Warning: Permanently added '10.128.1.92' (ECDSA) to the list of known hosts.
2022/03/08 06:58:49 parsed 1 programs
syzkaller login: [ 53.340546][ T3595] cgroup: Unknown subsys name 'net'
[ 53.464696][ T3595] cgroup: Unknown subsys name 'rlimit'
2022/03/08 06:58:50 executed programs: 0
[ 54.665734][ T3603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 54.673820][ T3603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 54.681406][ T3603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 54.689473][ T3603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 54.697095][ T3603] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 54.704827][ T3603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 54.786387][ T3601] chnl_net:caif_netlink_parms(): no params data found
[ 54.828454][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.836156][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.844146][ T3601] device bridge_slave_0 entered promiscuous mode
[ 54.853273][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.860505][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.868578][ T3601] device bridge_slave_1 entered promiscuous mode
[ 54.889576][ T3601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 54.900481][ T3601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 54.922882][ T3601] team0: Port device team_slave_0 added
[ 54.930661][ T3601] team0: Port device team_slave_1 added
[ 54.947577][ T3601] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 54.954653][ T3601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 54.980586][ T3601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 54.994445][ T3601] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 55.001466][ T3601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 55.027511][ T3601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 55.053198][ T3601] device hsr_slave_0 entered promiscuous mode
[ 55.060385][ T3601] device hsr_slave_1 entered promiscuous mode
[ 55.140140][ T3601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 55.150982][ T3601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 55.160090][ T3601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 55.169915][ T3601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 55.190204][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.197370][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.205495][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.212731][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.257259][ T3601] 8021q: adding VLAN 0 to HW filter on device bond0
[ 55.270490][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 55.281608][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.289962][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.297691][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 55.311913][ T3601] 8021q: adding VLAN 0 to HW filter on device team0
[ 55.322981][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 55.332115][ T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.339286][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.351371][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 55.360624][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.367659][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.386585][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 55.395718][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 55.411672][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 55.420048][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 55.432551][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 55.443450][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 55.459147][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 55.466572][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 55.480197][ T3601] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 55.608690][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 55.628009][ T3601] device veth0_vlan entered promiscuous mode
[ 55.635255][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 55.644655][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 55.652500][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 55.665227][ T3601] device veth1_vlan entered promiscuous mode
[ 55.684872][ T3601] device veth0_macvtap entered promiscuous mode
[ 55.693522][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 55.701744][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 55.709818][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 55.718755][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 55.730361][ T3601] device veth1_macvtap entered promiscuous mode
[ 55.745069][ T3601] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 55.752645][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 55.765126][ T3601] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 55.773222][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 55.784345][ T3601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.793553][ T3601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.803301][ T3601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.812342][ T3601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.874845][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 55.890579][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 55.904361][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 55.906133][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 55.912665][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 55.928673][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 56.248301][ T3596] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 56.608449][ T3596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 56.739551][ T1045] Bluetooth: hci0: command 0x0409 tx timeout
[ 56.778634][ T3596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 56.787677][ T3596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 56.796039][ T3596] usb 1-1: Product: syz
[ 56.800424][ T3596] usb 1-1: Manufacturer: syz
[ 56.805027][ T3596] usb 1-1: SerialNumber: syz
[ 57.049057][ T3621] UDC core: couldn't find an available UDC or it's busy: -16
[ 57.056489][ T3621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 58.278374][ T3596] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 58.285333][ T3596] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 58.292861][ T3596] cdc_ncm 1-1:1.0: setting rx_max = 2048
[ 58.498550][ T3596] cdc_ncm 1-1:1.0: setting tx_max = 184
[ 58.509383][ T3596] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[ 58.819131][ T3596] Bluetooth: hci0: command 0x041b tx timeout
[ 59.053373][ T3657] UDC core: couldn't find an available UDC or it's busy: -16
[ 59.061712][ T3657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 59.659260][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready
2022/03/08 06:58:56 executed programs: 1
[ 60.410304][ T3612] usb 1-1: USB disconnect, device number 2
[ 60.430983][ T3612] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[ 60.442481][ T3612] ==================================================================
[ 60.450560][ T3612] BUG: KASAN: use-after-free in __lock_acquire+0x3f2f/0x56c0
[ 60.457959][ T3612] Read of size 8 at addr ffff888018d2c8f0 by task kworker/1:4/3612
[ 60.465852][ T3612]
[ 60.468174][ T3612] CPU: 1 PID: 3612 Comm: kworker/1:4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0
[ 60.478323][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 60.488380][ T3612] Workqueue: usb_hub_wq hub_event
[ 60.493430][ T3612] Call Trace:
[ 60.496695][ T3612]
[ 60.499623][ T3612] dump_stack_lvl+0xcd/0x134
[ 60.504210][ T3612] print_address_description.constprop.0.cold+0x8d/0x336
[ 60.511231][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 60.516249][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 60.521268][ T3612] kasan_report.cold+0x83/0xdf
[ 60.526027][ T3612] ? dev_close_many+0x130/0x620
[ 60.530869][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 60.535895][ T3612] __lock_acquire+0x3f2f/0x56c0
[ 60.540759][ T3612] ? usbnet_disconnect+0x139/0x270
[ 60.545896][ T3612] ? usb_unbind_interface+0x1d8/0x8e0
[ 60.551270][ T3612] ? device_release_driver+0x26/0x40
[ 60.556561][ T3612] ? device_del+0x4f3/0xc80
[ 60.561060][ T3612] ? usb_disable_device+0x35b/0x7b0
[ 60.566260][ T3612] ? usb_disconnect.cold+0x27a/0x78e
[ 60.571543][ T3612] ? hub_event+0x1e39/0x44d0
[ 60.576129][ T3612] ? process_one_work+0x9ac/0x1650
[ 60.581230][ T3612] ? worker_thread+0x657/0x1110
[ 60.586072][ T3612] ? kthread+0x2e9/0x3a0
[ 60.590308][ T3612] ? ret_from_fork+0x1f/0x30
[ 60.594895][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 60.600876][ T3612] ? mark_held_locks+0x9f/0xe0
[ 60.605634][ T3612] lock_acquire+0x1ab/0x510
[ 60.610134][ T3612] ? cdc_ncm_tx_fixup+0x8f/0x120
[ 60.615067][ T3612] ? lock_release+0x720/0x720
[ 60.619734][ T3612] ? kfree_skbmem+0xef/0x1b0
[ 60.624318][ T3612] ? kmem_cache_free+0xd7/0x370
[ 60.629269][ T3612] _raw_spin_lock_bh+0x2f/0x40
[ 60.634024][ T3612] ? cdc_ncm_tx_fixup+0x8f/0x120
[ 60.638972][ T3612] cdc_ncm_tx_fixup+0x8f/0x120
[ 60.643733][ T3612] ? cdc_ncm_fill_tx_frame+0x3890/0x3890
[ 60.649362][ T3612] usbnet_start_xmit+0x152/0x1f70
[ 60.654389][ T3612] ? lock_downgrade+0x6e0/0x6e0
[ 60.659243][ T3612] dev_hard_start_xmit+0x1eb/0x920
[ 60.664356][ T3612] sch_direct_xmit+0x19f/0xbe0
[ 60.669114][ T3612] ? lock_release+0x720/0x720
[ 60.673790][ T3612] ? pfifo_fast_dequeue+0xae0/0xae0
[ 60.678979][ T3612] ? do_raw_spin_trylock+0xb0/0x180
[ 60.684175][ T3612] ? do_raw_spin_lock+0x290/0x2b0
[ 60.689205][ T3612] __dev_queue_xmit+0x148f/0x37b0
[ 60.694246][ T3612] ? usb_disconnect.cold+0x27a/0x78e
[ 60.699561][ T3612] ? hub_event+0x1e39/0x44d0
[ 60.704154][ T3612] ? process_one_work+0x9ac/0x1650
[ 60.709285][ T3612] ? worker_thread+0x657/0x1110
[ 60.714217][ T3612] ? kthread+0x2e9/0x3a0
[ 60.718460][ T3612] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 60.723753][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 60.729737][ T3612] ? lock_chain_count+0x20/0x20
[ 60.734600][ T3612] ? memcpy+0x39/0x60
[ 60.738577][ T3612] ? eth_header+0x15e/0x1e0
[ 60.743075][ T3612] ? ether_setup+0x2c0/0x2c0
[ 60.747665][ T3612] ? lapbeth_data_indication+0x4a0/0x4a0
[ 60.753298][ T3612] lapb_data_transmit+0x8f/0xc0
[ 60.758149][ T3612] lapb_transmit_buffer+0x183/0x390
[ 60.763347][ T3612] lapb_send_control+0x1c7/0x370
[ 60.768281][ T3612] __lapb_disconnect_request+0x127/0x1a0
[ 60.773912][ T3612] lapb_device_event+0x292/0x560
[ 60.778846][ T3612] notifier_call_chain+0xb5/0x200
[ 60.783870][ T3612] call_netdevice_notifiers_info+0xb5/0x130
[ 60.789765][ T3612] __dev_close_many+0xf1/0x2e0
[ 60.794529][ T3612] ? __netif_schedule+0x2f0/0x2f0
[ 60.799559][ T3612] dev_close_many+0x22c/0x620
[ 60.804241][ T3612] ? __netdev_adjacent_dev_insert+0xab0/0xab0
[ 60.810308][ T3612] ? pppoe_device_event+0x298/0x970
[ 60.815524][ T3612] dev_close+0x16d/0x210
[ 60.819771][ T3612] ? netdev_name_node_alt_create+0x460/0x460
[ 60.825749][ T3612] ? lockdep_hardirqs_on+0x79/0x100
[ 60.830951][ T3612] ? pppoe_device_event+0x298/0x970
[ 60.836139][ T3612] ? __local_bh_enable_ip+0xa0/0x120
[ 60.841423][ T3612] lapbeth_device_event+0x677/0xc00
[ 60.846618][ T3612] ? hdlc_device_event+0x67/0x200
[ 60.851637][ T3612] notifier_call_chain+0xb5/0x200
[ 60.856657][ T3612] call_netdevice_notifiers_info+0xb5/0x130
[ 60.862558][ T3612] __dev_close_many+0xf1/0x2e0
[ 60.867312][ T3612] ? __netif_schedule+0x2f0/0x2f0
[ 60.872327][ T3612] ? device_del+0x4f3/0xc80
[ 60.876823][ T3612] ? hub_event+0x1e39/0x44d0
[ 60.881409][ T3612] dev_close_many+0x22c/0x620
[ 60.886080][ T3612] ? __netdev_adjacent_dev_insert+0xab0/0xab0
[ 60.892141][ T3612] ? lock_release+0x720/0x720
[ 60.896816][ T3612] unregister_netdevice_many+0x3ff/0x18d0
[ 60.902533][ T3612] ? __mutex_lock+0x21a/0x12f0
[ 60.907289][ T3612] ? netdev_pick_tx+0xbe0/0xbe0
[ 60.912155][ T3612] ? unregister_netdev+0xe/0x20
[ 60.916999][ T3612] ? mutex_lock_io_nested+0x1150/0x1150
[ 60.922541][ T3612] unregister_netdevice_queue+0x2dd/0x3c0
[ 60.928254][ T3612] ? unregister_netdevice_many+0x18d0/0x18d0
[ 60.934228][ T3612] ? cdc_ncm_free+0x145/0x1a0
[ 60.938898][ T3612] ? cdc_ncm_free+0x1a0/0x1a0
[ 60.943575][ T3612] unregister_netdev+0x18/0x20
[ 60.948336][ T3612] usbnet_disconnect+0x139/0x270
[ 60.953270][ T3612] usb_unbind_interface+0x1d8/0x8e0
[ 60.958460][ T3612] ? usb_unbind_device+0x1a0/0x1a0
[ 60.963561][ T3612] __device_release_driver+0x627/0x760
[ 60.969018][ T3612] device_release_driver+0x26/0x40
[ 60.974127][ T3612] bus_remove_device+0x2eb/0x5a0
[ 60.979146][ T3612] device_del+0x4f3/0xc80
[ 60.983467][ T3612] ? __device_link_del+0x380/0x380
[ 60.988571][ T3612] ? kobject_put+0x1f3/0x540
[ 60.993160][ T3612] usb_disable_device+0x35b/0x7b0
[ 60.998187][ T3612] usb_disconnect.cold+0x27a/0x78e
[ 61.003295][ T3612] hub_event+0x1e39/0x44d0
[ 61.007725][ T3612] ? hub_port_debounce+0x3c0/0x3c0
[ 61.012832][ T3612] ? lock_release+0x720/0x720
[ 61.017532][ T3612] ? lock_downgrade+0x6e0/0x6e0
[ 61.022376][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 61.028355][ T3612] process_one_work+0x9ac/0x1650
[ 61.033313][ T3612] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 61.038683][ T3612] ? rwlock_bug.part.0+0x90/0x90
[ 61.043615][ T3612] ? _raw_spin_lock_irq+0x41/0x50
[ 61.048635][ T3612] worker_thread+0x657/0x1110
[ 61.053306][ T3612] ? process_one_work+0x1650/0x1650
[ 61.058496][ T3612] kthread+0x2e9/0x3a0
[ 61.062557][ T3612] ? kthread_complete_and_exit+0x40/0x40
[ 61.068185][ T3612] ret_from_fork+0x1f/0x30
[ 61.072602][ T3612]
[ 61.075608][ T3612]
[ 61.077914][ T3612] Allocated by task 3596:
[ 61.082223][ T3612] kasan_save_stack+0x1e/0x40
[ 61.086894][ T3612] __kasan_kmalloc+0xa9/0xd0
[ 61.091478][ T3612] cdc_ncm_bind_common+0xb8/0x2df0
[ 61.096584][ T3612] cdc_ncm_bind+0x7c/0x1c0
[ 61.100996][ T3612] usbnet_probe+0xaf8/0x2580
[ 61.105577][ T3612] usb_probe_interface+0x315/0x7f0
[ 61.110678][ T3612] really_probe+0x245/0xcc0
[ 61.115186][ T3612] __driver_probe_device+0x338/0x4d0
[ 61.120481][ T3612] driver_probe_device+0x4c/0x1a0
[ 61.125496][ T3612] __device_attach_driver+0x20b/0x2f0
[ 61.130862][ T3612] bus_for_each_drv+0x15f/0x1e0
[ 61.135702][ T3612] __device_attach+0x228/0x4a0
[ 61.140459][ T3612] bus_probe_device+0x1e4/0x290
[ 61.145302][ T3612] device_add+0xb83/0x1e20
[ 61.149710][ T3612] usb_set_configuration+0x101e/0x1900
[ 61.155167][ T3612] usb_generic_driver_probe+0xba/0x100
[ 61.160620][ T3612] usb_probe_device+0xd9/0x2c0
[ 61.165369][ T3612] really_probe+0x245/0xcc0
[ 61.169862][ T3612] __driver_probe_device+0x338/0x4d0
[ 61.175140][ T3612] driver_probe_device+0x4c/0x1a0
[ 61.180417][ T3612] __device_attach_driver+0x20b/0x2f0
[ 61.185782][ T3612] bus_for_each_drv+0x15f/0x1e0
[ 61.190627][ T3612] __device_attach+0x228/0x4a0
[ 61.195385][ T3612] bus_probe_device+0x1e4/0x290
[ 61.200235][ T3612] device_add+0xb83/0x1e20
[ 61.204655][ T3612] usb_new_device.cold+0x63f/0x108e
[ 61.209857][ T3612] hub_event+0x2585/0x44d0
[ 61.214276][ T3612] process_one_work+0x9ac/0x1650
[ 61.219211][ T3612] worker_thread+0x657/0x1110
[ 61.223878][ T3612] kthread+0x2e9/0x3a0
[ 61.227941][ T3612] ret_from_fork+0x1f/0x30
[ 61.232348][ T3612]
[ 61.234830][ T3612] Freed by task 3612:
[ 61.238791][ T3612] kasan_save_stack+0x1e/0x40
[ 61.243469][ T3612] kasan_set_track+0x21/0x30
[ 61.248054][ T3612] kasan_set_free_info+0x20/0x30
[ 61.253002][ T3612] ____kasan_slab_free+0x126/0x160
[ 61.258211][ T3612] slab_free_freelist_hook+0x8b/0x1c0
[ 61.263577][ T3612] kfree+0xd0/0x390
[ 61.267381][ T3612] cdc_ncm_free+0x145/0x1a0
[ 61.271884][ T3612] cdc_ncm_unbind+0x1a7/0x340
[ 61.276561][ T3612] usbnet_disconnect+0x103/0x270
[ 61.281496][ T3612] usb_unbind_interface+0x1d8/0x8e0
[ 61.286694][ T3612] __device_release_driver+0x627/0x760
[ 61.292180][ T3612] device_release_driver+0x26/0x40
[ 61.297379][ T3612] bus_remove_device+0x2eb/0x5a0
[ 61.302321][ T3612] device_del+0x4f3/0xc80
[ 61.306652][ T3612] usb_disable_device+0x35b/0x7b0
[ 61.311679][ T3612] usb_disconnect.cold+0x27a/0x78e
[ 61.316782][ T3612] hub_event+0x1e39/0x44d0
[ 61.321198][ T3612] process_one_work+0x9ac/0x1650
[ 61.326137][ T3612] worker_thread+0x657/0x1110
[ 61.330812][ T3612] kthread+0x2e9/0x3a0
[ 61.334903][ T3612] ret_from_fork+0x1f/0x30
[ 61.339319][ T3612]
[ 61.341647][ T3612] The buggy address belongs to the object at ffff888018d2c800
[ 61.341647][ T3612] which belongs to the cache kmalloc-512 of size 512
[ 61.355692][ T3612] The buggy address is located 240 bytes inside of
[ 61.355692][ T3612] 512-byte region [ffff888018d2c800, ffff888018d2ca00)
[ 61.368959][ T3612] The buggy address belongs to the page:
[ 61.374573][ T3612] page:ffffea0000634b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18d2c
[ 61.384716][ T3612] head:ffffea0000634b00 order:2 compound_mapcount:0 compound_pincount:0
[ 61.393046][ T3612] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 61.401036][ T3612] raw: 00fff00000010200 ffffea0000721d00 dead000000000002 ffff888010c41c80
[ 61.409613][ T3612] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 61.418176][ T3612] page dumped because: kasan: bad access detected
[ 61.424570][ T3612] page_owner tracks the page as allocated
[ 61.430288][ T3612] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 472, ts 7097294333, free_ts 0
[ 61.448337][ T3612] get_page_from_freelist+0xa72/0x2f50
[ 61.453792][ T3612] __alloc_pages+0x1b2/0x500
[ 61.458373][ T3612] alloc_pages+0x1aa/0x310
[ 61.462782][ T3612] allocate_slab+0x27f/0x3c0
[ 61.467363][ T3612] ___slab_alloc+0xbe1/0x12b0
[ 61.472030][ T3612] __slab_alloc.constprop.0+0x4d/0xa0
[ 61.477394][ T3612] kmem_cache_alloc_trace+0x2f8/0x3d0
[ 61.482756][ T3612] alloc_bprm+0x51/0x8f0
[ 61.487000][ T3612] kernel_execve+0x55/0x460
[ 61.491509][ T3612] call_usermodehelper_exec_async+0x2e3/0x580
[ 61.497569][ T3612] ret_from_fork+0x1f/0x30
[ 61.501980][ T3612] page_owner free stack trace missing
[ 61.507330][ T3612]
[ 61.509637][ T3612] Memory state around the buggy address:
[ 61.515255][ T3612] ffff888018d2c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.523304][ T3612] ffff888018d2c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.531365][ T3612] >ffff888018d2c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.539418][ T3612] ^
[ 61.547116][ T3612] ffff888018d2c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.555172][ T3612] ffff888018d2c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.563213][ T3612] ==================================================================
[ 61.571252][ T3612] Disabling lock debugging due to kernel taint
[ 61.577379][ T3612] Kernel panic - not syncing: panic_on_warn set ...
[ 61.583946][ T3612] CPU: 1 PID: 3612 Comm: kworker/1:4 Tainted: G B 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0
[ 61.595473][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 61.605515][ T3612] Workqueue: usb_hub_wq hub_event
[ 61.610533][ T3612] Call Trace:
[ 61.613799][ T3612]
[ 61.616720][ T3612] dump_stack_lvl+0xcd/0x134
[ 61.621306][ T3612] panic+0x2b0/0x6dd
[ 61.625197][ T3612] ? __warn_printk+0xf3/0xf3
[ 61.629784][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 61.634805][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 61.639820][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 61.644836][ T3612] end_report.cold+0x63/0x6f
[ 61.649422][ T3612] kasan_report.cold+0x71/0xdf
[ 61.654179][ T3612] ? dev_close_many+0x130/0x620
[ 61.659023][ T3612] ? __lock_acquire+0x3f2f/0x56c0
[ 61.664038][ T3612] __lock_acquire+0x3f2f/0x56c0
[ 61.668879][ T3612] ? usbnet_disconnect+0x139/0x270
[ 61.673982][ T3612] ? usb_unbind_interface+0x1d8/0x8e0
[ 61.679341][ T3612] ? device_release_driver+0x26/0x40
[ 61.684628][ T3612] ? device_del+0x4f3/0xc80
[ 61.689117][ T3612] ? usb_disable_device+0x35b/0x7b0
[ 61.694310][ T3612] ? usb_disconnect.cold+0x27a/0x78e
[ 61.699584][ T3612] ? hub_event+0x1e39/0x44d0
[ 61.704177][ T3612] ? process_one_work+0x9ac/0x1650
[ 61.709278][ T3612] ? worker_thread+0x657/0x1110
[ 61.714117][ T3612] ? kthread+0x2e9/0x3a0
[ 61.718355][ T3612] ? ret_from_fork+0x1f/0x30
[ 61.722938][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 61.728925][ T3612] ? mark_held_locks+0x9f/0xe0
[ 61.733682][ T3612] lock_acquire+0x1ab/0x510
[ 61.738182][ T3612] ? cdc_ncm_tx_fixup+0x8f/0x120
[ 61.743115][ T3612] ? lock_release+0x720/0x720
[ 61.747784][ T3612] ? kfree_skbmem+0xef/0x1b0
[ 61.752366][ T3612] ? kmem_cache_free+0xd7/0x370
[ 61.757217][ T3612] _raw_spin_lock_bh+0x2f/0x40
[ 61.761972][ T3612] ? cdc_ncm_tx_fixup+0x8f/0x120
[ 61.766901][ T3612] cdc_ncm_tx_fixup+0x8f/0x120
[ 61.771669][ T3612] ? cdc_ncm_fill_tx_frame+0x3890/0x3890
[ 61.777299][ T3612] usbnet_start_xmit+0x152/0x1f70
[ 61.782317][ T3612] ? lock_downgrade+0x6e0/0x6e0
[ 61.787164][ T3612] dev_hard_start_xmit+0x1eb/0x920
[ 61.792272][ T3612] sch_direct_xmit+0x19f/0xbe0
[ 61.797025][ T3612] ? lock_release+0x720/0x720
[ 61.801693][ T3612] ? pfifo_fast_dequeue+0xae0/0xae0
[ 61.806884][ T3612] ? do_raw_spin_trylock+0xb0/0x180
[ 61.812113][ T3612] ? do_raw_spin_lock+0x290/0x2b0
[ 61.817135][ T3612] __dev_queue_xmit+0x148f/0x37b0
[ 61.822151][ T3612] ? usb_disconnect.cold+0x27a/0x78e
[ 61.827428][ T3612] ? hub_event+0x1e39/0x44d0
[ 61.832009][ T3612] ? process_one_work+0x9ac/0x1650
[ 61.837114][ T3612] ? worker_thread+0x657/0x1110
[ 61.841955][ T3612] ? kthread+0x2e9/0x3a0
[ 61.846195][ T3612] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 61.851509][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 61.857481][ T3612] ? lock_chain_count+0x20/0x20
[ 61.862325][ T3612] ? memcpy+0x39/0x60
[ 61.866297][ T3612] ? eth_header+0x15e/0x1e0
[ 61.870793][ T3612] ? ether_setup+0x2c0/0x2c0
[ 61.875379][ T3612] ? lapbeth_data_indication+0x4a0/0x4a0
[ 61.881007][ T3612] lapb_data_transmit+0x8f/0xc0
[ 61.885868][ T3612] lapb_transmit_buffer+0x183/0x390
[ 61.891055][ T3612] lapb_send_control+0x1c7/0x370
[ 61.895986][ T3612] __lapb_disconnect_request+0x127/0x1a0
[ 61.901612][ T3612] lapb_device_event+0x292/0x560
[ 61.906540][ T3612] notifier_call_chain+0xb5/0x200
[ 61.911556][ T3612] call_netdevice_notifiers_info+0xb5/0x130
[ 61.917472][ T3612] __dev_close_many+0xf1/0x2e0
[ 61.922224][ T3612] ? __netif_schedule+0x2f0/0x2f0
[ 61.927242][ T3612] dev_close_many+0x22c/0x620
[ 61.931924][ T3612] ? __netdev_adjacent_dev_insert+0xab0/0xab0
[ 61.937985][ T3612] ? pppoe_device_event+0x298/0x970
[ 61.943176][ T3612] dev_close+0x16d/0x210
[ 61.947414][ T3612] ? netdev_name_node_alt_create+0x460/0x460
[ 61.953386][ T3612] ? lockdep_hardirqs_on+0x79/0x100
[ 61.958577][ T3612] ? pppoe_device_event+0x298/0x970
[ 61.963762][ T3612] ? __local_bh_enable_ip+0xa0/0x120
[ 61.969043][ T3612] lapbeth_device_event+0x677/0xc00
[ 61.974233][ T3612] ? hdlc_device_event+0x67/0x200
[ 61.979245][ T3612] notifier_call_chain+0xb5/0x200
[ 61.984261][ T3612] call_netdevice_notifiers_info+0xb5/0x130
[ 61.990153][ T3612] __dev_close_many+0xf1/0x2e0
[ 61.994909][ T3612] ? __netif_schedule+0x2f0/0x2f0
[ 61.999926][ T3612] ? device_del+0x4f3/0xc80
[ 62.004420][ T3612] ? hub_event+0x1e39/0x44d0
[ 62.009004][ T3612] dev_close_many+0x22c/0x620
[ 62.013668][ T3612] ? __netdev_adjacent_dev_insert+0xab0/0xab0
[ 62.019738][ T3612] ? lock_release+0x720/0x720
[ 62.024425][ T3612] unregister_netdevice_many+0x3ff/0x18d0
[ 62.030139][ T3612] ? __mutex_lock+0x21a/0x12f0
[ 62.034899][ T3612] ? netdev_pick_tx+0xbe0/0xbe0
[ 62.039739][ T3612] ? unregister_netdev+0xe/0x20
[ 62.044579][ T3612] ? mutex_lock_io_nested+0x1150/0x1150
[ 62.050119][ T3612] unregister_netdevice_queue+0x2dd/0x3c0
[ 62.055833][ T3612] ? unregister_netdevice_many+0x18d0/0x18d0
[ 62.061806][ T3612] ? cdc_ncm_free+0x145/0x1a0
[ 62.066476][ T3612] ? cdc_ncm_free+0x1a0/0x1a0
[ 62.071145][ T3612] unregister_netdev+0x18/0x20
[ 62.075908][ T3612] usbnet_disconnect+0x139/0x270
[ 62.080838][ T3612] usb_unbind_interface+0x1d8/0x8e0
[ 62.086025][ T3612] ? usb_unbind_device+0x1a0/0x1a0
[ 62.091126][ T3612] __device_release_driver+0x627/0x760
[ 62.096580][ T3612] device_release_driver+0x26/0x40
[ 62.101685][ T3612] bus_remove_device+0x2eb/0x5a0
[ 62.106617][ T3612] device_del+0x4f3/0xc80
[ 62.110938][ T3612] ? __device_link_del+0x380/0x380
[ 62.116041][ T3612] ? kobject_put+0x1f3/0x540
[ 62.120624][ T3612] usb_disable_device+0x35b/0x7b0
[ 62.125649][ T3612] usb_disconnect.cold+0x27a/0x78e
[ 62.130761][ T3612] hub_event+0x1e39/0x44d0
[ 62.135177][ T3612] ? hub_port_debounce+0x3c0/0x3c0
[ 62.140281][ T3612] ? lock_release+0x720/0x720
[ 62.144949][ T3612] ? lock_downgrade+0x6e0/0x6e0
[ 62.149792][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 62.155768][ T3612] process_one_work+0x9ac/0x1650
[ 62.160697][ T3612] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 62.166068][ T3612] ? rwlock_bug.part.0+0x90/0x90
[ 62.170996][ T3612] ? _raw_spin_lock_irq+0x41/0x50
[ 62.176009][ T3612] worker_thread+0x657/0x1110
[ 62.180682][ T3612] ? process_one_work+0x1650/0x1650
[ 62.185868][ T3612] kthread+0x2e9/0x3a0
[ 62.189935][ T3612] ? kthread_complete_and_exit+0x40/0x40
[ 62.195563][ T3612] ret_from_fork+0x1f/0x30
[ 62.199974][ T3612]
[ 62.203143][ T3612] Kernel Offset: disabled
[ 62.207454][ T3612] Rebooting in 86400 seconds..