[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.200' (ECDSA) to the list of known hosts. 2020/11/02 00:04:46 fuzzer started 2020/11/02 00:04:46 dialing manager at 10.128.0.26:42145 2020/11/02 00:04:47 syscalls: 3448 2020/11/02 00:04:47 code coverage: enabled 2020/11/02 00:04:47 comparison tracing: enabled 2020/11/02 00:04:47 extra coverage: enabled 2020/11/02 00:04:47 setuid sandbox: enabled 2020/11/02 00:04:47 namespace sandbox: enabled 2020/11/02 00:04:47 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/02 00:04:47 fault injection: enabled 2020/11/02 00:04:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/02 00:04:47 net packet injection: enabled 2020/11/02 00:04:47 net device setup: enabled 2020/11/02 00:04:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/02 00:04:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/02 00:04:47 USB emulation: enabled 2020/11/02 00:04:47 hci packet injection: enabled 2020/11/02 00:04:47 wifi device emulation: enabled 00:06:39 executing program 0: setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000025c0), 0xfffffffffffffeb9) 00:06:39 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2681, 0x0) 00:06:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 00:06:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x34}]}}}], 0x18}}], 0x1, 0x0) 00:06:40 executing program 4: ioprio_set$uid(0x0, 0xee01, 0x4004) 00:06:40 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0x14) syzkaller login: [ 178.893841][ T8479] IPVS: ftp: loaded support on port[0] = 21 [ 179.014438][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 179.148171][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 179.278937][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.326455][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.335348][ T8479] device bridge_slave_0 entered promiscuous mode [ 179.345940][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.353181][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.364179][ T8479] device bridge_slave_1 entered promiscuous mode [ 179.406749][ T8483] IPVS: ftp: loaded support on port[0] = 21 [ 179.411808][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.428543][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.457491][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 179.552851][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 179.586039][ T8479] team0: Port device team_slave_0 added [ 179.617245][ T8479] team0: Port device team_slave_1 added [ 179.660848][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.667928][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.677379][ T8481] device bridge_slave_0 entered promiscuous mode [ 179.789930][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.797048][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.810517][ T8481] device bridge_slave_1 entered promiscuous mode [ 179.818529][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.819774][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 179.830720][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.857664][ T8479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.896681][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.903885][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.930583][ T8479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.034159][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.074051][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 180.087564][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.107894][ T8479] device hsr_slave_0 entered promiscuous mode [ 180.115529][ T8479] device hsr_slave_1 entered promiscuous mode [ 180.283420][ T8565] IPVS: ftp: loaded support on port[0] = 21 [ 180.289899][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 180.315911][ T8481] team0: Port device team_slave_0 added [ 180.347689][ T8481] team0: Port device team_slave_1 added [ 180.494513][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.503685][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.533497][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.558408][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.566291][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.575762][ T8483] device bridge_slave_0 entered promiscuous mode [ 180.586237][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.594534][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.603286][ T8483] device bridge_slave_1 entered promiscuous mode [ 180.616817][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.624290][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.650637][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.713791][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.729294][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.737832][ T8485] device bridge_slave_0 entered promiscuous mode [ 180.800326][ T2998] Bluetooth: hci0: command 0x0409 tx timeout [ 180.824302][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.834555][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.846582][ T8485] device bridge_slave_1 entered promiscuous mode [ 180.859109][ T8481] device hsr_slave_0 entered promiscuous mode [ 180.866207][ T8481] device hsr_slave_1 entered promiscuous mode [ 180.873125][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.881453][ T8481] Cannot create hsr debugfs directory [ 180.896170][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.909256][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.987635][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 181.008184][ T8483] team0: Port device team_slave_0 added [ 181.033727][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.043174][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 181.051621][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.068261][ T8483] team0: Port device team_slave_1 added [ 181.134678][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.143109][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.170569][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.208893][ T8479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.223759][ T8485] team0: Port device team_slave_0 added [ 181.243893][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.251239][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.277929][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.289544][ T3199] Bluetooth: hci2: command 0x0409 tx timeout [ 181.317419][ T8479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.354679][ T8485] team0: Port device team_slave_1 added [ 181.390582][ T8479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.416185][ T8483] device hsr_slave_0 entered promiscuous mode [ 181.424660][ T8483] device hsr_slave_1 entered promiscuous mode [ 181.432277][ T8483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.440723][ T8483] Cannot create hsr debugfs directory [ 181.457159][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 181.467745][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.475323][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.502072][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.514324][ T8479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.529448][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 181.548225][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.568146][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.595609][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.626120][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.634538][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.643801][ T8487] device bridge_slave_0 entered promiscuous mode [ 181.678699][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.686931][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.695184][ T8487] device bridge_slave_1 entered promiscuous mode [ 181.731207][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.759495][ T9041] Bluetooth: hci4: command 0x0409 tx timeout [ 181.778150][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.838718][ T8487] team0: Port device team_slave_0 added [ 181.865176][ T8485] device hsr_slave_0 entered promiscuous mode [ 181.877355][ T8485] device hsr_slave_1 entered promiscuous mode [ 181.884272][ T8485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.892405][ T8485] Cannot create hsr debugfs directory [ 181.921722][ T8487] team0: Port device team_slave_1 added [ 181.951088][ T8481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.966052][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.974058][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.983926][ T8565] device bridge_slave_0 entered promiscuous mode [ 181.993850][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.001575][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.010098][ T8565] device bridge_slave_1 entered promiscuous mode [ 182.031262][ T8481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.052231][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.059217][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.087676][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.114447][ T8481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.124383][ T8481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.151601][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.158585][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.186003][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.248728][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.249994][ T2998] Bluetooth: hci5: command 0x0409 tx timeout [ 182.290962][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.304099][ T8487] device hsr_slave_0 entered promiscuous mode [ 182.314971][ T8487] device hsr_slave_1 entered promiscuous mode [ 182.322616][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.331537][ T8487] Cannot create hsr debugfs directory [ 182.426142][ T8565] team0: Port device team_slave_0 added [ 182.434774][ T8565] team0: Port device team_slave_1 added [ 182.481918][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.536109][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.546372][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.575612][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.591632][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.598611][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.625909][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.637654][ T8483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.656289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.665675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.676503][ T8479] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.724500][ T8483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.777905][ T8483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.786661][ T8485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.807061][ T8565] device hsr_slave_0 entered promiscuous mode [ 182.814719][ T8565] device hsr_slave_1 entered promiscuous mode [ 182.823293][ T8565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.832481][ T8565] Cannot create hsr debugfs directory [ 182.838036][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.847999][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.856766][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.864193][ T9041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.879763][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 182.892986][ T8483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.908363][ T8485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.933387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.942186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.950937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.959429][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.966489][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.975666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.984846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.997063][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.027608][ T8485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.038356][ T8485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.117291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.128694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.129573][ T2998] Bluetooth: hci1: command 0x041b tx timeout [ 183.146962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.156506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.203188][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.211619][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.221046][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.230395][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.238711][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.247925][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.256748][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.267739][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.317392][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.347347][ T8487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.359431][ T17] Bluetooth: hci2: command 0x041b tx timeout [ 183.372859][ T8487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.407404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.418740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.427872][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.435020][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.445942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.471949][ T8487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.518234][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.528123][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.537295][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.544407][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.552596][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.560314][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.585424][ T8487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.597926][ T8479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.608973][ T3199] Bluetooth: hci3: command 0x041b tx timeout [ 183.624337][ T8565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.635060][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.644692][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.654156][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.663181][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.672289][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.681728][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.691326][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.700463][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.713457][ T8481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.726224][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.745796][ T8565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.756011][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.771799][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.780881][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.819802][ T8565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.840738][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 183.857902][ T8565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.877352][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.895638][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.922186][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.930504][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.959582][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.969068][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.000988][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.008255][ T8479] device veth0_vlan entered promiscuous mode [ 184.025868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.033937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.047642][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.100138][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.107967][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.126098][ T8479] device veth1_vlan entered promiscuous mode [ 184.138456][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.162914][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.189888][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.198107][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.208196][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.217527][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.226752][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.233883][ T3199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.241909][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.251211][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.260160][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.269035][ T3199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.302880][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.316229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.324854][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.334119][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.343043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.352594][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 184.378528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.393208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.403258][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.415263][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.424235][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.433617][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.442573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.451979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.460863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.473059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.482681][ T8479] device veth0_macvtap entered promiscuous mode [ 184.494883][ T8479] device veth1_macvtap entered promiscuous mode [ 184.511505][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.526386][ T8481] device veth0_vlan entered promiscuous mode [ 184.546715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.559062][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.569338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.577237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.585695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.594719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.603749][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.611720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.646467][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.661377][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.673223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.681588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.689896][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.698489][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.707603][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.714722][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.723425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.732258][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.740897][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.748044][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.756138][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.788426][ T8479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.812459][ T8481] device veth1_vlan entered promiscuous mode [ 184.835498][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.848563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.858102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.871579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.880605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.889116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.898711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.907700][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.914825][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.926491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.942406][ T8479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.960111][ T9785] Bluetooth: hci0: command 0x040f tx timeout [ 184.973181][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.985463][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.996033][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.005169][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.015027][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.024253][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.033468][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.040621][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.048388][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.057429][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.066385][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.073991][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.083976][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.100239][ T8479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.109211][ T8479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.127206][ T8479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.138293][ T8479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.163780][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.181696][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.191392][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.201023][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.202891][ T3199] Bluetooth: hci1: command 0x040f tx timeout [ 185.251596][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.280524][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.290655][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.298311][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.308898][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.317883][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.390510][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.411479][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.421365][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.431322][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.441487][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.449389][ T2998] Bluetooth: hci2: command 0x040f tx timeout [ 185.456664][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.465435][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.474599][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.487226][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.496412][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.505213][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.512379][ T9041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.520927][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.529358][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.540135][ T8481] device veth0_macvtap entered promiscuous mode [ 185.564501][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.589768][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.597493][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.606648][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.618275][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.628343][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.637014][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.646727][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.655924][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.663069][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.680289][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 185.691682][ T8481] device veth1_macvtap entered promiscuous mode [ 185.716177][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.725625][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.736126][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.757315][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.767676][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.776846][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.788333][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.797464][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.812998][ T8483] device veth0_vlan entered promiscuous mode [ 185.830681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.860285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.868776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.890679][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.909270][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.917705][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.925585][ T8483] device veth1_vlan entered promiscuous mode [ 185.926560][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.926595][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.927921][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.984731][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.016225][ T9787] Bluetooth: hci4: command 0x040f tx timeout [ 186.020912][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.033598][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.043640][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.052125][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.060779][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.073685][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.082732][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.091893][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.111470][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.119560][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 186.119570][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.120931][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.146937][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.165194][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.180168][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.207174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.216190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.227241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.237184][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.252344][ T8481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.263395][ T8481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.272437][ T8481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.281454][ T8481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.329692][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.337189][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.359699][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.368499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.392475][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.410569][ T3199] Bluetooth: hci5: command 0x040f tx timeout [ 186.452234][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.463891][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.476750][ T8483] device veth0_macvtap entered promiscuous mode [ 186.499895][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.517774][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.527077][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.547827][ T8483] device veth1_macvtap entered promiscuous mode [ 186.557333][ T8485] device veth0_vlan entered promiscuous mode [ 186.567095][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.577083][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.585604][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.595718][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.629852][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.646533][ T8485] device veth1_vlan entered promiscuous mode [ 186.663162][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.681232][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.690743][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.698260][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.736304][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.788252][ T8483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.803418][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.813762][ T8483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.832143][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.857348][ T8483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 186.877735][ T8483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:06:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip_tables_matches\x00') read$char_usb(r0, &(0x7f0000000640)=""/201, 0xfffffebe) [ 186.902142][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.938692][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 00:06:48 executing program 0: getpgid(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) [ 186.962042][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.990407][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.045010][ T8483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.058112][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 187.109282][ T8483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.119148][ T8483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.145569][ T8483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:06:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8008551d, 0x0) [ 187.157520][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.187749][ T8483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.201627][ T8483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.218332][ T8483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 00:06:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) [ 187.243861][ T8483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.289594][ T17] Bluetooth: hci1: command 0x0419 tx timeout [ 187.309664][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.315939][ T8485] device veth0_macvtap entered promiscuous mode [ 187.317771][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:06:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x17, &(0x7f0000000000)="01", 0x1) [ 187.350355][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.383563][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.392739][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 00:06:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) [ 187.402963][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.415945][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.425869][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.469925][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.489404][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.520372][ T3199] Bluetooth: hci2: command 0x0419 tx timeout [ 187.528338][ T8485] device veth1_macvtap entered promiscuous mode 00:06:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) [ 187.568332][ T8487] device veth0_vlan entered promiscuous mode [ 187.651607][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.670155][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 00:06:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) [ 187.697648][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.737475][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.750042][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.760049][ T9788] Bluetooth: hci3: command 0x0419 tx timeout [ 187.765585][ T8487] device veth1_vlan entered promiscuous mode [ 187.815041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.826652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.847883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.908727][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.949281][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.959142][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.991737][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.003384][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.014889][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.027452][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.035792][ T8565] device veth0_vlan entered promiscuous mode [ 188.052962][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.064767][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.073816][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.080127][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 188.083487][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.118321][ T8565] device veth1_vlan entered promiscuous mode [ 188.126063][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.134301][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.142447][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.190210][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.205040][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.223031][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.225762][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.242637][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.253285][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.263375][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 188.275229][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.286565][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.295636][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.304268][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.313320][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.323226][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.332515][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.345017][ T8487] device veth0_macvtap entered promiscuous mode [ 188.375664][ T8487] device veth1_macvtap entered promiscuous mode [ 188.384781][ T8485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.402197][ T8485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.416399][ T8485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.428785][ T8485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.451986][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.473602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.481511][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.492702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.505488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.514001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.522415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.531785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.546732][ T8565] device veth0_macvtap entered promiscuous mode [ 188.554363][ T17] Bluetooth: hci5: command 0x0419 tx timeout [ 188.570250][ T8565] device veth1_macvtap entered promiscuous mode [ 188.591034][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.599880][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 00:06:50 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xe, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d57aca"}, 0x0, 0x0, @fd}) [ 188.680065][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.692592][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.712987][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.736692][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.778907][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.808981][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.820864][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.831967][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.844987][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.857224][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.877433][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.899275][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.911428][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.921901][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.932555][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.942578][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.953229][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.963802][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.974372][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.986688][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.999903][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.008593][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.021017][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.030662][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.052250][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.067374][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.086686][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.098477][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.112344][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.124688][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.134672][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.145363][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.157092][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.165638][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.177112][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.187105][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.197743][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.208979][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.221035][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.232202][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.243380][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.253615][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.264429][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.275911][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.285231][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.295793][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.305965][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.315010][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.339656][ T8565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.348402][ T8565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.368144][ T8565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.378138][ T8565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.404952][ T8487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.416727][ T8487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.427006][ T8487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.436402][ T8487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.502934][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.515947][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.593709][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.613050][ T9915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.643100][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.643792][ T9915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.664864][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.678919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.717923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.795167][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.814400][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.833459][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.841010][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:06:51 executing program 3: shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000004c0)=""/4096) [ 189.874093][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.885690][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.906921][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.925414][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.966314][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:06:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000280)=0x3f) 00:06:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x24, 0x73, 0x32b}, 0x24}}, 0x0) 00:06:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}], 0x1, 0x0) 00:06:51 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x2681, 0x0) 00:06:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x48, {0x2, 0x0, @dev}, 'xfrm0\x00'}) 00:06:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) 00:06:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, &(0x7f0000000180)=""/50) 00:06:51 executing program 1: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 00:06:51 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') read$eventfd(r0, 0x0, 0x4c00) 00:06:51 executing program 0: keyctl$get_persistent(0xe, 0xee01, 0xfffffffffffffffb) 00:06:51 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 00:06:51 executing program 4: syz_mount_image$adfs(&(0x7f0000000400)='adfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[], [{@seclabel='seclabel'}]}) 00:06:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2}}}], 0x20}}], 0x2, 0x0) 00:06:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x5c, 0x0, &(0x7f0000000440)=[@exit_looper, @acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001700)='d'}) 00:06:52 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:06:52 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) 00:06:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)) [ 190.448420][ T9984] ADFS-fs (loop4): unrecognised mount option "seclabel" or missing value 00:06:52 executing program 0: semctl$IPC_RMID(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{}], 0x1) 00:06:52 executing program 2: perf_event_open(&(0x7f00000011c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 190.545155][ T9984] ADFS-fs (loop4): unrecognised mount option "seclabel" or missing value 00:06:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)) 00:06:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:52 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc001) 00:06:52 executing program 5: r0 = socket(0x2b, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x20000000) bind$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 00:06:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x40085511, 0x0) 00:06:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) 00:06:52 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1c, 0x0, 0x0) 00:06:52 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 00:06:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)='\"', 0x1}], 0x9}}], 0x1, 0x0) 00:06:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:52 executing program 2: clock_gettime(0x0, &(0x7f0000006540)) 00:06:52 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0505609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d57aca"}, 0x0, 0x0, @offset=0x3}) 00:06:52 executing program 3: inotify_init1(0x81800) 00:06:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x106081) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "29a5eabc8849df6bba9748e9aea075578f9c62c0778489cdda7281a8e165009fc4f907bf113c99dcc2332fcb412c4efdf9f6f9dfd88a1300838ebfe2ef78b2b5", "8abcb226c40925b68c5518a739ab30fed734ad6b5d04d1204278ba81f8c092e4ba43733cda565ffb52808b9cb83beedf1ea8fdde6251c322adb2fdcb00d2cce6", "2f8d732859bb7596332b5e7efabcb163c3eedff9fecfbc6814414d13c477f5d8"}) 00:06:52 executing program 4: r0 = socket(0x2b, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f000000e700)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="f4", 0x1}], 0x1}], 0x1, 0x2400c094) 00:06:52 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xac003) 00:06:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045503, 0x0) 00:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) 00:06:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x300}) 00:06:52 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc050565d, 0x0) 00:06:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) 00:06:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:52 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004a80)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:06:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 00:06:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x15, r0, 0x0, 0x0) 00:06:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3000000000000000000000001400020067656e65766530000000000000000000040003009000018008000200", @ANYRES32], 0x2dc}}, 0x0) 00:06:53 executing program 1: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xfffffee5, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x0) 00:06:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4000, 0x0) 00:06:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000001180)) 00:06:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:53 executing program 1: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:53 executing program 5: add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x4800, 0xfffffffffffffffb) 00:06:53 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=']') 00:06:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000080)=0x7e, 0x4) 00:06:53 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:06:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:53 executing program 1: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003c40)={{}, {{@in6=@loopback}, 0x0, @in6=@ipv4}}, 0xe8) 00:06:53 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 00:06:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8001, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) 00:06:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x80001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 00:06:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:53 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000004c0)="a1"}) [ 192.093591][T10103] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 00:06:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x7, 0x0, 0x0) 00:06:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) [ 192.225480][T10111] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/10111 [ 192.235021][T10111] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 192.242036][T10111] CPU: 1 PID: 10111 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 192.250814][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.260884][T10111] Call Trace: [ 192.264197][T10111] dump_stack+0x107/0x163 [ 192.268521][T10111] check_preemption_disabled+0x123/0x130 [ 192.274144][T10111] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 192.279879][T10111] trace_hardirqs_on+0x5b/0x1c0 [ 192.286215][T10111] __bad_area_nosemaphore+0xc6/0x400 [ 192.291505][T10111] do_user_addr_fault+0x7d7/0xb40 [ 192.296520][T10111] exc_page_fault+0x9e/0x180 [ 192.301100][T10111] ? asm_exc_page_fault+0x8/0x30 [ 192.306022][T10111] asm_exc_page_fault+0x1e/0x30 [ 192.310856][T10111] RIP: 0033:0x457abf [ 192.314754][T10111] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 192.334347][T10111] RSP: 002b:00007f353c9e6828 EFLAGS: 00010283 [ 192.340402][T10111] RAX: 00007f353c9e6850 RBX: 6666666666666667 RCX: 0000000000000000 [ 192.348360][T10111] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f353c9e6850 [ 192.356328][T10111] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 192.364287][T10111] R10: 00007f353c9e79d0 R11: 0000000000000246 R12: 000000000118bf2c 00:06:53 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x4400c150) [ 192.372245][T10111] R13: 00007ffca110b6ff R14: 00007f353c9e79c0 R15: 000000000118bf2c [ 192.380337][T10111] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/10111 [ 192.389856][T10111] caller is lockdep_hardirqs_on+0x38/0x110 [ 192.395680][T10111] CPU: 1 PID: 10111 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 192.404526][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.414592][T10111] Call Trace: [ 192.417896][T10111] dump_stack+0x107/0x163 [ 192.422249][T10111] check_preemption_disabled+0x123/0x130 [ 192.427891][T10111] ? __bad_area_nosemaphore+0xc6/0x400 [ 192.433362][T10111] lockdep_hardirqs_on+0x38/0x110 [ 192.438397][T10111] __bad_area_nosemaphore+0xc6/0x400 [ 192.443734][T10111] do_user_addr_fault+0x7d7/0xb40 [ 192.448868][T10111] exc_page_fault+0x9e/0x180 [ 192.453501][T10111] ? asm_exc_page_fault+0x8/0x30 [ 192.458656][T10111] asm_exc_page_fault+0x1e/0x30 [ 192.463550][T10111] RIP: 0033:0x457abf 00:06:54 executing program 4: ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8004552f, 0x0) [ 192.467458][T10111] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 192.487072][T10111] RSP: 002b:00007f353c9e6828 EFLAGS: 00010283 [ 192.493156][T10111] RAX: 00007f353c9e6850 RBX: 6666666666666667 RCX: 0000000000000000 [ 192.501141][T10111] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f353c9e6850 [ 192.509125][T10111] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 192.517108][T10111] R10: 00007f353c9e79d0 R11: 0000000000000246 R12: 000000000118bf2c 00:06:54 executing program 3: syz_mount_image$squashfs(&(0x7f00000000c0)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2000c10, &(0x7f00000001c0)={[{'\'@@'}]}) [ 192.525087][T10111] R13: 00007ffca110b6ff R14: 00007f353c9e79c0 R15: 000000000118bf2c 00:06:54 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 00:06:54 executing program 0: r0 = socket(0x2, 0x6, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="d67a49b4db4cfb1b6c4efb8229c2758ff4660ec8bb9c0918dc14b897b866d7e7f6dbf75fab8524a74580f3cf826852a2b962d07d792af9bfaef6017e64143c3a709760a25852befec98fd7c1758d2048eb20d61ce86f0be266947487218bff21c72e0aa95f6b62e68ec99db7d8a1b2aac36d2943913bd4608c48a103fa0e5c0c0ecd58a634e11874fcdfb47daf28f4ea6fcc71ec999b1bd4fcf907487fdc179fd3e375547aa2b2ad8f6f93d33cdd429c17cf1420a354bad025a8b78314a6b4965c531298025139bb83e101a69bd496a41749dce04f577f33b53904194bee11983cf81da8", 0xe4}, {&(0x7f0000000180)="bca40974cc323f53870ca4409dce2464e013242bb86e095edbb8cdfd0e69a8e51682b6ffcf036714580cffc7ce00db2a6f9070ee9ec0fbc44cbde2465ed2df4c19f11f11cac10d66885a9ef863e103a47c7bc067fc7f08b570ae8c5ad5308a724dcd7a3f9861bd8e72ca7a8bd744c5c4632932c9c22fb805d0c39b617e8f40cceab18131f7646c1aac8bf97e349e6dab305ba45ff9e7e5b2da5030701628e4f1298d35cd545fe3d907d5d01d75b40b4add", 0xb1}, {&(0x7f0000000240)="f686596c7d73021920dc98f27977f6390f34ab68366d2fa5f37422b6444cc0eaa2cf954354b15ee7206a8e9e58c7c7504b8e75a0fa8fbb362c3996728b7dc7782ada95ba364eca7260cf", 0x4a}, {&(0x7f00000002c0)="c4c8f385b563c5b079d8844aca25d6fd876f96aebb8dc1434783", 0x1a}, {&(0x7f0000000300)="4d027af3c6dfb2d84879cf37b2dd60312a74f8a4bfbcd67a7953dd8143786d61", 0x20}], 0x5}, 0x0) 00:06:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:06:54 executing program 4: ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8004552f, 0x0) 00:06:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 192.714352][T10130] squashfs: Unknown parameter ''@@' 00:06:54 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 00:06:54 executing program 2: sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x67c3b834c6371c44) 00:06:54 executing program 4: ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8004552f, 0x0) [ 192.778004][T10130] squashfs: Unknown parameter ''@@' [ 192.908675][T10148] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/10148 [ 192.918433][T10148] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 192.925343][T10148] CPU: 1 PID: 10148 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 192.934127][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.944285][T10148] Call Trace: [ 192.947599][T10148] dump_stack+0x107/0x163 [ 192.951957][T10148] check_preemption_disabled+0x123/0x130 00:06:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 00:06:54 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "94e0892f"}, 0x0, 0x0, @fd}) 00:06:54 executing program 0: r0 = socket(0x2b, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) [ 192.957613][T10148] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 192.963351][T10148] trace_hardirqs_on+0x5b/0x1c0 [ 192.968333][T10148] __bad_area_nosemaphore+0xc6/0x400 [ 192.973645][T10148] do_user_addr_fault+0x7d7/0xb40 [ 192.978793][T10148] exc_page_fault+0x9e/0x180 [ 192.983409][T10148] ? asm_exc_page_fault+0x8/0x30 [ 192.988370][T10148] asm_exc_page_fault+0x1e/0x30 [ 192.993239][T10148] RIP: 0033:0x457abf [ 192.997150][T10148] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 193.016770][T10148] RSP: 002b:00007f353c9e6828 EFLAGS: 00010283 [ 193.022861][T10148] RAX: 00007f353c9e6850 RBX: 6666666666666667 RCX: 0000000000000000 [ 193.030853][T10148] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f353c9e6850 [ 193.038927][T10148] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 193.046913][T10148] R10: 00007f353c9e79d0 R11: 0000000000000246 R12: 000000000118bf2c 00:06:54 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) [ 193.054900][T10148] R13: 00007ffca110b6ff R14: 00007f353c9e79c0 R15: 000000000118bf2c [ 193.063016][T10148] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/10148 [ 193.072445][T10148] caller is lockdep_hardirqs_on+0x38/0x110 [ 193.078267][T10148] CPU: 1 PID: 10148 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 193.087027][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.097121][T10148] Call Trace: [ 193.100428][T10148] dump_stack+0x107/0x163 [ 193.104789][T10148] check_preemption_disabled+0x123/0x130 [ 193.110438][T10148] ? __bad_area_nosemaphore+0xc6/0x400 [ 193.115948][T10148] lockdep_hardirqs_on+0x38/0x110 [ 193.120988][T10148] __bad_area_nosemaphore+0xc6/0x400 [ 193.126299][T10148] do_user_addr_fault+0x7d7/0xb40 [ 193.131354][T10148] exc_page_fault+0x9e/0x180 [ 193.135961][T10148] ? asm_exc_page_fault+0x8/0x30 [ 193.140914][T10148] asm_exc_page_fault+0x1e/0x30 [ 193.145774][T10148] RIP: 0033:0x457abf [ 193.149680][T10148] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 193.169413][T10148] RSP: 002b:00007f353c9e6828 EFLAGS: 00010283 [ 193.171722][T10157] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10157 [ 193.175509][T10148] RAX: 00007f353c9e6850 RBX: 6666666666666667 RCX: 0000000000000000 [ 193.175519][T10148] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f353c9e6850 [ 193.175530][T10148] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 193.175540][T10148] R10: 00007f353c9e79d0 R11: 0000000000000246 R12: 000000000118bf2c [ 193.175555][T10148] R13: 00007ffca110b6ff R14: 00007f353c9e79c0 R15: 000000000118bf2c [ 193.225362][T10157] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 193.231926][T10157] CPU: 0 PID: 10157 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 193.240691][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.250754][T10157] Call Trace: [ 193.254072][T10157] dump_stack+0x107/0x163 [ 193.258418][T10157] check_preemption_disabled+0x123/0x130 [ 193.264079][T10157] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 193.269814][T10157] trace_hardirqs_on+0x5b/0x1c0 [ 193.274686][T10157] __bad_area_nosemaphore+0xc6/0x400 [ 193.279993][T10157] do_user_addr_fault+0x7d7/0xb40 [ 193.285050][T10157] exc_page_fault+0x9e/0x180 [ 193.289659][T10157] ? asm_exc_page_fault+0x8/0x30 [ 193.294623][T10157] asm_exc_page_fault+0x1e/0x30 [ 193.299480][T10157] RIP: 0033:0x457abf [ 193.303385][T10157] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 193.323263][T10157] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 193.329347][T10157] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 193.337326][T10157] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 193.345308][T10157] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 00:06:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x6) 00:06:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 00:06:54 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0505611, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d57aca"}, 0x0, 0x0, @fd}) 00:06:55 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 193.353290][T10157] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 193.361277][T10157] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c [ 193.369380][T10157] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10157 [ 193.378780][T10157] caller is lockdep_hardirqs_on+0x38/0x110 [ 193.384699][T10157] CPU: 0 PID: 10157 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 193.393466][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.403530][T10157] Call Trace: [ 193.406831][T10157] dump_stack+0x107/0x163 [ 193.411169][T10157] check_preemption_disabled+0x123/0x130 [ 193.416794][T10157] ? __bad_area_nosemaphore+0xc6/0x400 [ 193.422245][T10157] lockdep_hardirqs_on+0x38/0x110 [ 193.427269][T10157] __bad_area_nosemaphore+0xc6/0x400 [ 193.432545][T10157] do_user_addr_fault+0x7d7/0xb40 [ 193.437569][T10157] exc_page_fault+0x9e/0x180 [ 193.442145][T10157] ? asm_exc_page_fault+0x8/0x30 [ 193.447080][T10157] asm_exc_page_fault+0x1e/0x30 [ 193.451912][T10157] RIP: 0033:0x457abf [ 193.455810][T10157] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 193.475397][T10157] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 193.481453][T10157] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 193.489411][T10157] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 193.497524][T10157] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 00:06:55 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:55 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x10}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 193.505500][T10157] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 193.513473][T10157] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c [ 193.619424][T10174] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/10174 [ 193.629440][T10174] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 193.635970][T10174] CPU: 1 PID: 10174 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 193.644736][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.654802][T10174] Call Trace: [ 193.658110][T10174] dump_stack+0x107/0x163 [ 193.662462][T10174] check_preemption_disabled+0x123/0x130 [ 193.668161][T10174] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 193.673891][T10174] trace_hardirqs_on+0x5b/0x1c0 [ 193.678755][T10174] __bad_area_nosemaphore+0xc6/0x400 [ 193.684064][T10174] do_user_addr_fault+0x7d7/0xb40 [ 193.689123][T10174] exc_page_fault+0x9e/0x180 [ 193.693733][T10174] ? asm_exc_page_fault+0x8/0x30 [ 193.699651][T10174] asm_exc_page_fault+0x1e/0x30 [ 193.704551][T10174] RIP: 0033:0x457abf 00:06:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xfffffffffffffffb) 00:06:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 00:06:55 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x0, 0x9}], 0x2, &(0x7f0000000040)={0x77359400}) [ 193.708459][T10174] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 193.728076][T10174] RSP: 002b:00007f353c9e6828 EFLAGS: 00010283 [ 193.734166][T10174] RAX: 00007f353c9e6850 RBX: 6666666666666667 RCX: 0000000000000000 [ 193.742151][T10174] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f353c9e6850 [ 193.750135][T10174] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 193.758122][T10174] R10: 00007f353c9e79d0 R11: 0000000000000246 R12: 000000000118bf2c [ 193.766111][T10174] R13: 00007ffca110b6ff R14: 00007f353c9e79c0 R15: 000000000118bf2c [ 193.776469][T10174] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/10174 [ 193.787283][T10174] caller is lockdep_hardirqs_on+0x38/0x110 [ 193.793184][T10174] CPU: 1 PID: 10174 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 193.801977][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.812044][T10174] Call Trace: [ 193.815345][T10174] dump_stack+0x107/0x163 [ 193.819693][T10174] check_preemption_disabled+0x123/0x130 [ 193.825342][T10174] ? __bad_area_nosemaphore+0xc6/0x400 [ 193.830928][T10174] lockdep_hardirqs_on+0x38/0x110 [ 193.835966][T10174] __bad_area_nosemaphore+0xc6/0x400 [ 193.841277][T10174] do_user_addr_fault+0x7d7/0xb40 [ 193.846338][T10174] exc_page_fault+0x9e/0x180 [ 193.850949][T10174] ? asm_exc_page_fault+0x8/0x30 [ 193.855909][T10174] asm_exc_page_fault+0x1e/0x30 [ 193.860780][T10174] RIP: 0033:0x457abf [ 193.864841][T10174] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 193.884476][T10174] RSP: 002b:00007f353c9e6828 EFLAGS: 00010283 [ 193.890547][T10174] RAX: 00007f353c9e6850 RBX: 6666666666666667 RCX: 0000000000000000 [ 193.898513][T10174] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f353c9e6850 [ 193.906475][T10174] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 193.914433][T10174] R10: 00007f353c9e79d0 R11: 0000000000000246 R12: 000000000118bf2c [ 193.922393][T10174] R13: 00007ffca110b6ff R14: 00007f353c9e79c0 R15: 000000000118bf2c 00:06:55 executing program 2: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:06:55 executing program 5: r0 = socket(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) 00:06:55 executing program 0: perf_event_open(&(0x7f00000011c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:06:55 executing program 5: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 00:06:55 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0xf) 00:06:55 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:55 executing program 2: r0 = io_uring_setup(0x449f, &(0x7f0000000180)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000240)=r1, 0x1) 00:06:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) [ 194.419756][T10200] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10200 [ 194.429375][T10200] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 194.435904][T10200] CPU: 1 PID: 10200 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 194.444675][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.454858][T10200] Call Trace: [ 194.458174][T10200] dump_stack+0x107/0x163 [ 194.462529][T10200] check_preemption_disabled+0x123/0x130 [ 194.468185][T10200] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 194.473920][T10200] trace_hardirqs_on+0x5b/0x1c0 [ 194.478790][T10200] __bad_area_nosemaphore+0xc6/0x400 [ 194.484105][T10200] do_user_addr_fault+0x7d7/0xb40 [ 194.489427][T10200] exc_page_fault+0x9e/0x180 [ 194.494035][T10200] ? asm_exc_page_fault+0x8/0x30 [ 194.498988][T10200] asm_exc_page_fault+0x1e/0x30 [ 194.503844][T10200] RIP: 0033:0x457abf 00:06:56 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 00:06:56 executing program 0: r0 = socket(0x11, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000000)) [ 194.507747][T10200] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 194.527365][T10200] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 194.533452][T10200] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 194.541440][T10200] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 194.549426][T10200] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 194.557413][T10200] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 194.565660][T10200] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c [ 194.575238][T10200] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10200 [ 194.585830][T10200] caller is lockdep_hardirqs_on+0x38/0x110 [ 194.591715][T10200] CPU: 1 PID: 10200 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 194.600484][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.610543][T10200] Call Trace: [ 194.613841][T10200] dump_stack+0x107/0x163 [ 194.618165][T10200] check_preemption_disabled+0x123/0x130 [ 194.623874][T10200] ? __bad_area_nosemaphore+0xc6/0x400 [ 194.629321][T10200] lockdep_hardirqs_on+0x38/0x110 [ 194.634331][T10200] __bad_area_nosemaphore+0xc6/0x400 [ 194.639617][T10200] do_user_addr_fault+0x7d7/0xb40 [ 194.644646][T10200] exc_page_fault+0x9e/0x180 [ 194.649233][T10200] ? asm_exc_page_fault+0x8/0x30 [ 194.654158][T10200] asm_exc_page_fault+0x1e/0x30 [ 194.658991][T10200] RIP: 0033:0x457abf [ 194.662878][T10200] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 194.682469][T10200] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 194.688537][T10200] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 194.696493][T10200] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 194.704467][T10200] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 194.712423][T10200] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 194.720378][T10200] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c 00:06:56 executing program 3: r0 = socket(0xa, 0x3, 0x3) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x3a, 0xc, 0x0, 0x0) 00:06:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:56 executing program 0: syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaac23, &(0x7f00000002c0)=[{&(0x7f00000000c0)="2ba8e7e4565c1789b5871ef7036f150382f16c5c884b67457149288089fb062ec921b0c735cc9949f64a94142b2bc786e8737fbd17da3d18aa429401a4b11243169f74", 0x43, 0x2}, {&(0x7f0000000380)="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", 0x12b, 0x91}, {&(0x7f0000000200)="2be1e9f9f617404f6ca9be3e7bb8a48c23cfe7e347adb08b817097b363e909fdfea351279e2e14b19e98c0eaf8d59ad5903238d9d0a743adbfa0d40fbd3626bdd807d07c58c061db8905d2ef1a96391fc51094620ee3db1358a27ca50eb0e3093e89a6b81a85d6c8bb0828db242b390604988debf72620e6cbf989cd98522265bce4e69e27d1e54171c7a370dc093ab85bff952d1d48ed98d564a265749cba7e56a1c91162b008e9551d5d67", 0xac, 0x9}], 0x5900a6, &(0x7f0000000180)={[{'/dev/rfkill\x00'}, {'/dev/rfkill\x00'}, {'-&@'}], [{@subj_type={'subj_type', 0x3d, '\xd4[.l\'(..$[$-n}'}}]}) 00:06:56 executing program 5: r0 = socket(0x18, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 00:06:56 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 00:06:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:56 executing program 3: r0 = socket(0x11, 0x3, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 00:06:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:06:56 executing program 2: r0 = socket(0x2, 0x6, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 00:06:56 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) 00:06:56 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:57 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) 00:06:57 executing program 0: bpf$MAP_UPDATE_ELEM(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:06:57 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) 00:06:57 executing program 5: keyctl$get_persistent(0x3, 0xee01, 0xfffffffffffffffb) 00:06:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:57 executing program 2: syz_mount_image$gfs2(&(0x7f0000000500)='gfs2\x00', &(0x7f0000003bc0)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000540)="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", 0xff9, 0x7}], 0x0, &(0x7f0000000240)=ANY=[]) 00:06:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:57 executing program 5: keyctl$get_persistent(0x4, 0xee01, 0xfffffffffffffffb) [ 196.036024][T10267] attempt to access beyond end of device [ 196.036024][T10267] loop2: rw=4096, want=136, limit=8 00:06:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:57 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:06:57 executing program 5: add_key(&(0x7f0000000140)='big_key\x00', 0x0, &(0x7f00000001c0)="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", 0x601, 0xfffffffffffffffc) [ 196.122847][T10267] gfs2: error 10 reading superblock 00:06:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ufs(&(0x7f0000000180)='ufs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0) 00:06:57 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:57 executing program 5: bpf$OBJ_GET_PROG(0x16, &(0x7f0000000040)={0x0, 0x0, 0x1c}, 0x10) 00:06:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) [ 196.223294][T10267] attempt to access beyond end of device [ 196.223294][T10267] loop2: rw=4096, want=136, limit=8 [ 196.253392][T10267] gfs2: error 10 reading superblock 00:06:57 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000000280)) 00:06:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0xffffffffffffff4b}, 0xc) [ 196.330414][T10287] ufs: ufs was compiled with read-only support, can't be mounted as read-write 00:06:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x1, 0x0) 00:06:58 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000008c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "7ff680165f6e3455f837f17d73373d524b8ac09a9df0279b9e39b12120c6edc9461277f22a41450614b5e68c1445b5636b5e4e78f7215deca8f6b573c569e865", "a44902ab5f20a91c3422ed9dce6b91dccb3027bbb29af82a271f2145142970bc"}) 00:06:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:58 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x64000, 0x0) 00:06:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 00:06:58 executing program 5: bpf$MAP_UPDATE_ELEM(0xf, 0x0, 0x0) 00:06:58 executing program 2: add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 00:06:58 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x6) 00:06:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8004552f, 0x0) 00:06:58 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x10}, 0x1, 0x0, 0xf000}, 0x0) 00:06:58 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x6, 0x14, 0x605300, 0x300) 00:06:58 executing program 5: r0 = socket(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$unix(r0, &(0x7f00000025c0)={&(0x7f0000000140)=@abs={0x2, 0xa}, 0x6e, 0x0}, 0x20000000) 00:06:58 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8004552f, 0x0) 00:06:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 00:06:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="140000000000000000000000020000007f000000000000001100000000000000000000000100000009000000000000001400000000000000000000000200000001000080000000001c000000000000000000000008000000ae1dcdddc5d18e7b9ba8f86ea5c8223493"], 0xb8}}], 0x1, 0x0) 00:06:58 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x989680}, 0x0) 00:06:58 executing program 0: ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8922, &(0x7f00000000c0)={'batadv0\x00'}) 00:06:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:06:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 00:06:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x0, 0x0, 0x0, 0x0, "59a3c25efe72d4bd429dd21dd8cc12c66d0972b0b6112d514cb9c869eb9afe93bd5d4593ddab88147233846334d7f90f9b357082d637856951bb5ee26c96c562005792b9ee0f72f5599b7fdf55fd3337d54c90d8d74b82315fa1dd90b06229bcfd413f42b78c12de5b7860715bd1d3a444f5854bce457dacfed5ed0f63e57cc43f4cfa8d8450e407f0e16ab8be9d314dd1cd5bb4e0de9394a87b47be2873391c00aa2c3b7152be8dad5acd601047d88c8b9c8ed68ea2de3809c35e98a90450fe0dcef97bc8672f1817658ff21dde7be1b2ba7319e306dff27dca9060518af5363d1e13e6501335f60531380d4c3931651298a509d9a3f4d94d20ee5bed4a99d58001c48f784318ad8742c76d041d76c86798e5e43f9b54705813bd43d89f53be299d2d2a1820443cd1a220609d6b890d717e51140c756f007532727477779f32de51f541d2c19c4fa649d683ecc41dd9a03ea6949195ced1174a727e81f34b7227c60cbe5edf7228504a4f7dfa14251f355ec709be00f0e8d0e110e72fce0467e2980d0735eebad61d173cf892a2f45612addcb6a41918a3c20f778b15da825949c38104822fe5065a3ae5fa1b11caf3e31ce77f90482ee053958a22d091a1a19a72e308c3b904d746f03a44a907cfaa478a76b9431c00b25031433d9d61c8139ea71fc93e1c05ebc25c69479f346b0bc91d1e8a3c6f1e4140d68d9c28c706e34fcdbe39ad31820f06052bcfee065a8a3cefad5c70169808e97a3933f227f5035b58e3e33468fc25da512069a3f2c5e3e1fc699122c6d53afa5a27f450010d75592bc8b0850ae1b5ad648a896cf384a22e442ca99178a17f4604e85641dfdb777d629da5076552116fe9674b4b93b9b97c9976c3cf8c30bfe218b33a17f8a8e27c7af2a5b44615631c554445be29de9f9d521ae33fba570b917cfaa88f5805f4ada566cac6160f713f41eecc88481158a5da9c594f056045a837cb955c44cec835225e9e0ca3268a58b306e6f4a435e5961fbdb14d416502ac34009d2925cb0ef64218fb0a2723f093baea01dacfaf9ae1f95b00a8d2b0ad660a1b91bad8506bb6f6598fddfbfccb9b0e379ee301549280dda44cdb8c698cd2649dd5d43e046758356a75c39f2fb06e786d56126d08a7bece71c7ea135a79f06ab171f399290202f4e3b9a457bcdb6b3368742d82661f0dfe34a15379e42fd59cbf77d305c805a3f2d4a5eca92628c20e72ed73b7a742106246dc405bd5ab252c2c3feb9f51e256a9c48ee414c80161027951a5a0051961ce8ffe1a24478a968ec9bbbc5d5bbcf09394eda4db0afd556800e76cad32a533543af86094e826bcb1c06fc0d4bb391eb298fa38c22db18ff7b4c5aa82640326fd2c1c9ffd8bf76b699a35b5f80c177ea427f39f0817831ae82c92401e7bdebcd3f8bc1422cbe5ff0b4500dc5d28f85d62fdde2f8dd90be84c0536a384cc33879d75e9d80cdb50602631072f84a2ee0463e56705df63b07c0da947dca3e84cf2ceefad91c3517fe1b1b60ab8da81a74fdd98b0e3effe1dd65ab150a55fa4f31f207f1f28c399fdb1f9cf913b3466b5edcb38e2d3d688ea34016bad7d2e9005f4514e45bc85b20fa3fb41641469bb039bf3467b453c81affc4596cf32b08332dfbf3be755b94ec35c88f7ca52b3155f44297e1409fcdaf5ef201836ae41ff89011d3c2565465a50023dbe41c74724af08d0f9415eb3a5570f23fc0c03798d38d295756887698110c94332ccbe5265e17e19a2e163b460a74cafae595e9398aa6a988866aef613a8001590bcea46122983239ebfd323940a27eed8cd48edb5ced2f9bc4ce390d28142b3e1627b714c0156e63c818cfe963303670c26ac656a380ec21533a86be20fe47caad36ca8b1df8e0ac9f9d4b5b4e53accb290da677462a0abde4082949c6528f1eb6b29f6cb5be978b05c1a258e350be897b3928fc6e7929117146e3d625b4fd1d73feb8295e83b5ec612e4eb352088105254d21d1079d20cba308ea0b67219adb68a695cb28527c379e03e1194baf6c5fd254db8d2235e78cbd28ded2baf91af98eb3c7746a37bd6c228cf8b6f1c5f752a32f86e8a35114fad399d335fca843b63e7ab545ce3e29724597d506be3124294d86cc46bc7b00d17bd05aa3ff636166b6bb6ba4f893dfe862d41b8f4691100fcfd691ceb457dbd1bfe53bb4950bbe85e98a20426d3806bf4f40e11416179f7788be4e07473ff8302dc7e18f6029c9e9dc21fb87de8dd35b5b43bbfeffdf8110febf1e8866eb287c7de1c9f9bb3f07fcc8fed035fd2c59e8a0dcd5b9f85b12d288ef0f52a53f85e618969f675ef5b3df0c738357eca4b78f81df3d1eddf68f818b3e3d4cf88b72a0b58d6366b17d13f1b0a2f53c460576abd9e1f8dbe8ccccbfe5ce90e4fd1a6a6e2a2a3d80f46b4c6573859b36ebfee975a9ea915d860b1fd5c1519cc7c3af4ca1b7ead819b1218a1d93e9bb471252857caf2761fe35b0f1a0b96982e873ca31d7e7913cc13c86c0a0ce68b8223aff02f2221b9df9f2f174e4c1aacb64351a67924ec739c09f7a6cf41c3458eccf41577ff79b2f9125874b8f461112f3cf969f6d47c5d90210aa5abc336dd49c1f38ca1646691dfbf42b14bf7fc55b762e881659b64ab4f68ef1289cdfa310312099151469a01b0aac2a1c94d157ca2d132cc81eb6d9da0dde238938fa3003df7803934e0ee88ff29795768639d2da36e8d8d60aba189d6e1d25c13cc855c94b35d938124e00d8a1ca5e484cff671a4b6650c35aa3f32bcf3e67eb7362752b569384a5703fdc7310d1a2e4c7aeac81f9b005005abc9db0c712832893d4898afb4b799bbdc006ae3a224236af5ac5cac2d4432e38859932c91fd09c6a474f24ab4afff1dfdbd8ba7860a8d692f599f5da58228bc02af0ee58f31deaf3a8991f35abe2769a2f378e2b9686cd1013a32cfc3de43c3b19dad11c49694d8a0a0b66e131e918d4f51ccc973344d39842ffb49107100a45f6a11d0d5f6591db6aeb6a540a0e70892dd1ca0b879ef0f8637171d4990c7ac4f9a554b0066aa0061ef19a376529dc176fa7fde0256d9b11e738375b1f6043c105f067e01c618f42b8256ab8b4bc24315e76078d3d9e46bfebd6ee20366e45a5f4180a83e0d24b013bdf9d1767b039642789bd141a513a746271c7c086197abe06cf33d2169571f14b21f47eae67849239f9ac9ebd9204b3d201c67376ce2a413b336d5fa73633e7425ff200c84aeef81a7e651b95dc807238e83411c5a55e1bfa0959aed3bd1e5a1880d0d1d9419835babc5e746412e3bc553550e2d4f8942e8507513f4d10a450f9deea4f5eb360db528bc906cd4b09f6e38ce3eaab73c1006621de091df3e5a2010b21ef801a122c5194ab000ed45a6376265f9f6e6190bf4057a26975f4931d3cbc5e3115e07c725029467a4751e9f61731f569cdf48713dd48aa1e9a7029ce8fcbd45683d9868a2a13ec6c1b3120ff08039b8930db05ea7c137c967e563b2652fc180ec94b72bf460f12a6be0d672c69060cb0343fdef03e01878b37a38a34a466414fd41967899686c1db778d2babc41558dd4774724eaac757c9c48ecedd199b5d0c5caed0785203d537adff83334e6c9b68618b9592fb363da373815ff2e7543ec7a66b159df87d2a3b51c874bcf6aa7a80e6d9ac44c37b8360f78ca6b835d030ac6c60a664252331738183bfff16b491ce828cfbe6648554e8e769a5514608383eda9d439cd920aa4ea1f486eb4c06e58a021bea3d2d4fedae2de9c7f2fc855c0b81d50bbfe6ce7338f03304b6c059b89c15522b964d31358fe384dbf3f17e132752e6d98c3099dfdd536e186cce345cdb768e2f8d3b47214bc1ad1c8bea6257a597a15423cc461ef4357f5e9e97d4d0a10b34007c549acf29016e03762e033d61da10473e983bf1ace8d2b5717cebb150b017ea7d79fe66ee4cf6dfd3d12ece1d897ba5c0c4a24495680b3eaaa3f7bb836aa254c4805c97c609f900cf02eb740328aaefcd2ca85a4804bdf5c264bf24b4e121291c6d3c5f40c0d3c9bfeeeb1918f87b6bd64e701a40f30c3078ba0c53b76a86b1e1979282e8b9b56b025f18c56a0971850654d9a0eab577dbde398a29fdd438b94da632cf8dfbc04eaf6c2ce8becbaa4194e97bb441b101a61d385d6830f415f380b7480dc04994940e85baa9175f762d7e12164802caed8bbf80e568ce9b13e73fbe0ea2edc149102967e023ecf588ba8111d65730102c0082b249f1c6172860948b6eaf84f8c89c8b5af605e68187b660959b15067afb541aa8136d0b6661241477324a8c2d0291453d4142353a36a21491665a721f6df5d7d76cb80ef88f6621d43148c2fb933191a6bc0684ceed519ad3a30345c3612569c51f9ba832f79b2ddeb43391eb8ef2aa28b5fef8de58aabf933f07c6ddec7f8dd547b8609d6aca069d9639decfc1d95a140708a0663b0f13e57cca20d84cf8b96eea8126f5af04804c828d247c157ac3326851d068f9d6b1bad06e1146707d3549e6adcf9867ef15007cecabde67b9ebfd78f9d4a1aa7a18b3f8cb8f440993aac317793b944b5c920366ff2f6c704ed1c7c914335beeb0b060685d54d258245c205d7a35f8dfb5e7c0ff847529e82efd181e45839b12e857630ea7afb7fd7f5ce513822b38bd1df391cb2af88b46ff5598cb4acfe23ffd64be471fadfa357f5f898a2cb8c369b3dd5bc2b22c1f2be9e04a3f024fb04cb32267e3357e324a31d966775d11b8df59b63592cc04a3c6d7436d027175c88a362369c0612c64a0f06f85ea16af10b8d614be0a1d44cdadb050bca36531dc332b8eb8e23b91ea0e6c8d41cf9a7342bb0f8f607d32c429d90bfba4d2eda9c1e57c2138a6da81d261d7ef72572d32f1820633ee1a113ee510206c2062ffa63b044e3d851abdefb81ee073e85120645b638c01ab36d17544bf0be2c3887182ad2941b17bb451b4a7385e785bf1c6f87c152c66f33fe6591520f79079090c45d04a74af5385413576cff5674a805f49999e939f9f60def1444bfbf5179e2ad191662b3019d9cde5e61706703af189d5e3d97fab735134d0f70a5ee74fad7712318dead5b3a2f2c2582fbe9c2a4bf5197820e14e9117782e46cec59ccf7c6dee996f3fef415a99370007d18f66da0de7e6ec9ead65b45c8e3ef5f63da0c82f50e5b2dd778b188c3cb2c38597bd74b25dc142650fb001a527351b90133958445950a445d33263c2f6254f42c11b408b20915d134ae56c38c610c50c0095615ffb9b9c41a972e5d0ef1b649e05a3d8d38d00f50"}, 0xec1) 00:06:58 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8004552f, 0x0) [ 197.071172][T10342] batadv0: mtu less than device minimum 00:06:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) [ 197.126419][T10344] batadv0: mtu less than device minimum 00:06:58 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 00:06:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 00:06:58 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x8004552f, 0x0) 00:06:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f00000001c0)='j', 0x1, 0x4c10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 00:06:58 executing program 2: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) 00:06:58 executing program 3: syz_usbip_server_init(0x5) syz_genetlink_get_family_id$devlink(0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) [ 197.416563][T10365] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 197.423340][T10365] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.451961][T10367] check_preemption_disabled: 6 callbacks suppressed [ 197.451976][T10367] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10367 [ 197.468242][T10367] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 197.474973][T10367] CPU: 0 PID: 10367 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 197.483780][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.493845][T10367] Call Trace: [ 197.497154][T10367] dump_stack+0x107/0x163 [ 197.501505][T10367] check_preemption_disabled+0x123/0x130 [ 197.507161][T10367] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 197.512895][T10367] trace_hardirqs_on+0x5b/0x1c0 [ 197.517762][T10367] __bad_area_nosemaphore+0xc6/0x400 [ 197.523081][T10367] do_user_addr_fault+0x7d7/0xb40 [ 197.528137][T10367] exc_page_fault+0x9e/0x180 [ 197.532749][T10367] ? asm_exc_page_fault+0x8/0x30 [ 197.537703][T10367] asm_exc_page_fault+0x1e/0x30 [ 197.542569][T10367] RIP: 0033:0x43c6b0 [ 197.546476][T10367] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 197.566108][T10367] RSP: 002b:00007f6123a7fba8 EFLAGS: 00010246 [ 197.572192][T10367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 197.580187][T10367] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 197.588171][T10367] RBP: 0000000000000006 R08: 0000000000000004 R09: 00007f6123a7fbb0 [ 197.596161][T10367] R10: 0000000000000000 R11: 000000000000000f R12: 00007f6123a7fbf0 [ 197.604146][T10367] R13: 00007ffd32866c9f R14: 00007f6123a819c0 R15: 000000000118bfd4 00:06:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:06:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)) 00:06:59 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d57aca"}, 0x0, 0x0, @fd}) 00:06:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:06:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)) [ 197.612791][T10367] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10367 [ 197.622682][T10367] caller is lockdep_hardirqs_on+0x38/0x110 [ 197.628527][T10367] CPU: 0 PID: 10367 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 197.637374][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.647439][T10367] Call Trace: [ 197.650745][T10367] dump_stack+0x107/0x163 [ 197.655092][T10367] check_preemption_disabled+0x123/0x130 [ 197.660744][T10367] ? __bad_area_nosemaphore+0xc6/0x400 00:06:59 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x40f1, 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) [ 197.666222][T10367] lockdep_hardirqs_on+0x38/0x110 [ 197.671268][T10367] __bad_area_nosemaphore+0xc6/0x400 [ 197.676575][T10367] do_user_addr_fault+0x7d7/0xb40 [ 197.681627][T10367] exc_page_fault+0x9e/0x180 [ 197.686236][T10367] ? asm_exc_page_fault+0x8/0x30 [ 197.691187][T10367] asm_exc_page_fault+0x1e/0x30 [ 197.696046][T10367] RIP: 0033:0x43c6b0 [ 197.699952][T10367] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 197.719565][T10367] RSP: 002b:00007f6123a7fba8 EFLAGS: 00010246 [ 197.725646][T10367] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 197.733631][T10367] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 197.741633][T10367] RBP: 0000000000000006 R08: 0000000000000004 R09: 00007f6123a7fbb0 [ 197.749599][T10367] R10: 0000000000000000 R11: 000000000000000f R12: 00007f6123a7fbf0 [ 197.757559][T10367] R13: 00007ffd32866c9f R14: 00007f6123a819c0 R15: 000000000118bfd4 00:06:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0x3ff) 00:06:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)) [ 197.838446][ C0] hrtimer: interrupt took 37603 ns 00:06:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/233, 0x1a, 0xe9, 0x1}, 0x20) 00:06:59 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000000c0)=@raw=[@func], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:06:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80085504, 0x0) [ 197.946617][T10380] vhci_hcd: connection closed [ 197.947990][ T109] vhci_hcd: stop threads [ 197.974314][ T109] vhci_hcd: release socket [ 197.988770][ T109] vhci_hcd: disconnect device [ 198.447881][T10365] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(3) [ 198.454475][T10365] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.473455][T10365] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10365 [ 198.482998][T10365] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 198.489624][T10365] CPU: 1 PID: 10365 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 198.498390][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.508487][T10365] Call Trace: [ 198.511795][T10365] dump_stack+0x107/0x163 [ 198.516149][T10365] check_preemption_disabled+0x123/0x130 [ 198.517727][T10404] vhci_hcd: connection closed [ 198.521791][T10365] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 198.521808][T10365] trace_hardirqs_on+0x5b/0x1c0 [ 198.521824][T10365] __bad_area_nosemaphore+0xc6/0x400 [ 198.521846][T10365] do_user_addr_fault+0x7d7/0xb40 [ 198.521872][T10365] exc_page_fault+0x9e/0x180 [ 198.521889][T10365] ? asm_exc_page_fault+0x8/0x30 [ 198.521904][T10365] asm_exc_page_fault+0x1e/0x30 [ 198.521922][T10365] RIP: 0033:0x43c6b0 [ 198.529056][ T193] vhci_hcd: stop threads [ 198.532299][T10365] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 198.542426][ T193] vhci_hcd: release socket [ 198.547408][T10365] RSP: 002b:00007f6123aa0ba8 EFLAGS: 00010246 [ 198.547426][T10365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 198.547441][T10365] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 198.566124][ T193] vhci_hcd: disconnect device [ 198.569878][T10365] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f6123aa0bb0 [ 198.569887][T10365] R10: 0000000000000000 R11: 000000000000000f R12: 00007f6123aa0bf0 [ 198.569895][T10365] R13: 00007ffd32866c9f R14: 00007f6123aa29c0 R15: 000000000118bf2c [ 198.572701][T10365] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10365 [ 198.655598][T10365] caller is lockdep_hardirqs_on+0x38/0x110 [ 198.661465][T10365] CPU: 1 PID: 10365 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 198.670261][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.680406][T10365] Call Trace: [ 198.683710][T10365] dump_stack+0x107/0x163 [ 198.688030][T10365] check_preemption_disabled+0x123/0x130 [ 198.693682][T10365] ? __bad_area_nosemaphore+0xc6/0x400 [ 198.699158][T10365] lockdep_hardirqs_on+0x38/0x110 [ 198.704186][T10365] __bad_area_nosemaphore+0xc6/0x400 [ 198.709574][T10365] do_user_addr_fault+0x7d7/0xb40 [ 198.714620][T10365] exc_page_fault+0x9e/0x180 [ 198.719222][T10365] ? asm_exc_page_fault+0x8/0x30 [ 198.724161][T10365] asm_exc_page_fault+0x1e/0x30 [ 198.729001][T10365] RIP: 0033:0x43c6b0 00:07:00 executing program 3: io_uring_setup(0x787d, &(0x7f0000000a00)) 00:07:00 executing program 2: bpf$MAP_UPDATE_ELEM(0xd, 0x0, 0x0) 00:07:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:07:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000040), 0x0) 00:07:00 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000540)) 00:07:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000040)=0xfffffffffffffe09) [ 198.732896][T10365] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 198.752510][T10365] RSP: 002b:00007f6123aa0ba8 EFLAGS: 00010246 [ 198.758581][T10365] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 198.766564][T10365] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 198.774541][T10365] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f6123aa0bb0 [ 198.782507][T10365] R10: 0000000000000000 R11: 000000000000000f R12: 00007f6123aa0bf0 [ 198.790482][T10365] R13: 00007ffd32866c9f R14: 00007f6123aa29c0 R15: 000000000118bf2c 00:07:00 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x300) 00:07:00 executing program 0: bpf$PROG_LOAD(0x1c, 0x0, 0x0) 00:07:00 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x14, &(0x7f0000004a80)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:07:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x500000) 00:07:00 executing program 1: bpf$PROG_LOAD(0x7, 0x0, 0x0) 00:07:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224\x00'}, 0x58) 00:07:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 00:07:00 executing program 5: bpf$PROG_LOAD(0x1e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:07:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x1, 0x0, 0x3}, 0x40) 00:07:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045505, 0x0) 00:07:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x4008550d, 0x0) 00:07:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) 00:07:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:01 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) 00:07:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x3, 0x10000, 0x4}, 0x40) 00:07:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224\x00'}, 0x58) 00:07:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newroute={0x1c, 0x18, 0x401}, 0x1c}}, 0x0) 00:07:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) 00:07:01 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x22000, 0x0) 00:07:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:01 executing program 5: keyctl$get_persistent(0x1c, 0xee01, 0xfffffffffffffffb) 00:07:01 executing program 3: ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x41045508, 0x0) 00:07:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) 00:07:01 executing program 2: mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xf833d70ff4826930, 0xffffffffffffffff, 0x0) 00:07:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp\x00') read$eventfd(r0, 0x0, 0x3000) 00:07:01 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc050560a, 0x0) 00:07:01 executing program 5: bpf$MAP_UPDATE_ELEM(0xd, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:07:01 executing program 3: ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x41045508, 0x0) 00:07:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) 00:07:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 00:07:01 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:07:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 00:07:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) 00:07:01 executing program 3: ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x41045508, 0x0) 00:07:01 executing program 4: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x81785501, 0x0) 00:07:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x6, 0x3}, 0x40) 00:07:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000180)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:07:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done], 0x0, 0x0, 0x0}) 00:07:02 executing program 4: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x81785501, 0x0) 00:07:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) 00:07:02 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:02 executing program 0: r0 = socket(0x18, 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 00:07:02 executing program 2: mq_open(&(0x7f0000000000)='@\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mq_timedreceive(r2, &(0x7f0000000080)=""/54, 0x36, 0x81, &(0x7f00000000c0)={r0, r1+60000000}) 00:07:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 00:07:02 executing program 4: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x81785501, 0x0) [ 200.561666][T10543] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10543 [ 200.571344][T10543] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 200.577873][T10543] CPU: 0 PID: 10543 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 200.586639][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.596707][T10543] Call Trace: [ 200.600018][T10543] dump_stack+0x107/0x163 [ 200.604374][T10543] check_preemption_disabled+0x123/0x130 00:07:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) [ 200.610039][T10543] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 200.615776][T10543] trace_hardirqs_on+0x5b/0x1c0 [ 200.620669][T10543] __bad_area_nosemaphore+0xc6/0x400 [ 200.625975][T10543] do_user_addr_fault+0x7d7/0xb40 [ 200.631024][T10543] exc_page_fault+0x9e/0x180 [ 200.635632][T10543] ? asm_exc_page_fault+0x8/0x30 [ 200.640591][T10543] asm_exc_page_fault+0x1e/0x30 [ 200.645454][T10543] RIP: 0033:0x457abf 00:07:02 executing program 5: select(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0) [ 200.649370][T10543] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 200.668993][T10543] RSP: 002b:00007f6123aa1828 EFLAGS: 00010283 [ 200.675084][T10543] RAX: 00007f6123aa1850 RBX: 6666666666666667 RCX: 0000000000000000 [ 200.683263][T10543] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f6123aa1850 [ 200.691257][T10543] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 200.699247][T10543] R10: 00007f6123aa29d0 R11: 0000000000000246 R12: 000000000118bf2c [ 200.707232][T10543] R13: 00007ffd32866c9f R14: 00007f6123aa29c0 R15: 000000000118bf2c [ 200.716257][T10543] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10543 [ 200.726163][T10543] caller is lockdep_hardirqs_on+0x38/0x110 [ 200.732066][T10543] CPU: 0 PID: 10543 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 200.740835][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.750900][T10543] Call Trace: [ 200.754205][T10543] dump_stack+0x107/0x163 00:07:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) [ 200.758556][T10543] check_preemption_disabled+0x123/0x130 [ 200.764205][T10543] ? __bad_area_nosemaphore+0xc6/0x400 [ 200.769685][T10543] lockdep_hardirqs_on+0x38/0x110 [ 200.774809][T10543] __bad_area_nosemaphore+0xc6/0x400 [ 200.780112][T10543] do_user_addr_fault+0x7d7/0xb40 [ 200.785157][T10543] exc_page_fault+0x9e/0x180 [ 200.789759][T10543] ? asm_exc_page_fault+0x8/0x30 [ 200.794712][T10543] asm_exc_page_fault+0x1e/0x30 [ 200.799567][T10543] RIP: 0033:0x457abf 00:07:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1}}, 0x10) [ 200.803469][T10543] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 200.823077][T10543] RSP: 002b:00007f6123aa1828 EFLAGS: 00010283 [ 200.829167][T10543] RAX: 00007f6123aa1850 RBX: 6666666666666667 RCX: 0000000000000000 [ 200.837146][T10543] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f6123aa1850 [ 200.845129][T10543] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 200.853267][T10543] R10: 00007f6123aa29d0 R11: 0000000000000246 R12: 000000000118bf2c [ 200.861255][T10543] R13: 00007ffd32866c9f R14: 00007f6123aa29c0 R15: 000000000118bf2c 00:07:02 executing program 0: socket(0x21, 0x2, 0x2) 00:07:02 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) 00:07:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) [ 201.069906][T10570] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10570 [ 201.079447][T10570] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 201.085975][T10570] CPU: 0 PID: 10570 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 201.094757][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.104821][T10570] Call Trace: [ 201.108132][T10570] dump_stack+0x107/0x163 [ 201.112488][T10570] check_preemption_disabled+0x123/0x130 [ 201.118139][T10570] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 201.123875][T10570] trace_hardirqs_on+0x5b/0x1c0 [ 201.128746][T10570] __bad_area_nosemaphore+0xc6/0x400 [ 201.134054][T10570] do_user_addr_fault+0x7d7/0xb40 [ 201.139103][T10570] exc_page_fault+0x9e/0x180 [ 201.143721][T10570] ? asm_exc_page_fault+0x8/0x30 [ 201.149540][T10570] asm_exc_page_fault+0x1e/0x30 [ 201.154395][T10570] RIP: 0033:0x457abf [ 201.158299][T10570] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 201.177919][T10570] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 201.184008][T10570] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 201.191996][T10570] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 201.199985][T10570] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 201.207970][T10570] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 201.215955][T10570] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c [ 201.227363][T10570] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10570 [ 201.237844][T10570] caller is lockdep_hardirqs_on+0x38/0x110 [ 201.243765][T10570] CPU: 0 PID: 10570 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 201.252540][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.262606][T10570] Call Trace: [ 201.265906][T10570] dump_stack+0x107/0x163 [ 201.270250][T10570] check_preemption_disabled+0x123/0x130 [ 201.275867][T10570] ? __bad_area_nosemaphore+0xc6/0x400 [ 201.281311][T10570] lockdep_hardirqs_on+0x38/0x110 [ 201.286318][T10570] __bad_area_nosemaphore+0xc6/0x400 [ 201.291601][T10570] do_user_addr_fault+0x7d7/0xb40 [ 201.296700][T10570] exc_page_fault+0x9e/0x180 [ 201.301277][T10570] ? asm_exc_page_fault+0x8/0x30 [ 201.306199][T10570] asm_exc_page_fault+0x1e/0x30 [ 201.311033][T10570] RIP: 0033:0x457abf [ 201.314913][T10570] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 201.334602][T10570] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 201.344390][T10570] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 201.352347][T10570] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 201.360302][T10570] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 201.368258][T10570] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 201.376218][T10570] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c 00:07:03 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:03 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x3, 0x8d8}, [@acm={0x4, 0x24, 0x2, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x5, 0x0, 0x7}, @dmm={0x7, 0x24, 0x14, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x95, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1f, 0x1, 0x2}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xbd, &(0x7f0000000100)=@string={0xbd, 0x3, "123a40d404ac6377de249ef35f747a59eeccabd61cc64c18b0ef58ee10106c637aaf955461b90f47ddbc61537560c29849b6d6a25a980cb514f5823554a67a8665cc58496ced3a1d6a2c04c3d6061000a8b9e35c1900aceb8905d473469c5634b2595cb396237bf822c6ba8ead1b61fa447e26d235e587d6c163cb6fb855cac29275d7bfa99dad0abdf1d42c2ed3b3b9f1fb14af57143a3a5ccd559e9d5d812339d265b52b1a5c97fe6699ea6c491380f7ea2394c8f8635ac78e73"}}]}) 00:07:03 executing program 0: bpf$MAP_UPDATE_ELEM(0x6, 0x0, 0x0) 00:07:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) 00:07:03 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) [ 201.557127][T10583] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10583 [ 201.566759][T10583] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 201.573479][T10583] CPU: 1 PID: 10583 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 201.582251][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.592316][T10583] Call Trace: [ 201.595621][T10583] dump_stack+0x107/0x163 [ 201.599974][T10583] check_preemption_disabled+0x123/0x130 [ 201.605628][T10583] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 201.611361][T10583] trace_hardirqs_on+0x5b/0x1c0 [ 201.616230][T10583] __bad_area_nosemaphore+0xc6/0x400 [ 201.621619][T10583] do_user_addr_fault+0x7d7/0xb40 [ 201.626705][T10583] exc_page_fault+0x9e/0x180 [ 201.631313][T10583] ? asm_exc_page_fault+0x8/0x30 [ 201.636264][T10583] asm_exc_page_fault+0x1e/0x30 [ 201.641118][T10583] RIP: 0033:0x457abf [ 201.645026][T10583] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 201.664640][T10583] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 201.670726][T10583] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 201.678731][T10583] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 201.686715][T10583] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 201.694702][T10583] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c 00:07:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 201.702901][T10583] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c [ 201.712073][T10583] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10583 [ 201.722190][T10583] caller is lockdep_hardirqs_on+0x38/0x110 [ 201.728027][T10583] CPU: 1 PID: 10583 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 201.736795][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.746858][T10583] Call Trace: [ 201.750174][T10583] dump_stack+0x107/0x163 [ 201.754503][T10583] check_preemption_disabled+0x123/0x130 [ 201.760129][T10583] ? __bad_area_nosemaphore+0xc6/0x400 [ 201.765590][T10583] lockdep_hardirqs_on+0x38/0x110 [ 201.770604][T10583] __bad_area_nosemaphore+0xc6/0x400 [ 201.775878][T10583] do_user_addr_fault+0x7d7/0xb40 [ 201.780912][T10583] exc_page_fault+0x9e/0x180 [ 201.785489][T10583] ? asm_exc_page_fault+0x8/0x30 [ 201.790409][T10583] asm_exc_page_fault+0x1e/0x30 [ 201.795240][T10583] RIP: 0033:0x457abf [ 201.799119][T10583] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 201.818723][T10583] RSP: 002b:00007fb02d579828 EFLAGS: 00010283 [ 201.824776][T10583] RAX: 00007fb02d579850 RBX: 6666666666666667 RCX: 0000000000000000 [ 201.832765][T10583] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fb02d579850 [ 201.840735][T10583] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 201.848698][T10583] R10: 00007fb02d57a9d0 R11: 0000000000000246 R12: 000000000118bf2c [ 201.856661][T10583] R13: 00007ffdd33fcb1f R14: 00007fb02d57a9c0 R15: 000000000118bf2c 00:07:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3d, 0x0, &(0x7f0000000240)="49ad41f465a732d68fdf58defed5f170439b7c95a6121d430a1ec905a137d248d95a78e8a533d6df5a6bb30b1432d972027bf53e838ba76a9b3a490206"}) 00:07:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) 00:07:03 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xc8b, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:03 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x81785501, 0x0) 00:07:03 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="296e5a45b607779fc5f472e2e7d1405c4f1d1ad1", 0x14) [ 202.019177][ T9788] usb 3-1: new high-speed USB device number 2 using dummy_hcd 00:07:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x41045508, 0x0) 00:07:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xc8b, 0x2002) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000280))