[ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. Starting Load/Save RF Kill Switch Status... [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2020/10/20 09:29:22 fuzzer started 2020/10/20 09:29:23 dialing manager at 10.128.0.26:38919 2020/10/20 09:29:23 syscalls: 3450 2020/10/20 09:29:23 code coverage: enabled 2020/10/20 09:29:23 comparison tracing: enabled 2020/10/20 09:29:23 extra coverage: enabled 2020/10/20 09:29:23 setuid sandbox: enabled 2020/10/20 09:29:23 namespace sandbox: enabled 2020/10/20 09:29:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/20 09:29:23 fault injection: enabled 2020/10/20 09:29:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/20 09:29:23 net packet injection: enabled 2020/10/20 09:29:23 net device setup: enabled 2020/10/20 09:29:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/20 09:29:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/20 09:29:23 USB emulation: enabled 2020/10/20 09:29:23 hci packet injection: enabled 2020/10/20 09:29:23 wifi device emulation: enabled 09:31:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000003ac0)=@tipc, &(0x7f0000003b40)=0x80) 09:31:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f00000024c0)=@newtfilter={0x24, 0x2c, 0xb35}, 0x24}}, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 09:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000140)) 09:31:20 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) writev(r0, 0x0, 0x0) 09:31:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc}]}, 0x38}}, 0x40080) 09:31:21 executing program 5: pipe(&(0x7f0000000d00)) syzkaller login: [ 182.128434][ T6881] IPVS: ftp: loaded support on port[0] = 21 [ 182.293033][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 182.362884][ T6883] IPVS: ftp: loaded support on port[0] = 21 [ 182.654910][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.663321][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.673647][ T6881] device bridge_slave_0 entered promiscuous mode [ 182.684876][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.693213][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.702311][ T6881] device bridge_slave_1 entered promiscuous mode [ 182.767667][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 182.787978][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.871043][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.952199][ T6887] IPVS: ftp: loaded support on port[0] = 21 [ 182.961584][ T6881] team0: Port device team_slave_0 added [ 182.992676][ T6881] team0: Port device team_slave_1 added [ 183.057372][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.093561][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.103790][ T6883] device bridge_slave_0 entered promiscuous mode [ 183.143266][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.156852][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.168299][ T6883] device bridge_slave_1 entered promiscuous mode [ 183.186749][ T6889] IPVS: ftp: loaded support on port[0] = 21 [ 183.197397][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.205804][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.232166][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.247860][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.255020][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.282493][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.365159][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.393343][ T6881] device hsr_slave_0 entered promiscuous mode [ 183.402023][ T6881] device hsr_slave_1 entered promiscuous mode [ 183.411682][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.467067][ T6883] team0: Port device team_slave_0 added [ 183.493605][ T6883] team0: Port device team_slave_1 added [ 183.615099][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 183.635748][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.644944][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.674667][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.692305][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.699409][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.725959][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.924615][ T6883] device hsr_slave_0 entered promiscuous mode [ 183.925882][ T7102] IPVS: ftp: loaded support on port[0] = 21 [ 183.955506][ T6883] device hsr_slave_1 entered promiscuous mode [ 183.975740][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.985191][ T6883] Cannot create hsr debugfs directory [ 184.017602][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 184.155285][ T2479] Bluetooth: hci0: command 0x0409 tx timeout [ 184.161411][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.168575][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.177876][ T6887] device bridge_slave_0 entered promiscuous mode [ 184.214175][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.222198][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.232086][ T6887] device bridge_slave_1 entered promiscuous mode [ 184.271142][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.278227][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.286974][ T6889] device bridge_slave_0 entered promiscuous mode [ 184.304928][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.320367][ T6881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.343515][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.351215][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.361538][ T6889] device bridge_slave_1 entered promiscuous mode [ 184.385648][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.394864][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 184.403265][ T6881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.418408][ T6881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.436110][ T6881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.484659][ T6887] team0: Port device team_slave_0 added [ 184.513139][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.524191][ T6887] team0: Port device team_slave_1 added [ 184.559986][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.611757][ T6889] team0: Port device team_slave_0 added [ 184.633590][ T6889] team0: Port device team_slave_1 added [ 184.641602][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.649032][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.678213][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.691551][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.699053][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.727121][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.818074][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.834088][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.865956][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.876651][ T2479] Bluetooth: hci3: command 0x0409 tx timeout [ 184.896374][ T6887] device hsr_slave_0 entered promiscuous mode [ 184.904504][ T6887] device hsr_slave_1 entered promiscuous mode [ 184.912256][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.920527][ T6887] Cannot create hsr debugfs directory [ 184.951254][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.958233][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.986942][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.064127][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 185.081048][ T6883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.104746][ T6883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.111555][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 185.125411][ T6883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.153192][ T6889] device hsr_slave_0 entered promiscuous mode [ 185.163416][ T6889] device hsr_slave_1 entered promiscuous mode [ 185.170643][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.178247][ T6889] Cannot create hsr debugfs directory [ 185.204488][ T6883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.478194][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.491594][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.500961][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.508941][ T7102] device bridge_slave_0 entered promiscuous mode [ 185.553217][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.562692][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.571763][ T7102] device bridge_slave_1 entered promiscuous mode [ 185.586646][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.603790][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.621349][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.657079][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.675669][ T6887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.686809][ T6887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.706434][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.715396][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.725683][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.733028][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.751394][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.762895][ T6887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.775778][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.824939][ T6887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.837435][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 185.846016][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.855860][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.864534][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.871709][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.886805][ T6889] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.906780][ T7102] team0: Port device team_slave_0 added [ 185.919676][ T7102] team0: Port device team_slave_1 added [ 185.940970][ T6889] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.956835][ T6889] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.972993][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.982457][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.992199][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.001140][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.010329][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.019115][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.027570][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.036607][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.068275][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.076020][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.105532][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.123946][ T6889] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.144963][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.155335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.166870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.179214][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.186177][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.214846][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.229143][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 186.242514][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.255886][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.325339][ T7102] device hsr_slave_0 entered promiscuous mode [ 186.333211][ T7102] device hsr_slave_1 entered promiscuous mode [ 186.342095][ T7102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.350030][ T7102] Cannot create hsr debugfs directory [ 186.360122][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.368001][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.401685][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.431594][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.443632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.464735][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.469399][ T7618] Bluetooth: hci1: command 0x041b tx timeout [ 186.492036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.504643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.513775][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.520910][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.534977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.543629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.556837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.566192][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.573323][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.662268][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.731949][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.743824][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.754988][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.766520][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.776835][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.817408][ T6883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.829887][ T6883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.854159][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.863695][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.873327][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.882435][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.892244][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.901364][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.913707][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.923232][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.932418][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.941941][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.948814][ T2479] Bluetooth: hci3: command 0x041b tx timeout [ 186.950457][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.963702][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.978937][ T6881] device veth0_vlan entered promiscuous mode [ 186.996486][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.039804][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.067837][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.091954][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.101241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.109876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.117367][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.128338][ T6881] device veth1_vlan entered promiscuous mode [ 187.150247][ T7102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.169429][ T7102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.184082][ T7102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.191905][ T7618] Bluetooth: hci4: command 0x041b tx timeout [ 187.206247][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.215890][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.225072][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.234200][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.241363][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.250063][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.258868][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.267282][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.274404][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.283213][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.303981][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.325483][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.332660][ T7102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.347033][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.356400][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.365240][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.376503][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.384718][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.447797][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.456555][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.467185][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.478946][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.487361][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.496307][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.505414][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.514836][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.523610][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.532475][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.541344][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.548429][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.556374][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.565768][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.574438][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.581652][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.592427][ T6881] device veth0_macvtap entered promiscuous mode [ 187.617129][ T6887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.630199][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.644589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.657186][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.666091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.678336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.687351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.696656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.710176][ T6881] device veth1_macvtap entered promiscuous mode [ 187.746552][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.779567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.788375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.801986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.812571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.825510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.868260][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.877893][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.887134][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.895659][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.912879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.924185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.932952][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.942704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.952642][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 187.954556][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.983266][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.995419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.006412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.020051][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.027695][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.037299][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.059938][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.099322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.107621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.120968][ T6881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.130539][ T6881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.140013][ T6881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.152070][ T6881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.190259][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.198060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.207812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.216568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.224337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.243545][ T6883] device veth0_vlan entered promiscuous mode [ 188.278652][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.287575][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.318677][ T2646] Bluetooth: hci0: command 0x040f tx timeout [ 188.344553][ T6883] device veth1_vlan entered promiscuous mode [ 188.402605][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.417787][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.434335][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.447285][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.466418][ T6887] device veth0_vlan entered promiscuous mode [ 188.501550][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.515025][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.527554][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.548950][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 188.569505][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.578205][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.605262][ T6887] device veth1_vlan entered promiscuous mode [ 188.619373][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.627396][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.645914][ T6883] device veth0_macvtap entered promiscuous mode [ 188.694662][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.711210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.720630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.728969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.736778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.754091][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.783513][ T6883] device veth1_macvtap entered promiscuous mode [ 188.807539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.817079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.826342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.836183][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.844825][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.851997][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.867978][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.884731][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.894158][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.903156][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.912449][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.921360][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.928418][ T7977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.937238][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.973891][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 188.984617][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.999626][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.016372][ T6887] device veth0_macvtap entered promiscuous mode [ 189.026303][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.036607][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.041028][ T7880] Bluetooth: hci3: command 0x040f tx timeout [ 189.045620][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.059945][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.071008][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.079783][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.088229][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.097712][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.107236][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.115923][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.124213][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.136277][ T6889] device veth0_vlan entered promiscuous mode [ 189.149767][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.169462][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.189278][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.219332][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 189.239496][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.264926][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.273113][ T2646] Bluetooth: hci4: command 0x040f tx timeout 09:31:28 executing program 0: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) [ 189.297836][ T6887] device veth1_macvtap entered promiscuous mode [ 189.324665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.335751][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.357559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.385573][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 09:31:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 189.419225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.427716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.460554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.522715][ T6883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.538906][ T6883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.547640][ T6883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 09:31:28 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0xb, 0x0, 0x4) [ 189.585431][ T6883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.608951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.617584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 09:31:28 executing program 0: clone3(&(0x7f0000003f40)={0x1800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 189.662302][ T6889] device veth1_vlan entered promiscuous mode [ 189.693186][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.708891][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.724528][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.765291][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.776174][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.787526][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.800473][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 09:31:29 executing program 0: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) [ 189.853535][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.887389][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.910788][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.918316][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.946227][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:31:29 executing program 0: r0 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x3a, 0x1d, 0x0, 0x0) [ 189.970391][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.000030][ T7880] Bluetooth: hci5: command 0x040f tx timeout [ 190.006150][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.021641][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.034316][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.087121][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.103922][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:31:29 executing program 0: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) [ 190.131072][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.148322][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.165945][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.183540][ T6887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.195409][ T6887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.220469][ T6887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.257102][ T6887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.283077][ T6889] device veth0_macvtap entered promiscuous mode [ 190.362218][ T6889] device veth1_macvtap entered promiscuous mode [ 190.388560][ T7880] Bluetooth: hci0: command 0x0419 tx timeout [ 190.490188][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.520447][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.541955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.569265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.577310][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.600734][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.615642][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.629366][ T7880] Bluetooth: hci1: command 0x0419 tx timeout [ 190.672512][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.689961][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.705297][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.732467][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.745221][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.777933][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.787352][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.798283][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.807555][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.817480][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.831994][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.842770][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.853505][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.863706][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.875956][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.887299][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.901278][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.933847][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.950563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.961442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.975411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.011532][ T6889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.020368][ T6889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.029702][ T6889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.038645][ T6889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.063935][ T6840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.068613][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.076424][ T6840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.094428][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.103213][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.118203][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.136220][ T7880] Bluetooth: hci3: command 0x0419 tx timeout [ 191.149603][ T7102] device veth0_vlan entered promiscuous mode [ 191.157596][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.166479][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.175159][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.183589][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.258141][ T7102] device veth1_vlan entered promiscuous mode [ 191.304010][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.323816][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.359303][ T2646] Bluetooth: hci4: command 0x0419 tx timeout [ 191.379310][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.397465][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 09:31:30 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) mmap$snddsp(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r0, 0x0) [ 191.424349][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.522882][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.545768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.556020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.564081][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.594358][ T7102] device veth0_macvtap entered promiscuous mode [ 191.608816][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.619356][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.651820][ T7102] device veth1_macvtap entered promiscuous mode [ 191.718177][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.786042][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.809034][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.830416][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.841945][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.853765][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.864693][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.898884][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.923599][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.936496][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.946856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.958123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.982802][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.004409][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.024662][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.037665][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.056650][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.068316][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.080498][ T7883] Bluetooth: hci5: command 0x0419 tx timeout [ 192.096798][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.108340][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.132495][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.159663][ T7102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.168587][ T7102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.177283][ T7102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.195343][ T7102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.209334][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.221688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.341146][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.351006][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.368844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.401714][ T6840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.415825][ T6840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.427572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.685964][ T8136] IPVS: ftp: loaded support on port[0] = 21 [ 195.881283][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 195.955559][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.962773][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.971600][ T8136] device bridge_slave_0 entered promiscuous mode [ 195.981273][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.989634][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.997395][ T8136] device bridge_slave_1 entered promiscuous mode [ 196.024344][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.036054][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.068011][ T8136] team0: Port device team_slave_0 added [ 196.076933][ T8136] team0: Port device team_slave_1 added [ 196.098560][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.105959][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.132732][ T8136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.145379][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.155575][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.181890][ T8136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.215010][ T8136] device hsr_slave_0 entered promiscuous mode [ 196.221884][ T8136] device hsr_slave_1 entered promiscuous mode [ 196.228891][ T8136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.236467][ T8136] Cannot create hsr debugfs directory [ 196.363724][ T8136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.376236][ T8136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.386968][ T8136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.400185][ T8136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.432054][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.439294][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.447207][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.454357][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.516542][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.534519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.544410][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.553276][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.562568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 196.577454][ T8136] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.595737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.605184][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.612436][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.637938][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.647125][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.654337][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.680336][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.689436][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.697858][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.707494][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.726691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.740633][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.763704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.772993][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.786465][ T8136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.815150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.841571][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.850372][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.857978][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.869596][ T8136] device veth0_vlan entered promiscuous mode [ 196.886577][ T8136] device veth1_vlan entered promiscuous mode [ 196.916193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.926182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.938423][ T8136] device veth0_macvtap entered promiscuous mode [ 196.951056][ T8136] device veth1_macvtap entered promiscuous mode [ 196.972606][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.983714][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.996299][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.006837][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.016772][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.029230][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.039149][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.049649][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.059986][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.070532][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.081920][ T8136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.091737][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.100553][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.109060][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.117831][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.130657][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.143162][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.153905][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.165921][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.175849][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.186384][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.196583][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.207410][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.217368][ T8136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.227907][ T8136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.240786][ T8136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.250498][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.259790][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.272813][ T8136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.283852][ T8136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.295123][ T8136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.304000][ T8136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.399880][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.407949][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.477322][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.492960][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.502313][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.514057][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:31:36 executing program 2: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) 09:31:36 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:31:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x6, 0x0, 0xe) 09:31:36 executing program 1: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x5, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:31:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x4, 0x0, 0x4) 09:31:36 executing program 5: select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x0, 0x2710}) [ 197.668940][ T7977] Bluetooth: hci2: command 0x0409 tx timeout 09:31:36 executing program 3: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 09:31:36 executing program 4: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 09:31:36 executing program 5: fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) 09:31:37 executing program 0: syslog(0x4, &(0x7f00000000c0)=""/236, 0xec) 09:31:37 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x42, 0x0, 0x4) 09:31:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 09:31:37 executing program 3: select(0x0, 0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0xea60}) 09:31:37 executing program 4: clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 197.978435][ T7977] usb 2-1: new high-speed USB device number 2 using dummy_hcd 09:31:37 executing program 2: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) [ 198.229019][ T7977] usb 2-1: Using ep0 maxpacket: 32 [ 198.358593][ T7977] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 198.367634][ T7977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.386218][ T7977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.400424][ T7977] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 198.411935][ T7977] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 198.599058][ T7977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.608137][ T7977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.639755][ T7977] usb 2-1: Product: syz [ 198.649377][ T7977] usb 2-1: Manufacturer: syz [ 198.672383][ T7977] usb 2-1: SerialNumber: syz [ 198.998524][ T7977] usb 2-1: 0:2 : does not exist [ 199.019327][ T7977] usb 2-1: USB disconnect, device number 2 [ 199.698454][ T2646] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.748437][ T7977] Bluetooth: hci2: command 0x041b tx timeout [ 199.948312][ T2646] usb 2-1: Using ep0 maxpacket: 32 [ 200.068392][ T2646] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.077221][ T2646] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.089004][ T2646] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.099646][ T2646] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 200.111511][ T2646] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.278417][ T2646] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.287605][ T2646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.296620][ T2646] usb 2-1: Product: syz [ 200.301550][ T2646] usb 2-1: Manufacturer: syz [ 200.307099][ T2646] usb 2-1: SerialNumber: syz 09:31:39 executing program 1: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002980)) 09:31:39 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:31:39 executing program 4: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x2de, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:31:39 executing program 0: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 09:31:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x12, r0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 09:31:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ax25={0x3, @default}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x4}) [ 200.638549][ T2646] usb 2-1: 0:2 : does not exist 09:31:39 executing program 5: socket(0x10, 0x2, 0x200) [ 200.685619][ T2646] usb 2-1: USB disconnect, device number 3 [ 200.719306][ T8459] [ 200.721809][ T8459] ============================= [ 200.732406][ T8459] WARNING: suspicious RCU usage 09:31:39 executing program 0: syz_genetlink_get_family_id$netlbl_cipso(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000005280)='gtp\x00') 09:31:39 executing program 2: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 09:31:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x3c, 0x0, 0x0) [ 200.758676][ T8459] 5.9.0-next-20201016-syzkaller #0 Not tainted [ 200.798309][ T8459] ----------------------------- [ 200.820766][ T8459] include/linux/cgroup.h:494 suspicious rcu_dereference_check() usage! 09:31:40 executing program 1: clone3(0x0, 0x0) clone3(&(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {0x22}, &(0x7f0000000140)=""/208, 0xd0, &(0x7f0000000240)=""/71, &(0x7f0000000600)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) [ 200.862165][ T8459] [ 200.862165][ T8459] other info that might help us debug this: [ 200.862165][ T8459] [ 200.883299][ T8481] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8481 [ 200.892800][ T8481] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 200.899424][ T8481] CPU: 0 PID: 8481 Comm: syz-executor.0 Not tainted 5.9.0-next-20201016-syzkaller #0 09:31:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x1f, 0x0, 0x0) [ 200.908993][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.919055][ T8481] Call Trace: [ 200.922364][ T8481] dump_stack+0x198/0x1fb [ 200.926718][ T8481] check_preemption_disabled+0x128/0x130 [ 200.932372][ T8481] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 200.938135][ T8481] trace_hardirqs_on+0x5b/0x1c0 [ 200.943007][ T8481] __bad_area_nosemaphore+0xc6/0x4f0 [ 200.948321][ T8481] do_user_addr_fault+0x852/0xbf0 [ 200.953373][ T8481] exc_page_fault+0xa8/0x190 [ 200.957970][ T8481] ? asm_exc_page_fault+0x8/0x30 [ 200.962910][ T8481] asm_exc_page_fault+0x1e/0x30 [ 200.967761][ T8481] RIP: 0033:0x43c650 [ 200.971664][ T8481] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 200.991278][ T8481] RSP: 002b:00007f98a3fdaba8 EFLAGS: 00010246 [ 200.997363][ T8481] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 09:31:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x21, 0x0, 0x4) [ 201.005348][ T8481] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 201.013335][ T8481] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f98a3fdabb0 [ 201.021321][ T8481] R10: 0000000000000000 R11: 000000000000000f R12: 00007f98a3fdabf0 [ 201.029309][ T8481] R13: 00007fff94a6a3af R14: 00007f98a3fdc9c0 R15: 000000000118bf2c [ 201.040147][ T8481] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8481 [ 201.050815][ T8481] caller is lockdep_hardirqs_on+0x34/0x110 [ 201.056640][ T8481] CPU: 0 PID: 8481 Comm: syz-executor.0 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 201.066090][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.076135][ T8481] Call Trace: [ 201.079426][ T8481] dump_stack+0x198/0x1fb [ 201.083747][ T8481] check_preemption_disabled+0x128/0x130 [ 201.089367][ T8481] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 201.094813][ T8481] lockdep_hardirqs_on+0x34/0x110 [ 201.099825][ T8481] __bad_area_nosemaphore+0xc6/0x4f0 [ 201.105100][ T8481] do_user_addr_fault+0x852/0xbf0 [ 201.110117][ T8481] exc_page_fault+0xa8/0x190 [ 201.114692][ T8481] ? asm_exc_page_fault+0x8/0x30 [ 201.119611][ T8481] asm_exc_page_fault+0x1e/0x30 [ 201.124447][ T8481] RIP: 0033:0x43c650 [ 201.128336][ T8481] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 201.147934][ T8481] RSP: 002b:00007f98a3fdaba8 EFLAGS: 00010246 [ 201.153987][ T8481] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 201.161943][ T8481] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 201.169899][ T8481] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f98a3fdabb0 [ 201.177856][ T8481] R10: 0000000000000000 R11: 000000000000000f R12: 00007f98a3fdabf0 [ 201.185813][ T8481] R13: 00007fff94a6a3af R14: 00007f98a3fdc9c0 R15: 000000000118bf2c [ 201.210467][ T8459] [ 201.210467][ T8459] rcu_scheduler_active = 2, debug_locks = 1 [ 201.219436][ T8459] no locks held by syz-executor.4/8459. [ 201.231597][ T8459] [ 201.231597][ T8459] stack backtrace: [ 201.260205][ T8459] CPU: 1 PID: 8459 Comm: syz-executor.4 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 201.269697][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.279759][ T8459] Call Trace: [ 201.283068][ T8459] dump_stack+0x198/0x1fb [ 201.287422][ T8459] io_init_identity+0x3a9/0x450 [ 201.292293][ T8459] io_uring_alloc_task_context+0x176/0x250 [ 201.298125][ T8459] io_uring_add_task_file+0x10d/0x180 [ 201.303512][ T8459] io_uring_setup+0x2727/0x3660 [ 201.308386][ T8459] ? io_sq_thread+0x1400/0x1400 [ 201.313245][ T8459] ? io_issue_sqe+0x3d80/0x3d80 [ 201.318117][ T8459] ? io_uring_poll+0x2a0/0x2a0 [ 201.322893][ T8459] ? put_timespec64+0xcb/0x120 [ 201.327682][ T8459] ? ns_to_timespec64+0xc0/0xc0 [ 201.332577][ T8459] ? check_preemption_disabled+0x50/0x130 [ 201.338310][ T8459] ? syscall_enter_from_user_mode+0x1d/0x60 [ 201.344221][ T8459] do_syscall_64+0x2d/0x70 [ 201.348655][ T8459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.354582][ T8459] RIP: 0033:0x45de59 [ 201.358494][ T8459] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.378107][ T8459] RSP: 002b:00007f0d337c8bf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 201.386532][ T8459] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 000000000045de59 [ 201.394515][ T8459] RDX: 0000000020ffb000 RSI: 0000000020000000 RDI: 00000000000002de [ 201.402495][ T8459] RBP: 000000000118bf78 R08: 00000000200000c0 R09: 00000000200000c0 09:31:40 executing program 3: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x7, 0x401, 0x3) [ 201.410472][ T8459] R10: 0000000020000080 R11: 0000000000000206 R12: 0000000020ffb000 [ 201.418453][ T8459] R13: 0000000020ffe000 R14: 00000000200000c0 R15: 0000000020000080 09:31:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x22, 0x0, 0x0) 09:31:40 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x30}]}) 09:31:40 executing program 2: r0 = socket(0xa, 0x1, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x40010001) 09:31:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 09:31:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x34}]}) [ 201.726236][ T8481] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8481 [ 201.736294][ T8481] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 201.743113][ T8481] CPU: 0 PID: 8481 Comm: syz-executor.0 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 201.752578][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.762645][ T8481] Call Trace: [ 201.765955][ T8481] dump_stack+0x198/0x1fb [ 201.770338][ T8481] check_preemption_disabled+0x128/0x130 [ 201.775999][ T8481] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 201.781739][ T8481] trace_hardirqs_on+0x5b/0x1c0 [ 201.786611][ T8481] __bad_area_nosemaphore+0xc6/0x4f0 [ 201.791923][ T8481] do_user_addr_fault+0x852/0xbf0 [ 201.796976][ T8481] exc_page_fault+0xa8/0x190 [ 201.801580][ T8481] ? asm_exc_page_fault+0x8/0x30 [ 201.806529][ T8481] asm_exc_page_fault+0x1e/0x30 [ 201.811388][ T8481] RIP: 0033:0x43c650 [ 201.815297][ T8481] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 201.834908][ T8481] RSP: 002b:00007f98a3fdaba8 EFLAGS: 00010246 [ 201.840990][ T8481] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 201.848971][ T8481] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 201.856950][ T8481] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f98a3fdabb0 [ 201.864927][ T8481] R10: 0000000000000000 R11: 000000000000000f R12: 00007f98a3fdabf0 [ 201.872909][ T8481] R13: 00007fff94a6a3af R14: 00007f98a3fdc9c0 R15: 000000000118bf2c [ 201.881008][ T8481] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8481 [ 201.890347][ T8481] caller is lockdep_hardirqs_on+0x34/0x110 [ 201.896167][ T8481] CPU: 0 PID: 8481 Comm: syz-executor.0 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 201.905622][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.915684][ T8481] Call Trace: [ 201.918987][ T8481] dump_stack+0x198/0x1fb [ 201.923350][ T8481] check_preemption_disabled+0x128/0x130 [ 201.928995][ T8481] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 201.934464][ T8481] lockdep_hardirqs_on+0x34/0x110 [ 201.939500][ T8481] __bad_area_nosemaphore+0xc6/0x4f0 [ 201.944802][ T8481] do_user_addr_fault+0x852/0xbf0 [ 201.949850][ T8481] exc_page_fault+0xa8/0x190 [ 201.954447][ T8481] ? asm_exc_page_fault+0x8/0x30 [ 201.959392][ T8481] asm_exc_page_fault+0x1e/0x30 [ 201.964247][ T8481] RIP: 0033:0x43c650 [ 201.968151][ T8481] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 201.987767][ T8481] RSP: 002b:00007f98a3fdaba8 EFLAGS: 00010246 [ 201.993850][ T8481] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 202.001831][ T8481] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 202.009814][ T8481] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f98a3fdabb0 [ 202.017797][ T8481] R10: 0000000000000000 R11: 000000000000000f R12: 00007f98a3fdabf0 09:31:41 executing program 0: r0 = fsopen(&(0x7f00000000c0)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 09:31:41 executing program 2: r0 = socket(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 09:31:41 executing program 5: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) 09:31:41 executing program 1: clone3(&(0x7f0000000640)={0x8000000, &(0x7f0000000080), &(0x7f00000000c0), 0x0, {0x22}, &(0x7f0000000140)=""/208, 0xd0, 0x0, 0x0}, 0x58) 09:31:41 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 09:31:41 executing program 4: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002980)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4004053) sync() [ 202.025781][ T8481] R13: 00007fff94a6a3af R14: 00007f98a3fdc9c0 R15: 000000000118bf2c [ 202.038675][ T12] Bluetooth: hci2: command 0x040f tx timeout [ 202.131365][ T8522] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8522 [ 202.140914][ T8522] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 202.148033][ T8522] CPU: 0 PID: 8522 Comm: syz-executor.3 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 202.157499][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.167586][ T8522] Call Trace: [ 202.170876][ T8522] dump_stack+0x198/0x1fb [ 202.175201][ T8522] check_preemption_disabled+0x128/0x130 [ 202.180940][ T8522] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 202.186665][ T8522] trace_hardirqs_on+0x5b/0x1c0 [ 202.191509][ T8522] __bad_area_nosemaphore+0xc6/0x4f0 [ 202.196785][ T8522] do_user_addr_fault+0x852/0xbf0 [ 202.201831][ T8522] exc_page_fault+0xa8/0x190 [ 202.206408][ T8522] ? asm_exc_page_fault+0x8/0x30 [ 202.211332][ T8522] asm_exc_page_fault+0x1e/0x30 [ 202.216164][ T8522] RIP: 0033:0x402497 [ 202.220047][ T8522] Code: 08 4c 89 0c 24 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 6c 24 18 4c 8b 64 24 10 4c 8b 7c 24 08 4c 8b 34 24 48 89 da e8 a9 b9 05 00 <8b> 73 04 48 89 c5 8b 13 8b 43 40 41 89 e8 4c 89 ef b9 11 80 00 00 [ 202.239651][ T8522] RSP: 002b:00007f1b79c17c00 EFLAGS: 00010286 [ 202.245711][ T8522] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 000000000045de59 [ 202.253670][ T8522] RDX: 0000000020ffb000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.261632][ T8522] RBP: 000000000118bf78 R08: 0000000000000000 R09: 0000000000000000 [ 202.269592][ T8522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020ffb000 [ 202.277549][ T8522] R13: 0000000020ff9000 R14: 0000000000000000 R15: 0000000000000000 [ 202.285818][ T8522] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8522 [ 202.295157][ T8522] caller is lockdep_hardirqs_on+0x34/0x110 [ 202.301034][ T8522] CPU: 0 PID: 8522 Comm: syz-executor.3 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 202.310508][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.320570][ T8522] Call Trace: [ 202.323878][ T8522] dump_stack+0x198/0x1fb [ 202.328234][ T8522] check_preemption_disabled+0x128/0x130 [ 202.333886][ T8522] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 202.339366][ T8522] lockdep_hardirqs_on+0x34/0x110 [ 202.344406][ T8522] __bad_area_nosemaphore+0xc6/0x4f0 [ 202.349712][ T8522] do_user_addr_fault+0x852/0xbf0 [ 202.354767][ T8522] exc_page_fault+0xa8/0x190 [ 202.359370][ T8522] ? asm_exc_page_fault+0x8/0x30 [ 202.364320][ T8522] asm_exc_page_fault+0x1e/0x30 [ 202.369180][ T8522] RIP: 0033:0x402497 [ 202.373096][ T8522] Code: 08 4c 89 0c 24 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 6c 24 18 4c 8b 64 24 10 4c 8b 7c 24 08 4c 8b 34 24 48 89 da e8 a9 b9 05 00 <8b> 73 04 48 89 c5 8b 13 8b 43 40 41 89 e8 4c 89 ef b9 11 80 00 00 [ 202.392716][ T8522] RSP: 002b:00007f1b79c17c00 EFLAGS: 00010286 [ 202.398802][ T8522] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 000000000045de59 [ 202.406790][ T8522] RDX: 0000000020ffb000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.414777][ T8522] RBP: 000000000118bf78 R08: 0000000000000000 R09: 0000000000000000 [ 202.422761][ T8522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020ffb000 09:31:41 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x2e, 0x0, 0x0) 09:31:41 executing program 2: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000040)=0xfff, 0x8, 0x1) [ 202.430748][ T8522] R13: 0000000020ff9000 R14: 0000000000000000 R15: 0000000000000000 [ 202.479064][ T8527] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/8527 [ 202.488728][ T8527] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 202.495246][ T8527] CPU: 0 PID: 8527 Comm: syz-executor.1 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 202.504731][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.514792][ T8527] Call Trace: [ 202.518098][ T8527] dump_stack+0x198/0x1fb [ 202.522448][ T8527] check_preemption_disabled+0x128/0x130 [ 202.528097][ T8527] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 202.533831][ T8527] trace_hardirqs_on+0x5b/0x1c0 [ 202.538697][ T8527] __bad_area_nosemaphore+0xc6/0x4f0 [ 202.544032][ T8527] do_user_addr_fault+0x852/0xbf0 [ 202.549088][ T8527] exc_page_fault+0xa8/0x190 [ 202.553687][ T8527] ? asm_exc_page_fault+0x8/0x30 [ 202.558630][ T8527] asm_exc_page_fault+0x1e/0x30 [ 202.563501][ T8527] RIP: 0033:0x0 [ 202.566966][ T8527] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. 09:31:41 executing program 4: r0 = socket(0x18, 0x0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x5, 0x0, 0x0) [ 202.574688][ T8527] RSP: 002b:0000000020000218 EFLAGS: 00010217 [ 202.580772][ T8527] RAX: 0000000000000000 RBX: 0000000000002000 RCX: 000000000045de59 [ 202.588751][ T8527] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000640 [ 202.596729][ T8527] RBP: 000000000118bf58 R08: 0000000000000000 R09: 0000000000000000 [ 202.604719][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 202.612709][ T8527] R13: 00007ffdd7d449cf R14: 00007f85c22879c0 R15: 000000000118bf2c [ 202.620812][ T8527] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/8527 [ 202.630155][ T8527] caller is lockdep_hardirqs_on+0x34/0x110 [ 202.635994][ T8527] CPU: 0 PID: 8527 Comm: syz-executor.1 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 202.645448][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.655515][ T8527] Call Trace: [ 202.658814][ T8527] dump_stack+0x198/0x1fb [ 202.663164][ T8527] check_preemption_disabled+0x128/0x130 [ 202.668808][ T8527] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 202.674279][ T8527] lockdep_hardirqs_on+0x34/0x110 09:31:41 executing program 1: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 202.679313][ T8527] __bad_area_nosemaphore+0xc6/0x4f0 [ 202.684731][ T8527] do_user_addr_fault+0x852/0xbf0 [ 202.689778][ T8527] exc_page_fault+0xa8/0x190 [ 202.694384][ T8527] ? asm_exc_page_fault+0x8/0x30 [ 202.699331][ T8527] asm_exc_page_fault+0x1e/0x30 [ 202.704185][ T8527] RIP: 0033:0x0 [ 202.707643][ T8527] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 202.715362][ T8527] RSP: 002b:0000000020000218 EFLAGS: 00010217 [ 202.721974][ T8527] RAX: 0000000000000000 RBX: 0000000000002000 RCX: 000000000045de59 [ 202.730067][ T8527] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000640 [ 202.738052][ T8527] RBP: 000000000118bf58 R08: 0000000000000000 R09: 0000000000000000 [ 202.746123][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 202.754110][ T8527] R13: 00007ffdd7d449cf R14: 00007f85c22879c0 R15: 000000000118bf2c 09:31:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x20000000) 09:31:42 executing program 5: syz_mount_image$bfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8}, &(0x7f0000000140), 0x0) 09:31:42 executing program 0: syz_mount_image$minix(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=ANY=[@ANYBLOB='Y'], &(0x7f00000013c0), 0x0) 09:31:42 executing program 2: r0 = socket(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x6, 0x0, 0x0) [ 202.927375][ T8541] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8541 [ 202.936833][ T8541] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 202.943489][ T8541] CPU: 0 PID: 8541 Comm: syz-executor.3 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 202.952952][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.963018][ T8541] Call Trace: [ 202.966328][ T8541] dump_stack+0x198/0x1fb [ 202.970684][ T8541] check_preemption_disabled+0x128/0x130 09:31:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x36, 0x0, 0x4) [ 202.976340][ T8541] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 202.982079][ T8541] trace_hardirqs_on+0x5b/0x1c0 [ 202.986951][ T8541] __bad_area_nosemaphore+0xc6/0x4f0 [ 202.992263][ T8541] do_user_addr_fault+0x852/0xbf0 [ 202.997315][ T8541] exc_page_fault+0xa8/0x190 [ 203.001920][ T8541] ? asm_exc_page_fault+0x8/0x30 [ 203.006873][ T8541] asm_exc_page_fault+0x1e/0x30 [ 203.011733][ T8541] RIP: 0033:0x402497 [ 203.015639][ T8541] Code: 08 4c 89 0c 24 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 6c 24 18 4c 8b 64 24 10 4c 8b 7c 24 08 4c 8b 34 24 48 89 da e8 a9 b9 05 00 <8b> 73 04 48 89 c5 8b 13 8b 43 40 41 89 e8 4c 89 ef b9 11 80 00 00 [ 203.015896][ T8545] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8545 [ 203.035250][ T8541] RSP: 002b:00007f1b79bf6c00 EFLAGS: 00010286 [ 203.035268][ T8541] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 000000000045de59 [ 203.035277][ T8541] RDX: 0000000020ffb000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.035287][ T8541] RBP: 000000000118c020 R08: 0000000000000000 R09: 0000000000000000 [ 203.035298][ T8541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020ffb000 [ 203.035307][ T8541] R13: 0000000020ff9000 R14: 0000000000000000 R15: 0000000000000000 [ 203.091117][ T8545] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 203.097656][ T8545] CPU: 1 PID: 8545 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 203.107111][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.117173][ T8545] Call Trace: [ 203.120477][ T8545] dump_stack+0x198/0x1fb [ 203.124826][ T8545] check_preemption_disabled+0x128/0x130 [ 203.130472][ T8545] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 203.136205][ T8545] trace_hardirqs_on+0x5b/0x1c0 [ 203.141071][ T8545] __bad_area_nosemaphore+0xc6/0x4f0 [ 203.146993][ T8545] do_user_addr_fault+0x852/0xbf0 [ 203.152040][ T8545] exc_page_fault+0xa8/0x190 [ 203.156647][ T8545] ? asm_exc_page_fault+0x8/0x30 [ 203.161595][ T8545] asm_exc_page_fault+0x1e/0x30 [ 203.166453][ T8545] RIP: 0033:0x43c496 [ 203.170361][ T8545] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 203.189984][ T8545] RSP: 002b:00007f922f5d5a88 EFLAGS: 00010293 [ 203.196070][ T8545] RAX: 0000000000000000 RBX: 00007f922f5d5b20 RCX: 0000000000000000 [ 203.204057][ T8545] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 203.212037][ T8545] RBP: 00007f922f5d5ae0 R08: 0000000000000000 R09: 0000000000000000 [ 203.220020][ T8545] R10: 00007f922f5d69d0 R11: 0000000000000246 R12: 0000000000000000 09:31:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback=0x7f00000d}]}, &(0x7f00000000c0)=0x10) [ 203.228004][ T8545] R13: 00000000200002c0 R14: 0000000000000000 R15: 0000000000000000 09:31:42 executing program 3: sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 09:31:42 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x41030, 0xffffffffffffffff, 0x0) 09:31:42 executing program 2: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 09:31:42 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x74}]}) 09:31:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x1f, 0x0, 0x0) 09:31:42 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000001580)='/dev/bsg\x00', 0x80800, 0x0) 09:31:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x16, 0x0, 0x4) 09:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 09:31:42 executing program 3: syz_io_uring_setup(0x680f, &(0x7f0000001580)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001600), &(0x7f0000001640)) 09:31:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x21, 0x0, 0x0) 09:31:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x4, 0x0, 0x0) 09:31:42 executing program 2: syz_io_uring_setup(0x2b80, &(0x7f0000000000)={0x0, 0x0, 0x6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:31:42 executing program 5: sync() clone3(&(0x7f0000003f40)={0x1800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:31:42 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/bsg\x00', 0x2, 0x0) 09:31:43 executing program 0: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20048880) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sync() 09:31:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0)='IPVS\x00') 09:31:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x10, 0x0, 0x0) 09:31:43 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x61}]}) 09:31:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, 0x0, &(0x7f0000000200)=0x8) 09:31:43 executing program 0: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 09:31:43 executing program 2: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 204.068344][ T7977] Bluetooth: hci2: command 0x0419 tx timeout 09:31:43 executing program 3: socketpair(0x0, 0x0, 0x2fc01bac, &(0x7f0000002b40)) 09:31:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4010) 09:31:43 executing program 1: syz_io_uring_setup(0x2793, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 09:31:43 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x6}, {}]}) 09:31:43 executing program 0: clone3(&(0x7f0000000640)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:31:43 executing program 4: socket(0x18, 0x0, 0x3) 09:31:43 executing program 3: r0 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x29, 0x1d, 0x0, 0x0) 09:31:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x4b, 0x0, 0x0) 09:31:43 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sync() [ 204.528301][ T12] usb 3-1: new high-speed USB device number 2 using dummy_hcd 09:31:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x1c, 0x0, 0x0) 09:31:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x3, 0x0, 0x4) [ 204.790344][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 204.928504][ T12] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.937312][ T12] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.968100][ T12] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.977060][ T12] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 205.008099][ T12] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.218708][ T12] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.227775][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.248366][ T12] usb 3-1: Product: syz [ 205.252563][ T12] usb 3-1: Manufacturer: syz [ 205.257166][ T12] usb 3-1: SerialNumber: syz [ 205.578452][ T12] usb 3-1: 0:2 : does not exist [ 205.607471][ T12] usb 3-1: USB disconnect, device number 2 [ 206.298196][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 206.550390][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 206.673385][ T12] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.682180][ T12] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.698510][ T12] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.707491][ T12] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 206.726177][ T12] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 206.928288][ T12] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.937411][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.946513][ T12] usb 3-1: Product: syz [ 206.951423][ T12] usb 3-1: Manufacturer: syz [ 206.956034][ T12] usb 3-1: SerialNumber: syz 09:31:46 executing program 2: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:31:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0) 09:31:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x2a, 0x0, 0x0) 09:31:46 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 09:31:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7a, 0x0, &(0x7f0000000200)=0x29) 09:31:46 executing program 4: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x9, 0x3, 0x1) [ 207.278324][ T12] usb 3-1: 0:2 : does not exist [ 207.326027][ T12] usb 3-1: USB disconnect, device number 3 09:31:46 executing program 5: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x15) 09:31:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x5, 0x0, 0x4) 09:31:46 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 09:31:46 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 09:31:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x42) 09:31:46 executing program 5: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 207.758633][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.008212][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 208.128495][ T12] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 208.141783][ T12] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.165151][ T12] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.184071][ T12] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 208.207651][ T12] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.418402][ T12] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.435520][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.468396][ T12] usb 3-1: Product: syz [ 208.501128][ T12] usb 3-1: Manufacturer: syz [ 208.518749][ T12] usb 3-1: SerialNumber: syz [ 208.891410][ T12] usb 3-1: 0:2 : does not exist [ 208.920179][ T12] usb 3-1: USB disconnect, device number 4 09:31:48 executing program 2: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:31:48 executing program 4: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) 09:31:48 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12) 09:31:48 executing program 1: syslog(0xd57f4aed, 0x0, 0x0) 09:31:48 executing program 0: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x44fc6c79bb1413b, 0xffffffffffffffff, 0x8000000) 09:31:48 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) syz_io_uring_setup(0x680f, &(0x7f0000001580), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001600), &(0x7f0000001640)) [ 209.392230][ T8779] check_preemption_disabled: 12 callbacks suppressed [ 209.392245][ T8779] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8779 [ 209.408520][ T8779] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 209.415044][ T8779] CPU: 0 PID: 8779 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 209.424512][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.434577][ T8779] Call Trace: [ 209.437888][ T8779] dump_stack+0x198/0x1fb [ 209.442245][ T8779] check_preemption_disabled+0x128/0x130 [ 209.447901][ T8779] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 209.453643][ T8779] trace_hardirqs_on+0x5b/0x1c0 [ 209.458518][ T8779] __bad_area_nosemaphore+0xc6/0x4f0 [ 209.463841][ T8779] do_user_addr_fault+0x852/0xbf0 [ 209.468900][ T8779] exc_page_fault+0xa8/0x190 [ 209.473509][ T8779] ? asm_exc_page_fault+0x8/0x30 [ 209.478465][ T8779] asm_exc_page_fault+0x1e/0x30 [ 209.483328][ T8779] RIP: 0033:0x457a5f [ 209.487241][ T8779] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 209.506979][ T8779] RSP: 002b:00007f922f5d5828 EFLAGS: 00010283 [ 209.513072][ T8779] RAX: 00007f922f5d5850 RBX: 6666666666666667 RCX: 0000000000000000 [ 209.521084][ T8779] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f922f5d5850 [ 209.529076][ T8779] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 209.537064][ T8779] R10: 00007f922f5d69d0 R11: 0000000000000246 R12: 000000000118bf2c [ 209.545051][ T8779] R13: 00007fff9b977d5f R14: 00007f922f5d69c0 R15: 000000000118bf2c [ 209.554635][ T8779] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8779 [ 209.564401][ T8779] caller is lockdep_hardirqs_on+0x34/0x110 [ 209.570310][ T8779] CPU: 0 PID: 8779 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 209.579775][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.589837][ T8779] Call Trace: [ 209.593141][ T8779] dump_stack+0x198/0x1fb [ 209.597502][ T8779] check_preemption_disabled+0x128/0x130 [ 209.603155][ T8779] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 209.608627][ T8779] lockdep_hardirqs_on+0x34/0x110 [ 209.613668][ T8779] __bad_area_nosemaphore+0xc6/0x4f0 [ 209.618978][ T8779] do_user_addr_fault+0x852/0xbf0 [ 209.624288][ T8779] exc_page_fault+0xa8/0x190 [ 209.628899][ T8779] ? asm_exc_page_fault+0x8/0x30 [ 209.633858][ T8779] asm_exc_page_fault+0x1e/0x30 [ 209.638725][ T8779] RIP: 0033:0x457a5f [ 209.642634][ T8779] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 209.662251][ T8779] RSP: 002b:00007f922f5d5828 EFLAGS: 00010283 [ 209.668340][ T8779] RAX: 00007f922f5d5850 RBX: 6666666666666667 RCX: 0000000000000000 [ 209.676328][ T8779] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f922f5d5850 [ 209.684312][ T8779] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 09:31:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15, 0x0, 0x40}]}) 09:31:48 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}}) [ 209.692294][ T8779] R10: 00007f922f5d69d0 R11: 0000000000000246 R12: 000000000118bf2c [ 209.700279][ T8779] R13: 00007fff9b977d5f R14: 00007f922f5d69c0 R15: 000000000118bf2c [ 209.774246][ T8779] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8779 [ 209.783802][ T8779] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 209.790503][ T8779] CPU: 1 PID: 8779 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 209.799967][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.810067][ T8779] Call Trace: [ 209.813383][ T8779] dump_stack+0x198/0x1fb [ 209.817744][ T8779] check_preemption_disabled+0x128/0x130 [ 209.823406][ T8779] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 209.829151][ T8779] trace_hardirqs_on+0x5b/0x1c0 [ 209.834019][ T8779] __bad_area_nosemaphore+0xc6/0x4f0 [ 209.839327][ T8779] do_user_addr_fault+0x852/0xbf0 [ 209.844390][ T8779] exc_page_fault+0xa8/0x190 [ 209.848994][ T8779] ? asm_exc_page_fault+0x8/0x30 [ 209.853950][ T8779] asm_exc_page_fault+0x1e/0x30 [ 209.858807][ T8779] RIP: 0033:0x457a5f [ 209.862710][ T8779] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 209.882329][ T8779] RSP: 002b:00007f922f5d5828 EFLAGS: 00010283 [ 209.888420][ T8779] RAX: 00007f922f5d5850 RBX: 6666666666666667 RCX: 0000000000000000 [ 209.896411][ T8779] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f922f5d5850 [ 209.904393][ T8779] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 209.912380][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c 09:31:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:31:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) [ 209.920370][ T8779] R13: 00007fff9b977d5f R14: 00007f922f5d69c0 R15: 000000000118bf2c [ 209.930186][ T8779] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8779 [ 209.940014][ T8779] caller is lockdep_hardirqs_on+0x34/0x110 [ 209.945849][ T8779] CPU: 1 PID: 8779 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 209.955308][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.965375][ T8779] Call Trace: [ 209.968686][ T8779] dump_stack+0x198/0x1fb [ 209.973045][ T8779] check_preemption_disabled+0x128/0x130 [ 209.978698][ T8779] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 209.984174][ T8779] lockdep_hardirqs_on+0x34/0x110 [ 209.989219][ T8779] __bad_area_nosemaphore+0xc6/0x4f0 [ 209.994530][ T8779] do_user_addr_fault+0x852/0xbf0 [ 209.999580][ T8779] exc_page_fault+0xa8/0x190 [ 210.004187][ T8779] ? asm_exc_page_fault+0x8/0x30 [ 210.009137][ T8779] asm_exc_page_fault+0x1e/0x30 [ 210.013997][ T8779] RIP: 0033:0x457a5f [ 210.017902][ T8779] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 210.037519][ T8779] RSP: 002b:00007f922f5d5828 EFLAGS: 00010283 [ 210.043605][ T8779] RAX: 00007f922f5d5850 RBX: 6666666666666667 RCX: 0000000000000000 [ 210.051591][ T8779] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f922f5d5850 [ 210.059577][ T8779] RBP: 000000000118bf60 R08: 00000000000003ff R09: 0000000000000000 [ 210.067566][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 210.075562][ T8779] R13: 00007fff9b977d5f R14: 00007f922f5d69c0 R15: 000000000118bf2c [ 210.083721][ T2646] usb 3-1: new high-speed USB device number 5 using dummy_hcd 09:31:49 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x6, 0x0, 0x0) 09:31:49 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) syz_io_uring_setup(0x2b80, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 210.338235][ T2646] usb 3-1: Using ep0 maxpacket: 32 [ 210.388157][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.518117][ T2646] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.526838][ T2646] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.557997][ T2646] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.566960][ T2646] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 210.597986][ T2646] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.630974][ T12] usb 5-1: Using ep0 maxpacket: 32