last executing test programs: 1.383518336s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x3, 0x34, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000680)=0x2000000, &(0x7f00000006c0)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000740)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f00000007c0)={'bridge0\x00', @broadcast}) 1.195998442s ago: executing program 3 (id=4): sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/140, 0x8c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x801) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x5e8}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.161912048s ago: executing program 2 (id=3): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.009731725s ago: executing program 2 (id=5): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000600)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000640)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000200)={0x200001fe0000}) fchown(r4, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x402) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2}}, 0x20) 957.619689ms ago: executing program 3 (id=6): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) 292.149888ms ago: executing program 0 (id=10): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000b440)={0x1, &(0x7f000000b480)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000b80)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000c00)=0x2000000) write$tun(r1, &(0x7f0000000c40)={@val={0x0, 0x88b5}, @void, @llc={@snap={0xaa, 0x1, ')', "981473", 0x809b, "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"}}}, 0xfe1d) write$uinput_user_dev(r1, &(0x7f0000000e40)={'syz1\x00', {0xeb, 0x5, 0x3, 0x9}, 0x1, [0xbc2e, 0x7, 0x8, 0xfffff9df, 0x0, 0x5, 0xffffffff, 0x1ff, 0x2, 0xffff, 0xa076, 0x8, 0x8, 0x4, 0x7ff, 0x8001, 0x4, 0xc3b, 0x2, 0x1000, 0x2d, 0x4, 0x3, 0x4, 0x3d8, 0x5, 0x3, 0xb, 0x3, 0x6f6, 0x1ff, 0x6, 0x6f8e, 0x1ff, 0x1ff, 0x6, 0x6, 0x6, 0xc71, 0x40, 0x4, 0x8, 0x338000, 0x2, 0xd, 0x9, 0x2, 0x8, 0x7, 0x0, 0x0, 0x4e770b95, 0x6, 0xfffffffa, 0x500, 0x4, 0x4, 0x885, 0x8, 0x3cafad58, 0x9, 0x8, 0xa5, 0xa], [0x7fff, 0x0, 0xf, 0x61, 0x0, 0x5, 0x9, 0x760e596f, 0x6, 0x1, 0x8d, 0x6, 0x7, 0xff, 0x1000, 0x8, 0xfffffff8, 0x8, 0x9, 0x2, 0x6, 0x3, 0x8c, 0x8, 0x7, 0x7, 0x5, 0x7ff, 0x68, 0x7, 0xfffffff0, 0x1, 0x7, 0xde10, 0x80, 0x1, 0x8, 0x5, 0x4, 0x5, 0x696, 0x2, 0x101, 0x8, 0xa86, 0x0, 0x601, 0xfffffff7, 0x200, 0x7, 0x3, 0x9, 0xa0d9, 0x70, 0x0, 0x7c, 0x9, 0x0, 0x8, 0x8, 0x200, 0xffffff5f, 0x0, 0xc0c1], [0x8000, 0x4, 0x10001, 0x7, 0x2, 0x0, 0xfffffffc, 0x8, 0x4, 0x5, 0x2, 0x9, 0x4, 0x2, 0x1ad09c2e, 0x0, 0x80, 0x1, 0x7, 0x7, 0x10001, 0x80000001, 0xd, 0x6, 0x2, 0x4, 0x10001, 0x200, 0x853, 0x3be9, 0x1, 0x7, 0x5, 0x3, 0x8, 0x80000001, 0x1, 0x4, 0x2, 0xfffffffe, 0x2, 0x0, 0xb, 0x3, 0x72, 0x0, 0x50, 0xb, 0x2, 0x7fffffff, 0x5, 0x6, 0x800, 0x48f686fd, 0x4, 0xf, 0xff, 0x7, 0xfffff4ef, 0xaa7d, 0x972a, 0x7, 0xf, 0xc9], [0x4, 0x7, 0x8001, 0x7ff, 0x80000000, 0x7, 0x3, 0x1, 0x9, 0x6, 0x0, 0xbf, 0x7fff, 0x8, 0x5654, 0x4, 0x40008, 0x400, 0xfffffffa, 0x6, 0x8, 0x1, 0x7fff, 0x0, 0xc15c, 0x5, 0x2, 0x8, 0x3, 0x3, 0x2, 0x400, 0xffffff62, 0x7, 0x8, 0x1, 0x3, 0x80000002, 0x1, 0x4, 0x4b2, 0x401, 0x9, 0xffffffff, 0xc767, 0x0, 0x1, 0x7ae, 0x1, 0xd, 0x0, 0xc000000, 0x2, 0x1, 0xffff, 0x5, 0xfffffffd, 0x7, 0xe835, 0x80000001, 0x8, 0x8, 0x300, 0x2]}, 0x45c) close_range(r0, 0xffffffffffffffff, 0x0) 291.814132ms ago: executing program 0 (id=11): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x1, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0xffff, @private1}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) 285.603107ms ago: executing program 2 (id=12): r0 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, 0x0, &(0x7f0000000340)) 220.063353ms ago: executing program 0 (id=13): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 219.802329ms ago: executing program 2 (id=14): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)=""/4133, 0x1025}, {&(0x7f0000001a80)=""/4078, 0xfee}, {&(0x7f0000002a80)=""/4161, 0x1041}, {&(0x7f0000003b00)=""/183, 0xb7}], 0x4}, 0x12100) 219.259987ms ago: executing program 0 (id=15): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='X', 0xfee4, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) 110.158964ms ago: executing program 0 (id=16): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000002cc0)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) pipe2(&(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffffffe, 0x2) 109.994092ms ago: executing program 0 (id=17): sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/140, 0x8c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x801) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x5e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x200000000003b9a, 0x5, 0x2, 0x3, 0x2, 0x0, [{0x7f, 0x5cf, 0x10001, '\x00', 0x2000}, {0x0, 0x7f, 0x586, '\x00', 0x40a}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=18): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r1, &(0x7f00000001c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26507' (ED25519) to the list of known hosts. [ 33.310555][ T5698] cgroup: Unknown subsys name 'net' [ 33.421617][ T5698] cgroup: Unknown subsys name 'cpuset' [ 33.427875][ T5698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.391413][ T5698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.010161][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.011016][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.023524][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.023960][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.024230][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.024754][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.025371][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.025372][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.026315][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.026432][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.027186][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.028125][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.028147][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.028428][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.029482][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.029934][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.029975][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.030288][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.030758][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.032669][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.246616][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.255328][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.258990][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.259834][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.262524][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.265067][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.372030][ T5790] infiniband rxe0: set active [ 38.373007][ T5790] infiniband rxe0: added rxe_eth0 [ 38.382745][ T859] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.384472][ T5790] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 38.384494][ T5790] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 38.384516][ T5790] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 38.400409][ T5790] RDS/IB: rxe0: added [ 38.400518][ T5790] smc: adding ib device rxe0 with port count 1 [ 38.401370][ T5790] smc: ib device rxe0 port 1 has no pnetid [ 38.417283][ T1225] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.432929][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.540293][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.621425][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.621860][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.621931][ T5782] bridge_slave_0: entered allmulticast mode [ 38.622781][ T5782] bridge_slave_0: entered promiscuous mode [ 38.648288][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.648333][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.648385][ T5782] bridge_slave_1: entered allmulticast mode [ 38.649635][ T5782] bridge_slave_1: entered promiscuous mode [ 38.661221][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.661391][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.661462][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.661519][ T5792] bridge_slave_0: entered allmulticast mode [ 38.662232][ T5792] bridge_slave_0: entered promiscuous mode [ 38.674321][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.674363][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.674414][ T5792] bridge_slave_1: entered allmulticast mode [ 38.675594][ T5792] bridge_slave_1: entered promiscuous mode [ 38.678254][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.679870][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.679945][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.679984][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.680035][ T5783] bridge_slave_0: entered allmulticast mode [ 38.680745][ T5783] bridge_slave_0: entered promiscuous mode [ 38.681921][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.681960][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.682012][ T5783] bridge_slave_1: entered allmulticast mode [ 38.683044][ T5783] bridge_slave_1: entered promiscuous mode [ 38.713839][ T5782] team0: Port device team_slave_0 added [ 38.721746][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.722624][ T5782] team0: Port device team_slave_1 added [ 38.732385][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.733686][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.734642][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.749194][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.749205][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.749219][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.761985][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.762004][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.762025][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.769353][ T5783] team0: Port device team_slave_0 added [ 38.770253][ T5792] team0: Port device team_slave_0 added [ 38.775844][ T5783] team0: Port device team_slave_1 added [ 38.777514][ T5792] team0: Port device team_slave_1 added [ 38.817079][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.817091][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.817105][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.821113][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.821122][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.821136][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.825667][ T5782] hsr_slave_0: entered promiscuous mode [ 38.826134][ T5782] hsr_slave_1: entered promiscuous mode [ 38.827685][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.827693][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.827707][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.838184][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.843285][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.843295][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.843309][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.907714][ T5783] hsr_slave_0: entered promiscuous mode [ 38.908218][ T5783] hsr_slave_1: entered promiscuous mode [ 38.908518][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 38.908527][ T5783] Cannot create hsr debugfs directory [ 38.913839][ T5792] hsr_slave_0: entered promiscuous mode [ 38.914274][ T5792] hsr_slave_1: entered promiscuous mode [ 38.914617][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 38.914626][ T5792] Cannot create hsr debugfs directory [ 39.152473][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.158043][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.158518][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.162994][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.163605][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.169286][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.169728][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.172206][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.218748][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.218799][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.219023][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.219070][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.223333][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.226620][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.232430][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.235172][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.244583][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.248034][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.265984][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.268220][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.336586][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.336662][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.336816][ T5790] bridge_slave_0: entered allmulticast mode [ 39.338023][ T5790] bridge_slave_0: entered promiscuous mode [ 39.339855][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.339899][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.339974][ T5790] bridge_slave_1: entered allmulticast mode [ 39.340675][ T5790] bridge_slave_1: entered promiscuous mode [ 39.348112][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.358421][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.359167][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.361379][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.361956][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.364693][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.376220][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.381858][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.384684][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.388092][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.389381][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.389427][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.389689][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.389779][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.415680][ T5790] team0: Port device team_slave_0 added [ 39.419197][ T5790] team0: Port device team_slave_1 added [ 39.441615][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.441627][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.441640][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.451532][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.451547][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.451568][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.477165][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.477274][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.477429][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.477474][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.517135][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.522420][ T5790] hsr_slave_0: entered promiscuous mode [ 39.523144][ T5790] hsr_slave_1: entered promiscuous mode [ 39.523669][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 39.523681][ T5790] Cannot create hsr debugfs directory [ 39.537002][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.539827][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.541415][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.542185][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.543429][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.544979][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.604383][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.626193][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.626320][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.638800][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.642511][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.642614][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.715399][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.728233][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.728297][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.744107][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.750326][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.750374][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.788649][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.794186][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.799655][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.805094][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.812639][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.814668][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.819988][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.820434][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.824102][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.849633][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.849722][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.865534][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.865582][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.948137][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.956597][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.969304][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.969353][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.972732][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.972776][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.077992][ T5146] Bluetooth: hci2: command tx timeout [ 40.078198][ T5788] Bluetooth: hci3: command tx timeout [ 40.078207][ T5146] Bluetooth: hci1: command tx timeout [ 40.078483][ T5788] Bluetooth: hci0: command tx timeout [ 40.126516][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.161777][ T5782] veth0_vlan: entered promiscuous mode [ 40.165810][ T5782] veth1_vlan: entered promiscuous mode [ 40.190573][ T5782] veth0_macvtap: entered promiscuous mode [ 40.195853][ T5782] veth1_macvtap: entered promiscuous mode [ 40.203111][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.211410][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.214595][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.241211][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.276883][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.280229][ T5783] veth0_vlan: entered promiscuous mode [ 40.304018][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.304054][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.314907][ T5783] veth1_vlan: entered promiscuous mode [ 40.332948][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.332962][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.333620][ T5792] veth0_vlan: entered promiscuous mode [ 40.344973][ T5790] veth0_vlan: entered promiscuous mode [ 40.356896][ T5792] veth1_vlan: entered promiscuous mode [ 40.357920][ T5790] veth1_vlan: entered promiscuous mode [ 40.372801][ T5783] veth0_macvtap: entered promiscuous mode [ 40.382871][ T5783] veth1_macvtap: entered promiscuous mode [ 40.396597][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.410702][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.420083][ T5792] veth0_macvtap: entered promiscuous mode [ 40.425377][ T5790] veth0_macvtap: entered promiscuous mode [ 40.429302][ T5792] veth1_macvtap: entered promiscuous mode [ 40.439167][ T5790] veth1_macvtap: entered promiscuous mode [ 40.450611][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.454073][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.468485][ T5657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.468636][ T5657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.468665][ T5657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.477322][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.479141][ T5782] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.479826][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.485763][ T5782] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.486649][ T5782] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.491437][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.514216][ T5782] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.514949][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.514965][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.527561][ T5886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.527599][ T5886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.527628][ T5886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.546085][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.546098][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.614094][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.614110][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.647911][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.647950][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.647977][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650332][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650359][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650379][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650398][ T5934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650417][ T5934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650436][ T5934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.650455][ T5934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.669132][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.669146][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.699892][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.699913][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.793099][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.793120][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.925203][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.925758][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.926530][ T5948] bridge0: entered allmulticast mode [ 40.933558][ T5948] bridge_slave_1: left allmulticast mode [ 40.933577][ T5948] bridge_slave_1: left promiscuous mode [ 40.934179][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.952098][ T5948] bridge_slave_0: left allmulticast mode [ 40.952115][ T5948] bridge_slave_0: left promiscuous mode [ 40.952625][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.718459][ T5966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 41.718884][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718910][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718923][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718935][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718947][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718959][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718971][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718983][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.718995][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.719007][ T11] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 41.720447][ T5966] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 41.726363][ T11] hid-generic 0005:4C4A:4155.0002: hidraw1: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 41.738688][ T5966] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 41.753817][ T5966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 41.753970][ T5966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 41.765287][ T5966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 41.771508][ T5966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 41.771893][ T5966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 41.782164][ T5966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 41.785891][ T5966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 41.786090][ T5966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 41.805818][ T5966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 41.828610][ T5969] fido_id[5969]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/report_descriptor': No such file or directory [ 42.212073][ T5990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.212119][ T5990] block device autoloading is deprecated and will be removed. [ 42.233371][ T5991] netlink: 4 bytes leftov ** replaying previous printk message ** [ 42.233371][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 42.238410][ T5990] [ 42.244094][ T5990] ====================================================== [ 42.246731][ T5990] WARNING: possible circular locking dependency detected [ 42.249376][ T5990] syzkaller #0 Not tainted [ 42.251222][ T5990] ------------------------------------------------------ [ 42.253851][ T5990] syz.3.18/5990 is trying to acquire lock: [ 42.256017][ T5990] ffffffff90be7160 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 42.259446][ T5990] [ 42.259446][ T5990] but task is already holding lock: [ 42.262370][ T5990] ffff88804e706358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 42.266046][ T5990] [ 42.266046][ T5990] which lock already depends on the new lock. [ 42.266046][ T5990] [ 42.270084][ T5990] [ 42.270084][ T5990] the existing dependency chain (in reverse order) is: [ 42.273611][ T5990] [ 42.273611][ T5990] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 42.276768][ T5990] lock_acquire+0x1d1/0x380 [ 42.278742][ T5990] __mutex_lock+0x19f/0x1c10 [ 42.280773][ T5990] md_alloc+0x3d0/0x10c0 [ 42.282481][ T5990] md_probe+0x73/0xf0 [ 42.283858][ T5990] blk_probe_dev+0x149/0x1e0 [ 42.285460][ T5990] blk_request_module+0x16/0xc0 [ 42.287093][ T5990] blkdev_get_no_open+0x9b/0xf0 [ 42.288690][ T5990] blkdev_open+0x141/0x4f0 [ 42.290385][ T5990] do_dentry_open+0x674/0x1470 [ 42.292452][ T5990] vfs_open_consume+0xcc/0x460 [ 42.294278][ T5990] path_openat+0x1547/0x23f0 [ 42.296262][ T5990] do_file_open+0x20e/0x430 [ 42.298226][ T5990] do_sys_openat2+0x163/0x1d0 [ 42.300256][ T5990] __ia32_compat_sys_openat+0x12d/0x210 [ 42.302461][ T5990] __do_fast_syscall_32+0x14d/0x8e0 [ 42.304174][ T5990] do_fast_syscall_32+0x32/0x70 [ 42.305800][ T5990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.307774][ T5990] [ 42.307774][ T5990] -> #1 (disks_mutex){+.+.}-{4:4}: [ 42.310051][ T5990] lock_acquire+0x1d1/0x380 [ 42.311571][ T5990] __mutex_lock+0x19f/0x1c10 [ 42.313182][ T5990] md_alloc+0x3e/0x10c0 [ 42.314643][ T5990] md_probe+0x73/0xf0 [ 42.316041][ T5990] blk_probe_dev+0x149/0x1e0 [ 42.317574][ T5990] blk_request_module+0x16/0xc0 [ 42.319496][ T5990] blkdev_get_no_open+0x9b/0xf0 [ 42.321561][ T5990] blkdev_open+0x141/0x4f0 [ 42.323485][ T5990] do_dentry_open+0x674/0x1470 [ 42.325461][ T5990] vfs_open_consume+0xcc/0x460 [ 42.327526][ T5990] path_openat+0x1547/0x23f0 [ 42.329542][ T5990] do_file_open+0x20e/0x430 [ 42.331519][ T5990] do_sys_openat2+0x163/0x1d0 [ 42.333566][ T5990] __ia32_compat_sys_openat+0x12d/0x210 [ 42.335915][ T5990] __do_fast_syscall_32+0x14d/0x8e0 [ 42.338128][ T5990] do_fast_syscall_32+0x32/0x70 [ 42.340187][ T5990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.342677][ T5990] [ 42.342677][ T5990] -> #0 (major_names_lock){+.+.}-{4:4}: [ 42.345473][ T5990] check_prev_add+0xeb/0xe60 [ 42.347442][ T5990] __lock_acquire+0x1528/0x1f40 [ 42.349490][ T5990] lock_acquire+0x1d1/0x380 [ 42.351459][ T5990] __mutex_lock+0x19f/0x1c10 [ 42.353455][ T5990] blk_probe_dev+0x28/0x1e0 [ 42.355397][ T5990] blk_request_module+0x16/0xc0 [ 42.357471][ T5990] blkdev_get_no_open+0x9b/0xf0 [ 42.359551][ T5990] bdev_file_open_by_dev+0x70/0x210 [ 42.361752][ T5990] md_import_device+0x120/0x360 [ 42.363411][ T5990] md_add_new_disk+0x4b6/0x1820 [ 42.365069][ T5990] md_ioctl+0x2c1d/0x3700 [ 42.366564][ T5990] compat_blkdev_ioctl+0x633/0x750 [ 42.368285][ T5990] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 42.370179][ T5990] __do_fast_syscall_32+0x14d/0x8e0 [ 42.371986][ T5990] do_fast_syscall_32+0x32/0x70 [ 42.373661][ T5990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.375797][ T5990] [ 42.375797][ T5990] other info that might help us debug this: [ 42.375797][ T5990] [ 42.379068][ T5990] Chain exists of: [ 42.379068][ T5990] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 42.379068][ T5990] [ 42.383253][ T5990] Possible unsafe locking scenario: [ 42.383253][ T5990] [ 42.385556][ T5990] CPU0 CPU1 [ 42.387179][ T5990] ---- ---- [ 42.388810][ T5990] lock(&mddev->reconfig_mutex); [ 42.390407][ T5990] lock(disks_mutex); [ 42.392468][ T5990] lock(&mddev->reconfig_mutex); [ 42.394816][ T5990] lock(major_names_lock); [ 42.396238][ T5990] [ 42.396238][ T5990] *** DEADLOCK *** [ 42.396238][ T5990] [ 42.398717][ T5990] locks held by syz.3.18/5990: 1, on CPU#0: [ 42.400551][ T5990] #0: ffff88804e706358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 42.403599][ T5990] [ 42.403599][ T5990] stack backtrace: [ 42.405443][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(full) [ 42.408223][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.411351][ T5990] Call Trace: [ 42.412430][ T5990] [ 42.413372][ T5990] dump_stack_lvl+0x100/0x190 [ 42.414853][ T5990] print_circular_bug.cold+0x178/0x1be [ 42.416552][ T5990] check_noncircular+0x146/0x160 [ 42.418116][ T5990] check_prev_add+0xeb/0xe60 [ 42.419562][ T5990] ? trace_mm_page_alloc+0x164/0x1c0 [ 42.421249][ T5990] __lock_acquire+0x1528/0x1f40 [ 42.422797][ T5990] lock_acquire+0x1d1/0x380 [ 42.424227][ T5990] ? blk_probe_dev+0x28/0x1e0 [ 42.425725][ T5990] ? __pfx___might_resched+0x10/0x10 [ 42.427374][ T5990] ? do_fast_syscall_32+0x32/0x70 [ 42.428955][ T5990] __mutex_lock+0x19f/0x1c10 [ 42.430464][ T5990] ? blk_probe_dev+0x28/0x1e0 [ 42.431956][ T5990] ? blk_probe_dev+0x28/0x1e0 [ 42.433442][ T5990] ? lock_acquire+0x1d1/0x380 [ 42.434919][ T5990] ? find_inode_fast+0xa5/0xa30 [ 42.436443][ T5990] ? find_held_lock+0x2b/0x80 [ 42.437932][ T5990] ? __pfx___mutex_lock+0x10/0x10 [ 42.439506][ T5990] ? find_inode_fast+0x1fa/0xa30 [ 42.441091][ T5990] ? blk_probe_dev+0x28/0x1e0 [ 42.442592][ T5990] blk_probe_dev+0x28/0x1e0 [ 42.444025][ T5990] blk_request_module+0x16/0xc0 [ 42.445557][ T5990] blkdev_get_no_open+0x9b/0xf0 [ 42.447069][ T5990] bdev_file_open_by_dev+0x70/0x210 [ 42.448658][ T5990] md_import_device+0x120/0x360 [ 42.450207][ T5990] md_add_new_disk+0x4b6/0x1820 [ 42.451742][ T5990] md_ioctl+0x2c1d/0x3700 [ 42.453122][ T5990] ? __pfx_md_ioctl+0x10/0x10 [ 42.454608][ T5990] ? do_vfs_ioctl+0x241/0x13f0 [ 42.456107][ T5990] ? __fget_files+0x34/0x3d0 [ 42.457559][ T5990] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.459399][ T5990] ? __pfx_md_compat_ioctl+0x10/0x10 [ 42.461077][ T5990] compat_blkdev_ioctl+0x633/0x750 [ 42.462698][ T5990] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 42.464450][ T5990] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 42.466247][ T5990] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 42.467951][ T5990] __do_fast_syscall_32+0x14d/0x8e0 [ 42.469589][ T5990] do_fast_syscall_32+0x32/0x70 [ 42.471141][ T5990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.473127][ T5990] RIP: 0023:0xf748efbc [ 42.474405][ T5990] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 42.480280][ T5990] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 42.482890][ T5990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040140921 [ 42.485342][ T5990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.487792][ T5990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.490262][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.492720][ T5990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.495174][ T5990] [ 42.498456][ T5990] FAULT_INJECTION: forcing a failure. [ 42.498456][ T5990] name failslab, interval 1, probability 0, space 0, times 1 [ 42.498474][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(full) [ 42.498488][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.498495][ T5990] Call Trace: [ 42.498498][ T5990] [ 42.498502][ T5990] dump_stack_lvl+0x100/0x190 [ 42.498524][ T5990] should_fail_ex.cold+0x5/0xa [ 42.498541][ T5990] should_failslab+0xc2/0x120 [ 42.498556][ T5990] __kmalloc_cache_noprof+0x91/0x6d0 [ 42.498573][ T5990] ? call_usermodehelper_setup+0xaf/0x360 [ 42.498591][ T5990] ? __pfx_free_modprobe_argv+0x10/0x10 [ 42.498609][ T5990] call_usermodehelper_setup+0xaf/0x360 [ 42.498628][ T5990] __request_module+0x3c7/0x6a0 [ 42.498644][ T5990] ? __pfx___request_module+0x10/0x10 [ 42.498661][ T5990] ? find_inode_fast+0x1fa/0xa30 [ 42.498683][ T5990] blk_request_module+0x5c/0xc0 [ 42.498696][ T5990] blkdev_get_no_open+0x9b/0xf0 [ 42.498712][ T5990] bdev_file_open_by_dev+0x70/0x210 [ 42.498728][ T5990] md_import_device+0x120/0x360 [ 42.498747][ T5990] md_add_new_disk+0x4b6/0x1820 [ 42.498764][ T5990] md_ioctl+0x2c1d/0x3700 [ 42.498780][ T5990] ? __pfx_md_ioctl+0x10/0x10 [ 42.498796][ T5990] ? do_vfs_ioctl+0x241/0x13f0 [ 42.498809][ T5990] ? __fget_files+0x34/0x3d0 [ 42.498822][ T5990] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.498838][ T5990] ? __pfx_md_compat_ioctl+0x10/0x10 [ 42.498854][ T5990] compat_blkdev_ioctl+0x633/0x750 [ 42.498882][ T5990] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 42.498901][ T5990] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 42.498919][ T5990] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 42.498931][ T5990] __do_fast_syscall_32+0x14d/0x8e0 [ 42.498953][ T5990] do_fast_syscall_32+0x32/0x70 [ 42.498971][ T5990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.498986][ T5990] RIP: 0023:0xf748efbc [ 42.498995][ T5990] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 42.499007][ T5990] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 42.499019][ T5990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040140921 [ 42.499026][ T5990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.499033][ T5990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.499039][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.499046][ T5990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.499056][ T5990] [ 42.499069][ T5990] md: could not open device unknown-block(0,0). [ 42.499089][ T5990] md: md_import_device returned -6 [ 43.767067][ T5796] Bluetooth: hci1: command 0x040f tx timeout [ 43.767100][ T5796] Bluetooth: hci0: command 0x040f tx timeout [ 43.847050][ T5796] Bluetooth: hci3: command 0x040f tx timeout [ 43.847084][ T5796] Bluetooth: hci2: command 0x040f tx timeout [ 45.837017][ T5788] Bluetooth: hci0: command 0x040f tx timeout [ 45.837487][ T5788] Bluetooth: hci1: command 0x040f tx timeout [ 45.917478][ T5788] Bluetooth: hci2: command 0x040f tx timeout [ 45.917512][ T5788] Bluetooth: hci3: command 0x040f tx timeout [ 47.916886][ T5796] Bluetooth: hci1: command 0x040f tx timeout [ 47.916918][ T5796] Bluetooth: hci0: command 0x040f tx timeout [ 47.996844][ T5796] Bluetooth: hci3: command 0x040f tx timeout [ 47.996875][ T5796] Bluetooth: hci2: command 0x040f tx timeout [ 49.505622][ T859] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.996917][ T5788] Bluetooth: hci0: command 0x040f tx timeout [ 49.996950][ T5788] Bluetooth: hci1: command 0x040f tx timeout [ 50.076831][ T5796] Bluetooth: hci2: command 0x040f tx timeout [ 50.076862][ T5796] Bluetooth: hci3: command 0x040f tx timeout [ 52.076872][ T5788] Bluetooth: hci1: command 0x040f tx timeout [ 52.076902][ T5788] Bluetooth: hci0: command 0x040f tx timeout [ 52.156803][ T5796] Bluetooth: hci3: command 0x040f tx timeout [ 52.156838][ T5788] Bluetooth: hci2: command 0x040f tx timeout