[ OK ] Started Getty on tty2. Starting Load/Save RF Kill Switch Status... [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. 2020/10/13 18:36:08 fuzzer started 2020/10/13 18:36:09 dialing manager at 10.128.0.26:38079 2020/10/13 18:36:09 syscalls: 3264 2020/10/13 18:36:09 code coverage: enabled 2020/10/13 18:36:09 comparison tracing: enabled 2020/10/13 18:36:09 extra coverage: enabled 2020/10/13 18:36:09 setuid sandbox: enabled 2020/10/13 18:36:09 namespace sandbox: enabled 2020/10/13 18:36:09 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/13 18:36:09 fault injection: enabled 2020/10/13 18:36:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/13 18:36:09 net packet injection: enabled 2020/10/13 18:36:09 net device setup: enabled 2020/10/13 18:36:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/13 18:36:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/13 18:36:09 USB emulation: enabled 2020/10/13 18:36:09 hci packet injection: enabled 2020/10/13 18:36:09 wifi device emulation: enabled 18:37:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r1 = gettid() tkill(r1, 0x31) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x5c}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) 18:37:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x40, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x70}}, 0x0) 18:37:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 18:37:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@loopback}}, [@policy_type={0xa, 0x10, {0x2}}, @migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in6=@empty, @in6=@dev}]}]}, 0xac}}, 0x0) 18:37:40 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x7}, [@obex={0x5, 0x24, 0x15, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x20}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x4, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x18, 0x47}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x40, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, [{0x31, &(0x7f0000000180)=@string={0x31, 0x3, "7f22274ecf55a4cb18d0b383d8492f2c5df332a2f8a866d449e7ea5ce1ece558dfad06b3d2cb64ec9f70fa2b6f323c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) 18:37:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x19) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @private1, @mcast2, {[], @echo_request}}}}}, 0x0) syzkaller login: [ 162.861098][ T6867] IPVS: ftp: loaded support on port[0] = 21 [ 163.072292][ T6902] IPVS: ftp: loaded support on port[0] = 21 [ 163.290137][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 163.354023][ T6988] IPVS: ftp: loaded support on port[0] = 21 [ 163.592427][ T7048] IPVS: ftp: loaded support on port[0] = 21 [ 163.616757][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.669605][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.698783][ T6867] device bridge_slave_0 entered promiscuous mode [ 163.727637][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 163.764891][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.772005][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.788646][ T6867] device bridge_slave_1 entered promiscuous mode [ 163.876638][ T7157] IPVS: ftp: loaded support on port[0] = 21 [ 163.920633][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.987340][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.093723][ T6867] team0: Port device team_slave_0 added [ 164.125150][ T6988] chnl_net:caif_netlink_parms(): no params data found [ 164.141721][ T6867] team0: Port device team_slave_1 added [ 164.158018][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.167070][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.178913][ T6902] device bridge_slave_0 entered promiscuous mode [ 164.260281][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.280108][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.314113][ T7325] IPVS: ftp: loaded support on port[0] = 21 [ 164.328253][ T6902] device bridge_slave_1 entered promiscuous mode [ 164.418708][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.427802][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.457020][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.525688][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.533422][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.562498][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.586382][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.604896][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.682519][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.691559][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.700688][ T6988] device bridge_slave_0 entered promiscuous mode [ 164.760647][ T6902] team0: Port device team_slave_0 added [ 164.766944][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.778506][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.788364][ T6988] device bridge_slave_1 entered promiscuous mode [ 164.801956][ T6867] device hsr_slave_0 entered promiscuous mode [ 164.809335][ T6867] device hsr_slave_1 entered promiscuous mode [ 164.824209][ T7149] Bluetooth: hci0: command 0x0409 tx timeout [ 164.858308][ T6902] team0: Port device team_slave_1 added [ 164.998346][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.005838][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.033809][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.062963][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 165.087479][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.101120][ T7048] chnl_net:caif_netlink_parms(): no params data found [ 165.144568][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.152341][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.179501][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.192295][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 165.220164][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.245546][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 165.303067][ T2548] Bluetooth: hci2: command 0x0409 tx timeout [ 165.366832][ T6988] team0: Port device team_slave_0 added [ 165.382630][ T6902] device hsr_slave_0 entered promiscuous mode [ 165.391074][ T6902] device hsr_slave_1 entered promiscuous mode [ 165.403135][ T6902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.411243][ T6902] Cannot create hsr debugfs directory [ 165.463653][ T6988] team0: Port device team_slave_1 added [ 165.553210][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 165.585202][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.592471][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.621128][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.695799][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.705739][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.742813][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.765336][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.772478][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.781431][ T7157] device bridge_slave_0 entered promiscuous mode [ 165.793451][ T7149] Bluetooth: hci4: command 0x0409 tx timeout [ 165.798875][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.807916][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.816788][ T7325] device bridge_slave_0 entered promiscuous mode [ 165.880134][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.887483][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.899862][ T7157] device bridge_slave_1 entered promiscuous mode [ 165.907781][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.915325][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.926256][ T7325] device bridge_slave_1 entered promiscuous mode [ 165.951103][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.958944][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.970525][ T7048] device bridge_slave_0 entered promiscuous mode [ 165.979703][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.987561][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.996212][ T7048] device bridge_slave_1 entered promiscuous mode [ 166.052046][ T6988] device hsr_slave_0 entered promiscuous mode [ 166.070344][ T6988] device hsr_slave_1 entered promiscuous mode [ 166.079879][ T6988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.088527][ T6988] Cannot create hsr debugfs directory [ 166.115019][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.149209][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.161563][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.173642][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.211073][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.224848][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.258875][ T6867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.266138][ T2548] Bluetooth: hci5: command 0x0409 tx timeout [ 166.323323][ T6867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.341780][ T6867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.365029][ T7325] team0: Port device team_slave_0 added [ 166.384552][ T6867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.412171][ T7048] team0: Port device team_slave_0 added [ 166.447086][ T7325] team0: Port device team_slave_1 added [ 166.457550][ T7157] team0: Port device team_slave_0 added [ 166.470662][ T7157] team0: Port device team_slave_1 added [ 166.479646][ T7048] team0: Port device team_slave_1 added [ 166.592146][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.601574][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.629968][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.647384][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.655332][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.683643][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.700820][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.707966][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.734599][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.751334][ T6902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.762779][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.770028][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.797377][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.809906][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.821976][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.854124][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.881325][ T6902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.891772][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.903624][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 166.904156][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.936126][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.977730][ T6902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.031456][ T6902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.056021][ T7048] device hsr_slave_0 entered promiscuous mode [ 167.068885][ T7048] device hsr_slave_1 entered promiscuous mode [ 167.077671][ T7048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.086318][ T7048] Cannot create hsr debugfs directory [ 167.104248][ T7157] device hsr_slave_0 entered promiscuous mode [ 167.111146][ T7157] device hsr_slave_1 entered promiscuous mode [ 167.120323][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.128742][ T7157] Cannot create hsr debugfs directory [ 167.143085][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 167.159136][ T7325] device hsr_slave_0 entered promiscuous mode [ 167.166619][ T7325] device hsr_slave_1 entered promiscuous mode [ 167.174155][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.181739][ T7325] Cannot create hsr debugfs directory [ 167.383642][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 167.432551][ T6988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.457937][ T6988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.497124][ T6988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.558989][ T6988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.623655][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 167.651049][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.765768][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.778813][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.800259][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.839870][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.873047][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 167.875391][ T7157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.908642][ T7157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.919095][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.929719][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.938980][ T2548] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.946796][ T2548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.960664][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.970148][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.979207][ T2548] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.986436][ T2548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.010643][ T7157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.021320][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.031803][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.042298][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.089967][ T7157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.110024][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.124137][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.132142][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.148673][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.162228][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.172777][ T7048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.213632][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.222580][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.234516][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.244673][ T7048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.263699][ T7048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.290814][ T7048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.337134][ T7325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.348817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.369328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.378552][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.385723][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.394296][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.402992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.412267][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.419431][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.428264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.437823][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.449369][ T12] Bluetooth: hci5: command 0x041b tx timeout [ 168.458345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.467205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.476298][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.485172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.500119][ T7325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.527102][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.550420][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.559685][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.570072][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.579065][ T7325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.621793][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.635156][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.646656][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.669502][ T7325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.745161][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.758557][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.770403][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.779987][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.826515][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.853034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.861064][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.879586][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.936958][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.950883][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.983805][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 168.998992][ T6988] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.008884][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.017289][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.026171][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.038871][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.047157][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.055676][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.105405][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.125935][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.134795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.145704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.155651][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.162795][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.212948][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.222652][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.224745][ T2548] Bluetooth: hci1: command 0x040f tx timeout [ 169.234146][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.249131][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.256309][ T7149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.265534][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.276086][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.285681][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.295355][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.305755][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.324229][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.331506][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.401292][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.443188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.451288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.464031][ T2548] Bluetooth: hci2: command 0x040f tx timeout [ 169.468278][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.480221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.489649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.499398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.509260][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.516417][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.524748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.576247][ T6867] device veth0_vlan entered promiscuous mode [ 169.591006][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.600183][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.610831][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.621747][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.631287][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.640505][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.649110][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.658356][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.703898][ T8162] Bluetooth: hci3: command 0x040f tx timeout [ 169.712634][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.730853][ T6988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.742827][ T6988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.762384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.771620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.779772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.795066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.807212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.815567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.823575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.832204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.841505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.850626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.870214][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.908082][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.924929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.938909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.947755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.956862][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.966552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.976165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.985322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.993137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.004029][ T6867] device veth1_vlan entered promiscuous mode [ 170.013288][ T12] Bluetooth: hci4: command 0x040f tx timeout [ 170.035938][ T6902] device veth0_vlan entered promiscuous mode [ 170.055114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.063118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.073144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.082112][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.091377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.098552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.107205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.116279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.125337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.134798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.143406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.150489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.158702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.167613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.176653][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.183853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.234940][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.243039][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.253813][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.262432][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.273075][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.280263][ T7149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.288433][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.298148][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.333632][ T6902] device veth1_vlan entered promiscuous mode [ 170.349636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.358295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.374134][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.382520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.392097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.401638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.410788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.421698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.466948][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.476745][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.486252][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.497259][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.507398][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.513943][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 170.515513][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.529007][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.538532][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.550229][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.559778][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.568965][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.578143][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.619393][ T6902] device veth0_macvtap entered promiscuous mode [ 170.652064][ T6867] device veth0_macvtap entered promiscuous mode [ 170.671156][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.682667][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.697440][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.707229][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.720586][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.730495][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.745646][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.762967][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.782497][ T7325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.795431][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.808315][ T6902] device veth1_macvtap entered promiscuous mode [ 170.828013][ T6867] device veth1_macvtap entered promiscuous mode [ 170.839878][ T7048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.852364][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.862496][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.870782][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.879174][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.890046][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.898732][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.908679][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.917795][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.926818][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.985586][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.998983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.008145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.025074][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.064378][ T12] Bluetooth: hci0: command 0x0419 tx timeout [ 171.074815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.085548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.094678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.102477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.115916][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.128865][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.140568][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.153725][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.171422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.180935][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.191236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.201054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.231287][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.246564][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.259255][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.274403][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.283162][ T6902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.292058][ T6902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.301657][ T6902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.304363][ T2548] Bluetooth: hci1: command 0x0419 tx timeout [ 171.310978][ T6902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.337185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.348849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.358374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.368865][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.381440][ T6867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.396412][ T6867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.406566][ T6867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.415802][ T6867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.439370][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.457015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.467632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.476880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.488229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.544059][ T2548] Bluetooth: hci2: command 0x0419 tx timeout [ 171.545514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.560320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.642475][ T6988] device veth0_vlan entered promiscuous mode [ 171.649991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.659412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.669051][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.678525][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.688007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.698174][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.709569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.718675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.727292][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.743112][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.784472][ T7149] Bluetooth: hci3: command 0x0419 tx timeout [ 171.803065][ T7157] device veth0_vlan entered promiscuous mode [ 171.863280][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.884508][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.920580][ T7048] device veth0_vlan entered promiscuous mode [ 171.936103][ T6988] device veth1_vlan entered promiscuous mode [ 172.006808][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.020057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.045806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.054793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.076546][ T7157] device veth1_vlan entered promiscuous mode [ 172.084560][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 172.115037][ T7325] device veth0_vlan entered promiscuous mode [ 172.148632][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.150345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.156859][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.174757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.182558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.204763][ T7048] device veth1_vlan entered promiscuous mode [ 172.212055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.232943][ T7325] device veth1_vlan entered promiscuous mode [ 172.358998][ T6988] device veth0_macvtap entered promiscuous mode [ 172.393080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.408691][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.427636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.437110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.447058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.456996][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.488335][ T7157] device veth0_macvtap entered promiscuous mode [ 172.510108][ T6988] device veth1_macvtap entered promiscuous mode [ 172.543627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.553774][ T413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.561982][ T413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.563944][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.587021][ T8160] Bluetooth: hci5: command 0x0419 tx timeout [ 172.591606][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.612149][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.621962][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.666966][ T7325] device veth0_macvtap entered promiscuous mode [ 172.683276][ T7157] device veth1_macvtap entered promiscuous mode [ 172.702535][ T7325] device veth1_macvtap entered promiscuous mode [ 172.705434][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.718845][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.729271][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.739882][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.758565][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.767679][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.784061][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.788120][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.802772][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.819137][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.831983][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.842867][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.855340][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.878190][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.886960][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.898285][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.922384][ T7048] device veth0_macvtap entered promiscuous mode [ 172.947929][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.985642][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.003548][ T6988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.027234][ T6988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.051654][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.053408][ C1] hrtimer: interrupt took 39765 ns [ 173.072090][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.085403][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.096827][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:37:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'vlan0\x00'}) [ 173.128005][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.163485][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.178894][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.192015][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.204433][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.213287][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.240603][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.256584][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.268729][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.288225][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.314932][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.333475][ T7048] device veth1_macvtap entered promiscuous mode [ 173.355640][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.386313][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:37:51 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}}}, 0x0) [ 173.415689][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.446061][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.456835][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.469751][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.500207][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:37:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1fffffe]}, 0x45c) [ 173.513949][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.528243][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.539448][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.559916][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.570529][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.582363][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.596803][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.607970][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.611440][ T8222] input: syz1 as /devices/virtual/input/input5 [ 173.621062][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.637493][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.665300][ T6988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.687539][ T6988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.709135][ T6988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.728175][ T6988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.743348][ T8222] input: syz1 as /devices/virtual/input/input6 [ 173.753853][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.765863][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.791508][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 18:37:52 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) [ 173.810925][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.832002][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.863079][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.870323][ T8237] delete_channel: no stack [ 173.887290][ T8238] delete_channel: no stack 18:37:52 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) [ 173.903086][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.917207][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.944751][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:37:52 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) [ 173.955874][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.972621][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.987178][ T8240] delete_channel: no stack [ 174.001463][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.038762][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.075726][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.076877][ T8243] delete_channel: no stack [ 174.097735][ T7157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.125880][ T7157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 18:37:52 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) [ 174.153588][ T7157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.162343][ T7157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.222216][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.234686][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.250481][ T8245] delete_channel: no stack 18:37:52 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) [ 174.266259][ T7325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.333603][ T7325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.342364][ T7325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.373627][ T7325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.380572][ T8248] delete_channel: no stack [ 174.535474][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.555312][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.573646][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.603414][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.626294][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.646207][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.663476][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.687775][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.712658][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.732337][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.768262][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.829894][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.844901][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.873223][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.894834][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.908607][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.921135][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.933429][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.947260][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.959372][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.971391][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.983481][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.994950][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.008316][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.039078][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.061789][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.077159][ T7048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.089859][ T7048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.099104][ T7048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.112458][ T7048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.218185][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.244016][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.277096][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.301873][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.345130][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.369421][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.423986][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.435567][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.488561][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.507131][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.509963][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.558640][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.569439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.579252][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.640489][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.664835][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.686500][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.734696][ T8312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.742821][ T8312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.776838][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.819219][ T2548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.836804][ T8312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.859295][ T8312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:37:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) [ 175.900952][ T7337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:37:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@loopback}}, [@policy_type={0xa, 0x10, {0x2}}, @migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in6=@empty, @in6=@dev}]}]}, 0xac}}, 0x0) [ 176.283976][ T8160] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 176.704764][ T8160] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 176.716000][ T8160] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 176.726112][ T8160] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 176.914648][ T8160] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.924908][ T8160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.933126][ T8160] usb 5-1: Product: ࠌ [ 176.941767][ T8160] usb 5-1: Manufacturer: చ [ 176.946989][ T8160] usb 5-1: SerialNumber: 䰊 [ 176.975884][ T8328] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 177.244658][ T8160] cdc_ncm 5-1:1.0: bind() failure [ 177.253663][ T8160] cdc_ncm 5-1:1.1: bind() failure [ 177.263376][ T8160] usb 5-1: USB disconnect, device number 2 [ 178.004019][ T8160] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 178.394161][ T8160] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 178.405098][ T8160] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 178.415138][ T8160] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 178.584141][ T8160] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.594388][ T8160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.602502][ T8160] usb 5-1: Product: ࠌ [ 178.608607][ T8160] usb 5-1: Manufacturer: చ [ 178.613203][ T8160] usb 5-1: SerialNumber: 䰊 [ 178.645828][ T8328] raw-gadget gadget: fail, usb_ep_enable returned -22 18:37:57 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x7}, [@obex={0x5, 0x24, 0x15, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x20}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x4, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x18, 0x47}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x40, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, [{0x31, &(0x7f0000000180)=@string={0x31, 0x3, "7f22274ecf55a4cb18d0b383d8492f2c5df332a2f8a866d449e7ea5ce1ece558dfad06b3d2cb64ec9f70fa2b6f323c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) 18:37:57 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) 18:37:57 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) 18:37:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 18:37:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 18:37:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@loopback}}, [@policy_type={0xa, 0x10, {0x2}}, @migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in6=@empty, @in6=@dev}]}]}, 0xac}}, 0x0) [ 178.919517][ T8160] cdc_ncm 5-1:1.0: bind() failure [ 178.930359][ T8160] cdc_ncm 5-1:1.1: bind() failure [ 178.990497][ T8160] usb 5-1: USB disconnect, device number 3 [ 179.001886][ T8380] delete_channel: no stack [ 179.012921][ T8378] delete_channel: no stack 18:37:57 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) 18:37:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 18:37:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@loopback}}, [@policy_type={0xa, 0x10, {0x2}}, @migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in6=@empty, @in6=@dev}]}]}, 0xac}}, 0x0) 18:37:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 18:37:57 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) [ 179.222956][ T8393] delete_channel: no stack 18:37:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x3}}]}, 0x38}}, 0x0) [ 179.310762][ T8399] delete_channel: no stack [ 179.399835][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.432103][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.457663][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.469217][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.484120][ T8160] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 179.874512][ T8160] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 179.895730][ T8160] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 179.919878][ T8160] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 180.094442][ T8160] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.103520][ T8160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.161065][ T8160] usb 5-1: Product: ࠌ [ 180.168953][ T8160] usb 5-1: Manufacturer: చ [ 180.182644][ T8160] usb 5-1: SerialNumber: 䰊 [ 180.224976][ T8385] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 180.484273][ T8160] cdc_ncm 5-1:1.0: bind() failure [ 180.500189][ T8160] cdc_ncm 5-1:1.1: bind() failure [ 180.508891][ T8160] usb 5-1: USB disconnect, device number 4 18:37:59 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x7}, [@obex={0x5, 0x24, 0x15, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x20}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x4, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x18, 0x47}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x40, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, [{0x31, &(0x7f0000000180)=@string={0x31, 0x3, "7f22274ecf55a4cb18d0b383d8492f2c5df332a2f8a866d449e7ea5ce1ece558dfad06b3d2cb64ec9f70fa2b6f323c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) 18:37:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x6c}}, 0x0) 18:37:59 executing program 3: rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x8) 18:37:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 18:37:59 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x23) dup2(r0, r1) 18:37:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x3}}]}, 0x38}}, 0x0) [ 181.070055][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.082963][ T8439] delete_channel: no stack 18:37:59 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000500)='/dev/video#\x00', 0x40, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001180)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000d058"}, 0x0, 0x2, @offset, 0xfffffffe}) [ 181.130787][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:37:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 18:37:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x6c}}, 0x0) 18:37:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x3}}]}, 0x38}}, 0x0) 18:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 181.367544][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.404242][ T2548] usb 5-1: new low-speed USB device number 5 using dummy_hcd 18:37:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x400000000000029, 0x0) [ 181.429726][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.804679][ T2548] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 181.824264][ T2548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 181.836145][ T2548] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 182.024527][ T2548] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.033608][ T2548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.043387][ T2548] usb 5-1: Product: ࠌ [ 182.048900][ T2548] usb 5-1: Manufacturer: చ [ 182.053617][ T2548] usb 5-1: SerialNumber: 䰊 [ 182.074736][ T8445] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 182.344444][ T2548] cdc_ncm 5-1:1.0: bind() failure [ 182.351319][ T2548] cdc_ncm 5-1:1.1: bind() failure [ 182.360859][ T2548] usb 5-1: USB disconnect, device number 5 18:38:01 executing program 4: syz_usb_connect$cdc_ncm(0x1, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x7}, [@obex={0x5, 0x24, 0x15, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x20}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x4, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x18, 0x47}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x40, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, [{0x31, &(0x7f0000000180)=@string={0x31, 0x3, "7f22274ecf55a4cb18d0b383d8492f2c5df332a2f8a866d449e7ea5ce1ece558dfad06b3d2cb64ec9f70fa2b6f323c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) 18:38:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) dup(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 18:38:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x6c}}, 0x0) 18:38:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x3}}]}, 0x38}}, 0x0) 18:38:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000500)='/dev/video#\x00', 0x40, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001180)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000d058"}, 0x0, 0x2, @offset, 0xfffffffe}) 18:38:01 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) [ 182.906534][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.949360][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.971039][ T8499] [ 182.973482][ T8499] ===================================================== [ 182.980720][ T8499] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 182.988191][ T8499] 5.9.0-syzkaller #0 Not tainted [ 182.994681][ T8499] ----------------------------------------------------- [ 183.001619][ T8499] syz-executor.5/8499 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 183.009612][ T8499] ffff888099c60760 (&card->ctl_files_rwlock){.+.+}-{2:2}, at: snd_ctl_notify.part.0+0x36/0x550 [ 183.020070][ T8499] [ 183.020070][ T8499] and this task is already holding: [ 183.027448][ T8499] ffff88809a78d108 (&group->lock){..-.}-{2:2}, at: snd_pcm_stream_lock_irq+0x8e/0xb0 [ 183.037233][ T8499] which would create a new lock dependency: [ 183.043271][ T8499] (&group->lock){..-.}-{2:2} -> (&card->ctl_files_rwlock){.+.+}-{2:2} [ 183.054670][ T8499] [ 183.054670][ T8499] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 183.064717][ T8499] (&group->lock){..-.}-{2:2} [ 183.064733][ T8499] [ 183.064733][ T8499] ... which became SOFTIRQ-irq-safe at: [ 183.077374][ T8499] lock_acquire+0x219/0x9d0 [ 183.082168][ T8499] _raw_spin_lock_irqsave+0x94/0xd0 [ 183.087488][ T8499] _snd_pcm_stream_lock_irqsave+0x9f/0xd0 [ 183.093863][ T8499] snd_pcm_period_elapsed+0x24/0x250 [ 183.099259][ T8499] dummy_hrtimer_callback+0x94/0x1b0 [ 183.104757][ T8499] __hrtimer_run_queues+0x693/0xea0 [ 183.111090][ T8499] hrtimer_run_softirq+0x17b/0x360 [ 183.116497][ T8499] __do_softirq+0x203/0xac5 [ 183.121171][ T8499] asm_call_irq_on_stack+0xf/0x20 [ 183.126293][ T8499] do_softirq_own_stack+0xaa/0xd0 [ 183.131434][ T8499] irq_exit_rcu+0x235/0x280 [ 183.136035][ T8499] sysvec_apic_timer_interrupt+0x4d/0x100 [ 183.141907][ T8499] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 183.148003][ T8499] check_memory_region+0xde/0x180 [ 183.153115][ T8499] tomoyo_check_acl+0x2df/0x450 [ 183.158750][ T8499] tomoyo_path_permission+0x1ff/0x3a0 [ 183.164239][ T8499] tomoyo_path_perm+0x2f0/0x400 [ 183.170586][ T8499] security_inode_getattr+0xcf/0x140 [ 183.175985][ T8499] vfs_statx+0x170/0x390 [ 183.180432][ T8499] __do_sys_newlstat+0x91/0x110 [ 183.185390][ T8499] do_syscall_64+0x2d/0x70 [ 183.189927][ T8499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.195927][ T8499] [ 183.195927][ T8499] to a SOFTIRQ-irq-unsafe lock: [ 183.202954][ T8499] (&card->ctl_files_rwlock){.+.+}-{2:2} [ 183.202965][ T8499] [ 183.202965][ T8499] ... which became SOFTIRQ-irq-unsafe at: [ 183.216475][ T8499] ... [ 183.216491][ T8499] lock_acquire+0x219/0x9d0 [ 183.223658][ T8499] _raw_read_lock+0x5b/0x70 [ 183.228243][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 183.233616][ T8499] snd_ctl_notify+0x8f/0xb0 [ 183.238212][ T8499] __snd_ctl_add_replace+0x638/0x800 [ 183.243845][ T8499] snd_ctl_add_replace+0x76/0x130 [ 183.248969][ T8499] snd_dummy_probe+0xc22/0x1180 [ 183.253985][ T8499] platform_drv_probe+0x87/0x140 [ 183.259088][ T8499] really_probe+0x282/0x9f0 [ 183.263694][ T8499] driver_probe_device+0xfe/0x1d0 [ 183.268801][ T8499] __device_attach_driver+0x1c2/0x220 [ 183.274598][ T8499] bus_for_each_drv+0x15f/0x1e0 [ 183.279530][ T8499] __device_attach+0x228/0x470 [ 183.284490][ T8499] bus_probe_device+0x1e4/0x290 [ 183.289418][ T8499] device_add+0xb17/0x1c40 [ 183.294016][ T8499] platform_device_add+0x34f/0x6d0 [ 183.299848][ T8499] platform_device_register_full+0x38c/0x4e0 [ 183.305923][ T8499] alsa_card_dummy_init+0x1e0/0x309 [ 183.311226][ T8499] do_one_initcall+0x103/0x6f0 [ 183.316076][ T8499] kernel_init_freeable+0x652/0x6d6 [ 183.321358][ T8499] kernel_init+0xd/0x1b8 [ 183.325670][ T8499] ret_from_fork+0x1f/0x30 [ 183.330193][ T8499] [ 183.330193][ T8499] other info that might help us debug this: [ 183.330193][ T8499] [ 183.342068][ T8499] Possible interrupt unsafe locking scenario: [ 183.342068][ T8499] [ 183.350838][ T8499] CPU0 CPU1 [ 183.356190][ T8499] ---- ---- [ 183.361538][ T8499] lock(&card->ctl_files_rwlock); [ 183.366624][ T8499] local_irq_disable(); [ 183.373366][ T8499] lock(&group->lock); [ 183.380476][ T8499] lock(&card->ctl_files_rwlock); [ 183.388331][ T8499] [ 183.391788][ T8499] lock(&group->lock); [ 183.396194][ T8499] [ 183.396194][ T8499] *** DEADLOCK *** [ 183.396194][ T8499] [ 183.404338][ T8499] 1 lock held by syz-executor.5/8499: [ 183.409684][ T8499] #0: ffff88809a78d108 (&group->lock){..-.}-{2:2}, at: snd_pcm_stream_lock_irq+0x8e/0xb0 [ 183.419594][ T8499] [ 183.419594][ T8499] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 183.430956][ T8499] -> (&group->lock){..-.}-{2:2} { [ 183.436329][ T8499] IN-SOFTIRQ-W at: [ 183.440387][ T8499] lock_acquire+0x219/0x9d0 [ 183.446518][ T8499] _raw_spin_lock_irqsave+0x94/0xd0 [ 183.453375][ T8499] _snd_pcm_stream_lock_irqsave+0x9f/0xd0 [ 183.460747][ T8499] snd_pcm_period_elapsed+0x24/0x250 [ 183.467677][ T8499] dummy_hrtimer_callback+0x94/0x1b0 [ 183.474605][ T8499] __hrtimer_run_queues+0x693/0xea0 [ 183.481454][ T8499] hrtimer_run_softirq+0x17b/0x360 [ 183.489209][ T8499] __do_softirq+0x203/0xac5 [ 183.495358][ T8499] asm_call_irq_on_stack+0xf/0x20 [ 183.502031][ T8499] do_softirq_own_stack+0xaa/0xd0 [ 183.508712][ T8499] irq_exit_rcu+0x235/0x280 [ 183.514924][ T8499] sysvec_apic_timer_interrupt+0x4d/0x100 [ 183.522347][ T8499] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 183.529969][ T8499] check_memory_region+0xde/0x180 [ 183.536627][ T8499] tomoyo_check_acl+0x2df/0x450 [ 183.543123][ T8499] tomoyo_path_permission+0x1ff/0x3a0 [ 183.550133][ T8499] tomoyo_path_perm+0x2f0/0x400 [ 183.556633][ T8499] security_inode_getattr+0xcf/0x140 [ 183.563569][ T8499] vfs_statx+0x170/0x390 [ 183.569454][ T8499] __do_sys_newlstat+0x91/0x110 [ 183.575958][ T8499] do_syscall_64+0x2d/0x70 [ 183.582016][ T8499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.589530][ T8499] INITIAL USE at: [ 183.593427][ T8499] lock_acquire+0x219/0x9d0 [ 183.599485][ T8499] _raw_spin_lock_irq+0x94/0xd0 [ 183.605906][ T8499] snd_pcm_hw_params+0x12a/0x1920 [ 183.612485][ T8499] snd_pcm_kernel_ioctl+0xd1/0x240 [ 183.619134][ T8499] snd_pcm_oss_change_params_locked+0x130a/0x3420 [ 183.627126][ T8499] snd_pcm_oss_make_ready_locked+0xb3/0x230 [ 183.634592][ T8499] snd_pcm_oss_write+0x45d/0x940 [ 183.641189][ T8499] vfs_write+0x2b0/0x730 [ 183.646988][ T8499] ksys_write+0x12d/0x250 [ 183.652900][ T8499] do_syscall_64+0x2d/0x70 [ 183.658899][ T8499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.666337][ T8499] } [ 183.668824][ T8499] ... key at: [] __key.7+0x0/0x40 [ 183.675903][ T8499] ... acquired at: [ 183.679718][ T8499] lock_acquire+0x219/0x9d0 [ 183.684396][ T8499] _raw_read_lock+0x5b/0x70 [ 183.689066][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 183.694430][ T8499] snd_ctl_notify+0x8f/0xb0 [ 183.699368][ T8499] loopback_trigger+0x112f/0x1ab0 [ 183.704568][ T8499] snd_pcm_do_start+0xb1/0xf0 [ 183.709590][ T8499] snd_pcm_action+0xc8/0x170 [ 183.714337][ T8499] __snd_pcm_lib_xfer+0x1202/0x1a90 [ 183.719710][ T8499] snd_pcm_oss_write3+0x107/0x320 [ 183.724913][ T8499] io_playback_transfer+0x27e/0x330 [ 183.730364][ T8499] snd_pcm_plug_write_transfer+0x2cd/0x3f0 [ 183.736341][ T8499] snd_pcm_oss_write2+0x245/0x3f0 [ 183.741519][ T8499] snd_pcm_oss_write+0x705/0x940 [ 183.746623][ T8499] vfs_write+0x2b0/0x730 [ 183.751031][ T8499] ksys_write+0x12d/0x250 [ 183.755529][ T8499] do_syscall_64+0x2d/0x70 [ 183.760123][ T8499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.766159][ T8499] [ 183.768469][ T8499] [ 183.768469][ T8499] the dependencies between the lock to be acquired [ 183.768474][ T8499] and SOFTIRQ-irq-unsafe lock: [ 183.782084][ T8499] -> (&card->ctl_files_rwlock){.+.+}-{2:2} { [ 183.788106][ T8499] HARDIRQ-ON-R at: [ 183.792099][ T8499] lock_acquire+0x219/0x9d0 [ 183.798269][ T8499] _raw_read_lock+0x5b/0x70 [ 183.804412][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 183.811259][ T8499] snd_ctl_notify+0x8f/0xb0 [ 183.817693][ T8499] __snd_ctl_add_replace+0x638/0x800 [ 183.824697][ T8499] snd_ctl_add_replace+0x76/0x130 [ 183.831358][ T8499] snd_dummy_probe+0xc22/0x1180 [ 183.837835][ T8499] platform_drv_probe+0x87/0x140 [ 183.844407][ T8499] really_probe+0x282/0x9f0 [ 183.850550][ T8499] driver_probe_device+0xfe/0x1d0 [ 183.857921][ T8499] __device_attach_driver+0x1c2/0x220 [ 183.864927][ T8499] bus_for_each_drv+0x15f/0x1e0 [ 183.871413][ T8499] __device_attach+0x228/0x470 [ 183.877806][ T8499] bus_probe_device+0x1e4/0x290 [ 183.884326][ T8499] device_add+0xb17/0x1c40 [ 183.890407][ T8499] platform_device_add+0x34f/0x6d0 [ 183.897165][ T8499] platform_device_register_full+0x38c/0x4e0 [ 183.904801][ T8499] alsa_card_dummy_init+0x1e0/0x309 [ 183.911638][ T8499] do_one_initcall+0x103/0x6f0 [ 183.918149][ T8499] kernel_init_freeable+0x652/0x6d6 [ 183.925083][ T8499] kernel_init+0xd/0x1b8 [ 183.930973][ T8499] ret_from_fork+0x1f/0x30 [ 183.937014][ T8499] SOFTIRQ-ON-R at: [ 183.940993][ T8499] lock_acquire+0x219/0x9d0 [ 183.947132][ T8499] _raw_read_lock+0x5b/0x70 [ 183.953281][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 183.960169][ T8499] snd_ctl_notify+0x8f/0xb0 [ 183.966314][ T8499] __snd_ctl_add_replace+0x638/0x800 [ 183.973238][ T8499] snd_ctl_add_replace+0x76/0x130 [ 183.979892][ T8499] snd_dummy_probe+0xc22/0x1180 [ 183.986403][ T8499] platform_drv_probe+0x87/0x140 [ 183.993099][ T8499] really_probe+0x282/0x9f0 [ 183.999321][ T8499] driver_probe_device+0xfe/0x1d0 [ 184.006168][ T8499] __device_attach_driver+0x1c2/0x220 [ 184.013185][ T8499] bus_for_each_drv+0x15f/0x1e0 [ 184.019695][ T8499] __device_attach+0x228/0x470 [ 184.026216][ T8499] bus_probe_device+0x1e4/0x290 [ 184.034025][ T8499] device_add+0xb17/0x1c40 [ 184.040095][ T8499] platform_device_add+0x34f/0x6d0 [ 184.046858][ T8499] platform_device_register_full+0x38c/0x4e0 [ 184.054596][ T8499] alsa_card_dummy_init+0x1e0/0x309 [ 184.061452][ T8499] do_one_initcall+0x103/0x6f0 [ 184.067866][ T8499] kernel_init_freeable+0x652/0x6d6 [ 184.074891][ T8499] kernel_init+0xd/0x1b8 [ 184.080804][ T8499] ret_from_fork+0x1f/0x30 [ 184.087465][ T8499] INITIAL READ USE at: [ 184.091799][ T8499] lock_acquire+0x219/0x9d0 [ 184.098288][ T8499] _raw_read_lock+0x5b/0x70 [ 184.104887][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 184.112067][ T8499] snd_ctl_notify+0x8f/0xb0 [ 184.118563][ T8499] __snd_ctl_add_replace+0x638/0x800 [ 184.125824][ T8499] snd_ctl_add_replace+0x76/0x130 [ 184.132840][ T8499] snd_dummy_probe+0xc22/0x1180 [ 184.139685][ T8499] platform_drv_probe+0x87/0x140 [ 184.146630][ T8499] really_probe+0x282/0x9f0 [ 184.153125][ T8499] driver_probe_device+0xfe/0x1d0 [ 184.160213][ T8499] __device_attach_driver+0x1c2/0x220 [ 184.167654][ T8499] bus_for_each_drv+0x15f/0x1e0 [ 184.174501][ T8499] __device_attach+0x228/0x470 [ 184.181243][ T8499] bus_probe_device+0x1e4/0x290 [ 184.188086][ T8499] device_add+0xb17/0x1c40 [ 184.194496][ T8499] platform_device_add+0x34f/0x6d0 [ 184.201592][ T8499] platform_device_register_full+0x38c/0x4e0 [ 184.209587][ T8499] alsa_card_dummy_init+0x1e0/0x309 [ 184.216774][ T8499] do_one_initcall+0x103/0x6f0 [ 184.223557][ T8499] kernel_init_freeable+0x652/0x6d6 [ 184.230753][ T8499] kernel_init+0xd/0x1b8 [ 184.236978][ T8499] ret_from_fork+0x1f/0x30 [ 184.243373][ T8499] } [ 184.245873][ T8499] ... key at: [] __key.11+0x0/0x40 [ 184.253043][ T8499] ... acquired at: [ 184.256836][ T8499] lock_acquire+0x219/0x9d0 [ 184.261507][ T8499] _raw_read_lock+0x5b/0x70 [ 184.266165][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 184.271517][ T8499] snd_ctl_notify+0x8f/0xb0 [ 184.276769][ T8499] loopback_trigger+0x112f/0x1ab0 [ 184.281965][ T8499] snd_pcm_do_start+0xb1/0xf0 [ 184.286807][ T8499] snd_pcm_action+0xc8/0x170 [ 184.291674][ T8499] __snd_pcm_lib_xfer+0x1202/0x1a90 [ 184.297061][ T8499] snd_pcm_oss_write3+0x107/0x320 [ 184.302276][ T8499] io_playback_transfer+0x27e/0x330 [ 184.307631][ T8499] snd_pcm_plug_write_transfer+0x2cd/0x3f0 [ 184.313609][ T8499] snd_pcm_oss_write2+0x245/0x3f0 [ 184.318811][ T8499] snd_pcm_oss_write+0x705/0x940 [ 184.323925][ T8499] vfs_write+0x2b0/0x730 [ 184.328323][ T8499] ksys_write+0x12d/0x250 [ 184.332809][ T8499] do_syscall_64+0x2d/0x70 [ 184.337382][ T8499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.343466][ T8499] [ 184.345773][ T8499] [ 184.345773][ T8499] stack backtrace: [ 184.351697][ T8499] CPU: 1 PID: 8499 Comm: syz-executor.5 Not tainted 5.9.0-syzkaller #0 [ 184.359960][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.370439][ T8499] Call Trace: [ 184.373729][ T8499] dump_stack+0x198/0x1fb [ 184.378045][ T8499] check_irq_usage.cold+0x4c2/0x5d8 [ 184.383237][ T8499] ? print_shortest_lock_dependencies+0x80/0x80 [ 184.389476][ T8499] ? lock_is_held_type+0x1a/0x110 [ 184.394498][ T8499] ? check_path.constprop.0+0x22/0x40 [ 184.399861][ T8499] ? __bfs+0x27a/0x690 [ 184.403933][ T8499] ? perf_trace_lock+0x4d0/0x4d0 [ 184.408872][ T8499] ? print_shortest_lock_dependencies+0x80/0x80 [ 184.415114][ T8499] ? lockdep_lock+0xe3/0x250 [ 184.419700][ T8499] ? alloc_chain_hlocks+0x230/0x770 [ 184.424909][ T8499] __lock_acquire+0x2840/0x5590 [ 184.429770][ T8499] ? lockdep_hardirqs_on_prepare+0x450/0x450 [ 184.435746][ T8499] ? alloc_chain_hlocks+0x230/0x770 [ 184.440950][ T8499] lock_acquire+0x219/0x9d0 [ 184.445438][ T8499] ? snd_ctl_notify.part.0+0x36/0x550 [ 184.450811][ T8499] ? lock_release+0x7e0/0x7e0 [ 184.455515][ T8499] ? mark_lock+0xf7/0x23a0 [ 184.459999][ T8499] _raw_read_lock+0x5b/0x70 [ 184.464489][ T8499] ? snd_ctl_notify.part.0+0x36/0x550 [ 184.469849][ T8499] snd_ctl_notify.part.0+0x36/0x550 [ 184.475052][ T8499] snd_ctl_notify+0x8f/0xb0 [ 184.479591][ T8499] loopback_trigger+0x112f/0x1ab0 [ 184.484603][ T8499] snd_pcm_do_start+0xb1/0xf0 [ 184.489270][ T8499] snd_pcm_action+0xc8/0x170 [ 184.493843][ T8499] __snd_pcm_lib_xfer+0x1202/0x1a90 [ 184.499047][ T8499] ? trace_raw_output_applptr+0x300/0x300 [ 184.504770][ T8499] ? snd_pcm_hw_rule_step+0x440/0x440 [ 184.510131][ T8499] ? pcm_lib_apply_appl_ptr+0x3e0/0x3e0 [ 184.515657][ T8499] ? __mutex_unlock_slowpath+0xe2/0x610 [ 184.521184][ T8499] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 184.527339][ T8499] ? wait_for_completion+0x260/0x260 [ 184.532782][ T8499] snd_pcm_oss_write3+0x107/0x320 [ 184.537791][ T8499] io_playback_transfer+0x27e/0x330 [ 184.542981][ T8499] snd_pcm_plug_write_transfer+0x2cd/0x3f0 [ 184.548786][ T8499] ? snd_pcm_plug_client_channels_buf+0x440/0x440 [ 184.555303][ T8499] ? snd_pcm_format_physical_width+0x77/0xa0 [ 184.561293][ T8499] ? snd_pcm_plug_client_channels_buf+0x20b/0x440 [ 184.567712][ T8499] snd_pcm_oss_write2+0x245/0x3f0 [ 184.572733][ T8499] ? snd_pcm_oss_write3+0x320/0x320 [ 184.577922][ T8499] ? snd_pcm_kernel_ioctl+0x158/0x240 [ 184.583287][ T8499] snd_pcm_oss_write+0x705/0x940 [ 184.588216][ T8499] ? security_file_permission+0x248/0x560 [ 184.593927][ T8499] ? rw_verify_area+0x11d/0x360 [ 184.598769][ T8499] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 184.604313][ T8499] vfs_write+0x2b0/0x730 [ 184.608540][ T8499] ksys_write+0x12d/0x250 [ 184.612870][ T8499] ? __ia32_sys_read+0xb0/0xb0 [ 184.617650][ T8499] ? check_preemption_disabled+0x50/0x130 [ 184.623369][ T8499] ? syscall_enter_from_user_mode+0x1d/0x60 [ 184.629245][ T8499] do_syscall_64+0x2d/0x70 [ 184.633641][ T8499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.639517][ T8499] RIP: 0033:0x45de59 [ 184.643417][ T8499] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.663007][ T8499] RSP: 002b:00007f05e0c11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.671447][ T8499] RAX: ffffffffffffffda RBX: 000000000003ac40 RCX: 000000000045de59 [ 184.679452][ T8499] RDX: 0000000000080000 RSI: 0000000020002000 RDI: 0000000000000003 [ 184.687445][ T8499] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 184.695687][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 184.703661][ T8499] R13: 000000000169fb7f R14: 00007f05e0c129c0 R15: 000000000118bf2c 18:38:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) 18:38:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x6c}}, 0x0) 18:38:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) dup(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 18:38:03 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000500)='/dev/video#\x00', 0x40, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001180)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000d058"}, 0x0, 0x2, @offset, 0xfffffffe}) [ 184.811490][ T8510] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 184.847269][ T8514] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 18:38:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) 18:38:03 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) [ 184.904507][ T12] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 184.992388][ T8521] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 185.334884][ T12] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 185.364225][ T12] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 185.376286][ T12] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 185.544708][ T12] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.554070][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.562413][ T12] usb 5-1: Product: ࠌ [ 185.566746][ T12] usb 5-1: Manufacturer: చ [ 185.571347][ T12] usb 5-1: SerialNumber: 䰊 [ 185.594815][ T8500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 185.844521][ T12] cdc_ncm 5-1:1.0: bind() failure [ 185.854246][ T12] cdc_ncm 5-1:1.1: bind() failure [ 185.870282][ T12] usb 5-1: USB disconnect, device number 6 18:38:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000500)='/dev/video#\x00', 0x40, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001180)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000d058"}, 0x0, 0x2, @offset, 0xfffffffe}) 18:38:04 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) 18:38:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) 18:38:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) dup(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 18:38:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) [ 186.401105][ T8557] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 18:38:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) 18:38:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) [ 186.505874][ T8561] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 18:38:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) 18:38:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) [ 186.589444][ T8567] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 186.611616][ T8566] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 186.624739][ T8569] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 18:38:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x3, 0x136, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'veth1_to_bridge\x00', '\x00', 'veth0_to_batadv\x00', 'ip6gretap0\x00', @remote, [], @multicast, [], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10}}]}]}, 0x1ae) 18:38:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) [ 186.728652][ T8575] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 186.746207][ T8572] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 18:38:06 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) 18:38:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4, 0x0, "64833d39cdb0b570edcb113c0a72e336665862b411db12f64a3291ce0a49a05580aa48c2beb8effb8ea3c44dda1cd50a0490f5471ef055304b9ff04cf70aad825125fbb2f874ac6fb09cc783117b35bf"}, 0xd8) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a2d5506c2b9c7ac6e005aaf24c088989"}]}}}}}}}, 0x0) 18:38:07 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) 18:38:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x3, 0x136, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'veth1_to_bridge\x00', '\x00', 'veth0_to_batadv\x00', 'ip6gretap0\x00', @remote, [], @multicast, [], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10}}]}]}, 0x1ae) 18:38:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/157, &(0x7f00000002c0)=0x9d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0xfb, 0x0, 0x400000006, 0x1, 0x400000000000000, 0x0, 0x8]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @loopback}, 0x36) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:38:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) dup(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 18:38:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) 18:38:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x3, 0x136, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'veth1_to_bridge\x00', '\x00', 'veth0_to_batadv\x00', 'ip6gretap0\x00', @remote, [], @multicast, [], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10}}]}]}, 0x1ae) [ 189.414322][ T8599] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:38:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) 18:38:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x3, 0x136, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'veth1_to_bridge\x00', '\x00', 'veth0_to_batadv\x00', 'ip6gretap0\x00', @remote, [], @multicast, [], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10}}]}]}, 0x1ae) 18:38:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/157, &(0x7f00000002c0)=0x9d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0xfb, 0x0, 0x400000006, 0x1, 0x400000000000000, 0x0, 0x8]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @loopback}, 0x36) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:38:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) 18:38:09 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) 18:38:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) 18:38:10 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x800) 18:38:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) 18:38:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/157, &(0x7f00000002c0)=0x9d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0xfb, 0x0, 0x400000006, 0x1, 0x400000000000000, 0x0, 0x8]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @loopback}, 0x36) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:38:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 18:38:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) 18:38:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x792b, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@empty}}, 0xe4) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @dev}, 0x80, 0x0}}], 0x2, 0x0) 18:38:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x5}}}}], 0x28}}], 0x1, 0x0) [ 192.505132][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.521300][ T8655] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 18:38:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x792b, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@empty}}, 0xe4) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @dev}, 0x80, 0x0}}], 0x2, 0x0) [ 192.572529][ T8664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.603914][ T8655] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 18:38:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 18:38:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 192.727626][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.768746][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.787503][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.800815][ T8678] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.