Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. 2020/10/20 10:08:41 fuzzer started 2020/10/20 10:08:42 dialing manager at 10.128.0.26:38919 2020/10/20 10:08:42 syscalls: 3450 2020/10/20 10:08:42 code coverage: enabled 2020/10/20 10:08:42 comparison tracing: enabled 2020/10/20 10:08:42 extra coverage: enabled 2020/10/20 10:08:42 setuid sandbox: enabled 2020/10/20 10:08:42 namespace sandbox: enabled 2020/10/20 10:08:42 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/20 10:08:42 fault injection: enabled 2020/10/20 10:08:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/20 10:08:42 net packet injection: enabled 2020/10/20 10:08:42 net device setup: enabled 2020/10/20 10:08:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/20 10:08:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/20 10:08:42 USB emulation: enabled 2020/10/20 10:08:42 hci packet injection: enabled 2020/10/20 10:08:42 wifi device emulation: enabled 10:10:38 executing program 0: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x1d) 10:10:38 executing program 1: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)='@\xef/{\\@\x00') 10:10:38 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) 10:10:38 executing program 3: r0 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000280)) 10:10:39 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) chown(0x0, 0x0, 0x0) getpriority(0x0, 0x0) 10:10:39 executing program 5: pipe2(0x0, 0x80000) syzkaller login: [ 184.541717][ T6902] IPVS: ftp: loaded support on port[0] = 21 [ 184.787039][ T6904] IPVS: ftp: loaded support on port[0] = 21 [ 184.991233][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 185.080580][ T6906] IPVS: ftp: loaded support on port[0] = 21 [ 185.251507][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.261080][ T6908] IPVS: ftp: loaded support on port[0] = 21 [ 185.277656][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.305531][ T6902] device bridge_slave_0 entered promiscuous mode [ 185.362569][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.371436][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.384328][ T6902] device bridge_slave_1 entered promiscuous mode [ 185.459370][ T6904] chnl_net:caif_netlink_parms(): no params data found [ 185.523498][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.555852][ T6910] IPVS: ftp: loaded support on port[0] = 21 [ 185.587599][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.701601][ T6902] team0: Port device team_slave_0 added [ 185.712072][ T6902] team0: Port device team_slave_1 added [ 185.853067][ T6904] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.872251][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.881504][ T6904] device bridge_slave_0 entered promiscuous mode [ 185.892386][ T6904] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.901605][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.909939][ T6904] device bridge_slave_1 entered promiscuous mode [ 185.930584][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.937826][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.967049][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.983748][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.991638][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.034105][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.102702][ T6906] chnl_net:caif_netlink_parms(): no params data found [ 186.199640][ T6904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.291728][ T6904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.369900][ T6966] IPVS: ftp: loaded support on port[0] = 21 [ 186.391233][ T6908] chnl_net:caif_netlink_parms(): no params data found [ 186.423592][ T6902] device hsr_slave_0 entered promiscuous mode [ 186.432703][ T6902] device hsr_slave_1 entered promiscuous mode [ 186.451136][ T6904] team0: Port device team_slave_0 added [ 186.466462][ T6904] team0: Port device team_slave_1 added [ 186.504858][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 186.560211][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 186.584915][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.591885][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.618241][ T6904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.664403][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.671374][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.699298][ T6904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.711553][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.719955][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.728958][ T6906] device bridge_slave_0 entered promiscuous mode [ 186.740517][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.744645][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 186.749384][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.762696][ T6906] device bridge_slave_1 entered promiscuous mode [ 186.901541][ T6906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.951364][ T6906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.961953][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.970289][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.977510][ T2648] Bluetooth: hci2: command 0x0409 tx timeout [ 186.985052][ T6908] device bridge_slave_0 entered promiscuous mode [ 187.008217][ T6904] device hsr_slave_0 entered promiscuous mode [ 187.015113][ T6904] device hsr_slave_1 entered promiscuous mode [ 187.021707][ T6904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.031562][ T6904] Cannot create hsr debugfs directory [ 187.053901][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.071653][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.082130][ T6908] device bridge_slave_1 entered promiscuous mode [ 187.111200][ T6906] team0: Port device team_slave_0 added [ 187.128852][ T6906] team0: Port device team_slave_1 added [ 187.207860][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.217799][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.228108][ T7760] Bluetooth: hci3: command 0x0409 tx timeout [ 187.228785][ T6910] device bridge_slave_0 entered promiscuous mode [ 187.251191][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.258403][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.273298][ T6910] device bridge_slave_1 entered promiscuous mode [ 187.341732][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.353156][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.362406][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.389139][ T6906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.418503][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.437817][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.449192][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.459293][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.466779][ T2480] Bluetooth: hci4: command 0x0409 tx timeout [ 187.473220][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.499739][ T6906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.637057][ T6910] team0: Port device team_slave_0 added [ 187.682675][ T6906] device hsr_slave_0 entered promiscuous mode [ 187.692709][ T6906] device hsr_slave_1 entered promiscuous mode [ 187.710893][ T6906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.718976][ T6906] Cannot create hsr debugfs directory [ 187.725352][ T6902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.738681][ T6910] team0: Port device team_slave_1 added [ 187.774114][ T6908] team0: Port device team_slave_0 added [ 187.783090][ T6908] team0: Port device team_slave_1 added [ 187.795117][ T6902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.861133][ T6902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.874253][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.881229][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.907426][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.919926][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 187.959515][ T6902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.987961][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.999444][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.027470][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.070337][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.077582][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.103758][ T12] Bluetooth: hci5: command 0x0409 tx timeout [ 188.110520][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.150234][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.158790][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.186921][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.291977][ T6910] device hsr_slave_0 entered promiscuous mode [ 188.300687][ T6910] device hsr_slave_1 entered promiscuous mode [ 188.310336][ T6910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.318737][ T6910] Cannot create hsr debugfs directory [ 188.341560][ T6904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.351644][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.361523][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.370073][ T6966] device bridge_slave_0 entered promiscuous mode [ 188.422192][ T6904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.431766][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.447657][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.457802][ T6966] device bridge_slave_1 entered promiscuous mode [ 188.492793][ T6904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.528214][ T6908] device hsr_slave_0 entered promiscuous mode [ 188.541694][ T6908] device hsr_slave_1 entered promiscuous mode [ 188.549359][ T6908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.560937][ T6908] Cannot create hsr debugfs directory [ 188.574432][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 188.582890][ T6904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.609282][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.669550][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.783257][ T6966] team0: Port device team_slave_0 added [ 188.800942][ T6966] team0: Port device team_slave_1 added [ 188.815513][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 188.906284][ T6906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.929824][ T6906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.941193][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.948316][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.977071][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.990634][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.998568][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.024701][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.054299][ T12] Bluetooth: hci2: command 0x041b tx timeout [ 189.060395][ T6906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.131286][ T6906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.183577][ T6966] device hsr_slave_0 entered promiscuous mode [ 189.191008][ T6966] device hsr_slave_1 entered promiscuous mode [ 189.199052][ T6966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.206763][ T6966] Cannot create hsr debugfs directory [ 189.294633][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 189.343822][ T6910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.397121][ T6910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.438111][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.450043][ T6904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.460375][ T6910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.478921][ T6910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.534446][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 189.545429][ T6908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.566573][ T6908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.580223][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.593057][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.602695][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.612266][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.634640][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.657696][ T6908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.688785][ T6904] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.698596][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.709387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.720508][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.728168][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.741952][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.753495][ T6908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.797517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.817374][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.830083][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.837237][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.845325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.854576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.863027][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.870182][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.880789][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.936588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.950395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.960177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.967300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.980536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.989566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.056692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.066226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.076264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.086142][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.095841][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.105836][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.115142][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.125698][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.134651][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.142733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.163854][ T6966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.174604][ T33] Bluetooth: hci5: command 0x041b tx timeout [ 190.183573][ T6966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.202046][ T6966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.250535][ T6966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.298007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.309686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.320882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.333690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.346006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.358047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.367953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.380744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.397357][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.423448][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.435511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.447512][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.478780][ T6904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.536885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.545848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.559326][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.599580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.615147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.623498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.630665][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.639870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.648011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.654614][ T2648] Bluetooth: hci0: command 0x040f tx timeout [ 190.656924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.679408][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.725795][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.733335][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.743354][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.752831][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.761770][ T2480] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.768929][ T2480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.811833][ T6904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.830323][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.840770][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.872960][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.900239][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.908910][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 190.925000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.934776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.962950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.973335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.982978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.014220][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.022279][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.032447][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.045805][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.085633][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.108122][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.116206][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.130675][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.140958][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.144746][ T2480] Bluetooth: hci2: command 0x040f tx timeout [ 191.149632][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.163002][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.172302][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.182023][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.191780][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.209628][ T6902] device veth0_vlan entered promiscuous mode [ 191.257391][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.315580][ T6906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.326031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.335820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.345872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.355261][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.363625][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.370814][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.383689][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.396254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.404872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.421757][ T6902] device veth1_vlan entered promiscuous mode [ 191.429212][ T33] Bluetooth: hci3: command 0x040f tx timeout [ 191.446403][ T6904] device veth0_vlan entered promiscuous mode [ 191.464662][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.473655][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.483545][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.490745][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.501324][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.510687][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.522103][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.529285][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.537990][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.546667][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.556400][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.565176][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.573176][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.598196][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.615050][ T2480] Bluetooth: hci4: command 0x040f tx timeout [ 191.653720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.662044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.670613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.683749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.693024][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.700215][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.708914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.718177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.740545][ T6904] device veth1_vlan entered promiscuous mode [ 191.764192][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.772523][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.787255][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.797203][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.807413][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.816764][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.861984][ T6902] device veth0_macvtap entered promiscuous mode [ 191.876627][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.886181][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.895864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.905572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.916836][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.924029][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.931735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.942197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.951229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.960048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.969278][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.978133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.987287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.996120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.004841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.013139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.022120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.030741][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.037955][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.053379][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.089361][ T6910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.102496][ T6910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.115630][ T6902] device veth1_macvtap entered promiscuous mode [ 192.125405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.133634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.143452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.151768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.160047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.170619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.180027][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.188966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.252426][ T6904] device veth0_macvtap entered promiscuous mode [ 192.259644][ T7760] Bluetooth: hci5: command 0x040f tx timeout [ 192.269106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.278848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.287392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.296211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.304991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.315730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.330061][ T6908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.344964][ T6908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.387025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.396267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.405056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.413548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.428909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.439045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.449581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.459022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.467488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.512096][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.521950][ T6904] device veth1_macvtap entered promiscuous mode [ 192.544467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.552705][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.563463][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.573205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.583163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.592366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.602088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.617063][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.632712][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.649318][ T6902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.660334][ T6902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.671650][ T6902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.682409][ T6902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.696817][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.719151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.730689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.743413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.764738][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.773751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.786061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.795308][ T12] Bluetooth: hci0: command 0x0419 tx timeout [ 192.873650][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.885378][ T6904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.897075][ T6904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.910300][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.918517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.931855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.939900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.953661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.971491][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.984628][ T2480] Bluetooth: hci1: command 0x0419 tx timeout [ 193.003085][ T6904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.029998][ T6904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.052340][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.080867][ T6906] device veth0_vlan entered promiscuous mode [ 193.114628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.123133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.138852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.148647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.160657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.169210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.203783][ T6906] device veth1_vlan entered promiscuous mode [ 193.216060][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 193.252232][ T6904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.280127][ T6904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.293733][ T6904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.306013][ T6904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.365267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.388101][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.404893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.422823][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.431508][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.446120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.465076][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 193.534816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.543279][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.559493][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.570263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.610690][ T6908] device veth0_vlan entered promiscuous mode [ 193.627595][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.658476][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.692487][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.715151][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.752961][ T6908] device veth1_vlan entered promiscuous mode [ 193.759176][ T33] Bluetooth: hci4: command 0x0419 tx timeout [ 193.806498][ T6910] device veth0_vlan entered promiscuous mode [ 193.816598][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.835825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.843574][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.866645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.879859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.889617][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.899483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.933387][ T6906] device veth0_macvtap entered promiscuous mode [ 193.992022][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.007285][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.020270][ T6906] device veth1_macvtap entered promiscuous mode [ 194.045224][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.053543][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.054769][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.078546][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.096687][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.105362][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.113490][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.132399][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.142954][ T6910] device veth1_vlan entered promiscuous mode [ 194.198316][ T6966] device veth0_vlan entered promiscuous mode [ 194.235485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.256404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.267048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 10:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) [ 194.300087][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.317812][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.327584][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.334792][ T8193] Bluetooth: hci5: command 0x0419 tx timeout [ 194.344932][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.364923][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.385231][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.403352][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.426401][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.448308][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000340)) [ 194.495464][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.522108][ T6966] device veth1_vlan entered promiscuous mode [ 194.545902][ T6908] device veth0_macvtap entered promiscuous mode [ 194.571108][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.591633][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.611387][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.623010][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 10:10:49 executing program 0: syz_usb_connect$uac1(0x0, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0x0, "6ac0e5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "cd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x90}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x401}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x96, 0x0, 0xff, 0xff}, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]}) [ 194.641501][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.669874][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.694813][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.722482][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.746791][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.772058][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.792744][ T6908] device veth1_macvtap entered promiscuous mode [ 194.825278][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.857903][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.885360][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.895735][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.942669][ T6906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.955969][ T6906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 10:10:49 executing program 1: syz_usb_connect$uac1(0x0, 0xaf, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x7, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x20, 0x0, 0x1f, 0x80, "cd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xea, 0x4, {0x7, 0x25, 0x1, 0x0, 0x90, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4c, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x20}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0x0, "84584a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x5, 0x40}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x0, "8b0485e990e1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x56bdbd2ddb660593, 0x2, 0x80, 0xf7, {0x7, 0x25, 0x1, 0x1, 0x7, 0x401}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x96, 0x5, 0xff, 0xff, 0x81}, 0x28, &(0x7f0000000200)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fff, 0xf00, 0x0, [0xff3f00, 0x30, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x0, 0x4, 0x9}]}, 0x1, [{0x0, 0x0}]}) [ 194.984532][ T6906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.007801][ T6906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.039346][ T6910] device veth0_macvtap entered promiscuous mode [ 195.074165][ T7760] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 195.116379][ T6910] device veth1_macvtap entered promiscuous mode [ 195.140074][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.161911][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.181207][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.192849][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.203465][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.223982][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.237203][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.250869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.261587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.270669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.280160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.289863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.300147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.316390][ T6966] device veth0_macvtap entered promiscuous mode [ 195.341914][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.360889][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.371529][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.386296][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.396302][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.407407][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.420799][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.431301][ T6966] device veth1_macvtap entered promiscuous mode [ 195.464792][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.478544][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.494627][ T7760] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 195.495250][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.505066][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 195.511077][ T7760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.529408][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.541304][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 195.544485][ T6908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.569422][ T6908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.574885][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.584314][ T6908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.603855][ T6908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.639192][ T7760] usb 1-1: language id specifier not provided by device, defaulting to English [ 195.677045][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.708377][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.720945][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.731714][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.741742][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.752827][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.763631][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.776249][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.787661][ T7760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.788933][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.803086][ T7760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.813205][ T7760] usb 1-1: Product: syz [ 195.818621][ T7760] usb 1-1: Manufacturer: syz [ 195.823447][ T7760] usb 1-1: SerialNumber: syz [ 195.846164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.862842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.887465][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.900314][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.912242][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.926358][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.938133][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.949672][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.960858][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.978535][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.989104][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.001497][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.014784][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.015442][ T5] usb 2-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 196.038262][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.041121][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.049201][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.070627][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.081528][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.092670][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.110843][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.124441][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.134852][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.147823][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.160887][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.181631][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.190539][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.200737][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.204434][ T7760] usb 1-1: 0:2 : does not exist [ 196.217679][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.238139][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.252823][ T7760] usb 1-1: USB disconnect, device number 2 [ 196.260206][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.260237][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.260256][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.309542][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.365848][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.384554][ T5] usb 2-1: string descriptor 0 read error: -22 [ 196.390834][ T5] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.394447][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.425202][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.429694][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.437234][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.455275][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.482963][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.512508][ T6910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.529277][ T5] usb 2-1: 0:2 : does not exist [ 196.550631][ T6910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.571849][ T6910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.593091][ T6910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.618173][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.630238][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.632615][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.660773][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.742870][ T33] usb 2-1: USB disconnect, device number 2 [ 196.755938][ T6966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.785191][ T6966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.829383][ T6966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.853625][ T6966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.893147][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.924134][ T7760] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 197.004925][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.050622][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.143802][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.199568][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.238560][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.279889][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.294509][ T7760] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 197.308210][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.331374][ T7760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.336030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.362893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.366982][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 197.396901][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.406078][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.410346][ T8258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.417598][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:10:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) [ 197.447272][ T8258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.544571][ T7760] usb 1-1: language id specifier not provided by device, defaulting to English [ 197.557482][ T8258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.575175][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.583281][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.599664][ T8258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.623027][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.649429][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.664933][ T12] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 197.674410][ T7760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.675083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.687179][ T7760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:10:52 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 197.738633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:10:52 executing program 0: syz_usb_connect$uac1(0x0, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0x0, "6ac0e5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "cd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x90}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x401}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x96, 0x0, 0xff, 0xff}, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]}) [ 197.783723][ T7760] usb 1-1: Product: syz [ 197.813625][ T7760] usb 1-1: Manufacturer: syz 10:10:52 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) [ 197.834820][ T7760] usb 1-1: SerialNumber: syz [ 197.874619][ T7760] usb 1-1: can't set config #1, error -71 [ 197.907734][ C1] hrtimer: interrupt took 76277 ns [ 197.915759][ T7760] usb 1-1: USB disconnect, device number 3 10:10:52 executing program 2: syz_usb_connect$uac1(0x0, 0xa1, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0xa, 0x24, 0x5, 0x0, 0xfa, "6ac0e5af15"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x80, "cd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x0, 0x90}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "8b0485e990e1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x56bdbd2ddb660593, 0x0, 0x80, 0xf7, {0x7, 0x25, 0x1, 0x1}}}}}}}]}}, 0x0) 10:10:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x4004000) [ 198.089511][ T2467] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 198.102429][ T2467] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 198.159236][ T2467] blk_update_request: I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 198.170764][ T2467] Buffer I/O error on dev loop7, logical block 1, lost async page write 10:10:53 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) chown(0x0, 0x0, 0x0) getpriority(0x0, 0x0) 10:10:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 198.244901][ T12] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.252515][ T12] usb 2-1: can't read configurations, error -71 10:10:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x2e) 10:10:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socket$inet(0x2, 0x3, 0x4) 10:10:53 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x38}, 0x38}}, 0x0) [ 198.344273][ T7760] usb 1-1: new high-speed USB device number 4 using dummy_hcd 10:10:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588", 0x81e3, 0x0, 0x0, 0x0) 10:10:53 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000007380)='ns/cgroup\x00') [ 198.474250][ T7761] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.539989][ T8440] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 198.667693][ T8454] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 10:10:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) [ 198.744691][ T7760] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 198.771726][ T7760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.811875][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 198.850840][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 198.880769][ T7761] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.897405][ T7761] usb 3-1: config 1 has no interface number 1 [ 198.908154][ T7760] usb 1-1: language id specifier not provided by device, defaulting to English [ 198.925567][ T7761] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 198.953788][ T7761] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 198.991095][ T7761] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.014345][ T7761] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1427, setting to 1024 [ 199.076445][ T7760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.087120][ T7760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.102489][ T7760] usb 1-1: Product: syz [ 199.108805][ T7760] usb 1-1: Manufacturer: syz [ 199.113590][ T7760] usb 1-1: SerialNumber: syz [ 199.204463][ T7761] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.213525][ T7761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.240714][ T7761] usb 3-1: Product: syz [ 199.252292][ T7761] usb 3-1: Manufacturer: syz [ 199.263347][ T7761] usb 3-1: SerialNumber: syz [ 199.299843][ T8425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 199.487396][ T7760] usb 1-1: 0:2 : does not exist [ 199.517409][ T7760] usb 1-1: USB disconnect, device number 4 [ 199.662453][ T7761] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 199.672382][ T7761] usb 3-1: 2:1 : sample bitwidth 5 in over sample bytes 0 [ 199.697229][ T7761] usb 3-1: 2:1 : unsupported sample bitwidth 5 in 0 bytes [ 199.784611][ T7761] usb 3-1: USB disconnect, device number 2 10:10:54 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 10:10:54 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) chown(0x0, 0x0, 0x0) getpriority(0x0, 0x0) [ 200.186993][ T2468] blk_update_request: I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 200.199247][ T2468] Buffer I/O error on dev loop7, logical block 16, lost async page write [ 200.248119][ T2468] blk_update_request: I/O error, dev loop7, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 200.261676][ T2468] Buffer I/O error on dev loop7, logical block 17, lost async page write [ 200.424100][ T7761] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.824579][ T7761] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.833563][ T7761] usb 3-1: config 1 has no interface number 1 [ 200.854065][ T7761] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 200.870725][ T7761] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 200.886408][ T7761] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.898694][ T7761] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1427, setting to 1024 10:10:55 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000002480)='/dev/ion\x00', 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) 10:10:55 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x14000, 0x0) r1 = syz_io_uring_setup(0x3be1, &(0x7f0000000040)={0x0, 0x5d29, 0x20, 0x3, 0x102}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2, 0xa, 0xc7b, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[r2, r0, r3, r4], 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000005540)={0x0, 0x0, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x82dad09dc355a342, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 10:10:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 10:10:55 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) chown(0x0, 0x0, 0x0) getpriority(0x0, 0x0) 10:10:55 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) 10:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}, 0x1, 0x0, 0xff12}, 0x0) [ 201.124258][ T7761] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.133591][ T7761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.143000][ T8521] [ 201.146024][ T8521] ============================= [ 201.155187][ T8521] WARNING: suspicious RCU usage [ 201.177787][ T8521] 5.9.0-next-20201016-syzkaller #0 Not tainted [ 201.216331][ T8533] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 201.224461][ T8521] ----------------------------- [ 201.243856][ T8521] include/linux/cgroup.h:494 suspicious rcu_dereference_check() usage! [ 201.250202][ T7761] usb 3-1: Product: syz 10:10:56 executing program 0: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) [ 201.292507][ T8521] [ 201.292507][ T8521] other info that might help us debug this: [ 201.292507][ T8521] [ 201.295862][ T7761] usb 3-1: Manufacturer: syz 10:10:56 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 201.343406][ T8521] [ 201.343406][ T8521] rcu_scheduler_active = 2, debug_locks = 1 [ 201.380347][ T2468] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 10:10:56 executing program 0: socketpair(0x38, 0x0, 0x0, &(0x7f00000000c0)) [ 201.392317][ T2468] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 201.403045][ T2468] blk_update_request: I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 201.415431][ T2468] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 201.432552][ T8521] no locks held by syz-executor.5/8521. [ 201.438707][ T8521] 10:10:56 executing program 3: socketpair(0x5, 0x0, 0x0, &(0x7f0000000080)) [ 201.438707][ T8521] stack backtrace: [ 201.445170][ T7761] usb 3-1: can't set config #1, error -71 [ 201.454849][ T8521] CPU: 0 PID: 8521 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 201.456637][ T2467] blk_update_request: I/O error, dev loop7, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 201.464314][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.464323][ T8521] Call Trace: [ 201.464348][ T8521] dump_stack+0x198/0x1fb [ 201.464373][ T8521] io_init_identity+0x3a9/0x450 [ 201.464393][ T8521] io_uring_alloc_task_context+0x176/0x250 [ 201.464413][ T8521] io_uring_add_task_file+0x10d/0x180 [ 201.464434][ T8521] io_uring_setup+0x2727/0x3660 [ 201.464464][ T8521] ? io_sq_thread+0x1400/0x1400 [ 201.464481][ T8521] ? io_issue_sqe+0x3d80/0x3d80 [ 201.464497][ T8521] ? io_uring_poll+0x2a0/0x2a0 [ 201.464515][ T8521] ? put_timespec64+0xcb/0x120 [ 201.464533][ T8521] ? ns_to_timespec64+0xc0/0xc0 [ 201.464571][ T8521] ? check_preemption_disabled+0x50/0x130 [ 201.464593][ T8521] ? syscall_enter_from_user_mode+0x1d/0x60 [ 201.464616][ T8521] do_syscall_64+0x2d/0x70 [ 201.464634][ T8521] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.464649][ T8521] RIP: 0033:0x45de59 [ 201.464670][ T8521] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.464680][ T8521] RSP: 002b:00007f1ff6943bf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 201.464702][ T8521] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 000000000045de59 [ 201.464714][ T8521] RDX: 0000000020ffe000 RSI: 0000000020000000 RDI: 00000000000076d1 [ 201.464725][ T8521] RBP: 000000000118bf78 R08: 0000000020000100 R09: 0000000020000100 [ 201.464737][ T8521] R10: 00000000200000c0 R11: 0000000000000206 R12: 0000000020ffe000 [ 201.464748][ T8521] R13: 0000000020ffc000 R14: 0000000020000100 R15: 00000000200000c0 [ 201.466090][ T7761] usb 3-1: USB disconnect, device number 3 10:10:56 executing program 5: clock_nanosleep(0x0, 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0) [ 201.476239][ T2467] Buffer I/O error on dev loop7, logical block 2, lost async page write 10:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x300}, 0x0) 10:10:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400100008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2}, 0x6}], 0x2, 0x100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0xc0000c0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x600a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:56 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) chown(0x0, 0x0, 0x0) [ 201.710065][ T8561] mmap: syz-executor.1 (8561) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 10:10:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0xc4}}, 0x0) 10:10:56 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) 10:10:56 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1851, r0, 0x10000000) 10:10:57 executing program 2: openat$fuse(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) 10:10:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x20000010) [ 202.213155][ T2468] blk_update_request: I/O error, dev loop7, sector 384 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 202.224846][ T2468] Buffer I/O error on dev loop7, logical block 48, lost async page write 10:10:57 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r3, 0x4c01) 10:10:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) 10:10:57 executing program 2: socketpair(0x2, 0xa, 0x0, &(0x7f0000000480)) 10:10:57 executing program 1: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x4000)=nil) 10:10:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@preq={0x82, 0x20, @ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, @broadcast}}]}]}, 0x50}}, 0x0) [ 202.716509][ T2467] blk_update_request: I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 202.728683][ T2467] Buffer I/O error on dev loop7, logical block 32, lost async page write [ 202.737867][ T2467] Buffer I/O error on dev loop7, logical block 33, lost async page write 10:10:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400100008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2}, 0x6}], 0x2, 0x100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0xc0000c0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x600a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:57 executing program 3: getresgid(&(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500)) 10:10:57 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={r0, r1+60000000}, 0x0) 10:10:57 executing program 2: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) 10:10:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0xffffc90000000000}, 0x0) 10:10:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:10:57 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 10:10:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 10:10:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48008012}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 10:10:57 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x0, 0xfa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x56bdbd2ddb660593, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:10:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 10:10:58 executing program 3: sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) [ 203.615632][ T8193] usb 6-1: new high-speed USB device number 2 using dummy_hcd 10:10:58 executing program 1: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 10:10:58 executing program 2: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x220001) 10:10:58 executing program 3: futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, &(0x7f0000002440), 0x0, 0x0) 10:10:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400100008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2}, 0x6}], 0x2, 0x100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0xc0000c0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x600a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:58 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 203.974462][ T8193] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.999096][ T8193] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 10:10:58 executing program 2: socketpair(0x0, 0xc, 0x0, &(0x7f0000000040)) 10:10:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)={0x20, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 204.041339][ T8193] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 10:10:58 executing program 1: socket$inet(0x2, 0x3, 0x4) [ 204.121873][ T8193] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:10:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x0) [ 204.414851][ T8193] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.423908][ T8193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.450478][ T8193] usb 6-1: Product: syz [ 204.474417][ T8193] usb 6-1: Manufacturer: syz [ 204.479040][ T8193] usb 6-1: SerialNumber: syz [ 204.545888][ T8651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 204.844276][ T8193] usb 6-1: 0:2 : does not exist [ 204.862420][ T8193] usb 6-1: USB disconnect, device number 2 [ 205.554301][ T8330] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 205.934374][ T8330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.962319][ T8330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.008162][ T8330] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 206.117677][ T8330] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:11:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) 10:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 10:11:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x3}}, 0x24}}, 0x0) 10:11:01 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) 10:11:01 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') 10:11:01 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 206.284161][ T8330] usb 6-1: string descriptor 0 read error: -71 [ 206.338623][ T8330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.439364][ T8330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:11:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000200)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) [ 206.576088][ T8330] usb 6-1: can't set config #1, error -71 10:11:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x50, &(0x7f00000000c0)="cbe68df9645812b297ebf91234edddd997c2820ac60a0d48b2cba9c0bea7495cb0628ef7a8689b611994e0b6f52a48ea8344ec2b7f7ce23b2bb83b98a452986348909337835eda1b09dc111b9b3906b6"}) 10:11:01 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1853, r0, 0x10000000) 10:11:01 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0xc4ac0, 0x0) [ 206.656222][ T8330] usb 6-1: USB disconnect, device number 3 10:11:01 executing program 0: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x60, [{0x0, 0x0, 0x0, 0x2d}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 10:11:01 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x301, 0x0) 10:11:01 executing program 3: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 206.955877][ T8748] xt_bpf: check failed: parse error 10:11:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 10:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}, @NL80211_ATTR_IE={0x2b, 0x2a, [@preq={0x82, 0x20, @ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, @broadcast}}, @tim={0x5, 0x3}]}]}, 0x60}}, 0x0) 10:11:01 executing program 0: syz_usb_connect$uac1(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "6ac0e5af15"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:11:02 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 10:11:02 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r3, 0x4c01) 10:11:02 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x20030, 0xffffffffffffffff, 0x10000000) 10:11:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000001000)) 10:11:02 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x102) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18}, 0x18) 10:11:02 executing program 3: clock_gettime(0x0, &(0x7f0000002400)) 10:11:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) [ 207.489295][ T27] audit: type=1804 audit(1603188662.321:2): pid=8776 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir399721872/syzkaller.4exBhp/17/bus" dev="sda1" ino=15825 res=1 errno=0 [ 207.544761][ T7760] usb 1-1: new high-speed USB device number 5 using dummy_hcd 10:11:02 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='bdi_dirty_ratelimit\x00', r0}, 0x10) [ 207.659239][ T2468] print_req_error: 10 callbacks suppressed [ 207.659258][ T2468] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.677572][ T2468] buffer_io_error: 9 callbacks suppressed [ 207.677595][ T2468] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 207.692009][ T2468] blk_update_request: I/O error, dev loop7, sector 1 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.704290][ T2468] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 207.712774][ T2468] blk_update_request: I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.724337][ T2468] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 207.732730][ T2468] blk_update_request: I/O error, dev loop7, sector 3 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.744835][ T2468] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 207.753227][ T2468] blk_update_request: I/O error, dev loop7, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.775735][ T2468] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 207.784292][ T2468] blk_update_request: I/O error, dev loop7, sector 5 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.795680][ T2468] Buffer I/O error on dev loop7, logical block 5, lost async page write 10:11:02 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 207.804163][ T2468] blk_update_request: I/O error, dev loop7, sector 6 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.815564][ T2468] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 207.824083][ T2468] blk_update_request: I/O error, dev loop7, sector 7 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 207.835374][ T2468] Buffer I/O error on dev loop7, logical block 7, lost async page write 10:11:02 executing program 1: accept4(0xffffffffffffffff, 0x0, 0x0, 0x100800) 10:11:02 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid_for_children\x00') [ 207.964785][ T7760] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.973777][ T7760] usb 1-1: config 1 has no interface number 1 [ 207.982117][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 207.993458][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.007106][ T7760] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.021699][ T7760] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.180686][ T27] audit: type=1804 audit(1603188663.011:3): pid=8793 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir399721872/syzkaller.4exBhp/17/bus" dev="sda1" ino=15825 res=1 errno=0 [ 208.214388][ T7760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.223489][ T7760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.255616][ T7760] usb 1-1: Product: syz [ 208.260293][ T7760] usb 1-1: Manufacturer: syz [ 208.282991][ T7760] usb 1-1: SerialNumber: syz [ 208.290071][ T27] audit: type=1804 audit(1603188663.101:4): pid=8795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir399721872/syzkaller.4exBhp/17/bus" dev="sda1" ino=15825 res=1 errno=0 [ 208.686227][ T7760] usb 1-1: USB disconnect, device number 5 [ 209.354327][ T7760] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 209.734457][ T7760] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.743427][ T7760] usb 1-1: config 1 has no interface number 1 [ 209.750048][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 209.761010][ T7760] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.774328][ T7760] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.793688][ T7760] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.984210][ T7760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.995087][ T7760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.003274][ T7760] usb 1-1: Product: syz [ 210.008142][ T7760] usb 1-1: Manufacturer: syz [ 210.012856][ T7760] usb 1-1: SerialNumber: syz 10:11:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x40) 10:11:05 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r3, 0x4c01) 10:11:05 executing program 3: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 10:11:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0xc0000) read$FUSE(r0, 0x0, 0x0) 10:11:05 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000040), 0x0) 10:11:05 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 210.314993][ T7760] usb 1-1: USB disconnect, device number 6 10:11:05 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 10:11:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005540)={0x0, 0x0, 0x0}, 0x0) 10:11:05 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 210.459083][ T27] audit: type=1804 audit(1603188665.291:5): pid=8854 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir399721872/syzkaller.4exBhp/18/bus" dev="sda1" ino=15846 res=1 errno=0 10:11:05 executing program 0: socketpair(0x2c, 0x3, 0x1140000, &(0x7f0000000040)) 10:11:05 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402, 0x0) 10:11:05 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) 10:11:05 executing program 4: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=ANY=[]}) r1 = getpid() getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) r2 = gettid() ptrace(0x4207, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r3, 0x4c01) 10:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 10:11:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x1853, r0, 0x10000000)