last executing test programs: 12.610943671s ago: executing program 2 (id=2865): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a300000000009"], 0xa0}}, 0x40880) 12.610628851s ago: executing program 2 (id=2866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) write(r0, &(0x7f0000000140)='3', 0x1) 12.549530151s ago: executing program 2 (id=2867): sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20048000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00'}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000380)=0x800, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) close(0x3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x444, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 12.548909263s ago: executing program 2 (id=2868): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000102c0)=@delpolicy={0x68, 0x14, 0x800, 0x70bd27, 0x25dfdbff, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x81, 0x4e21, 0x400, 0x0, 0x90, 0x20, 0x1d}, 0x6e6bbe, 0x2}, [@sa_dir={0x5, 0x21, 0x4}, @replay_thresh={0x8, 0xb, 0x9}, @iptfs_init_delay={0x8, 0x27, 0x3}]}, 0x68}}, 0x0) connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x300, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 12.480068711s ago: executing program 2 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x2a, 0x17, 0x1, {0x21, './config/cluster/ocfs2/node/node1'}}, 0x2a) 12.479654248s ago: executing program 2 (id=2870): r0 = syz_open_dev$dri(&(0x7f0000000a80), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000b80)) 9.299921368s ago: executing program 0 (id=2921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2, &(0x7f0000000140)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x7}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex=r4, r5, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000b703000000000000b704000000000000850000009800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r2, r6, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 8.635628253s ago: executing program 0 (id=2933): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8200c000800010002010400030050"], 0x11) syz_emit_vhci(&(0x7f000000cb00)=ANY=[@ANYBLOB="02c8200a00060040"], 0xf) 3.94889252s ago: executing program 0 (id=2944): sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20048000) mount(0x0, 0x0, &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000380)=0x800, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r3 = socket(0x2, 0x2, 0x1) close(0x3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x444, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.313254457s ago: executing program 3 (id=2961): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa00000000000000000800120000ff800003000000000000001200000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x4004080) 3.160957809s ago: executing program 3 (id=2962): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.102156549s ago: executing program 3 (id=2964): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffd, 0x0, &(0x7f0000000080)={0x20, 0x3, 0x18, 0x1}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}) 3.020802186s ago: executing program 3 (id=2965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000580)='7', 0x1) read$char_usb(r2, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="2318e7") 2.450922057s ago: executing program 0 (id=2971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000600), 0x8, 0x10, &(0x7f0000000640), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000880)="b90103600033f0000000000008001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.450720905s ago: executing program 0 (id=2972): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000c40), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000140)={0xa, &(0x7f0000000000)=[{0x1b, '\x00', @data=0xe, 0x4}, {0x1f, '\x00', @st={0x4, [{0x1, @uvalue=0xc7b}, {0x1, @svalue=0x5}, {0x3, @svalue=0x9}, {0x0, @svalue=0x3}]}}, {0x67, '\x00', @buffer={"be017e344fd02e166e43974598ff7fcf8677ba0a48f6255cf0e092d2df8bc2eb", 0x20}, 0xc}]}) 2.388605121s ago: executing program 0 (id=2973): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000580)='7', 0x1) syz_usb_control_io$uac3(r1, 0x0, 0x0) 1.960417013s ago: executing program 1 (id=2975): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) dup3(r1, r0, 0x80000) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03070000"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 1.960165466s ago: executing program 1 (id=2976): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$CDROM_DEBUG(r0, 0x5330, 0x1) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000100)) 1.78687557s ago: executing program 1 (id=2977): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='myproc\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x2, 0x10) write(r0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)="32ee9a6d685ef9d27d3afb383b2acd7862b4b17081c05ffebbad82a2f4aef8f12fb73bca4d1ed199e8058d3340f1ca85be675b5d39456fcff191c2974bbbe8", 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x22201, 0x0) write(r2, &(0x7f0000000480)='dummy_', 0x6) mkdir(&(0x7f0000000540)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='mnt\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='a '], 0xa) 1.786633748s ago: executing program 1 (id=2978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000012a80), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000012c80)={0xa, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x296, 0x0, 0x1}]}) 1.660756197s ago: executing program 1 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 1.660422258s ago: executing program 1 (id=2980): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x5, 0x1, 0x4, 0x1, 0x1, 0x8}) 463.46µs ago: executing program 3 (id=2981): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000050000001d040040"]) 0s ago: executing program 3 (id=2982): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0xa001, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000380)='./gadget\x00', &(0x7f00000003c0)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r4, &(0x7f0000000440)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) kernel console output (not intermixed with test programs): netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'. [ 190.514621][ T5096] Bluetooth: hci4: command tx timeout [ 190.687159][T10217] syzkaller0: entered promiscuous mode [ 190.687174][T10217] syzkaller0: entered allmulticast mode [ 190.812127][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1783'. [ 191.129312][T10244] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.133523][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1793'. [ 191.133538][T10246] tipc: Invalid UDP bearer configuration [ 191.133557][T10246] tipc: Enabling of bearer rejected, failed to enable media [ 191.193085][T10244] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.260627][T10244] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.343590][T10244] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.455175][ T5782] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.455204][ T5782] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.455223][ T5782] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.455240][ T5782] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.564268][ T5831] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 191.691334][T10272] syzkaller0: entered promiscuous mode [ 191.691348][T10272] syzkaller0: entered allmulticast mode [ 191.725852][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 191.727469][ T5831] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 191.728568][ T5831] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 191.728588][ T5831] usb 8-1: config 179 has no interface number 0 [ 191.728620][ T5831] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 191.728642][ T5831] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 191.728665][ T5831] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.728687][ T5831] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 191.728707][ T5831] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 191.728740][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.732178][T10256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.951989][ T5856] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input15 [ 192.140931][ T5856] usb 8-1: USB disconnect, device number 3 [ 192.141028][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 192.141050][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 192.268498][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'. [ 192.563499][T10332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1832'. [ 192.604290][ T5096] Bluetooth: hci4: command tx timeout [ 192.630031][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'. [ 192.661417][T10342] MTRR 1 not used [ 192.698756][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 192.699858][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 192.701181][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 192.866441][T10363] FAULT_INJECTION: forcing a failure. [ 192.866441][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 192.866481][T10363] CPU: 2 UID: 0 PID: 10363 Comm: syz.3.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.866508][T10363] Tainted: [L]=SOFTLOCKUP [ 192.866515][T10363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.866527][T10363] Call Trace: [ 192.866534][T10363] [ 192.866542][T10363] dump_stack_lvl+0x100/0x190 [ 192.866573][T10363] should_fail_ex.cold+0x5/0xa [ 192.866600][T10363] should_failslab+0xc2/0x120 [ 192.866628][T10363] kmem_cache_alloc_noprof+0x92/0x6a0 [ 192.866654][T10363] ? __pfx_map_id_range_down+0x10/0x10 [ 192.866680][T10363] ? trace_kmem_cache_alloc+0xdd/0x100 [ 192.866709][T10363] ? security_inode_alloc+0x3b/0x2c0 [ 192.866751][T10363] security_inode_alloc+0x3b/0x2c0 [ 192.866776][T10363] inode_init_always_gfp+0xc6f/0xfb0 [ 192.866809][T10363] alloc_inode+0x8e/0x250 [ 192.866831][T10363] new_inode+0x22/0x1c0 [ 192.866854][T10363] hugetlbfs_get_inode+0x39a/0x700 [ 192.866885][T10363] hugetlb_file_setup+0x15b/0x5b0 [ 192.866916][T10363] ksys_mmap_pgoff+0x242/0x610 [ 192.866946][T10363] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 192.866979][T10363] __do_fast_syscall_32+0x14b/0x8c0 [ 192.867011][T10363] do_fast_syscall_32+0x32/0x70 [ 192.867037][T10363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.867061][T10363] RIP: 0023:0xf739efbc [ 192.867076][T10363] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 192.867095][T10363] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 192.867114][T10363] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 192.867126][T10363] RDX: 0000000002000003 RSI: 000000000004c831 RDI: 00000000ffffffff [ 192.867138][T10363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.867149][T10363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.867160][T10363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.867185][T10363] [ 192.906618][ T42] audit: type=1800 audit(2000000088.279:30): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1846" name=08 dev="sda1" ino=2040 res=0 errno=0 [ 193.407118][T10403] syz.2.1865 (10403): drop_caches: 2 [ 193.795504][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.065154][T10452] syzkaller0: entered promiscuous mode [ 194.065174][T10452] syzkaller0: entered allmulticast mode [ 194.165752][ T29] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 194.334309][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 194.335129][ T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 194.335161][ T29] usb 7-1: no configurations [ 194.335172][ T29] usb 7-1: can't read configurations, error -22 [ 194.484345][ T29] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 194.602213][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.603112][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.654241][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 194.654911][ T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 194.654932][ T29] usb 7-1: no configurations [ 194.654938][ T29] usb 7-1: can't read configurations, error -22 [ 194.655055][ T29] usb usb7-port1: attempt power cycle [ 194.684283][ T5096] Bluetooth: hci4: command tx timeout [ 194.696472][T10481] syzkaller0: entered promiscuous mode [ 194.696492][T10481] syzkaller0: entered allmulticast mode [ 195.005222][ T29] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 195.025518][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 195.026067][ T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 195.026100][ T29] usb 7-1: no configurations [ 195.026111][ T29] usb 7-1: can't read configurations, error -22 [ 195.174328][ T29] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 195.194727][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 195.195149][ T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 195.195169][ T29] usb 7-1: no configurations [ 195.195175][ T29] usb 7-1: can't read configurations, error -22 [ 195.195412][ T29] usb usb7-port1: unable to enumerate USB device [ 195.683384][T10514] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.683409][T10514] block device autoloading is deprecated and will be removed. [ 195.802483][T10520] FAULT_INJECTION: forcing a failure. [ 195.802483][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 195.802514][T10520] CPU: 1 UID: 0 PID: 10520 Comm: syz.3.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.802536][T10520] Tainted: [L]=SOFTLOCKUP [ 195.802542][T10520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.802552][T10520] Call Trace: [ 195.802559][T10520] [ 195.802566][T10520] dump_stack_lvl+0x100/0x190 [ 195.802594][T10520] should_fail_ex.cold+0x5/0xa [ 195.802613][T10520] should_failslab+0xc2/0x120 [ 195.802641][T10520] kmem_cache_alloc_noprof+0x92/0x6a0 [ 195.802666][T10520] ? __pfx_map_id_range_down+0x10/0x10 [ 195.802689][T10520] ? rcu_is_watching+0x13/0xc0 [ 195.802700][T10520] ? security_inode_alloc+0x3b/0x2c0 [ 195.802715][T10520] security_inode_alloc+0x3b/0x2c0 [ 195.802727][T10520] inode_init_always_gfp+0xc6f/0xfb0 [ 195.802745][T10520] alloc_inode+0x8e/0x250 [ 195.802756][T10520] sock_alloc+0x42/0x240 [ 195.802769][T10520] __sock_create+0xc2/0x860 [ 195.802782][T10520] ? smc_hash_sk+0x19e/0x2e0 [ 195.802812][T10520] smc_create+0x163/0x290 [ 195.802826][T10520] __sock_create+0x339/0x860 [ 195.802843][T10520] __sys_socket+0x14d/0x260 [ 195.802858][T10520] ? __pfx___sys_socket+0x10/0x10 [ 195.802873][T10520] ? __might_fault+0xc5/0x140 [ 195.802888][T10520] __ia32_sys_socket+0x72/0xb0 [ 195.802903][T10520] __do_fast_syscall_32+0x14b/0x8c0 [ 195.802921][T10520] do_fast_syscall_32+0x32/0x70 [ 195.802936][T10520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.802952][T10520] RIP: 0023:0xf739efbc [ 195.802961][T10520] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 195.802972][T10520] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 195.802983][T10520] RAX: ffffffffffffffda RBX: 000000000000002b RCX: 0000000000000001 [ 195.802990][T10520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.802996][T10520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.803002][T10520] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.803008][T10520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.803022][T10520] [ 195.803037][T10520] socket: no more sockets [ 195.870412][T10526] syzkaller0: entered promiscuous mode [ 195.870432][T10526] syzkaller0: entered allmulticast mode [ 195.897320][T10528] __nla_validate_parse: 9 callbacks suppressed [ 195.897333][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 195.897367][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 196.125918][T10542] tipc: Started in network mode [ 196.125935][T10542] tipc: Node identity 5e894fa70c2, cluster identity 4711 [ 196.126066][T10542] tipc: Enabled bearer , priority 10 [ 196.127154][T10541] tipc: Resetting bearer [ 196.135563][T10541] tipc: Disabling bearer [ 196.234428][T10552] batman_adv: batadv0: Adding interface: syzkaller0 [ 196.234441][T10552] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.234457][T10552] batman_adv: batadv0: Interface activated: syzkaller0 [ 196.244330][ T5831] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 196.384437][ T5831] usb 8-1: device descriptor read/64, error -71 [ 196.634310][ T5831] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 196.754460][ T5096] Bluetooth: hci4: command tx timeout [ 196.776138][ T5831] usb 8-1: device descriptor read/64, error -71 [ 196.794634][T10550] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 196.803676][T10550] batman_adv: batadv0: Removing interface: syzkaller0 [ 196.894541][ T5831] usb usb8-port1: attempt power cycle [ 196.915924][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 196.915938][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 197.255184][ T5831] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 197.274847][ T5831] usb 8-1: device descriptor read/8, error -71 [ 197.329328][T10612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 197.384818][ T5942] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 197.534337][ T5831] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 197.534362][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 197.535923][ T5942] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 197.535956][ T5942] usb 6-1: no configurations [ 197.535967][ T5942] usb 6-1: can't read configurations, error -22 [ 197.554806][ T5831] usb 8-1: device descriptor read/8, error -71 [ 197.664758][ T5831] usb usb8-port1: unable to enumerate USB device [ 197.676626][ T5942] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 197.834339][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 197.834792][ T5942] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 197.834814][ T5942] usb 6-1: no configurations [ 197.834820][ T5942] usb 6-1: can't read configurations, error -22 [ 197.835027][ T5942] usb usb6-port1: attempt power cycle [ 198.174345][ T5942] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 198.207494][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 198.207934][ T5942] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 198.207957][ T5942] usb 6-1: no configurations [ 198.207964][ T5942] usb 6-1: can't read configurations, error -22 [ 198.345229][ T5942] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 198.365052][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 198.365495][ T5942] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 198.365516][ T5942] usb 6-1: no configurations [ 198.365522][ T5942] usb 6-1: can't read configurations, error -22 [ 198.365738][ T5942] usb usb6-port1: unable to enumerate USB device [ 198.526571][T10634] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.646090][T10634] md: could not open device unknown-block(1,4). [ 198.914924][T10657] syzkaller0: entered promiscuous mode [ 198.914939][T10657] syzkaller0: entered allmulticast mode [ 199.077925][T10669] syzkaller0: entered promiscuous mode [ 199.077947][T10669] syzkaller0: entered allmulticast mode [ 199.203499][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1993'. [ 199.610101][T10716] file system registered [ 199.615269][T10716] unloading [ 199.635222][ T5747] ffs_data_put(): freeing [ 199.813228][ T42] audit: type=1326 audit(2000000095.179:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.813412][ T42] audit: type=1326 audit(2000000095.179:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.814962][ T42] audit: type=1326 audit(2000000095.189:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.815003][ T42] audit: type=1326 audit(2000000095.189:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.815394][ T42] audit: type=1326 audit(2000000095.189:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.815845][ T42] audit: type=1326 audit(2000000095.189:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.816046][ T42] audit: type=1326 audit(2000000095.189:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.816335][ T42] audit: type=1326 audit(2000000095.189:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.816374][ T42] audit: type=1326 audit(2000000095.189:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 199.817212][ T42] audit: type=1326 audit(2000000095.189:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.2.2015" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f08fbc code=0x7ffc0000 [ 200.607116][T10764] FAULT_INJECTION: forcing a failure. [ 200.607116][T10764] name fail_futex, interval 1, probability 0, space 0, times 1 [ 200.607150][T10764] CPU: 3 UID: 0 PID: 10764 Comm: syz.2.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.607176][T10764] Tainted: [L]=SOFTLOCKUP [ 200.607184][T10764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.607195][T10764] Call Trace: [ 200.607201][T10764] [ 200.607210][T10764] dump_stack_lvl+0x100/0x190 [ 200.607242][T10764] should_fail_ex.cold+0x5/0xa [ 200.607269][T10764] get_futex_key+0x1c9/0x13e0 [ 200.607293][T10764] ? __pfx_get_futex_key+0x10/0x10 [ 200.607319][T10764] futex_wait_setup+0x91/0x540 [ 200.607352][T10764] __futex_wait+0x19f/0x360 [ 200.607378][T10764] ? __pfx___futex_wait+0x10/0x10 [ 200.607401][T10764] ? __pfx_try_to_wake_up+0x10/0x10 [ 200.607427][T10764] ? futex_hash+0x311/0x400 [ 200.607459][T10764] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.607488][T10764] ? find_held_lock+0x2b/0x80 [ 200.607508][T10764] ? futex_wake+0x4ea/0x5e0 [ 200.607536][T10764] futex_wait+0xe6/0x370 [ 200.607561][T10764] ? __pfx_futex_wait+0x10/0x10 [ 200.607592][T10764] ? rcu_read_lock_any_held+0x6a/0x90 [ 200.607613][T10764] ? find_held_lock+0x2b/0x80 [ 200.607631][T10764] ? ksys_write+0x190/0x250 [ 200.607655][T10764] ? ksys_write+0x190/0x250 [ 200.607681][T10764] do_futex+0x265/0x440 [ 200.607726][T10764] ? __pfx_do_futex+0x10/0x10 [ 200.607749][T10764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.607781][T10764] __ia32_sys_futex_time32+0x2f4/0x470 [ 200.607808][T10764] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 200.607831][T10764] ? __might_fault+0xc5/0x140 [ 200.607859][T10764] __do_fast_syscall_32+0x14b/0x8c0 [ 200.607889][T10764] do_fast_syscall_32+0x32/0x70 [ 200.607920][T10764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.607944][T10764] RIP: 0023:0xf7f08fbc [ 200.607961][T10764] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 200.607979][T10764] RSP: 002b:00000000f53b65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 200.608000][T10764] RAX: ffffffffffffffda RBX: 00000000f73c4f88 RCX: 0000000000000080 [ 200.608013][T10764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73c4f8c [ 200.608026][T10764] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 200.608038][T10764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.608051][T10764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.608078][T10764] [ 200.984296][ T5527] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 201.134263][ T5527] usb 8-1: Using ep0 maxpacket: 32 [ 201.134729][ T5527] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 201.134751][ T5527] usb 8-1: no configurations [ 201.134757][ T5527] usb 8-1: can't read configurations, error -22 [ 201.264302][ T5527] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 201.414326][ T5527] usb 8-1: Using ep0 maxpacket: 32 [ 201.415089][ T5527] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 201.415123][ T5527] usb 8-1: no configurations [ 201.415134][ T5527] usb 8-1: can't read configurations, error -22 [ 201.415478][ T5527] usb usb8-port1: attempt power cycle [ 201.450884][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2037'. [ 201.510896][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2038'. [ 201.510914][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2038'. [ 201.755040][ T5527] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 201.775284][ T5527] usb 8-1: Using ep0 maxpacket: 32 [ 201.775851][ T5527] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 201.775872][ T5527] usb 8-1: no configurations [ 201.775879][ T5527] usb 8-1: can't read configurations, error -22 [ 201.899366][T10799] syzkaller0: entered promiscuous mode [ 201.899380][T10799] syzkaller0: entered allmulticast mode [ 201.908754][ T5527] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 201.925390][ T5527] usb 8-1: Using ep0 maxpacket: 32 [ 201.926719][ T5527] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 201.926750][ T5527] usb 8-1: no configurations [ 201.926760][ T5527] usb 8-1: can't read configurations, error -22 [ 201.926950][ T5527] usb usb8-port1: unable to enumerate USB device [ 202.010766][T10801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2046'. [ 202.327389][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 202.521322][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2065'. [ 202.729980][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 202.775021][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 202.821363][T10865] loop2: detected capacity change from 0 to 6 [ 202.825108][T10865] Dev loop2: unable to read RDB block 6 [ 202.825142][T10865] loop2: unable to read partition table [ 202.825287][T10865] loop2: partition table beyond EOD, truncated [ 202.825340][T10865] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.828957][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 202.829022][T10865] bridge_slave_1: left allmulticast mode [ 202.829041][T10865] bridge_slave_1: left promiscuous mode [ 202.829232][T10865] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.836389][T10865] bridge_slave_0: left allmulticast mode [ 202.836411][T10865] bridge_slave_0: left promiscuous mode [ 202.836600][T10865] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.174583][T10879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2081'. [ 203.488658][T10899] syzkaller0: entered promiscuous mode [ 203.488673][T10899] syzkaller0: entered allmulticast mode [ 203.693819][T10921] 9p: Bad value for 'wfdno' [ 204.204409][ T5624] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 204.364844][ T5624] usb 7-1: Using ep0 maxpacket: 32 [ 204.365559][ T5624] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 204.365582][ T5624] usb 7-1: no configurations [ 204.365588][ T5624] usb 7-1: can't read configurations, error -22 [ 204.514319][ T5624] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 204.678197][ T5624] usb 7-1: Using ep0 maxpacket: 32 [ 204.678878][ T5624] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 204.678915][ T5624] usb 7-1: no configurations [ 204.678925][ T5624] usb 7-1: can't read configurations, error -22 [ 204.679234][ T5624] usb usb7-port1: attempt power cycle [ 205.034338][ T5624] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 205.055703][ T5624] usb 7-1: Using ep0 maxpacket: 32 [ 205.056306][ T5624] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 205.056339][ T5624] usb 7-1: no configurations [ 205.056350][ T5624] usb 7-1: can't read configurations, error -22 [ 205.194296][ T5624] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 205.224927][ T5624] usb 7-1: Using ep0 maxpacket: 32 [ 205.225461][ T5624] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 205.225493][ T5624] usb 7-1: no configurations [ 205.225503][ T5624] usb 7-1: can't read configurations, error -22 [ 205.225706][ T5624] usb usb7-port1: unable to enumerate USB device [ 205.711024][T10962] FAULT_INJECTION: forcing a failure. [ 205.711024][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 205.711105][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.1.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.711129][T10962] Tainted: [L]=SOFTLOCKUP [ 205.711138][T10962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.711149][T10962] Call Trace: [ 205.711156][T10962] [ 205.711164][T10962] dump_stack_lvl+0x100/0x190 [ 205.711195][T10962] should_fail_ex.cold+0x5/0xa [ 205.711223][T10962] should_failslab+0xc2/0x120 [ 205.711252][T10962] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 205.711287][T10962] ? __kasan_kmalloc+0xaa/0xb0 [ 205.711313][T10962] ? __request_module+0x2d5/0x6a0 [ 205.711342][T10962] kstrdup+0x51/0xe0 [ 205.711366][T10962] __request_module+0x2d5/0x6a0 [ 205.711388][T10962] ? __pfx___request_module+0x10/0x10 [ 205.711419][T10962] ? find_held_lock+0x2b/0x80 [ 205.711440][T10962] ? __get_fs_type+0xd9/0x200 [ 205.711458][T10962] ? __get_fs_type+0xd9/0x200 [ 205.711477][T10962] ? find_filesystem+0xf7/0x130 [ 205.711501][T10962] get_fs_type+0xd7/0x190 [ 205.711521][T10962] tomoyo_mount_acl+0x26a/0x8b0 [ 205.711546][T10962] ? is_bpf_text_address+0x8a/0x1a0 [ 205.711574][T10962] ? is_bpf_text_address+0x8a/0x1a0 [ 205.711605][T10962] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.711632][T10962] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 205.711656][T10962] ? kernel_text_address+0x8d/0x100 [ 205.711679][T10962] ? unwind_get_return_address+0x59/0xa0 [ 205.711705][T10962] ? arch_stack_walk+0xa6/0xf0 [ 205.711731][T10962] ? __lock_acquire+0x5c0/0x1f40 [ 205.711768][T10962] ? tomoyo_mount_permission+0x1f6/0x460 [ 205.711795][T10962] ? tomoyo_domain+0xb2/0x150 [ 205.711814][T10962] ? tomoyo_profile+0x47/0x60 [ 205.711835][T10962] tomoyo_mount_permission+0x214/0x460 [ 205.711861][T10962] ? tomoyo_mount_permission+0x1f6/0x460 [ 205.711888][T10962] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 205.711930][T10962] security_sb_mount+0xdd/0x270 [ 205.711955][T10962] path_mount+0x158/0x2850 [ 205.711978][T10962] ? __pfx_path_mount+0x10/0x10 [ 205.711997][T10962] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.712025][T10962] ? putname+0xb1/0x110 [ 205.712053][T10962] ? kmem_cache_free+0x127/0x6c0 [ 205.712085][T10962] ? __ia32_sys_mount+0x292/0x310 [ 205.712103][T10962] __ia32_sys_mount+0x292/0x310 [ 205.712125][T10962] ? __pfx___ia32_sys_mount+0x10/0x10 [ 205.712154][T10962] __do_fast_syscall_32+0x14b/0x8c0 [ 205.712184][T10962] do_fast_syscall_32+0x32/0x70 [ 205.712210][T10962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.712233][T10962] RIP: 0023:0xf7fe2fbc [ 205.712249][T10962] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 205.712272][T10962] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 205.712294][T10962] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000300 [ 205.712307][T10962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.712319][T10962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.712328][T10962] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.712339][T10962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.712364][T10962] [ 206.194389][ T50] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 206.324292][ T50] usb 6-1: device descriptor read/64, error -71 [ 206.343135][T10979] team0: Device xfrm0 is of different type [ 206.347558][T10979] tipc: Started in network mode [ 206.347581][T10979] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 206.348115][T10979] tipc: Enabled bearer , priority 0 [ 206.565670][ T50] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 206.602142][T10994] __nla_validate_parse: 2 callbacks suppressed [ 206.602155][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2136'. [ 206.694368][ T50] usb 6-1: device descriptor read/64, error -71 [ 206.709851][T11000] FAULT_INJECTION: forcing a failure. [ 206.709851][T11000] name failslab, interval 1, probability 0, space 0, times 0 [ 206.709875][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.3.2139 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.709892][T11000] Tainted: [L]=SOFTLOCKUP [ 206.709896][T11000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.709904][T11000] Call Trace: [ 206.709908][T11000] [ 206.709913][T11000] dump_stack_lvl+0x100/0x190 [ 206.709934][T11000] should_fail_ex.cold+0x5/0xa [ 206.709949][T11000] ? __pfx_cgroup_show_path+0x10/0x10 [ 206.709968][T11000] should_failslab+0xc2/0x120 [ 206.709985][T11000] ? __pfx_cgroup_show_path+0x10/0x10 [ 206.710001][T11000] __kmalloc_cache_noprof+0x91/0x6d0 [ 206.710014][T11000] ? kernfs_root+0x23/0x2a0 [ 206.710029][T11000] ? cgroup_show_path+0xb2/0x730 [ 206.710047][T11000] ? __pfx_cgroup_show_path+0x10/0x10 [ 206.710063][T11000] cgroup_show_path+0xb2/0x730 [ 206.710081][T11000] ? __pfx_cgroup_show_path+0x10/0x10 [ 206.710097][T11000] kernfs_sop_show_path+0xe9/0x160 [ 206.710112][T11000] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 206.710127][T11000] show_path+0x9e/0x100 [ 206.710140][T11000] show_mountinfo+0x1d8/0x820 [ 206.710157][T11000] ? __pfx_show_mountinfo+0x10/0x10 [ 206.710177][T11000] traverse.part.0.constprop.0+0x107/0x650 [ 206.710223][T11000] seq_lseek+0x2fb/0x430 [ 206.710245][T11000] ksys_lseek+0xf3/0x1b0 [ 206.710259][T11000] __do_fast_syscall_32+0x14b/0x8c0 [ 206.710275][T11000] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.710290][T11000] do_fast_syscall_32+0x32/0x70 [ 206.710307][T11000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.710322][T11000] RIP: 0023:0xf739efbc [ 206.710331][T11000] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 206.710342][T11000] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000013 [ 206.710353][T11000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000009d2 [ 206.710360][T11000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.710366][T11000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.710372][T11000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.710378][T11000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.710393][T11000] [ 206.814560][ T50] usb usb6-port1: attempt power cycle [ 207.154467][ T50] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 207.175108][ T50] usb 6-1: device descriptor read/8, error -71 [ 207.345408][ T58] tipc: Node number set to 11578026 [ 207.424283][ T50] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 207.444961][ T50] usb 6-1: device descriptor read/8, error -71 [ 207.555370][ T50] usb usb6-port1: unable to enumerate USB device [ 208.631558][T11032] syzkaller0: entered promiscuous mode [ 208.631572][T11032] syzkaller0: entered allmulticast mode [ 209.114289][ T5942] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 209.231058][T11053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2158'. [ 209.268333][ T5942] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 209.269331][ T5942] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 209.269353][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.269366][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.269377][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 209.270768][ T5942] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 209.270781][ T5942] usb 7-1: Manufacturer: syz [ 209.273852][T11056] FAULT_INJECTION: forcing a failure. [ 209.273852][T11056] name failslab, interval 1, probability 0, space 0, times 0 [ 209.273884][T11056] CPU: 2 UID: 0 PID: 11056 Comm: syz.3.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.273914][T11056] Tainted: [L]=SOFTLOCKUP [ 209.273923][T11056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.273933][T11056] Call Trace: [ 209.273939][T11056] [ 209.273946][T11056] dump_stack_lvl+0x100/0x190 [ 209.273974][T11056] should_fail_ex.cold+0x5/0xa [ 209.273991][T11056] ? __pfx_cgroup_show_path+0x10/0x10 [ 209.274008][T11056] should_failslab+0xc2/0x120 [ 209.274024][T11056] ? __pfx_cgroup_show_path+0x10/0x10 [ 209.274040][T11056] __kmalloc_cache_noprof+0x91/0x6d0 [ 209.274053][T11056] ? kernfs_root+0x23/0x2a0 [ 209.274066][T11056] ? cgroup_show_path+0xb2/0x730 [ 209.274084][T11056] ? __pfx_cgroup_show_path+0x10/0x10 [ 209.274100][T11056] cgroup_show_path+0xb2/0x730 [ 209.274118][T11056] ? __pfx_cgroup_show_path+0x10/0x10 [ 209.274134][T11056] kernfs_sop_show_path+0xe9/0x160 [ 209.274149][T11056] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 209.274164][T11056] show_path+0x9e/0x100 [ 209.274209][T11056] show_mountinfo+0x1d8/0x820 [ 209.274228][T11056] ? __pfx_show_mountinfo+0x10/0x10 [ 209.274250][T11056] traverse.part.0.constprop.0+0x107/0x650 [ 209.274271][T11056] seq_lseek+0x2fb/0x430 [ 209.274289][T11056] ksys_lseek+0xf3/0x1b0 [ 209.274304][T11056] __do_fast_syscall_32+0x14b/0x8c0 [ 209.274322][T11056] do_fast_syscall_32+0x32/0x70 [ 209.274337][T11056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.274351][T11056] RIP: 0023:0xf739efbc [ 209.274361][T11056] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 209.274373][T11056] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000013 [ 209.274385][T11056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000009d2 [ 209.274391][T11056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.274398][T11056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.274403][T11056] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.274410][T11056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.274428][T11056] [ 209.275154][ T5942] usb 7-1: config 0 descriptor?? [ 209.685339][ T5942] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 209.690296][ T5942] appleir 0003:05AC:8243.0018: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 210.424613][T11075] batman_adv: batadv0: Adding interface: syzkaller0 [ 210.424626][T11075] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.424642][T11075] batman_adv: batadv0: Interface activated: syzkaller0 [ 210.487647][ T5975] usb 7-1: USB disconnect, device number 43 [ 210.675094][T11079] syzkaller0: entered promiscuous mode [ 210.675110][T11079] syzkaller0: entered allmulticast mode [ 210.705890][T11073] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 210.712768][T11073] batman_adv: batadv0: Removing interface: syzkaller0 [ 210.843464][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.843705][T11091] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.872966][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 210.872982][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 210.883683][T11091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.886920][T11091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.984356][ T5840] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.984385][ T5840] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.984403][ T5840] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.984420][ T5840] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.019529][T11105] syzkaller0: entered promiscuous mode [ 211.019551][T11105] syzkaller0: entered allmulticast mode [ 211.065117][T11109] batman_adv: batadv0: Adding interface: syzkaller0 [ 211.065131][T11109] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.065147][T11109] batman_adv: batadv0: Interface activated: syzkaller0 [ 211.318307][T11108] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 211.338562][T11108] batman_adv: batadv0: Removing interface: syzkaller0 [ 211.564781][ T5944] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 211.715827][ T5944] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.716781][ T5944] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.716803][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.716817][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.716829][ T5944] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.717694][ T5944] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.717708][ T5944] usb 7-1: Manufacturer: syz [ 211.719620][ T5944] usb 7-1: config 0 descriptor?? [ 212.131657][ T5944] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 212.135897][ T5944] appleir 0003:05AC:8243.0019: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 212.953230][ T5831] usb 7-1: USB disconnect, device number 44 [ 213.904292][ T854] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 214.040851][T11275] syzkaller0: entered promiscuous mode [ 214.040873][T11275] syzkaller0: entered allmulticast mode [ 214.065743][ T854] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 214.066577][ T854] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 214.066601][ T854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.066613][ T854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.066624][ T854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 214.067371][ T854] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.067383][ T854] usb 7-1: Manufacturer: syz [ 214.068678][ T854] usb 7-1: config 0 descriptor?? [ 214.464299][ T5944] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 214.477302][ T854] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 214.480843][ T854] appleir 0003:05AC:8243.001A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 214.594716][ T5944] usb 6-1: device descriptor read/64, error -71 [ 214.834342][ T5944] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 214.850298][T11325] FAULT_INJECTION: forcing a failure. [ 214.850298][T11325] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.850331][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.3.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.850357][T11325] Tainted: [L]=SOFTLOCKUP [ 214.850364][T11325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.850375][T11325] Call Trace: [ 214.850381][T11325] [ 214.850389][T11325] dump_stack_lvl+0x100/0x190 [ 214.850413][T11325] should_fail_ex.cold+0x5/0xa [ 214.850429][T11325] get_futex_key+0x1c9/0x13e0 [ 214.850443][T11325] ? __pfx_get_futex_key+0x10/0x10 [ 214.850457][T11325] futex_wake+0xf4/0x5e0 [ 214.850470][T11325] ? string_escape_mem+0x746/0xe00 [ 214.850490][T11325] ? string_escape_mem+0x746/0xe00 [ 214.850512][T11325] ? __pfx_futex_wake+0x10/0x10 [ 214.850537][T11325] ? find_held_lock+0x2b/0x80 [ 214.850552][T11325] ? seq_lseek+0x1dc/0x430 [ 214.850573][T11325] ? seq_lseek+0x1dc/0x430 [ 214.850599][T11325] do_futex+0x2b2/0x440 [ 214.850620][T11325] ? __pfx_do_futex+0x10/0x10 [ 214.850645][T11325] __ia32_sys_futex_time32+0x2f4/0x470 [ 214.850666][T11325] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 214.850680][T11325] ? __might_fault+0xc5/0x140 [ 214.850702][T11325] __do_fast_syscall_32+0x14b/0x8c0 [ 214.850718][T11325] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.850733][T11325] do_fast_syscall_32+0x32/0x70 [ 214.850749][T11325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.850764][T11325] RIP: 0023:0xf739efbc [ 214.850774][T11325] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 214.850786][T11325] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 214.850798][T11325] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 214.850805][T11325] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 214.850812][T11325] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 214.850818][T11325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.850824][T11325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.850838][T11325] [ 214.964688][ T5944] usb 6-1: device descriptor read/64, error -71 [ 214.992172][T11333] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.076807][ T5944] usb usb6-port1: attempt power cycle [ 215.299493][ T5624] usb 7-1: USB disconnect, device number 45 [ 215.434399][ T5944] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 215.454716][ T5944] usb 6-1: device descriptor read/8, error -71 [ 215.704295][ T5944] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 215.730411][ T5944] usb 6-1: device descriptor read/8, error -71 [ 215.836276][ T5944] usb usb6-port1: unable to enumerate USB device [ 216.143306][T11342] bond0: entered promiscuous mode [ 216.143329][T11342] bond_slave_0: entered promiscuous mode [ 216.143582][T11342] bond_slave_1: entered promiscuous mode [ 216.147506][T11342] batadv0: entered promiscuous mode [ 216.601816][T11361] FAULT_INJECTION: forcing a failure. [ 216.601816][T11361] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.601848][T11361] CPU: 0 UID: 0 PID: 11361 Comm: syz.3.2296 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.601879][T11361] Tainted: [L]=SOFTLOCKUP [ 216.601886][T11361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.601897][T11361] Call Trace: [ 216.601904][T11361] [ 216.601912][T11361] dump_stack_lvl+0x100/0x190 [ 216.601943][T11361] should_fail_ex.cold+0x5/0xa [ 216.601966][T11361] get_futex_key+0x1c9/0x13e0 [ 216.601987][T11361] ? __pfx_get_futex_key+0x10/0x10 [ 216.602012][T11361] futex_wake+0xf4/0x5e0 [ 216.602031][T11361] ? string_escape_mem+0x746/0xe00 [ 216.602054][T11361] ? string_escape_mem+0x746/0xe00 [ 216.602078][T11361] ? __pfx_futex_wake+0x10/0x10 [ 216.602105][T11361] ? find_held_lock+0x2b/0x80 [ 216.602123][T11361] ? seq_lseek+0x1dc/0x430 [ 216.602144][T11361] ? seq_lseek+0x1dc/0x430 [ 216.602196][T11361] do_futex+0x2b2/0x440 [ 216.602217][T11361] ? __pfx_do_futex+0x10/0x10 [ 216.602243][T11361] __ia32_sys_futex_time32+0x2f4/0x470 [ 216.602268][T11361] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 216.602290][T11361] ? __might_fault+0xc5/0x140 [ 216.602316][T11361] __do_fast_syscall_32+0x14b/0x8c0 [ 216.602339][T11361] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.602362][T11361] do_fast_syscall_32+0x32/0x70 [ 216.602386][T11361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.602407][T11361] RIP: 0023:0xf739efbc [ 216.602421][T11361] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 216.602438][T11361] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 216.602473][T11361] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 216.602487][T11361] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 216.602498][T11361] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 216.602510][T11361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.602521][T11361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.602545][T11361] [ 217.217474][T11378] tipc: Started in network mode [ 217.217497][T11378] tipc: Node identity be7ac5c3fcdb, cluster identity 4711 [ 217.217672][T11378] tipc: Enabled bearer , priority 0 [ 217.218216][T11378] syzkaller0: entered promiscuous mode [ 217.218234][T11378] syzkaller0: entered allmulticast mode [ 217.223892][T11378] tipc: Resetting bearer [ 217.226539][T11377] tipc: Resetting bearer [ 217.243207][T11377] tipc: Disabling bearer [ 217.677136][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.679065][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.679788][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.683500][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.684355][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.774103][ T29] infiniband syz1: ib_query_port failed (-19) [ 217.776923][ T1162] smbdirect: ib_dev[syz1] removed [ 217.917743][T11418] FAULT_INJECTION: forcing a failure. [ 217.917743][T11418] name failslab, interval 1, probability 0, space 0, times 0 [ 217.917766][T11418] CPU: 3 UID: 0 PID: 11418 Comm: syz.3.2318 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.917782][T11418] Tainted: [L]=SOFTLOCKUP [ 217.917786][T11418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.917792][T11418] Call Trace: [ 217.917797][T11418] [ 217.917801][T11418] dump_stack_lvl+0x100/0x190 [ 217.917820][T11418] should_fail_ex.cold+0x5/0xa [ 217.917835][T11418] should_failslab+0xc2/0x120 [ 217.917853][T11418] kmem_cache_alloc_noprof+0x92/0x6a0 [ 217.917869][T11418] ? ptlock_alloc+0x1f/0x70 [ 217.917883][T11418] ptlock_alloc+0x1f/0x70 [ 217.917894][T11418] pte_alloc_one+0x82/0x3d0 [ 217.917909][T11418] do_fault+0x960/0x1830 [ 217.917925][T11418] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 217.917938][T11418] ? __pfx_do_fault+0x10/0x10 [ 217.917953][T11418] ? pgd_none+0x9f/0xe0 [ 217.917963][T11418] ? __pfx_pgd_none+0x10/0x10 [ 217.917973][T11418] ? find_held_lock+0x2b/0x80 [ 217.917987][T11418] __handle_mm_fault+0x150b/0x2f60 [ 217.918001][T11418] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.918011][T11418] ? __pfx_mt_find+0x10/0x10 [ 217.918034][T11418] ? find_vma+0xbf/0x140 [ 217.918048][T11418] ? __pfx_find_vma+0x10/0x10 [ 217.918064][T11418] handle_mm_fault+0x363/0xa20 [ 217.918078][T11418] do_user_addr_fault+0x745/0x12f0 [ 217.918095][T11418] exc_page_fault+0x6f/0xd0 [ 217.918108][T11418] asm_exc_page_fault+0x26/0x30 [ 217.918119][T11418] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 217.918135][T11418] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 32 55 aa fc 48 83 fd 07 0f 86 bb 00 00 00 e8 83 5a aa fc <4d> 8b 24 1e e8 7a 5a aa fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 217.918170][T11418] RSP: 0018:ffffc90007ac7ce8 EFLAGS: 00050287 [ 217.918181][T11418] RAX: 0000000000000041 RBX: 0000000000000000 RCX: ffffc900316d3000 [ 217.918188][T11418] RDX: 0000000000080000 RSI: ffffffff8561980d RDI: ffff888047b92580 [ 217.918195][T11418] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 217.918202][T11418] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 217.918208][T11418] R13: ffff888073210d18 R14: 0000000000000000 R15: 00000000000000a8 [ 217.918221][T11418] ? strncpy_from_user+0xfd/0x2d0 [ 217.918238][T11418] ? strncpy_from_user+0xfd/0x2d0 [ 217.918255][T11418] do_getname+0x78/0x390 [ 217.918268][T11418] do_sys_openat2+0xc3/0x1d0 [ 217.918280][T11418] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.918296][T11418] __ia32_compat_sys_openat+0x12d/0x210 [ 217.918308][T11418] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 217.918325][T11418] __do_fast_syscall_32+0x14b/0x8c0 [ 217.918342][T11418] do_fast_syscall_32+0x32/0x70 [ 217.918356][T11418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.918391][T11418] RIP: 0023:0xf739efbc [ 217.918402][T11418] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 217.918413][T11418] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 217.918424][T11418] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000000000000 [ 217.918431][T11418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.918438][T11418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.918444][T11418] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.918451][T11418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.918466][T11418] [ 217.972677][T11399] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.030337][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 218.038438][ T5782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.056350][T11422] bridge_slave_1 (unregistering): left allmulticast mode [ 218.056371][T11422] bridge_slave_1 (unregistering): left promiscuous mode [ 218.056480][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.106589][ T5782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.187476][ T5782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.269429][ T5782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.289723][T11434] batman_adv: batadv0: Adding interface: syzkaller0 [ 218.289739][T11434] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.289765][T11434] batman_adv: batadv0: Interface activated: syzkaller0 [ 218.290173][ T29] kernel read not supported for file /newroot/445 (pid: 29 comm: kworker/1:0) [ 218.324077][T11436] syzkaller0: entered promiscuous mode [ 218.324099][T11436] syzkaller0: entered allmulticast mode [ 218.377599][T11399] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.377696][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.377788][T11399] bridge_slave_0: entered allmulticast mode [ 218.378702][T11399] bridge_slave_0: entered promiscuous mode [ 218.385049][T11399] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.385094][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.385152][T11399] bridge_slave_1: entered allmulticast mode [ 218.385779][T11399] bridge_slave_1: entered promiscuous mode [ 218.418541][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.421355][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.441381][T11399] team0: Port device team_slave_0 added [ 218.442723][T11399] team0: Port device team_slave_1 added [ 218.459248][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.459265][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.459284][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.460696][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.460707][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.460727][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.532849][T11399] hsr_slave_0: entered promiscuous mode [ 218.533550][T11399] hsr_slave_1: entered promiscuous mode [ 218.534071][T11399] debugfs: 'hsr0' already exists in 'hsr' [ 218.534089][T11399] Cannot create hsr debugfs directory [ 218.545935][T11433] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 218.559909][T11433] batman_adv: batadv0: Removing interface: syzkaller0 [ 218.824939][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.830624][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.832190][ T5782] bond0 (unregistering): Released all slaves [ 218.871943][T11470] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2338'. [ 218.871966][T11470] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2338'. [ 219.187422][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 219.253144][ T5782] hsr_slave_0: left promiscuous mode [ 219.255866][ T5782] hsr_slave_1: left promiscuous mode [ 219.256357][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.256378][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.260448][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.260466][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.272614][ T5782] veth1_macvtap: left promiscuous mode [ 219.272724][ T5782] veth0_macvtap: left promiscuous mode [ 219.272868][ T5782] veth1_vlan: left promiscuous mode [ 219.272995][ T5782] veth0_vlan: left promiscuous mode [ 219.466988][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 219.479291][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 219.527621][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'. [ 219.592459][T11501] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2349'. [ 219.744925][T11399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.748885][T11399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.749713][T11399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.756508][T11399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.758035][T11399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.769157][T11399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.770156][T11399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.778948][T11399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.796108][ T5096] Bluetooth: hci0: command tx timeout [ 219.836040][T11399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.857019][T11399] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.866354][ T5782] IPVS: stop unused estimator thread 0... [ 219.876903][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.876952][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.881456][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.881537][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.018461][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2356'. [ 220.070425][T11539] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2357'. [ 220.070439][T11539] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2357'. [ 220.111491][T11544] syzkaller1: entered promiscuous mode [ 220.111513][T11544] syzkaller1: entered allmulticast mode [ 220.197285][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.218434][T11399] veth0_vlan: entered promiscuous mode [ 220.223170][T11399] veth1_vlan: entered promiscuous mode [ 220.240519][T11399] veth0_macvtap: entered promiscuous mode [ 220.243194][T11399] veth1_macvtap: entered promiscuous mode [ 220.251169][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.258945][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.262744][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.295321][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.295360][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.295389][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.322601][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.322622][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.334906][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.334923][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.475421][T11561] netlink: 'syz.1.2363': attribute type 21 has an invalid length. [ 220.527798][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2366'. [ 221.328023][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 221.439967][T11599] batman_adv: batadv0: Adding interface: syzkaller0 [ 221.439979][T11599] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.439995][T11599] batman_adv: batadv0: Interface activated: syzkaller0 [ 221.743903][T11598] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 221.763257][T11598] batman_adv: batadv0: Removing interface: syzkaller0 [ 221.875296][ T5096] Bluetooth: hci0: command tx timeout [ 222.007469][T11644] netlink: 'syz.2.2402': attribute type 11 has an invalid length. [ 222.046074][T11646] netlink: 'syz.2.2403': attribute type 17 has an invalid length. [ 222.046465][T11646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.582880][T11702] netlink: 'syz.1.2431': attribute type 29 has an invalid length. [ 223.250841][T11756] netlink: 'syz.1.2455': attribute type 33 has an invalid length. [ 223.250862][T11756] __nla_validate_parse: 8 callbacks suppressed [ 223.250872][T11756] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2455'. [ 223.287737][T11758] batman_adv: batadv0: Adding interface: syzkaller0 [ 223.287754][T11758] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.287779][T11758] batman_adv: batadv0: Interface activated: syzkaller0 [ 223.651605][T11757] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 223.672181][T11757] batman_adv: batadv0: Removing interface: syzkaller0 [ 223.684867][T11779] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2467'. [ 223.684890][T11779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.954255][ T5096] Bluetooth: hci0: command tx timeout [ 224.638611][T11801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2476'. [ 224.797463][T11824] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.856275][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2491'. [ 224.901636][ T5944] sony 0005:054C:03D5.001B: UNIQ does not contain a MAC address; duplicate check skipped [ 224.912783][ T5944] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.001B/input/input16 [ 224.921476][ T5944] sony 0005:054C:03D5.001B: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 224.969085][T11835] fido_id[11835]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.803078][T11849] device-mapper: table: 248:4: thin: Error opening pool device (-ENOENT) [ 225.803104][T11849] device-mapper: ioctl: error adding target to table [ 226.045593][ T5096] Bluetooth: hci0: command tx timeout [ 226.079521][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 226.081699][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 226.144218][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 226.220160][T11896] netlink: 'syz.1.2522': attribute type 61 has an invalid length. [ 226.314383][ T5831] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 226.413036][T11906] e1000e 0000:00:02.0: resetting [ 226.457023][T11906] e1000e 0000:00:02.0: reset done [ 226.484301][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 226.484752][ T5831] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 226.485523][ T5831] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.485535][ T5831] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.487029][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.487041][ T5831] usb 8-1: Product: syz [ 226.487048][ T5831] usb 8-1: Manufacturer: syz [ 226.487055][ T5831] usb 8-1: SerialNumber: syz [ 226.490771][ T5831] usb 8-1: config 0 descriptor?? [ 226.705303][T11881] Bluetooth: MGMT ver 1.23 [ 226.705323][T11881] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 226.764860][T11927] vlan2: entered promiscuous mode [ 226.764892][T11927] hsr0: entered promiscuous mode [ 226.765154][T11927] vlan2: entered allmulticast mode [ 226.765174][T11927] hsr0: entered allmulticast mode [ 226.765183][T11927] hsr_slave_0: entered allmulticast mode [ 226.765211][T11927] hsr_slave_1: entered allmulticast mode [ 226.813660][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 226.814041][T11927] hsr_slave_0: left promiscuous mode [ 226.817292][T11927] hsr_slave_1: left promiscuous mode [ 227.280662][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.282661][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.495149][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.498281][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.501094][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.502714][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.503672][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.743025][T11940] FAULT_INJECTION: forcing a failure. [ 227.743025][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 227.743287][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.1.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.743330][T11940] Tainted: [L]=SOFTLOCKUP [ 227.743338][T11940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.743351][T11940] Call Trace: [ 227.743358][T11940] [ 227.743366][T11940] dump_stack_lvl+0x100/0x190 [ 227.743400][T11940] should_fail_ex.cold+0x5/0xa [ 227.743428][T11940] should_failslab+0xc2/0x120 [ 227.743461][T11940] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.743485][T11940] ? alloc_fs_context+0x57/0xf40 [ 227.743510][T11940] alloc_fs_context+0x57/0xf40 [ 227.743530][T11940] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 227.743563][T11940] mq_init_ns+0x16e/0x820 [ 227.743588][T11940] copy_ipcs+0x3d8/0x7e0 [ 227.743612][T11940] create_new_namespaces+0x20a/0xac0 [ 227.743639][T11940] ? security_capable+0x80/0x260 [ 227.743664][T11940] unshare_nsproxy_namespaces+0xf6/0x210 [ 227.743695][T11940] ksys_unshare+0x44f/0x980 [ 227.743725][T11940] ? __pfx_ksys_unshare+0x10/0x10 [ 227.743762][T11940] ? __might_fault+0xc5/0x140 [ 227.743792][T11940] __ia32_sys_unshare+0x30/0x40 [ 227.743822][T11940] __do_fast_syscall_32+0x14b/0x8c0 [ 227.743849][T11940] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.743876][T11940] do_fast_syscall_32+0x32/0x70 [ 227.743902][T11940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.743927][T11940] RIP: 0023:0xf747efbc [ 227.743945][T11940] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.743964][T11940] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 227.743985][T11940] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 227.743997][T11940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.744009][T11940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.744021][T11940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.744033][T11940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.744059][T11940] [ 227.753687][T11940] FAULT_INJECTION: forcing a failure. [ 227.753687][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 227.753720][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.1.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.753747][T11940] Tainted: [L]=SOFTLOCKUP [ 227.753755][T11940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.753767][T11940] Call Trace: [ 227.753780][T11940] [ 227.753790][T11940] dump_stack_lvl+0x100/0x190 [ 227.753822][T11940] should_fail_ex.cold+0x5/0xa [ 227.753849][T11940] should_failslab+0xc2/0x120 [ 227.753879][T11940] __kmalloc_noprof+0xfc/0x840 [ 227.753903][T11940] ? __list_lru_init+0xd9/0x4b0 [ 227.753927][T11940] __list_lru_init+0xd9/0x4b0 [ 227.753949][T11940] sget_fc+0xa7a/0x1f60 [ 227.753976][T11940] ? __pfx_set_anon_super_fc+0x10/0x10 [ 227.753998][T11940] ? __pfx_sget_fc+0x10/0x10 [ 227.754017][T11940] ? refcount_dec_not_one+0x136/0x1b0 [ 227.754039][T11940] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 227.754058][T11940] ? __kasan_kmalloc+0xaa/0xb0 [ 227.754083][T11940] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 227.754127][T11940] ? __kasan_kmalloc+0xaa/0xb0 [ 227.754159][T11940] ? __pfx_mqueue_fill_super+0x10/0x10 [ 227.754203][T11940] get_tree_nodev+0x28/0x190 [ 227.754227][T11940] mqueue_get_tree+0xf1/0x130 [ 227.754255][T11940] vfs_get_tree+0x92/0x320 [ 227.754274][T11940] fc_mount_longterm+0x1a/0x270 [ 227.754299][T11940] mq_init_ns+0x482/0x820 [ 227.754323][T11940] copy_ipcs+0x3d8/0x7e0 [ 227.754346][T11940] create_new_namespaces+0x20a/0xac0 [ 227.754373][T11940] ? security_capable+0x80/0x260 [ 227.754394][T11940] unshare_nsproxy_namespaces+0xf6/0x210 [ 227.754422][T11940] ksys_unshare+0x44f/0x980 [ 227.754450][T11940] ? __pfx_ksys_unshare+0x10/0x10 [ 227.754480][T11940] ? __might_fault+0xc5/0x140 [ 227.754507][T11940] __ia32_sys_unshare+0x30/0x40 [ 227.754535][T11940] __do_fast_syscall_32+0x14b/0x8c0 [ 227.754560][T11940] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.754585][T11940] do_fast_syscall_32+0x32/0x70 [ 227.754608][T11940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.754634][T11940] RIP: 0023:0xf747efbc [ 227.754649][T11940] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.754667][T11940] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 227.754685][T11940] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 227.754698][T11940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.754708][T11940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.754720][T11940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.754730][T11940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.754756][T11940] [ 227.797473][T11940] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.820498][T11943] comedi comedi1: comedi_config --init_data is deprecated [ 227.821478][T11940] FAULT_INJECTION: forcing a failure. [ 227.821478][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 227.821510][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.1.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.821539][T11940] Tainted: [L]=SOFTLOCKUP [ 227.821548][T11940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.821561][T11940] Call Trace: [ 227.821569][T11940] [ 227.821579][T11940] dump_stack_lvl+0x100/0x190 [ 227.821611][T11940] should_fail_ex.cold+0x5/0xa [ 227.821640][T11940] should_failslab+0xc2/0x120 [ 227.821673][T11940] kmem_cache_alloc_noprof+0x92/0x6a0 [ 227.821701][T11940] ? __asan_memcpy+0x3c/0x60 [ 227.821725][T11940] ? __kernfs_new_node+0xd2/0xa10 [ 227.821753][T11940] __kernfs_new_node+0xd2/0xa10 [ 227.821787][T11940] ? __pfx___kernfs_new_node+0x10/0x10 [ 227.821812][T11940] ? lock_acquire+0x1d1/0x380 [ 227.821841][T11940] ? kernfs_root+0x23/0x2a0 [ 227.821874][T11940] ? find_held_lock+0x2b/0x80 [ 227.821896][T11940] ? kernfs_root+0xee/0x2a0 [ 227.821926][T11940] ? kernfs_root+0xee/0x2a0 [ 227.821965][T11940] kernfs_new_node+0x194/0x200 [ 227.821991][T11940] ? __pfx_kernfs_new_node+0x10/0x10 [ 227.822015][T11940] ? kernfs_add_one+0x213/0xb40 [ 227.822043][T11940] __kernfs_create_file+0x53/0x350 [ 227.822074][T11940] sysfs_add_file_mode_ns+0x207/0x3c0 [ 227.822137][T11940] internal_create_group+0x593/0xfb0 [ 227.822178][T11940] ? __pfx_internal_create_group+0x10/0x10 [ 227.822210][T11940] ? __pfx_kobject_add+0x10/0x10 [ 227.822243][T11940] internal_create_groups+0x9d/0x150 [ 227.822278][T11940] setup_port+0x409/0x16e0 [ 227.822346][T11940] ? __pfx_setup_port+0x10/0x10 [ 227.822372][T11940] ? do_raw_spin_unlock+0x145/0x1e0 [ 227.822410][T11940] ? rxe_get_link_layer+0x64/0xc0 [ 227.822445][T11940] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 227.822468][T11940] ? rdma_port_get_link_layer+0x57/0xe0 [ 227.822503][T11940] ib_setup_port_attrs+0x201/0x600 [ 227.822531][T11940] ? kobject_put+0xb9/0x640 [ 227.822567][T11940] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 227.822621][T11940] ? __init_waitqueue_head+0xca/0x150 [ 227.822659][T11940] add_one_compat_dev+0x5ae/0x820 [ 227.822695][T11940] rdma_dev_init_net+0x305/0x580 [ 227.822716][T11940] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 227.822736][T11940] ? __kmalloc_noprof+0x350/0x840 [ 227.822770][T11940] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 227.822796][T11940] ops_init+0x1e2/0x5f0 [ 227.822821][T11940] setup_net+0x118/0x3a0 [ 227.822844][T11940] ? __pfx_setup_net+0x10/0x10 [ 227.822868][T11940] ? bpf_lsm_namespace_init+0x9/0x10 [ 227.822899][T11940] copy_net_ns+0x340/0x7a0 [ 227.822927][T11940] create_new_namespaces+0x3ea/0xac0 [ 227.822963][T11940] unshare_nsproxy_namespaces+0xf6/0x210 [ 227.822994][T11940] ksys_unshare+0x44f/0x980 [ 227.823025][T11940] ? __pfx_ksys_unshare+0x10/0x10 [ 227.823060][T11940] ? __might_fault+0xc5/0x140 [ 227.823091][T11940] __ia32_sys_unshare+0x30/0x40 [ 227.823121][T11940] __do_fast_syscall_32+0x14b/0x8c0 [ 227.823165][T11940] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.823194][T11940] do_fast_syscall_32+0x32/0x70 [ 227.823221][T11940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.823249][T11940] RIP: 0023:0xf747efbc [ 227.823266][T11940] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.823285][T11940] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 227.823307][T11940] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 227.823321][T11940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.823334][T11940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.823348][T11940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.823362][T11940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.823391][T11940] [ 227.930128][T11933] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.310176][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.310315][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.310516][T11933] bridge_slave_0: entered allmulticast mode [ 228.312216][T11933] bridge_slave_0: entered promiscuous mode [ 228.313996][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.314065][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.314158][T11933] bridge_slave_1: entered allmulticast mode [ 228.314916][T11933] bridge_slave_1: entered promiscuous mode [ 228.328740][T11933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.330389][T11933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.352266][T11933] team0: Port device team_slave_0 added [ 228.355498][T11933] team0: Port device team_slave_1 added [ 228.380958][T11933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.380995][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.381045][T11933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.383238][T11933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.383245][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.383281][T11933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.483754][T11933] hsr_slave_0: entered promiscuous mode [ 228.484739][T11933] hsr_slave_1: entered promiscuous mode [ 228.537440][ T5942] usb 8-1: USB disconnect, device number 12 [ 228.645262][T11933] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.690170][T11933] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.749811][T11933] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.786297][T11933] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.924528][T11933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.932352][T11933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.933262][T11933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.942897][T11933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.943511][T11933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.957031][T11933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.957894][T11933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.970213][T11933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.080858][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.091444][T11933] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.096619][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.096691][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.107298][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.107411][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.131209][T11976] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.443871][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 229.458111][T11933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.490696][T11933] veth0_vlan: entered promiscuous mode [ 229.507505][T11933] veth1_vlan: entered promiscuous mode [ 229.525032][T11933] veth0_macvtap: entered promiscuous mode [ 229.528214][T11933] veth1_macvtap: entered promiscuous mode [ 229.537210][T11933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.541693][T11933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.555150][ T5096] Bluetooth: hci1: command tx timeout [ 229.565273][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.565299][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.565317][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.565336][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.648906][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.648919][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.683580][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.683594][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.731633][T12019] FAULT_INJECTION: forcing a failure. [ 229.731633][T12019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.731675][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.2.2538 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.731702][T12019] Tainted: [L]=SOFTLOCKUP [ 229.731711][T12019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.731722][T12019] Call Trace: [ 229.731729][T12019] [ 229.731738][T12019] dump_stack_lvl+0x100/0x190 [ 229.731768][T12019] should_fail_ex.cold+0x5/0xa [ 229.731796][T12019] _copy_to_user+0x32/0xd0 [ 229.731823][T12019] bpf_mprog_query+0x1fb/0x800 [ 229.731847][T12019] ? __pfx___mutex_lock+0x10/0x10 [ 229.731871][T12019] ? lock_acquire+0x1d1/0x380 [ 229.731902][T12019] ? __pfx_bpf_mprog_query+0x10/0x10 [ 229.731936][T12019] tcx_prog_query+0x169/0x370 [ 229.731956][T12019] __sys_bpf+0x3124/0x4a30 [ 229.731977][T12019] ? __pfx___sys_bpf+0x10/0x10 [ 229.731988][T12019] ? find_held_lock+0x2b/0x80 [ 229.731999][T12019] ? futex_wake+0x4ea/0x5e0 [ 229.732023][T12019] ? rcu_read_lock_any_held+0x6a/0x90 [ 229.732035][T12019] ? find_held_lock+0x2b/0x80 [ 229.732046][T12019] ? ksys_write+0x190/0x250 [ 229.732060][T12019] ? ksys_write+0x190/0x250 [ 229.732083][T12019] ? lock_acquire+0x1d1/0x380 [ 229.732097][T12019] ? __might_fault+0xc5/0x140 [ 229.732109][T12019] ? find_held_lock+0x2b/0x80 [ 229.732123][T12019] ? __ia32_sys_bpf+0xcc/0x170 [ 229.732136][T12019] __ia32_sys_bpf+0xcc/0x170 [ 229.732151][T12019] ? __might_fault+0x111/0x140 [ 229.732163][T12019] __do_fast_syscall_32+0x14b/0x8c0 [ 229.732180][T12019] do_fast_syscall_32+0x32/0x70 [ 229.732195][T12019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.732209][T12019] RIP: 0023:0xf740efbc [ 229.732220][T12019] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 229.732231][T12019] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 229.732243][T12019] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080001ac0 [ 229.732250][T12019] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.732256][T12019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.732263][T12019] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.732269][T12019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.732284][T12019] [ 229.763630][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 229.802185][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 230.159327][T12049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.176932][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2571'. [ 230.274002][T12057] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 231.109901][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 231.134284][ T854] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 231.150422][T12130] FAULT_INJECTION: forcing a failure. [ 231.150422][T12130] name failslab, interval 1, probability 0, space 0, times 0 [ 231.150452][T12130] CPU: 2 UID: 0 PID: 12130 Comm: syz.2.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.150479][T12130] Tainted: [L]=SOFTLOCKUP [ 231.150487][T12130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.150499][T12130] Call Trace: [ 231.150506][T12130] [ 231.150516][T12130] dump_stack_lvl+0x100/0x190 [ 231.150549][T12130] should_fail_ex.cold+0x5/0xa [ 231.150577][T12130] should_failslab+0xc2/0x120 [ 231.150608][T12130] __kmalloc_cache_noprof+0x91/0x6d0 [ 231.150631][T12130] ? alloc_fs_context+0x57/0xf40 [ 231.150658][T12130] alloc_fs_context+0x57/0xf40 [ 231.150683][T12130] mq_init_ns+0x16e/0x820 [ 231.150728][T12130] copy_ipcs+0x3d8/0x7e0 [ 231.150755][T12130] create_new_namespaces+0x20a/0xac0 [ 231.150784][T12130] ? security_capable+0x80/0x260 [ 231.150809][T12130] unshare_nsproxy_namespaces+0xf6/0x210 [ 231.150840][T12130] ksys_unshare+0x44f/0x980 [ 231.150867][T12130] ? __pfx_ksys_unshare+0x10/0x10 [ 231.150897][T12130] ? __might_fault+0xc5/0x140 [ 231.150923][T12130] __ia32_sys_unshare+0x30/0x40 [ 231.150952][T12130] __do_fast_syscall_32+0x14b/0x8c0 [ 231.150979][T12130] ? lockdep_hardirqs_on+0x7d/0x110 [ 231.151006][T12130] do_fast_syscall_32+0x32/0x70 [ 231.151032][T12130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.151060][T12130] RIP: 0023:0xf740efbc [ 231.151077][T12130] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 231.151096][T12130] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 231.151116][T12130] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 231.151128][T12130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.151141][T12130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.151152][T12130] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 231.151163][T12130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.151189][T12130] [ 231.152615][T12130] FAULT_INJECTION: forcing a failure. [ 231.152615][T12130] name failslab, interval 1, probability 0, space 0, times 0 [ 231.152641][T12130] CPU: 2 UID: 0 PID: 12130 Comm: syz.2.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.152667][T12130] Tainted: [L]=SOFTLOCKUP [ 231.152674][T12130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.152685][T12130] Call Trace: [ 231.152692][T12130] [ 231.152706][T12130] dump_stack_lvl+0x100/0x190 [ 231.152736][T12130] should_fail_ex.cold+0x5/0xa [ 231.152762][T12130] should_failslab+0xc2/0x120 [ 231.152791][T12130] __kmalloc_noprof+0xfc/0x840 [ 231.152818][T12130] ? __list_lru_init+0xd9/0x4b0 [ 231.152842][T12130] __list_lru_init+0xd9/0x4b0 [ 231.152865][T12130] sget_fc+0xa7a/0x1f60 [ 231.152895][T12130] ? __pfx_set_anon_super_fc+0x10/0x10 [ 231.152918][T12130] ? __pfx_sget_fc+0x10/0x10 [ 231.152940][T12130] ? refcount_dec_not_one+0x136/0x1b0 [ 231.152961][T12130] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 231.152982][T12130] ? __kasan_kmalloc+0xaa/0xb0 [ 231.153009][T12130] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 231.153031][T12130] ? __kasan_kmalloc+0xaa/0xb0 [ 231.153060][T12130] ? __pfx_mqueue_fill_super+0x10/0x10 [ 231.153087][T12130] get_tree_nodev+0x28/0x190 [ 231.153114][T12130] mqueue_get_tree+0xf1/0x130 [ 231.153140][T12130] vfs_get_tree+0x92/0x320 [ 231.153159][T12130] fc_mount_longterm+0x1a/0x270 [ 231.153182][T12130] mq_init_ns+0x482/0x820 [ 231.153206][T12130] copy_ipcs+0x3d8/0x7e0 [ 231.153231][T12130] create_new_namespaces+0x20a/0xac0 [ 231.153256][T12130] ? security_capable+0x80/0x260 [ 231.153281][T12130] unshare_nsproxy_namespaces+0xf6/0x210 [ 231.153309][T12130] ksys_unshare+0x44f/0x980 [ 231.153340][T12130] ? __pfx_ksys_unshare+0x10/0x10 [ 231.153373][T12130] ? __might_fault+0xc5/0x140 [ 231.153402][T12130] __ia32_sys_unshare+0x30/0x40 [ 231.153432][T12130] __do_fast_syscall_32+0x14b/0x8c0 [ 231.153459][T12130] ? lockdep_hardirqs_on+0x7d/0x110 [ 231.153485][T12130] do_fast_syscall_32+0x32/0x70 [ 231.153512][T12130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.153553][T12130] RIP: 0023:0xf740efbc [ 231.153571][T12130] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 231.153591][T12130] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 231.153611][T12130] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 231.153625][T12130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.153636][T12130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.153648][T12130] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 231.153660][T12130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.153686][T12130] [ 231.167988][T12132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2607'. [ 231.198920][T12130] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.241155][T12130] FAULT_INJECTION: forcing a failure. [ 231.241155][T12130] name failslab, interval 1, probability 0, space 0, times 0 [ 231.241188][T12130] CPU: 2 UID: 0 PID: 12130 Comm: syz.2.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.241216][T12130] Tainted: [L]=SOFTLOCKUP [ 231.241224][T12130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.241236][T12130] Call Trace: [ 231.241243][T12130] [ 231.241252][T12130] dump_stack_lvl+0x100/0x190 [ 231.241282][T12130] should_fail_ex.cold+0x5/0xa [ 231.241310][T12130] should_failslab+0xc2/0x120 [ 231.241341][T12130] kmem_cache_alloc_noprof+0x92/0x6a0 [ 231.241366][T12130] ? __asan_memcpy+0x3c/0x60 [ 231.241388][T12130] ? __kernfs_new_node+0xd2/0xa10 [ 231.241414][T12130] __kernfs_new_node+0xd2/0xa10 [ 231.241438][T12130] ? __pfx___kernfs_new_node+0x10/0x10 [ 231.241460][T12130] ? lock_acquire+0x1d1/0x380 [ 231.241485][T12130] ? kernfs_root+0x23/0x2a0 [ 231.241515][T12130] ? find_held_lock+0x2b/0x80 [ 231.241533][T12130] ? kernfs_root+0xee/0x2a0 [ 231.241559][T12130] ? kernfs_root+0xee/0x2a0 [ 231.241594][T12130] kernfs_new_node+0x194/0x200 [ 231.241618][T12130] ? __pfx_kernfs_new_node+0x10/0x10 [ 231.241638][T12130] ? kernfs_add_one+0x213/0xb40 [ 231.241661][T12130] __kernfs_create_file+0x53/0x350 [ 231.241688][T12130] sysfs_add_file_mode_ns+0x207/0x3c0 [ 231.241741][T12130] internal_create_group+0x593/0xfb0 [ 231.241779][T12130] ? __pfx_internal_create_group+0x10/0x10 [ 231.241808][T12130] ? __pfx_kobject_add+0x10/0x10 [ 231.241841][T12130] internal_create_groups+0x9d/0x150 [ 231.241873][T12130] setup_port+0x409/0x16e0 [ 231.241911][T12130] ? __pfx_setup_port+0x10/0x10 [ 231.241936][T12130] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.241971][T12130] ? rxe_get_link_layer+0x64/0xc0 [ 231.241994][T12130] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 231.242018][T12130] ? rdma_port_get_link_layer+0x57/0xe0 [ 231.242050][T12130] ib_setup_port_attrs+0x201/0x600 [ 231.242073][T12130] ? kobject_put+0xb9/0x640 [ 231.242125][T12130] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 231.242157][T12130] ? __init_waitqueue_head+0xca/0x150 [ 231.242191][T12130] add_one_compat_dev+0x5ae/0x820 [ 231.242223][T12130] rdma_dev_init_net+0x305/0x580 [ 231.242240][T12130] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 231.242260][T12130] ? __kmalloc_noprof+0x350/0x840 [ 231.242292][T12130] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 231.242314][T12130] ops_init+0x1e2/0x5f0 [ 231.242338][T12130] setup_net+0x118/0x3a0 [ 231.242359][T12130] ? __pfx_setup_net+0x10/0x10 [ 231.242379][T12130] ? bpf_lsm_namespace_init+0x9/0x10 [ 231.242408][T12130] copy_net_ns+0x340/0x7a0 [ 231.242433][T12130] create_new_namespaces+0x3ea/0xac0 [ 231.242465][T12130] unshare_nsproxy_namespaces+0xf6/0x210 [ 231.242495][T12130] ksys_unshare+0x44f/0x980 [ 231.242523][T12130] ? __pfx_ksys_unshare+0x10/0x10 [ 231.242554][T12130] ? __might_fault+0xc5/0x140 [ 231.242585][T12130] __ia32_sys_unshare+0x30/0x40 [ 231.242613][T12130] __do_fast_syscall_32+0x14b/0x8c0 [ 231.242636][T12130] ? lockdep_hardirqs_on+0x7d/0x110 [ 231.242662][T12130] do_fast_syscall_32+0x32/0x70 [ 231.242687][T12130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.242718][T12130] RIP: 0023:0xf740efbc [ 231.242734][T12130] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 231.242753][T12130] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 231.242772][T12130] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 231.242785][T12130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.242798][T12130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.242809][T12130] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 231.242821][T12130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.242849][T12130] [ 231.285421][ T854] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.286679][ T854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.286730][ T854] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.286776][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.289445][ T854] usb 6-1: config 0 descriptor?? [ 231.308873][ T854] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 231.506535][ T29] usb 6-1: USB disconnect, device number 53 [ 231.549354][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2613'. [ 231.630006][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 231.637106][ T5096] Bluetooth: hci1: command tx timeout [ 231.714944][T12160] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2620'. [ 231.876621][T12173] tipc: Enabled bearer , priority 0 [ 231.877238][T12173] syzkaller0: entered promiscuous mode [ 231.877247][T12173] syzkaller0: entered allmulticast mode [ 231.886688][T12173] tipc: Resetting bearer [ 231.892163][T12172] tipc: Resetting bearer [ 231.901727][T12172] tipc: Disabling bearer [ 231.954271][ T5975] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 232.096457][T12183] syzkaller0: entered promiscuous mode [ 232.096466][T12183] syzkaller0: entered allmulticast mode [ 232.114836][ C2] net_ratelimit: 256 callbacks suppressed [ 232.126581][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 232.127164][ T5975] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 232.127993][ T5975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.128036][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.128076][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.132309][ T5975] usb 6-1: config 0 descriptor?? [ 232.147997][ T5975] ldusb 6-1:0.0: Interrupt in endpoint not found [ 232.148558][ T5975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 232.241657][T12195] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2637'. [ 232.258516][T12195] syzkaller1: entered promiscuous mode [ 232.258531][T12195] syzkaller1: entered allmulticast mode [ 232.377318][T12201] device-mapper: ioctl: can't change device type (old=1 vs new=2) after initial table load. [ 232.746509][ T29] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 232.914283][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 232.915014][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.915594][ T29] usb 8-1: config 0 has no interfaces? [ 232.915636][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.917465][ T29] usb 8-1: config 0 descriptor?? [ 233.476689][T12236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.575335][T12244] tipc: Enabled bearer , priority 0 [ 233.619572][T12236] md/raid1:md3: active with 1 out of 2 mirrors [ 233.620411][T12236] md3: detected capacity change from 0 to 4096 [ 233.714443][ T5096] Bluetooth: hci1: command tx timeout [ 233.770191][T12253] netlink: 'syz.0.2661': attribute type 2 has an invalid length. [ 233.916665][ T5942] usb 6-1: USB disconnect, device number 54 [ 234.427395][ T5942] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 234.575455][ T5944] tipc: Node number set to 1386827687 [ 234.586928][ T5942] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 234.587775][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 234.587792][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.587805][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 234.589347][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.589357][ T5942] usb 6-1: Product: syz [ 234.589364][ T5942] usb 6-1: Manufacturer: syz [ 234.589372][ T5942] usb 6-1: SerialNumber: syz [ 234.590711][ T5942] usb 6-1: config 0 descriptor?? [ 234.820754][ T5942] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 235.525540][ T854] usb 8-1: USB disconnect, device number 13 [ 235.592565][T12332] FAULT_INJECTION: forcing a failure. [ 235.592565][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 235.592595][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.3.2694 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.592621][T12332] Tainted: [L]=SOFTLOCKUP [ 235.592628][T12332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.592641][T12332] Call Trace: [ 235.592649][T12332] [ 235.592657][T12332] dump_stack_lvl+0x100/0x190 [ 235.592690][T12332] should_fail_ex.cold+0x5/0xa [ 235.592714][T12332] should_failslab+0xc2/0x120 [ 235.592743][T12332] __kmalloc_noprof+0xfc/0x840 [ 235.592768][T12332] ? binder_open+0x146/0xde0 [ 235.592818][T12332] binder_open+0x146/0xde0 [ 235.592845][T12332] ? __pfx_apparmor_file_open+0x10/0x10 [ 235.592869][T12332] ? __pfx_binder_open+0x10/0x10 [ 235.592897][T12332] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 235.592923][T12332] do_dentry_open+0x674/0x1470 [ 235.592949][T12332] ? __pfx_binder_open+0x10/0x10 [ 235.592980][T12332] vfs_open_consume+0xcc/0x460 [ 235.593004][T12332] path_openat+0x1547/0x23f0 [ 235.593035][T12332] ? __pfx_path_openat+0x10/0x10 [ 235.593069][T12332] do_file_open+0x20e/0x430 [ 235.593099][T12332] ? __pfx_do_file_open+0x10/0x10 [ 235.593145][T12332] ? _raw_spin_unlock+0x28/0x50 [ 235.593166][T12332] ? alloc_fd+0x471/0x7a0 [ 235.593199][T12332] do_sys_openat2+0x163/0x1d0 [ 235.593223][T12332] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.593243][T12332] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.593275][T12332] __ia32_compat_sys_openat+0x12d/0x210 [ 235.593296][T12332] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 235.593326][T12332] __do_fast_syscall_32+0x14b/0x8c0 [ 235.593352][T12332] do_fast_syscall_32+0x32/0x70 [ 235.593373][T12332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.593399][T12332] RIP: 0023:0xf739efbc [ 235.593414][T12332] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 235.593432][T12332] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 235.593451][T12332] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 235.593464][T12332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.593477][T12332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.593488][T12332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 235.593500][T12332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.593526][T12332] [ 235.601088][T12334] __nla_validate_parse: 7 callbacks suppressed [ 235.601100][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 235.794463][T11554] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 235.794506][ T66] Bluetooth: hci1: command tx timeout [ 235.956247][T11554] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 235.956760][T11554] usb 7-1: config 0 has no interfaces? [ 235.956801][T11554] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.958657][T11554] usb 7-1: config 0 descriptor?? [ 236.188311][T11554] usb 7-1: USB disconnect, device number 46 [ 236.194292][ T5096] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 236.194318][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.833114][T12372] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2712'. [ 237.083529][ T5944] usb 6-1: USB disconnect, device number 55 [ 237.164239][ C3] net_ratelimit: 119 callbacks suppressed [ 239.938947][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2721'. [ 239.987401][T12412] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2725'. [ 239.987421][T12412] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2725'. [ 240.131781][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2736'. [ 240.208654][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 240.381283][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2749'. [ 240.485422][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2752'. [ 240.581193][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'. [ 240.604305][ T854] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 240.726683][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2758'. [ 240.755121][ T854] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 240.756695][ T854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 240.756720][ T854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.756739][ T854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 240.759055][ T854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.759072][ T854] usb 8-1: Product: syz [ 240.759197][ T854] usb 8-1: Manufacturer: syz [ 240.759217][ T854] usb 8-1: SerialNumber: syz [ 240.761503][ T854] usb 8-1: config 0 descriptor?? [ 240.972509][ T854] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 241.053984][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 241.089538][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2768'. [ 241.194893][ T5944] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 241.366172][ T5944] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.367140][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.367172][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.367203][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.368861][ T5944] usb 6-1: config 0 descriptor?? [ 241.376587][ T5944] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 241.575501][ T41] usb 6-1: USB disconnect, device number 56 [ 241.954306][ T5096] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 241.954343][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.014350][ T5944] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 242.108758][T12549] Bluetooth: ISO socket layer initialized [ 242.164341][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 242.164995][ T5944] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 242.166258][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.166290][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.166320][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.168424][ T5944] usb 6-1: config 0 descriptor?? [ 242.170881][ T5944] ldusb 6-1:0.0: Interrupt in endpoint not found [ 242.171659][ T5944] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 242.246698][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 242.274314][ C0] net_ratelimit: 57 callbacks suppressed [ 243.010011][T12588] 9p: Bad value for 'wfdno' [ 243.136860][T12592] program syz.2.2806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.240276][ T5942] usb 8-1: USB disconnect, device number 14 [ 243.677802][T12616] 9p: Bad value for 'wfdno' [ 243.933819][T12634] 9p: Bad value for 'wfdno' [ 243.962395][ T41] usb 6-1: USB disconnect, device number 57 [ 244.239714][T12663] ubi0: attaching mtd0 [ 244.243039][T12663] ubi0: scanning is finished [ 244.243045][T12663] ubi0: empty MTD device detected [ 244.331207][T12672] vxcan0: tx address claim with dlc 0 [ 244.413090][T12680] syzkaller0: left promiscuous mode [ 244.413106][T12680] syzkaller0: left allmulticast mode [ 244.539233][T12663] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 244.539255][T12663] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 244.539272][T12663] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 244.539285][T12663] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 244.539302][T12663] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 244.539315][T12663] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 244.539331][T12663] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2852347642 [ 244.539348][T12663] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 244.541200][T12688] ubi0: background thread "ubi_bgt0d" started, PID 12688 [ 244.865923][T12698] 9p: Bad value for 'wfdno' [ 245.096969][T12722] 9p: Bad value for 'wfdno' [ 246.027984][T12756] 9p: Bad value for 'wfdno' [ 247.317504][T12796] ubi: mtd0 is already attached to ubi0 [ 247.317985][T12795] 9p: Bad value for 'wfdno' [ 247.324324][ C2] net_ratelimit: 80 callbacks suppressed [ 247.770590][T12826] device-mapper: table: 248:8: adding target device ram1 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=4193792 [ 247.770610][T12826] device-mapper: table: 248:8: ram1 too small for target: start=1, len=10304, dev_size=8192 [ 247.770634][T12826] device-mapper: core: Cannot calculate initial queue limits [ 247.770639][T12826] device-mapper: ioctl: unable to set up device queue for new table. [ 247.934320][ T854] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 247.954523][T12742] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 248.084322][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 248.085185][ T854] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 248.087241][ T854] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 248.087264][ T854] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 248.087278][ T854] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.087291][ T854] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 248.091117][ T854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.091127][ T854] usb 6-1: Product: syz [ 248.091134][ T854] usb 6-1: Manufacturer: syz [ 248.091141][ T854] usb 6-1: SerialNumber: syz [ 248.097954][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 248.104430][ T854] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input17 [ 248.314276][ T854] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 248.314292][ T854] (id 0x00) [ 248.379310][ T854] rc_core: IR keymap rc-imon-pad not found [ 248.379323][ T854] Registered IR keymap rc-empty [ 248.379521][ T854] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 248.379535][ T854] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 248.516591][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 248.525366][ T854] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 248.526306][ T854] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input18 [ 248.529915][ T854] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:58> initialized [ 248.762587][T12822] imon:send_packet: task interrupted [ 248.762652][T12822] imon:send_packet: packet tx failed (-512) [ 248.763197][T12822] imon:vfd_write: send packet #0 failed [ 248.772217][ T41] usb 6-1: USB disconnect, device number 58 [ 248.789625][T12868] ubi: mtd0 is already attached to ubi0 [ 248.911994][T12874] qrtr: Invalid version 0 [ 249.083621][T12880] 9p: Bad value for 'wfdno' ** 152 printk messages dropped ** ** 1 printk messages dropped ** [ 249.763840][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.765419][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.766253][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.770067][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.770820][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.144282][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd ** 2343 printk messages dropped ** ** 69 printk messages dropped ** ** 4 printk messages dropped ** ** 115 printk messages dropped ** ** 240 printk messages dropped ** ** 258 printk messages dropped ** ** 284 printk messages dropped ** ** 223 printk messages dropped ** ** 256 printk messages dropped ** ** 275 printk messages dropped ** ** 238 printk messages dropped ** ** 390 printk messages dropped ** ** 157 printk messages dropped ** ** 165 printk messages dropped ** ** 323 printk messages dropped ** ** 226 printk messages dropped ** ** 339 printk messages dropped ** ** 251 printk messages dropped ** ** 10 printk messages dropped ** ** 111 printk messages dropped ** ** 153 printk messages dropped ** ** 273 printk messages dropped ** ** 285 printk messages dropped ** ** 218 printk messages dropped ** ** 228 printk messages dropped ** ** 242 printk messages dropped ** ** 233 printk messages dropped ** ** 246 printk messages dropped ** ** 231 printk messages dropped ** ** 218 printk messages dropped ** ** 251 printk messages dropped ** ** 287 printk messages dropped ** ** 331 printk messages dropped ** ** 249 printk messages dropped ** ** 293 printk messages dropped ** ** 237 printk messages dropped ** ** 221 printk messages dropped ** ** 288 printk messages dropped ** ** 297 printk messages dropped ** ** 228 printk messages dropped ** ** 134 printk messages dropped ** ** 148 printk messages dropped ** ** 148 printk messages dropped ** ** 145 printk messages dropped ** ** 178 printk messages dropped ** ** 154 printk messages dropped ** ** 162 printk messages dropped ** ** 140 printk messages dropped ** ** 159 printk messages dropped ** ** 143 printk messages dropped ** ** 173 printk messages dropped ** ** 148 printk messages dropped ** ** 158 printk messages dropped ** ** 153 printk messages dropped ** ** 157 printk messages dropped ** ** 155 printk messages dropped ** ** 170 printk messages dropped ** ** 157 printk messages dropped ** ** 166 printk messages dropped ** ** 157 printk messages dropped ** ** 158 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 261 printk messages dropped ** ** 295 printk messages dropped ** ** 319 printk messages dropped ** ** 275 printk messages dropped ** ** 241 printk messages dropped ** ** 331 printk messages dropped ** ** 371 printk messages dropped ** ** 400 printk messages dropped ** ** 320 printk messages dropped ** ** 344 printk messages dropped ** ** 334 printk messages dropped ** ** 364 printk messages dropped ** ** 357 printk messages dropped ** ** 334 printk messages dropped ** ** 353 printk messages dropped ** ** 315 printk messages dropped ** ** 351 printk messages dropped ** ** 346 printk messages dropped ** ** 264 printk messages dropped ** ** 159 printk messages dropped ** ** 172 printk messages dropped ** ** 170 printk messages dropped ** ** 155 printk messages dropped ** ** 158 printk messages dropped ** ** 147 printk messages dropped ** ** 170 printk messages dropped ** ** 168 printk messages dropped ** ** 169 printk messages dropped ** ** 174 printk messages dropped ** ** 162 printk messages dropped ** ** 184 printk messages dropped ** ** 167 printk messages dropped ** ** 175 printk messages dropped ** ** 150 printk messages dropped ** ** 178 printk messages dropped ** ** 176 printk messages dropped ** ** 163 printk messages dropped ** ** 180 printk messages dropped ** ** 177 printk messages dropped ** ** 14 printk messages dropped ** [ 250.344411][T12906] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.374770][ T29] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.375705][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.375718][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.375746][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.398624][ T29] usb 8-1: config 0 descriptor?? ** 1327 printk messages dropped ** [ 250.639383][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 250.639449][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 250.640606][ T29] usb 8-1: USB disconnect, device number 15 [ 250.904267][ T50] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 250.930361][ T13] bridge_slave_0: left allmulticast mode [ 250.930372][ T13] bridge_slave_0: left promiscuous mode [ 250.931956][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.074774][ T50] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 251.075595][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.075627][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.076773][ T50] usb 6-1: config 0 descriptor?? [ 251.087809][ T50] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 251.184327][ T29] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 251.192227][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.193730][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.203435][ T13] bond0 (unregistering): Released all slaves [ 251.285262][ T50] usb 6-1: USB disconnect, device number 59 [ 251.289089][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.291353][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.291434][T12906] bridge_slave_0: entered allmulticast mode [ 251.292214][T12906] bridge_slave_0: entered promiscuous mode [ 251.295502][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.296436][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.296515][T12906] bridge_slave_1: entered allmulticast mode [ 251.301107][T12906] bridge_slave_1: entered promiscuous mode [ 251.348977][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 251.349903][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 251.351302][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.351316][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.351343][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.353255][ T29] usb 8-1: config 0 descriptor?? [ 251.367493][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.371603][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.391211][ T29] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 251.403301][ T29] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 251.408477][ T13] tipc: Disabling bearer [ 251.476387][ T13] tipc: Left network mode [ 251.503867][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 251.508392][T12906] team0: Port device team_slave_0 added [ 251.509974][T12906] team0: Port device team_slave_1 added [ 251.553375][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.553381][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.553395][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.554335][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.554341][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.554357][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.598231][T12912] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 251.629850][T12906] hsr_slave_0: entered promiscuous mode [ 251.630423][T12906] hsr_slave_1: entered promiscuous mode [ 251.630918][T12906] debugfs: 'hsr0' already exists in 'hsr' [ 251.630934][T12906] Cannot create hsr debugfs directory [ 251.744271][ T50] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 251.769260][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 251.802499][ T5096] Bluetooth: hci3: command tx timeout [ 251.905685][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 251.907104][ T50] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 251.908214][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.908260][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.910460][ T50] usb 6-1: config 0 descriptor?? [ 251.943371][ T50] ldusb 6-1:0.0: Interrupt in endpoint not found [ 251.943935][ T50] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 251.988495][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.081778][ T13] hsr_slave_0: left promiscuous mode [ 252.082523][ T13] hsr_slave_1: left promiscuous mode [ 252.082969][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.083738][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.118952][T12923] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 252.220364][ T13] team0 (unregistering): Port device team_slave_1 removed [ 252.434252][ C0] net_ratelimit: 346 callbacks suppressed [ 252.704471][T12906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.713226][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.714695][T12906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.720817][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.723553][T12906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.730684][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.731245][T12906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.739769][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.798741][T12906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.810134][T12906] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.814102][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.814145][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.819613][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.819654][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.902961][ T5856] usb 8-1: USB disconnect, device number 16 [ 252.907877][ T5856] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 253.055850][T12981] syzkaller0: entered promiscuous mode [ 253.055859][T12981] syzkaller0: entered allmulticast mode [ 253.060764][T12981] 0: reclassify loop, rule prio 0, protocol 700 [ 253.119844][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.195273][T12906] veth0_vlan: entered promiscuous mode [ 253.198546][T12906] veth1_vlan: entered promiscuous mode [ 253.229310][T12906] veth0_macvtap: entered promiscuous mode [ 253.233968][T12906] veth1_macvtap: entered promiscuous mode [ 253.259973][T12906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.262286][T12906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.265759][T12988] lo speed is unknown, defaulting to 1000 [ 253.265816][T12988] lo speed is unknown, defaulting to 1000 [ 253.266595][T12988] lo speed is unknown, defaulting to 1000 [ 253.271883][T12988] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 253.271912][T12988] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 253.271949][T12988] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 253.279081][T12988] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 253.374439][T12988] lo speed is unknown, defaulting to 1000 [ 253.380352][T12988] lo speed is unknown, defaulting to 1000 [ 253.383059][T12988] lo speed is unknown, defaulting to 1000 [ 253.383821][T12988] lo speed is unknown, defaulting to 1000 [ 253.386730][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.386753][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.386771][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.386789][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.389157][T12988] lo speed is unknown, defaulting to 1000 [ 253.389911][T12988] lo speed is unknown, defaulting to 1000 [ 253.548869][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.548879][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.556876][T12992] bridge0: port 3(syz_tun) entered blocking state [ 253.556958][T12992] bridge0: port 3(syz_tun) entered disabled state [ 253.557045][T12992] syz_tun: entered allmulticast mode [ 253.557817][T12992] syz_tun: entered promiscuous mode [ 253.566522][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.566532][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.672072][ T5896] usb 6-1: USB disconnect, device number 60 [ 253.874252][ T5096] Bluetooth: hci3: command tx timeout [ 254.135294][T13006] md: couldn't update array info. -22 [ 254.324886][T13007] md: could not open device unknown-block(1,7). [ 254.324918][T13007] md: md_import_device returned -16 [ 254.811750][T13031] ubi: mtd0 is already attached to ubi0 [ 254.864288][ T4653] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 255.015179][ T4653] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.016731][ T4653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.016745][ T4653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.016773][ T4653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.018482][ T4653] usb 8-1: config 0 descriptor?? [ 255.230609][ T4653] usbhid 8-1:0.0: can't add hid device: -71 [ 255.230680][ T4653] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 255.239931][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.240274][ T4653] usb 8-1: USB disconnect, device number 17 [ 255.648523][T13046] device-mapper: table: 248:2: multipath: unknown path selector type (-EINVAL) [ 255.648540][T13046] device-mapper: ioctl: error adding target to table [ 255.694335][ T4653] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 255.844639][ T4653] usb 8-1: Using ep0 maxpacket: 32 [ 255.845330][ T4653] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 255.846639][ T4653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.846659][ T4653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.846706][ T4653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.849924][ T4653] usb 8-1: config 0 descriptor?? [ 255.854786][ T4653] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 255.867245][ T4653] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 255.954276][ T5096] Bluetooth: hci3: command tx timeout [ 256.055302][T13024] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 257.474963][T12968] net_ratelimit: 448 callbacks suppressed [ 257.631218][ T50] usb 8-1: USB disconnect, device number 18 [ 257.635884][ T50] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 257.655440][T13065] program syz.3.2981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.716703][T13067] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 257.716726][T13067] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 257.730409][ T5975] vmpressure_calc_level: 100 (s: 512 r: 0) [ 257.730480][ T5975] vmpressure_calc_level: 100 (s: 512 r: 0) [ 257.730638][ T5975] vmpressure_calc_level: 100 (s: 512 r: 0) [ 257.730712][ T5975] vmpressure_calc_level: 100 (s: 512 r: 0) [ 257.730783][ T5975] vmpressure_calc_level: 100 (s: 512 r: 0) [ 257.730854][ T5975] vmpressure_calc_level: 100 (s: 512 r: 0) [ 257.730971][T13067] udc dummy_udc.2: failed to start USB Gadget filesystem: -12 [ 257.730993][T13067] gadgetfs gadget.2: probe with driver gadgetfs failed with error -12 [ 257.731017][T13067] kernfs gadget.2: removing [ 257.731069][T13067] kernfs driver: removing [ 257.731127][T13067] gadget gadget.3: bus: 'gadget': __driver_probe_device: matched device with driver gadgetfs [ 257.731153][T13067] gadget gadget.3: bus: 'gadget': really_probe: probing driver gadgetfs with device [ 257.731248][T13067] udc dummy_udc.3: binding gadget driver [USB Gadget filesystem] [ 257.731264][T13067] ================================================================== [ 257.731295][T13067] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 257.731347][T13067] Write of size 8 at addr ffff88806e4110c0 by task syz.3.2982/13067 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 257.731363][T13067] [ 257.731376][T13067] CPU: 3 UID: 0 PID: 13067 Comm: syz.3.2982 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.731402][T13067] Tainted: [L]=SOFTLOCKUP [ 257.731409][T13067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.731433][T13067] Call Trace: [ 257.731451][T13067] [ 257.731459][T13067] dump_stack_lvl+0x100/0x190 [ 257.731508][T13067] print_report+0x13d/0x4b0 [ 257.731557][T13067] ? __virt_addr_valid+0x239/0x430 [ 257.731601][T13067] ? gadgetfs_bind+0x82e/0x890 [ 257.731623][T13067] kasan_report+0xdf/0x1c0 [ 257.731704][T13067] ? gadgetfs_bind+0x82e/0x890 [ 257.731729][T13067] gadgetfs_bind+0x82e/0x890 [ 257.731755][T13067] gadget_bind_driver+0x28c/0xbf0 [ 257.731790][T13067] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 257.731816][T13067] ? __pfx_gadget_bind_driver+0x10/0x10 [ 257.731843][T13067] really_probe+0x241/0xa60 [ 257.731881][T13067] __driver_probe_device+0x210/0x460 [ 257.731909][T13067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 257.731944][T13067] driver_probe_device+0x4a/0x140 [ 257.731972][T13067] __driver_attach+0x21f/0x5b0 [ 257.732000][T13067] ? __pfx___driver_attach+0x10/0x10 [ 257.732028][T13067] bus_for_each_dev+0x13e/0x1d0 [ 257.732065][T13067] ? __pfx_bus_for_each_dev+0x10/0x10 [ 257.732089][T13067] ? bus_add_driver+0x306/0x620 [ 257.732116][T13067] bus_add_driver+0x4bf/0x620 [ 257.732142][T13067] driver_register+0x1e2/0x360 [ 257.732172][T13067] usb_gadget_register_driver_owner+0x132/0x210 [ 257.732201][T13067] dev_config+0xdce/0x1610 [ 257.732224][T13067] ? ksys_write+0x70/0x250 [ 257.732249][T13067] ? __pfx_dev_config+0x10/0x10 [ 257.732275][T13067] vfs_write+0x2aa/0x1050 [ 257.732298][T13067] ? __pfx_dev_config+0x10/0x10 [ 257.732320][T13067] ? lock_acquire+0x1d1/0x380 [ 257.732357][T13067] ? __fget_files+0x34/0x3d0 [ 257.732393][T13067] ? __pfx_vfs_write+0x10/0x10 [ 257.732415][T13067] ? find_held_lock+0x2b/0x80 [ 257.732435][T13067] ? __fget_files+0x215/0x3d0 [ 257.732463][T13067] ? __fget_files+0x21f/0x3d0 [ 257.732491][T13067] ksys_write+0x12a/0x250 [ 257.732515][T13067] ? __pfx_ksys_write+0x10/0x10 [ 257.732542][T13067] __do_fast_syscall_32+0x14b/0x8c0 [ 257.732579][T13067] do_fast_syscall_32+0x32/0x70 [ 257.732605][T13067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.732630][T13067] RIP: 0023:0xf739efbc [ 257.732646][T13067] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 257.732666][T13067] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 257.732691][T13067] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000440 [ 257.732703][T13067] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 257.732716][T13067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.732728][T13067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.732739][T13067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.732757][T13067] [ 257.732765][T13067] [ 257.732770][T13067] Allocated by task 5737: [ 257.732790][T13067] kasan_save_stack+0x30/0x50 [ 257.732816][T13067] kasan_save_track+0x14/0x30 [ 257.732840][T13067] __kasan_kmalloc+0xaa/0xb0 [ 257.732863][T13067] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 257.732884][T13067] gadgetfs_fill_super+0x1da/0x430 [ 257.732905][T13067] get_tree_single+0xe2/0x190 [ 257.732925][T13067] vfs_get_tree+0x92/0x320 [ 257.732941][T13067] path_mount+0x7d0/0x2850 [ 257.732957][T13067] __ia32_sys_mount+0x292/0x310 [ 257.732974][T13067] __do_fast_syscall_32+0x14b/0x8c0 [ 257.732997][T13067] do_fast_syscall_32+0x32/0x70 [ 257.733020][T13067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.733042][T13067] [ 257.733047][T13067] Freed by task 13067: [ 257.733056][T13067] kasan_save_stack+0x30/0x50 [ 257.733080][T13067] kasan_save_track+0x14/0x30 [ 257.733103][T13067] kasan_save_free_info+0x3b/0x70 [ 257.733122][T13067] __kasan_slab_free+0x5f/0x80 [ 257.733147][T13067] kfree+0x22b/0x6d0 [ 257.733164][T13067] put_dev+0xb4/0xd0 [ 257.733181][T13067] gadgetfs_bind+0x6bc/0x890 [ 257.733200][T13067] gadget_bind_driver+0x28c/0xbf0 [ 257.733224][T13067] really_probe+0x241/0xa60 [ 257.733248][T13067] __driver_probe_device+0x210/0x460 [ 257.733273][T13067] driver_probe_device+0x4a/0x140 [ 257.733298][T13067] __driver_attach+0x21f/0x5b0 [ 257.733323][T13067] bus_for_each_dev+0x13e/0x1d0 [ 257.733343][T13067] bus_add_driver+0x4bf/0x620 [ 257.733364][T13067] driver_register+0x1e2/0x360 [ 257.733391][T13067] usb_gadget_register_driver_owner+0x132/0x210 [ 257.733417][T13067] dev_config+0xdce/0x1610 [ 257.733436][T13067] vfs_write+0x2aa/0x1050 [ 257.733457][T13067] ksys_write+0x12a/0x250 [ 257.733478][T13067] __do_fast_syscall_32+0x14b/0x8c0 [ 257.733501][T13067] do_fast_syscall_32+0x32/0x70 [ 257.733524][T13067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.733546][T13067] [ 257.733551][T13067] The buggy address belongs to the object at ffff88806e411000 [ 257.733551][T13067] which belongs to the cache kmalloc-1k of size 1024 [ 257.733567][T13067] The buggy address is located 192 bytes inside of [ 257.733567][T13067] freed 1024-byte region [ffff88806e411000, ffff88806e411400) [ 257.733585][T13067] [ 257.733590][T13067] The buggy address belongs to the physical page: [ 257.733599][T13067] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e410 [ 257.733625][T13067] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 257.733640][T13067] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 257.733657][T13067] page_type: f5(slab) [ 257.733678][T13067] raw: 04fff00000000040 ffff88801d042dc0 dead000000000100 dead000000000122 [ 257.733705][T13067] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 257.733723][T13067] head: 04fff00000000040 ffff88801d042dc0 dead000000000100 dead000000000122 [ 257.733739][T13067] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 257.733757][T13067] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 257.733774][T13067] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 257.733785][T13067] page dumped because: kasan: bad access detected [ 257.733795][T13067] page_owner tracks the page as allocated [ 257.733801][T13067] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5782, tgid 5782 (kworker/u32:2), ts 50060811095 [ 257.733830][T13067] post_alloc_hook+0xfd/0x120 [ 257.733849][T13067] get_page_from_freelist+0x110d/0x35d0 [ 257.733869][T13067] __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 257.733891][T13067] new_slab+0xa9/0x6e0 [ 257.733909][T13067] refill_objects+0xe3/0x410 [ 257.733929][T13067] __pcs_replace_empty_main+0x35e/0x650 [ 257.733948][T13067] __kmalloc_noprof+0x677/0x840 [ 257.733994][T13067] ___neigh_create+0x1532/0x2940 [ 257.734017][T13067] ip6_finish_output2+0x1052/0x1d50 [ 257.734035][T13067] __ip6_finish_output+0x357/0xdf0 [ 257.734053][T13067] ip6_output+0x2aa/0xa60 [ 257.734070][T13067] ndisc_send_skb+0xa85/0x1bf0 [ 257.734089][T13067] ndisc_send_ns+0xc6/0x140 [ 257.734108][T13067] addrconf_dad_work+0xca1/0x1360 [ 257.734124][T13067] process_one_work+0xac7/0x1b10 [ 257.734144][T13067] worker_thread+0x5ef/0xe50 [ 257.734163][T13067] page last free pid 5739 tgid 5739 ts 50009601484 stack trace: [ 257.734175][T13067] __free_frozen_pages+0x79f/0x10f0 [ 257.734192][T13067] qlist_free_all+0x47/0xf0 [ 257.734214][T13067] kasan_quarantine_reduce+0x1a0/0x1f0 [ 257.734238][T13067] __kasan_slab_alloc+0x69/0x90 [ 257.734263][T13067] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 257.734287][T13067] __alloc_skb+0x140/0x710 [ 257.734321][T13067] netlink_alloc_large_skb+0x69/0x150 [ 257.734348][T13067] netlink_sendmsg+0x755/0x10c0 [ 257.734373][T13067] ____sys_sendmsg+0xa4d/0xbe0 [ 257.734393][T13067] ___sys_sendmsg+0x190/0x1e0 [ 257.734414][T13067] __sys_sendmsg+0x160/0x210 [ 257.734440][T13067] do_syscall_64+0x121/0x770 [ 257.734462][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.734480][T13067] [ 257.734485][T13067] Memory state around the buggy address: [ 257.734495][T13067] ffff88806e410f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 257.734508][T13067] ffff88806e411000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.734522][T13067] >ffff88806e411080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.734532][T13067] ^ [ 257.734542][T13067] ffff88806e411100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.734555][T13067] ffff88806e411180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.734566][T13067] ================================================================== [ 257.734685][T13067] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.139866][T13067] CPU: 3 UID: 0 PID: 13067 Comm: syz.3.2982 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.143391][T13067] Tainted: [L]=SOFTLOCKUP [ 258.144784][T13067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.147862][T13067] Call Trace: [ 258.148945][T13067] [ 258.149918][T13067] dump_stack_lvl+0x100/0x190 [ 258.151423][T13067] vpanic+0x553/0x970 [ 258.152711][T13067] ? __pfx_vpanic+0x10/0x10 [ 258.154187][T13067] ? mark_held_locks+0x40/0x70 [ 258.155770][T13067] ? irqentry_exit+0x202/0xab0 [ 258.157348][T13067] ? gadgetfs_bind+0x82e/0x890 [ 258.158929][T13067] panic+0xd1/0xe0 [ 258.160196][T13067] ? __pfx_panic+0x10/0x10 [ 258.161655][T13067] ? gadgetfs_bind+0x82e/0x890 [ 258.163241][T13067] ? preempt_schedule+0x57/0xd0 [ 258.164830][T13067] check_panic_on_warn.cold+0x19/0x34 [ 258.166567][T13067] end_report.part.0+0x3a/0x90 [ 258.168109][T13067] kasan_report.cold+0xe/0x18 [ 258.169645][T13067] ? gadgetfs_bind+0x82e/0x890 [ 258.171188][T13067] gadgetfs_bind+0x82e/0x890 [ 258.172726][T13067] gadget_bind_driver+0x28c/0xbf0 [ 258.174379][T13067] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 258.176465][T13067] ? __pfx_gadget_bind_driver+0x10/0x10 [ 258.178819][T13067] really_probe+0x241/0xa60 [ 258.180589][T13067] __driver_probe_device+0x210/0x460 [ 258.182300][T13067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.184170][T13067] driver_probe_device+0x4a/0x140 [ 258.185854][T13067] __driver_attach+0x21f/0x5b0 [ 258.187417][T13067] ? __pfx___driver_attach+0x10/0x10 [ 258.189159][T13067] bus_for_each_dev+0x13e/0x1d0 [ 258.191074][T13067] ? __pfx_bus_for_each_dev+0x10/0x10 [ 258.192875][T13067] ? bus_add_driver+0x306/0x620 [ 258.194464][T13067] bus_add_driver+0x4bf/0x620 [ 258.196027][T13067] driver_register+0x1e2/0x360 [ 258.197597][T13067] usb_gadget_register_driver_owner+0x132/0x210 [ 258.199641][T13067] dev_config+0xdce/0x1610 [ 258.201114][T13067] ? ksys_write+0x70/0x250 [ 258.202583][T13067] ? __pfx_dev_config+0x10/0x10 [ 258.204212][T13067] vfs_write+0x2aa/0x1050 [ 258.205743][T13067] ? __pfx_dev_config+0x10/0x10 [ 258.207416][T13067] ? lock_acquire+0x1d1/0x380 [ 258.208934][T13067] ? __fget_files+0x34/0x3d0 [ 258.210442][T13067] ? __pfx_vfs_write+0x10/0x10 [ 258.211976][T13067] ? find_held_lock+0x2b/0x80 [ 258.213503][T13067] ? __fget_files+0x215/0x3d0 [ 258.215044][T13067] ? __fget_files+0x21f/0x3d0 [ 258.216606][T13067] ksys_write+0x12a/0x250 [ 258.218020][T13067] ? __pfx_ksys_write+0x10/0x10 [ 258.219646][T13067] __do_fast_syscall_32+0x14b/0x8c0 [ 258.221332][T13067] do_fast_syscall_32+0x32/0x70 [ 258.222922][T13067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.224930][T13067] RIP: 0023:0xf739efbc [ 258.226384][T13067] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 258.232567][T13067] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 258.235254][T13067] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000440 [ 258.238651][T13067] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 258.241517][T13067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.244027][T13067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 258.246531][T13067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.249067][T13067] [ 258.251117][T13067] Kernel Offset: disabled [ 258.252505][T13067] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:21:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc900051be400 RCX=0000000000000201 RDX=ffff888025404b00 RSI=ffffc90004d27ffc RDI=ffffc900051beffc RBP=0000000000001400 RSP=ffffc900040074a0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc90004d27400 R13=0000000000000000 R14=ffffc900051be400 R15=0000000000001400 RIP=ffffffff8562d527 RFL=00010206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809572f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71c3a1e CR3=000000004cb9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555f04025c50 0000555f04025c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdaa047e20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f203339206f7420 327865646e69203a 73736572706d6f63 65645f323438205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 27302e7465676461 672d7761722f7372 65766972642f7465 676461672f737562 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f27203d20687461 70203a687461705f 6a626f6b5f6c6c69 66203a2930303666 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3963613230383838 6666666628202730 2e7465676461672d 77617227203a7463 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656a626f6b205d34 34303331545b5d31 33303536322e3535 3220205b203a6c65 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b27a57 RBX=ffff88801db5a580 RCX=ffffffff8bd53325 RDX=0000000000000001 RSI=ffffffff8e3e5f3b RDI=ffffffff8c628980 RBP=ffffed1003b6b4b0 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed1005626825 R10=ffff88802b13412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bd517bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809582f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ff9e9014 CR3=000000006eeb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000000 RBX=ffff8880239e2580 RCX=0000000000000000 RDX=1ffff1100473c5df RSI=ffffffff81c9640c RDI=ffff8880239e2ef8 RBP=0000000000004300 RSP=ffffc90004737dc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff88802a095c80 R15=0000000000000004 RIP=ffffffff820bf29c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809592f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f06ec0 CR3=000000004e331000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b37385 RDI=ffffffff9cc893c0 RBP=ffffffff9cc89380 RSP=ffffc90007fcf0d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666657 R12=0000000000000000 R13=000000000000000a R14=0000000000000009 R15=ffffc90007fcf3f0 RIP=ffffffff85b373af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095a2f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71dfb81 CR3=000000006eeb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555f04025c50 0000555f04025c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdaa047e20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74656e697665643d 72656c646e61685f 636f727020343436 3d65646f6d207265 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3437353766633632 3038383866666666 3d6174616420656d 69745f656c626168 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636165725f657361 625f636f72705f68 6769656e3d72656c 646e61685f636f72 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70203434363d6564 6f6d20736d5f656d 69745f656c626168 636165725f657361 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 623d656d616e636f 72702020205d3736 303331545b5d3839 393039362e373532 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000