482745][T15679] veth1_vlan: entered promiscuous mode [ 430.509077][T15679] veth0_macvtap: entered promiscuous mode [ 430.519606][T15679] veth1_macvtap: entered promiscuous mode [ 430.539265][T15679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.545262][T15679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.576677][ T7467] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.610456][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.610476][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.615868][ T5814] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.628737][ T7467] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.629220][ T7467] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.658685][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.658705][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.751657][T15931] syzkaller0: entered promiscuous mode [ 430.751672][T15931] syzkaller0: entered allmulticast mode [ 430.934404][T15945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 430.941052][T15947] overlayfs: overlapping lowerdir path [ 431.183791][T15953] md: md4 stopped. [ 431.416353][ T5745] Bluetooth: hci0: command tx timeout [ 431.418544][T15964] syzkaller0: entered promiscuous mode [ 431.418558][T15964] syzkaller0: entered allmulticast mode [ 431.676977][T15982] md: array md4 already has disks! [ 431.726467][T15982] md: could not open device unknown-block(1,9). [ 431.726553][T15982] md: error, md_import_device() returned -16 [ 431.754894][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3625'. [ 431.824244][T15999] overlayfs: overlapping lowerdir path [ 431.895951][T16008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.906100][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3632'. [ 431.928430][T16012] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 432.051860][T16008] block device autoloading is deprecated and will be removed. [ 432.134704][T16008] md: pers->run() failed ... [ 432.174232][T16019] block device autoloading is deprecated and will be removed. [ 432.175592][T16030] md: md8 stopped. [ 432.191923][ T9] [ 432.192984][ T9] ====================================================== [ 432.195920][ T9] WARNING: possible circular locking dependency detected [ 432.198675][ T9] syzkaller #0 Tainted: G L [ 432.201406][ T9] ------------------------------------------------------ [ 432.203733][ T9] kworker/0:0/9 is trying to acquire lock: [ 432.205568][ T9] ffff88806d5780f8 (kn->active#97){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 432.208971][ T9] [ 432.208971][ T9] but task is already holding lock: [ 432.212005][ T9] ffffc900001b7d08 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 432.216594][ T9] [ 432.216594][ T9] which lock already depends on the new lock. [ 432.216594][ T9] [ 432.220820][ T9] [ 432.220820][ T9] the existing dependency chain (in reverse order) is: [ 432.224511][ T9] [ 432.224511][ T9] -> #4 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}: [ 432.228375][ T9] lock_acquire+0x1d1/0x380 [ 432.230524][ T9] process_one_work+0xa32/0x1b10 [ 432.232797][ T9] worker_thread+0x5ef/0xe50 [ 432.234936][ T9] kthread+0x373/0x450 [ 432.236872][ T9] ret_from_fork+0x730/0xd60 [ 432.239021][ T9] ret_from_fork_asm+0x1a/0x30 [ 432.241241][ T9] [ 432.241241][ T9] -> #3 ((wq_completion)md_misc){+.+.}-{0:0}: [ 432.244672][ T9] lock_acquire+0x1d1/0x380 [ 432.244689][T16038] fuse: Bad value for 'fd' [ 432.248578][ T9] touch_wq_lockdep_map+0xad/0x1c0 [ 432.250362][ T9] __flush_workqueue+0x131/0x1200 [ 432.252070][ T9] md_alloc+0x30/0x10a0 [ 432.253579][ T9] md_probe+0x73/0xf0 [ 432.255452][ T9] blk_probe_dev+0x149/0x1e0 [ 432.257584][ T9] blk_request_module+0x16/0xc0 [ 432.259742][ T9] blkdev_get_no_open+0x9b/0xf0 [ 432.261996][ T9] blkdev_open+0x141/0x4f0 [ 432.264079][ T9] do_dentry_open+0x674/0x1470 [ 432.266325][ T9] vfs_open_consume+0xcc/0x460 [ 432.268516][ T9] path_openat+0x1551/0x2430 [ 432.270625][ T9] do_file_open+0x20e/0x430 [ 432.273152][ T9] do_sys_openat2+0x163/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.275387][ T9] __ia32_compat_sys_openat+0x12d/0x210 [ 432.278014][ T9] __do_fast_syscall_32+0x13a/0x8b0 [ 432.280328][ T9] do_fast_syscall_32+0x32/0x70 [ 432.282579][ T9] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.285417][ T9] [ 432.285417][ T9] -> #2 (major_names_lock){+.+.}-{4:4}: [ 432.288648][ T9] lock_acquire+0x1d1/0x380 [ 432.290785][ T9] __mutex_lock+0x1a4/0x1c20 [ 432.292929][ T9] blk_probe_dev+0x28/0x1e0 [ 432.295060][ T9] blk_request_module+0x16/0xc0 [ 432.297327][ T9] blkdev_get_no_open+0x9b/0xf0 [ 432.299531][ T9] bdev_file_open_by_dev+0x70/0x210 [ 432.301934][ T9] md_import_device+0x120/0x360 [ 432.304177][ T9] new_dev_store+0x423/0x8d0 [ 432.306355][ T9] md_attr_store+0x1c5/0x330 [ 432.308514][ T9] sysfs_kf_write+0xf2/0x150 [ 432.310692][ T9] kernfs_fop_write_iter+0x3e0/0x5f0 [ 432.312639][ T9] vfs_write+0x6af/0x1050 [ 432.314515][ T9] ksys_write+0x12a/0x250 [ 432.316548][ T9] __do_fast_syscall_32+0x13a/0x8b0 [ 432.318933][ T9] do_fast_syscall_32+0x32/0x70 [ 432.321136][ T9] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.323947][ T9] [ 432.323947][ T9] -> #1 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 432.327363][ T9] lock_acquire+0x1d1/0x380 [ 432.329494][ T9] __mutex_lock+0x1a4/0x1c20 [ 432.331660][ T9] array_state_store+0x174/0xcf0 [ 432.333949][ T9] md_attr_store+0x1c5/0x330 [ 432.336131][ T9] sysfs_kf_write+0xf2/0x150 [ 432.338292][ T9] kernfs_fop_write_iter+0x3e0/0x5f0 [ 432.340698][ T9] vfs_write+0x6af/0x1050 [ 432.342760][ T9] ksys_write+0x12a/0x250 [ 432.344839][ T9] __do_fast_syscall_32+0x13a/0x8b0 [ 432.347243][ T9] do_fast_syscall_32+0x32/0x70 [ 432.349496][ T9] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.352319][ T9] [ 432.352319][ T9] -> #0 (kn->active#97){++++}-{0:0}: [ 432.355471][ T9] check_prev_add+0xeb/0xe60 [ 432.357619][ T9] __lock_acquire+0x1528/0x1f40 [ 432.359907][ T9] lock_acquire+0x1d1/0x380 [ 432.361992][ T9] kernfs_drain+0x4f0/0x600 [ 432.363562][ T9] __kernfs_remove+0x34c/0xbc0 [ 432.365223][ T9] kernfs_remove_by_name_ns+0x7c/0x120 [ 432.367122][ T9] remove_files+0x96/0x1c0 [ 432.368671][ T9] sysfs_remove_group+0x8b/0x1b0 [ 432.370420][ T9] sysfs_remove_groups+0x60/0xb0 [ 432.372256][ T9] __kobject_del+0x89/0x220 [ 432.374384][ T9] kobject_put+0x348/0x640 [ 432.376460][ T9] process_one_work+0xac7/0x1b10 [ 432.378755][ T9] worker_thread+0x5ef/0xe50 [ 432.380888][ T9] kthread+0x373/0x450 [ 432.382851][ T9] ret_from_fork+0x730/0xd60 [ 432.385025][ T9] ret_from_fork_asm+0x1a/0x30 [ 432.386981][ T9] [ 432.386981][ T9] other info that might help us debug this: [ 432.386981][ T9] [ 432.390932][ T9] Chain exists of: [ 432.390932][ T9] kn->active#97 --> (wq_completion)md_misc --> (work_completion)(&mddev->del_work) [ 432.390932][ T9] [ 432.397182][ T9] Possible unsafe locking scenario: [ 432.397182][ T9] [ 432.400271][ T9] CPU0 CPU1 [ 432.402372][ T9] ---- ---- [ 432.404032][ T9] lock((work_completion)(&mddev->del_work)); [ 432.405980][ T9] lock((wq_completion)md_misc); [ 432.408303][ T9] lock((work_completion)(&mddev->del_work)); [ 432.410975][ T9] lock(kn->active#97); [ 432.412326][ T9] [ 432.412326][ T9] *** DEADLOCK *** [ 432.412326][ T9] [ 432.414864][ T9] locks held by kworker/0:0/9: 2, last CPU#0: [ 432.416757][ T9] #0: ffff888022dee540 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 432.419997][ T9] #1: ffffc900001b7d08 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 432.423536][ T9] [ 432.423536][ T9] stack backtrace: [ 432.425386][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.428528][ T9] Tainted: [L]=SOFTLOCKUP [ 432.429863][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 432.432954][ T9] Workqueue: md_misc mddev_delayed_delete [ 432.434786][ T9] Call Trace: [ 432.435839][ T9] [ 432.436774][ T9] dump_stack_lvl+0x100/0x190 [ 432.438256][ T9] print_circular_bug.cold+0x178/0x1be [ 432.439954][ T9] check_noncircular+0x146/0x160 [ 432.441492][ T9] ? __pfx_stack_trace_save+0x10/0x10 [ 432.443180][ T9] check_prev_add+0xeb/0xe60 [ 432.444649][ T9] ? __lock_acquire+0x5c0/0x1f40 [ 432.446199][ T9] __lock_acquire+0x1528/0x1f40 [ 432.447726][ T9] lock_acquire+0x1d1/0x380 [ 432.449167][ T9] ? __kernfs_remove+0x34c/0xbc0 [ 432.450730][ T9] ? kernfs_drain+0x4c7/0x600 [ 432.452201][ T9] kernfs_drain+0x4f0/0x600 [ 432.453636][ T9] ? __kernfs_remove+0x34c/0xbc0 [ 432.455221][ T9] ? __pfx_kernfs_drain+0x10/0x10 [ 432.456792][ T9] ? find_held_lock+0x2b/0x80 [ 432.458264][ T9] ? __kernfs_remove+0x224/0xbc0 [ 432.459837][ T9] ? __kernfs_remove+0x224/0xbc0 [ 432.461390][ T9] ? up_write+0x2dc/0x5b0 [ 432.462762][ T9] __kernfs_remove+0x34c/0xbc0 [ 432.464268][ T9] kernfs_remove_by_name_ns+0x7c/0x120 [ 432.466007][ T9] remove_files+0x96/0x1c0 [ 432.467424][ T9] sysfs_remove_group+0x8b/0x1b0 [ 432.468993][ T9] sysfs_remove_groups+0x60/0xb0 [ 432.470567][ T9] __kobject_del+0x89/0x220 [ 432.472002][ T9] kobject_put+0x348/0x640 [ 432.473422][ T9] process_one_work+0xac7/0x1b10 [ 432.474991][ T9] ? __pfx_process_one_work+0x10/0x10 [ 432.476655][ T9] ? lock_acquire+0x1d1/0x380 [ 432.478152][ T9] ? __pfx_mddev_delayed_delete+0x10/0x10 [ 432.479932][ T9] worker_thread+0x5ef/0xe50 [ 432.481392][ T9] ? kthread+0x13a/0x450 [ 432.482735][ T9] ? __pfx_worker_thread+0x10/0x10 [ 432.484335][ T9] kthread+0x373/0x450 [ 432.485627][ T9] ? __pfx_kthread+0x10/0x10 [ 432.487093][ T9] ret_from_fork+0x730/0xd60 [ 432.488551][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 432.490157][ T9] ? __switch_to+0x800/0x10f0 [ 432.491636][ T9] ? __pfx_kthread+0x10/0x10 [ 432.493086][ T9] ret_from_fork_asm+0x1a/0x30 [ 432.494653][ T9] [ 432.533669][ T1] EXT4-fs error: 36 callbacks suppressed [ 432.533681][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.533906][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.534079][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.534224][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.534389][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.534547][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.534800][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.537505][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.537678][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.537952][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 432.643432][T12814] tipc: Resetting bearer [ 432.645428][T12814] tipc: Disabling bearer [ 432.795267][ T8453] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.880919][ T8453] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.929610][ T8453] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.048996][ T8453] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.103621][ T8453] bridge_slave_1: left allmulticast mode [ 433.103637][ T8453] bridge_slave_1: left promiscuous mode [ 433.103749][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.106215][ T8453] bridge_slave_0: left allmulticast mode [ 433.106228][ T8453] bridge_slave_0: left promiscuous mode [ 433.106330][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.153793][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.155224][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.159302][ T8453] bond0 (unregistering): Released all slaves [ 433.186793][ T5451] 8021q: adding VLAN 0 to HW filter on device eth22 [ 433.223710][ T5451] 8021q: adding VLAN 0 to HW filter on device eth24 [ 433.245569][ T5451] 8021q: adding VLAN 0 to HW filter on device eth25 [ 433.271432][ T5451] 8021q: adding VLAN 0 to HW filter on device eth23 [ 433.469017][ T8453] hsr_slave_0: left promiscuous mode [ 433.469299][ T8453] hsr_slave_1: left promiscuous mode [ 433.469609][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.469622][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.469978][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.469990][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.472172][ T8453] veth1_macvtap: left promiscuous mode [ 433.472201][ T8453] veth0_macvtap: left promiscuous mode [ 433.472252][ T8453] veth1_vlan: left promiscuous mode [ 433.472293][ T8453] veth0_vlan: left promiscuous mode [ 433.543501][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 433.545313][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 433.840648][ T8453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.900479][ T8453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.040047][ T8453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.090245][ T8453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.143387][ T8453] bridge_slave_1: left allmulticast mode [ 434.143404][ T8453] bridge_slave_1: left promiscuous mode [ 434.143515][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.144408][ T8453] bridge_slave_0: left allmulticast mode [ 434.144468][ T8453] bridge_slave_0: left promiscuous mode [ 434.144529][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.194038][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.195358][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.197791][ T8453] bond0 (unregistering): Released all slaves [ 434.225412][ T5451] 8021q: adding VLAN 0 to HW filter on device eth26 [ 434.246519][ T5451] 8021q: adding VLAN 0 to HW filter on device eth27 [ 434.254375][ T8453] : left promiscuous mode [ 434.288910][ T5451] 8021q: adding VLAN 0 to HW filter on device eth28 [ 434.326648][ T8453] tipc: Left network mode [ 434.333924][ T5451] 8021q: adding VLAN 0 to HW filter on device eth29 [ 434.548377][ T8453] hsr_slave_0: left promiscuous mode [ 434.548827][ T8453] hsr_slave_1: left promiscuous mode [ 434.549240][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.549255][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.549765][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.549779][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.552583][ T8453] veth1_macvtap: left promiscuous mode [ 434.552623][ T8453] veth0_macvtap: left promiscuous mode [ 434.552703][ T8453] veth1_vlan: left promiscuous mode [ 434.552761][ T8453] veth0_vlan: left promiscuous mode [ 434.658750][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 434.661546][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 434.989667][ T8453] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.050086][ T8453] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.079590][ T8453] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.151611][ T8453] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.215047][ T8453] bridge_slave_1: left allmulticast mode [ 435.215064][ T8453] bridge_slave_1: left promiscuous mode [ 435.215132][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.218206][ T8453] bridge_slave_0: left allmulticast mode [ 435.218219][ T8453] bridge_slave_0: left promiscuous mode [ 435.218301][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.259460][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.260699][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.261267][ T8453] bond0 (unregistering): Released all slaves [ 435.283731][ T5451] 8021q: adding VLAN 0 to HW filter on device eth30 [ 435.312917][ T5451] 8021q: adding VLAN 0 to HW filter on device eth31 [ 435.338113][ T5451] 8021q: adding VLAN 0 to HW filter on device eth32 [ 435.359978][ T5451] 8021q: adding VLAN 0 to HW filter on device eth33 [ 435.518399][ T8453] hsr_slave_0: left promiscuous mode [ 435.518699][ T8453] hsr_slave_1: left promiscuous mode [ 435.518919][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.518929][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.519352][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.519360][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.520964][ T8453] veth1_macvtap: left promiscuous mode [ 435.520986][ T8453] veth0_macvtap: left promiscuous mode [ 435.521019][ T8453] veth1_vlan: left promiscuous mode [ 435.521051][ T8453] veth0_vlan: left promiscuous mode [ 435.575477][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 435.580460][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 438.240426][T16114] EXT4-fs error: 94 callbacks suppressed [ 438.240445][T16114] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 438.671579][T16115] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 439.736865][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.736912][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.820923][T16121] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid [ 439.866206][T16123] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1121: comm dhcpcd-run-hook: iget: checksum invalid