[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. 2020/12/16 19:13:13 fuzzer started 2020/12/16 19:13:14 dialing manager at 10.128.0.26:37667 2020/12/16 19:13:25 syscalls: 3263 2020/12/16 19:13:25 code coverage: enabled 2020/12/16 19:13:25 comparison tracing: enabled 2020/12/16 19:13:25 extra coverage: enabled 2020/12/16 19:13:25 setuid sandbox: enabled 2020/12/16 19:13:25 namespace sandbox: enabled 2020/12/16 19:13:25 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/16 19:13:25 fault injection: enabled 2020/12/16 19:13:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/16 19:13:25 net packet injection: enabled 2020/12/16 19:13:25 net device setup: enabled 2020/12/16 19:13:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/16 19:13:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/16 19:13:25 USB emulation: enabled 2020/12/16 19:13:25 hci packet injection: enabled 2020/12/16 19:13:25 wifi device emulation: enabled 19:14:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.controllers\x00', 0x2761, 0x0) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}, {{&(0x7f0000000480)=@caif=@dbg={0x1d}, 0x80, 0x0}}], 0x2, 0x0) 19:14:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) exit(0x0) dup2(r0, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) sync() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) syz_open_procfs(0x0, 0x0) 19:14:30 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffda1, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xfffffffffffffdaa, "da29ba70", {0x3, 0x0, 0x7}}) 19:14:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x5, @ipv4={[], [], @private}}]}}}]}, 0x50}}, 0x0) 19:14:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) syzkaller login: [ 155.083711][ T8521] IPVS: ftp: loaded support on port[0] = 21 19:14:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x7}, 0x14) [ 155.299334][ T8537] IPVS: ftp: loaded support on port[0] = 21 [ 155.587651][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 155.658852][ T8624] IPVS: ftp: loaded support on port[0] = 21 [ 155.846113][ T8735] IPVS: ftp: loaded support on port[0] = 21 [ 155.866918][ T8537] chnl_net:caif_netlink_parms(): no params data found [ 156.028277][ T8829] IPVS: ftp: loaded support on port[0] = 21 [ 156.100448][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.110127][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.121376][ T8521] device bridge_slave_0 entered promiscuous mode [ 156.160383][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.168192][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.177570][ T8521] device bridge_slave_1 entered promiscuous mode [ 156.290861][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.298605][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.307504][ T8537] device bridge_slave_0 entered promiscuous mode [ 156.327363][ T8624] chnl_net:caif_netlink_parms(): no params data found [ 156.346547][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.356265][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.365047][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.376351][ T8537] device bridge_slave_1 entered promiscuous mode [ 156.427514][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.535131][ T8521] team0: Port device team_slave_0 added [ 156.549454][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.558977][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 156.579801][ T8521] team0: Port device team_slave_1 added [ 156.592140][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.660056][ T8537] team0: Port device team_slave_0 added [ 156.710740][ T8537] team0: Port device team_slave_1 added [ 156.719199][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.728060][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.757647][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.772833][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.780062][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.826690][ T8624] device bridge_slave_0 entered promiscuous mode [ 156.875813][ T9122] IPVS: ftp: loaded support on port[0] = 21 [ 156.918863][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.935852][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.963274][ T35] Bluetooth: hci0: command 0x0409 tx timeout [ 156.964206][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.984932][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.993067][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.001086][ T8624] device bridge_slave_1 entered promiscuous mode [ 157.070500][ T8624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.091575][ T8624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.109151][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.117184][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.145607][ T8537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.202116][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 157.224718][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.232565][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.259221][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.280302][ T8521] device hsr_slave_0 entered promiscuous mode [ 157.287193][ T8521] device hsr_slave_1 entered promiscuous mode [ 157.377397][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.385929][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.396360][ T8735] device bridge_slave_0 entered promiscuous mode [ 157.414473][ T8624] team0: Port device team_slave_0 added [ 157.429930][ T8624] team0: Port device team_slave_1 added [ 157.445216][ T8829] chnl_net:caif_netlink_parms(): no params data found [ 157.461588][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.469071][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.477474][ T8735] device bridge_slave_1 entered promiscuous mode [ 157.503760][ T8537] device hsr_slave_0 entered promiscuous mode [ 157.513003][ T8537] device hsr_slave_1 entered promiscuous mode [ 157.520220][ T8537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.528799][ T8537] Cannot create hsr debugfs directory [ 157.532165][ T3799] Bluetooth: hci2: command 0x0409 tx timeout [ 157.617910][ T8624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.625765][ T8624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.656922][ T8624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.693165][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.705439][ T8624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.714107][ T8624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.740835][ T8624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.761918][ T3209] Bluetooth: hci3: command 0x0409 tx timeout [ 157.784925][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.891128][ T8624] device hsr_slave_0 entered promiscuous mode [ 157.899522][ T8624] device hsr_slave_1 entered promiscuous mode [ 157.906967][ T8624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.915951][ T8624] Cannot create hsr debugfs directory [ 157.971055][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.979653][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.989261][ T8829] device bridge_slave_0 entered promiscuous mode [ 158.002402][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 158.034438][ T8735] team0: Port device team_slave_0 added [ 158.084241][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.096541][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.108219][ T8829] device bridge_slave_1 entered promiscuous mode [ 158.119343][ T8735] team0: Port device team_slave_1 added [ 158.183768][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 158.273587][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.284212][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.291669][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.319867][ T8735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.336505][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.343716][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.370513][ T8735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.410602][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.495505][ T8829] team0: Port device team_slave_0 added [ 158.540119][ T8829] team0: Port device team_slave_1 added [ 158.550580][ T8735] device hsr_slave_0 entered promiscuous mode [ 158.559194][ T8735] device hsr_slave_1 entered promiscuous mode [ 158.567834][ T8735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.576784][ T8735] Cannot create hsr debugfs directory [ 158.681023][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.681138][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.703976][ T9122] device bridge_slave_0 entered promiscuous mode [ 158.717527][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.727443][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.737498][ T9122] device bridge_slave_1 entered promiscuous mode [ 158.761722][ T8521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.778047][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.793382][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.802380][ T3209] Bluetooth: hci5: command 0x0409 tx timeout [ 158.820749][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.860808][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.870897][ T8521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.893593][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.900825][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.927994][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.963971][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.973693][ T8521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.989061][ T8521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.042073][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 159.059869][ T8829] device hsr_slave_0 entered promiscuous mode [ 159.067193][ T8829] device hsr_slave_1 entered promiscuous mode [ 159.076533][ T8829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.084422][ T8829] Cannot create hsr debugfs directory [ 159.108099][ T9122] team0: Port device team_slave_0 added [ 159.117784][ T9122] team0: Port device team_slave_1 added [ 159.183638][ T8537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.233715][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.240728][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.267454][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.282087][ T3209] Bluetooth: hci1: command 0x041b tx timeout [ 159.282264][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.295488][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.321886][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.352408][ T8537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.403882][ T8537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.451082][ T8537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.484976][ T9122] device hsr_slave_0 entered promiscuous mode [ 159.493468][ T9122] device hsr_slave_1 entered promiscuous mode [ 159.500207][ T9122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.511512][ T9122] Cannot create hsr debugfs directory [ 159.568037][ T8624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.601923][ T3209] Bluetooth: hci2: command 0x041b tx timeout [ 159.644740][ T8624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.660005][ T8624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.713017][ T8624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.845232][ T8735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.851929][ T17] Bluetooth: hci3: command 0x041b tx timeout [ 159.902718][ T8735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.943905][ T8735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.963211][ T8735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.989111][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.067035][ T8829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.082134][ T3209] Bluetooth: hci4: command 0x041b tx timeout [ 160.109873][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.121925][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.131543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.146336][ T8829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.161619][ T8829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.180650][ T8829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.207316][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.254592][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.264670][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.275974][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.283587][ T3799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.294206][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.303189][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.311645][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.318817][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.361595][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.374246][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.384327][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.394331][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.402908][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.447026][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.456940][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.467623][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.478908][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.488776][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.500363][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.507588][ T3799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.526101][ T9122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.540439][ T9122] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.570967][ T9122] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.595903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.609404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.619100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.630950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.640368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.650698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.660263][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.667420][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.676852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.686765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.696007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.712024][ T9122] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.739584][ T8521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.754060][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.775264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.784789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.794962][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.845556][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.855513][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.882278][ T35] Bluetooth: hci5: command 0x041b tx timeout [ 160.904806][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.912377][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.920506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.930717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.939676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.949914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.960021][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.968627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.990585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.001536][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.025114][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.085073][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.122370][ T35] Bluetooth: hci0: command 0x040f tx timeout [ 161.140561][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.159918][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.169847][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.178862][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.188558][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.204393][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.226182][ T8624] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.303430][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.314276][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.323243][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.330419][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.339505][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.348858][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.362344][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 161.365863][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.400917][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.410639][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.421280][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.429572][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.439202][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.448516][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.455691][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.474324][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.489091][ T8521] device veth0_vlan entered promiscuous mode [ 161.509981][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.525351][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.535846][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.545486][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.555700][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.567743][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.576674][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.624100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.633784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.645581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.657372][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.666526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.679680][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.688325][ T35] Bluetooth: hci2: command 0x040f tx timeout [ 161.704145][ T8521] device veth1_vlan entered promiscuous mode [ 161.722858][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.731251][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.740247][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.751209][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.761458][ T3209] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.768668][ T3209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.777807][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.787719][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.796525][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.806300][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.820035][ T8537] device veth0_vlan entered promiscuous mode [ 161.849032][ T8624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.860173][ T8624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.903417][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.922726][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.942724][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.951169][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.962619][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.971558][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.992412][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.999703][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.019966][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.030124][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.043234][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.053276][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.062362][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.069442][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.078064][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.087764][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.109962][ T8537] device veth1_vlan entered promiscuous mode [ 162.116594][ T3209] Bluetooth: hci3: command 0x040f tx timeout [ 162.159383][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.169496][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.180691][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.189637][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.199135][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.209167][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.219797][ T3209] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.227148][ T3209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.236325][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.259629][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.266537][ T3209] Bluetooth: hci4: command 0x040f tx timeout [ 162.315595][ T8521] device veth0_macvtap entered promiscuous mode [ 162.327806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.336642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.345291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.354430][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.363521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.372727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.381628][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.425733][ T8624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.438727][ T8521] device veth1_macvtap entered promiscuous mode [ 162.448632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.458609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.467825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.476317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.486959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.496739][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.506014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.515513][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.525417][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.533822][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.548164][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.589852][ T8735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.605019][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.614811][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.625336][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.635854][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.646422][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.655953][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.665613][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.674804][ T3209] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.682555][ T3209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.690243][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.700564][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.765085][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.775012][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.784620][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.795392][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.806135][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.816114][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.825626][ T3209] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.833051][ T3209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.843033][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.854395][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.864059][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.872901][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.883422][ T8537] device veth0_macvtap entered promiscuous mode [ 162.906727][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.934550][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.962491][ T9813] Bluetooth: hci5: command 0x040f tx timeout [ 162.967574][ T8829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.984728][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.992971][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.001404][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.015887][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.025481][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.035963][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.046979][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.056167][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.066129][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.077269][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.086677][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.096011][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.107313][ T8537] device veth1_macvtap entered promiscuous mode [ 163.117724][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.127539][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.144424][ T8521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.158860][ T8521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.171267][ T8521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.181116][ T8521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.200951][ T8624] device veth0_vlan entered promiscuous mode [ 163.207952][ T3209] Bluetooth: hci0: command 0x0419 tx timeout [ 163.219336][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.228399][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.237300][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.249301][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.261549][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.270364][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.279172][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.289363][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.308032][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.355864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.368651][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.380584][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.389897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.437839][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.445888][ T3209] Bluetooth: hci1: command 0x0419 tx timeout [ 163.476682][ T8624] device veth1_vlan entered promiscuous mode [ 163.491218][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.504154][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.517732][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.529830][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.540843][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.554388][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.564332][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.574212][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.583923][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.593781][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.603590][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.613122][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.647581][ T8537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.667734][ T8537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.679685][ T8537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.690307][ T8537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.736237][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.744442][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.762538][ T17] Bluetooth: hci2: command 0x0419 tx timeout [ 163.777291][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.916576][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.943136][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.951044][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.962539][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.976578][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.987713][ T8735] device veth0_vlan entered promiscuous mode [ 164.013260][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.021344][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.066116][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.099958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.113132][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.133192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.153566][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.165244][ T8624] device veth0_macvtap entered promiscuous mode [ 164.175785][ T35] Bluetooth: hci3: command 0x0419 tx timeout [ 164.213447][ T8735] device veth1_vlan entered promiscuous mode [ 164.252680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.261263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.284656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.294654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.323227][ T9813] Bluetooth: hci4: command 0x0419 tx timeout [ 164.355000][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.362219][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.370270][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.373117][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.396205][ T8624] device veth1_macvtap entered promiscuous mode [ 164.426604][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.436052][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.452152][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.491007][ T8829] device veth0_vlan entered promiscuous mode [ 164.505077][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.521604][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.542298][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.621389][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.656556][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.686807][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.712478][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.726904][ T8624] batman_adv: batadv0: Interface activated: batadv_slave_0 19:14:40 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.controllers\x00', 0x2761, 0x0) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}, {{&(0x7f0000000480)=@caif=@dbg={0x1d}, 0x80, 0x0}}], 0x2, 0x0) [ 164.770087][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.785876][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.796059][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.807313][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.833129][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.843815][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.858486][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.883126][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.912201][ T8735] device veth0_macvtap entered promiscuous mode 19:14:41 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.controllers\x00', 0x2761, 0x0) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}, {{&(0x7f0000000480)=@caif=@dbg={0x1d}, 0x80, 0x0}}], 0x2, 0x0) [ 164.928373][ T9122] device veth0_vlan entered promiscuous mode [ 164.949801][ T8829] device veth1_vlan entered promiscuous mode [ 164.968021][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.002316][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.013100][ T8624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.023714][ T8624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.037302][ T8624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.045413][ T17] Bluetooth: hci5: command 0x0419 tx timeout [ 165.049379][ T711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.062078][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.070455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.081245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.089847][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.090523][ T711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.098894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.115640][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.125650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.138436][ T8735] device veth1_macvtap entered promiscuous mode [ 165.175100][ T8624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.186416][ T8624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.213662][ T8624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 19:14:41 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.controllers\x00', 0x2761, 0x0) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}, {{&(0x7f0000000480)=@caif=@dbg={0x1d}, 0x80, 0x0}}], 0x2, 0x0) [ 165.228603][ T8624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.244159][ T9809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.266046][ T9122] device veth1_vlan entered promiscuous mode 19:14:41 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 165.362802][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.378912][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.412394][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.424081][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.443314][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.472090][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.485844][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.529673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.543719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.563961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.584158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.629822][ C1] hrtimer: interrupt took 33740 ns [ 165.630453][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.693864][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.716338][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.733098][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.744027][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.755561][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.803428][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.812630][ T8829] device veth0_macvtap entered promiscuous mode [ 165.830288][ T9122] device veth0_macvtap entered promiscuous mode [ 165.892328][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.903415][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 19:14:42 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 165.954156][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.008231][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.028196][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.057581][ T8829] device veth1_macvtap entered promiscuous mode [ 166.091137][ T8735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.130630][ T8735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.197745][ T8735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.229531][ T8735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.306708][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.323499][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.426663][ T9122] device veth1_macvtap entered promiscuous mode [ 166.487169][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.514796][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.540060][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.553800][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.566795][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.578566][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:14:42 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 166.590332][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.611144][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.624804][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.685864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.705062][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 19:14:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) exit(0x0) dup2(r0, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) sync() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) syz_open_procfs(0x0, 0x0) [ 166.770672][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.834810][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.861025][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.899169][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.929167][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.955364][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.973161][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 19:14:43 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 167.006637][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.026895][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.072850][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.081273][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.088909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.125404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.145514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.180315][ T8829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.248025][ T8829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.275040][ T8829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.303055][ T8829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.387638][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.415296][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.434645][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.455349][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.479793][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.496001][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.518526][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.536861][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.571157][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.613222][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.657473][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.726466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.739888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.756545][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.770681][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.782369][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.793791][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.817555][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.831226][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.842166][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.855293][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.874647][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.886413][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.899207][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.937454][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.963136][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.987102][ T9813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.996551][ T9813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.006594][ T9813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.023454][ T9122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.033371][ T9122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.044296][ T9122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.055222][ T9122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.153886][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.179442][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.244794][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.362791][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.370845][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.416877][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.440017][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.462849][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.476138][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.503901][ T711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.519069][ T711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.553438][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.561471][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.599409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.624682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.742141][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.806757][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.852059][ T35] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 168.859352][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.889655][ T9986] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 169.372229][ T35] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.387113][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.397114][ T35] usb 3-1: Product: syz [ 169.401282][ T35] usb 3-1: Manufacturer: syz [ 169.407454][ T35] usb 3-1: SerialNumber: syz [ 169.467814][ T35] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 170.111922][ T35] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.533529][ T5] usb 3-1: USB disconnect, device number 2 [ 171.211891][ T35] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 171.219554][ T35] ath9k_htc: Failed to initialize the device [ 171.228935][ T5] usb 3-1: ath9k_htc: USB layer deinitialized 19:14:47 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffda1, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xfffffffffffffdaa, "da29ba70", {0x3, 0x0, 0x7}}) 19:14:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) exit(0x0) dup2(r0, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) sync() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) syz_open_procfs(0x0, 0x0) [ 171.611823][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd 19:14:47 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 19:14:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x5, @ipv4={[], [], @private}}]}}}]}, 0x50}}, 0x0) 19:14:47 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x7}, 0x14) [ 171.719756][T10026] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 19:14:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x5, @ipv4={[], [], @private}}]}}}]}, 0x50}}, 0x0) 19:14:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) exit(0x0) dup2(r0, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) sync() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) syz_open_procfs(0x0, 0x0) [ 172.205816][T10040] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 19:14:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x5, @ipv4={[], [], @private}}]}}}]}, 0x50}}, 0x0) [ 172.352417][ T5] usb 3-1: device descriptor read/64, error -71 19:14:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:48 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 172.556114][T10049] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 19:14:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x7}, 0x14) [ 172.622035][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.143272][ T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.162844][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.170885][ T5] usb 3-1: Product: syz [ 173.200029][ T5] usb 3-1: Manufacturer: syz [ 173.223491][ T5] usb 3-1: SerialNumber: syz [ 173.283756][ T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.911983][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.358879][ T3799] usb 3-1: USB disconnect, device number 4 19:14:51 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffda1, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xfffffffffffffdaa, "da29ba70", {0x3, 0x0, 0x7}}) 19:14:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 19:14:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x7}, 0x14) [ 174.962069][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 174.984908][ T5] ath9k_htc: Failed to initialize the device [ 175.023734][ T3799] usb 3-1: ath9k_htc: USB layer deinitialized 19:14:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 19:14:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:51 executing program 4: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2400000052001f00ff03f5f9002304050a04f501080001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:14:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) [ 175.451862][ T3799] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.508832][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:14:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 19:14:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) [ 175.982976][ T3799] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.016970][ T3799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.076985][ T3799] usb 3-1: Product: syz [ 176.087562][ T3799] usb 3-1: Manufacturer: syz [ 176.099659][ T3799] usb 3-1: SerialNumber: syz [ 176.244014][ T3799] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.851895][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 177.319139][ T3799] usb 3-1: USB disconnect, device number 5 19:14:53 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffda1, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xfffffffffffffdaa, "da29ba70", {0x3, 0x0, 0x7}}) 19:14:53 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x252da778b17d5c0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 19:14:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0xfff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 19:14:53 executing program 4: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2400000052001f00ff03f5f9002304050a04f501080001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:14:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) [ 177.922087][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 177.930192][ T5] ath9k_htc: Failed to initialize the device [ 177.944179][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.008807][ T3799] usb 3-1: ath9k_htc: USB layer deinitialized 19:14:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) 19:14:54 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) 19:14:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) 19:14:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 178.441968][ T3799] usb 3-1: new high-speed USB device number 6 using dummy_hcd 19:14:54 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) 19:14:54 executing program 3: clone(0x1000000218007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x4040, 0x0) [ 178.981935][ T3799] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.991561][ T3799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.009598][ T3799] usb 3-1: Product: syz [ 179.015166][ T3799] usb 3-1: Manufacturer: syz [ 179.019796][ T3799] usb 3-1: SerialNumber: syz [ 179.083435][ T3799] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.682048][ T3799] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.140959][ T35] usb 3-1: USB disconnect, device number 6 19:14:56 executing program 4: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2400000052001f00ff03f5f9002304050a04f501080001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:14:56 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8000, 0x1, 0x0, 0x4, 0x0, 0x8}, &(0x7f0000000240)=0x20) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x800) sendmsg$netlink(r0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 180.721904][ T3799] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 180.729783][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.729875][ T3799] ath9k_htc: Failed to initialize the device [ 180.765802][T10198] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 19:14:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 180.838539][ T35] usb 3-1: ath9k_htc: USB layer deinitialized 19:14:57 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) 19:14:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff44, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000036000511d25a80648c6c940d0124fc6010003040090002000200000037153e370a00018025645500d1bd", 0x2e}], 0x1}, 0x0) 19:14:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 181.086683][T10214] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 19:14:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:14:57 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8000, 0x1, 0x0, 0x4, 0x0, 0x8}, &(0x7f0000000240)=0x20) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x800) sendmsg$netlink(r0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:14:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 181.439294][T10228] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 181.555400][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:14:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff44, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000036000511d25a80648c6c940d0124fc6010003040090002000200000037153e370a00018025645500d1bd", 0x2e}], 0x1}, 0x0) 19:14:57 executing program 0: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8000, 0x1, 0x0, 0x4, 0x0, 0x8}, &(0x7f0000000240)=0x20) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x800) sendmsg$netlink(r0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x14 -90 [ 190.300477][ T17] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5 [ 190.470512][ T17] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 190.692886][ T17] usb 5-1: USB disconnect, device number 2 [ 190.973366][ T3007] usb 2-1: USB disconnect, device number 3 [ 191.051781][ T35] usb 2-1.1: new full-speed USB device number 4 using dummy_hcd [ 191.083440][ T35] usb 2-1.1: parent hub has no TT [ 191.125849][ T35] usb 2-1-port1: attempt power cycle [ 191.482461][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.741770][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 191.862130][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.881937][ T3007] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.903638][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.929193][ T17] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.942503][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.958500][ T17] usb 5-1: config 0 descriptor?? 19:15:08 executing program 5: syz_usb_connect(0x0, 0x224, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8e, 0xbf, 0x1d, 0x40, 0x4c1, 0x9d, 0x5867, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd5, 0xe0, 0x7b}}]}}]}}, 0x0) 19:15:08 executing program 2: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0xffffffffffffffeb, 0x0, 0x0) 19:15:08 executing program 0: syz_usb_connect(0x0, 0x234, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000076fdef0857a2132084fc000000010902240001000000000904000002dc32a60009050f2e0000000000090504ea"], 0x0) 19:15:08 executing program 3: request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='bridge_slave_1\x00', 0xfffffffffffffffe) 19:15:08 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000072a9000a7c900be0017cf6643a30b09007a1583ce"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 19:15:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 192.121791][ T3007] usb 2-1: Using ep0 maxpacket: 16 [ 192.132974][ T17] usbhid 5-1:0.0: can't add hid device: -71 [ 192.140988][ T17] usbhid: probe of 5-1:0.0 failed with error -71 [ 192.194448][ T3007] usb 2-1: device descriptor read/all, error -71 [ 192.207859][ T17] usb 5-1: USB disconnect, device number 3 19:15:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) 19:15:08 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 19:15:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) [ 192.461962][T10471] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.482545][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd 19:15:08 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 19:15:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) [ 192.581891][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.652064][ T3007] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.701739][T10471] usb 1-1: Using ep0 maxpacket: 8 19:15:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) [ 192.822371][T10471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 192.833113][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 192.839965][T10471] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 192.850886][ T35] usb 6-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=58.67 [ 192.861137][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.870829][T10471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 192.885498][ T35] usb 6-1: config 0 descriptor?? [ 192.890912][T10471] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 192.907835][T10471] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=fc.84 [ 192.918897][ T3007] usb 2-1: Using ep0 maxpacket: 16 [ 192.925423][T10471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.939598][T10471] usb 1-1: config 0 descriptor?? [ 192.954315][ T35] gspca_main: vicam-2.14.0 probing 04c1:009d [ 192.960918][ T35] usb 6-1: Direct firmware load for vicam/firmware.fw failed with error -2 [ 192.970206][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.983177][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.996822][ T35] gspca_vicam: Failed to load "vicam/firmware.fw": -2 [ 193.007042][ T17] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.018630][ T35] vicam: probe of 6-1:0.0 failed with error -2 [ 193.035252][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.049743][ T17] usb 5-1: config 0 descriptor?? [ 193.062903][ T3007] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.091369][ T3007] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 193.159653][ T3007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.195564][ T3007] usb 2-1: config 0 descriptor?? [ 193.224974][ T35] usb 6-1: USB disconnect, device number 5 [ 193.254565][ T3007] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 193.299875][ T3007] usb 1-1: USB disconnect, device number 5 [ 193.549461][ T3007] usb 2-1: USB disconnect, device number 9 [ 193.600348][ T17] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input6 [ 193.707340][ T17] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 19:15:10 executing program 5: syz_usb_connect(0x0, 0x224, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8e, 0xbf, 0x1d, 0x40, 0x4c1, 0x9d, 0x5867, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd5, 0xe0, 0x7b}}]}}]}}, 0x0) 19:15:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) [ 193.942147][ C1] ================================================================================ [ 193.952143][ C1] UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1315:20 [ 193.959720][ C1] shift exponent 4294967295 is too large for 32-bit type 'int' [ 193.967321][ C1] CPU: 1 PID: 9122 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 193.976282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.987084][ C1] Call Trace: [ 193.990415][ C1] [ 193.993330][ C1] dump_stack+0x107/0x163 [ 193.997970][ C1] ubsan_epilogue+0xb/0x5a [ 194.002503][ C1] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 194.009932][ C1] snto32.cold+0x37/0x3c [ 194.014208][ C1] hid_report_raw_event+0x7a9/0x11b0 [ 194.019664][ C1] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 194.026064][ C1] hid_input_report+0x360/0x4c0 [ 194.031253][ C1] hid_irq_in+0x50e/0x690 [ 194.035742][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 194.041869][ C1] usb_hcd_giveback_urb+0x38c/0x430 [ 194.047462][ C1] dummy_timer+0x11f4/0x32a0 [ 194.052240][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 194.057757][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 194.062739][ C1] call_timer_fn+0x1a5/0x710 [ 194.067463][ C1] ? msleep_interruptible+0x170/0x170 [ 194.073735][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 194.078645][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 194.083881][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 194.088766][ C1] __run_timers.part.0+0x692/0xa80 [ 194.094025][ C1] ? call_timer_fn+0x710/0x710 [ 194.098939][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 194.104161][ C1] ? sched_clock+0x2a/0x40 [ 194.108607][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 194.113667][ C1] run_timer_softirq+0xb3/0x1d0 [ 194.118548][ C1] __do_softirq+0x2bc/0xa77 [ 194.123188][ C1] asm_call_irq_on_stack+0xf/0x20 [ 194.128236][ C1] [ 194.131190][ C1] do_softirq_own_stack+0xaa/0xd0 [ 194.136246][ C1] __irq_exit_rcu+0x17f/0x200 [ 194.140941][ C1] irq_exit_rcu+0x5/0x20 [ 194.145315][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 194.151148][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 194.157615][ C1] RIP: 0010:clear_page_erms+0x7/0x10 [ 194.162920][ C1] Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 aa c3 cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 53 48 89 fb [ 194.182768][ C1] RSP: 0018:ffffc90000f0f120 EFLAGS: 00010246 [ 194.189061][ C1] RAX: 0000000000000000 RBX: ffffea00006ee800 RCX: 0000000000000540 [ 194.197237][ C1] RDX: 1ffff11004797c78 RSI: 0000000000000001 RDI: ffff88801bba0ac0 [ 194.205359][ C1] RBP: ffff888023cbd040 R08: 0000000000000001 R09: ffffed1003774000 [ 194.213356][ C1] R10: fffff940000ddd06 R11: 0000000000000100 R12: ffffed1004797caa [ 194.222047][ C1] R13: dffffc0000000000 R14: ffffea00006ee840 R15: ffff888023cbe550 [ 194.230829][ C1] kernel_init_free_pages+0x99/0x120 [ 194.236433][ C1] get_page_from_freelist+0x1c86/0x3fc0 [ 194.242593][ C1] ? fs_reclaim_release+0x9c/0xe0 [ 194.247655][ C1] ? __zone_watermark_ok+0x450/0x450 [ 194.252969][ C1] __alloc_pages_nodemask+0x2d6/0x740 [ 194.258448][ C1] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 194.265269][ C1] alloc_pages_current+0x18c/0x2a0 [ 194.270500][ C1] __vmalloc_area_node+0x3de/0x6e0 [ 194.275733][ C1] ? xt_counters_alloc+0x4c/0x70 [ 194.280686][ C1] ? xt_counters_alloc+0x4c/0x70 [ 194.285672][ C1] vzalloc+0x116/0x1a0 [ 194.289847][ C1] xt_counters_alloc+0x4c/0x70 [ 194.294641][ C1] __do_replace+0x9a/0x8a0 [ 194.299096][ C1] ? ipt_unregister_table+0x40/0x40 [ 194.304321][ C1] compat_do_replace.constprop.0+0x29c/0x470 [ 194.310542][ C1] ? do_ipt_get_ctl+0x9d0/0x9d0 [ 194.315539][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 194.321808][ C1] ? security_capable+0x8f/0xc0 [ 194.326784][ C1] do_ipt_set_ctl+0x595/0xb50 [ 194.331655][ C1] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 194.337757][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 194.342627][ C1] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 194.348562][ C1] ? compat_do_replace.constprop.0+0x470/0x470 [ 194.354853][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 194.361046][ C1] ? wait_for_completion_io+0x260/0x260 [ 194.366623][ C1] ? ip_setsockopt+0xb29/0x3ac0 [ 194.371497][ C1] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 194.377500][ C1] nf_setsockopt+0x83/0xe0 [ 194.381940][ C1] ip_setsockopt+0x3c3/0x3ac0 [ 194.386674][ C1] ? ip_ra_control+0x580/0x580 [ 194.391468][ C1] ? aa_profile_af_perm+0x2e0/0x2e0 [ 194.396863][ C1] ? lock_chain_count+0x20/0x20 [ 194.401752][ C1] ? mark_lock+0xf7/0x1720 [ 194.406209][ C1] ? tcp_setsockopt+0x136/0x2440 [ 194.411250][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 194.418037][ C1] tcp_setsockopt+0x136/0x2440 [ 194.423098][ C1] ? __lock_acquire+0x16c2/0x54b0 [ 194.428333][ C1] ? tcp_sock_set_keepidle+0x40/0x40 [ 194.433644][ C1] ? aa_sk_perm+0x385/0xb70 [ 194.438248][ C1] ? aa_af_perm+0x230/0x230 [ 194.442786][ C1] ? sock_common_setsockopt+0x2b/0x100 [ 194.448365][ C1] __sys_setsockopt+0x2db/0x610 [ 194.453231][ C1] ? sock_common_recvmsg+0x1a0/0x1a0 [ 194.458534][ C1] ? __ia32_sys_recv+0x100/0x100 [ 194.463507][ C1] __do_compat_sys_socketcall+0x4ef/0x660 [ 194.469261][ C1] ? bpf_sk_storage_clone+0x760/0x760 [ 194.474706][ C1] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 194.481342][ C1] __do_fast_syscall_32+0x56/0x80 [ 194.486748][ C1] do_fast_syscall_32+0x2f/0x70 [ 194.491613][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 194.497967][ C1] RIP: 0023:0xf7fb0549 [ 194.502176][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 194.521911][ C1] RSP: 002b:00000000090bf6c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000066 [ 194.530975][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000090bf6dc [ 194.540542][ C1] RDX: 00000000090bf81c RSI: 00000000090bf788 RDI: 00000000090bfdac [ 194.548556][ C1] RBP: 0000000008161948 R08: 0000000000000000 R09: 0000000000000000 [ 194.556991][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 194.565161][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.573165][ C1] ================================================================================ [ 194.583027][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 194.589769][ C1] CPU: 1 PID: 9122 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 194.598384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.608948][ C1] Call Trace: [ 194.612513][ C1] [ 194.615473][ C1] dump_stack+0x107/0x163 [ 194.620057][ C1] panic+0x343/0x77f [ 194.624169][ C1] ? __warn_printk+0xf3/0xf3 [ 194.629063][ C1] ? ubsan_epilogue+0x3e/0x5a [ 194.633858][ C1] ubsan_epilogue+0x54/0x5a [ 194.638387][ C1] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 194.645384][ C1] snto32.cold+0x37/0x3c [ 194.649769][ C1] hid_report_raw_event+0x7a9/0x11b0 [ 194.655280][ C1] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 194.661300][ C1] hid_input_report+0x360/0x4c0 [ 194.666565][ C1] hid_irq_in+0x50e/0x690 [ 194.671047][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 194.676487][ C1] usb_hcd_giveback_urb+0x38c/0x430 [ 194.681713][ C1] dummy_timer+0x11f4/0x32a0 [ 194.686634][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 194.691589][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 194.696393][ C1] call_timer_fn+0x1a5/0x710 [ 194.701018][ C1] ? msleep_interruptible+0x170/0x170 [ 194.706527][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 194.711420][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 194.716746][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 194.721543][ C1] __run_timers.part.0+0x692/0xa80 [ 194.726880][ C1] ? call_timer_fn+0x710/0x710 [ 194.732077][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 194.737748][ C1] ? sched_clock+0x2a/0x40 [ 194.742432][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 194.747316][ C1] run_timer_softirq+0xb3/0x1d0 [ 194.752371][ C1] __do_softirq+0x2bc/0xa77 [ 194.757075][ C1] asm_call_irq_on_stack+0xf/0x20 [ 194.762304][ C1] [ 194.765286][ C1] do_softirq_own_stack+0xaa/0xd0 [ 194.770896][ C1] __irq_exit_rcu+0x17f/0x200 [ 194.776050][ C1] irq_exit_rcu+0x5/0x20 [ 194.780396][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 194.786410][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 194.792498][ C1] RIP: 0010:clear_page_erms+0x7/0x10 [ 194.798188][ C1] Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 aa c3 cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 53 48 89 fb [ 194.818292][ C1] RSP: 0018:ffffc90000f0f120 EFLAGS: 00010246 [ 194.824563][ C1] RAX: 0000000000000000 RBX: ffffea00006ee800 RCX: 0000000000000540 [ 194.832746][ C1] RDX: 1ffff11004797c78 RSI: 0000000000000001 RDI: ffff88801bba0ac0 [ 194.841563][ C1] RBP: ffff888023cbd040 R08: 0000000000000001 R09: ffffed1003774000 [ 194.849666][ C1] R10: fffff940000ddd06 R11: 0000000000000100 R12: ffffed1004797caa [ 194.857687][ C1] R13: dffffc0000000000 R14: ffffea00006ee840 R15: ffff888023cbe550 [ 194.866095][ C1] kernel_init_free_pages+0x99/0x120 [ 194.871691][ C1] get_page_from_freelist+0x1c86/0x3fc0 [ 194.877435][ C1] ? fs_reclaim_release+0x9c/0xe0 [ 194.882567][ C1] ? __zone_watermark_ok+0x450/0x450 [ 194.887918][ C1] __alloc_pages_nodemask+0x2d6/0x740 [ 194.893623][ C1] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 194.900540][ C1] alloc_pages_current+0x18c/0x2a0 [ 194.905884][ C1] __vmalloc_area_node+0x3de/0x6e0 [ 194.911026][ C1] ? xt_counters_alloc+0x4c/0x70 [ 194.916027][ C1] ? xt_counters_alloc+0x4c/0x70 [ 194.921084][ C1] vzalloc+0x116/0x1a0 [ 194.925177][ C1] xt_counters_alloc+0x4c/0x70 [ 194.929974][ C1] __do_replace+0x9a/0x8a0 [ 194.934434][ C1] ? ipt_unregister_table+0x40/0x40 [ 194.939771][ C1] compat_do_replace.constprop.0+0x29c/0x470 [ 194.946137][ C1] ? do_ipt_get_ctl+0x9d0/0x9d0 [ 194.951175][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 194.957549][ C1] ? security_capable+0x8f/0xc0 [ 194.962444][ C1] do_ipt_set_ctl+0x595/0xb50 [ 194.967362][ C1] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 194.973759][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 194.978655][ C1] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 194.984607][ C1] ? compat_do_replace.constprop.0+0x470/0x470 [ 194.991059][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 194.996668][ C1] ? wait_for_completion_io+0x260/0x260 [ 195.002360][ C1] ? ip_setsockopt+0xb29/0x3ac0 [ 195.007481][ C1] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 195.013845][ C1] nf_setsockopt+0x83/0xe0 [ 195.018517][ C1] ip_setsockopt+0x3c3/0x3ac0 [ 195.023616][ C1] ? ip_ra_control+0x580/0x580 [ 195.028474][ C1] ? aa_profile_af_perm+0x2e0/0x2e0 [ 195.033882][ C1] ? lock_chain_count+0x20/0x20 [ 195.038775][ C1] ? mark_lock+0xf7/0x1720 [ 195.043332][ C1] ? tcp_setsockopt+0x136/0x2440 [ 195.048379][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 195.054845][ C1] tcp_setsockopt+0x136/0x2440 [ 195.059668][ C1] ? __lock_acquire+0x16c2/0x54b0 [ 195.064816][ C1] ? tcp_sock_set_keepidle+0x40/0x40 [ 195.070149][ C1] ? aa_sk_perm+0x385/0xb70 [ 195.074758][ C1] ? aa_af_perm+0x230/0x230 [ 195.079465][ C1] ? sock_common_setsockopt+0x2b/0x100 [ 195.084959][ C1] __sys_setsockopt+0x2db/0x610 [ 195.090322][ C1] ? sock_common_recvmsg+0x1a0/0x1a0 [ 195.095722][ C1] ? __ia32_sys_recv+0x100/0x100 [ 195.100822][ C1] __do_compat_sys_socketcall+0x4ef/0x660 [ 195.106831][ C1] ? bpf_sk_storage_clone+0x760/0x760 [ 195.112252][ C1] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 195.118908][ C1] __do_fast_syscall_32+0x56/0x80 [ 195.123968][ C1] do_fast_syscall_32+0x2f/0x70 [ 195.129477][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 195.135986][ C1] RIP: 0023:0xf7fb0549 [ 195.140278][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.159912][ C1] RSP: 002b:00000000090bf6c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000066 [ 195.168452][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000090bf6dc [ 195.176627][ C1] RDX: 00000000090bf81c RSI: 00000000090bf788 RDI: 00000000090bfdac [ 195.184724][ C1] RBP: 0000000008161948 R08: 0000000000000000 R09: 0000000000000000 [ 195.192805][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 195.200973][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.209756][ C1] Kernel Offset: disabled [ 195.214389][ C1] Rebooting in 86400 seconds..