[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. 2020/09/06 22:56:31 fuzzer started 2020/09/06 22:56:32 dialing manager at 10.128.0.26:46153 2020/09/06 22:56:32 syscalls: 3166 2020/09/06 22:56:32 code coverage: enabled 2020/09/06 22:56:32 comparison tracing: enabled 2020/09/06 22:56:32 extra coverage: enabled 2020/09/06 22:56:32 setuid sandbox: enabled 2020/09/06 22:56:32 namespace sandbox: enabled 2020/09/06 22:56:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/06 22:56:32 fault injection: enabled 2020/09/06 22:56:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/06 22:56:32 net packet injection: enabled 2020/09/06 22:56:32 net device setup: enabled 2020/09/06 22:56:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/06 22:56:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/06 22:56:32 USB emulation: enabled 2020/09/06 22:56:32 hci packet injection: enabled 23:01:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) syzkaller login: [ 439.824411][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 440.309653][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 440.447613][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.455905][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.465473][ T8486] device bridge_slave_0 entered promiscuous mode [ 440.479312][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.486868][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.496421][ T8486] device bridge_slave_1 entered promiscuous mode [ 440.544247][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.561277][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.605086][ T8486] team0: Port device team_slave_0 added [ 440.617890][ T8486] team0: Port device team_slave_1 added [ 440.657313][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.664662][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.690892][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.706462][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.714235][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.740924][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.801835][ T8486] device hsr_slave_0 entered promiscuous mode [ 440.811362][ T8486] device hsr_slave_1 entered promiscuous mode [ 441.054132][ T8486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.079405][ T8486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.097690][ T8486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.116529][ T8486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.422906][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.458917][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.468341][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.494108][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.517364][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.527440][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.538073][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.545387][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.564814][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.574372][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.586300][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.596013][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.603303][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.629318][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.651912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.677926][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.688575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.713816][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 441.724647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.734407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.745098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.785414][ T8486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.796572][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.815676][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.825691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.836139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.846213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.864876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.909309][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.917138][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.952087][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.013291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.023521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.084434][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.094119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.122350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.131977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.143112][ T8486] device veth0_vlan entered promiscuous mode [ 442.176805][ T8486] device veth1_vlan entered promiscuous mode [ 442.253890][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.263708][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.285922][ T8486] device veth0_macvtap entered promiscuous mode [ 442.309629][ T8486] device veth1_macvtap entered promiscuous mode [ 442.365705][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.374064][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.383466][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.392861][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.402763][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.448191][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.456183][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.466338][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:01:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) 23:01:29 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/148, 0x20000194}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x70cb0}, 0x300}, 0x0) 23:01:29 executing program 0: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000000c0)) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0x1f, 0x3, 0x147, &(0x7f0000000b80)}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) [ 443.803639][ T8700] Bluetooth: hci0: command 0x041b tx timeout [ 445.872240][ T8702] Bluetooth: hci0: command 0x040f tx timeout 23:01:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000040)={0x0, 0x0, 0x6f, {0x6f, 0x0, "e5a853a09ed451fcf29d1ba1b747122585221961cd79181765272d5d575fc8edc656dfb08bee6db97aa928971e2b95ad31212daa40632cf865d96e4ca5e1e786e29944fb5f0c6d6c8362f180273c7faefa66246f15e8cbf50634adbc70f09768076df736de8add485532b35e64"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:01:32 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xc3d, 0x0) 23:01:33 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket(0x2, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40c2, 0x4) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1d, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000140)=0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000180)="6e71665694c6f28595884d584a13f5a46a49eaf78722c82a5ce6f600d367575a8552f0bbcbafc16695f31cc5134d", 0x2e, 0x1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) [ 447.699624][ T8730] sctp: [Deprecated]: syz-executor.0 (pid 8730) Use of int in maxseg socket option. [ 447.699624][ T8730] Use struct sctp_assoc_value instead [ 447.865403][ T8730] sctp: [Deprecated]: syz-executor.0 (pid 8730) Use of int in maxseg socket option. [ 447.865403][ T8730] Use struct sctp_assoc_value instead [ 447.962902][ T8704] Bluetooth: hci0: command 0x0419 tx timeout [ 447.999083][ T8740] IPVS: ftp: loaded support on port[0] = 21 23:01:34 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r3, 0x0, 0x1ffe0, 0x0) [ 448.508165][ T8740] chnl_net:caif_netlink_parms(): no params data found [ 448.767127][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.774892][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.784414][ T8740] device bridge_slave_0 entered promiscuous mode 23:01:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', {0x7, 0x4e22, @empty}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @val={0x3, 0x4, 0x4, 0x4, 0xc8b, 0x4}, @eth={@random="3f49bf1b659a", @local, @void, {@llc={0x4, {@llc={0x7e, 0xf8, "dd", "a3eadbd1bc6823ba7ccb56d4b54916bcf87dfc3b5109e2213e0a2ef6adf94d06c8b878168d1f9440991d72043148ec8643362ec089"}}}}}}, 0x50) r4 = pidfd_getfd(r0, r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x84001, 0x0) r5 = openat(r4, &(0x7f00000001c0)='./file0\x00', 0x400500, 0x2c) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$input_event(r8, &(0x7f0000000200)={{0x77359400}, 0x15, 0x4, 0x7}, 0x18) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) [ 448.844470][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.852237][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.861840][ T8740] device bridge_slave_1 entered promiscuous mode [ 448.961293][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.988987][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.108294][ T8740] team0: Port device team_slave_0 added [ 449.148332][ T8740] team0: Port device team_slave_1 added [ 449.232702][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.239787][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.266560][ T8740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.285544][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.293404][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.319503][ T8740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.380359][ T8740] device hsr_slave_0 entered promiscuous mode [ 449.394806][ T8740] device hsr_slave_1 entered promiscuous mode [ 449.410907][ T8740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.418633][ T8740] Cannot create hsr debugfs directory [ 449.729854][ T8740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.748664][ T8740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.768976][ T8740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.813143][ T8740] netdevsim netdevsim1 netdevsim3: renamed from eth3 23:01:36 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000000000000000000000084"], 0x58) [ 449.961631][ T8704] Bluetooth: hci1: command 0x0409 tx timeout 23:01:36 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44803}, [@IFLA_GROUP={0x8, 0x1b, 0xd76}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) [ 450.316846][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.377715][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.386626][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.419064][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.469045][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.478963][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.489182][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.496535][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.550085][ T8969] IPVS: ftp: loaded support on port[0] = 21 [ 450.584137][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.593547][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.603310][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.612618][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.619836][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.628862][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.639648][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.650423][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.660726][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.796252][ T8988] IPVS: ftp: loaded support on port[0] = 21 [ 450.809273][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.819790][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.830215][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 23:01:37 executing program 0: ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000040)={0x7, 0x30, 0x7ff}) r0 = socket(0x2, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x40c2, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1d, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) r1 = socket$kcm(0x10, 0xc5aa7ea509c4972, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000019008105e00f80ecdb4cb904021d65ef0b027c05e8fe55a10a001500ac14142603000e1208001e000000812f0300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) [ 450.840846][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.850440][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.860002][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.869662][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.885511][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.078418][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.086543][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.145512][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 23:01:37 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f0000000100)='./file0\x00', 0x100, 0x20) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x5}, 0x1c) [ 451.271980][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.282911][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.361473][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.371089][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.414882][ T8740] device veth0_vlan entered promiscuous mode [ 451.431945][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.440793][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.502449][ T8740] device veth1_vlan entered promiscuous mode [ 451.593213][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 451.602678][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 451.664982][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.674932][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.703498][ T8740] device veth0_macvtap entered promiscuous mode [ 451.738675][ T8740] device veth1_macvtap entered promiscuous mode [ 451.800174][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.811132][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.824783][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.839288][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.849630][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.858919][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.868769][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.913191][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.923783][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.937390][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.946212][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.956246][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.072646][ T8704] Bluetooth: hci1: command 0x041b tx timeout 23:01:38 executing program 0: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000017cbf00611a1034196a0102030109025c00010000000047db25004a0091aa622a3ade8eab39"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 452.733035][ T8700] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 452.792266][ T8702] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 452.973024][ T8700] usb 1-1: Using ep0 maxpacket: 16 [ 453.113476][ T8700] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 453.124519][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.135724][ T8700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.145697][ T8700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 453.158789][ T8700] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 453.162584][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.168027][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.179029][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.197283][ T8702] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40 [ 453.206547][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.304039][ T8702] usb 2-1: config 0 descriptor?? [ 453.337664][ T8700] usb 1-1: config 0 descriptor?? [ 453.643118][ T8702] usbhid 2-1:0.0: can't add hid device: -71 [ 453.649380][ T8702] usbhid: probe of 2-1:0.0 failed with error -71 [ 453.678288][ T8702] usb 2-1: USB disconnect, device number 2 [ 453.798073][ T9026] udc-core: couldn't find an available UDC or it's busy [ 453.805377][ T9026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 453.868718][ T8700] hid (null): nested delimiters [ 453.946587][ T8700] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5 [ 454.009462][ T8700] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input6 [ 454.095108][ T8700] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 454.173044][ T8702] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 454.183562][ T8704] Bluetooth: hci1: command 0x040f tx timeout [ 454.194733][ T8700] usb 1-1: USB disconnect, device number 2 [ 454.534172][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.545446][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.555572][ T8702] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40 [ 454.564900][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.608343][ T9085] udc-core: couldn't find an available UDC or it's busy [ 454.615564][ T9085] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.655727][ T8702] usb 2-1: config 0 descriptor?? 23:01:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d76e32f8464648328fc99a742200765120000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000005c521b47000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f8"], 0x14f) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010208"], 0x28}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0xfd14) fallocate(r3, 0x100000003, 0x5, 0x240000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, 0x1407, 0x400, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0xfffffffffffffec5) [ 454.982045][ C0] sd 0:0:1:0: [sg0] tag#3024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 454.992733][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB: Test Unit Ready [ 454.999399][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.009362][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.019293][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.029203][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.039110][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.049014][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.058881][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.068736][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.074357][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.078593][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.097588][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.107460][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.117327][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.127235][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[c0]: 00 00 00 00 00 00 00 00 [ 455.151891][ C1] hrtimer: interrupt took 92976 ns [ 455.238458][ C1] sd 0:0:1:0: [sg0] tag#3026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 455.249124][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB: Test Unit Ready [ 455.255930][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.265790][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.275685][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.285562][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.295435][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.305318][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.315188][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.325070][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.334964][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.345029][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.354934][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.364851][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.374716][ C1] sd 0:0:1:0: [sg0] tag#3026 CDB[c0]: 00 00 00 00 00 00 00 00 23:01:41 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r0 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000440)=""/251) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000140)=""/218) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x7, 0x8}, 0x8) msgrcv(r0, &(0x7f0000000040)={0x0, ""/32}, 0x28, 0x1, 0x3800) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000010001c001a8018000a80140007"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0xc0) [ 455.604958][ T8702] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 455.625103][ T8702] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 455.806256][ T8701] usb 2-1: USB disconnect, device number 3 [ 456.195875][ T8703] Bluetooth: hci1: command 0x0419 tx timeout [ 456.593089][ T8701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 456.952885][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.964135][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.974368][ T8701] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40 [ 456.983725][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.024755][ T8701] usb 2-1: config 0 descriptor?? 23:01:43 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x70bd2d, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x11}]}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 23:01:43 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6042070000102c00fe80ff00000000000000000004000000ff0200000000000000000000000000012c000000030000008500907800000000"], 0x0) r0 = socket(0x2, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x40c2, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1d, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10000000}, &(0x7f0000000040)=0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x113fcf6791802066, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0xde, 0x8, 0x1000, 0x22, @mcast1, @private1, 0x8, 0x1, 0x6, 0x8001}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x3ff, @remote, 0x22fa}]}, &(0x7f0000000100)=0x10) [ 457.292615][ T8701] usbhid 2-1:0.0: can't add hid device: -71 [ 457.298919][ T8701] usbhid: probe of 2-1:0.0 failed with error -71 [ 457.340764][ T8701] usb 2-1: USB disconnect, device number 4 23:01:43 executing program 0: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="d4000000190019ae4e0fa1f6af060e24994aec9fe0579ef79c1cca7e0332b87988a9411de73d283d69165f5f92e163f0239e34f1bf95125307b9f5f58b467df2326f98ddc17406cc397804e231ee2e9fb67a2437090cf7409519a952a99b3e4a59ed8c2e1560dd62c414bce6949d93faff1fcc58cd8c4a41927e938150f8891a0433e7efe5e2225177ae97c534"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@raw={0xc, 0x9, "25dc9b60ec58"}) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnetconf={0x1c, 0x52, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:01:43 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) clone3(&(0x7f0000000380)={0x100020200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x9}, &(0x7f00000000c0)=""/82, 0x52, &(0x7f0000000240)=""/45, &(0x7f00000002c0)=[r0, r0, r0, r0, r0], 0x5}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)=0x0) getpgid(r1) socket$unix(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000680)=0x9b, 0x4) inotify_init1(0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2100, 0x160) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @remote}]}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000580)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 23:01:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0x1c, 0x3, 0x93, &(0x7f00000005c0)="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"}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x200440d1}, 0x4000041) 23:01:44 executing program 1: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x81, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x58) socket(0x8, 0x0, 0xfffff76e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x100000001]}, 0x8, 0xb1dd66897b6e33cf) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000300)={@none, 0x1ff, 0x8, 0x7}) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='/dev/kvm\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7e) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) [ 458.243410][ C0] sd 0:0:1:0: [sg0] tag#3027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.254142][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB: Test Unit Ready [ 458.260886][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.270860][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.280750][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.290671][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.300548][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.310411][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.320283][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.330142][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.340005][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.349868][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.359716][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.369587][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.379453][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[c0]: 00 00 00 00 00 00 00 00 [ 458.475737][ T9164] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:01:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 23:01:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) pwrite64(r0, &(0x7f0000000000)="65abbb13c955db307de6c55bcc62fedb0fc6beb33d57f7026cba7067eaa06ea17cf86ab71521099d67ff01714c74d644fca957dfbce25370c39927303da03d1f692f111490eed49383f3c3a1fa6012b7f9a11110fbccd64e2c70392e97b6c58f0118a3bebd6aede0ecd5abf39b20e9ebe90bd5787121d7c7e0bd664bde87ad24abd6700f5ee13eb48870ec66a1", 0x8d, 0x1e4e) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000cc0)=ANY=[@ANYRESHEX], 0x1) 23:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100040000004026093333400000000001090224000100000000090400000103010000092100000001220100090581030800000000"], 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x2a, 0x35, 0x16, 0x11, 0x5, 0xfffffffa, 0x5, 0x21}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "ec370275"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x14, &(0x7f0000000180)="37ae97e469ddc14da8654e8ea795ba1521df3b16") [ 459.912640][ T8703] usb 2-1: new high-speed USB device number 5 using dummy_hcd 23:01:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x78) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x0, 0x0, [0x0, 0x3, 0x1f, 0x4, 0xb03c, 0x68a, 0x8, 0x80000001, 0x8, 0x0, 0x0, 0xfff, 0x3ff, 0x10001, 0x2, 0xd29]}], r5, 0x1, 0x1, 0x48}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f00000005c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0xe2b, @rand_addr=' \x01\x00', 0x8}, r5}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0xffffffffffffff13) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000040)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000040)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 460.313528][ T8703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.373371][ T8703] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 460.381117][ T8703] usb 2-1: can't read configurations, error -71 23:01:47 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400400, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40c2, 0x4) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r2 = epoll_create1(0x80000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=0x1, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000080)={0x1, 0xd0}) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1d, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000200)=@conn_svc_rsp={0x0, 0x0, 0xa, "e0736d24", {0x3, 0x2, 0x0, 0x0, 0x0, 0x20}}) 23:01:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80000, 0x10000) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400d75700"/20, @ANYRES32=r2, @ANYBLOB="00a28eec775ee3391396622e9a000000ffffffff000000000a0001"], 0x3c}}, 0x0) [ 461.016750][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.030500][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:01:47 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6ebf9b0a4def23d410f6296b32a83438810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218cef40068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf900003323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899fc0159e800ea2474b540500a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0c410ade7a36b2635d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab5a9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b5972ea3b77641467c89fa0e82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc6af1b6b2b218e8213fec2b4fda19789fd163838d7d49c3fa9595a314e7c028e61c48de2316cdb01b2a4114fae0ca859d79fd7cc9c3e2c9ce644f724faa2d120000006549a25de665fd3edf8a3aaee6b8de0cebdba4af865fc05043b67410356bdf9885b3a1b93fcb5265642f7fc4e07c5cb30b49100a3ff13873711f2910b5e9eae3dd58f12fd4d2ee922f620c1f50e81a1e6705cb63e04aa313acef6e3abb5f24e0ccaa26a4f8678084122ef8d84185b9d891117b771048bf3478fd2cb656d8438db62ee6fad5f2e7cd4718166db1917733f418b28a71ef4cc81bba2168a5512f066be647f35083710c22fc1fc75df86985d8df2ddc97a4671698395dc960b652"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x4000, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x140000}], 0x1}, 0x20000) [ 461.535187][ T8703] usb 2-1: new high-speed USB device number 6 using dummy_hcd 23:01:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) write$sndseq(r2, 0x0, 0x0) dup2(r2, r0) mmap$binder(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r3, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 23:01:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r2, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 23:01:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 461.959296][ T9215] No such timeout policy "syz0" [ 462.116430][ T8703] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.125767][ T8703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.134086][ T8703] usb 2-1: Product: syz [ 462.138388][ T8703] usb 2-1: Manufacturer: syz [ 462.143357][ T8703] usb 2-1: SerialNumber: syz [ 462.185932][ T9221] binder: 9218:9221 ioctl c018620b 20000080 returned -14 [ 462.247083][ T8703] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 23:01:48 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201410100000040ac05740240000000000109022d0001000060000904000001030102ff"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000640)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r4 = dup3(r3, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x400040, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x1, 0x80, 0xff, 0x9}, {0x0, 0x3f, 0x1f, 0x6}, {0x7fff, 0x1, 0x8, 0x6}, {0x2, 0x6, 0x81, 0x8}, {0x8, 0x5, 0x3f, 0x1000}]}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000004c0)=0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x10003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x0, 0x160, 0x0, 0x298, 0x278, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@empty={[0x0, 0x0, 0xc1]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x0, 0x6f}, 0x0, 0x140, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x10001, 0x0, 0x1, 0x11, 0xec, 0x9}, &(0x7f0000000040)=0x20) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x301000, 0x0) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000480)) [ 462.783488][ T4599] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 462.993887][ T8704] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 463.024634][ T4599] usb 1-1: Invalid ep0 maxpacket: 64 [ 463.172674][ T4599] usb 1-1: new low-speed USB device number 4 using dummy_hcd 23:01:49 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f00000000c0)) sendto$l2tp6(r0, &(0x7f0000000100)="774ffa8ea1ff3160e3dacc8a2859ba7e6e2282c1a5ed8eb8285b2d747bd93a203364a915ee6d9c729fd3b81dd79a7017b809383e18a9e7b896a7d862a8417bf6035cf9a3976b873f062d78796a8d08384ecf5002e61bcc8b48a41a6a0ceac1fc7088f935d1d85c32d2122f00356d86f9856e37bc3c6867301a886c67471314a1a72bc64d438f1bed266dd0ad0da2fb9090", 0x91, 0x8084, &(0x7f00000001c0)={0xa, 0x0, 0x3f, @private0={0xfc, 0x0, [], 0x1}, 0x81, 0x2}, 0x20) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$CHAR_RAW_ROSET(r2, 0x125d, &(0x7f0000000240)=0xd84a) inotify_init() getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x800, 0x5}, &(0x7f0000000340)=0x90) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000380)=0x9) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000001700)={0x80000000, 0x58f5bd9f, 0x8, 0xc2, &(0x7f0000000500)=""/194, 0xfd, &(0x7f0000000600)=""/253, 0x1000, &(0x7f0000000700)=""/4096}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001740)={{0x0, 0x8000000, 0xfffffffffffffffe, 0x6, 0x100000001, 0x9, 0x90fa, 0x5, 0x3ff, 0x9, 0x9, 0x7ff, 0x0, 0x8000, 0x1000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001800)={{r3, 0x2, 0x7fff, 0x8, 0x1, 0xfff, 0x80000000, 0x1, 0x8, 0x40, 0x10001, 0xf43, 0xfffffffffffffffd, 0x7f, 0x3}}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002800)='/proc/capi/capi20ncci\x00', 0x440000, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000002840)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002880)=r4, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000028c0)=0x3) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000002a00)={&(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002980)=[{}, {}], 0x3, 0x0, [], 0x5, 0x2}) [ 463.414517][ T4599] usb 1-1: Invalid ep0 maxpacket: 64 [ 463.435684][ T8701] usb 2-1: USB disconnect, device number 6 [ 463.453363][ T4599] usb usb1-port1: attempt power cycle 23:01:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x305a40) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa1, 0x6a, 0xa1, 0x0, 0x3708, 0x20ce, 0x1e92, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd4, 0x26, 0x7f}}]}}]}}, 0x0) ioctl$EVIOCGNAME(r1, 0x83c0550b, 0x0) [ 464.032805][ T8704] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 464.039993][ T8704] ath9k_htc: Failed to initialize the device [ 464.047040][ T8701] usb 2-1: ath9k_htc: USB layer deinitialized [ 464.192929][ T4599] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 464.284083][ T4599] usb 1-1: Invalid ep0 maxpacket: 64 [ 464.445355][ T4599] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 464.523860][ T8701] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 464.544869][ T4599] usb 1-1: Invalid ep0 maxpacket: 64 [ 464.550416][ T4599] usb usb1-port1: unable to enumerate USB device [ 464.765358][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 464.890688][ T9259] IPVS: ftp: loaded support on port[0] = 21 [ 464.905940][ T8701] usb 2-1: config 0 has no interfaces? [ 464.911635][ T8701] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 464.921138][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.995930][ T8701] usb 2-1: config 0 descriptor?? [ 465.258384][ T8701] usb 2-1: USB disconnect, device number 7 23:01:51 executing program 0: prlimit64(0x0, 0x2, &(0x7f0000000140)={0x0, 0x80000000}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '.-\x00'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/nullb0\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRES32=r5], 0x78) perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x9, 0x4, 0x1, 0x0, 0x17, 0x4100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffff9f, 0x4, @perf_config_ext={0x1, 0x100}, 0xc800, 0x6, 0x0, 0x8, 0x3ff, 0xfffff801, 0xfffc}, r2, 0x0, r4, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0x7d, 0x2, 0x3e, "ae930865b4ef69bf41d0b9ff3016c8c9", "54de1035225f1f2c9862365991fa4ed0da98f71febd2c7d7eeaa90d5ba866986ad55b4ffdde1bdbccd8331342b5827486e6401e0ca3b338df2689535421e2e6f055966b6bb710e22dc638c33d43cc14fd09484921d079536972485efe23d9ca91341fbd737b39257"}, 0x7d, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) pwrite64(r6, &(0x7f0000000180)="af3d92afe519ec53e17cffc9632dacf77912c1c39bf2033728eaac15bbc2e1bf72b3208ec3c62b3df2452e5cdd0f5a6bac47019a5ff09acac4b1b68cc6671a915c6ed73b3a329675e5fd32b8f56086034b9c5a53ccd746b4075aacf1b84a9ddae111f6892a1b2174cc690039fbaa8c67cf395480d506b870cf6947256819ea29928af5bc365f8174bff2e1", 0x8b, 0x3) socket(0x2b, 0xa, 0x1f) [ 465.640572][ T9259] chnl_net:caif_netlink_parms(): no params data found [ 465.934067][ T5] usb 2-1: new high-speed USB device number 8 using dummy_hcd 23:01:52 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x400d005) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000640)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB], 0x28}}], 0x2, 0x0) [ 466.070635][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.078947][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.088529][ T9259] device bridge_slave_0 entered promiscuous mode [ 466.150428][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.158176][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.167788][ T9259] device bridge_slave_1 entered promiscuous mode [ 466.172858][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 466.244210][ T9259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.265739][ T9259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.294431][ T5] usb 2-1: config 0 has no interfaces? [ 466.300219][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 466.309698][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.361918][ T9259] team0: Port device team_slave_0 added [ 466.391806][ T5] usb 2-1: config 0 descriptor?? [ 466.399562][ T9259] team0: Port device team_slave_1 added 23:01:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0xfe}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc8000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4c4, 0x0, 0x0, 0x0, 0x0, 0x100000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x4, 0x3, 0x1}, 0x1}}, 0x18) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1d, @empty}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x2c, 0x4, 0x0, 0x38}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000200)="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"}, {&(0x7f00000008c0)="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"}, {&(0x7f0000000440)="4df89610d84195e06739a5f79d37e22a492be86453a3f09f3c87d29b6569980d98eeab50eac509104df4b99f415ac9c6444a81d2b9dffe2132fa3981acd617000717c371b8889569f598355d559598c9cf432568d403753c0496ded0daf757acbd1a27f313ae93e4aea7ea6e7bf336221e4724faa945b005233bfaf8fa813ec4436195e767a40d5ad98400fb9f5d7e4f27bbf8e62b5cf71fcb4c0d756e00cad266c94fb0ea0b78490d6678349fc4f85e9e8ce46e0ad08d5e5f79074b2a5b747344b4e726fd2a4ef2aee2355453323f5e5dc6"}, {&(0x7f0000000540)="d906e0dc75924855c12ec1f5f5e1d58095668c6caef755ffb67a8db624b67eeabc76245995254f985f4e80de45a813b085aaa045bc690458542b42082163d6377e47324fbbc8d2b1e883aeceebd9f595ae170d7b431512ddee8c86e376734d9bedea0874d821da4750e7861f271241b37dace2776d536e818dc459fb6727528240b506790cd3cc3ed0f7089c3f7fbfed8ed5c920c4fc47ec79d26999a84928fd38d875333db58088cf4b64f0a54b09d87a8117c1634057958baf11edc6bf452fb236b5b8e034c907284ee4186d0f20b52d1786a5f8e449474540d9e0ba"}, {&(0x7f0000000300)="33ad016ca1dde290b33282b8cc971cb100bad12be17b8b0e156d41fbd2f890c11ab333e5aa06d0ec8f5d1b6cad3dccf2332dd6b961eec4f6357ebf200a1a4c2ab779db1dfa5faf97c62bfa5ea23cad47c9afaf7ab2cbd20c4c7359d69f4fd1cdb4"}, {&(0x7f00000018c0)="5d6d5213eada5146a76b69677b8f238dad76b81dcdaf835941e28c5acdd70588e9e289de92321db542e9c37a5fe122aaf56ebc9d4a80abbf4702ac17cb1bd1347c1d236bac5f115191"}, {&(0x7f0000001a40)="17211c3f1e03710420fa413484a4d362de2d1151f35f61b185866a5744f833ee07482569ecddf6da52968faf727704e8d79cb311fae5ec2eac8cb728b03778cec41c2c4dee3e8a5e9ff21d273ed6e4242a691c1d83c8be409ff2fdf407ad9cd0f4185ca8561059d6c7d651caddc741616105de0c26d9750d4cdab0a291ba5f34ce748db7e5a6a62d6bde84d664936929ea52f8"}], 0x44}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000001940)='/dev/hwrng\x00\xd6n0\xf5HE\xbcY\x9c\xb1J\x954\xb7\x8bY\x16\xda\x95o\x12o \xae\xeb\xa8\xfce\x9fW\x91X,\x05\x91p\xa5.\x9d\xcc\xc0#\x8b\xfeG\x86H\xccO\x19\xd8\x92\xaa\x10\xe6MD\xa3w\xb8\x81\xa4\x9c:M\x1fo\xceu\x1f\xba\x12\xf6\t\x8a\xe1\x16X\xbbhc\t\xe1\xbc\x8e\xdf\x13\xc5\xa0`\xcb\xe7N\x81J\xaf\x89\xda-\x80\x19\x8a7QIx\xd9t\x85\xba\xb2/\x81\xbd\xde\x9c\"\xa3\x9d\xa7\x86\xe4\xbe[-\xb5\x8cA\x1bfv\xf3o\x9e?\xe7g:\xd9\xaa\'\xc4\xf3Q-C\xff\xa2\xd1\xd0V\xa4L\xdf\xaf:\xbe\xff}\xac\xff\xe3G\r}\x95%\xff\xe3@\xbc\xa9\xc0\x92\xfd\xa4\xf4\xa7&\xad\x87\xee\xbaz\n\xab\x1d\xa7GtQ\xf7Ds[\xa7\xb0\xa1\x8al\x99'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 466.521548][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.528837][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.555632][ T9259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.589383][ T9259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.597011][ T9259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.623206][ T9259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.639380][ T5] usb 2-1: USB disconnect, device number 8 [ 466.761449][ T9259] device hsr_slave_0 entered promiscuous mode [ 466.790386][ T9259] device hsr_slave_1 entered promiscuous mode [ 466.813022][ T9259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.820715][ T9259] Cannot create hsr debugfs directory [ 466.836066][ T4599] Bluetooth: hci2: command 0x0409 tx timeout 23:01:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280008f7ee326b5b4b20000010005fba00000000000000001b000001", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x14) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000080)=0x7fffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = fcntl$dupfd(r1, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002cc0)="ea", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000002440)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}], 0x3, 0x20000040) [ 467.358028][ T9508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.365909][ T9508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.465207][ T5] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 467.615746][ T9508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.647694][ T9259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.693713][ T9508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.734668][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 467.751472][ T9508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.769366][ T9259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.806435][ T9259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.844154][ T9259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.864945][ T5] usb 2-1: config 0 has no interfaces? [ 467.870695][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 467.880208][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:01:54 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) dup(0xffffffffffffffff) write$binfmt_elf32(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xb27) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000002060100000000000000000000ffff0310000300686173683a69702c6d616300050004002c00078005001500810000001800028014000240fe800000000000000000000000000002000000003200000005000100070000000500040000000000050005000200000000000000f867db4bd3c6c9864c6a7296b9fede5a31fceff2c9b0ae1b4e4fa5183bfda3845bac0b70df4d64bb870d438c13e710b564a21d724b658b7251030821524a49f54fac146bc8f76f5c49b831fa8e16785c1120145917d9397c54e057d5a23e428843f8b02207d7d4213cde54b0c383333699774fd7958b1b449b352ff8e5bc1dd78a886d218eaac3392c9433f26654f2d3fdc8e96ea981cc1bc21c33175004eea84b57b7a0f7e8b368b691dc428f0192c994f994d1574afc97272aacaef840e765c6b94ee32592829c"], 0x70}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') accept4$tipc(r4, &(0x7f0000000080)=@name, &(0x7f00000001c0)=0x10, 0x40000) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e25, 0xc1d4, @initdev={0xfe, 0x88, [], 0xfe, 0x0}, 0x40}, 0x1c) [ 467.970075][ T5] usb 2-1: config 0 descriptor?? 23:01:54 executing program 1: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000140)={0x6, "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"}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000804000001020d0009"], 0x0) [ 468.154810][ T5] usb 2-1: can't set config #0, error -71 [ 468.213809][ T5] usb 2-1: USB disconnect, device number 9 [ 468.216435][ C1] sd 0:0:1:0: [sg0] tag#3047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 468.230354][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB: Test Unit Ready [ 468.237127][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.247021][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.256869][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.266767][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.276609][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.286450][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.296271][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.306098][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.315953][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.325794][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.335609][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.345444][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.355257][ C1] sd 0:0:1:0: [sg0] tag#3047 CDB[c0]: 00 00 00 00 00 00 00 00 [ 468.439073][ T9521] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.443220][ T9518] IPVS: ftp: loaded support on port[0] = 21 [ 468.914009][ T9510] Bluetooth: hci2: command 0x041b tx timeout [ 468.984892][ T9259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.012144][ C1] sd 0:0:1:0: [sg0] tag#3050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.022909][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB: Test Unit Ready [ 469.029573][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.039438][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.049298][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.059156][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.063144][ T8701] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 469.068986][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.086964][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.096825][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.106634][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.116588][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.126477][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.135633][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.136340][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.144965][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.153209][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.153321][ C1] sd 0:0:1:0: [sg0] tag#3050 CDB[c0]: 00 00 00 00 00 00 00 00 [ 469.229000][ T9259] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.316433][ T8701] usb 2-1: Using ep0 maxpacket: 8 [ 469.347279][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.357486][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.367480][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.374872][ T9510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.383949][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.393937][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.403294][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.410510][ T9510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.495570][ T8701] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 469.504758][ T8701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.515128][ T8701] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 469.557118][ T9259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.568237][ T9259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.668331][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.678106][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.689122][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.699968][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.711811][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.722247][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.732561][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.742915][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.752378][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.762592][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.772194][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.790380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.800583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.814244][ T8701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.823617][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.831849][ T8701] usb 2-1: Product: syz [ 469.836237][ T8701] usb 2-1: Manufacturer: syz [ 469.840968][ T8701] usb 2-1: SerialNumber: syz [ 469.941308][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.949412][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.021395][ T9259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.116235][ T27] usb 2-1: USB disconnect, device number 10 [ 470.229869][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.240086][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.379202][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.389185][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.425672][ T9259] device veth0_vlan entered promiscuous mode [ 470.454982][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.464545][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.531460][ T9259] device veth1_vlan entered promiscuous mode [ 470.583341][ T9521] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.592315][ T9518] IPVS: ftp: loaded support on port[0] = 21 [ 470.729546][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.739176][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.748574][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.760277][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 23:01:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e25, @multicast2}, 0x10) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/523], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000600)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fdfc862042297ccc273b2ab572c389712a580df520f8480046017197eb9d50", 0xaf}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf887", 0x20}, {&(0x7f0000000f80)="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", 0x1c0}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3445319f0490b0d198342afe460449f3348eea99ddfd98b82c88626de85d7d39a299b3b79ef378d5466fb5b9ae3874f416ead9604d4b76e080443ca8995afb8bf57ac87f4e4dd2ddcc7e61cf545d520a4686025d32ed0e69ddfd7b61da340966843021b594c4c66382285d278b96ae470f30ec96b6d8aa4a9735f1b4166706569730c0b97dd7d30982588dc241", @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4001}], 0x2, 0x20000804) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) flistxattr(r1, &(0x7f0000000100), 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f00000001c0)) [ 470.854076][ T9259] device veth0_macvtap entered promiscuous mode [ 470.977097][ T9259] device veth1_macvtap entered promiscuous mode [ 470.995816][ T9510] Bluetooth: hci2: command 0x040f tx timeout [ 471.041457][ T8543] tipc: TX() has been purged, node left! [ 471.202818][ T9259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.214850][ T9259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.224998][ T9259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.236040][ T9259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.249957][ T9259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.267333][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.277518][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.287086][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.297274][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.307851][ C0] sd 0:0:1:0: [sg0] tag#3051 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 471.318515][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB: Test Unit Ready [ 471.325424][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.335320][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.345239][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.356601][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.366664][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.376721][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.386634][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.396600][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.406479][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.417056][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.427032][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.437918][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23:01:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockname$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) [ 471.448517][ C0] sd 0:0:1:0: [sg0] tag#3051 CDB[c0]: 00 00 00 00 00 00 00 00 [ 471.641331][ T9259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.641361][ T9259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.641409][ T9259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.641436][ T9259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.645255][ T9259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.645799][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 23:01:58 executing program 0: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0xf000, 0x0, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x125682, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_destroy(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x545c, &(0x7f00000000c0)) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = semget(0x0, 0x2, 0x118) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x2b}], r5, 0x1, 0x1, 0x48}}, 0x20) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000140)={0xc73dafb5433717c9, 0x7fffffff}) semctl$IPC_RMID(r2, 0x0, 0x0) [ 471.647757][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:01:59 executing program 2: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0xc8ef0a4335e6829f, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0060000", @ANYRES16=r2, @ANYBLOB="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"], 0x6f0}, 0x1, 0x0, 0x0, 0x80}, 0x45) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 473.073424][ T9597] Bluetooth: hci2: command 0x0419 tx timeout 23:01:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000103}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88083, 0x13d) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000180)=""/173, 0xad}) 23:01:59 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003, 0x0) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xba, "a18471c7972e9220d374be52a85adafd514205ca63a01cd7059868751ca831ba524436c78445a4b08056035e8b1ed0abd531cd02dc8e4214bfddb6e12e4d81555ad2c8081ee63cea4edee8e46fe111e8c6bf2bbf8bc92cf47af15f9d39a71c01751bc71506c8179f10de43c184faf0522e9549a8806683be4585acb77003b67f4f8441573d2516613b200eda95b78b8b88f9c2e1d2ed7d20fc3aa5cf2d1cfd3c50809b2fbb3d2868289d7a05ebaaa8bfffa66c107f218fd348f7"}, &(0x7f0000000000)=0xc2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 23:02:00 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x4000814) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x1140, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES32=r4], 0x78) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000040)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1615db7bb152fc40043f000000000000dfff6af288ce188170cdc99f4720da164596d26544eb2d54f230b5cee6c60ea5053db88471af3cfc60b6edb87be03a17703cd42f407e3dc5ad64bb71bfd9356bf8b4c02980447e7e74b9d43937cd7f5140f5d9", @ANYRES64, @ANYRES32=r0], 0xe4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffff) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235002000000f30c74424002b000000c744240209bb0355ff1c2448b8f9ffff7f000000000f23c80f21f835040010000f23f8f2400f517168b9800000c00f3235002000000f3066b8db008ed8c4e27d23a805000000b9060b00000f320f08c4a36d4a94b81a1100001a", 0x70}], 0x1, 0x8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x10401) [ 474.128468][ T8543] tipc: TX() has been purged, node left! [ 474.166156][ C0] sd 0:0:1:0: [sg0] tag#3013 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.176837][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB: Test Unit Ready [ 474.183651][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.193557][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.203414][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.213384][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.223263][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.233050][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.243038][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.252920][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.262792][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.272678][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.282551][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.292424][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.302379][ C0] sd 0:0:1:0: [sg0] tag#3013 CDB[c0]: 00 00 00 00 00 00 00 00 23:02:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e25, @multicast2}, 0x10) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/523], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000600)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fdfc862042297ccc273b2ab572c389712a580df520f8480046017197eb9d50", 0xaf}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf887", 0x20}, {&(0x7f0000000f80)="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", 0x1c0}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3445319f0490b0d198342afe460449f3348eea99ddfd98b82c88626de85d7d39a299b3b79ef378d5466fb5b9ae3874f416ead9604d4b76e080443ca8995afb8bf57ac87f4e4dd2ddcc7e61cf545d520a4686025d32ed0e69ddfd7b61da340966843021b594c4c66382285d278b96ae470f30ec96b6d8aa4a9735f1b4166706569730c0b97dd7d30982588dc241", @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4001}], 0x2, 0x20000804) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) flistxattr(r1, &(0x7f0000000100), 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f00000001c0)) [ 474.495286][ T9644] IPVS: ftp: loaded support on port[0] = 21 [ 474.765710][ C0] sd 0:0:1:0: [sg0] tag#3014 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.776495][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB: Test Unit Ready [ 474.783298][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.793085][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.802974][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.812908][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.822786][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.832773][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.842658][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.852589][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.862518][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.872547][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.882479][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.892410][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.902330][ C0] sd 0:0:1:0: [sg0] tag#3014 CDB[c0]: 00 00 00 00 00 00 00 00 [ 475.179851][ T9642] IPVS: ftp: loaded support on port[0] = 21 [ 475.614743][ C0] sd 0:0:1:0: [sg0] tag#3015 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 475.614867][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB: Test Unit Ready [ 475.614997][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23:02:02 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000300)="04000000010219", 0x7}, {&(0x7f0000000180)="5ccab64877ac7f", 0x7}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000005350272b39621ce5d1fe2725bbc9a7ad72d651c854b11187c5acace299f49360a70cf3790e9228f7802000000000000002d968e1cc7f845666a947445cb8febd2bb"], 0x28}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) [ 475.615128][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23:02:02 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a00000000a843090000fe803900080003000c0000dc13382d00009b7a136ef75a7b83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d240000060ce0", 0x55}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [], 0x3c}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20c200a2}) bind(r3, &(0x7f0000000140)=@can={0x1d, r7}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r9, 0x1, 0x39, 0x0, &(0x7f0000000200)) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x2040, 0x0) bind$netlink(r10, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) [ 475.615256][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.615383][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.615511][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.615637][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.615760][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.615888][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.616008][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.616139][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.616260][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.616385][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.616502][ C0] sd 0:0:1:0: [sg0] tag#3015 CDB[c0]: 00 00 00 00 00 00 00 00 [ 476.344783][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.345357][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.635417][ T9713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.671992][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.770108][ T9715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:02:03 executing program 2: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 23:02:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) ptrace$getenv(0x4201, 0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) syz_open_dev$radio(0x0, 0x3, 0x2) [ 477.615092][ T8704] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 477.905089][ T8704] usb 3-1: device descriptor read/64, error 18 [ 478.314000][ T8704] usb 3-1: device descriptor read/64, error 18 [ 478.584292][ T8704] usb 3-1: new high-speed USB device number 3 using dummy_hcd 23:02:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x7, 0x1ff}) write$tun(r0, &(0x7f0000000400)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8baa7a", 0x0, 0x0, 0x0, @loopback, @mcast1, [], "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"}}}}}}, 0xfca) [ 478.850558][ T8543] tipc: TX() has been purged, node left! [ 478.858882][ T8543] tipc: TX() has been purged, node left! [ 478.885391][ T8704] usb 3-1: device descriptor read/64, error 18 [ 479.303956][ T8704] usb 3-1: device descriptor read/64, error 18 [ 479.424965][ T8704] usb usb3-port1: attempt power cycle 23:02:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) [ 480.138136][ T8704] usb 3-1: new high-speed USB device number 4 using dummy_hcd 23:02:06 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x3, 0xc8, "c43d8f756395313bcf34d86276f43d8edfec6b86cc66db8a5143691d6f4d4e01a0d3f2d8a96b4fced21dbae65a27377e2e0260e5043f719fa99cff710864689396578ccf20e53825826a738fda11d27ba1cb0a004808cc5e2e48a9c4aba3f523c9a734b21a959fd7c8c4a27e2f37bf4e41df043d04ca702d325d1fd800ae6a61c7fb3fc155e3e798c2888558298a4d193c371b5c2fc7ca312fb3d50bd69dfeb7a3e9747efb76c44e9244b989711f0ca8a6ebd0c1dc39337463edd5886a8443329e2da54ae4a5b51c"}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x3, 0x6]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x3, 0x69b]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2f4b}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 23:02:06 executing program 2: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b24b4a53e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7, 0x400}}, 0x30) syz_usb_disconnect(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 480.436431][ T8704] usb 3-1: device descriptor read/8, error -71 [ 480.643991][ T8704] usb 3-1: device descriptor read/8, error -71 23:02:06 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0xd23, 0x6, 0xdac3, 0x1}) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000440)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002001c0000001b000000040004800400038008000500", @ANYRES32=r5, @ANYBLOB='\n\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x60}}, 0x0) 23:02:06 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x5241, &(0x7f0000000000)={0x0, 0xb64a, 0x4, 0x1, 0x33a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x20}, 0x8) flock(r2, 0xa) [ 481.002762][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.012321][ T9770] IPVS: ftp: loaded support on port[0] = 21 [ 481.157074][ T8704] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 481.239792][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.258288][ T8704] usb 3-1: Invalid ep0 maxpacket: 83 [ 481.264359][ T8704] usb usb3-port1: unable to enumerate USB device [ 481.293774][ T9793] IPVS: ftp: loaded support on port[0] = 21 23:02:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ppoll(&(0x7f0000000040)=[{r0, 0x34f2}, {r1, 0x4}], 0x2, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000080)={[0x3]}, 0x8) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x58, 0x6, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x4001) 23:02:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048000) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) [ 481.665907][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 481.723458][ T9822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.778146][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 481.916455][ T9822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.954214][ T9510] usb 2-1: new high-speed USB device number 11 using dummy_hcd 23:02:08 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3ab) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='maps\x00') read$FUSE(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000080)={0x3f, 0x81, 0x3f}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000004c0), r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2040000}}}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$TCSETX(r6, 0x5433, &(0x7f0000000200)={0x1, 0x6, [0x9, 0x200, 0x0, 0x1, 0x8], 0x16}) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvme-fabrics\x00', 0x20000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYRES32=r2], 0x1c}}, 0x20010000) r8 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') sendfile(r8, r9, 0x0, 0xa7fff) [ 482.314845][ T9510] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 482.323196][ T9510] usb 2-1: config 0 has no interface number 0 [ 482.329814][ T9510] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 482.341657][ T9510] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 482.355346][ T9510] usb 2-1: config 0 interface 255 has no altsetting 0 [ 482.362323][ T9510] usb 2-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 482.371627][ T9510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.401550][ C0] sd 0:0:1:0: [sg0] tag#3017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.412382][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB: Test Unit Ready [ 482.419166][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.429056][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.438939][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.448821][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.458706][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.468610][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.478497][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.488386][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.498273][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.508155][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.518088][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.527972][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.537843][ C0] sd 0:0:1:0: [sg0] tag#3017 CDB[c0]: 00 00 00 00 00 00 00 00 [ 482.732808][ T9510] usb 2-1: config 0 descriptor?? 23:02:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b1", 0x1}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r2 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) tkill(r2, 0x1000000000016) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) recvfrom$inet6(r3, &(0x7f0000000100)=""/105, 0x69, 0x18000, &(0x7f0000000080)={0xa, 0x4e24, 0x800, @ipv4={[], [], @empty}, 0x2}, 0x1c) [ 482.969600][ C0] sd 0:0:1:0: [sg0] tag#3018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.980438][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB: Test Unit Ready [ 482.987241][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.997220][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.007094][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.016964][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.026846][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.036731][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.046601][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.056481][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.066375][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.076250][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.086137][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.096107][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.106031][ C0] sd 0:0:1:0: [sg0] tag#3018 CDB[c0]: 00 00 00 00 00 00 00 00 23:02:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100000044000"/20, @ANYRES32=r6, @ANYBLOB="07000000000000001800128008000100736974000c00028008000100", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0xd}, {0x2, 0x3}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x1c}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x9}}, @TCA_RED_PARMS={0x14, 0x1, {0x71b0cba}}]}}]}, 0x154}}, 0x0) 23:02:09 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090250000101000000090400000002060000052406000005240000000d240f01000000007201000000152412"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a83, 0xc0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000010001c001a8018000a80140007"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000030c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003080)={&(0x7f0000000540)={0x8fc, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',{\x87(&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',&@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.&]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '],[\xf3]&.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xab&@}/(%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x32, 0x2, 'bond_slav+;1\x00\xa0\xe4\x1b8\xae?7M\x02\xe4\x9fK\xe0\xf8\x80q\xa0\xca\x17\x8f9\xa9\xdd\xdb\xbe\xefo\xad \xd7\xde\xe2R'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$-}-\x9a+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "3ee06fe7b132f977b963a473ad067b09d65eda80575ff2af46fb6a766ba57c8aa8128dc97f55b843b94d49af4ce9"}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "6d00445e984a2e79e2b458663f2c0c4099f38ec98bcded9aa349f7843228102bde75a92901765d68f971663a7a0726b52ec0a6736eb67bb5906ecf2baf8bf8dc332c1f0bdcbe5418f2e4876d073711577a19adda211f747d73815eb650"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x26c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "19e7384c0cd1bc5c2542efccf38160831cc68efe0f259ded373116a5faa036cc6949b9b78f607ffc3fc972f88ac79b255c88c81da3945a44cb0ce3b2db009f6a9052ec2476ce5f05573a0cf5d57d0b6b41ed02b0fcdbbb5a951f8a85894ffac1fbabf3ebcd675eedf3589a3732768283b22ffa4ead4f3ab25119b1"}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "7b6e9925560117caaf3a12ccf2d8f260bf3b75b25c439a0eb67016e8155b8a1981473a8548558eb06926b5dbb1708f250069a161269e4c7e39be36dc42e4c669d46463c1e4eeeb4904029fbc20bf0e99493fc68103ee02ee96945264654d726945f62913a079832f6de3dd1358680fd483162147a7299faee8bbcd3d9af1c464319926b69c6d54a771c07978c099b7705a630efbc4f11590ceb5711276f59395c6a1c2dbfbd7c40a3922f1789cc9c8a9b5870f102bf77639bdcd0cfd7fd36b301a9e7b9193232e6cb35b9241f2f9e41a01d73fa3a71f5f6f8b01d2e3bf205d9eb8a6896187e45e425e5a7244"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "2bb59490cd6cbd463ae2245abc57471902f4c2fb0b8f839168e271eb73c98a5de0df84b4c2374208cf66e1e8f10a82b4caf56e4fc0419575bdf05fed6dc23c12fe65d91e4ce85cb03e7da7e2d5eecf3fbdae7cfcb97e71bec243dd5c41819e8850d3e867b86c68b7dbea1525afe329825d3741bb259c210c9f0cbfa37933942b3d1814d200ecca903c689122d4de5fdbef2102e776bcfb3666786793ebab3b17919c8c37ad2d7bf016067caf6578edff31345e2175550ef4f12392b425065925d466a6e6a2fd289d8939d6cc6d13cc524de411600445a15e57f55343433c23"}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x21c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe5\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(!-!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xfd]!@+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "810b6b795f5c99e1d51e23ab0663aec296db1d9743845b6b199e90f9239432027d5565a1191839b01a4846a5a28545967af2b977032bf65c297826e97484f821e4eeaed812384682365ef8057159dd4246163f8ddba4dbcc72418a56b2fa7452dc4074b6f26443db6e4aa5a3517be7b86984276d9e82f451e715a3de9adbc291b1fb9e0a85ed722ab059801e347865321cdc59d10874fe1716581ea39b70de96c4ccadb059f1a3774a8f8e819a5d7315d950749f09c5c9b765e823348acfdd64289c3eb5b10680d10f4c58f9305ecad1768947a1e0c99d0460a5bd3b923dac7c99be60038e86d663bb2de4a1788344bc476a11a60d"}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "fa7a035beb33e1d3d2a641d5fc882e95915e3da8d1910865891ac97a019e99a5bd2d89838962b4425e5f20c967cb3c6218ccfe941531f577e652e21e4fd5a3b06530681dbaf10570170bf3fc3874d4cce6e4b7be2d4320afe28554ecd29a1cdb12ad68c8cada6c124aaf116a81eeffd3a74c571a3071923e716cdf1e8f653d94411cb02edc65cb0bbd717ae2b272a37487f12a350c4c7e58ca568fcd9cd33078e2ba1d47a1"}]}, @ETHTOOL_A_FEATURES_WANTED={0x194, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "27e1659b63fbb63bdc3412ce4a8a336032680832dc22ab1c5d653892e7b5affd123d3afe24050bfcccac3441b542034cf7f6c6a2a79afd83e3f70289fd2be3b984db163132418b485ad3c0a91cbd28ec1b0ae599edafc6a9db1f0de86013fcca6274ef52211bab3731df884c041eb116cce636d55de14f867965f97584ca0a86f3704088e1a0782d826a2a55830137b1d71cce53532ba980ede2772d48ad3f38af990e3f1e35c2f1bdc7e2755b2a5fa5f70356cf0b7d83207ff8f73b7f5a9786d7335789a68f39d7ace237c66147a8cf1f420e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xdc96}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "1204fbcb35ea3c985f8db7be2322628131006eb28eb204d9232808850ea2c30db2f25e9ba6b8b1d6bdfc94fb9580e790b5e3ccdebbcfed90db3c2efe3ceef6a407d2059d7c9ab0f819d28c57e345affd3c1b641a7047a4204c07cff9a850b7461fe48c1264925ffd1204342d23e4dbfbe9a7736b8f5d8f8781e5c42bd1bbec19bebf1302d44f6bb2328a86110355b8ef257c50f56d71c6f881b76f77"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x8fc}, 0x1, 0x0, 0x0, 0x4004005}, 0x40400d0) 23:02:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}}, 0x600000d0) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={0x18, 0x14, 0x101, 0x0, 0x0, {0x18}, [@generic='\f']}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800400000030000000000f034502c5340ac86bc9265e3b90000000000180000000c000000"], 0x18}}, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x12080, 0xe) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRESOCT=r3], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0xa4, 0xffffffffa0008000, 0x3400) [ 484.104484][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005b5e11aa1002701000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB='\x00'/19], 0x24}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x40, 0x2) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6561}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb59}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x11) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = fcntl$dupfd(r6, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 484.154246][ T9510] usb 2-1: string descriptor 0 read error: -71 [ 484.206290][ T9598] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 484.255690][ T9510] usb 2-1: Cannot read MAC address [ 484.261226][ T9510] MOSCHIP usb-ethernet driver: probe of 2-1:0.255 failed with error -71 [ 484.325046][ T9510] usb 2-1: USB disconnect, device number 11 [ 484.386001][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.442145][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.464576][ T9598] usb 3-1: Using ep0 maxpacket: 8 23:02:10 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000102505a1a4400001020301090904000803020600080824060000bcb04805240005000d240f01ed0000000700ff24120000a317a88b045e4f01a607c0ffcb7e392a06241a0700020524010000090582020000040000090503020002ea05b30000000000000000"], &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x7, 0x0, 0x10}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "86dc928ac1b3418adac94ba004f28f00"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "3cf2f2754d18dc2b79928ee4ac598f3e"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_disconnect(r0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000002c0)={0x20000000, 0x0, 0x20}) init_module(&(0x7f00000001c0)='/dev/radio#\x00', 0xc, &(0x7f0000000280)='/dev/radio#\x00') r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x9}}, 0x18) [ 484.603398][ T9598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.815688][ T9598] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.825041][ T9598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.833170][ T9598] usb 3-1: Product: syz [ 484.837681][ T9598] usb 3-1: Manufacturer: syz [ 484.842426][ T9598] usb 3-1: SerialNumber: syz [ 484.916316][ T9510] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 484.977051][ T9598] usb 3-1: bad CDC descriptors [ 485.006638][ T9595] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 485.188888][ T8702] usb 3-1: USB disconnect, device number 6 [ 485.257022][ T9595] usb 1-1: Using ep0 maxpacket: 16 [ 485.286114][ T9510] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 485.294912][ T9510] usb 2-1: config 0 has no interface number 0 [ 485.301247][ T9510] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 485.312836][ T9510] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 485.326536][ T9510] usb 2-1: config 0 interface 255 has no altsetting 0 [ 485.333509][ T9510] usb 2-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 485.342805][ T9510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.359655][ T9510] usb 2-1: config 0 descriptor?? [ 485.556934][ T9595] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 485.564811][ T9595] usb 1-1: can't read configurations, error -61 23:02:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60144a02400c000200050a82c12d153e37090001802e252f00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xf601}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x14401, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={r3, 0x74}, 0x8) [ 485.775639][ T9595] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 485.785969][ T9510] usb 2-1: string descriptor 0 read error: -71 [ 485.894663][ T9510] usb 2-1: Cannot read MAC address [ 485.900317][ T9510] MOSCHIP usb-ethernet driver: probe of 2-1:0.255 failed with error -71 [ 485.951093][ T9901] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 485.985061][ T9901] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 485.992611][ T9510] usb 2-1: USB disconnect, device number 12 [ 486.040153][ T9595] usb 1-1: Using ep0 maxpacket: 16 [ 486.045783][ T8702] usb 3-1: new high-speed USB device number 7 using dummy_hcd 23:02:12 executing program 1: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f0000000180)='\xf3Z\x169K*', 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2d, 0x3c, 0x20, 0x800, 0x2a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0xdeea, 0x6}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in=@multicast2, 0x4e23, 0x1, 0x4e23, 0x4, 0xa, 0x0, 0x0, 0x32, r3, r4}, {0xc1, 0x0, 0x8000, 0x800, 0x401, 0x2, 0xfffffffffffffffe, 0x1ff}, {0x1f, 0x9, 0x1, 0xd62}, 0x8000, 0x6e6bb8, 0x3, 0x1, 0x2, 0x2}, {{@in=@multicast1, 0x4d3, 0xff}, 0x2, @in6=@remote, 0x3500, 0x3, 0x2, 0x1, 0x18424c6, 0x401, 0x3f}}, 0xe8) write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200200, 0x0) fsmount(r0, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x480000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x78) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x30000, 0x0) write$sequencer(r7, &(0x7f0000000300)=[@echo=0x2, @e={0xff, 0x1, 0xe, 0xe1, @generic=0x6, 0xf9, 0x6, 0x9}, @x={0x94, 0xd, "50cc1e47c66f"}, @l={0x92, 0x0, 0xd0, 0x3, 0x1, 0x7, 0x200}], 0x1c) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000033000)=""/102389, 0x18ff5) [ 486.286166][ T9595] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 486.294148][ T9595] usb 1-1: can't read configurations, error -61 [ 486.300857][ T8702] usb 3-1: Using ep0 maxpacket: 8 [ 486.316903][ T9595] usb usb1-port1: attempt power cycle 23:02:12 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500041280800000000000000f4ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100766c616e000000001000028006000100000000000400038008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0) [ 486.427233][ T8702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.595187][ T8702] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.604677][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.612809][ T8702] usb 3-1: Product: syz [ 486.617296][ T8702] usb 3-1: Manufacturer: syz [ 486.622017][ T8702] usb 3-1: SerialNumber: syz 23:02:12 executing program 1: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) clone(0x2000000003147780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x3, 0x200, 0x5, 0xd3db, 0x5, 0x5}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x710, 0x410, 0x200, 0xf0, 0x0, 0x640, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'wg1\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev, @ipv4, 0x20}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "1141"}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@ipv4={[], [], @private}, @mcast1, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', @ipv4={[], [], @empty}, @local, @private2, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) close(0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, &(0x7f0000000080)) [ 486.759923][ T8702] usb 3-1: bad CDC descriptors [ 486.931033][ T9920] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 486.944470][ T8702] usb 3-1: USB disconnect, device number 7 23:02:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000034000511d25a80648c63940d0424fc6004000f000a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, 0x0, r5) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$setregs(0xd, r7, 0x8000, &(0x7f0000000280)="ff0ea0491941990423524ff804697865664811760dba21ab39c93f14f01ca2d4361624dcc59c1acb1ee0a82fc8ab17041b102c6f8fe28574b4d67e0ad05eb3907b1ff763ead93c9c8fe5ef5676487e912780a3fc544d8e98841e97199dc9fcddf0177ea60717e39c7cd7a41c424fa8f95a88b5d4d9f9c0b5ef0d555ca599f36626047f8ac0417f2f7ce9ac1c14038603440bd3") ptrace$cont(0x9, r7, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0x10, 0x81}, 0x0, 0x0, 0x2, 0x3fc, 0x2, 0xfff, 0x1, 0x8, 0x4, 0x0, r6, r7}) [ 487.039082][ T9926] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 487.064728][ T9595] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 487.156634][ T9595] usb 1-1: Using ep0 maxpacket: 16 23:02:13 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xd, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) semctl$GETZCNT(0xffffffffffffffff, 0x3, 0xf, &(0x7f0000000040)=""/183) [ 487.224679][ T9929] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 23:02:13 executing program 2: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x11, 0x2001, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4810) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="050f"]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x58, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe56}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffff2a}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x63}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 487.399227][ T9595] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 487.407179][ T9595] usb 1-1: can't read configurations, error -61 23:02:13 executing program 1: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000100)) socket$bt_hidp(0x1f, 0x3, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1, 0x12) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000180)) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000094f3f4888a8e7d529d62be8fe00060105000100060000fd100008800c0007800800094077ca99830900020073797a300000144b080009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x47fe6, 0x0) [ 487.596580][ T9595] usb 1-1: new high-speed USB device number 10 using dummy_hcd 23:02:13 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1000000000080000290000003900"/24], 0x18}}], 0x2, 0x0) [ 487.756341][ T9595] usb 1-1: device descriptor read/8, error -71 [ 487.776090][ T9597] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 487.965648][ T9595] usb 1-1: device descriptor read/8, error -71 23:02:14 executing program 3: quotactl(0x8, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)="b70ba60617732aa392fdb42b9143f8ea81f25e2e") openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x82000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@dev={[], 0x1e}]}) r1 = signalfd4(r0, &(0x7f0000000140)={[0x8]}, 0x8, 0x80800) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x10000, "83d4ea5042bd82b09b7bf73f333cf598c1aff4e8c68e485a5218835feda84992", 0x1, 0x40, 0x8, 0x1, 0x1}) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000200)=0x1, 0x4) signalfd4(r1, &(0x7f0000000240)={[0x8]}, 0x8, 0x80800) fcntl$getownex(r1, 0x10, &(0x7f0000000280)) msgget$private(0x0, 0x84) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000002c0)='/dev/dlm_plock\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/168, 0xa8}], 0x2}, 0x10022) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000540)={0x0, "454de22d27fd742c9c88dcb60d3fcee85fff6f7bf9f16f32b2ee358b34218edc", 0x2, 0x7, 0x869, 0x4, 0x2}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x100000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vcs\x00', 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000009c0)) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x6) open(&(0x7f0000000a00)='./file0\x00', 0x100100, 0x100) 23:02:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000507000000ae3a1e35319dbee800", @ANYRES32=0x0, @ANYBLOB="00000000000000ef230012800d0001006d616373656300001400028005000c000000000005000a00000000000a000500140000000000000008000a00fec1213ee28c8dc74482f516fbab11a7"], 0x58}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r3, 0xca6b, 0x4, 0xbec}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0xfff, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0918, 0x40, [], @p_u16=&(0x7f0000000000)=0x6}}) [ 488.087496][ T9595] usb usb1-port1: unable to enumerate USB device [ 488.175106][ T9597] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 488.322698][ T9948] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 488.346101][ T9597] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 488.355552][ T9597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.363776][ T9597] usb 3-1: Product: syz [ 488.368357][ T9597] usb 3-1: Manufacturer: syz [ 488.373091][ T9597] usb 3-1: SerialNumber: syz [ 488.466496][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010008506000010000000000000000000", @ANYRES32=r2, @ANYBLOB="6f229784000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000402028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) [ 488.568200][ T9951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.662918][ T9948] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 488.694398][ T9597] usb 3-1: USB disconnect, device number 8 [ 488.858043][ T9969] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 488.902745][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:15 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c045}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x34}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f0000000080)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 489.074472][ T9974] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 489.089609][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:15 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x138, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x24480, 0x0) 23:02:15 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x3, 0x92, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302062200052406010005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e3ed00f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="a5") [ 489.505408][ T9598] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 489.805383][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 489.836185][ T9597] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 489.927856][ T9598] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 490.074718][ T9597] usb 2-1: Using ep0 maxpacket: 8 [ 490.097416][ T27] usb 1-1: device descriptor read/64, error 18 [ 490.117004][ T9598] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 490.126942][ T9598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.135705][ T9598] usb 3-1: Product: syz [ 490.140197][ T9598] usb 3-1: Manufacturer: syz [ 490.145086][ T9598] usb 3-1: SerialNumber: syz [ 490.195410][ T9597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.205897][ T9597] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.217513][ T9597] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 490.232081][ T9597] usb 2-1: config 1 interface 0 has no altsetting 0 [ 490.506240][ T27] usb 1-1: device descriptor read/64, error 18 [ 490.606944][ T9597] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 490.616557][ T9597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.624927][ T9597] usb 2-1: Product: syz [ 490.629242][ T9597] usb 2-1: Manufacturer: syz [ 490.636367][ T9597] usb 2-1: SerialNumber: syz [ 490.688621][T10006] IPVS: ftp: loaded support on port[0] = 21 23:02:16 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x80000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') poll(&(0x7f0000000980)=[{r0}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 490.771585][ T9598] usb 3-1: USB disconnect, device number 9 [ 490.794657][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 491.084568][ T27] usb 1-1: device descriptor read/64, error 18 [ 491.213585][ T8702] usb 2-1: USB disconnect, device number 13 23:02:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) getsockopt(r0, 0x1f, 0x71cf, &(0x7f00000000c0)=""/190, &(0x7f0000000000)=0xbe) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) [ 491.489890][ T27] usb 1-1: device descriptor read/64, error 18 [ 491.586277][T10006] chnl_net:caif_netlink_parms(): no params data found [ 491.615815][ T27] usb usb1-port1: attempt power cycle [ 491.985300][ T8702] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 492.180200][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.187651][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.197411][T10006] device bridge_slave_0 entered promiscuous mode 23:02:18 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x441, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105000200000a1f000008001008000800180020001200", 0x24}], 0x1}, 0x0) [ 492.255227][ T8702] usb 2-1: device descriptor read/64, error 18 [ 492.330621][T10006] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.338117][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.347770][T10006] device bridge_slave_1 entered promiscuous mode [ 492.354748][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 492.536633][T10006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.580398][ T8699] Bluetooth: hci3: command 0x0409 tx timeout [ 492.619748][T10006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:02:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100}, {r1, 0x8}, {r2, 0x8001}, {r3, 0x1005}, {r2, 0x4058}, {r4, 0x2001}], 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="b5"}) [ 492.645315][ T8702] usb 2-1: device descriptor read/64, error 18 [ 492.699214][ T27] usb 1-1: device descriptor read/8, error -71 23:02:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000101580200000000000000000a0000000c00198008000200f30d0019040002"], 0x24}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f00000000c0)={0x1ff, 0x10000, 0x400}) [ 492.853266][T10006] team0: Port device team_slave_0 added [ 492.913788][T10006] team0: Port device team_slave_1 added [ 492.924869][ T27] usb 1-1: device descriptor read/8, error -71 [ 492.932348][T10187] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 493.009785][T10190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.185416][T10190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.254868][T10006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.262040][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.288329][T10006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.309667][T10187] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 493.348389][T10190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r11) [ 493.497767][T10190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.516526][T10006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.523593][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.549878][T10006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.693205][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.701284][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.746187][T10206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.779033][T10006] device hsr_slave_0 entered promiscuous mode [ 493.822917][T10006] device hsr_slave_1 entered promiscuous mode [ 493.864638][T10006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.872283][T10006] Cannot create hsr debugfs directory [ 494.307179][T10006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 494.325988][T10006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 494.378341][T10006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 494.438001][T10006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.599107][ T8702] Bluetooth: hci3: command 0x041b tx timeout [ 494.889336][T10006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.954880][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.964138][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.004263][T10006] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.066724][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.077734][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.087287][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.094702][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.185957][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.195990][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.206040][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.215712][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.222949][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.232065][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.495454][T10006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.506221][T10006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.521420][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.533019][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.544434][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.555117][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.566685][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.577215][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 495.587145][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.597502][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.607323][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.703686][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.714928][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.770139][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.782701][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.825486][T10006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.952116][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.962274][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.089544][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.099235][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.139408][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.140971][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.168001][T10006] device veth0_vlan entered promiscuous mode [ 496.220791][T10006] device veth1_vlan entered promiscuous mode [ 496.320284][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 496.329909][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 496.339482][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.349222][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.378994][T10006] device veth0_macvtap entered promiscuous mode [ 496.410957][T10006] device veth1_macvtap entered promiscuous mode [ 496.470753][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 496.481947][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.492253][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 496.503032][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.513546][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 496.524668][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.538673][T10006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.551212][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.560835][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.570521][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.580985][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.636727][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 496.647540][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.657640][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 496.668352][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.678405][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 496.689070][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.702994][T10006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.723312][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.733528][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.786249][ T8702] Bluetooth: hci3: command 0x040f tx timeout 23:02:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000200)='#\x9c\x1c\x82\x90\"\x15wQ\xfd\xb8V\xf1\xa1M\xab\xaa\xbd\xaf\xfb*6\x98\xf1\x95U\xe0\x9e\xe0\xc7/X\xe5\v\xf1\x1c\xa0\x80\bk<\xf2\xebv\xb5\xf6\xca\xa8\x16bW2tB\xf3\xaf\x1e;@4{\xd6(\x8bU>K?0\xbb\xb0\x0eiVS_\xce*\x93k\x02\xabDD\x97\x91\x97\xca\x8f!~((\x8e\x0f\xef\xba\xbc\x93+\x80\xe4\xaf\xb8\x98\xdc\xd3\xbb\xb7M\n^\xb1\xd9\v\xab\xe0\xb4\ri\xfc^n`\v\xf5!\xb6\xfez{F#D\xe773\x0e\xd2sDj)\xbf\x92', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6b00}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x20005850) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e400f0ff000101"], 0x291) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x7ff, @private0={0xfc, 0x0, [], 0x1}, 0x5}}, 0x0, 0x0, 0x4a, 0x0, "b0d5541e5ec1495d017e749e9f6c4410d0d63772bc5c468e10a267dfa1845754ea73e437b4f2a56e515247f9aa1f101b58b6033e7044bf9bfba5fb5c6a14a1a258d9c7c25415ad2e390200da78c3f006"}, 0xd8) r4 = dup(r3) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x2, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 23:02:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, &(0x7f0000000100)=""/83, 0x53, 0x0, 0x0, 0x0) 23:02:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r11) 23:02:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r3 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000deeb7bba00281213bd5d74dafc20380003"], 0x3c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRES32=r5], 0x78) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r6) r7 = dup(r3) write$P9_RGETATTR(r7, &(0x7f0000000100)={0xa0}, 0xa0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') [ 497.744488][T10282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 497.842083][T10286] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/6' not defined. [ 497.914437][T10279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.122734][T10279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:02:24 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8000, 0x4) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80852d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e453473c9297322e30933e97ebc93981b20e03b86d4e99923e6000000000000e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2d4845421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f783b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fb4579e27cf148248155b7da4a67280d4b6b4eeed958d53b1c488d9dc4a2eb3a40194b9a7c186f9ae102000000b32049874f7962b3eb48ee45c6f3c756a57de500eadd498c9277070980897ccd058ca9006bc77d6c3945800101bc8efcbbbf0fb28392c5730fef0f6a3daa39ee394adc13e75edd163898a9925a972cb361bc1a5e49dfd07418d1d5093b881948a8ab945692d5ee0f726d36a81d8bb82ba889b74efd00d8f5f8b0fd9474a5a8e9136192c1fb0ba6863456fd43bc0a70a2c50bfc697d6275c04af6c2e3f3ea5c0800000000000000998fa588dc921f1a941635e43f2116bdc4da2431bdea70a700000000000000000000006ca9cafea3f9a246cffc96122ebda23d73f183ddb75862ddbcd04843f7e582363c2983f11c01bfca25810f6dbecd98696d2643d838ade6d797d399a0b822d5aae2e7b2e06b4924c70eee49bec4387ff43bc2d1fc2227a1afbb2f8598f92ad468043575a5c63549e7a24fc10b000000000000000000"], 0x1a3) r1 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 23:02:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r11) [ 498.601630][ C0] sd 0:0:1:0: [sg0] tag#3023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.612325][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB: Test Unit Ready [ 498.619178][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.629062][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.638936][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.648875][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.658771][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.668664][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.678546][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.688408][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.698264][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.708126][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.717979][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.727831][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.738654][ C0] sd 0:0:1:0: [sg0] tag#3023 CDB[c0]: 00 00 00 00 00 00 00 00 23:02:25 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x81420000a77, 0x0) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000040)={0xa, {0x1, 0x80, 0x7}}, 0xa) r6 = dup(r3) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000"/15, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 498.926143][T10306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:25 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8000, 0x4) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a3) r1 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) [ 498.995657][T10306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:02:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r11) [ 499.171939][ C0] sd 0:0:1:0: [sg0] tag#3024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.182622][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB: Test Unit Ready [ 499.189399][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.200249][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.210191][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.220105][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.229980][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.239853][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.249739][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.259629][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.269492][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.279553][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.289425][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.299294][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.309175][ C0] sd 0:0:1:0: [sg0] tag#3024 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.322645][ T9597] Bluetooth: hci3: command 0x0419 tx timeout [ 499.393349][T10313] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 23:02:25 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8000, 0x4) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a3) r1 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) [ 499.690244][ C0] sd 0:0:1:0: [sg0] tag#3025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.701658][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB: Test Unit Ready [ 499.708450][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.718339][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.728274][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.738168][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.748053][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.757942][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.767815][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.777666][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.787538][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.797421][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.807304][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.817186][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.827041][ C0] sd 0:0:1:0: [sg0] tag#3025 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.894263][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:26 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8000, 0x4) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a3) r1 = syz_open_dev$video4linux(&(0x7f00000004c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300b}) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x4000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 23:02:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x78) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0x6) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045010, &(0x7f00000000c0)) [ 500.126950][T10318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.163388][ C0] sd 0:0:1:0: [sg0] tag#3026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.174095][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB: Test Unit Ready [ 500.180889][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.190768][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.200656][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.210544][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.220403][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.230294][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.240261][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.250139][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.260048][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.269934][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.279799][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.289684][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.299583][ C0] sd 0:0:1:0: [sg0] tag#3026 CDB[c0]: 00 00 00 00 00 00 00 00 23:02:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:02:26 executing program 3: socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x35}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x57eb69c2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfa56}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20004880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='wg1\x00') 23:02:26 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010f526ba8ee500"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x12}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000380)={0x7fffffff, 0x1, 'client0\x00', 0xffffffff80000000, "134c114edb359bf5", "52337b7dca296fcc7d6cc4a664bfb7431fc0cf4ec773eb23ed4b1e977a1a833b", 0x2, 0x8}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYBLOB="d6b24e039a254f9cc774d7f8c4b35bbd0d254e29eca04b85fa079f84cc0a677e84091de0147c0ef69d0c6a044d65edb9331b1ca59ef9df62fd6e10e19896b7b64d80545f935890a1fd4abc5c5406a0cad2cce41fc17275aed0b5521d5a8125e9e42f8a13e5c1c28d5e802548ed23bdfc6cefcec8490ac3c86f10ebbffc380a4c895e01e47d24486d2ac8283e89ab5b9f8be8b4f0e2de7f838473ee579bd97d836e52cfe3b85d34605df8cd072aef7efeefb68a9153c35f12c35fe9728e96f7702efb4a867cff2de4f60511a734ec74d14e1c97753b9b0e6f257e", @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000dd2f325e54c21f2ba0a84ce79cba746f0e01a5acc7ca5463cd4f4c6fceb22d116d23eeae632eb9a49b7846e0aefa83bda2200390003a20c2d52eea898e12621ccfda3b078410a39f13e63635a031f8fa3f871f81", @ANYRES32=r8, @ANYBLOB="000003000a000200ffffffffffff0000"], 0x28}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "6061d188", {0x3, 0x103, 0x0, 0x2, 0x2, 0x4, 0x3f}}) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) [ 500.705514][T10334] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 500.721924][T10334] device team_slave_0 entered promiscuous mode [ 500.728319][T10334] device team_slave_1 entered promiscuous mode [ 500.734673][T10334] device macsec1 entered promiscuous mode [ 500.740606][T10334] device team0 entered promiscuous mode [ 500.765868][ C0] sd 0:0:1:0: [sg0] tag#3027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.776541][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB: Test Unit Ready [ 500.783203][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.793115][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.803030][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.812909][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.822967][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.832846][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.842745][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.852639][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.862557][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.872436][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.882289][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.892130][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.901987][ C0] sd 0:0:1:0: [sg0] tag#3027 CDB[c0]: 00 00 00 00 00 00 00 00 [ 500.974580][T10334] device team0 left promiscuous mode [ 500.981671][T10334] device team_slave_0 left promiscuous mode [ 500.987791][T10334] device team_slave_1 left promiscuous mode [ 501.390783][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.470360][T10342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.509244][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.525903][T10334] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 501.542502][T10334] device team_slave_0 entered promiscuous mode [ 501.548870][T10334] device team_slave_1 entered promiscuous mode [ 501.555776][T10334] device macsec1 entered promiscuous mode [ 501.561557][T10334] device team0 entered promiscuous mode [ 501.588229][T10334] device team0 left promiscuous mode [ 501.595401][T10334] device team_slave_0 left promiscuous mode [ 501.601403][T10334] device team_slave_1 left promiscuous mode 23:02:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:02:28 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="550000001800", 0x6}], 0x1}, 0x0) close(r1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x40000) openat$cgroup_freezer_state(r1, &(0x7f0000000240)='freezer.state\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)="25ff9480b11b80cb4d0127286c8990c126abe10617f712251f8ebc33f5d20b1f480e247be98324eaba182c1b5e5997a67e9a5ad135149d0f8423a0f3ad1698934f0075b75dbc6ceffbcfd64dd20d30e9428498ba5c64b686bb755152bb9096e3050f377d559ccf06811de610f2da13f9c4e83b8dfb690885a1406e9e485b8588d2237fbf039626db3faf2dfa87606908572c5b97825fe094fcb600593513db3702b430c9b06ec2dd27aae5ac780d0427e64b4a052f94f4840322eb6ed6b4fb6750a3116ef92662acde1e8bb8dfe813849c76a4256de846ed09ad87b92c2e43a766348e3b10f44bf95bfb", 0xea) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 23:02:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 502.459024][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 502.515621][T10370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.523631][T10370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.811861][T10370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:02:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x8c, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) msgctl$IPC_RMID(0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$netlink(r1, &(0x7f0000000000), 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, 0x0, r3) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) msgrcv(0x0, 0x0, 0xf5, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 23:02:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRES32=r10], 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:02:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newlink={0x4c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x0) [ 503.562837][ T8702] usb 1-1: new high-speed USB device number 15 using dummy_hcd 23:02:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:02:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x330, &(0x7f0000000080)={0x0, 0x61a1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x4, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 503.803395][ T8702] usb 1-1: Using ep0 maxpacket: 8 [ 503.923204][ T8702] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 503.931413][ T8702] usb 1-1: config 0 has no interface number 0 [ 503.937933][ T8702] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 503.949246][ T8702] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 503.959446][ T8702] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 503.969482][ T8702] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 503.978743][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.045205][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:30 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000e40039542f108c07021047e60000000109022473f3dd5b50e800010000000009040100000004c8000901030000000081"], 0x0) [ 504.239464][ T8702] usb 1-1: config 0 descriptor?? [ 504.249509][T10404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.264017][T10384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 504.285285][T10384] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) pipe(&(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 504.691590][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 504.935252][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.042385][ T27] usb 4-1: device descriptor read/64, error 18 [ 505.051651][T10427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:02:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 505.567023][ T27] usb 4-1: device descriptor read/64, error 18 [ 505.667930][T10433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.760910][T10433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.895041][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd 23:02:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4e890f", 0x3}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40}, 0x801) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 506.174832][ T5] usb 1-1: USB disconnect, device number 15 [ 506.240395][ T27] usb 4-1: device descriptor read/64, error 18 [ 506.488627][T10452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.642971][T10452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.672908][ T27] usb 4-1: device descriptor read/64, error 18 [ 506.801960][ T27] usb usb4-port1: attempt power cycle 23:02:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r2, r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:02:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x8c, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) msgctl$IPC_RMID(0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$netlink(r1, &(0x7f0000000000), 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, 0x0, r3) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) msgrcv(0x0, 0x0, 0xf5, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) [ 507.162299][T10463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.249200][T10463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:02:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 507.489438][ T8699] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 507.540502][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 507.738688][ T8699] usb 1-1: Using ep0 maxpacket: 8 23:02:33 executing program 3: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={0x0, 0x8}) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000001040)=0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000001100)={'broute\x00'}, &(0x7f0000001180)=0x78) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000010c0)={0x4, &(0x7f0000001080)=[{0x5, 0x3, 0x1f, 0x200}, {0x0, 0x7, 0x20, 0x9}, {0x3, 0x5, 0xff, 0x5}, {0x1, 0x0, 0x3, 0x7fff}]}) [ 507.833048][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.873363][ T8699] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 507.881611][ T8699] usb 1-1: config 0 has no interface number 0 [ 507.888087][ T8699] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 507.899299][ T8699] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 507.909553][ T8699] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 507.919621][ T8699] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 507.928957][ T8699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.978085][T10477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.039822][ T27] usb 4-1: device not accepting address 4, error -71 [ 508.198349][ T8699] usb 1-1: config 0 descriptor?? [ 508.218723][T10467] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 508.226084][T10467] raw-gadget gadget: fail, usb_ep_enable returned -22 23:02:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 508.605458][T10496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:34 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r2 = dup2(r1, r0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, &(0x7f0000000180)=0x8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000380)={0x7, 'veth1_to_team\x00', {0x1a490c3c}, 0x7fff}) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xfffffffe, 0x0, 0x11}, 0x9c) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={[], [], @private=0x5}}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000005c0)="0e", 0x1}], 0x1}}], 0x1, 0x20000040) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000280)=0x4) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKPBSZGET(r7, 0x127b, &(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000002c0)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x130, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_MTU={0x8, 0x4, 0x1005}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xeb8c}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'bridge0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8502, 0xf28e3c5b991fd948}}}}}}, @IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x23}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 508.809459][T10496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.963829][T10506] fuse: Bad value for 'fd' [ 509.108132][T10504] fuse: Bad value for 'fd' 23:02:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x178, 0x178, 0x0, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}], 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) dup2(r5, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 509.191787][T10506] ===================================================== [ 509.198886][T10506] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 509.206352][T10506] CPU: 0 PID: 10506 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 509.215025][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.225077][T10506] Call Trace: [ 509.228460][T10506] dump_stack+0x21c/0x280 [ 509.232803][T10506] kmsan_report+0xf7/0x1e0 [ 509.237226][T10506] kmsan_internal_check_memory+0x238/0x3d0 [ 509.243037][T10506] ? kmsan_get_metadata+0x116/0x180 [ 509.248241][T10506] ? kmsan_get_metadata+0x116/0x180 [ 509.253453][T10506] kmsan_copy_to_user+0x81/0x90 [ 509.258367][T10506] _copy_to_user+0x18e/0x260 [ 509.263042][T10506] move_addr_to_user+0x3de/0x670 [ 509.268000][T10506] __sys_getsockname+0x407/0x5e0 [ 509.272948][T10506] ? kmsan_get_metadata+0x116/0x180 [ 509.278156][T10506] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 509.283978][T10506] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 509.290167][T10506] ? __prepare_exit_to_usermode+0x16c/0x560 [ 509.296072][T10506] __se_sys_getsockname+0x91/0xb0 [ 509.301116][T10506] __x64_sys_getsockname+0x4a/0x70 [ 509.306294][T10506] do_syscall_64+0xad/0x160 [ 509.310842][T10506] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.316760][T10506] RIP: 0033:0x45d5b9 [ 509.320646][T10506] Code: Bad RIP value. [ 509.324711][T10506] RSP: 002b:00007fddd152cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 509.333121][T10506] RAX: ffffffffffffffda RBX: 0000000000004900 RCX: 000000000045d5b9 [ 509.341108][T10506] RDX: 0000000020000200 RSI: 0000000020000100 RDI: 0000000000000006 [ 509.349086][T10506] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 509.357066][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 509.365040][T10506] R13: 000000000169fb6f R14: 00007fddd152d9c0 R15: 000000000118cfec [ 509.373017][T10506] [ 509.375352][T10506] Local variable ----address@__sys_getsockname created at: [ 509.382559][T10506] __sys_getsockname+0x91/0x5e0 [ 509.387422][T10506] __sys_getsockname+0x91/0x5e0 [ 509.392263][T10506] [ 509.394590][T10506] Bytes 2-3 of 24 are uninitialized [ 509.399798][T10506] Memory access of size 24 starts at ffff8881d3f57de8 [ 509.406553][T10506] Data copied to user address 0000000020000100 [ 509.412694][T10506] ===================================================== [ 509.419619][T10506] Disabling lock debugging due to kernel taint [ 509.425768][T10506] Kernel panic - not syncing: panic_on_warn set ... [ 509.432363][T10506] CPU: 0 PID: 10506 Comm: syz-executor.3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 509.442419][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.452483][T10506] Call Trace: [ 509.455791][T10506] dump_stack+0x21c/0x280 [ 509.460203][T10506] panic+0x4d7/0xef7 [ 509.464129][T10506] ? add_taint+0x17c/0x210 [ 509.468560][T10506] kmsan_report+0x1df/0x1e0 [ 509.473077][T10506] kmsan_internal_check_memory+0x238/0x3d0 [ 509.478894][T10506] ? kmsan_get_metadata+0x116/0x180 [ 509.484096][T10506] ? kmsan_get_metadata+0x116/0x180 [ 509.489312][T10506] kmsan_copy_to_user+0x81/0x90 [ 509.494169][T10506] _copy_to_user+0x18e/0x260 [ 509.498776][T10506] move_addr_to_user+0x3de/0x670 [ 509.503735][T10506] __sys_getsockname+0x407/0x5e0 [ 509.508687][T10506] ? kmsan_get_metadata+0x116/0x180 [ 509.513903][T10506] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 509.519717][T10506] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 509.525879][T10506] ? __prepare_exit_to_usermode+0x16c/0x560 [ 509.531782][T10506] __se_sys_getsockname+0x91/0xb0 [ 509.536818][T10506] __x64_sys_getsockname+0x4a/0x70 [ 509.541939][T10506] do_syscall_64+0xad/0x160 [ 509.546460][T10506] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.552351][T10506] RIP: 0033:0x45d5b9 [ 509.556235][T10506] Code: Bad RIP value. [ 509.560297][T10506] RSP: 002b:00007fddd152cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 509.568719][T10506] RAX: ffffffffffffffda RBX: 0000000000004900 RCX: 000000000045d5b9 [ 509.576693][T10506] RDX: 0000000020000200 RSI: 0000000020000100 RDI: 0000000000000006 [ 509.584663][T10506] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 509.592634][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 509.600606][T10506] R13: 000000000169fb6f R14: 00007fddd152d9c0 R15: 000000000118cfec [ 509.609904][T10506] Kernel Offset: disabled [ 509.614242][T10506] Rebooting in 86400 seconds..