last executing test programs: 1m18.639930399s ago: executing program 3 (id=2162): unshare(0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff079", 0x28) 1m18.636667967s ago: executing program 3 (id=2163): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$CDROMPLAYBLK(r7, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 1m17.234892255s ago: executing program 3 (id=2167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m16.306552962s ago: executing program 3 (id=2171): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x10000}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x8040}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 1m16.144649344s ago: executing program 3 (id=2173): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400fbff1300b59500000000000000000a403200", @ANYRES32=r4, @ANYBLOB="14000200fc0200000000000000000000000000000800080002070000"], 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r8, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0x14, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4204, r10, 0x200, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r11], 0x0, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/187, 0xbb, 0x0, &(0x7f0000000380)=""/68, 0x44}}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) 1m14.33064114s ago: executing program 3 (id=2178): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$CDROMPLAYBLK(r8, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 58.794021395s ago: executing program 32 (id=2178): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$CDROMPLAYBLK(r8, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 12.291246935s ago: executing program 1 (id=2364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="bad0a5b32a79c8fd9cb673f7ea042f5203000000bffa1909683f8016fe9e5ee0220700000000000000b818dbea79958dc7940d32630428665c22a50679f4dc269701b497a1f8e48ba829f49adb7c9303211860a48fbab49d1ea17b0468e22a250f4a8ec87839d8735430990916b9210e28c06c63430f3b7389c2909ee2bba8e0561d3b609ee3d57720f72b39b934db0cfed68c18f444fe741d0dc46a3a37aea32c5d88c3b88302c7c7a9cd59fd0fe1eac9ecf2d9246365d1a5fc4aa1b3beb637a3a3e2a31565509d48f59cdbb683964b47dea961d488794f4d41b79cdab76455e282edf541095fc935e586c3b283", 0xee, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) (async, rerun: 32) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c80)=@newtfilter={0xac, 0x2c, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0x3, 0x4}, {0xffe0, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xac}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @loopback}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0xac}}, 0x4000010) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x9da, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_NOTIFY_STORE(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000002000000000000000000000001"], 0x28) (async, rerun: 32) sendmsg$key(r4, 0x0, 0x0) (rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) (async) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAI'], 0x4000) (async) close(r7) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) shutdown(r0, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x46a, 0x4) 11.73149806s ago: executing program 1 (id=2367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x109, &(0x7f0000000280)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @generic={{0x10, 0x4, 0x3, 0x1d, 0xfb, 0x64, 0x0, 0xa2, 0x5e, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x9d, [@broadcast, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x17, 0xef, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}, "8c3231a9bf38642fbe5f25d9a55b456ef7d8b539264e9a471406e930d5cebb3e126d0e2b70b942be0e0c39adcfca1df3b15ad0ef446bbe767f7dc911638776d8fb2dff473edce0846f8918cc4f18c9b19076daeef3999a0401d41cd8041b5980280f63acdf2e1a201df481fb23e3d56267ed2715e2bf3e4e9e93ef67b506b3b86ddfe5223556f44830fb51e4d364d0281780d64775ac1a4d05a0d4c0b82133de4b3bc6924488926137a26edd74138fecd7853c5e3dc6c8a490b9c8"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0) 11.531703897s ago: executing program 1 (id=2368): mkdirat(0xffffffffffffff9c, 0x0, 0x777) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000280)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x4008032, 0xffffffffffffffff, 0x0) (fail_nth: 7) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) 11.232181933s ago: executing program 1 (id=2369): socket(0x10, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r6 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mq_notify(r6, 0x0) 9.919473231s ago: executing program 1 (id=2373): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r5}}], 0x1c, 0x2400e044}, 0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x10000) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) fsetxattr$trusted_overlay_nlink(r9, &(0x7f00000018c0), 0x0, 0x0, 0x1) 8.434489909s ago: executing program 1 (id=2377): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20f8, 0x1f480, 0x2, 0x325}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.11718915s ago: executing program 2 (id=2508): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.038549235s ago: executing program 2 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 969.99136ms ago: executing program 2 (id=2514): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000029c0)={{r3}, &(0x7f0000002940), &(0x7f0000002980)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r2, 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) 792.138501ms ago: executing program 4 (id=2517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, @printk={@ld}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xff7, &(0x7f0000001cc0)=""/4087, 0x41100, 0x24}, 0x94) 741.684321ms ago: executing program 2 (id=2519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xe5, &(0x7f0000000340)=""/229}, 0x94) 642.115587ms ago: executing program 0 (id=2520): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 570.73549ms ago: executing program 2 (id=2521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x11, 0x800, 0x9, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd) 570.475443ms ago: executing program 4 (id=2522): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[{0x10, 0x103, 0x5}, {0x408, 0x1, 0x1, "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"}], 0x418}, 0x14) 456.397426ms ago: executing program 0 (id=2523): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711805000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 455.75666ms ago: executing program 4 (id=2524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110af00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 345.811373ms ago: executing program 0 (id=2525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 344.917784ms ago: executing program 4 (id=2526): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 218.344369ms ago: executing program 4 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000178000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 217.894111ms ago: executing program 2 (id=2528): r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 161.707257ms ago: executing program 0 (id=2529): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/132, 0x29, 0x84, 0x1}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 51.953455ms ago: executing program 0 (id=2530): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.701µs ago: executing program 4 (id=2531): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 0 (id=2532): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000103000000000000000300000004000000010000000000000000000005"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x5}, 0x28) kernel console output (not intermixed with test programs): 4042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 639.458621][T14042] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 639.458632][T14042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 639.458656][T14042] [ 639.622720][T11532] IPVS: starting estimator thread 0... [ 639.623612][T14044] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 639.713927][T14046] IPVS: using max 25 ests per chain, 60000 per kthread [ 640.024260][T14055] kAFS: No cell specified [ 640.863109][T14061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 641.531474][T14080] openvswitch: netlink: Message has 12 unknown bytes. [ 641.539090][T14080] overlay: Unknown parameter 'userxattr:/' [ 641.570951][T14079] overlay: Unknown parameter 'seclabel' [ 641.621267][T14082] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2125'. [ 642.063944][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 642.226259][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 642.227741][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.227780][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 642.227798][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.231439][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 642.231464][ T10] usb 5-1: Product: syz [ 642.231478][ T10] usb 5-1: Manufacturer: syz [ 642.238655][T14085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.240304][ T10] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 642.287908][ T10] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 642.400489][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2128'. [ 642.573278][T14101] kAFS: No cell specified [ 642.729055][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 642.988040][T14105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 643.561306][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 643.626118][ T43] kauditd_printk_skb: 1550 callbacks suppressed [ 643.626141][ T43] audit: type=1326 audit(1789668236.177:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 643.626185][ T43] audit: type=1326 audit(1789668236.177:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 643.626806][ T43] audit: type=1326 audit(1789668236.177:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 643.627270][ T43] audit: type=1326 audit(1789668236.177:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 643.628733][ T43] audit: type=1326 audit(1789668236.177:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 643.629605][ T43] audit: type=1326 audit(1789668236.177:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 643.629863][ T43] audit: type=1326 audit(1789668236.177:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 643.630817][T14118] FAULT_INJECTION: forcing a failure. [ 643.630817][T14118] name failslab, interval 1, probability 0, space 0, times 0 [ 643.630847][T14118] CPU: 0 UID: 0 PID: 14118 Comm: syz.2.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.630873][T14118] Tainted: [L]=SOFTLOCKUP [ 643.630879][T14118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 643.630904][T14118] Call Trace: [ 643.630911][T14118] [ 643.630918][T14118] dump_stack_lvl+0x100/0x190 [ 643.630944][T14118] should_fail_ex.cold+0x5/0xa [ 643.630966][T14118] should_failslab+0xc2/0x120 [ 643.630987][T14118] __kmalloc_cache_noprof+0x91/0x6d0 [ 643.631015][T14118] ? do_eventfd+0x67/0x2b0 [ 643.631040][T14118] do_eventfd+0x67/0x2b0 [ 643.631059][T14118] __ia32_sys_eventfd2+0x53/0x80 [ 643.631077][T14118] __do_fast_syscall_32+0x13a/0x8b0 [ 643.631104][T14118] ? lockdep_hardirqs_on+0x7d/0x110 [ 643.631131][T14118] do_fast_syscall_32+0x32/0x70 [ 643.631160][T14118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.631181][T14118] RIP: 0023:0xf6fcefec [ 643.631203][T14118] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 643.631212][T14118] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000148 [ 643.631235][T14118] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 643.631246][T14118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.631256][T14118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.631265][T14118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.631275][T14118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.631298][T14118] [ 643.631542][ T43] audit: type=1326 audit(1789668236.177:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 643.632179][ T43] audit: type=1326 audit(1789668236.177:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 643.633444][ T43] audit: type=1326 audit(1789668236.177:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.2.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 644.277818][ T5526] usb 5-1: USB disconnect, device number 17 [ 644.294368][ T5526] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 644.302944][ T5526] garmin_gps 5-1:1.0: device disconnected [ 644.604208][T14136] openvswitch: netlink: Message has 12 unknown bytes. [ 644.609714][T14136] overlay: Unknown parameter 'userxattr:/' [ 644.635709][T14136] overlay: Unknown parameter 'seclabel' [ 645.768434][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2140'. [ 646.174727][T14164] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2145'. [ 648.239548][T14179] kvm: emulating exchange as write [ 648.436618][T14184] openvswitch: netlink: Message has 12 unknown bytes. [ 648.448265][T14184] overlay: Unknown parameter 'userxattr:/' [ 648.454579][T14184] overlay: Unknown parameter 'seclabel' [ 649.353966][ T5526] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 649.503984][ T5526] usb 7-1: Using ep0 maxpacket: 8 [ 649.504768][ T5526] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 649.505815][ T5526] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.505837][ T5526] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 649.505873][ T5526] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 649.505896][ T5526] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 649.505928][ T5526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.529003][ T5526] hub 7-1:1.0: bad descriptor, ignoring hub [ 649.529026][ T5526] hub 7-1:1.0: probe with driver hub failed with error -5 [ 649.529386][ T5526] cdc_wdm 7-1:1.0: skipping garbage [ 649.529399][ T5526] cdc_wdm 7-1:1.0: skipping garbage [ 649.531678][ T5526] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 649.531694][ T5526] cdc_wdm 7-1:1.0: Unknown control protocol [ 649.728547][T14198] gtp0: entered allmulticast mode [ 650.223436][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.223460][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.225462][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.225488][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.226699][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.226807][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.228797][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.228824][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.230976][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.231001][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.231449][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.231467][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.231754][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.231773][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.232004][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.232024][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.232248][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.232268][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.232486][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 650.232505][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 650.236076][T13845] usb 7-1: USB disconnect, device number 23 [ 650.236116][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 650.244808][T14202] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 650.826027][ T5526] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 650.975770][ T5526] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 650.980601][ T5526] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.987449][ T5526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 650.987475][ T5526] usb 6-1: Product: syz [ 650.987487][ T5526] usb 6-1: Manufacturer: syz [ 650.987583][ T5526] usb 6-1: SerialNumber: syz [ 651.154368][ T76] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 651.205574][ T5526] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 651.313536][T14215] netlink: 'syz.3.2158': attribute type 3 has an invalid length. [ 651.313556][T14215] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 651.313567][T14215] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2158'. [ 651.313579][T14215] NCSI netlink: No device for ifindex 0 [ 651.324071][ T76] usb 5-1: Using ep0 maxpacket: 8 [ 651.324876][ T76] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 651.326272][ T76] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.326293][ T76] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.326328][ T76] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 651.326351][ T76] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 651.326385][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.349363][ T76] hub 5-1:1.0: bad descriptor, ignoring hub [ 651.349386][ T76] hub 5-1:1.0: probe with driver hub failed with error -5 [ 651.349845][ T76] cdc_wdm 5-1:1.0: skipping garbage [ 651.349858][ T76] cdc_wdm 5-1:1.0: skipping garbage [ 651.354334][ T76] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 651.354351][ T76] cdc_wdm 5-1:1.0: Unknown control protocol [ 651.464748][T13845] usb 6-1: USB disconnect, device number 13 [ 651.479582][T13845] usblp0: removed [ 651.884699][ T10] usb 5-1: USB disconnect, device number 18 [ 653.083936][ T856] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 653.238318][ T856] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 653.239918][ T856] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.239958][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 653.239979][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 653.239999][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 653.240018][ T856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 653.240036][ T856] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 653.240056][ T856] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 653.244519][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.244544][ T856] usb 6-1: Product: syz [ 653.244557][ T856] usb 6-1: Manufacturer: syz [ 653.244570][ T856] usb 6-1: SerialNumber: syz [ 653.297784][T14238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 653.297961][T14238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 653.298124][T14238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 653.299869][ T856] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 653.300330][ T856] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 653.308219][ T856] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 653.308315][ T856] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 653.310018][ T856] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 653.773590][T13845] usb 6-1: USB disconnect, device number 14 [ 653.781778][T13845] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 653.782342][T13845] keyspan 6-1:1.0: device disconnected [ 654.000702][T14258] syz.0.2170: vmalloc error: size 2147479552, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 654.000822][T14258] CPU: 2 UID: 0 PID: 14258 Comm: syz.0.2170 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.000861][T14258] Tainted: [L]=SOFTLOCKUP [ 654.000873][T14258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.000890][T14258] Call Trace: [ 654.000900][T14258] [ 654.000911][T14258] dump_stack_lvl+0x100/0x190 [ 654.000953][T14258] warn_alloc.cold+0x9e/0xb2 [ 654.000985][T14258] ? __pfx_warn_alloc+0x10/0x10 [ 654.001030][T14258] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 654.001069][T14258] ? stack_depot_save_flags+0x49a/0x9f0 [ 654.001111][T14258] ? kasan_save_stack+0x3f/0x50 [ 654.001139][T14258] ? kasan_save_stack+0x30/0x50 [ 654.001168][T14258] ? kasan_save_track+0x14/0x30 [ 654.001200][T14258] ? __kasan_kmalloc+0xaa/0xb0 [ 654.001228][T14258] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 654.001282][T14258] __vmalloc_node_range_noprof+0x123b/0x1420 [ 654.001322][T14258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.001407][T14258] ? aa_loaddata_alloc+0x6f/0x200 [ 654.001440][T14258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 654.001472][T14258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 654.001527][T14258] ? rcu_is_watching+0x13/0xc0 [ 654.001560][T14258] __kvmalloc_node_noprof+0x3da/0x9b0 [ 654.001581][T14258] ? aa_loaddata_alloc+0x6f/0x200 [ 654.001604][T14258] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 654.001633][T14258] ? __might_fault+0xc5/0x140 [ 654.001659][T14258] ? aa_loaddata_alloc+0x6f/0x200 [ 654.001682][T14258] aa_loaddata_alloc+0x6f/0x200 [ 654.001702][T14258] aa_simple_write_to_buffer+0x89/0x230 [ 654.001733][T14258] policy_update+0x2c1/0x930 [ 654.001756][T14258] ? __pfx_policy_update+0x10/0x10 [ 654.001775][T14258] ? lock_acquire+0x1d1/0x380 [ 654.001807][T14258] profile_load+0xaa/0x1a0 [ 654.001825][T14258] vfs_write+0x2aa/0x1050 [ 654.001844][T14258] ? __pfx_profile_load+0x10/0x10 [ 654.001860][T14258] ? lock_acquire+0x1d1/0x380 [ 654.001882][T14258] ? __fget_files+0x34/0x3d0 [ 654.001902][T14258] ? __pfx_vfs_write+0x10/0x10 [ 654.001920][T14258] ? find_held_lock+0x2b/0x80 [ 654.001940][T14258] ? __fget_files+0x215/0x3d0 [ 654.001964][T14258] ? __fget_files+0x21f/0x3d0 [ 654.001988][T14258] ksys_write+0x12a/0x250 [ 654.002006][T14258] ? __pfx_ksys_write+0x10/0x10 [ 654.002030][T14258] __do_fast_syscall_32+0x13a/0x8b0 [ 654.002056][T14258] ? lockdep_hardirqs_on+0x7d/0x110 [ 654.002080][T14258] do_fast_syscall_32+0x32/0x70 [ 654.002107][T14258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.002130][T14258] RIP: 0023:0xf7ff3fec [ 654.002150][T14258] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 654.002159][T14258] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 654.002179][T14258] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 654.002192][T14258] RDX: 00000000fffffe18 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.002204][T14258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.002216][T14258] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 654.002228][T14258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.002255][T14258] [ 654.002372][T14258] Mem-Info: [ 654.002382][T14258] active_anon:11052 inactive_anon:28421 isolated_anon:0 [ 654.002382][T14258] active_file:5261 inactive_file:10625 isolated_file:0 [ 654.002382][T14258] unevictable:1000 dirty:348 writeback:0 [ 654.002382][T14258] slab_reclaimable:7096 slab_unreclaimable:57058 [ 654.002382][T14258] mapped:26851 shmem:29804 pagetables:1193 [ 654.002382][T14258] sec_pagetables:312 bounce:0 [ 654.002382][T14258] kernel_misc_reclaimable:0 [ 654.002382][T14258] free:30257 free_pcp:6052 free_cma:0 [ 654.002429][T14258] Node 0 active_anon:2532kB inactive_anon:1812kB active_file:304kB inactive_file:348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:808kB dirty:4kB writeback:0kB shmem:4144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9696kB pagetables:1404kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 654.002478][T14258] Node 1 active_anon:41676kB inactive_anon:111872kB active_file:20740kB inactive_file:42152kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:106596kB dirty:1388kB writeback:0kB shmem:115072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4648kB pagetables:3368kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 654.002528][T14258] Node 0 DMA free:1860kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:304kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.002586][T14258] lowmem_reserve[]: 0 277 277 277 277 [ 654.002621][T14258] Node 0 DMA32 free:15628kB boost:16384kB min:29012kB low:32168kB high:35324kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2532kB inactive_anon:1812kB active_file:0kB inactive_file:348kB unevictable:0kB writepending:4kB zspages:484kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:9928kB local_pcp:3908kB free_cma:0kB [ 654.002672][T14258] lowmem_reserve[]: 0 0 0 0 0 [ 654.002704][T14258] Node 1 DMA32 free:103540kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41676kB inactive_anon:111872kB active_file:20740kB inactive_file:42152kB unevictable:4000kB writepending:1388kB zspages:2736kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:14272kB local_pcp:1996kB free_cma:0kB [ 654.002754][T14258] lowmem_reserve[]: 0 0 0 0 0 [ 654.002783][T14258] Node 0 DMA: 9*4kB (UM) 2*8kB (U) 1*16kB (M) 6*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1860kB [ 654.002919][T14258] Node 0 DMA32: 139*4kB (UME) 204*8kB (UE) 120*16kB (UE) 108*32kB (UME) 66*64kB (UME) 14*128kB (UME) 4*256kB (UME) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 15628kB [ 654.003041][T14258] Node 1 DMA32: 397*4kB (UME) 438*8kB (UME) 176*16kB (UME) 444*32kB (UME) 202*64kB (UME) 93*128kB (UME) 37*256kB (UME) 24*512kB (UME) 12*1024kB (UM) 9*2048kB (UM) 1*4096kB (U) = 103524kB [ 654.003231][T14258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.003247][T14258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 654.003261][T14258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.003274][T14258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 654.003288][T14258] 46706 total pagecache pages [ 654.003294][T14258] 1033 pages in swap cache [ 654.003300][T14258] Free swap = 69576kB [ 654.003305][T14258] Total swap = 124996kB [ 654.003312][T14258] 524155 pages RAM [ 654.003318][T14258] 0 pages HighMem/MovableOnly [ 654.003328][T14258] 212121 pages reserved [ 654.003334][T14258] 0 pages cma reserved [ 654.293759][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 654.403831][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 654.564056][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 654.583104][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 654.600794][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.644895][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 654.644915][ T10] pvrusb2: ********** [ 654.644921][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 654.644931][ T10] pvrusb2: Important functionality might not be entirely working. [ 654.644939][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 654.644948][ T10] pvrusb2: ********** [ 654.870044][ T2509] pvrusb2: Invalid write control endpoint [ 655.559470][ T2509] pvrusb2: Invalid write control endpoint [ 655.559487][ T2509] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 655.559590][ T2509] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 655.559598][ T2509] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 655.559606][ T2509] pvrusb2: Device being rendered inoperable [ 655.582951][ T2509] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 655.583066][ T2509] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 655.635254][ T2509] pvrusb2: Attached sub-driver cx25840 [ 655.635275][ T2509] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 655.635284][ T2509] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 655.775173][T14275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.275307][T14289] FAULT_INJECTION: forcing a failure. [ 656.275307][T14289] name failslab, interval 1, probability 0, space 0, times 0 [ 656.275342][T14289] CPU: 3 UID: 0 PID: 14289 Comm: syz.2.2180 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.275370][T14289] Tainted: [L]=SOFTLOCKUP [ 656.275377][T14289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 656.275389][T14289] Call Trace: [ 656.275397][T14289] [ 656.275406][T14289] dump_stack_lvl+0x100/0x190 [ 656.275439][T14289] should_fail_ex.cold+0x5/0xa [ 656.275465][T14289] should_failslab+0xc2/0x120 [ 656.275492][T14289] __kmalloc_noprof+0xfc/0x840 [ 656.275516][T14289] ? tomoyo_encode2+0xfb/0x3c0 [ 656.275542][T14289] tomoyo_encode2+0xfb/0x3c0 [ 656.275565][T14289] tomoyo_encode+0x29/0x50 [ 656.275583][T14289] tomoyo_mount_acl+0x14c/0x8b0 [ 656.275609][T14289] ? is_bpf_text_address+0x8a/0x1a0 [ 656.275634][T14289] ? is_bpf_text_address+0x8a/0x1a0 [ 656.275661][T14289] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 656.275686][T14289] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 656.275713][T14289] ? kernel_text_address+0x8d/0x100 [ 656.275737][T14289] ? unwind_get_return_address+0x59/0xa0 [ 656.275759][T14289] ? arch_stack_walk+0xa6/0xf0 [ 656.275782][T14289] ? __lock_acquire+0x5c0/0x1f40 [ 656.275818][T14289] ? tomoyo_mount_permission+0x1f6/0x460 [ 656.275850][T14289] ? tomoyo_domain+0xb2/0x150 [ 656.275871][T14289] ? tomoyo_profile+0x47/0x60 [ 656.275924][T14289] tomoyo_mount_permission+0x214/0x460 [ 656.275952][T14289] ? tomoyo_mount_permission+0x1f6/0x460 [ 656.275983][T14289] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 656.276027][T14289] security_sb_mount+0xdd/0x270 [ 656.276056][T14289] path_mount+0x158/0x24c0 [ 656.276094][T14289] ? __pfx_path_mount+0x10/0x10 [ 656.276119][T14289] ? lockdep_hardirqs_on+0x7d/0x110 [ 656.276149][T14289] ? putname+0xb1/0x110 [ 656.276170][T14289] ? kmem_cache_free+0x127/0x6c0 [ 656.276209][T14289] ? __ia32_sys_mount+0x292/0x310 [ 656.276235][T14289] __ia32_sys_mount+0x292/0x310 [ 656.276262][T14289] ? __pfx___ia32_sys_mount+0x10/0x10 [ 656.276287][T14289] ? ksys_write+0x1ac/0x250 [ 656.276304][T14289] ? __pfx_ksys_write+0x10/0x10 [ 656.276327][T14289] __do_fast_syscall_32+0x13a/0x8b0 [ 656.276355][T14289] ? lockdep_hardirqs_on+0x7d/0x110 [ 656.276384][T14289] do_fast_syscall_32+0x32/0x70 [ 656.276413][T14289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 656.276437][T14289] RIP: 0023:0xf6fcefec [ 656.276461][T14289] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 656.276469][T14289] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 656.276491][T14289] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 656.276504][T14289] RDX: 0000000080000080 RSI: 0000000001810040 RDI: 0000000080000500 [ 656.276517][T14289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.276528][T14289] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 656.276541][T14289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 656.276567][T14289] [ 656.440388][T14292] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 656.440417][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.445371][T14292] vhci_hcd vhci_hcd.0: Device attached [ 656.736516][T13845] usb 40-1: SetAddress Request (75) to port 0 [ 656.736572][T13845] usb 40-1: new SuperSpeed USB device number 75 using vhci_hcd [ 657.061954][T14293] vhci_hcd: connection reset by peer [ 657.062270][ T5816] vhci_hcd vhci_hcd.1: stop threads [ 657.062294][ T5816] vhci_hcd vhci_hcd.1: release socket [ 657.062337][ T5816] vhci_hcd vhci_hcd.1: disconnect device [ 657.339072][T14308] openvswitch: netlink: Message has 12 unknown bytes. [ 657.343296][T14308] overlay: Unknown parameter 'userxattr:/' [ 657.469347][T14309] overlay: Unknown parameter 'seclabel' [ 660.024073][ T5820] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 660.174006][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 660.176359][ T5820] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 660.193597][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.194600][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.194703][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 660.194785][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 660.194963][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.328422][ T5820] hub 5-1:1.0: bad descriptor, ignoring hub [ 660.328560][ T5820] hub 5-1:1.0: probe with driver hub failed with error -5 [ 660.355788][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 660.356115][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 660.426650][ T5820] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 660.426764][ T5820] cdc_wdm 5-1:1.0: Unknown control protocol [ 660.534787][T14352] openvswitch: netlink: Message has 12 unknown bytes. [ 660.547818][T14352] overlay: Unknown parameter 'userxattr:/' [ 660.608795][T14353] overlay: Unknown parameter 'seclabel' [ 661.607253][ C2] wdm_int_callback: 12 callbacks suppressed [ 661.607277][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 661.607292][ C2] wdm_int_callback: 12 callbacks suppressed [ 661.607304][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 661.607514][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 661.607529][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 661.607880][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 661.607895][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 661.607975][ T5820] usb 5-1: USB disconnect, device number 19 [ 661.608095][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 661.608110][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 661.608123][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 661.609350][T14355] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 661.691129][T14364] 0x000000000000-0x000000010000 : "" [ 661.702556][T14364] ftl_cs: FTL header not found. [ 661.735401][T11882] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 661.834007][T13845] usb 40-1: device descriptor read/8, error -110 [ 661.887354][T11882] usb 6-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=35.09 [ 661.888563][T11882] usb 6-1: config 16 has an invalid interface number: 187 but max is 2 [ 661.888595][T11882] usb 6-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 661.888612][T11882] usb 6-1: config 16 has an invalid interface number: 72 but max is 2 [ 661.888628][T11882] usb 6-1: config 16 has an invalid interface number: 14 but max is 2 [ 661.888644][T11882] usb 6-1: config 16 has no interface number 0 [ 661.888658][T11882] usb 6-1: config 16 has no interface number 1 [ 661.888671][T11882] usb 6-1: config 16 has no interface number 2 [ 661.888716][T11882] usb 6-1: config 16 interface 187 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 661.888740][T11882] usb 6-1: config 16 interface 187 altsetting 6 endpoint 0x1 has an invalid bInterval 166, changing to 7 [ 661.888762][T11882] usb 6-1: config 16 interface 187 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 661.888779][T11882] usb 6-1: config 16 interface 187 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 661.888800][T11882] usb 6-1: config 16 interface 187 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 661.888817][T11882] usb 6-1: config 16 interface 187 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 661.888839][T11882] usb 6-1: config 16 interface 187 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 661.888860][T11882] usb 6-1: config 16 interface 187 altsetting 6 bulk endpoint 0xF has invalid maxpacket 64 [ 661.888879][T11882] usb 6-1: config 16 interface 187 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 661.888897][T11882] usb 6-1: config 16 interface 187 altsetting 6 has a duplicate endpoint with address 0x8E, skipping [ 661.888925][T11882] usb 6-1: config 16 interface 72 altsetting 240 has a duplicate endpoint with address 0x7, skipping [ 661.888944][T11882] usb 6-1: config 16 interface 72 altsetting 240 has a duplicate endpoint with address 0x6, skipping [ 661.888963][T11882] usb 6-1: config 16 interface 72 altsetting 240 has a duplicate endpoint with address 0xE, skipping [ 661.888982][T11882] usb 6-1: config 16 interface 72 altsetting 240 has a duplicate endpoint with address 0x6, skipping [ 661.889000][T11882] usb 6-1: config 16 interface 72 altsetting 240 has a duplicate endpoint with address 0xC, skipping [ 661.889026][T11882] usb 6-1: config 16 interface 14 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 661.889044][T11882] usb 6-1: config 16 interface 14 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 661.889062][T11882] usb 6-1: config 16 interface 187 has no altsetting 0 [ 661.889076][T11882] usb 6-1: config 16 interface 72 has no altsetting 0 [ 661.889090][T11882] usb 6-1: config 16 interface 14 has no altsetting 0 [ 661.891174][T11882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.891195][T11882] usb 6-1: Product: syz [ 661.891207][T11882] usb 6-1: Manufacturer: syz [ 661.891219][T11882] usb 6-1: SerialNumber: syz [ 661.965001][T14360] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 662.244202][T13845] usb usb40-port1: attempt power cycle [ 662.693055][T14376] kAFS: No cell specified [ 663.268527][T13845] usb usb40-port1: unable to enumerate USB device [ 663.560422][T11882] usb 6-1: USB disconnect, device number 15 [ 664.460628][T14393] Bluetooth: MGMT ver 1.23 [ 664.460666][T14393] FAULT_INJECTION: forcing a failure. [ 664.460666][T14393] name failslab, interval 1, probability 0, space 0, times 0 [ 664.460690][T14393] CPU: 2 UID: 0 PID: 14393 Comm: syz.2.2206 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.460713][T14393] Tainted: [L]=SOFTLOCKUP [ 664.460719][T14393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 664.460730][T14393] Call Trace: [ 664.460736][T14393] [ 664.460743][T14393] dump_stack_lvl+0x100/0x190 [ 664.460771][T14393] should_fail_ex.cold+0x5/0xa [ 664.460793][T14393] should_failslab+0xc2/0x120 [ 664.460816][T14393] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 664.460838][T14393] ? __alloc_skb+0x140/0x710 [ 664.460864][T14393] __alloc_skb+0x140/0x710 [ 664.460883][T14393] ? __alloc_skb+0x5b7/0x710 [ 664.460903][T14393] ? __pfx___alloc_skb+0x10/0x10 [ 664.460926][T14393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 664.460979][T14393] mgmt_cmd_complete+0x4f/0x5a0 [ 664.461007][T14393] set_blocked_keys+0x41f/0x570 [ 664.461029][T14393] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 664.461054][T14393] hci_sock_sendmsg+0x154e/0x2620 [ 664.461083][T14393] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 664.461107][T14393] ? apparmor_socket_sendmsg+0x165/0x280 [ 664.461133][T14393] sock_write_iter+0x53a/0x5b0 [ 664.461149][T14393] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 664.461172][T14393] ? __pfx_sock_write_iter+0x10/0x10 [ 664.461196][T14393] ? bpf_lsm_file_permission+0x9/0x10 [ 664.461218][T14393] ? security_file_permission+0x76/0x210 [ 664.461246][T14393] ? rw_verify_area+0xce/0x6d0 [ 664.461274][T14393] vfs_write+0x6af/0x1050 [ 664.461292][T14393] ? __pfx_sock_write_iter+0x10/0x10 [ 664.461312][T14393] ? __pfx_vfs_write+0x10/0x10 [ 664.461328][T14393] ? find_held_lock+0x2b/0x80 [ 664.461364][T14393] ksys_write+0x1f8/0x250 [ 664.461383][T14393] ? __pfx_ksys_write+0x10/0x10 [ 664.461400][T14393] ? ksys_write+0x1ac/0x250 [ 664.461418][T14393] ? __pfx_ksys_write+0x10/0x10 [ 664.461470][T14393] __do_fast_syscall_32+0x13a/0x8b0 [ 664.461505][T14393] ? lockdep_hardirqs_on+0x7d/0x110 [ 664.461532][T14393] do_fast_syscall_32+0x32/0x70 [ 664.461558][T14393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.461580][T14393] RIP: 0023:0xf6fcefec [ 664.461601][T14393] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 664.461609][T14393] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 664.461627][T14393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 664.461638][T14393] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.461648][T14393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.461657][T14393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 664.461667][T14393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.461691][T14393] [ 664.643843][ T5820] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 664.794540][ T5820] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 664.797111][ T5820] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.799208][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 664.799230][ T5820] usb 6-1: Product: syz [ 664.799242][ T5820] usb 6-1: Manufacturer: syz [ 664.799252][ T5820] usb 6-1: SerialNumber: syz [ 665.070083][ T5820] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 665.269778][ T856] usb 6-1: USB disconnect, device number 16 [ 665.271480][ T856] usblp0: removed [ 666.398393][T14422] syzkaller0: entered promiscuous mode [ 666.398477][T14422] syzkaller0: entered allmulticast mode [ 666.873397][T14425] jffs2: notice: (14425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 666.880989][T14424] syzkaller0: entered promiscuous mode [ 666.881015][T14424] syzkaller0: entered allmulticast mode [ 667.422697][T14431] kAFS: No cell specified [ 668.081407][T14433] FAULT_INJECTION: forcing a failure. [ 668.081407][T14433] name failslab, interval 1, probability 0, space 0, times 0 [ 668.081465][T14433] CPU: 3 UID: 0 PID: 14433 Comm: syz.0.2214 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.081494][T14433] Tainted: [L]=SOFTLOCKUP [ 668.081501][T14433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 668.081511][T14433] Call Trace: [ 668.081518][T14433] [ 668.081525][T14433] dump_stack_lvl+0x100/0x190 [ 668.081556][T14433] should_fail_ex.cold+0x5/0xa [ 668.081582][T14433] should_failslab+0xc2/0x120 [ 668.081609][T14433] __kmalloc_noprof+0xfc/0x840 [ 668.081639][T14433] ? dm_ima_alloc+0xa0/0xf0 [ 668.081669][T14433] dm_ima_alloc+0xa0/0xf0 [ 668.081692][T14433] dm_ima_alloc_context+0x21/0x60 [ 668.081715][T14433] dev_remove+0x7e/0x480 [ 668.081736][T14433] ? __pfx_dev_remove+0x10/0x10 [ 668.081765][T14433] ctl_ioctl+0x4d2/0xcc0 [ 668.081785][T14433] ? __pfx_dev_remove+0x10/0x10 [ 668.081808][T14433] ? __pfx_ctl_ioctl+0x10/0x10 [ 668.081854][T14433] ? __fget_files+0x21f/0x3d0 [ 668.081882][T14433] dm_compat_ctl_ioctl+0x23/0x30 [ 668.081903][T14433] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 668.081923][T14433] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 668.081959][T14433] __do_fast_syscall_32+0x13a/0x8b0 [ 668.081991][T14433] ? lockdep_hardirqs_on+0x7d/0x110 [ 668.082022][T14433] do_fast_syscall_32+0x32/0x70 [ 668.082053][T14433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 668.082078][T14433] RIP: 0023:0xf7ff3fec [ 668.082099][T14433] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 668.082108][T14433] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 668.082128][T14433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c013fd04 [ 668.082142][T14433] RDX: 0000000080003000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.082154][T14433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.082166][T14433] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 668.082178][T14433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.082204][T14433] [ 672.277323][ T5751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 672.296454][ T5751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 672.311376][ T5751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 672.329790][ T5751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 672.375627][ T5751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 672.729279][ T76] usb 8-1: USB disconnect, device number 15 [ 673.075990][T14452] lo speed is unknown, defaulting to 1000 [ 673.239075][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 673.404559][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 673.405051][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.405883][ T10] usb 6-1: config 1 interface 0 altsetting 44 bulk endpoint 0x82 has invalid maxpacket 1023 [ 673.405899][ T10] usb 6-1: config 1 interface 0 altsetting 44 bulk endpoint 0x3 has invalid maxpacket 32 [ 673.405910][ T10] usb 6-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.405923][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 673.407871][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.407888][ T10] usb 6-1: Product: syz [ 673.407897][ T10] usb 6-1: Manufacturer: syz [ 673.407906][ T10] usb 6-1: SerialNumber: syz [ 673.416232][T14469] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.416376][T14469] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.531299][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.531443][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.531519][T14452] bridge_slave_0: entered allmulticast mode [ 673.533606][T14452] bridge_slave_0: entered promiscuous mode [ 673.542968][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.543100][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.543268][T14452] bridge_slave_1: entered allmulticast mode [ 673.547543][T14452] bridge_slave_1: entered promiscuous mode [ 673.597789][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.605120][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.636892][T14452] team0: Port device team_slave_0 added [ 673.639825][T14452] team0: Port device team_slave_1 added [ 673.664662][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.664682][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.664706][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.666440][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.666454][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.666477][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.688873][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 673.718378][T14452] hsr_slave_0: entered promiscuous mode [ 673.719370][T14452] hsr_slave_1: entered promiscuous mode [ 673.719977][T14452] debugfs: 'hsr0' already exists in 'hsr' [ 673.719997][T14452] Cannot create hsr debugfs directory [ 673.750005][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 673.758359][ T10] usb 6-1: USB disconnect, device number 17 [ 674.032354][T14452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 674.052204][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.072334][T14452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 674.095839][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.108392][T14452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 674.126024][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.133126][T14452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 674.153803][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.483975][ T5096] Bluetooth: hci4: command tx timeout [ 674.726818][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.796405][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.175796][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.175887][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.213943][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.214040][T11532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.133872][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 676.288802][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 676.291213][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.294351][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 676.294373][ T10] usb 7-1: Product: syz [ 676.294385][ T10] usb 7-1: Manufacturer: syz [ 676.294397][ T10] usb 7-1: SerialNumber: syz [ 676.499887][T14530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.546925][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 676.556835][ T5096] Bluetooth: hci4: command tx timeout [ 676.620394][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.753034][ T10] usb 7-1: USB disconnect, device number 24 [ 676.757288][ T10] usblp0: removed [ 676.984227][T14452] veth0_vlan: entered promiscuous mode [ 676.999292][T14452] veth1_vlan: entered promiscuous mode [ 677.031584][T14452] veth0_macvtap: entered promiscuous mode [ 677.038593][T14452] veth1_macvtap: entered promiscuous mode [ 677.060502][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.071688][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.153909][ T5612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.153948][ T5612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.153974][ T5612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.153998][ T5612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.273499][T11578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.273519][T11578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.297234][T11578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.297258][T11578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.517275][T11882] usb 5-1: new high-speed USB device number 20 using dummy_hcd qemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xbdb80000, level=0x1, slpte=0x73f80002, write=0, pasid=0xffffffff) qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xbdb80000) qemu-system-x86_64: New fault is not recorded due to compression of faults [ 677.544168][ C2] DMAR: DRHD: handling fault status reg 2 [ 677.548168][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbdb80000 [fault reason 0x06] PTE Read access is not set [ 677.550102][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbdb86000 [fault reason 0x06] PTE Read access is not set [ 677.554127][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbdb89000 [fault reason 0x06] PTE Read access is not set [ 677.555619][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbdb8f000 [fault reason 0x06] PTE Read access is not set [ 677.563144][ C2] DMAR: DRHD: handling fault status reg 2 [ 677.564303][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbdb91000 [fault reason 0x06] PTE Read access is not set [ 677.664693][T11882] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 677.665931][T11882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.665955][T11882] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 677.667924][T11882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.667949][T11882] usb 5-1: Product: syz [ 677.667965][T11882] usb 5-1: Manufacturer: syz [ 677.667979][T11882] usb 5-1: SerialNumber: syz [ 677.853435][T14562] UDC core: g1: couldn't find an available UDC or it's busy [ 677.873154][T14551] FAULT_INJECTION: forcing a failure. [ 677.873154][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.873186][T14551] CPU: 2 UID: 0 PID: 14551 Comm: syz.0.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.873210][T14551] Tainted: [L]=SOFTLOCKUP [ 677.873216][T14551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 677.873226][T14551] Call Trace: [ 677.873231][T14551] [ 677.873240][T14551] dump_stack_lvl+0x100/0x190 [ 677.873268][T14551] should_fail_ex.cold+0x5/0xa [ 677.873291][T14551] _copy_to_user+0x32/0xd0 [ 677.873315][T14551] simple_read_from_buffer+0xcb/0x170 [ 677.873339][T14551] proc_fail_nth_read+0x1af/0x230 [ 677.873358][T14551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.873402][T14551] ? rw_verify_area+0xce/0x6d0 [ 677.873429][T14551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.873448][T14551] vfs_read+0x1e4/0xb40 [ 677.873466][T14551] ? lock_acquire+0x1d1/0x380 [ 677.873489][T14551] ? __fget_files+0x34/0x3d0 [ 677.873508][T14551] ? __pfx_vfs_read+0x10/0x10 [ 677.873524][T14551] ? find_held_lock+0x2b/0x80 [ 677.873542][T14551] ? __fget_files+0x215/0x3d0 [ 677.873565][T14551] ? __fget_files+0x21f/0x3d0 [ 677.873599][T14551] ksys_read+0x12a/0x250 [ 677.873617][T14551] ? __pfx_ksys_read+0x10/0x10 [ 677.873640][T14551] do_int80_emulation+0x166/0x650 [ 677.873686][T14551] asm_int80_emulation+0x1a/0x20 [ 677.873705][T14551] RIP: 0023:0xf71f75ab [ 677.873720][T14551] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 677.873737][T14551] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 677.873755][T14551] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0 [ 677.873767][T14551] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 677.873778][T14551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.873788][T14551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 677.873799][T14551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.873822][T14551] [ 677.906853][T11882] usb 5-1: USB disconnect, device number 20 [ 678.284638][T14579] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2243'. [ 678.314388][T11882] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 678.331855][T14579] netlink: 'syz.4.2243': attribute type 9 has an invalid length. [ 678.366467][T14581] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 678.366495][T14581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 678.366575][T14581] vhci_hcd vhci_hcd.0: Device attached [ 678.384651][T11519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.384675][T11519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.465047][T11882] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 678.467551][T11882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.467730][T11882] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 678.474702][T11882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.474733][T11882] usb 5-1: Product: syz [ 678.474751][T11882] usb 5-1: Manufacturer: syz [ 678.474769][T11882] usb 5-1: SerialNumber: syz [ 678.644366][ T5888] usb 40-1: SetAddress Request (79) to port 0 [ 678.644439][ T5888] usb 40-1: new SuperSpeed USB device number 79 using vhci_hcd [ 678.644585][ T5096] Bluetooth: hci4: command tx timeout [ 678.703003][ T5096] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 678.704793][ T42] usb 5-1: USB disconnect, device number 21 [ 679.204451][ T76] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 679.260663][T14582] vhci_hcd: connection reset by peer [ 679.261043][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 679.261069][ T5815] vhci_hcd vhci_hcd.1: release socket [ 679.261123][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 679.354312][ T76] usb 7-1: Using ep0 maxpacket: 8 [ 679.355808][ T76] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 679.357923][ T76] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.357963][ T76] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 679.357985][ T76] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.360694][ T76] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 679.360716][ T76] usb 7-1: Product: syz [ 679.360729][ T76] usb 7-1: Manufacturer: syz [ 679.360742][ T76] usb 7-1: SerialNumber: syz [ 679.402714][ T76] usb 7-1: config 0 descriptor?? [ 679.434100][T14602] netlink: 'syz.0.2249': attribute type 3 has an invalid length. [ 679.494601][ T76] rc_core: IR keymap rc-imon-rsc not found [ 679.494684][ T76] Registered IR keymap rc-empty [ 679.514560][ T76] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 679.515486][ T76] input: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 679.662156][ T76] usb 7-1: USB disconnect, device number 25 [ 680.713826][ T5096] Bluetooth: hci4: command tx timeout [ 681.584029][ T5820] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 681.733891][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 681.734649][ T5820] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 681.735634][ T5820] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.735652][ T5820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 681.735683][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 681.735704][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 681.735733][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.741176][ T5820] hub 6-1:1.0: bad descriptor, ignoring hub [ 681.741200][ T5820] hub 6-1:1.0: probe with driver hub failed with error -5 [ 681.742419][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 681.742434][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 681.747485][ T5820] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 681.747506][ T5820] cdc_wdm 6-1:1.0: Unknown control protocol [ 682.358781][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 682.358809][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 682.359087][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 682.359108][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 682.360820][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 682.360840][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 682.361708][ T5820] usb 6-1: USB disconnect, device number 18 [ 682.362299][T11589] usb 6-1: Failed to suspend device, error -19 [ 682.385384][T14595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.646036][T14645] openvswitch: netlink: Message has 12 unknown bytes. [ 682.648800][T14645] overlay: Unknown parameter 'userxattr:/' [ 682.675346][T14645] overlay: Unknown parameter 'seclabel' [ 682.839688][T14650] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2258'. [ 683.254027][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 683.394076][ T10] usb 7-1: device descriptor read/64, error -71 [ 683.534415][T14659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.664046][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 683.754491][ T5888] usb 40-1: device descriptor read/8, error -110 [ 683.794976][ T10] usb 7-1: device descriptor read/64, error -71 [ 683.873931][ T76] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 683.903996][ T10] usb usb7-port1: attempt power cycle [ 684.033908][ T76] usb 9-1: Using ep0 maxpacket: 8 [ 684.034669][ T76] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 684.035659][ T76] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.035681][ T76] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 684.035721][ T76] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 684.035747][ T76] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 684.035784][ T76] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.062773][ T76] hub 9-1:1.0: bad descriptor, ignoring hub [ 684.062797][ T76] hub 9-1:1.0: probe with driver hub failed with error -5 [ 684.063198][ T76] cdc_wdm 9-1:1.0: skipping garbage [ 684.063211][ T76] cdc_wdm 9-1:1.0: skipping garbage [ 684.107907][ T76] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 684.107928][ T76] cdc_wdm 9-1:1.0: Unknown control protocol [ 684.156347][ T5888] usb usb40-port1: attempt power cycle [ 684.194360][T14671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.263829][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 684.294810][ T10] usb 7-1: device descriptor read/8, error -71 [ 684.553894][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 684.575875][ T10] usb 7-1: device descriptor read/8, error -71 [ 684.687755][ T10] usb usb7-port1: unable to enumerate USB device [ 684.708542][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 684.708566][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 684.708802][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 684.708819][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 684.708888][ T42] usb 9-1: USB disconnect, device number 2 [ 684.709039][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 684.709056][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 684.709067][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 684.741385][ T5888] usb usb40-port1: unable to enumerate USB device [ 685.010042][T14681] loop5: detected capacity change from 0 to 5287 [ 685.034588][ T6551] Buffer I/O error on dev loop5, logical block 660, async page read [ 685.495327][T14691] FAULT_INJECTION: forcing a failure. [ 685.495327][T14691] name failslab, interval 1, probability 0, space 0, times 0 [ 685.495361][T14691] CPU: 0 UID: 0 PID: 14691 Comm: syz.1.2266 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.495386][T14691] Tainted: [L]=SOFTLOCKUP [ 685.495393][T14691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 685.495403][T14691] Call Trace: [ 685.495410][T14691] [ 685.495418][T14691] dump_stack_lvl+0x100/0x190 [ 685.495447][T14691] should_fail_ex.cold+0x5/0xa [ 685.495470][T14691] should_failslab+0xc2/0x120 [ 685.495495][T14691] kmem_cache_alloc_noprof+0x92/0x6a0 [ 685.495516][T14691] ? ptlock_alloc+0x1f/0x70 [ 685.495544][T14691] ptlock_alloc+0x1f/0x70 [ 685.495568][T14691] pte_alloc_one+0x82/0x3d0 [ 685.495591][T14691] do_fault+0x960/0x1830 [ 685.495613][T14691] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 685.495641][T14691] ? __pfx_do_fault+0x10/0x10 [ 685.495660][T14691] ? pgd_none+0x9f/0xe0 [ 685.495684][T14691] ? __pfx_pgd_none+0x10/0x10 [ 685.495709][T14691] ? find_held_lock+0x2b/0x80 [ 685.495731][T14691] __handle_mm_fault+0x150b/0x2f60 [ 685.495761][T14691] ? __pfx___handle_mm_fault+0x10/0x10 [ 685.495785][T14691] ? __pfx_mt_find+0x10/0x10 [ 685.495815][T14691] ? find_vma+0xbf/0x140 [ 685.495834][T14691] ? __pfx_find_vma+0x10/0x10 [ 685.495857][T14691] handle_mm_fault+0x363/0xa20 [ 685.495886][T14691] do_user_addr_fault+0x745/0x12f0 [ 685.495912][T14691] exc_page_fault+0x6f/0xd0 [ 685.495957][T14691] asm_exc_page_fault+0x26/0x30 [ 685.495977][T14691] RIP: 0010:_copy_from_user+0x93/0xd0 [ 685.495998][T14691] Code: da e2 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 39 21 55 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 45 d5 [ 685.496014][T14691] RSP: 0018:ffffc90003837dc8 EFLAGS: 00050246 [ 685.496029][T14691] RAX: 0000000000000001 RBX: 0000000080000100 RCX: 0000000000000008 [ 685.496046][T14691] RDX: 0000000000000001 RSI: 0000000080000100 RDI: ffffc90003837e58 [ 685.496055][T14691] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000706fcb [ 685.496065][T14691] R10: ffffc90003837e5f R11: 0000000000000000 R12: 0000000000000000 [ 685.496075][T14691] R13: ffffc90003837e58 R14: ffff888023882f20 R15: 0000000000000000 [ 685.496097][T14691] ? _copy_from_user+0x87/0xd0 [ 685.496118][T14691] get_compat_sigset+0x21/0x50 [ 685.496144][T14691] __ia32_compat_sys_rt_sigprocmask+0x18b/0x460 [ 685.496172][T14691] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 685.496200][T14691] ? fput+0x7c/0x100 [ 685.496221][T14691] ? ksys_write+0x1ac/0x250 [ 685.496239][T14691] ? __pfx_ksys_write+0x10/0x10 [ 685.496262][T14691] __do_fast_syscall_32+0x13a/0x8b0 [ 685.496289][T14691] ? lockdep_hardirqs_on+0x7d/0x110 [ 685.496315][T14691] do_fast_syscall_32+0x32/0x70 [ 685.496342][T14691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 685.496363][T14691] RIP: 0023:0xf70befec [ 685.496383][T14691] Code: Unable to access opcode bytes at 0xf70befc2. [ 685.496391][T14691] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000af [ 685.496407][T14691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 685.496419][T14691] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 685.496429][T14691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.496440][T14691] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 685.496451][T14691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.496474][T14691] [ 686.087560][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.087630][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.143577][T14706] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2270'. [ 686.456433][T14703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 686.456460][T14703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.456543][T14703] vhci_hcd vhci_hcd.0: Device attached [ 686.613899][T14708] vhci_hcd: connection closed [ 686.954887][ T5612] vhci_hcd vhci_hcd.1: stop threads [ 686.954913][ T5612] vhci_hcd vhci_hcd.1: release socket [ 686.954931][ T5612] vhci_hcd vhci_hcd.1: disconnect device [ 687.149202][T14712] openvswitch: netlink: Message has 12 unknown bytes. [ 687.151360][T14712] overlay: Unknown parameter 'userxattr:/' [ 687.199321][T14712] overlay: Unknown parameter 'seclabel' [ 687.207955][T14716] binder_alloc: 14715: pid 14715 spamming oneway? 1 buffers allocated for a total size of 4096 [ 687.444258][ T42] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 687.480580][T14718] nfs4: Unknown parameter 'onfigfs' [ 687.594172][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 687.595026][ T42] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.596058][ T42] usb 7-1: config 1 interface 0 altsetting 44 bulk endpoint 0x82 has invalid maxpacket 1023 [ 687.596082][ T42] usb 7-1: config 1 interface 0 altsetting 44 bulk endpoint 0x3 has invalid maxpacket 32 [ 687.596100][ T42] usb 7-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.596120][ T42] usb 7-1: config 1 interface 0 has no altsetting 0 [ 687.598169][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.598190][ T42] usb 7-1: Product: syz [ 687.598202][ T42] usb 7-1: Manufacturer: syz [ 687.598214][ T42] usb 7-1: SerialNumber: syz [ 687.608160][T14716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 687.608313][T14716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 687.837468][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 687.923996][ T42] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 687.937671][ T42] usb 7-1: USB disconnect, device number 30 [ 688.175635][T14728] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2275'. [ 688.746424][T14732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.834832][T14742] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 690.710490][T14742] kthread_run failed with err -4 [ 690.899573][T14749] FAULT_INJECTION: forcing a failure. [ 690.899573][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 690.899607][T14749] CPU: 0 UID: 0 PID: 14749 Comm: syz.1.2281 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.899632][T14749] Tainted: [L]=SOFTLOCKUP [ 690.899640][T14749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 690.899649][T14749] Call Trace: [ 690.899656][T14749] [ 690.899665][T14749] dump_stack_lvl+0x100/0x190 [ 690.899695][T14749] should_fail_ex.cold+0x5/0xa [ 690.899719][T14749] should_failslab+0xc2/0x120 [ 690.899747][T14749] __kmalloc_noprof+0xfc/0x840 [ 690.899767][T14749] ? rcu_is_watching+0x13/0xc0 [ 690.899785][T14749] ? tomoyo_encode2+0xfb/0x3c0 [ 690.899809][T14749] tomoyo_encode2+0xfb/0x3c0 [ 690.899832][T14749] tomoyo_encode+0x29/0x50 [ 690.899849][T14749] tomoyo_realpath_from_path+0x18c/0x690 [ 690.899873][T14749] tomoyo_path_perm+0x276/0x460 [ 690.899897][T14749] ? tomoyo_path_perm+0x262/0x460 [ 690.899920][T14749] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 690.899942][T14749] ? do_raw_spin_lock+0x128/0x260 [ 690.899971][T14749] ? d_splice_alias_ops+0x626/0x15b0 [ 690.899997][T14749] ? d_splice_alias_ops+0x62b/0x15b0 [ 690.900027][T14749] ? configfs_lookup+0x6e/0x7d0 [ 690.900057][T14749] ? lookup_one_qstr_excl+0xaf/0x250 [ 690.900085][T14749] tomoyo_path_symlink+0x97/0xe0 [ 690.900105][T14749] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 690.900142][T14749] ? lock_acquire+0x1d1/0x380 [ 690.900170][T14749] security_path_symlink+0x152/0x2d0 [ 690.900195][T14749] filename_symlinkat+0x122/0x560 [ 690.900222][T14749] ? __pfx_filename_symlinkat+0x10/0x10 [ 690.900245][T14749] ? strncpy_from_user+0x19d/0x2d0 [ 690.900271][T14749] ? do_getname+0x191/0x390 [ 690.900297][T14749] __ia32_sys_symlinkat+0x9b/0xe0 [ 690.900323][T14749] __do_fast_syscall_32+0x13a/0x8b0 [ 690.900351][T14749] ? lockdep_hardirqs_on+0x7d/0x110 [ 690.900381][T14749] do_fast_syscall_32+0x32/0x70 [ 690.900408][T14749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 690.900431][T14749] RIP: 0023:0xf70befec [ 690.900452][T14749] Code: Unable to access opcode bytes at 0xf70befc2. [ 690.900460][T14749] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 690.900478][T14749] RAX: ffffffffffffffda RBX: 0000000080000380 RCX: 00000000ffffff9c [ 690.900490][T14749] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.900500][T14749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 690.900511][T14749] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 690.900521][T14749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 690.900543][T14749] [ 690.908590][T14749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.250870][T14695] Set syz1 is full, maxelem 65536 reached [ 691.493793][T11882] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 691.664032][T11882] usb 7-1: Using ep0 maxpacket: 8 [ 691.668164][T11882] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 691.669629][T11882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.669652][T11882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 691.669689][T11882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 691.669711][T11882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 691.669746][T11882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.686121][T11882] hub 7-1:1.0: bad descriptor, ignoring hub [ 691.686155][T11882] hub 7-1:1.0: probe with driver hub failed with error -5 [ 691.695743][T11882] cdc_wdm 7-1:1.0: skipping garbage [ 691.695761][T11882] cdc_wdm 7-1:1.0: skipping garbage [ 691.699111][T11882] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 691.699130][T11882] cdc_wdm 7-1:1.0: Unknown control protocol [ 691.900638][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.900659][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.925958][T14773] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 691.925994][T14773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 691.926174][T14773] vhci_hcd vhci_hcd.0: Device attached [ 692.224215][T13049] usb 38-1: SetAddress Request (83) to port 0 [ 692.224276][T13049] usb 38-1: new SuperSpeed USB device number 83 using vhci_hcd [ 692.228178][T14776] vhci_hcd: connection closed [ 692.228500][ T5612] vhci_hcd vhci_hcd.0: stop threads [ 692.228523][ T5612] vhci_hcd vhci_hcd.0: release socket [ 692.228573][ T5612] vhci_hcd vhci_hcd.0: disconnect device [ 692.244154][T13049] usb 38-1: enqueue for inactive port 0 [ 692.275273][T14785] syzkaller0: entered promiscuous mode [ 692.275296][T14785] syzkaller0: entered allmulticast mode [ 692.358038][T14763] Set syz1 is full, maxelem 65536 reached [ 692.423766][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 692.423794][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 692.424180][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 692.424200][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 692.424438][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 692.424455][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 692.424682][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 692.424700][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 692.424934][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 692.424951][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 692.425193][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 692.425209][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 692.425222][ T5526] usb 7-1: USB disconnect, device number 31 [ 692.425224][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 692.502279][T14791] netlink: 'syz.1.2291': attribute type 10 has an invalid length. [ 692.515887][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.517401][T14791] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 692.646064][T13049] usb usb38-port1: attempt power cycle [ 692.695403][T11882] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 692.864552][T11882] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.865603][T11882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.865631][T11882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.865652][T11882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 692.865685][T11882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.876217][T11882] usb 9-1: config 0 descriptor?? [ 693.298938][T14789] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 693.343204][T14789] cramfs: wrong magic [ 693.360795][T11882] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 693.368817][T11882] plantronics 0003:047F:FFFF.0003: parse failed [ 693.368908][T11882] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 693.428346][T14817] FAULT_INJECTION: forcing a failure. [ 693.428346][T14817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 693.428380][T14817] CPU: 3 UID: 0 PID: 14817 Comm: syz.2.2299 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.428404][T14817] Tainted: [L]=SOFTLOCKUP [ 693.428410][T14817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 693.428420][T14817] Call Trace: [ 693.428427][T14817] [ 693.428433][T14817] dump_stack_lvl+0x100/0x190 [ 693.428461][T14817] should_fail_ex.cold+0x5/0xa [ 693.428480][T14817] ? prepare_alloc_pages+0x16d/0x5b0 [ 693.428513][T14817] should_fail_alloc_page+0xeb/0x140 [ 693.428538][T14817] prepare_alloc_pages+0x1f0/0x5b0 [ 693.428564][T14817] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 693.428584][T14817] ? ima_match_policy+0x8c4/0x23f0 [ 693.428614][T14817] ? __lock_acquire+0x5c0/0x1f40 [ 693.428643][T14817] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 693.428663][T14817] ? lock_acquire+0x1d1/0x380 [ 693.428684][T14817] ? process_measurement+0x1567/0x2350 [ 693.428707][T14817] ? __pfx___might_resched+0x10/0x10 [ 693.428731][T14817] ? find_held_lock+0x2b/0x80 [ 693.428749][T14817] ? process_measurement+0x4c8/0x2350 [ 693.428769][T14817] ? process_measurement+0x4c8/0x2350 [ 693.428789][T14817] ? down_write+0x146/0x1f0 [ 693.428809][T14817] ? up_write+0x2dc/0x5b0 [ 693.428835][T14817] ? process_measurement+0x1f4/0x2350 [ 693.428856][T14817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 693.428880][T14817] ? policy_nodemask+0xed/0x4f0 [ 693.428906][T14817] alloc_pages_mpol+0x201/0x550 [ 693.428932][T14817] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 693.428954][T14817] ? __lock_acquire+0x5c0/0x1f40 [ 693.428983][T14817] alloc_pages_noprof+0x1a/0x160 [ 693.429008][T14817] pte_alloc_one+0x1c/0x3d0 [ 693.429030][T14817] do_fault+0x960/0x1830 [ 693.429053][T14817] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 693.429079][T14817] ? __pfx_do_fault+0x10/0x10 [ 693.429099][T14817] ? pgd_none+0x9f/0xe0 [ 693.429121][T14817] ? __pfx_pgd_none+0x10/0x10 [ 693.429145][T14817] ? find_held_lock+0x2b/0x80 [ 693.429166][T14817] __handle_mm_fault+0x150b/0x2f60 [ 693.429197][T14817] ? __pfx___handle_mm_fault+0x10/0x10 [ 693.429221][T14817] ? __pfx_mt_find+0x10/0x10 [ 693.429253][T14817] ? find_vma+0xbf/0x140 [ 693.429272][T14817] ? __pfx_find_vma+0x10/0x10 [ 693.429293][T14817] handle_mm_fault+0x363/0xa20 [ 693.429355][T14817] do_user_addr_fault+0x745/0x12f0 [ 693.429378][T14817] exc_page_fault+0x6f/0xd0 [ 693.429421][T14817] asm_exc_page_fault+0x26/0x30 [ 693.429439][T14817] RIP: 0010:_copy_from_user+0x93/0xd0 [ 693.429460][T14817] Code: da e2 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 39 21 55 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 45 d5 [ 693.429476][T14817] RSP: 0018:ffffc90004797cb8 EFLAGS: 00050246 [ 693.429490][T14817] RAX: 0000000000000001 RBX: 0000000080030ff0 RCX: 0000000000000010 [ 693.429508][T14817] RDX: 0000000000000001 RSI: 0000000080030ff0 RDI: ffffc90004797dc0 [ 693.429519][T14817] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520008f2fb9 [ 693.429530][T14817] R10: ffffc90004797dcf R11: 0000000000000000 R12: 0000000000000000 [ 693.429541][T14817] R13: ffffc90004797dc0 R14: ffff8880518c6d80 R15: ffffc90004797d40 [ 693.429564][T14817] ? _copy_from_user+0x87/0xd0 [ 693.429585][T14817] move_addr_to_kernel+0x65/0x170 [ 693.429605][T14817] __sys_sendto+0x1b8/0x4e0 [ 693.429628][T14817] ? __pfx___sys_sendto+0x10/0x10 [ 693.429668][T14817] ? fput+0x7c/0x100 [ 693.429689][T14817] ? ksys_write+0x1ac/0x250 [ 693.429710][T14817] __ia32_sys_sendto+0xdd/0x1b0 [ 693.429731][T14817] ? __do_fast_syscall_32+0xb3/0x8b0 [ 693.429757][T14817] ? lockdep_hardirqs_on+0x7d/0x110 [ 693.429780][T14817] __do_fast_syscall_32+0x13a/0x8b0 [ 693.429805][T14817] ? lockdep_hardirqs_on+0x7d/0x110 [ 693.429833][T14817] do_fast_syscall_32+0x32/0x70 [ 693.429859][T14817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 693.429881][T14817] RIP: 0023:0xf6fcefec [ 693.429900][T14817] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 693.429908][T14817] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 693.429924][T14817] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 693.429935][T14817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080030ff0 [ 693.429946][T14817] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 693.429956][T14817] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 693.429966][T14817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.429988][T14817] [ 694.177139][T13049] usb usb38-port1: unable to enumerate USB device [ 694.379500][T14842] syzkaller0: entered promiscuous mode [ 694.379522][T14842] syzkaller0: entered allmulticast mode [ 695.006822][T14847] zram: failed to load dictionary d (err=-2) [ 695.642354][T11882] usb 9-1: USB disconnect, device number 3 [ 697.537856][ C2] hpet_rtc_timer_reinit: 2 callbacks suppressed [ 697.537877][ C2] hpet: Lost 1 RTC interrupts [ 698.773886][T14901] FAULT_INJECTION: forcing a failure. [ 698.773886][T14901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.774020][T14901] CPU: 3 UID: 0 PID: 14901 Comm: syz.1.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.774073][T14901] Tainted: [L]=SOFTLOCKUP [ 698.774082][T14901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 698.774096][T14901] Call Trace: [ 698.774106][T14901] [ 698.774117][T14901] dump_stack_lvl+0x100/0x190 [ 698.774154][T14901] should_fail_ex.cold+0x5/0xa [ 698.774186][T14901] _copy_from_iter+0x1f4/0x1690 [ 698.774225][T14901] ? __pfx__copy_from_iter+0x10/0x10 [ 698.774253][T14901] ? trace_kmalloc+0xeb/0x110 [ 698.774303][T14901] ? __kasan_kmalloc+0xaa/0xb0 [ 698.774335][T14901] ? __kmalloc_noprof+0x350/0x840 [ 698.774369][T14901] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 698.774467][T14901] kernfs_fop_write_iter+0x186/0x5f0 [ 698.774507][T14901] vfs_write+0x6af/0x1050 [ 698.774535][T14901] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 698.774574][T14901] ? __pfx_vfs_write+0x10/0x10 [ 698.774598][T14901] ? find_held_lock+0x2b/0x80 [ 698.774649][T14901] ksys_write+0x12a/0x250 [ 698.774675][T14901] ? __pfx_ksys_write+0x10/0x10 [ 698.774697][T14901] ? ksys_write+0x1ac/0x250 [ 698.774721][T14901] ? __pfx_ksys_write+0x10/0x10 [ 698.774754][T14901] __do_fast_syscall_32+0x13a/0x8b0 [ 698.774790][T14901] ? lockdep_hardirqs_on+0x7d/0x110 [ 698.774829][T14901] do_fast_syscall_32+0x32/0x70 [ 698.774864][T14901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.774897][T14901] RIP: 0023:0xf70befec [ 698.774928][T14901] Code: Unable to access opcode bytes at 0xf70befc2. [ 698.774940][T14901] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 698.774965][T14901] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800000c0 [ 698.774978][T14901] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.774993][T14901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.775007][T14901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 698.775019][T14901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.775049][T14901] [ 701.317346][ C2] hpet: Lost 1 RTC interrupts [ 702.050476][T14912] FAULT_INJECTION: forcing a failure. [ 702.050476][T14912] name failslab, interval 1, probability 0, space 0, times 0 [ 702.050596][T14912] CPU: 2 UID: 0 PID: 14912 Comm: syz.2.2320 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.050652][T14912] Tainted: [L]=SOFTLOCKUP [ 702.050662][T14912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 702.050672][T14912] Call Trace: [ 702.050678][T14912] [ 702.050685][T14912] dump_stack_lvl+0x100/0x190 [ 702.050720][T14912] should_fail_ex.cold+0x5/0xa [ 702.050748][T14912] should_failslab+0xc2/0x120 [ 702.050778][T14912] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 702.050801][T14912] ? __alloc_skb+0x5b7/0x710 [ 702.050825][T14912] ? __alloc_skb+0x140/0x710 [ 702.050852][T14912] __alloc_skb+0x140/0x710 [ 702.050873][T14912] ? __alloc_skb+0x5b7/0x710 [ 702.050894][T14912] ? __pfx___alloc_skb+0x10/0x10 [ 702.050940][T14912] netlink_alloc_large_skb+0x69/0x150 [ 702.050972][T14912] netlink_sendmsg+0x680/0xda0 [ 702.050996][T14912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.051024][T14912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.051052][T14912] ____sys_sendmsg+0xa4d/0xbe0 [ 702.051074][T14912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.051099][T14912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.051127][T14912] ? debug_object_assert_init+0x1c4/0x310 [ 702.051157][T14912] ? rcu_is_watching+0x13/0xc0 [ 702.051182][T14912] ___sys_sendmsg+0x190/0x1e0 [ 702.051208][T14912] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.051239][T14912] ? find_held_lock+0x2b/0x80 [ 702.051280][T14912] __sys_sendmsg+0x160/0x210 [ 702.051308][T14912] ? __pfx___sys_sendmsg+0x10/0x10 [ 702.051346][T14912] ? exit_to_user_mode_loop+0x166/0x700 [ 702.051397][T14912] ? rcu_is_watching+0x13/0xc0 [ 702.051426][T14912] __do_fast_syscall_32+0x13a/0x8b0 [ 702.051460][T14912] ? lockdep_hardirqs_on+0x7d/0x110 [ 702.051491][T14912] do_fast_syscall_32+0x32/0x70 [ 702.051522][T14912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 702.051551][T14912] RIP: 0023:0xf6fcefec [ 702.051575][T14912] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 702.051586][T14912] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 702.051609][T14912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 702.051622][T14912] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 702.051636][T14912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 702.051651][T14912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 702.051665][T14912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.051695][T14912] [ 704.064813][T14937] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 704.064846][T14937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 704.064972][T14937] vhci_hcd vhci_hcd.0: Device attached [ 704.167176][T14946] FAULT_INJECTION: forcing a failure. [ 704.167176][T14946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 704.167211][T14946] CPU: 3 UID: 0 PID: 14946 Comm: syz.2.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.167251][T14946] Tainted: [L]=SOFTLOCKUP [ 704.167258][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 704.167269][T14946] Call Trace: [ 704.167277][T14946] [ 704.167286][T14946] dump_stack_lvl+0x100/0x190 [ 704.167315][T14946] should_fail_ex.cold+0x5/0xa [ 704.167336][T14946] ? prepare_alloc_pages+0x16d/0x5b0 [ 704.167360][T14946] should_fail_alloc_page+0xeb/0x140 [ 704.167385][T14946] prepare_alloc_pages+0x1f0/0x5b0 [ 704.167410][T14946] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 704.167430][T14946] ? prepare_alloc_pages+0x351/0x5b0 [ 704.167452][T14946] ? is_bpf_text_address+0x94/0x1a0 [ 704.167479][T14946] ? rcu_is_watching+0x13/0xc0 [ 704.167499][T14946] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 704.167521][T14946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 704.167544][T14946] ? stack_trace_save+0x8e/0xc0 [ 704.167563][T14946] ? __pfx_stack_trace_save+0x10/0x10 [ 704.167584][T14946] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 704.167608][T14946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 704.167624][T14946] ? is_bpf_text_address+0x94/0x1a0 [ 704.167648][T14946] ? kasan_save_track+0x14/0x30 [ 704.167668][T14946] ? __kasan_slab_alloc+0x89/0x90 [ 704.167688][T14946] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 704.167710][T14946] ? alloc_vmap_area+0x1814/0x2bb0 [ 704.167728][T14946] ? __get_vm_area_node+0x1ed/0x350 [ 704.167746][T14946] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 704.167768][T14946] ? __vmalloc_node_noprof+0xad/0xf0 [ 704.167795][T14946] ? copy_process+0x803/0x8370 [ 704.167818][T14946] ? kernel_clone+0x176/0x9d0 [ 704.167842][T14946] ? __do_compat_sys_ia32_clone+0xd4/0x120 [ 704.167865][T14946] ? __do_fast_syscall_32+0x13a/0x8b0 [ 704.167890][T14946] ? do_fast_syscall_32+0x32/0x70 [ 704.167914][T14946] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.167942][T14946] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 704.167965][T14946] ? policy_nodemask+0xed/0x4f0 [ 704.167990][T14946] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 704.168022][T14946] __kasan_populate_vmalloc+0xf0/0x210 [ 704.168044][T14946] alloc_vmap_area+0x95d/0x2bb0 [ 704.168072][T14946] ? kasan_save_track+0x14/0x30 [ 704.168092][T14946] ? __kasan_kmalloc+0xaa/0xb0 [ 704.168111][T14946] ? __pfx_alloc_vmap_area+0x10/0x10 [ 704.168131][T14946] ? __get_vm_area_node+0x124/0x350 [ 704.168156][T14946] __get_vm_area_node+0x1ed/0x350 [ 704.168183][T14946] __vmalloc_node_range_noprof+0x268/0x1420 [ 704.168209][T14946] ? kernel_clone+0x176/0x9d0 [ 704.168234][T14946] ? lock_acquire+0x1d1/0x380 [ 704.168257][T14946] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 704.168276][T14946] ? find_held_lock+0x2b/0x80 [ 704.168294][T14946] ? rcu_read_unlock+0x17/0x60 [ 704.168324][T14946] ? kernel_clone+0x176/0x9d0 [ 704.168355][T14946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 704.168379][T14946] ? rcu_is_watching+0x13/0xc0 [ 704.168396][T14946] ? trace_kmem_cache_alloc+0xdd/0x100 [ 704.168422][T14946] ? kernel_clone+0x176/0x9d0 [ 704.168448][T14946] __vmalloc_node_noprof+0xad/0xf0 [ 704.168473][T14946] ? kernel_clone+0x176/0x9d0 [ 704.168503][T14946] copy_process+0x803/0x8370 [ 704.168533][T14946] ? __lock_acquire+0x5c0/0x1f40 [ 704.168565][T14946] ? __pfx_copy_process+0x10/0x10 [ 704.168593][T14946] ? get_pid_task+0x2a/0x250 [ 704.168614][T14946] ? get_pid_task+0xfc/0x250 [ 704.168632][T14946] ? get_pid_task+0xfc/0x250 [ 704.168655][T14946] kernel_clone+0x176/0x9d0 [ 704.168682][T14946] ? proc_fail_nth_write+0x9f/0x220 [ 704.168703][T14946] ? __pfx_kernel_clone+0x10/0x10 [ 704.168736][T14946] ? find_held_lock+0x2b/0x80 [ 704.168755][T14946] ? ksys_write+0x190/0x250 [ 704.168774][T14946] ? ksys_write+0x190/0x250 [ 704.168797][T14946] ? lock_acquire+0x1d1/0x380 [ 704.168823][T14946] __do_compat_sys_ia32_clone+0xd4/0x120 [ 704.168851][T14946] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 704.168887][T14946] ? fput+0x7c/0x100 [ 704.168910][T14946] ? ksys_write+0x1ac/0x250 [ 704.168929][T14946] ? __pfx_ksys_write+0x10/0x10 [ 704.168951][T14946] __do_fast_syscall_32+0x13a/0x8b0 [ 704.168977][T14946] ? lockdep_hardirqs_on+0x7d/0x110 [ 704.169004][T14946] do_fast_syscall_32+0x32/0x70 [ 704.169030][T14946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.169057][T14946] RIP: 0023:0xf6fcefec [ 704.169083][T14946] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 704.169094][T14946] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 704.169115][T14946] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 704.169129][T14946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.169142][T14946] RBP: 00000000f73c4f80 R08: 0000000000000000 R09: 0000000000000000 [ 704.169155][T14946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 704.169167][T14946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.169197][T14946] [ 704.212502][T14946] syz.2.2329: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 704.214464][T14946] CPU: 3 UID: 0 PID: 14946 Comm: syz.2.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.214492][T14946] Tainted: [L]=SOFTLOCKUP [ 704.214500][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 704.214511][T14946] Call Trace: [ 704.214519][T14946] [ 704.214528][T14946] dump_stack_lvl+0x100/0x190 [ 704.214557][T14946] warn_alloc.cold+0x9e/0xb2 [ 704.214578][T14946] ? __pfx_warn_alloc+0x10/0x10 [ 704.214597][T14946] ? lockdep_hardirqs_on+0x7d/0x110 [ 704.214626][T14946] ? __get_vm_area_node+0x2f0/0x350 [ 704.214655][T14946] ? __get_vm_area_node+0x22b/0x350 [ 704.214683][T14946] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 704.214707][T14946] ? lock_acquire+0x1d1/0x380 [ 704.214731][T14946] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 704.214751][T14946] ? find_held_lock+0x2b/0x80 [ 704.214770][T14946] ? rcu_read_unlock+0x17/0x60 [ 704.214808][T14946] ? kernel_clone+0x176/0x9d0 [ 704.214841][T14946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 704.214870][T14946] ? rcu_is_watching+0x13/0xc0 [ 704.214888][T14946] ? trace_kmem_cache_alloc+0xdd/0x100 [ 704.214915][T14946] ? kernel_clone+0x176/0x9d0 [ 704.214942][T14946] __vmalloc_node_noprof+0xad/0xf0 [ 704.214966][T14946] ? kernel_clone+0x176/0x9d0 [ 704.214995][T14946] copy_process+0x803/0x8370 [ 704.215026][T14946] ? __lock_acquire+0x5c0/0x1f40 [ 704.215080][T14946] ? __pfx_copy_process+0x10/0x10 [ 704.215109][T14946] ? get_pid_task+0x2a/0x250 [ 704.215149][T14946] ? get_pid_task+0xfc/0x250 [ 704.215167][T14946] ? get_pid_task+0xfc/0x250 [ 704.215190][T14946] kernel_clone+0x176/0x9d0 [ 704.215218][T14946] ? proc_fail_nth_write+0x9f/0x220 [ 704.215238][T14946] ? __pfx_kernel_clone+0x10/0x10 [ 704.215271][T14946] ? find_held_lock+0x2b/0x80 [ 704.215288][T14946] ? ksys_write+0x190/0x250 [ 704.215307][T14946] ? ksys_write+0x190/0x250 [ 704.215325][T14946] ? lock_acquire+0x1d1/0x380 [ 704.215351][T14946] __do_compat_sys_ia32_clone+0xd4/0x120 [ 704.215381][T14946] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 704.215418][T14946] ? fput+0x7c/0x100 [ 704.215439][T14946] ? ksys_write+0x1ac/0x250 [ 704.215457][T14946] ? __pfx_ksys_write+0x10/0x10 [ 704.215482][T14946] __do_fast_syscall_32+0x13a/0x8b0 [ 704.215511][T14946] ? lockdep_hardirqs_on+0x7d/0x110 [ 704.215535][T14946] do_fast_syscall_32+0x32/0x70 [ 704.215558][T14946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.215577][T14946] RIP: 0023:0xf6fcefec [ 704.215598][T14946] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 704.215605][T14946] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 704.215620][T14946] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 704.215630][T14946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.215639][T14946] RBP: 00000000f73c4f80 R08: 0000000000000000 R09: 0000000000000000 [ 704.215648][T14946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 704.215658][T14946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.215679][T14946] [ 704.215704][T14946] Mem-Info: [ 704.215714][T14946] active_anon:5190 inactive_anon:19210 isolated_anon:0 [ 704.215714][T14946] active_file:7981 inactive_file:15554 isolated_file:0 [ 704.215714][T14946] unevictable:1000 dirty:237 writeback:0 [ 704.215714][T14946] slab_reclaimable:7203 slab_unreclaimable:61406 [ 704.215714][T14946] mapped:29855 shmem:17036 pagetables:1061 [ 704.215714][T14946] sec_pagetables:314 bounce:0 [ 704.215714][T14946] kernel_misc_reclaimable:0 [ 704.215714][T14946] free:27280 free_pcp:11165 free_cma:0 [ 704.215752][T14946] Node 0 active_anon:0kB inactive_anon:164kB active_file:304kB inactive_file:348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9536kB pagetables:1296kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 704.215797][T14946] Node 1 active_anon:20760kB inactive_anon:76676kB active_file:31620kB inactive_file:61868kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:119392kB dirty:948kB writeback:0kB shmem:68144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5160kB pagetables:2948kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 704.215837][T14946] Node 0 DMA free:1832kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:304kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 704.215881][T14946] lowmem_reserve[]: 0 277 277 277 277 [ 704.215904][T14946] Node 0 DMA32 free:27792kB boost:16384kB min:29012kB low:32168kB high:35324kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:164kB active_file:0kB inactive_file:348kB unevictable:0kB writepending:0kB zspages:556kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:4740kB local_pcp:316kB free_cma:0kB [ 704.215946][T14946] lowmem_reserve[]: 0 0 0 0 0 [ 704.215969][T14946] Node 1 DMA32 free:79496kB boost:4096kB min:51240kB low:63024kB high:74808kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20760kB inactive_anon:76676kB active_file:31620kB inactive_file:61868kB unevictable:4000kB writepending:948kB zspages:4204kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:39860kB local_pcp:15140kB free_cma:0kB [ 704.216012][T14946] lowmem_reserve[]: 0 0 0 0 0 [ 704.216035][T14946] Node 0 DMA: 8*4kB (U) 3*8kB (UM) 1*16kB (M) 7*32kB (U) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1832kB [ 704.216136][T14946] Node 0 DMA32: 254*4kB (UE) 261*8kB (UME) 143*16kB (UE) 214*32kB (UME) 111*64kB (UME) 32*128kB (UME) 9*256kB (UME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27792kB [ 704.216242][T14946] Node 1 DMA32: 614*4kB (UME) 324*8kB (UME) 167*16kB (UME) 293*32kB (UME) 107*64kB (UE) 72*128kB (UME) 27*256kB (UME) 23*512kB (UME) 19*1024kB (UM) 4*2048kB (M) 0*4096kB = 79496kB [ 704.216440][T14946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.216453][T14946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 704.216465][T14946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.216477][T14946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 704.216489][T14946] 41520 total pagecache pages [ 704.216494][T14946] 951 pages in swap cache [ 704.216500][T14946] Free swap = 81940kB [ 704.216506][T14946] Total swap = 124996kB [ 704.216512][T14946] 524155 pages RAM [ 704.216517][T14946] 0 pages HighMem/MovableOnly [ 704.216522][T14946] 212121 pages reserved [ 704.216528][T14946] 0 pages cma reserved [ 704.334460][ T5888] usb 38-1: SetAddress Request (87) to port 0 [ 704.334529][ T5888] usb 38-1: new SuperSpeed USB device number 87 using vhci_hcd [ 705.092394][T14943] vhci_hcd: connection reset by peer [ 705.092902][ T5612] vhci_hcd vhci_hcd.0: stop threads [ 705.092923][ T5612] vhci_hcd vhci_hcd.0: release socket [ 705.092965][ T5612] vhci_hcd vhci_hcd.0: disconnect device [ 705.237968][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.239033][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.243614][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.262011][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.262708][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.768490][T14957] lo speed is unknown, defaulting to 1000 [ 706.312389][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.312465][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.312578][T14957] bridge_slave_0: entered allmulticast mode [ 706.331175][T14957] bridge_slave_0: entered promiscuous mode [ 706.339805][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.339906][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.339994][T14957] bridge_slave_1: entered allmulticast mode [ 706.340988][T14957] bridge_slave_1: entered promiscuous mode [ 706.424783][T14957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.429970][T14957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.470283][T14957] team0: Port device team_slave_0 added [ 706.477468][T14957] team0: Port device team_slave_1 added [ 706.507626][T14957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.507644][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.507668][T14957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.509316][T14957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.509333][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.509436][T14957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.597750][T14957] hsr_slave_0: entered promiscuous mode [ 706.598663][T14957] hsr_slave_1: entered promiscuous mode [ 706.599242][T14957] debugfs: 'hsr0' already exists in 'hsr' [ 706.599260][T14957] Cannot create hsr debugfs directory [ 706.949278][T14957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.173221][T14957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.343235][T14998] openvswitch: netlink: Message has 12 unknown bytes. [ 707.347405][T14998] overlay: Unknown parameter 'userxattr:/' [ 707.354047][ T5096] Bluetooth: hci2: command tx timeout [ 707.471988][T14983] overlay: Unknown parameter 'seclabel' [ 707.910268][T14957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.758665][T14957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.436271][ T5888] usb 38-1: device descriptor read/8, error -110 [ 709.436731][ T5096] Bluetooth: hci2: command tx timeout [ 709.835155][ T5888] usb usb38-port1: attempt power cycle [ 710.212593][T14957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 710.234936][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.238698][T14957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 710.260211][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.263122][T14957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 710.279406][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.282150][T14957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 710.305497][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.405249][ T5888] usb usb38-port1: unable to enumerate USB device [ 710.689845][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.714226][T14957] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.725513][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.725593][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.749085][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.749174][T11532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.518549][ T5096] Bluetooth: hci2: command tx timeout [ 713.299262][T14957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.456702][T14957] veth0_vlan: entered promiscuous mode [ 713.461565][T14957] veth1_vlan: entered promiscuous mode [ 713.506825][T14957] veth0_macvtap: entered promiscuous mode [ 713.510573][T14957] veth1_macvtap: entered promiscuous mode [ 713.520802][T14957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.528670][T14957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.595746][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.597053][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.597259][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.597566][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.606837][ T5096] Bluetooth: hci2: command tx timeout [ 713.665413][T15092] openvswitch: netlink: Message has 12 unknown bytes. [ 713.697754][T15092] overlay: Unknown parameter 'userxattr:/' [ 713.708944][T15092] overlay: Unknown parameter 'seclabel' [ 714.131963][T15094] netlink: 'syz.0.2349': attribute type 3 has an invalid length. [ 714.131987][T15094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2349'. [ 714.157326][T11531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.157354][T11531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.215941][T11578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.215963][T11578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.767262][T15116] FAULT_INJECTION: forcing a failure. [ 714.767262][T15116] name failslab, interval 1, probability 0, space 0, times 0 [ 714.767318][T15116] CPU: 0 UID: 0 PID: 15116 Comm: syz.2.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.767344][T15116] Tainted: [L]=SOFTLOCKUP [ 714.767351][T15116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 714.767362][T15116] Call Trace: [ 714.767369][T15116] [ 714.767375][T15116] dump_stack_lvl+0x100/0x190 [ 714.767403][T15116] should_fail_ex.cold+0x5/0xa [ 714.767425][T15116] should_failslab+0xc2/0x120 [ 714.767448][T15116] __kmalloc_cache_noprof+0x91/0x6d0 [ 714.767476][T15116] ? tcf_action_init_1+0x27e/0x6c0 [ 714.767503][T15116] tcf_action_init_1+0x27e/0x6c0 [ 714.767527][T15116] ? __pfx_tcf_action_init_1+0x10/0x10 [ 714.767547][T15116] ? tc_action_load_ops+0x1f5/0x3e0 [ 714.767571][T15116] ? __pfx_tc_action_load_ops+0x10/0x10 [ 714.767606][T15116] ? __nla_parse+0x40/0x60 [ 714.767629][T15116] tcf_action_init+0x43f/0xa60 [ 714.767661][T15116] ? __pfx_tcf_action_init+0x10/0x10 [ 714.767747][T15116] ? find_held_lock+0x2b/0x80 [ 714.767769][T15116] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 714.767800][T15116] tcf_action_add+0xed/0x5c0 [ 714.767837][T15116] ? __pfx_tcf_action_add+0x10/0x10 [ 714.767863][T15116] ? __lock_acquire+0x5c0/0x1f40 [ 714.767916][T15116] ? __nla_parse+0x40/0x60 [ 714.767936][T15116] tc_ctl_action+0x2e3/0x470 [ 714.767959][T15116] ? __pfx_tc_ctl_action+0x10/0x10 [ 714.767992][T15116] ? __pfx_tc_ctl_action+0x10/0x10 [ 714.768017][T15116] rtnetlink_rcv_msg+0x3c9/0xe90 [ 714.768047][T15116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 714.768078][T15116] ? ref_tracker_free+0x37e/0x6c0 [ 714.768103][T15116] netlink_rcv_skb+0x159/0x420 [ 714.768123][T15116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 714.768148][T15116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 714.768178][T15116] ? netlink_deliver_tap+0x1ae/0xcc0 [ 714.768203][T15116] netlink_unicast+0x585/0x850 [ 714.768226][T15116] ? __pfx_netlink_unicast+0x10/0x10 [ 714.768252][T15116] netlink_sendmsg+0x8b0/0xda0 [ 714.768276][T15116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.768300][T15116] ? apparmor_socket_sendmsg+0x165/0x280 [ 714.768328][T15116] ____sys_sendmsg+0xa4d/0xbe0 [ 714.768346][T15116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.768369][T15116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.768390][T15116] ? plist_check_list+0x1b8/0x280 [ 714.768411][T15116] ? plist_del+0x308/0x510 [ 714.768435][T15116] ___sys_sendmsg+0x190/0x1e0 [ 714.768456][T15116] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.768473][T15116] ? futex_wake+0x220/0x5e0 [ 714.768502][T15116] ? find_held_lock+0x2b/0x80 [ 714.768537][T15116] __sys_sendmsg+0x160/0x210 [ 714.768560][T15116] ? __pfx___sys_sendmsg+0x10/0x10 [ 714.768597][T15116] __do_fast_syscall_32+0x13a/0x8b0 [ 714.768623][T15116] ? lockdep_hardirqs_on+0x7d/0x110 [ 714.768648][T15116] do_fast_syscall_32+0x32/0x70 [ 714.768675][T15116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 714.768698][T15116] RIP: 0023:0xf7f97fec [ 714.768719][T15116] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 714.768728][T15116] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 714.768747][T15116] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 714.768759][T15116] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.768773][T15116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 714.768783][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.768793][T15116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 714.768831][T15116] [ 715.657385][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 715.668566][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 715.671785][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.690482][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.691147][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.793832][ T1041] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 716.160559][T15134] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 716.160593][T15134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 716.160693][T15134] vhci_hcd vhci_hcd.0: Device attached [ 716.240097][T15161] vhci_hcd: connection closed [ 716.240561][ T5816] vhci_hcd vhci_hcd.2: stop threads [ 716.240588][ T5816] vhci_hcd vhci_hcd.2: release socket [ 716.240609][ T5816] vhci_hcd vhci_hcd.2: disconnect device [ 716.997627][T15149] lo speed is unknown, defaulting to 1000 [ 717.528722][T11532] IPVS: starting estimator thread 0... [ 717.633851][T15182] IPVS: using max 43 ests per chain, 103200 per kthread [ 717.757586][ T5096] Bluetooth: hci3: command tx timeout [ 717.911766][T15189] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2362'. [ 717.912886][ T1041] usb 9-1: unable to get BOS descriptor or descriptor too short [ 717.912931][ T1041] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.914139][ T1041] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 717.914173][ T1041] usb 9-1: can't read configurations, error -71 [ 717.934480][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.934555][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.934902][T15149] bridge_slave_0: entered allmulticast mode [ 717.935997][T15149] bridge_slave_0: entered promiscuous mode [ 717.945824][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.945890][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.946153][T15149] bridge_slave_1: entered allmulticast mode [ 717.947301][T15149] bridge_slave_1: entered promiscuous mode [ 717.975917][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.979579][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.983634][T15189] fuse: Bad value for 'fd' [ 718.012866][T15149] team0: Port device team_slave_0 added [ 718.020076][T15149] team0: Port device team_slave_1 added [ 718.065159][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.065176][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.065229][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.069628][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.069646][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.069668][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.119694][T15200] ALSA: mixer_oss: invalid OSS volume 'OGAI000000000000000,group_id=00' [ 718.120336][T15200] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 718.220482][T15149] hsr_slave_0: entered promiscuous mode [ 718.235105][T15149] hsr_slave_1: entered promiscuous mode [ 718.238455][T15149] debugfs: 'hsr0' already exists in 'hsr' [ 718.238479][T15149] Cannot create hsr debugfs directory [ 718.797837][T15212] FAULT_INJECTION: forcing a failure. [ 718.797837][T15212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.797869][T15212] CPU: 0 UID: 0 PID: 15212 Comm: syz.1.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.797892][T15212] Tainted: [L]=SOFTLOCKUP [ 718.797899][T15212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.797909][T15212] Call Trace: [ 718.797915][T15212] [ 718.797923][T15212] dump_stack_lvl+0x100/0x190 [ 718.797952][T15212] should_fail_ex.cold+0x5/0xa [ 718.797970][T15212] ? prepare_alloc_pages+0x16d/0x5b0 [ 718.797995][T15212] should_fail_alloc_page+0xeb/0x140 [ 718.798020][T15212] prepare_alloc_pages+0x1f0/0x5b0 [ 718.798046][T15212] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 718.798068][T15212] ? vma_wants_writenotify+0xe7/0x340 [ 718.798085][T15212] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 718.798111][T15212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 718.798133][T15212] ? __pfx_vma_set_page_prot+0x10/0x10 [ 718.798153][T15212] ? __pfx___vma_start_write+0x10/0x10 [ 718.798174][T15212] ? vm_area_alloc+0x1f/0x160 [ 718.798196][T15212] ? vma_iter_store_overwrite+0x392/0x650 [ 718.798224][T15212] ? __mmap_region+0xc96/0x32c0 [ 718.798254][T15212] ? __pfx___mmap_region+0x10/0x10 [ 718.798281][T15212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 718.798306][T15212] ? policy_nodemask+0xed/0x4f0 [ 718.798331][T15212] alloc_pages_mpol+0x201/0x550 [ 718.798355][T15212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 718.798380][T15212] ? mt_validate_nulls+0x22f/0xae0 [ 718.798421][T15212] alloc_pages_noprof+0x1a/0x160 [ 718.798447][T15212] pte_alloc_one+0x1c/0x3d0 [ 718.798469][T15212] __pte_alloc+0x6d/0x380 [ 718.798488][T15212] ? __pfx___pte_alloc+0x10/0x10 [ 718.798540][T15212] do_anonymous_page+0x1307/0x2050 [ 718.798573][T15212] ? __pfx_do_anonymous_page+0x10/0x10 [ 718.798596][T15212] ? pgd_none+0x9f/0xe0 [ 718.798618][T15212] ? __pfx_pgd_none+0x10/0x10 [ 718.798641][T15212] ? find_held_lock+0x2b/0x80 [ 718.798663][T15212] __handle_mm_fault+0x1ff3/0x2f60 [ 718.798693][T15212] ? __pfx___handle_mm_fault+0x10/0x10 [ 718.798716][T15212] ? __pfx_mt_find+0x10/0x10 [ 718.798752][T15212] handle_mm_fault+0x363/0xa20 [ 718.798781][T15212] __get_user_pages+0x8ae/0x2c30 [ 718.798808][T15212] ? __pfx_mt_find+0x10/0x10 [ 718.798824][T15212] ? __pfx___get_user_pages+0x10/0x10 [ 718.798853][T15212] populate_vma_page_range+0x267/0x3f0 [ 718.798877][T15212] ? __pfx_populate_vma_page_range+0x10/0x10 [ 718.798896][T15212] ? __pfx_find_vma_intersection+0x10/0x10 [ 718.798924][T15212] __mm_populate+0x107/0x3a0 [ 718.798946][T15212] ? __pfx___mm_populate+0x10/0x10 [ 718.798969][T15212] ? up_write+0x2dc/0x5b0 [ 718.798997][T15212] vm_mmap_pgoff+0x441/0x470 [ 718.799020][T15212] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 718.799040][T15212] ? __mutex_unlock_slowpath+0x35d/0x930 [ 718.799069][T15212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 718.799098][T15212] ksys_mmap_pgoff+0xe4/0x610 [ 718.799120][T15212] ? fput+0x7c/0x100 [ 718.799143][T15212] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 718.799161][T15212] ? ksys_write+0x1ac/0x250 [ 718.799179][T15212] ? __pfx_ksys_write+0x10/0x10 [ 718.799201][T15212] __do_fast_syscall_32+0x13a/0x8b0 [ 718.799225][T15212] ? lockdep_hardirqs_on+0x7d/0x110 [ 718.799250][T15212] do_fast_syscall_32+0x32/0x70 [ 718.799274][T15212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 718.799296][T15212] RIP: 0023:0xf70befec [ 718.799316][T15212] Code: Unable to access opcode bytes at 0xf70befc2. [ 718.799325][T15212] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 718.799343][T15212] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 718.799355][T15212] RDX: 000000000000000d RSI: 0000000004008032 RDI: 00000000ffffffff [ 718.799365][T15212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 718.799375][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.799396][T15212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 718.799420][T15212] [ 719.357370][T15222] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 719.719112][T15149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.834000][ T5096] Bluetooth: hci3: command tx timeout [ 720.080007][T15149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.244597][T15228] FAULT_INJECTION: forcing a failure. [ 720.244597][T15228] name failslab, interval 1, probability 0, space 0, times 0 [ 720.244630][T15228] CPU: 0 UID: 0 PID: 15228 Comm: syz.2.2372 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.244654][T15228] Tainted: [L]=SOFTLOCKUP [ 720.244660][T15228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 720.244671][T15228] Call Trace: [ 720.244677][T15228] [ 720.244684][T15228] dump_stack_lvl+0x100/0x190 [ 720.244714][T15228] should_fail_ex.cold+0x5/0xa [ 720.244738][T15228] should_failslab+0xc2/0x120 [ 720.244762][T15228] kmem_cache_alloc_noprof+0x92/0x6a0 [ 720.244781][T15228] ? find_held_lock+0x2b/0x80 [ 720.244800][T15228] ? skb_clone+0x190/0x400 [ 720.244828][T15228] skb_clone+0x190/0x400 [ 720.244853][T15228] packet_rcv+0x617/0x17b0 [ 720.244879][T15228] ? __pfx_packet_rcv+0x10/0x10 [ 720.244903][T15228] deliver_skb+0x1aa/0x260 [ 720.244924][T15228] __netif_receive_skb_core.constprop.0+0x1b6b/0x3530 [ 720.244952][T15228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 720.244983][T15228] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 720.245011][T15228] ? __pfx___skb_flow_dissect+0x10/0x10 [ 720.245041][T15228] ? __lock_acquire+0x5c0/0x1f40 [ 720.245073][T15228] __netif_receive_skb_one_core+0xb0/0x1e0 [ 720.245095][T15228] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 720.245119][T15228] ? lock_acquire+0x1d1/0x380 [ 720.245151][T15228] __netif_receive_skb+0x1f/0x120 [ 720.245174][T15228] netif_receive_skb+0x139/0x7d0 [ 720.245229][T15228] ? __pfx_netif_receive_skb+0x10/0x10 [ 720.245258][T15228] tun_rx_batched.isra.0+0x3f6/0x750 [ 720.245284][T15228] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 720.245314][T15228] ? tun_get_user+0x1e1e/0x3cc0 [ 720.245343][T15228] tun_get_user+0x1f53/0x3cc0 [ 720.245384][T15228] ? __lock_acquire+0x5c0/0x1f40 [ 720.245411][T15228] ? __pfx_tun_get_user+0x10/0x10 [ 720.245440][T15228] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 720.245478][T15228] ? find_held_lock+0x2b/0x80 [ 720.245497][T15228] ? tun_get+0x191/0x370 [ 720.245518][T15228] ? tun_get+0x191/0x370 [ 720.245546][T15228] tun_chr_write_iter+0xdc/0x200 [ 720.245573][T15228] vfs_write+0x6af/0x1050 [ 720.245593][T15228] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 720.245620][T15228] ? __pfx_vfs_write+0x10/0x10 [ 720.245637][T15228] ? find_held_lock+0x2b/0x80 [ 720.245672][T15228] ksys_write+0x12a/0x250 [ 720.245712][T15228] ? __pfx_ksys_write+0x10/0x10 [ 720.245739][T15228] do_int80_emulation+0x166/0x650 [ 720.245770][T15228] asm_int80_emulation+0x1a/0x20 [ 720.245788][T15228] RIP: 0023:0xf71975ab [ 720.245805][T15228] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 720.245822][T15228] RSP: 002b:00000000f545644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 720.245842][T15228] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000740 [ 720.245853][T15228] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.245864][T15228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 720.245875][T15228] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 720.245885][T15228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 720.245909][T15228] [ 720.463341][T15233] openvswitch: netlink: Message has 12 unknown bytes. [ 720.471005][T15233] overlay: Unknown parameter 'userxattr:/' [ 720.486995][T15149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.487642][T15233] overlay: Unknown parameter 'seclabel' [ 720.997104][T15237] jffs2: notice: (15237) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 721.726258][T15149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.731830][T15149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.732740][T15149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 721.743081][T15149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.744962][T15149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 721.755196][T15149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.758516][T15149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 721.762167][T15149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.835279][ T5526] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 721.856075][T15149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.870390][T15149] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.877470][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.877547][T11578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.892728][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.892835][T11578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.913894][ T5096] Bluetooth: hci3: command tx timeout [ 721.984948][ T5526] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 721.987270][ T5526] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.989107][ T5526] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 721.989128][ T5526] usb 9-1: Product: syz [ 721.989141][ T5526] usb 9-1: Manufacturer: syz [ 721.989154][ T5526] usb 9-1: SerialNumber: syz [ 722.154914][T11882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 722.197840][ T5526] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.306268][T11882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 722.307577][T11882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.311417][T11882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 722.311441][T11882] usb 6-1: Product: syz [ 722.311454][T11882] usb 6-1: Manufacturer: syz [ 722.311466][T11882] usb 6-1: SerialNumber: syz [ 722.371354][T15149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.441274][ T43] audit: type=1800 audit(1789668314.987:1775): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2378" name="file1" dev="tmpfs" ino=76 res=0 errno=0 [ 722.471722][T13845] usb 9-1: USB disconnect, device number 6 [ 722.484309][T13845] usblp0: removed [ 722.530864][T11882] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.532562][T15149] veth0_vlan: entered promiscuous mode [ 722.557160][T15149] veth1_vlan: entered promiscuous mode [ 722.584842][T15149] veth0_macvtap: entered promiscuous mode [ 722.589522][T15149] veth1_macvtap: entered promiscuous mode [ 722.613371][T15149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.626181][T15149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.695440][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.695820][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.695854][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.695883][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.802831][T11583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.802857][T11583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.860497][T11583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.860518][T11583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.883907][ T5526] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 723.037778][ T5526] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 723.037814][ T5526] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 723.043936][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.043978][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.043999][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.045909][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.045958][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.045982][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.047498][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.047551][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.047581][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.055655][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.055707][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.055727][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.056866][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.056909][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.056930][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.057983][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.058020][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.058041][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.059140][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.059179][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.059201][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.060291][ T5526] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.060329][ T5526] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.060349][ T5526] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.062591][ T5526] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 723.062612][ T5526] usb 7-1: Product: syz [ 723.062624][ T5526] usb 7-1: Manufacturer: syz [ 723.062635][ T5526] usb 7-1: SerialNumber: syz [ 723.079567][ T5526] usb 7-1: config 0 descriptor?? [ 723.108032][ T5526] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 723.403727][T15271] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.404279][T15271] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.531117][T15271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.540906][T11882] usb 7-1: USB disconnect, device number 32 [ 723.541953][T15271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.575310][T11882] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 723.754096][ T5815] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.754289][T13682] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.773101][ T5612] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.773142][ T5612] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.994199][ T5096] Bluetooth: hci3: command tx timeout [ 724.507691][T15285] Process accounting resumed [ 724.610941][T15306] netlink: 'syz.2.2392': attribute type 21 has an invalid length. [ 724.611014][T15306] netlink: 'syz.2.2392': attribute type 3 has an invalid length. [ 724.611027][T15306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2392'. [ 724.892759][T15318] netlink: 'syz.2.2397': attribute type 21 has an invalid length. [ 724.892779][T15318] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 726.629556][ C2] hpet: Lost 1 RTC interrupts [ 729.304893][ T10] usb 6-1: USB disconnect, device number 19 [ 729.325098][ T10] usblp0: removed [ 729.390876][T15557] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 729.610083][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.612412][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.626909][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.631909][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.638271][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.785550][T15576] syzkaller0: entered promiscuous mode [ 729.785575][T15576] syzkaller0: entered allmulticast mode [ 729.791446][T15576] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 730.199266][ T5815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.317400][T15605] [ 730.318478][T15605] ============================= [ 730.322751][T15605] WARNING: suspicious RCU usage [ 730.324649][T15605] syzkaller #0 Tainted: G L [ 730.327248][T15605] ----------------------------- [ 730.329493][T15605] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 730.333629][T15605] [ 730.333629][T15605] other info that might help us debug this: [ 730.333629][T15605] [ 730.338140][T15605] [ 730.338140][T15605] rcu_scheduler_active = 2, debug_locks = 1 [ 730.341516][T15605] locks held by syz.4.2531/15605: 1, last CPU#0: [ 730.344248][T15605] #0: ffffffff8edeb438 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: bpf_prog_test_run_syscall+0x301/0xb30 [ 730.350047][T15605] [ 730.350047][T15605] stack backtrace: [ 730.353117][T15605] CPU: 0 UID: 0 PID: 15605 Comm: syz.4.2531 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.357706][T15605] Tainted: [L]=SOFTLOCKUP [ 730.359544][T15605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 730.363815][T15605] Call Trace: [ 730.365266][T15605] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 730.366401][T15605] dump_stack_lvl+0x100/0x190 [ 730.368386][T15605] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 730.370475][T15605] get_callchain_entry+0x278/0x3f0 [ 730.372644][T15605] get_perf_callchain+0x2d6/0x9c0 [ 730.375179][T15605] ? finish_task_switch.isra.0+0x1f0/0x10d0 [ 730.378120][T15605] ? __pfx_get_perf_callchain+0x10/0x10 [ 730.380507][T15605] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 730.382876][T15605] ? lockdep_hardirqs_on+0x7d/0x110 [ 730.384856][T15605] ? rcu_is_watching+0x13/0xc0 [ 730.386751][T15605] __bpf_get_stack+0x34a/0x7f0 [ 730.388790][T15605] ? __pfx___bpf_get_stack+0x10/0x10 [ 730.391125][T15605] bpf_get_stack_raw_tp+0x1dd/0x280 [ 730.393399][T15605] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 730.395794][T15605] bpf_prog_test_run_syscall+0x4ba/0xb30 [ 730.398539][T15605] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 730.401406][T15605] ? fput+0x7c/0x100 [ 730.403118][T15605] ? __bpf_prog_get+0x97/0x290 [ 730.405524][T15605] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 730.408650][T15605] __sys_bpf+0x2265/0x4a30 [ 730.411090][T15605] ? __pfx___sys_bpf+0x10/0x10 [ 730.413716][T15605] ? find_held_lock+0x2b/0x80 [ 730.416124][T15605] ? futex_wake+0x4ea/0x5e0 [ 730.418075][T15605] ? __lock_acquire+0x5c0/0x1f40 [ 730.420037][T15605] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 730.422597][T15605] ? xfd_validate_state+0x129/0x190 [ 730.425301][T15605] ? __ia32_sys_bpf+0xcc/0x170 [ 730.427751][T15605] __ia32_sys_bpf+0xcc/0x170 [ 730.429921][T15605] ? __do_fast_syscall_32+0xb3/0x8b0 [ 730.432292][T15605] __do_fast_syscall_32+0x13a/0x8b0 [ 730.434372][T15605] do_fast_syscall_32+0x32/0x70 [ 730.436185][T15605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 730.438610][T15605] RIP: 0023:0xf702efec [ 730.440427][T15605] Code: Unable to access opcode bytes at 0xf702efc2. [ 730.443534][T15605] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 730.446758][T15605] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800004c0 [ 730.449667][T15605] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 730.452580][T15605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 730.455733][T15605] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 730.461568][T15605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 730.465314][T15605] [ 730.580771][ T5815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.952099][ T5815] bond0: (slave netdevsim1): Releasing backup interface [ 730.996220][ T5815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.265015][ T5815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.616454][ T5815] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 731.616514][ T5815] ip6gre1 (unregistering): left promiscuous mode [ 731.765060][ T5815] bond0 (unregistering): Released all slaves [ 731.772548][ T5815] bond1 (unregistering): Released all slaves [ 731.782718][ T5815] bond2 (unregistering): Released all slaves [ 731.923401][ T5815] tipc: Left network mode [ 732.083316][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 732.366906][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 732.437648][ T5815] hsr_slave_0: left promiscuous mode [ 732.450654][ T5815] veth1_macvtap: left promiscuous mode [ 732.450773][ T5815] veth0_macvtap: left promiscuous mode [ 732.451021][ T5815] veth1_vlan: left promiscuous mode [ 732.837217][ T10] lo speed is unknown, defaulting to 1000 [ 732.837244][ T10] syz2: Port: 1 Link DOWN [ 732.838460][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 732.870022][ T1160] smbdirect: ib_dev[syz2] removed [ 733.171555][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 733.183852][ T5815] IPVS: stop unused estimator thread 0... [ 733.323491][ T5815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.442076][ T5815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.525331][ T5815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.607460][ T5815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.827023][ T5815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.966736][ T5815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.005876][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 734.058122][ T5815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.146220][ T5815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.302470][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 734.604475][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 734.778479][ T5815] bridge_slave_1: left allmulticast mode [ 734.778512][ T5815] bridge_slave_1: left promiscuous mode [ 734.785274][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.794160][ T5815] bridge_slave_0: left allmulticast mode [ 734.794176][ T5815] bridge_slave_0: left promiscuous mode [ 734.794279][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.806692][ T5815] bridge_slave_1: left allmulticast mode [ 734.806720][ T5815] bridge_slave_1: left promiscuous mode [ 734.806904][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.822504][ T5815] bridge_slave_0: left allmulticast mode [ 734.822531][ T5815] bridge_slave_0: left promiscuous mode [ 734.822667][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.841691][ T5815] bridge_slave_1: left allmulticast mode [ 734.841711][ T5815] bridge_slave_1: left promiscuous mode [ 734.841848][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.848678][ T5815] bridge_slave_0: left allmulticast mode [ 734.848703][ T5815] bridge_slave_0: left promiscuous mode [ 734.848885][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.111031][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.122246][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.123411][ T5815] bond0 (unregistering): Released all slaves [ 735.275155][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.279770][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.284352][ T5815] bond0 (unregistering): Released all slaves [ 735.403289][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.408219][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.410020][ T5815] bond0 (unregistering): Released all slaves [ 735.422174][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 735.823081][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 736.092007][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 736.303314][ T5815] hsr_slave_0: left promiscuous mode [ 736.306623][ T5815] hsr_slave_1: left promiscuous mode [ 736.307496][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.307567][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.308588][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.308608][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.328404][ T5815] hsr_slave_0: left promiscuous mode [ 736.331923][ T5815] hsr_slave_1: left promiscuous mode [ 736.332850][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.332875][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.334708][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.334725][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.349003][ T5815] hsr_slave_0: left promiscuous mode [ 736.350843][ T5815] hsr_slave_1: left promiscuous mode [ 736.351475][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.352029][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.370373][ T5815] veth1_macvtap: left promiscuous mode [ 736.370442][ T5815] veth0_macvtap: left promiscuous mode [ 736.370539][ T5815] veth1_vlan: left promiscuous mode [ 736.370613][ T5815] veth0_vlan: left promiscuous mode [ 736.371988][ T5815] veth1_macvtap: left promiscuous mode [ 736.372045][ T5815] veth0_macvtap: left promiscuous mode [ 736.372181][ T5815] veth1_vlan: left promiscuous mode [ 736.372269][ T5815] veth0_vlan: left promiscuous mode [ 736.699518][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 736.709451][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 736.993026][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 737.006708][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 737.314584][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 737.330151][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 737.449438][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 737.717143][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 738.008508][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 738.240342][ T5815] IPVS: stop unused estimator thread 0... [ 738.315179][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 738.607797][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 738.857634][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17