Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:45799' (ECDSA) to the list of known hosts. 2020/11/25 05:13:47 fuzzer started 2020/11/25 05:13:48 dialing manager at 10.0.2.10:45169 2020/11/25 05:13:48 syscalls: 3441 2020/11/25 05:13:48 code coverage: enabled 2020/11/25 05:13:48 comparison tracing: enabled 2020/11/25 05:13:48 extra coverage: enabled 2020/11/25 05:13:48 setuid sandbox: enabled 2020/11/25 05:13:48 namespace sandbox: enabled 2020/11/25 05:13:48 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/25 05:13:48 fault injection: enabled 2020/11/25 05:13:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/25 05:13:48 net packet injection: enabled 2020/11/25 05:13:48 net device setup: enabled 2020/11/25 05:13:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/25 05:13:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/25 05:13:48 USB emulation: enabled 2020/11/25 05:13:48 hci packet injection: enabled 2020/11/25 05:13:48 wifi device emulation: enabled 05:15:10 executing program 0: 05:15:10 executing program 1: 05:15:11 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x284c1, 0x0) 05:15:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) syzkaller login: [ 206.848630][ T9224] IPVS: ftp: loaded support on port[0] = 21 [ 206.979499][ T9224] chnl_net:caif_netlink_parms(): no params data found [ 207.049346][ T9224] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.061531][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.074494][ T9224] device bridge_slave_0 entered promiscuous mode [ 207.086936][ T9224] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.095072][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.104147][ T9224] device bridge_slave_1 entered promiscuous mode [ 207.121817][ T9226] IPVS: ftp: loaded support on port[0] = 21 [ 207.129022][ T9224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.146192][ T9224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.178814][ T9224] team0: Port device team_slave_0 added [ 207.194924][ T9224] team0: Port device team_slave_1 added [ 207.227540][ T9224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.238149][ T9224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.276915][ T9224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.299589][ T9224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.309111][ T9224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.343771][ T9224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.391725][ T9224] device hsr_slave_0 entered promiscuous mode [ 207.401484][ T9224] device hsr_slave_1 entered promiscuous mode [ 207.444189][ T9228] IPVS: ftp: loaded support on port[0] = 21 [ 207.493875][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 207.613515][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.623157][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.633038][ T9226] device bridge_slave_0 entered promiscuous mode [ 207.643931][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.655782][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.669259][ T9226] device bridge_slave_1 entered promiscuous mode [ 207.680906][ T9224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.704033][ T9224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.721231][ T9224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.735744][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.747391][ T9224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.778443][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.845801][ T9226] team0: Port device team_slave_0 added [ 207.856354][ T9226] team0: Port device team_slave_1 added [ 207.898528][ T9228] chnl_net:caif_netlink_parms(): no params data found [ 207.971857][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.995551][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.043161][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.061943][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.077098][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.122184][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.176640][ T9232] IPVS: ftp: loaded support on port[0] = 21 [ 208.201994][ T9226] device hsr_slave_0 entered promiscuous mode [ 208.214962][ T9226] device hsr_slave_1 entered promiscuous mode [ 208.223330][ T9226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.237681][ T9226] Cannot create hsr debugfs directory [ 208.248239][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.258335][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.268014][ T9228] device bridge_slave_0 entered promiscuous mode [ 208.288832][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.306270][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.320064][ T9228] device bridge_slave_1 entered promiscuous mode [ 208.363755][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.380167][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.418345][ T9228] team0: Port device team_slave_0 added [ 208.431670][ T9228] team0: Port device team_slave_1 added [ 208.472846][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.484730][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.520429][ T9228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.534985][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.543385][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.577401][ T9228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.624749][ T9228] device hsr_slave_0 entered promiscuous mode [ 208.632848][ T9228] device hsr_slave_1 entered promiscuous mode [ 208.641055][ T9228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.650304][ T9228] Cannot create hsr debugfs directory [ 208.749703][ T9224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.782183][ T9226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.801017][ T9232] chnl_net:caif_netlink_parms(): no params data found [ 208.813734][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 208.837465][ T9226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.855960][ T9226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.886204][ T9226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.923393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.933669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.961332][ T9224] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.970138][ T9228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.989908][ T9228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.020086][ T9228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.032240][ T9228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.054392][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.065197][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.079016][ T9232] device bridge_slave_0 entered promiscuous mode [ 209.091682][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.103449][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.114492][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.124866][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.132805][ T3344] Bluetooth: hci1: command 0x0409 tx timeout [ 209.146811][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.157224][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.168477][ T9232] device bridge_slave_1 entered promiscuous mode [ 209.197201][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.207630][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.218462][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.228642][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.237259][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.254504][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.274844][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.312244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.327418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.341400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.357624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.380528][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.395849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.408860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.425185][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.436891][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.453021][ T3078] Bluetooth: hci2: command 0x0409 tx timeout [ 209.468582][ T9232] team0: Port device team_slave_0 added [ 209.478839][ T9232] team0: Port device team_slave_1 added [ 209.493960][ T9224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.509784][ T9224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.537381][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.549037][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.561751][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.569762][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.600247][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.625624][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.640814][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.676316][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.708861][ T9232] device hsr_slave_0 entered promiscuous mode [ 209.717187][ T9232] device hsr_slave_1 entered promiscuous mode [ 209.726153][ T9232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.741893][ T9232] Cannot create hsr debugfs directory [ 209.764232][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.781466][ T9224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.789869][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.798531][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.835892][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.849061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.858211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.880482][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.898873][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.909996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.919047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.931684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.932630][ T3078] Bluetooth: hci3: command 0x0409 tx timeout [ 209.941758][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.957616][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.969536][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.981752][ T9228] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.008412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.020284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.031675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.043591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.055835][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.066496][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.097178][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.112082][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.124893][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.139619][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.157172][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.170587][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.182884][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.194588][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.219502][ T9224] device veth0_vlan entered promiscuous mode [ 210.238883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.253176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.265033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.279192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.290487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.302483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.313236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.324141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.337397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.349243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.364115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.374635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.385339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.395309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.406340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.426608][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.446729][ T9228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.483788][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.515886][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.531019][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.556448][ T9224] device veth1_vlan entered promiscuous mode [ 210.565175][ T9232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.585989][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.598371][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.615904][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.629638][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.648670][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.660423][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.672116][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.692072][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.701037][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.711284][ T9232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.725694][ T9232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.737786][ T9232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.754017][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.766092][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.780834][ T9228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.793487][ T9226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.838703][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.848416][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.866502][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.880056][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.882708][ T3078] Bluetooth: hci0: command 0x041b tx timeout [ 210.897474][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.920319][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.933610][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.955012][ T9224] device veth0_macvtap entered promiscuous mode [ 210.969544][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.987899][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.000253][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.020723][ T9224] device veth1_macvtap entered promiscuous mode [ 211.032063][ T9228] device veth0_vlan entered promiscuous mode [ 211.043510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.054531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.065118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.085145][ T9228] device veth1_vlan entered promiscuous mode [ 211.097342][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.107366][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.128211][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.164412][ T9224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.178787][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.210660][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.213318][ T3344] Bluetooth: hci1: command 0x041b tx timeout [ 211.235435][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.253770][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.270234][ T3355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.289193][ T9224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.300876][ T9226] device veth0_vlan entered promiscuous mode [ 211.310910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.323084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.334993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.348000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.366325][ T9224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.380314][ T9224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.395171][ T9224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.407386][ T9224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.428230][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.453975][ T9226] device veth1_vlan entered promiscuous mode [ 211.499400][ T9232] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.521425][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.533376][ T3344] Bluetooth: hci2: command 0x041b tx timeout [ 211.533465][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.553829][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.564378][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.574672][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.585034][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.594860][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.603349][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.613257][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.626140][ T9228] device veth0_macvtap entered promiscuous mode [ 211.648811][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.662114][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.674757][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.689409][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.699383][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.716723][ T9228] device veth1_macvtap entered promiscuous mode [ 211.739858][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.751207][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.786146][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.796341][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.806679][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.817310][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.828990][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.839175][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.849241][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.860682][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.877398][ T9226] device veth0_macvtap entered promiscuous mode [ 211.878000][ T9239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.895687][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.895708][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.896547][ T9228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.908690][ T9239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.948997][ T9226] device veth1_macvtap entered promiscuous mode [ 211.959342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.973184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.985952][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.996604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.003532][ T28] Bluetooth: hci3: command 0x041b tx timeout [ 212.006475][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.022306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.032946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.051819][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.064753][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.087499][ T9228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.106003][ T9239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.107409][ T9228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.117796][ T9239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.131135][ T9228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.131151][ T9228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.131165][ T9228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.133812][ T9232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.194789][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.210359][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.227133][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.238337][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.252782][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.280769][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.349012][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.397403][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.419819][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.440691][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.466933][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.510394][ T9224] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 212.533879][ T9260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.545698][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.546349][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.546692][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.546773][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:15:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) [ 212.556711][ T9239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.562717][ T9260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.581940][ T9239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.605279][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 05:15:17 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 212.719743][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.738627][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 05:15:17 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 212.759282][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:15:17 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) [ 212.783808][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.809247][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:15:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 212.828451][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.855833][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.870479][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.888654][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.907814][ T9226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.921784][ T9226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.937731][ T9226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.949769][ T9226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.962819][ T43] Bluetooth: hci0: command 0x040f tx timeout [ 213.021168][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.028962][ T9250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.033920][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.045467][ T9250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.085992][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.136987][ T9260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.141214][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.149253][ T9260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.171677][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.185148][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.198602][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.210193][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.229423][ T9232] device veth0_vlan entered promiscuous mode [ 213.249355][ T9232] device veth1_vlan entered promiscuous mode 05:15:18 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) 05:15:18 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x2, 0x0, 0x0) [ 213.283688][ T28] Bluetooth: hci1: command 0x040f tx timeout [ 213.317848][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.338197][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.350915][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.376960][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.403263][ T9232] device veth0_macvtap entered promiscuous mode [ 213.424449][ T9232] device veth1_macvtap entered promiscuous mode [ 213.450671][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.469251][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.484489][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.501794][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.521934][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.543172][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.566517][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.582222][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.594618][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.610145][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.623511][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 213.629481][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.653091][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.665186][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.682296][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.695452][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.709342][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.723571][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.737388][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.749214][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.765851][ T9232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.779650][ T9232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.791938][ T9232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.807578][ T9232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.862154][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.876937][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.890170][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.897198][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.906194][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.927397][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:15:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 05:15:19 executing program 1: syz_genetlink_get_family_id$ipvs(0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x80, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 05:15:19 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) 05:15:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006700)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bb9}, {{@in=@local}, 0x0, @in6=@loopback}}, 0xe8) 05:15:19 executing program 2: clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) 05:15:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000280)) 05:15:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)) [ 214.083056][ T3344] Bluetooth: hci3: command 0x040f tx timeout 05:15:19 executing program 0: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 05:15:19 executing program 3: truncate(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) [ 214.333065][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 214.623221][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 214.773765][ T34] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 214.792194][ T34] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 214.813619][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.023192][ T34] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.046277][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.053295][ T3344] Bluetooth: hci0: command 0x0419 tx timeout [ 215.080289][ T34] usb 6-1: Product: syz [ 215.105777][ T34] usb 6-1: Manufacturer: syz [ 215.116167][ T34] usb 6-1: SerialNumber: syz [ 215.363265][ T28] Bluetooth: hci1: command 0x0419 tx timeout [ 215.473442][ T34] usb 6-1: 0:2 : does not exist [ 215.508717][ T34] usb 6-1: USB disconnect, device number 2 [ 215.682891][ T28] Bluetooth: hci2: command 0x0419 tx timeout 05:15:21 executing program 1: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000000)) 05:15:21 executing program 0: socketpair(0x18, 0x3, 0x24, 0x0) 05:15:21 executing program 2: sendto(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:21 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) 05:15:21 executing program 0: open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) utimes(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)) 05:15:21 executing program 3: r0 = msgget(0x1, 0x0) msgrcv(r0, 0x0, 0xd, 0x0, 0x0) r1 = msgget(0x1, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/179) 05:15:21 executing program 2: msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x27, 0x0, 0x0) r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/179) 05:15:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000007c0)="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", 0x841, 0x0, 0x0, 0x0) 05:15:21 executing program 0: getgroups(0x1, &(0x7f0000000000)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:15:21 executing program 2: r0 = msgget(0x1, 0x0) msgrcv(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x27, 0x0, 0x0) r1 = msgget(0x1, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/179) 05:15:21 executing program 3: msgget(0x1, 0x44) 05:15:21 executing program 0: socketpair(0x2, 0x0, 0x2, 0x0) 05:15:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 05:15:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x0) 05:15:21 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/114, 0x72) 05:15:21 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0x0) 05:15:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 05:15:21 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff}}) [ 216.163500][ T3078] Bluetooth: hci3: command 0x0419 tx timeout 05:15:21 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)) 05:15:21 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) write(r0, 0x0, 0x0) 05:15:21 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:21 executing program 2: r0 = semget(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0x0, 0x7, 0x0) 05:15:21 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 05:15:21 executing program 0: r0 = semget(0x0, 0x2, 0x0) semctl$GETPID(r0, 0x0, 0x4, 0x0) 05:15:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) 05:15:21 executing program 3: msgget(0x0, 0x740) 05:15:21 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) shutdown(r0, 0x0) 05:15:21 executing program 0: getgroups(0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) 05:15:22 executing program 1: semget(0x0, 0x0, 0x302) 05:15:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f00000019c0)={&(0x7f0000000140)=@in6={0x18, 0x1}, 0xc, 0x0, 0x0, &(0x7f0000000680)=[{0xd0, 0x0, 0x0, "dcd5edfbb12e035f757c87b36e8d427ee951d72f6fa1d8e4f34500d4dc41869ca0d660c5a3887c8569856abf6a3d705cb325fc59989de2cdd2b350712064e06d54c9fe27f9db744e88a1d4f574052ee859573e54850b46fb579396ed8cf6abb330d5491d6ec72d63b92f359332a26f66c37141f3488749553ac57a29986cf147c0a532f2e433052e2fcbe43d5d905813df5da461662e6a8406ca586566573b72c812acb322ff9872fa98277c6a0549356ce85f78053eaace41"}, {0x18, 0x0, 0x0, "e4"}], 0xe8}, 0x1) 05:15:22 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/11) 05:15:22 executing program 3: utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={{0x0, 0xfffffffffffffffe}}, 0x0) 05:15:22 executing program 3: socket$inet6(0x18, 0x3, 0x5) 05:15:22 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 05:15:22 executing program 1: open(&(0x7f0000000180)='./file1\x00', 0x18222, 0x0) 05:15:22 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000900)=""/205) 05:15:22 executing program 3: semget(0x0, 0x2, 0x302) 05:15:22 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) msgsnd(r0, &(0x7f00000002c0)={0x1, "484d339334b82a1d846b0c104eb89cd71bb4237d58de599760fcb1ee"}, 0x24, 0x800) 05:15:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0x2) 05:15:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8) 05:15:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file1\x00'}, 0xa) [ 217.363375][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 217.643058][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 217.783273][ T37] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.993941][ T37] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 218.031610][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.058476][ T37] usb 5-1: Product: syz [ 218.073249][ T37] usb 5-1: Manufacturer: syz [ 218.088506][ T37] usb 5-1: SerialNumber: syz [ 218.144800][ T37] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 218.346998][ T37] usb 5-1: USB disconnect, device number 2 [ 219.112812][ T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 219.392745][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 219.523372][ T28] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.722979][ T28] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 219.738324][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.752654][ T28] usb 5-1: Product: syz [ 219.758504][ T28] usb 5-1: Manufacturer: syz [ 219.765013][ T28] usb 5-1: SerialNumber: syz [ 219.814590][ T28] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 220.020424][ T5] usb 5-1: USB disconnect, device number 3 05:15:25 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/11) 05:15:25 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 05:15:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 05:15:25 executing program 2: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) 05:15:25 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) clock_gettime(0x4, &(0x7f00000000c0)) 05:15:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ftruncate(r0, 0x0) 05:15:25 executing program 0: r0 = semget(0x1, 0x1, 0x0) semctl$GETNCNT(r0, 0x2, 0x3, 0x0) 05:15:25 executing program 1: truncate(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 05:15:25 executing program 3: msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 05:15:25 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)) 05:15:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 05:15:25 executing program 2: chown(&(0x7f0000000140)='.\x00', 0x0, 0x0) 05:15:25 executing program 3: 05:15:25 executing program 1: 05:15:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) 05:15:25 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 05:15:25 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 05:15:25 executing program 2: 05:15:25 executing program 3: 05:15:25 executing program 0: 05:15:25 executing program 3: 05:15:25 executing program 2: 05:15:25 executing program 1: 05:15:25 executing program 3: 05:15:25 executing program 0: 05:15:25 executing program 1: 05:15:25 executing program 2: 05:15:25 executing program 1: 05:15:25 executing program 3: 05:15:25 executing program 0: 05:15:25 executing program 1: 05:15:25 executing program 2: 05:15:25 executing program 0: 05:15:25 executing program 3: 05:15:25 executing program 2: 05:15:25 executing program 1: 05:15:25 executing program 3: 05:15:25 executing program 2: 05:15:25 executing program 0: 05:15:25 executing program 1: 05:15:25 executing program 3: 05:15:25 executing program 2: 05:15:25 executing program 0: 05:15:25 executing program 3: 05:15:25 executing program 1: 05:15:25 executing program 2: 05:15:25 executing program 0: 05:15:25 executing program 3: 05:15:25 executing program 1: 05:15:25 executing program 2: 05:15:25 executing program 0: 05:15:25 executing program 1: 05:15:25 executing program 3: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 05:15:25 executing program 2: 05:15:25 executing program 0: 05:15:25 executing program 1: 05:15:25 executing program 0: 05:15:25 executing program 2: 05:15:25 executing program 3: 05:15:25 executing program 1: 05:15:25 executing program 0: 05:15:25 executing program 2: 05:15:26 executing program 3: 05:15:26 executing program 0: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 3: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 0: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 3: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 3: 05:15:26 executing program 0: socketpair(0x10, 0x3, 0x0, &(0x7f00000001c0)) 05:15:26 executing program 1: 05:15:26 executing program 0: 05:15:26 executing program 2: 05:15:26 executing program 1: 05:15:26 executing program 3: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 2: 05:15:26 executing program 1: 05:15:26 executing program 0: 05:15:26 executing program 1: 05:15:26 executing program 3: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 1: 05:15:26 executing program 0: 05:15:26 executing program 2: 05:15:26 executing program 3: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 1: 05:15:26 executing program 3: 05:15:26 executing program 0: 05:15:26 executing program 2: 05:15:26 executing program 1: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 2: 05:15:26 executing program 1: 05:15:26 executing program 3: 05:15:26 executing program 0: 05:15:26 executing program 2: 05:15:26 executing program 1: 05:15:26 executing program 3: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 0: 05:15:26 executing program 3: 05:15:26 executing program 1: 05:15:26 executing program 2: 05:15:26 executing program 3: 05:15:26 executing program 0: 05:15:27 executing program 1: 05:15:27 executing program 2: 05:15:27 executing program 0: 05:15:27 executing program 3: 05:15:27 executing program 2: 05:15:27 executing program 1: 05:15:27 executing program 0: 05:15:27 executing program 3: 05:15:27 executing program 3: 05:15:27 executing program 2: 05:15:27 executing program 0: 05:15:27 executing program 1: 05:15:27 executing program 2: 05:15:27 executing program 1: 05:15:27 executing program 3: 05:15:27 executing program 0: 05:15:27 executing program 1: 05:15:27 executing program 2: 05:15:27 executing program 3: 05:15:27 executing program 0: 05:15:27 executing program 2: 05:15:27 executing program 1: 05:15:27 executing program 3: 05:15:27 executing program 0: 05:15:27 executing program 2: 05:15:27 executing program 1: 05:15:27 executing program 0: 05:15:27 executing program 3: 05:15:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0xc800) shmctl$IPC_RMID(r2, 0x0) 05:15:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 05:15:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640430800e5cc27d7b0ca5e61ca9762", 0x46}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:15:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @dev={0xfe, 0x80, [0x8, 0x2, 0x3, 0x3, 0x0, 0x4, 0x7, 0x14, 0x6, 0xb, 0x3, 0x8, 0x6]}}) 05:15:27 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) [ 222.292561][ C0] hrtimer: interrupt took 27272 ns 05:15:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="97ba38dfe019fd07000000fa2f443bf4010000000000000069d1f19f167825d989a596e096b1795e4764627bbfcd9b0b332f0f56ebd2a56968c07fbb97a9de1f75c35c5c857cc78095cd70e3f5f7ea27cfee9264c9be93873f07581997abb57912f5220a80a62228aafeca9451bff33c73c2dff8d7ce64bc0a", 0x79}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 222.310624][ T9783] NFS: mount program didn't pass any mount data [ 302.252761][ T9794] syz-executor.2: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 302.252761][ T9794] CPU: 3 PID: 9794 Comm: syz-executor.2 Not tainted 5.10.0-rc5-syzkaller #0 [ 302.306685][ C2] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.252761][ T9794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 302.252761][ T9794] Call Trace: [ 302.316098][ C2] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.252761][ T9794] dump_stack+0x107/0x163 [ 302.316098][ C2] node 0: slabs: 89, objs: 2225, free: 0 [ 302.252761][ T9794] warn_alloc.cold+0x87/0x17a [ 302.316098][ C2] node 1: slabs: 918, objs: 22482, free: 49 [ 302.252761][ T9794] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 302.517021][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.518993][ C2] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519012][ C2] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519049][ C2] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519057][ C2] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519077][ C2] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519084][ C2] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519090][ C2] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519096][ C2] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519112][ C2] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519119][ C2] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519124][ C2] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519130][ C2] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519146][ C2] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519153][ C2] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519158][ C2] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519164][ C2] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519514][ T9258] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519741][ T9258] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519748][ T9258] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519755][ T9258] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519769][ T9258] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519776][ T9258] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519783][ T9258] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519789][ T9258] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519802][ T9258] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519904][ T9258] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519913][ T9258] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519920][ T9258] node 1: slabs: 918, objs: 22482, free: 49 [ 302.519934][ T9258] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 302.519941][ T9258] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.519947][ T9258] node 0: slabs: 89, objs: 2225, free: 0 [ 302.519954][ T9258] node 1: slabs: 918, objs: 22482, free: 49 [ 302.252761][ T9794] ? wakeup_kswapd+0x15b/0x640 [ 302.522557][ C1] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 302.522557][ C1] node 0: slabs: 89, objs: 2225, free: 0 [ 302.252761][ T9794] ? __zone_watermark_ok+0x440/0x440 [ 302.522557][ C1] node 1: slabs: 918, objs: 22482, free: 49 [ 302.252761][ T9794] ? wake_all_kswapds+0x143/0x2c0 [ 303.452857][ T9794] __alloc_pages_slowpath.constprop.0+0x2026/0x2510 [ 303.482744][ T9794] ? __lock_acquire+0x16b7/0x5500 [ 303.492777][ T9794] ? warn_alloc+0x120/0x120 [ 303.503051][ T9794] ? __lock_acquire+0x16b7/0x5500 [ 303.512793][ T9794] ? __zone_watermark_ok+0x440/0x440 [ 303.522826][ T9794] __alloc_pages_nodemask+0x5f0/0x730 [ 303.542687][ T9794] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 303.552812][ T9794] ? __slab_alloc.constprop.0+0x52/0xe0 [ 303.572760][ T9794] alloc_pages_current+0x191/0x2a0 [ 303.582818][ T9794] allocate_slab+0x2d9/0x4e0 [ 303.592770][ T9794] ___slab_alloc+0x476/0x790 [ 303.602672][ T9794] ? __sigqueue_alloc+0x236/0x550 [ 303.613089][ T9794] ? find_held_lock+0x2d/0x110 [ 303.632767][ T9794] ? __sigqueue_alloc+0x236/0x550 [ 303.642908][ T9794] ? __slab_alloc.constprop.0+0x52/0xe0 [ 303.652797][ T9794] __slab_alloc.constprop.0+0x52/0xe0 [ 303.662745][ T9794] ? __sigqueue_alloc+0x236/0x550 [ 303.672743][ T9794] kmem_cache_alloc+0x395/0x460 [ 303.682848][ T9794] __sigqueue_alloc+0x236/0x550 [ 303.692698][ T9794] __send_signal+0x62d/0xf90 [ 303.702781][ T9794] force_sig_info_to_task+0x2a0/0x3a0 [ 303.712898][ T9794] force_sig_fault+0xb0/0xf0 [ 303.732928][ T9794] ? force_sig_fault_to_task+0xe0/0xe0 [ 303.742804][ T9794] ? pgtable_bad+0x90/0x90 [ 303.753039][ T9794] ? _down_write_nest_lock+0x150/0x150 [ 303.772888][ T9794] __bad_area_nosemaphore+0x2f3/0x400 [ 303.782689][ T9794] do_user_addr_fault+0x7d7/0xb40 [ 303.802761][ T9794] exc_page_fault+0x9e/0x180 [ 303.813480][ T9794] ? asm_exc_page_fault+0x8/0x30 [ 303.834341][ T9794] asm_exc_page_fault+0x1e/0x30 [ 303.844053][ T9794] RIP: 0023:0x804d63c [ 303.853031][ T9794] Code: ff 50 e8 c7 5d 01 00 83 c4 10 85 c0 0f 84 75 01 00 00 8b 5c 24 0c e8 83 03 01 00 65 f0 83 2d e4 ff ff ff 01 8b 54 24 10 8b 00 <83> 7a 50 ff 89 42 54 75 0b 85 c0 75 07 c7 42 54 16 00 00 00 6b 44 [ 303.902754][ T9794] RSP: 002b:00000000f556f100 EFLAGS: 00010282 [ 303.922795][ T9794] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f556f0f0 [ 303.943037][ T9794] RDX: 0000000000000000 RSI: 000000000818af60 RDI: 000000000815e000 [ 303.972708][ T9794] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 303.992715][ T9794] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 304.012818][ T9794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.042751][ T9794] Mem-Info: [ 304.052996][ T9794] active_anon:3521 inactive_anon:97523 isolated_anon:0 [ 304.052996][ T9794] active_file:332 inactive_file:212 isolated_file:64 [ 304.052996][ T9794] unevictable:0 dirty:65 writeback:32 [ 304.052996][ T9794] slab_reclaimable:12954 slab_unreclaimable:149421 [ 304.052996][ T9794] mapped:35195 shmem:602 pagetables:813 bounce:0 [ 304.052996][ T9794] free:7204 free_pcp:1148 free_cma:0 [ 304.152742][ T9794] Node 0 active_anon:14076kB inactive_anon:197964kB active_file:300kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:880kB dirty:64kB writeback:16kB shmem:1848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB kernel_stack:8960kB all_unreclaimable? yes [ 304.232759][ T9794] Node 1 active_anon:8kB inactive_anon:192128kB active_file:1028kB inactive_file:820kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:139900kB dirty:196kB writeback:112kB shmem:560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:864kB all_unreclaimable? no [ 304.292791][ T9794] Node 0 DMA free:2124kB min:2780kB low:2960kB high:3140kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:12592kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.362736][ T9794] lowmem_reserve[]: 0 468 468 468 468 [ 304.372725][ T9794] Node 0 DMA32 free:8296kB min:36532kB low:42080kB high:47628kB reserved_highatomic:2048KB active_anon:14076kB inactive_anon:185372kB active_file:300kB inactive_file:28kB unevictable:0kB writepending:80kB present:1032192kB managed:486276kB mlocked:0kB pagetables:1816kB bounce:0kB free_pcp:1712kB local_pcp:56kB free_cma:0kB [ 304.442709][ T9794] lowmem_reserve[]: 0 0 0 0 0 [ 304.462774][ T9794] Node 1 DMA32 free:18428kB min:67176kB low:78336kB high:89496kB reserved_highatomic:2048KB active_anon:8kB inactive_anon:192128kB active_file:1192kB inactive_file:820kB unevictable:0kB writepending:308kB present:1048436kB managed:965508kB mlocked:0kB pagetables:1436kB bounce:0kB free_pcp:2848kB local_pcp:248kB free_cma:0kB [ 304.572697][ T9794] lowmem_reserve[]: 0 0 0 0 0 [ 304.582835][ T9794] Node 0 DMA: 1*4kB (U) 1*8kB (H) 0*16kB 2*32kB (UH) 2*64kB (UH) 1*128kB (H) 1*256kB (H) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2124kB [ 304.622623][ T9794] Node 0 DMA32: 560*4kB (UMH) 193*8kB (UME) 74*16kB (UMH) 58*32kB (UME) 19*64kB (UM) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8296kB [ 304.652970][ T9794] Node 1 DMA32: 196*4kB (UME) 112*8kB (UMEH) 57*16kB (MH) 38*32kB (UME) 30*64kB (UME) 25*128kB (UMEH) 11*256kB (UM) 7*512kB (UM) 3*1024kB (MH) 0*2048kB 0*4096kB = 18400kB [ 304.692986][ T9794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 304.722763][ T9794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 304.752977][ T9794] 1145 total pagecache pages [ 304.762985][ T9794] 0 pages in swap cache [ 304.772786][ T9794] Swap cache stats: add 0, delete 0, find 0/0 [ 304.792777][ T9794] Free swap = 0kB [ 304.802751][ T9794] Total swap = 0kB [ 304.812794][ T9794] 524155 pages RAM [ 304.823123][ T9794] 0 pages HighMem/MovableOnly [ 304.832794][ T9794] 157232 pages reserved [ 304.852794][ T9794] 0 pages cma reserved [ 306.883252][ C1] ------------[ cut here ]------------ [ 306.896661][ C1] HSR: Could not send supervision frame [ 306.913635][ C1] WARNING: CPU: 1 PID: 0 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40 [ 306.939533][ C1] Modules linked in: [ 306.952142][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.10.0-rc5-syzkaller #0 [ 306.968224][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 306.995723][ C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 307.012797][ C1] Code: 04 31 ff 89 de e8 77 77 cd f8 84 db 0f 85 8b fd ff ff e8 5a 7f cd f8 48 c7 c7 60 f7 6b 8a c6 05 d1 1e 36 04 01 e8 e3 fd 09 00 <0f> 0b e9 6c fd ff ff e8 3b 7f cd f8 41 be 42 00 00 00 ba 01 00 00 [ 307.057007][ C1] RSP: 0000:ffffc900004c8c70 EFLAGS: 00010286 [ 307.072680][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 307.096509][ C1] RDX: ffff888010862180 RSI: ffffffff8158d875 RDI: fffff52000099180 [ 307.115870][ C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc4747 [ 307.136425][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801a517000 [ 307.156339][ C1] R13: 0000000000000000 R14: ffff888047bc2ce8 R15: 0000000000000000 [ 307.175205][ C1] FS: 0000000000000000(0000) GS:ffff88802cd00000(0000) knlGS:0000000000000000 [ 307.196197][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.214297][ C1] CR2: 00007f1911c4edb4 CR3: 0000000026ff5000 CR4: 0000000000350ee0 [ 307.236151][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 307.253350][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 307.271585][ C1] Call Trace: [ 307.278632][ C1] [ 307.284234][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 307.295109][ C1] hsr_announce+0x122/0x320 [ 307.304318][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 307.312861][ T28] slab_out_of_memory: 95549 callbacks suppressed [ 307.312872][ T28] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.312898][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.312908][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.312915][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.312923][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.312946][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.312953][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.312977][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.312984][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313008][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313014][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313020][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313027][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313050][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313057][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313066][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313072][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313150][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313157][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313166][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313172][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313208][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313215][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313221][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313227][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313250][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313257][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313263][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313269][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313291][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313298][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313304][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313310][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.313333][ T9794] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 307.313339][ T9794] cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0 [ 307.313345][ T9794] node 0: slabs: 7186, objs: 258696, free: 0 [ 307.313351][ T9794] node 1: slabs: 75614, objs: 2722104, free: 117 [ 307.315634][ C1] call_timer_fn+0x1a5/0x6b0 [ 307.322530][ T28] cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0 [ 307.322530][ T28] node 0: slabs: 94, objs: 2285, free: 0 [ 307.322530][ T28] node 1: slabs: 988, objs: 23322, free: 49 [ 307.968498][ C1] ? add_timer_on+0x4a0/0x4a0 [ 307.977802][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 307.991196][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 308.002163][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 308.014697][ C1] __run_timers.part.0+0x67c/0xa50 [ 308.027425][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 308.039495][ C1] ? sched_clock_cpu+0x17b/0x1f0 [ 308.051763][ C1] run_timer_softirq+0xb3/0x1d0 [ 308.063546][ C1] __do_softirq+0x2a0/0x9f6 [ 308.075791][ C1] asm_call_irq_on_stack+0xf/0x20 [ 308.088002][ C1] [ 308.093825][ C1] do_softirq_own_stack+0xaa/0xd0 [ 308.104856][ C1] irq_exit_rcu+0x132/0x200 [ 308.118292][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 308.144407][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 308.177003][ C1] RIP: 0010:default_idle+0x13/0x20 [ 308.202752][ C1] Code: c9 f8 e9 48 ff ff ff e8 3b a9 fd ff cc cc cc cc cc cc cc cc cc cc cc e8 cb d2 8d f8 e9 07 00 00 00 0f 00 2d bf c3 5d 00 fb f4 66 90 66 2e 0f 1f 84 00 00 00 00 00 41 54 be 08 00 00 00 53 65 [ 308.286227][ C1] RSP: 0000:ffffc900003ffdf8 EFLAGS: 00000202 [ 308.315002][ C1] RAX: 00000000000d85fb RBX: ffff888010862180 RCX: 1ffffffff19d9099 [ 308.338945][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 308.363073][ C1] RBP: ffffed100210c430 R08: 0000000000000001 R09: 0000000000000001 [ 308.384852][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 308.411178][ C1] R13: 0000000000000001 R14: ffffffff8cecbe88 R15: 0000000000000000 [ 308.433053][ C1] ? default_idle+0x5/0x20 [ 308.447941][ C1] default_idle_call+0x6a/0x90 [ 308.461218][ C1] do_idle+0x3fa/0x590 [ 308.467967][ C1] ? arch_cpu_idle_exit+0x40/0x40 [ 308.479639][ C1] cpu_startup_entry+0x14/0x20 [ 308.489316][ C1] start_secondary+0x266/0x340 [ 308.500483][ C1] ? set_cpu_sibling_map+0x2460/0x2460 [ 308.511330][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 308.521790][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 308.531688][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.10.0-rc5-syzkaller #0 [ 308.531688][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 308.531688][ C1] Call Trace: [ 308.531688][ C1] [ 308.531688][ C1] dump_stack+0x107/0x163 [ 308.531688][ C1] panic+0x306/0x73d [ 308.531688][ C1] ? __warn_printk+0xf3/0xf3 [ 308.531688][ C1] ? __warn.cold+0x1a/0x44 [ 308.531688][ C1] ? __warn+0xf1/0x210 [ 308.531688][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 308.531688][ C1] __warn.cold+0x35/0x44 [ 308.531688][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 308.531688][ C1] report_bug+0x1bd/0x210 [ 308.531688][ C1] handle_bug+0x3c/0x60 [ 308.531688][ C1] exc_invalid_op+0x14/0x40 [ 308.531688][ C1] asm_exc_invalid_op+0x12/0x20 [ 308.531688][ C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 308.531688][ C1] Code: 04 31 ff 89 de e8 77 77 cd f8 84 db 0f 85 8b fd ff ff e8 5a 7f cd f8 48 c7 c7 60 f7 6b 8a c6 05 d1 1e 36 04 01 e8 e3 fd 09 00 <0f> 0b e9 6c fd ff ff e8 3b 7f cd f8 41 be 42 00 00 00 ba 01 00 00 [ 308.531688][ C1] RSP: 0000:ffffc900004c8c70 EFLAGS: 00010286 [ 308.531688][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 308.531688][ C1] RDX: ffff888010862180 RSI: ffffffff8158d875 RDI: fffff52000099180 [ 308.531688][ C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc4747 [ 308.531688][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801a517000 [ 308.531688][ C1] R13: 0000000000000000 R14: ffff888047bc2ce8 R15: 0000000000000000 [ 308.531688][ C1] ? vprintk_func+0x95/0x1e0 [ 308.531688][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 308.531688][ C1] hsr_announce+0x122/0x320 [ 308.531688][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 308.531688][ C1] call_timer_fn+0x1a5/0x6b0 [ 308.531688][ C1] ? add_timer_on+0x4a0/0x4a0 [ 308.531688][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 308.531688][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 308.531688][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 308.531688][ C1] __run_timers.part.0+0x67c/0xa50 [ 308.531688][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 308.531688][ C1] ? sched_clock_cpu+0x17b/0x1f0 [ 308.531688][ C1] run_timer_softirq+0xb3/0x1d0 [ 308.531688][ C1] __do_softirq+0x2a0/0x9f6 [ 308.531688][ C1] asm_call_irq_on_stack+0xf/0x20 [ 308.531688][ C1] [ 308.531688][ C1] do_softirq_own_stack+0xaa/0xd0 [ 308.531688][ C1] irq_exit_rcu+0x132/0x200 [ 308.531688][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 308.531688][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 308.531688][ C1] RIP: 0010:default_idle+0x13/0x20 [ 308.531688][ C1] Code: c9 f8 e9 48 ff ff ff e8 3b a9 fd ff cc cc cc cc cc cc cc cc cc cc cc e8 cb d2 8d f8 e9 07 00 00 00 0f 00 2d bf c3 5d 00 fb f4 66 90 66 2e 0f 1f 84 00 00 00 00 00 41 54 be 08 00 00 00 53 65 [ 308.531688][ C1] RSP: 0000:ffffc900003ffdf8 EFLAGS: 00000202 [ 308.531688][ C1] RAX: 00000000000d85fb RBX: ffff888010862180 RCX: 1ffffffff19d9099 [ 308.531688][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 308.531688][ C1] RBP: ffffed100210c430 R08: 0000000000000001 R09: 0000000000000001 [ 308.531688][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 308.531688][ C1] R13: 0000000000000001 R14: ffffffff8cecbe88 R15: 0000000000000000 [ 308.531688][ C1] ? default_idle+0x5/0x20 [ 308.531688][ C1] default_idle_call+0x6a/0x90 [ 308.531688][ C1] do_idle+0x3fa/0x590 [ 308.531688][ C1] ? arch_cpu_idle_exit+0x40/0x40 [ 308.531688][ C1] cpu_startup_entry+0x14/0x20 [ 308.531688][ C1] start_secondary+0x266/0x340 [ 308.531688][ C1] ? set_cpu_sibling_map+0x2460/0x2460 [ 308.531688][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 308.531688][ C1] Kernel Offset: disabled [ 308.531688][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:16:52 Registers: info registers vcpu 0 RAX=000000000009f984 RBX=ffffffff877569f0 RCX=ffffffff8155b947 RDX=0000000000000000 RSI=0000000000000102 RDI=0000000000000001 RBP=ffff88802cc24780 RSP=ffffc90000007e18 R8 =0000000000000001 R9 =ffffffff8ecc475f R10=fffffbfff1d988eb R11=0000000000000001 R12=ffffc90000007ea8 R13=0000000000000000 R14=dffffc0000000000 R15=ffff88802cc24780 RIP=ffffffff88e80f15 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f427da37518 CR3=000000004a8f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000052 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff840e8a6c RDI=ffffffff8fadaae0 RBP=ffffffff8fadaaa0 RSP=ffffc900004c85f0 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff1f5b5a7 R14=fffffbfff1f5b55e R15=dffffc0000000000 RIP=ffffffff840e8ac0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1911c4edb4 CR3=0000000026ff5000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=205b5d3432363031332e32323220205b XMM01=00000000000000000000000000000000 XMM02=00000000000001210000000000435455 XMM03=63203a302e313a312d35206469686273 XMM04=75205d3832542020205b5d3039353431 XMM05=3039353431382e39313220205b3e333c XMM06=303d73657220303834323d6f6e692022 XMM07=00000000000000002000000000000020 XMM08=ffffff0000000000ff000000000000ff XMM09=00000000000000000000000000000000 XMM10=ffffff00000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=0000000000000093 RCX=ffffffff83d09e5f RDX=ffff8880125f0000 RSI=ffffffff83d09f24 RDI=ffffffff8b45a038 RBP=ffffffff8b45a020 RSP=ffffc9002a557aa8 R8 =0000000000000000 R9 =ffffffff8ecc475f R10=000000000000000a R11=dffffc0000000000 R12=000000000000000a R13=0000000000000093 R14=0000000000000000 R15=0000000000000024 RIP=ffffffff81563510 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ce00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000050 CR3=0000000063d2b000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a29307830202c307830202c307220 XMM01=697475636578652037323a35313a3530 XMM02=524543415254505f5445535f5250246c XMM03=746372700a3a30206d6172676f727020 XMM04=676e697475636578652037323a35313a XMM05=697475636578652037323a35313a3530 XMM06=66666666666666666666666666666678 XMM07=30202c31366436313639357830285245 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=00000000000dca9d RBX=ffff888010888000 RCX=1ffffffff19d9099 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed1002111000 RSP=ffffc9000041fdf8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffffffff8cecbe88 R15=0000000000000000 RIP=ffffffff88e80043 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cf00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000050 CR3=0000000063d2b000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=32323232323232323232323232323232 XMM02=ffffffffffffffffffffff00ffffffff XMM03=000000ff0000000000ff000000000000 XMM04=40404040404040404040404040404040 XMM05=5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=0000ff00000000ffff00000000000000 XMM09=00000000000000000000000000000000 XMM10=000000ff00000000ff00000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000