last executing test programs: 2.459858054s ago: executing program 3 (id=55): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0900a11e0901a1006d08950109309102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) 1.149148144s ago: executing program 2 (id=78): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, 0x8) 1.059485019s ago: executing program 2 (id=79): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 1.059353112s ago: executing program 2 (id=80): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x800) 1.020146873s ago: executing program 2 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x8, 0x7, 0x2c}, 0x7d}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000324c1020000ff8407c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 653.574876ms ago: executing program 3 (id=87): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 588.943304ms ago: executing program 3 (id=89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 520.391832ms ago: executing program 0 (id=90): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[], 0x29) 519.702808ms ago: executing program 3 (id=91): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, 0x8) 470.540495ms ago: executing program 0 (id=93): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 470.379231ms ago: executing program 3 (id=94): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) 470.159378ms ago: executing program 0 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(r0, &(0x7f0000000200)='./mnt/file0\x00', 0x1, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) close_range(r0, r1, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x400000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x800000) 467.484561ms ago: executing program 3 (id=96): syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x19, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 370.464414ms ago: executing program 0 (id=98): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x402, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x9) 319.387696ms ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/new_array\x00', 0x101081, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) 172.902333ms ago: executing program 1 (id=102): ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000240)) 164.938415ms ago: executing program 0 (id=103): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, 0x8) 146.230764ms ago: executing program 2 (id=104): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 142.85928ms ago: executing program 1 (id=105): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 78.854667ms ago: executing program 0 (id=106): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x3e) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) 78.484761ms ago: executing program 2 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) 78.358062ms ago: executing program 1 (id=108): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000b80)="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", 0x38f}, {&(0x7f0000002240)="c51f242683b88066430d481bd86b56b4ab7b2eb59a9a8a6fe0e268a66cb131ba376e44317fc1", 0x26}], 0x2}}], 0x2, 0x20040010) 459.893µs ago: executing program 1 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4010) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) 0s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x504, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000b80)="cb44032c2a3a51", 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x208, 0x509000) fcntl$dupfd(r2, 0x0, r2) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39655' (ED25519) to the list of known hosts. [ 41.933685][ T5722] cgroup: Unknown subsys name 'net' [ 42.019743][ T5722] cgroup: Unknown subsys name 'cpuset' [ 42.021704][ T5722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.056450][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.391351][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.393832][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.398483][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.398745][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.399026][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.402070][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.402187][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.402240][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.403065][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.403110][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.403189][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.403894][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.405148][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.407867][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.414387][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.419462][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.426924][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.428072][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.434499][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.437401][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.931356][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.931716][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.931777][ T5735] bridge_slave_0: entered allmulticast mode [ 47.932533][ T5735] bridge_slave_0: entered promiscuous mode [ 47.935043][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.935129][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.935190][ T5735] bridge_slave_1: entered allmulticast mode [ 47.935897][ T5735] bridge_slave_1: entered promiscuous mode [ 48.002252][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.051583][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.154124][ T5735] team0: Port device team_slave_0 added [ 48.154597][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.154674][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.154774][ T5733] bridge_slave_0: entered allmulticast mode [ 48.156247][ T5733] bridge_slave_0: entered promiscuous mode [ 48.169700][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.169816][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.169950][ T5745] bridge_slave_0: entered allmulticast mode [ 48.171381][ T5745] bridge_slave_0: entered promiscuous mode [ 48.174969][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.175044][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.175179][ T5734] bridge_slave_0: entered allmulticast mode [ 48.176575][ T5734] bridge_slave_0: entered promiscuous mode [ 48.179683][ T5735] team0: Port device team_slave_1 added [ 48.187299][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.187344][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.187410][ T5733] bridge_slave_1: entered allmulticast mode [ 48.188937][ T5733] bridge_slave_1: entered promiscuous mode [ 48.194912][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.194954][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.195005][ T5745] bridge_slave_1: entered allmulticast mode [ 48.195756][ T5745] bridge_slave_1: entered promiscuous mode [ 48.204376][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.204444][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.204537][ T5734] bridge_slave_1: entered allmulticast mode [ 48.205550][ T5734] bridge_slave_1: entered promiscuous mode [ 48.209431][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.233507][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.239597][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.239612][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.239639][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.264749][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.275345][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.275358][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.275376][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.278821][ T5733] team0: Port device team_slave_0 added [ 48.280086][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.281538][ T5733] team0: Port device team_slave_1 added [ 48.288026][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.303465][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.309790][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.309799][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.309812][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.322591][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.322602][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.322615][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.336361][ T5734] team0: Port device team_slave_0 added [ 48.351174][ T5745] team0: Port device team_slave_0 added [ 48.361398][ T5734] team0: Port device team_slave_1 added [ 48.375854][ T5745] team0: Port device team_slave_1 added [ 48.378762][ T5735] hsr_slave_0: entered promiscuous mode [ 48.379284][ T5735] hsr_slave_1: entered promiscuous mode [ 48.405226][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.405237][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.405249][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.409777][ T5733] hsr_slave_0: entered promiscuous mode [ 48.410516][ T5733] hsr_slave_1: entered promiscuous mode [ 48.411019][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.411082][ T5733] Cannot create hsr debugfs directory [ 48.423256][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.423268][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.423287][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.424207][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.424219][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.424239][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.425492][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.425503][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.425522][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.551904][ T5745] hsr_slave_0: entered promiscuous mode [ 48.552336][ T5745] hsr_slave_1: entered promiscuous mode [ 48.552626][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.552637][ T5745] Cannot create hsr debugfs directory [ 48.562486][ T5734] hsr_slave_0: entered promiscuous mode [ 48.562957][ T5734] hsr_slave_1: entered promiscuous mode [ 48.563250][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.563261][ T5734] Cannot create hsr debugfs directory [ 48.822853][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.832054][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.832518][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.839540][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.840589][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.846336][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.847632][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.853575][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.905181][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.913004][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.914771][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.920677][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.921548][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.925601][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.932372][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.935274][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.000405][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.004520][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.014745][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.019269][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.020953][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.026646][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.027436][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.032459][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.086973][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.091951][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.092496][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.094386][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.102653][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.106756][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.113098][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.114915][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.122799][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.159780][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.167575][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.172280][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.172378][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.188322][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.188368][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.194826][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.200217][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.200283][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.216938][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.216982][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.228915][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.266397][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.280408][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.281683][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.281750][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.304849][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.306801][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.306883][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.323957][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.324001][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.329274][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.329317][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.436218][ T5737] Bluetooth: hci2: command tx timeout [ 49.436355][ T5737] Bluetooth: hci1: command tx timeout [ 49.507800][ T5741] Bluetooth: hci3: command tx timeout [ 49.508440][ T5741] Bluetooth: hci0: command tx timeout [ 49.586437][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.596344][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.621456][ T5733] veth0_vlan: entered promiscuous mode [ 49.630457][ T5733] veth1_vlan: entered promiscuous mode [ 49.633484][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.648976][ T5735] veth0_vlan: entered promiscuous mode [ 49.652302][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.671215][ T5735] veth1_vlan: entered promiscuous mode [ 49.688874][ T5733] veth0_macvtap: entered promiscuous mode [ 49.693037][ T5733] veth1_macvtap: entered promiscuous mode [ 49.706048][ T5734] veth0_vlan: entered promiscuous mode [ 49.721792][ T5735] veth0_macvtap: entered promiscuous mode [ 49.730192][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.731591][ T5745] veth0_vlan: entered promiscuous mode [ 49.740222][ T5735] veth1_macvtap: entered promiscuous mode [ 49.743303][ T5734] veth1_vlan: entered promiscuous mode [ 49.746382][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.767409][ T5745] veth1_vlan: entered promiscuous mode [ 49.771401][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.784939][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.809706][ T5734] veth0_macvtap: entered promiscuous mode [ 49.825339][ T5734] veth1_macvtap: entered promiscuous mode [ 49.849468][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.860734][ T5745] veth0_macvtap: entered promiscuous mode [ 49.878099][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.878865][ T5745] veth1_macvtap: entered promiscuous mode [ 49.881863][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.881875][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.903447][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.916637][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.916650][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.921111][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.945343][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.945356][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.951606][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.964875][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.964892][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.968238][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968276][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968307][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968337][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968368][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968397][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968428][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042492][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.054599][ T5733] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.062305][ T5733] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.063408][ T5733] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.066828][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.066842][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.077439][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077850][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077878][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077906][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077935][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077962][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077982][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077999][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.087680][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.092917][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.092930][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.104941][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.104955][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.126941][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.126955][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.250419][ T5892] Bluetooth: MGMT ver 1.23 [ 50.343853][ T5903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.376554][ T5905] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.433612][ T5903] md/raid10:md0: not clean -- starting background reconstruction [ 50.433625][ T5903] md/raid10:md0: active with 1 out of 2 devices [ 50.434717][ T5903] md0: detected capacity change from 0 to 2048 [ 50.441267][ T5914] md: resync of RAID array md0 [ 50.442769][ T5911] syz.0.14: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 50.442856][ T5911] CPU: 2 UID: 0 PID: 5911 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 50.442871][ T5911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.442878][ T5911] Call Trace: [ 50.442883][ T5911] [ 50.442887][ T5911] dump_stack_lvl+0x100/0x190 [ 50.442916][ T5911] warn_alloc.cold+0x9e/0xb2 [ 50.442958][ T5911] ? __pfx_warn_alloc+0x10/0x10 [ 50.442989][ T5911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 50.443018][ T5911] ? __pfx_get_page_from_freelist+0x10/0x10 [ 50.443047][ T5911] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 50.443086][ T5911] ? do_raw_spin_lock+0x128/0x260 [ 50.443108][ T5911] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.443135][ T5911] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.443159][ T5911] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.443179][ T5911] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.443203][ T5911] ? stack_depot_save_flags+0x49a/0x9f0 [ 50.443231][ T5911] ? comedi_isadma_alloc+0xc6/0x620 [ 50.443250][ T5911] ? pcl812_attach+0x18f5/0x2300 [ 50.443273][ T5911] ? comedi_device_attach+0x40e/0x6b0 [ 50.443295][ T5911] ? do_devconfig_ioctl+0x1b3/0x6d0 [ 50.443306][ T5911] ? comedi_unlocked_ioctl+0x860/0x3310 [ 50.443335][ T5911] alloc_pages_node_noprof+0x93/0x200 [ 50.443357][ T5911] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 50.443386][ T5911] __dma_direct_alloc_pages.isra.0+0x35e/0x540 [ 50.443415][ T5911] dma_direct_alloc+0x104/0x8a0 [ 50.443440][ T5911] dma_alloc_attrs+0x1b9/0x3e0 [ 50.443485][ T5911] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 50.443507][ T5911] ? __kmalloc_noprof+0x350/0x840 [ 50.443531][ T5911] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 50.443556][ T5911] ? dma_direct_supported+0xca/0x220 [ 50.443584][ T5911] comedi_isadma_alloc+0x331/0x620 [ 50.443607][ T5911] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 50.443627][ T5911] ? request_threaded_irq+0x27b/0x3e0 [ 50.443658][ T5911] pcl812_attach+0x18f5/0x2300 [ 50.443687][ T5911] comedi_device_attach+0x40e/0x6b0 [ 50.443718][ T5911] do_devconfig_ioctl+0x1b3/0x6d0 [ 50.443734][ T5911] ? comedi_unlocked_ioctl+0x180/0x3310 [ 50.443757][ T5911] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 50.443787][ T5911] ? tomoyo_path_number_perm+0x46d/0x580 [ 50.443808][ T5911] ? kasan_save_stack+0x3f/0x50 [ 50.443831][ T5911] ? kasan_save_stack+0x30/0x50 [ 50.443854][ T5911] ? kasan_save_track+0x14/0x30 [ 50.443875][ T5911] ? kasan_save_free_info+0x3b/0x70 [ 50.443900][ T5911] comedi_unlocked_ioctl+0x860/0x3310 [ 50.443928][ T5911] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 50.443956][ T5911] ? kasan_quarantine_put+0x104/0x240 [ 50.443972][ T5911] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.443989][ T5911] ? find_held_lock+0x2b/0x80 [ 50.444003][ T5911] ? tomoyo_path_number_perm+0x28f/0x580 [ 50.444015][ T5911] ? tomoyo_path_number_perm+0x28f/0x580 [ 50.444030][ T5911] ? tomoyo_path_number_perm+0x188/0x580 [ 50.444046][ T5911] comedi_compat_ioctl+0x438/0xe20 [ 50.444060][ T5911] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 50.444079][ T5911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.444099][ T5911] ? do_vfs_ioctl+0x226/0x13e0 [ 50.444113][ T5911] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.444130][ T5911] ? __fget_files+0x34/0x3d0 [ 50.444146][ T5911] ? find_held_lock+0x2b/0x80 [ 50.444160][ T5911] ? __fget_files+0x215/0x3d0 [ 50.444174][ T5911] ? hook_file_ioctl_common+0x140/0x440 [ 50.444192][ T5911] ? __fget_files+0x21f/0x3d0 [ 50.444211][ T5911] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 50.444225][ T5911] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 50.444242][ T5911] __do_fast_syscall_32+0x13a/0x8b0 [ 50.444262][ T5911] do_fast_syscall_32+0x32/0x70 [ 50.444273][ T5911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.444287][ T5911] RIP: 0023:0xf744efec [ 50.444301][ T5911] Code: Unable to access opcode bytes at 0xf744efc2. [ 50.444306][ T5911] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 50.444317][ T5911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 50.444324][ T5911] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.444331][ T5911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.444338][ T5911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.444345][ T5911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.444360][ T5911] [ 50.444701][ T5911] Mem-Info: [ 50.444708][ T5911] active_anon:5685 inactive_anon:32 isolated_anon:0 [ 50.444708][ T5911] active_file:5 inactive_file:53754 isolated_file:0 [ 50.444708][ T5911] unevictable:1000 dirty:100 writeback:0 [ 50.444708][ T5911] slab_reclaimable:9597 slab_unreclaimable:50145 [ 50.444708][ T5911] mapped:23669 shmem:1504 pagetables:1022 [ 50.444708][ T5911] sec_pagetables:292 bounce:0 [ 50.444708][ T5911] kernel_misc_reclaimable:0 [ 50.444708][ T5911] free:48118 free_pcp:3 free_cma:0 [ 50.444737][ T5911] Node 0 active_anon:0kB inactive_anon:124kB active_file:20kB inactive_file:12kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1120kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 50.444767][ T5911] Node 0 DMA free:2464kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 50.444800][ T5911] lowmem_reserve[]: 0 259 259 259 259 [ 50.444822][ T5911] Node 0 DMA: 182*4kB (UM) 14*8kB (UM) 10*16kB (UM) 16*32kB (UM) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2472kB [ 50.444904][ T5911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 50.444913][ T5911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 50.444922][ T5911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 50.444931][ T5911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 50.444939][ T5911] 55317 total pagecache pages [ 50.444943][ T5911] 33 pages in swap cache [ 50.444947][ T5911] Free swap = 122288kB [ 50.444951][ T5911] Total swap = 124996kB [ 50.444955][ T5911] 524155 pages RAM [ 50.444959][ T5911] 0 pages HighMem/MovableOnly [ 50.444962][ T5911] 216915 pages reserved [ 50.444966][ T5911] 0 pages cma reserved [ 50.466269][ T5914] md: md0: resync done. [ 50.475043][ T5912] FAULT_INJECTION: forcing a failure. [ 50.475043][ T5912] name failslab, interval 1, probability 0, space 0, times 1 [ 50.475063][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 50.475077][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.475084][ T5912] Call Trace: [ 50.475088][ T5912] [ 50.475093][ T5912] dump_stack_lvl+0x100/0x190 [ 50.475114][ T5912] should_fail_ex.cold+0x5/0xa [ 50.475129][ T5912] should_failslab+0xc2/0x120 [ 50.475149][ T5912] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.475168][ T5912] ? __kernfs_new_node+0xd2/0xa10 [ 50.475188][ T5912] __kernfs_new_node+0xd2/0xa10 [ 50.475205][ T5912] ? __pfx_idr_alloc_u32+0x10/0x10 [ 50.475225][ T5912] ? __pfx___kernfs_new_node+0x10/0x10 [ 50.475244][ T5912] ? lock_acquire+0x1d1/0x380 [ 50.475260][ T5912] ? kernfs_root+0x23/0x2a0 [ 50.475276][ T5912] ? find_held_lock+0x2b/0x80 [ 50.475289][ T5912] ? kernfs_root+0xee/0x2a0 [ 50.475304][ T5912] ? kernfs_root+0xee/0x2a0 [ 50.475322][ T5912] kernfs_new_node+0x117/0x150 [ 50.475342][ T5912] __kernfs_create_file+0x53/0x350 [ 50.475357][ T5912] sysfs_add_file_mode_ns+0x207/0x3c0 [ 50.475376][ T5912] internal_create_group+0x593/0xfb0 [ 50.475396][ T5912] ? __pfx_internal_create_group+0x10/0x10 [ 50.475415][ T5912] ? kernfs_create_link+0x1bd/0x240 [ 50.475430][ T5912] internal_create_groups+0x9d/0x150 [ 50.475448][ T5912] device_add+0x71a/0x1970 [ 50.475487][ T5912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.475508][ T5912] ? __pfx_device_add+0x10/0x10 [ 50.475523][ T5912] ? lockdep_init_map_type+0x5c/0x250 [ 50.475543][ T5912] ? __init_waitqueue_head+0xca/0x150 [ 50.475558][ T5912] netdev_register_kobject+0x1df/0x410 [ 50.475578][ T5912] register_netdevice+0x15b6/0x25a0 [ 50.475596][ T5912] ? __pfx_register_netdevice+0x10/0x10 [ 50.475610][ T5912] ? net_generic+0xea/0x2a0 [ 50.475625][ T5912] register_netdev+0x34/0x50 [ 50.475639][ T5912] vti6_init_net+0x2ff/0x480 [ 50.475656][ T5912] ? __pfx_vti6_init_net+0x10/0x10 [ 50.475668][ T5912] ops_init+0x1e2/0x5f0 [ 50.475683][ T5912] setup_net+0x118/0x3a0 [ 50.475697][ T5912] ? __pfx_setup_net+0x10/0x10 [ 50.475714][ T5912] copy_net_ns+0x345/0x7a0 [ 50.475731][ T5912] create_new_namespaces+0x3ea/0xac0 [ 50.475752][ T5912] unshare_nsproxy_namespaces+0xf2/0x220 [ 50.475771][ T5912] ksys_unshare+0x4a2/0xa70 [ 50.475784][ T5912] ? __pfx_ksys_unshare+0x10/0x10 [ 50.475801][ T5912] __ia32_sys_unshare+0x30/0x40 [ 50.475813][ T5912] __do_fast_syscall_32+0x13a/0x8b0 [ 50.475831][ T5912] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.475849][ T5912] do_fast_syscall_32+0x32/0x70 [ 50.475873][ T5912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.475888][ T5912] RIP: 0023:0xf743efec [ 50.475902][ T5912] Code: Unable to access opcode bytes at 0xf743efc2. [ 50.475907][ T5912] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 50.475919][ T5912] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 50.475926][ T5912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.475932][ T5912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.475939][ T5912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.475945][ T5912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.475960][ T5912] [ 50.659682][ T5926] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.663295][ T5926] process 'syz.0.18' launched '/dev/fd/8' with NULL argv: empty string added [ 50.791325][ T5912] FAULT_INJECTION: forcing a failure. [ 50.791325][ T5912] name failslab, interval 1, probability 0, space 0, times 0 [ 50.791345][ T5912] CPU: 3 UID: 0 PID: 5912 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 50.791358][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.791364][ T5912] Call Trace: [ 50.791369][ T5912] [ 50.791373][ T5912] dump_stack_lvl+0x100/0x190 [ 50.791393][ T5912] should_fail_ex.cold+0x5/0xa [ 50.791409][ T5912] should_failslab+0xc2/0x120 [ 50.791428][ T5912] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.791444][ T5912] ? __proc_create+0xc1/0x8f0 [ 50.791455][ T5912] ? __proc_create+0x247/0x8f0 [ 50.791491][ T5912] __proc_create+0x247/0x8f0 [ 50.791503][ T5912] ? __pfx___proc_create+0x10/0x10 [ 50.791520][ T5912] proc_create_reg+0x75/0x170 [ 50.791531][ T5912] ? __pfx_snmp6_dev_seq_show+0x10/0x10 [ 50.791546][ T5912] proc_create_single_data+0x86/0x130 [ 50.791559][ T5912] ? __pfx_proc_create_single_data+0x10/0x10 [ 50.791572][ T5912] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 50.791585][ T5912] ? ipv6_add_dev+0x670/0x1520 [ 50.791598][ T5912] snmp6_register_dev+0xe5/0x180 [ 50.791611][ T5912] ipv6_add_dev+0x6dc/0x1520 [ 50.791624][ T5912] addrconf_notify+0x5db/0x1ba0 [ 50.791640][ T5912] ? __pfx_tls_dev_event+0x10/0x10 [ 50.791653][ T5912] ? __pfx_addrconf_notify+0x10/0x10 [ 50.791668][ T5912] ? ip6mr_device_event+0x1c4/0x230 [ 50.791685][ T5912] notifier_call_chain+0x99/0x3f0 [ 50.791701][ T5912] call_netdevice_notifiers_info+0xbe/0x110 [ 50.791719][ T5912] register_netdevice+0x1998/0x25a0 [ 50.791737][ T5912] ? __pfx_register_netdevice+0x10/0x10 [ 50.791755][ T5912] register_netdev+0x34/0x50 [ 50.791769][ T5912] ip6gre_init_net+0x2aa/0x420 [ 50.791782][ T5912] ? __pfx_ip6gre_init_net+0x10/0x10 [ 50.791794][ T5912] ops_init+0x1e2/0x5f0 [ 50.791809][ T5912] setup_net+0x118/0x3a0 [ 50.791823][ T5912] ? __pfx_setup_net+0x10/0x10 [ 50.791841][ T5912] copy_net_ns+0x345/0x7a0 [ 50.791857][ T5912] create_new_namespaces+0x3ea/0xac0 [ 50.791878][ T5912] unshare_nsproxy_namespaces+0xf2/0x220 [ 50.791897][ T5912] ksys_unshare+0x4a2/0xa70 [ 50.791910][ T5912] ? __pfx_ksys_unshare+0x10/0x10 [ 50.791928][ T5912] __ia32_sys_unshare+0x30/0x40 [ 50.791940][ T5912] __do_fast_syscall_32+0x13a/0x8b0 [ 50.791958][ T5912] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.791976][ T5912] do_fast_syscall_32+0x32/0x70 [ 50.791987][ T5912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.792001][ T5912] RIP: 0023:0xf743efec [ 50.792015][ T5912] Code: Unable to access opcode bytes at 0xf743efc2. [ 50.792020][ T5912] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 50.792032][ T5912] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 50.792039][ T5912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.792049][ T5912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.792055][ T5912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.792062][ T5912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.792076][ T5912] [ 51.032518][ T5886] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 51.089979][ T5953] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 51.158717][ T5959] file system registered [ 51.240144][ T5733] ffs_data_put(): freeing [ 51.507356][ T5741] Bluetooth: hci2: command tx timeout [ 51.507403][ T5737] Bluetooth: hci1: command tx timeout [ 51.598110][ T5737] Bluetooth: hci3: command tx timeout [ 51.927169][ T5882] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 52.012257][ T6029] 0x000000000000-0x000000010000 : "" [ 52.020854][ T6029] ftl_cs: FTL header not found. [ 52.025988][ T6029] FAULT_INJECTION: forcing a failure. [ 52.025988][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 52.026008][ T6029] CPU: 2 UID: 0 PID: 6029 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 52.026021][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.026028][ T6029] Call Trace: [ 52.026032][ T6029] [ 52.026037][ T6029] dump_stack_lvl+0x100/0x190 [ 52.026060][ T6029] should_fail_ex.cold+0x5/0xa [ 52.026077][ T6029] should_failslab+0xc2/0x120 [ 52.026096][ T6029] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 52.026114][ T6029] ? kernel_text_address+0x8d/0x100 [ 52.026129][ T6029] ? kstrdup_const+0x63/0x80 [ 52.026145][ T6029] kstrdup+0x51/0xe0 [ 52.026163][ T6029] kstrdup_const+0x63/0x80 [ 52.026181][ T6029] __kernfs_new_node+0x9b/0xa10 [ 52.026205][ T6029] ? mark_held_locks+0x40/0x70 [ 52.026234][ T6029] ? __pfx___kernfs_new_node+0x10/0x10 [ 52.026265][ T6029] ? lock_acquire+0x1d1/0x380 [ 52.026291][ T6029] ? kernfs_root+0x23/0x2a0 [ 52.026319][ T6029] ? find_held_lock+0x2b/0x80 [ 52.026340][ T6029] ? kernfs_root+0xee/0x2a0 [ 52.026366][ T6029] ? kernfs_root+0xee/0x2a0 [ 52.026400][ T6029] kernfs_create_dir_ns+0xa6/0x2b0 [ 52.026425][ T6029] sysfs_create_dir_ns+0x13a/0x2b0 [ 52.026453][ T6029] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 52.026487][ T6029] ? find_held_lock+0x2b/0x80 [ 52.026511][ T6029] ? kobject_add_internal+0x25f/0x930 [ 52.026535][ T6029] ? kobject_add_internal+0x25f/0x930 [ 52.026567][ T6029] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.026590][ T6029] kobject_add_internal+0x2c8/0x930 [ 52.026618][ T6029] kobject_add+0x16a/0x1e0 [ 52.026642][ T6029] ? __pfx_kobject_add+0x10/0x10 [ 52.026663][ T6029] ? class_to_subsys+0x10f/0x150 [ 52.026693][ T6029] ? kobject_put+0xb9/0x640 [ 52.026712][ T6029] ? _raw_spin_unlock+0x28/0x50 [ 52.026745][ T6029] device_add+0x294/0x1970 [ 52.026770][ T6029] ? __pfx_dev_set_name+0x10/0x10 [ 52.026798][ T6029] ? __pfx_device_add+0x10/0x10 [ 52.026818][ T6029] ? __pfx___might_resched+0x10/0x10 [ 52.026852][ T6029] __add_disk+0x592/0xf10 [ 52.026882][ T6029] add_disk_fwnode+0x118/0x480 [ 52.026910][ T6029] add_mtd_blktrans_dev+0xd0b/0x1520 [ 52.026943][ T6029] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 52.027023][ T6029] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 52.027049][ T6029] ? mtdblock_add_mtd+0x4a/0x270 [ 52.027082][ T6029] mtdblock_add_mtd+0x1cc/0x270 [ 52.027114][ T6029] blktrans_notify_add+0xa2/0xf0 [ 52.027141][ T6029] add_mtd_device+0xb6d/0x1820 [ 52.027167][ T6029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.027198][ T6029] ? __pfx_add_mtd_device+0x10/0x10 [ 52.027228][ T6029] mtd_add_partition+0x376/0x6a0 [ 52.027256][ T6029] ? __pfx_mtd_add_partition+0x10/0x10 [ 52.027280][ T6029] ? __might_fault+0xc5/0x140 [ 52.027300][ T6029] ? __might_fault+0xc5/0x140 [ 52.027330][ T6029] mtdchar_blkpg_ioctl+0x207/0x250 [ 52.027356][ T6029] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 52.027406][ T6029] mtdchar_compat_ioctl+0x3d6/0x440 [ 52.027434][ T6029] ? find_held_lock+0x2b/0x80 [ 52.027482][ T6029] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 52.027526][ T6029] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 52.027563][ T6029] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 52.027592][ T6029] __do_fast_syscall_32+0x13a/0x8b0 [ 52.027624][ T6029] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.027654][ T6029] do_fast_syscall_32+0x32/0x70 [ 52.027673][ T6029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.027697][ T6029] RIP: 0023:0xf7fe3fec [ 52.027719][ T6029] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 52.027727][ T6029] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 52.027747][ T6029] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000001269 [ 52.027759][ T6029] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.027771][ T6029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.027783][ T6029] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.027795][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.027823][ T6029] [ 52.029571][ T6029] kobject: kobject_add_internal failed for mtdblock1 (error: -12 parent: mtd1) [ 52.088070][ T6032] batman_adv: batadv0: Adding interface: syzkaller0 [ 52.088086][ T6032] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.088111][ T6032] batman_adv: batadv0: Interface activated: syzkaller0 [ 52.092652][ T6032] FAULT_INJECTION: forcing a failure. [ 52.092652][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 52.092680][ T6032] CPU: 3 UID: 0 PID: 6032 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 52.092702][ T6032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.092713][ T6032] Call Trace: [ 52.092720][ T6032] [ 52.092728][ T6032] dump_stack_lvl+0x100/0x190 [ 52.092758][ T6032] should_fail_ex.cold+0x5/0xa [ 52.092785][ T6032] should_failslab+0xc2/0x120 [ 52.092814][ T6032] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.092837][ T6032] ? batadv_orig_node_new+0x50/0x810 [ 52.092870][ T6032] batadv_orig_node_new+0x50/0x810 [ 52.092895][ T6032] ? find_held_lock+0x2b/0x80 [ 52.092920][ T6032] batadv_iv_ogm_orig_get.part.0+0x24/0x720 [ 52.092951][ T6032] batadv_iv_ogm_receive+0x1516/0x1ae0 [ 52.092991][ T6032] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 52.093022][ T6032] ? __pfx___up_read+0x10/0x10 [ 52.093047][ T6032] batadv_batman_skb_recv+0x5e0/0x850 [ 52.093078][ T6032] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 52.093114][ T6032] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 52.093143][ T6032] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 52.093175][ T6032] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 52.093206][ T6032] ? lock_acquire+0x1d1/0x380 [ 52.093243][ T6032] __netif_receive_skb+0x1f/0x120 [ 52.093275][ T6032] netif_receive_skb+0x139/0x7d0 [ 52.093304][ T6032] ? __pfx_netif_receive_skb+0x10/0x10 [ 52.093333][ T6032] ? _copy_from_iter+0x270/0x1690 [ 52.093371][ T6032] tun_rx_batched.isra.0+0x3f6/0x750 [ 52.093404][ T6032] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 52.093437][ T6032] ? tun_get_user+0x1e1e/0x3cc0 [ 52.093461][ T6032] tun_get_user+0x1f53/0x3cc0 [ 52.093490][ T6032] ? __lock_acquire+0x5c0/0x1f40 [ 52.093511][ T6032] ? __pfx_tun_get_user+0x10/0x10 [ 52.093524][ T6032] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 52.093545][ T6032] ? find_held_lock+0x2b/0x80 [ 52.093564][ T6032] ? tun_get+0x191/0x370 [ 52.093579][ T6032] ? tun_get+0x191/0x370 [ 52.093627][ T6032] tun_chr_write_iter+0xdc/0x200 [ 52.093650][ T6032] vfs_write+0x6af/0x1050 [ 52.093674][ T6032] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 52.093697][ T6032] ? __pfx_vfs_write+0x10/0x10 [ 52.093719][ T6032] ? find_held_lock+0x2b/0x80 [ 52.093756][ T6032] ksys_write+0x12a/0x250 [ 52.093775][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 52.093793][ T6032] __do_fast_syscall_32+0x13a/0x8b0 [ 52.093813][ T6032] do_fast_syscall_32+0x32/0x70 [ 52.093824][ T6032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.093839][ T6032] RIP: 0023:0xf743efec [ 52.093853][ T6032] Code: Unable to access opcode bytes at 0xf743efc2. [ 52.093858][ T6032] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 52.093869][ T6032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 52.093877][ T6032] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 52.093884][ T6032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.093891][ T6032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.093897][ T6032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.093912][ T6032] [ 52.202397][ T5882] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 52.212268][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.212286][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 52.212299][ T5882] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.212319][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.229610][ T5882] usb 8-1: config 0 descriptor?? [ 52.231894][ T6013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.556054][ T6031] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 52.596077][ T6031] batman_adv: batadv0: Removing interface: syzkaller0 [ 52.642296][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.69'. [ 52.694645][ T6047] FAULT_INJECTION: forcing a failure. [ 52.694645][ T6047] name fail_futex, interval 1, probability 0, space 0, times 1 [ 52.694665][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT(full) [ 52.694679][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.694689][ T6047] Call Trace: [ 52.694694][ T6047] [ 52.694699][ T6047] dump_stack_lvl+0x100/0x190 [ 52.694729][ T6047] should_fail_ex.cold+0x5/0xa [ 52.694746][ T6047] get_futex_key+0x1d0/0x14f0 [ 52.694761][ T6047] ? __pfx_get_futex_key+0x10/0x10 [ 52.694771][ T6047] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 52.694790][ T6047] ? __smp_call_single_queue+0x17e/0x450 [ 52.694808][ T6047] ? __pfx___smp_call_single_queue+0x10/0x10 [ 52.694828][ T6047] futex_wait_setup+0x91/0x540 [ 52.694847][ T6047] __futex_wait+0x19f/0x300 [ 52.694864][ T6047] ? __pfx___futex_wait+0x10/0x10 [ 52.694879][ T6047] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.694896][ T6047] ? futex_hash+0x311/0x400 [ 52.694908][ T6047] ? __pfx_futex_wake_mark+0x10/0x10 [ 52.694925][ T6047] ? find_held_lock+0x2b/0x80 [ 52.694938][ T6047] ? futex_wake+0x4ea/0x5e0 [ 52.694956][ T6047] futex_wait+0xe6/0x370 [ 52.694972][ T6047] ? __pfx_futex_wait+0x10/0x10 [ 52.694991][ T6047] ? do_listns+0x5a6/0x10e0 [ 52.695004][ T6047] do_futex+0x265/0x440 [ 52.695017][ T6047] ? __pfx_do_futex+0x10/0x10 [ 52.695031][ T6047] ? __ia32_sys_listns+0x2b7/0x430 [ 52.695044][ T6047] __ia32_sys_futex_time32+0x2f4/0x470 [ 52.695059][ T6047] ? fput+0x7c/0x100 [ 52.695075][ T6047] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 52.695095][ T6047] __do_fast_syscall_32+0x13a/0x8b0 [ 52.695113][ T6047] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.695130][ T6047] do_fast_syscall_32+0x32/0x70 [ 52.695141][ T6047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.695156][ T6047] RIP: 0023:0xf7fe3fec [ 52.695168][ T6047] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 52.695173][ T6047] RSP: 002b:00000000f54965bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 52.695184][ T6047] RAX: ffffffffffffffda RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 52.695192][ T6047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 52.695198][ T6047] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 52.695204][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.695211][ T6047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.695225][ T6047] [ 52.759972][ T6047] FAULT_INJECTION: forcing a failure. [ 52.759972][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 52.760003][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT(full) [ 52.760026][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.760038][ T6047] Call Trace: [ 52.760045][ T6047] [ 52.760053][ T6047] dump_stack_lvl+0x100/0x190 [ 52.760085][ T6047] should_fail_ex.cold+0x5/0xa [ 52.760111][ T6047] should_failslab+0xc2/0x120 [ 52.760142][ T6047] kmem_cache_alloc_noprof+0x92/0x6a0 [ 52.760169][ T6047] ? __kernfs_new_node+0xd2/0xa10 [ 52.760204][ T6047] __kernfs_new_node+0xd2/0xa10 [ 52.760238][ T6047] ? __pfx___kernfs_new_node+0x10/0x10 [ 52.760271][ T6047] ? lock_acquire+0x1d1/0x380 [ 52.760298][ T6047] ? kernfs_root+0x23/0x2a0 [ 52.760324][ T6047] ? find_held_lock+0x2b/0x80 [ 52.760346][ T6047] ? kernfs_root+0xee/0x2a0 [ 52.760372][ T6047] ? kernfs_root+0xee/0x2a0 [ 52.760404][ T6047] kernfs_new_node+0x117/0x150 [ 52.760436][ T6047] __kernfs_create_file+0x53/0x350 [ 52.760458][ T6047] sysfs_add_file_mode_ns+0x207/0x3c0 [ 52.760489][ T6047] internal_create_group+0x593/0xfb0 [ 52.760530][ T6047] ? __pfx_internal_create_group+0x10/0x10 [ 52.760561][ T6047] ? kernfs_create_link+0x1bd/0x240 [ 52.760588][ T6047] internal_create_groups+0x9d/0x150 [ 52.760618][ T6047] device_add+0x71a/0x1970 [ 52.760643][ T6047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.760690][ T6047] ? __pfx_device_add+0x10/0x10 [ 52.760716][ T6047] ? lockdep_init_map_type+0x5c/0x250 [ 52.760745][ T6047] ? __init_waitqueue_head+0xca/0x150 [ 52.760771][ T6047] netdev_register_kobject+0x1df/0x410 [ 52.760802][ T6047] register_netdevice+0x15b6/0x25a0 [ 52.760833][ T6047] ? __pfx_register_netdevice+0x10/0x10 [ 52.760865][ T6047] __ip_tunnel_create+0x52b/0x670 [ 52.760892][ T6047] ? __pfx___ip_tunnel_create+0x10/0x10 [ 52.760916][ T6047] ? net_generic+0xea/0x2a0 [ 52.760946][ T6047] ip_tunnel_init_net+0x230/0x780 [ 52.760975][ T6047] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 52.761011][ T6047] ? __pfx_erspan_init_net+0x10/0x10 [ 52.761030][ T6047] ops_init+0x1e2/0x5f0 [ 52.761057][ T6047] setup_net+0x118/0x3a0 [ 52.761080][ T6047] ? __pfx_setup_net+0x10/0x10 [ 52.761111][ T6047] copy_net_ns+0x345/0x7a0 [ 52.761140][ T6047] create_new_namespaces+0x3ea/0xac0 [ 52.761175][ T6047] unshare_nsproxy_namespaces+0xf2/0x220 [ 52.761206][ T6047] ksys_unshare+0x4a2/0xa70 [ 52.761228][ T6047] ? __pfx_ksys_unshare+0x10/0x10 [ 52.761259][ T6047] __ia32_sys_unshare+0x30/0x40 [ 52.761280][ T6047] __do_fast_syscall_32+0x13a/0x8b0 [ 52.761308][ T6047] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.761337][ T6047] do_fast_syscall_32+0x32/0x70 [ 52.761355][ T6047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.761378][ T6047] RIP: 0023:0xf7fe3fec [ 52.761400][ T6047] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 52.761409][ T6047] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 52.761429][ T6047] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 52.761441][ T6047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.761452][ T6047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.761464][ T6047] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.761475][ T6047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.761509][ T6047] [ 52.766098][ T5882] gt683r_led 0003:1770:FF00.0002: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 52.814780][ T6053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.975923][ T5139] usb 8-1: USB disconnect, device number 2 [ 52.990580][ T50] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 52.993093][ T5734] ffs_data_put(): freeing [ 53.033418][ T6068] syzkaller0: entered promiscuous mode [ 53.033438][ T6068] syzkaller0: entered allmulticast mode [ 53.098892][ T6047] FAULT_INJECTION: forcing a failure. [ 53.098892][ T6047] name fail_futex, interval 1, probability 0, space 0, times 0 [ 53.098915][ T6047] CPU: 3 UID: 0 PID: 6047 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT(full) [ 53.098929][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.098937][ T6047] Call Trace: [ 53.098941][ T6047] [ 53.098946][ T6047] dump_stack_lvl+0x100/0x190 [ 53.098966][ T6047] should_fail_ex.cold+0x5/0xa [ 53.098981][ T6047] get_futex_key+0x293/0x14f0 [ 53.098996][ T6047] ? __pfx_get_futex_key+0x10/0x10 [ 53.099008][ T6047] ? __mutex_unlock_slowpath+0x35d/0x930 [ 53.099030][ T6047] futex_wake+0xf4/0x5e0 [ 53.099047][ T6047] ? __pfx_futex_wake+0x10/0x10 [ 53.099065][ T6047] ? detach_task_ctx_data+0x83/0x490 [ 53.099080][ T6047] do_futex+0x2b2/0x440 [ 53.099094][ T6047] ? __pfx_do_futex+0x10/0x10 [ 53.099106][ T6047] ? __might_fault+0xc5/0x140 [ 53.099122][ T6047] mm_exit_exec_release+0x256/0x2f0 [ 53.099135][ T6047] do_exit+0x707/0x2a50 [ 53.099150][ T6047] ? __pfx_do_exit+0x10/0x10 [ 53.099163][ T6047] ? do_raw_spin_lock+0x128/0x260 [ 53.099175][ T6047] ? find_held_lock+0x2b/0x80 [ 53.099188][ T6047] ? get_signal+0x7e0/0x21e0 [ 53.099200][ T6047] do_group_exit+0xd5/0x2a0 [ 53.099215][ T6047] get_signal+0x1ec7/0x21e0 [ 53.099230][ T6047] ? __pfx_get_signal+0x10/0x10 [ 53.099242][ T6047] ? do_futex+0x190/0x440 [ 53.099256][ T6047] arch_do_signal_or_restart+0x91/0x7a0 [ 53.099274][ T6047] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.099294][ T6047] ? fput+0x7c/0x100 [ 53.099314][ T6047] exit_to_user_mode_loop+0x139/0x700 [ 53.099327][ T6047] ? rcu_is_watching+0x13/0xc0 [ 53.099341][ T6047] __do_fast_syscall_32+0x59f/0x8b0 [ 53.099359][ T6047] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.099377][ T6047] do_fast_syscall_32+0x32/0x70 [ 53.099388][ T6047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.099403][ T6047] RIP: 0023:0xf7fe3fec [ 53.099418][ T6047] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 53.099423][ T6047] RSP: 002b:00000000f54965bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 53.099434][ T6047] RAX: fffffffffffffe00 RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 53.099441][ T6047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 53.099447][ T6047] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 53.099474][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.099481][ T6047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.099494][ T6047] [ 53.165394][ T6080] syzkaller0: entered promiscuous mode [ 53.165413][ T6080] syzkaller0: entered allmulticast mode [ 53.587477][ T5737] Bluetooth: hci1: command tx timeout [ 53.587510][ T5737] Bluetooth: hci2: command tx timeout [ 53.665622][ T6108] Zero length message leads to an empty skb [ 53.668962][ T5737] Bluetooth: hci3: command tx timeout [ 53.774667][ T6119] block nbd1: not configured, cannot reconfigure [ 53.776105][ T66] block nbd0: Receive control failed (result -32) [ 53.870596][ T6126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.937516][ T6126] md: could not open device unknown-block(1,1). [ 53.937568][ T6126] md: md_import_device returned -16 [ 53.967204][ T5881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.041432][ T6138] batman_adv: batadv0: Adding interface: syzkaller0 [ 54.041443][ T6138] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.041457][ T6138] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.043670][ T6138] FAULT_INJECTION: forcing a failure. [ 54.043670][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 54.043697][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT(full) [ 54.043718][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.043729][ T6138] Call Trace: [ 54.043734][ T6138] [ 54.043741][ T6138] dump_stack_lvl+0x100/0x190 [ 54.043770][ T6138] should_fail_ex.cold+0x5/0xa [ 54.043792][ T6138] should_failslab+0xc2/0x120 [ 54.043820][ T6138] __kmalloc_cache_noprof+0x91/0x6d0 [ 54.043841][ T6138] ? batadv_orig_ifinfo_new+0x94/0x420 [ 54.043872][ T6138] batadv_orig_ifinfo_new+0x94/0x420 [ 54.043900][ T6138] batadv_iv_ogm_process_per_outif+0x274/0x3980 [ 54.043928][ T6138] ? find_held_lock+0x2b/0x80 [ 54.043952][ T6138] ? lock_acquire+0x1d1/0x380 [ 54.043979][ T6138] ? do_raw_spin_lock+0x128/0x260 [ 54.043997][ T6138] ? find_held_lock+0x2b/0x80 [ 54.044026][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.044053][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.044078][ T6138] ? rcu_is_watching+0x13/0xc0 [ 54.044098][ T6138] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 54.044119][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.044143][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.044165][ T6138] ? __local_bh_enable_ip+0xa5/0x120 [ 54.044191][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x4f9/0x720 [ 54.044216][ T6138] batadv_iv_ogm_receive+0x1049/0x1ae0 [ 54.044240][ T6138] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 54.044258][ T6138] ? __pfx___up_read+0x10/0x10 [ 54.044268][ T6138] ? do_user_addr_fault+0x7d7/0x12f0 [ 54.044281][ T6138] ? do_user_addr_fault+0x7d7/0x12f0 [ 54.044296][ T6138] batadv_batman_skb_recv+0x5e0/0x850 [ 54.044314][ T6138] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.044333][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.044357][ T6138] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.044383][ T6138] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 54.044403][ T6138] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 54.044422][ T6138] ? lock_acquire+0x1d1/0x380 [ 54.044442][ T6138] __netif_receive_skb+0x1f/0x120 [ 54.044460][ T6138] netif_receive_skb+0x139/0x7d0 [ 54.044480][ T6138] ? __pfx_netif_receive_skb+0x10/0x10 [ 54.044507][ T6138] ? _copy_from_iter+0x270/0x1690 [ 54.044537][ T6138] tun_rx_batched.isra.0+0x3f6/0x750 [ 54.044564][ T6138] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 54.044592][ T6138] ? tun_get_user+0x1e1e/0x3cc0 [ 54.044612][ T6138] tun_get_user+0x1f53/0x3cc0 [ 54.044656][ T6138] ? __lock_acquire+0x5c0/0x1f40 [ 54.044682][ T6138] ? __pfx_tun_get_user+0x10/0x10 [ 54.044701][ T6138] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 54.044729][ T6138] ? find_held_lock+0x2b/0x80 [ 54.044747][ T6138] ? tun_get+0x191/0x370 [ 54.044761][ T6138] ? tun_get+0x191/0x370 [ 54.044782][ T6138] tun_chr_write_iter+0xdc/0x200 [ 54.044802][ T6138] vfs_write+0x6af/0x1050 [ 54.044826][ T6138] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.044847][ T6138] ? __pfx_vfs_write+0x10/0x10 [ 54.044863][ T6138] ? find_held_lock+0x2b/0x80 [ 54.044886][ T6138] ksys_write+0x12a/0x250 [ 54.044901][ T6138] ? __pfx_ksys_write+0x10/0x10 [ 54.044919][ T6138] __do_fast_syscall_32+0x13a/0x8b0 [ 54.044938][ T6138] do_fast_syscall_32+0x32/0x70 [ 54.044949][ T6138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.044964][ T6138] RIP: 0023:0xf744efec [ 54.044978][ T6138] Code: Unable to access opcode bytes at 0xf744efc2. [ 54.044983][ T6138] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.044994][ T6138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 54.045001][ T6138] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 54.045014][ T6138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.045020][ T6138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.045027][ T6138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.045042][ T6138] [ 54.046487][ T6138] ------------[ cut here ]------------ [ 54.046495][ T6138] !orig_ifinfo [ 54.046501][ T6138] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x2d62/0x3980, CPU#0: syz.0.106/6138 [ 54.127210][ T5881] usb 8-1: Using ep0 maxpacket: 8 [ 54.129138][ T5881] usb 8-1: unable to get BOS descriptor or descriptor too short [ 54.129174][ T5881] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 54.130093][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.130126][ T5881] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 54.131860][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.131873][ T5881] usb 8-1: Product: syz [ 54.131880][ T5881] usb 8-1: Manufacturer: syz [ 54.131887][ T5881] usb 8-1: SerialNumber: syz [ 54.133134][ T5881] usb 8-1: config 0 descriptor?? [ 54.139949][ T5881] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 54.233988][ T6138] Modules linked in: [ 54.235202][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT(full) [ 54.238021][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.241423][ T6138] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.244039][ T6138] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 29 9e e5 f6 e9 ae d3 ff ff e8 0f 5e 72 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 54.250456][ T6138] RSP: 0018:ffffc900218bf460 EFLAGS: 00010287 [ 54.252282][ T6138] RAX: 0000000000025c72 RBX: 0000000000000000 RCX: ffffc90006b99000 [ 54.254595][ T6138] RDX: 0000000000080000 RSI: ffffffff8b994821 RDI: ffffffff8c625580 [ 54.256897][ T6138] RBP: ffff8880526d0040 R08: 0000000000000001 R09: 0000000000000000 [ 54.259223][ T6138] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 54.261563][ T6138] R13: ffff8880003f2000 R14: ffff88801f28f180 R15: ffff88804e328000 [ 54.263859][ T6138] FS: 0000000000000000(0000) GS:ffff88809574d000(0063) knlGS:00000000f5466b40 [ 54.266497][ T6138] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 54.268514][ T6138] CR2: 00000000f744f000 CR3: 0000000070120000 CR4: 0000000000352ef0 [ 54.270821][ T6138] Call Trace: [ 54.271822][ T6138] [ 54.272712][ T6138] ? find_held_lock+0x2b/0x80 [ 54.274124][ T6138] ? lock_acquire+0x1d1/0x380 [ 54.275542][ T6138] ? do_raw_spin_lock+0x128/0x260 [ 54.277052][ T6138] ? find_held_lock+0x2b/0x80 [ 54.278530][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.280458][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.282381][ T6138] ? rcu_is_watching+0x13/0xc0 [ 54.283902][ T6138] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 54.285984][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.287659][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.289782][ T6138] ? __local_bh_enable_ip+0xa5/0x120 [ 54.291874][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x4f9/0x720 [ 54.293801][ T6138] batadv_iv_ogm_receive+0x1049/0x1ae0 [ 54.295395][ T6138] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 54.297229][ T6138] ? __pfx___up_read+0x10/0x10 [ 54.298737][ T6138] ? do_user_addr_fault+0x7d7/0x12f0 [ 54.300431][ T6138] ? do_user_addr_fault+0x7d7/0x12f0 [ 54.302087][ T6138] batadv_batman_skb_recv+0x5e0/0x850 [ 54.303748][ T6138] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.305621][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.307652][ T6138] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.310028][ T6138] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 54.312400][ T6138] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 54.314966][ T6138] ? lock_acquire+0x1d1/0x380 [ 54.316887][ T6138] __netif_receive_skb+0x1f/0x120 [ 54.319041][ T6138] netif_receive_skb+0x139/0x7d0 [ 54.321174][ T6138] ? __pfx_netif_receive_skb+0x10/0x10 [ 54.323469][ T6138] ? _copy_from_iter+0x270/0x1690 [ 54.325538][ T6138] tun_rx_batched.isra.0+0x3f6/0x750 [ 54.327796][ T6138] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 54.330253][ T6138] ? tun_get_user+0x1e1e/0x3cc0 [ 54.332294][ T6138] tun_get_user+0x1f53/0x3cc0 [ 54.334073][ T6138] ? __lock_acquire+0x5c0/0x1f40 [ 54.335711][ T6138] ? __pfx_tun_get_user+0x10/0x10 [ 54.337600][ T6138] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 54.339324][ T6138] ? find_held_lock+0x2b/0x80 [ 54.340800][ T6138] ? tun_get+0x191/0x370 [ 54.342095][ T6138] ? tun_get+0x191/0x370 [ 54.343394][ T6138] tun_chr_write_iter+0xdc/0x200 [ 54.344922][ T6138] vfs_write+0x6af/0x1050 [ 54.346287][ T6138] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.348091][ T6138] ? __pfx_vfs_write+0x10/0x10 [ 54.349652][ T6138] ? find_held_lock+0x2b/0x80 [ 54.351224][ T6138] ksys_write+0x12a/0x250 [ 54.352598][ T6138] ? __pfx_ksys_write+0x10/0x10 [ 54.354100][ T6138] __do_fast_syscall_32+0x13a/0x8b0 [ 54.355692][ T6138] do_fast_syscall_32+0x32/0x70 [ 54.357354][ T6138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.359713][ T6138] RIP: 0023:0xf744efec [ 54.361336][ T6138] Code: Unable to access opcode bytes at 0xf744efc2. [ 54.363900][ T6138] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.367222][ T6138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 54.370302][ T6138] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 54.373344][ T6138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.376412][ T6138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.379533][ T6138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.382661][ T6138] [ 54.383920][ T6138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.386757][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT(full) [ 54.390303][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.394241][ T6138] Call Trace: [ 54.395565][ T6138] [ 54.396739][ T6138] dump_stack_lvl+0x100/0x190 [ 54.398605][ T6138] vpanic+0x553/0x970 [ 54.400251][ T6138] ? __pfx_vpanic+0x10/0x10 [ 54.402042][ T6138] panic+0xd1/0xe0 [ 54.403550][ T6138] ? __pfx_panic+0x10/0x10 [ 54.405297][ T6138] check_panic_on_warn.cold+0x19/0x34 [ 54.407409][ T6138] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.409968][ T6138] __warn.cold+0x191/0x318 [ 54.411746][ T6138] __report_bug+0x30f/0x440 [ 54.413565][ T6138] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.416079][ T6138] ? __pfx___report_bug+0x10/0x10 [ 54.418067][ T6138] ? dump_stack_lvl+0x176/0x190 [ 54.419954][ T6138] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 54.422314][ T6138] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.424895][ T6138] report_bug+0xb3/0x220 [ 54.426581][ T6138] ? batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.429149][ T6138] handle_bug+0x16a/0x2a0 [ 54.430861][ T6138] exc_invalid_op+0x17/0x50 [ 54.432661][ T6138] asm_exc_invalid_op+0x1a/0x20 [ 54.434575][ T6138] RIP: 0010:batadv_iv_ogm_process_per_outif+0x2d62/0x3980 [ 54.437332][ T6138] Code: 48 83 7c 24 68 00 48 c7 44 24 78 00 00 00 00 0f 85 7d da ff ff e9 df da ff ff e8 29 9e e5 f6 e9 ae d3 ff ff e8 0f 5e 72 f6 90 <0f> 0b 90 49 8d 9d 20 02 00 00 be 04 00 00 00 bd ff ff ff ff 48 89 [ 54.444486][ T6138] RSP: 0018:ffffc900218bf460 EFLAGS: 00010287 [ 54.446793][ T6138] RAX: 0000000000025c72 RBX: 0000000000000000 RCX: ffffc90006b99000 [ 54.449859][ T6138] RDX: 0000000000080000 RSI: ffffffff8b994821 RDI: ffffffff8c625580 [ 54.452953][ T6138] RBP: ffff8880526d0040 R08: 0000000000000001 R09: 0000000000000000 [ 54.455996][ T6138] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 54.459037][ T6138] R13: ffff8880003f2000 R14: ffff88801f28f180 R15: ffff88804e328000 [ 54.462043][ T6138] ? batadv_iv_ogm_process_per_outif+0x2d61/0x3980 [ 54.464590][ T6138] ? find_held_lock+0x2b/0x80 [ 54.466454][ T6138] ? lock_acquire+0x1d1/0x380 [ 54.468375][ T6138] ? do_raw_spin_lock+0x128/0x260 [ 54.470384][ T6138] ? find_held_lock+0x2b/0x80 [ 54.472272][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.474714][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.477120][ T6138] ? rcu_is_watching+0x13/0xc0 [ 54.478951][ T6138] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 54.481581][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.483679][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x453/0x720 [ 54.486295][ T6138] ? __local_bh_enable_ip+0xa5/0x120 [ 54.488497][ T6138] ? batadv_iv_ogm_orig_get.part.0+0x4f9/0x720 [ 54.490953][ T6138] batadv_iv_ogm_receive+0x1049/0x1ae0 [ 54.493151][ T6138] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 54.495465][ T6138] ? __pfx___up_read+0x10/0x10 [ 54.497355][ T6138] ? do_user_addr_fault+0x7d7/0x12f0 [ 54.499427][ T6138] ? do_user_addr_fault+0x7d7/0x12f0 [ 54.501579][ T6138] batadv_batman_skb_recv+0x5e0/0x850 [ 54.503786][ T6138] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.506221][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.508452][ T6138] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 54.510928][ T6138] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 54.513363][ T6138] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 54.515981][ T6138] ? lock_acquire+0x1d1/0x380 [ 54.517890][ T6138] __netif_receive_skb+0x1f/0x120 [ 54.520006][ T6138] netif_receive_skb+0x139/0x7d0 [ 54.522065][ T6138] ? __pfx_netif_receive_skb+0x10/0x10 [ 54.524305][ T6138] ? _copy_from_iter+0x270/0x1690 [ 54.526363][ T6138] tun_rx_batched.isra.0+0x3f6/0x750 [ 54.528539][ T6138] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 54.530959][ T6138] ? tun_get_user+0x1e1e/0x3cc0 [ 54.532976][ T6138] tun_get_user+0x1f53/0x3cc0 [ 54.534930][ T6138] ? __lock_acquire+0x5c0/0x1f40 [ 54.536991][ T6138] ? __pfx_tun_get_user+0x10/0x10 [ 54.539054][ T6138] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 54.541308][ T6138] ? find_held_lock+0x2b/0x80 [ 54.543245][ T6138] ? tun_get+0x191/0x370 [ 54.545007][ T6138] ? tun_get+0x191/0x370 [ 54.546763][ T6138] tun_chr_write_iter+0xdc/0x200 [ 54.548806][ T6138] vfs_write+0x6af/0x1050 [ 54.550546][ T6138] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.552721][ T6138] ? __pfx_vfs_write+0x10/0x10 [ 54.554635][ T6138] ? find_held_lock+0x2b/0x80 [ 54.556510][ T6138] ksys_write+0x12a/0x250 [ 54.558233][ T6138] ? __pfx_ksys_write+0x10/0x10 [ 54.560201][ T6138] __do_fast_syscall_32+0x13a/0x8b0 [ 54.562249][ T6138] do_fast_syscall_32+0x32/0x70 [ 54.564180][ T6138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.566649][ T6138] RIP: 0023:0xf744efec [ 54.568266][ T6138] Code: Unable to access opcode bytes at 0xf744efc2. [ 54.570867][ T6138] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.574157][ T6138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 54.577209][ T6138] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 54.580289][ T6138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.583322][ T6138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.586365][ T6138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.589440][ T6138] [ 54.591401][ T6138] Kernel Offset: disabled [ 54.593098][ T6138] Rebooting in 86400 seconds..